jl23 Privacy Policy

jl23 ("we," "us," "our," or "the Platform") operates the online gaming platform accessible at jl23.app and any associated mobile applications or web interfaces. We are committed to protecting the privacy and personal data of all users ("you," "the Player," or "the User") who access or use our platform.

This Privacy Policy describes how jl23 collects, uses, stores, shares, and protects your personal information in connection with your use of the jl23 platform. It also explains the rights available to you under the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and how you can exercise those rights.

This policy applies to all personal data collected through the jl23 website, mobile applications, live chat support, email correspondence, and any other channel through which you interact with jl23. It does not apply to third-party websites or services that may be linked from our platform — those are governed by their own privacy policies.

jl23 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include the following:

When you create a jl23 account, we collect your full legal name, date of birth, gender, nationality, residential address (including city, province, and postal code within the Philippines), email address, and mobile phone number. This information is required to verify your identity, confirm your eligibility to use the platform (21 years of age or older), and comply with our Know Your Customer (KYC) obligations.

To comply with Philippine anti-money laundering (AML) regulations and responsible gaming requirements, jl23 may request copies of government-issued identification documents such as a Philippine passport, SSS ID, UMID, PhilSys National ID, or driver's license. We may also request proof of address (such as a utility bill or bank statement) and proof of payment method ownership.

We collect records of all financial transactions conducted through your jl23 account, including deposit amounts, withdrawal requests, payment method details (e.g., GCash account reference, PayMaya account reference, BPI, BDO, or Metrobank account details), transaction timestamps, and transaction statuses. We do not store full bank account numbers or card numbers on our servers — these are handled by our regulated payment processing partners.

jl23 maintains detailed records of your gaming activity on the platform, including game sessions, wager amounts, game outcomes, win/loss history, bonus usage, and responsible gaming tool settings. This data is used for account management, dispute resolution, fraud prevention, and regulatory reporting purposes.

When you access jl23, we automatically collect technical data including your IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and session duration. This data helps us optimize platform performance, detect suspicious access patterns, and maintain platform security.

If you contact jl23 via live chat, email, or any other support channel, we retain records of those communications, including the content of messages, timestamps, and the resolution of any issues raised. This data is used for quality assurance, staff training, and dispute resolution.

jl23 collects personal data through the following methods:

• Direct Collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical and device data collected automatically when you access the jl23 platform via cookies, web beacons, server logs, and similar tracking technologies (see Section 7).
• Third-Party Sources: Identity verification data from KYC service providers; fraud risk signals from payment processors; age verification data from third-party verification services. All third-party data sources used by jl23 are contractually bound to comply with applicable Philippine data privacy laws.
• Publicly Available Sources: In limited circumstances related to fraud prevention or AML compliance, jl23 may cross-reference data against publicly available records or watchlists maintained by Philippine regulatory authorities.

jl23 uses your personal data for the following purposes:

• Account Creation & Management: To register your account, verify your identity, manage your profile, and provide access to all platform features.
• Age & Eligibility Verification: To confirm that you are 21 years of age or older and legally eligible to participate in real-money gaming in the Philippines.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels.
• Regulatory Compliance: To fulfill our obligations under Philippine AML laws, gaming regulations, and data privacy legislation, including filing required reports with relevant authorities.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other prohibited conduct on the platform.
• Responsible Gaming: To monitor gaming behavior for signs of problem gambling, enforce deposit and loss limits, process self-exclusion requests, and provide responsible gaming support tools.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance via live chat and email.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, features, and user experience of the jl23 platform.
• Marketing & Promotions: To send you relevant promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest to do so. You may opt out of marketing communications at any time.
• Legal Proceedings: To establish, exercise, or defend legal claims in connection with your use of the jl23 platform.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, jl23 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including AML reporting, KYC requirements, and gaming regulatory obligations.
• Legitimate Interests: Processing necessary for jl23's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring — provided these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jl23 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

We share data with carefully selected third-party service providers who assist us in operating the jl23 platform. These include payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, cloud hosting and infrastructure providers, customer support software providers, and fraud detection services. All service providers are contractually required to process your data only on our instructions and in compliance with applicable Philippine data privacy laws.

Some games available on jl23 are provided by third-party game studios and live dealer operators. These providers may receive limited technical data (such as a pseudonymous player ID and session token) necessary to deliver the game experience. They do not receive your full identity or financial data.

jl23 may disclose your personal data to Philippine government agencies, regulatory bodies, or law enforcement authorities where required by law, court order, or regulatory directive. This includes mandatory AML reporting to the Anti-Money Laundering Council (AMLC) of the Philippines where applicable.

In the event of a merger, acquisition, or sale of all or part of jl23's business assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.

jl23 uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the platform, maintain session security, and analyze platform usage. The following categories of cookies are used:

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may affect the functionality of the jl23 platform, including your ability to log in and maintain a secure session.

jl23 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine laws and regulations. The following retention periods apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Gaming Activity Logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for two (2) years from the date of the last communication, unless the communication relates to an ongoing dispute or legal matter.
• Marketing Consent Records: Retained for the duration of your account and for one (1) year following account closure or withdrawal of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.

jl23 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS Encryption: All data transmitted between your device and jl23 servers is encrypted using Transport Layer Security (TLS) protocols.
• Data Encryption at Rest: Sensitive personal data, including identity documents and financial records, is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to jl23 staff and service providers who have a legitimate need to access it. All access is logged and audited.
• Two-Factor Authentication: jl23 supports and encourages the use of two-factor authentication (2FA) for player accounts to prevent unauthorized access.
• Regular Security Audits: jl23 conducts regular internal and third-party security assessments to identify and remediate vulnerabilities in our systems.
• Incident Response: jl23 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) of the Philippines and affected players within the timeframes prescribed by law.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by jl23:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and shared — which is the primary purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data jl23 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified data rights requests within fifteen (15) business days, in accordance with NPC guidelines.

The jl23 platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. jl23 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual under 21 years of age, we will immediately suspend the associated account, delete the personal data in question, and handle any funds in accordance with applicable regulations. If you believe that a minor has registered on the jl23 platform, please contact us immediately using the details in Section 14.

jl23 primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and game content providers — may process data in other jurisdictions. Where personal data is transferred outside the Philippines, jl23 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law.
• Transfers only to jurisdictions that the National Privacy Commission has recognized as providing an adequate level of data protection.
• Data processing agreements with all international service providers that include binding data protection obligations.

By using the jl23 platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside the Philippines, subject to the safeguards described above.

jl23 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The updated Privacy Policy will be published on this page with a revised "Last Updated" date. Your continued use of the jl23 platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated policy, you must cease using the platform and may request account closure in accordance with our Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by jl23, please contact our Data Protection Officer (DPO) through the following channels:

• Live Chat: Available 24/7 directly within the jl23 platform. For data rights requests, please state "Data Rights Request" at the start of your message.
• Email (plain text — not a link): [email protected]
• Response Time: We aim to acknowledge all data rights requests within two (2) business days and provide a full response within fifteen (15) business days.

If you are not satisfied with our response to your data rights request or privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.