jlj2 Casino Privacy Policy – How We Protect Your Personal Data in the Philippines

1. Who We Are

jlj2 Casino is the operator of the online gambling platform at jlj2.net, operating under a valid licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR). For purposes of the Data Privacy Act of 2012, jlj2 acts as the Personal Information Controller (PIC) in respect of personal data collected from Filipino players and users of the Platform.

jlj2 is registered and operates from the Philippines, primarily serving Filipino players across all regions including Metro Manila, Cebu, Davao, and beyond.

2. Personal Data We Collect

jlj2 collects the following categories of personal data, depending on how you interact with the Platform:

2.1 Account Registration Data

• Full legal name
• Date of birth (to verify 21+ age eligibility)
• Residential address in the Philippines
• Email address
• Mobile phone number
• Chosen username and encrypted password

2.2 Identity Verification (KYC) Data

• Government-issued photo identification documents (e.g., Philippine passport, UMID, SSS ID, driver's licence, PhilSys National ID)
• Proof of address documentation
• Selfie or liveness verification image
• Tax Identification Number (TIN) where required by PAGCOR

2.3 Financial Data

• GCash or PayMaya account reference (not full credentials)
• Bank account name and number (for bank transfer withdrawals)
• Transaction history including deposits, withdrawals, and wager amounts
• Source of funds information (for enhanced due diligence transactions)

2.4 Usage and Technical Data

• IP address and device type
• Browser type and version
• Session duration, login timestamps, and geographic location data
• Game activity logs and bet history
• Customer support interaction records

3. How We Collect Personal Data

jlj2 collects personal data through the following means:

• Directly from you — when you register a jlj2 Account, complete KYC verification, make a deposit or withdrawal request, contact support, or participate in promotions.
• Automatically — through cookies, web beacons, and server logs when you access and use the jlj2 Platform.
• From third parties — including PAGCOR-approved identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud detection services, where necessary for compliance purposes.

4. Legal Basis for Processing

jlj2 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity — processing required to operate your jlj2 Account and deliver the services you have registered for.
• Legal obligation — processing required to comply with PAGCOR licence conditions, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine law.
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming enforcement, and service improvement, where these interests do not override your rights.
• Consent — for marketing communications and non-essential cookie placement, where you have provided explicit consent that may be withdrawn at any time.

5. How jlj2 Uses Your Personal Data

jlj2 uses your personal data for the following purposes:

• Creating and managing your jlj2 Account
• Verifying your identity and age (21+ requirement) in compliance with PAGCOR requirements
• Processing deposits and withdrawals via GCash, PayMaya, and Philippine bank channels
• Detecting and preventing fraud, money laundering, and other financial crimes
• Enforcing responsible gaming tools including deposit limits, self-exclusion, and session controls
• Providing customer support and resolving disputes
• Personalising your experience on the jlj2 Platform
• Sending transactional communications (account statements, withdrawal confirmations, security alerts)
• Sending promotional communications where you have consented
• Complying with PAGCOR reporting requirements and responding to lawful regulatory or law enforcement requests
• Improving the jlj2 Platform through aggregated, anonymised analytics

6. Sharing Your Personal Data

6.1 jlj2 does not sell your personal data. We share personal data only in the following circumstances:

• PAGCOR and regulatory authorities — jlj2 is required by its operating licence to report certain player and transaction data to PAGCOR. We comply fully with these obligations.
• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other Philippine payment service providers receive the minimum data necessary to process your transactions.
• KYC and identity verification providers — PAGCOR-approved third-party providers assist jlj2 in verifying player identities and documents. These providers are contractually bound to handle your data securely and only for KYC purposes.
• Anti-fraud and AML screening services — jlj2 uses third-party screening tools to detect suspicious activity. Data shared is limited to what is necessary for screening purposes.
• Law enforcement — where legally required by a valid court order, subpoena, or directive from the National Bureau of Investigation (NBI), Philippine National Police (PNP), Anti-Money Laundering Council (AMLC), or other competent authority.

6.2 All third-party processors engaged by jlj2 are subject to data processing agreements that require them to handle personal data in accordance with applicable Philippine data protection law.

7. Cookies and Tracking Technologies

7.1 jlj2 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies fall into the following categories:

• Strictly necessary cookies — required for the Platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language and last login, improving your experience without tracking for advertising purposes.
• Analytics cookies — collect aggregated, anonymised data about how players use the Platform, used to improve performance and content. These are only placed with your consent.

7.2 You may manage non-essential cookie preferences through your browser settings. Disabling cookies may affect the functionality of some jlj2 features.

8. Data Security

8.1 jlj2 implements technical and organisational security measures appropriate to the risk presented by the personal data we process. These include:

• SSL/TLS encryption for all data transmitted between your device and jlj2 servers
• AES-256 encryption for data stored at rest
• Two-factor authentication available on all jlj2 Accounts
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular third-party penetration testing and security audits
• Secure, geographically redundant data storage infrastructure

8.2 In the event of a personal data breach that poses a risk to your rights and freedoms, jlj2 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected players without undue delay as required by the Data Privacy Act.

9. Data Retention

9.1 jlj2 retains personal data for the following minimum periods, or longer where required by law:

• Account registration data — for the duration of your active jlj2 Account plus five (5) years following Account closure, in compliance with PAGCOR licence conditions and AMLA record-keeping requirements.
• KYC documents — five (5) years from the date of Account closure or last transaction, as required by the AMLC.
• Transaction records — five (5) years from the date of each transaction.
• Support and communication records — three (3) years from the date of the last interaction.

9.2 Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in relation to your personal data held by jlj2:

• Right to be informed — you have the right to know how your personal data is being collected, processed, and used. This Policy fulfils that obligation.
• Right of access — you may request a copy of the personal data jlj2 holds about you.
• Right to rectification — you may request correction of inaccurate or incomplete personal data.
• Right to erasure — in certain circumstances, you may request deletion of your personal data. This right is subject to jlj2's legal obligations to retain data under PAGCOR licence conditions and AMLA requirements.
• Right to data portability — you may request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to object — you may object to processing based on legitimate interests, including profiling for direct marketing purposes.
• Right to lodge a complaint — you may lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, contact jlj2's Data Protection Officer via support at jlj2.net. We will respond within fifteen (15) working days of receipt of a valid request.

11. Children's Privacy and Underage Players

11.1 The jlj2 Platform is strictly prohibited for individuals under 21 years of age. jlj2 does not knowingly collect personal data from individuals below the age of 21.

11.2 If jlj2 discovers that personal data has been collected from an individual below 21 years of age, that Account will be immediately suspended, the personal data will be deleted, and any deposited funds will be returned to the originating payment method following identity verification.

11.3 If you have reason to believe that a minor has registered a jlj2 Account, please contact support immediately at jlj2.net.

12. Cross-Border Data Transfers

12.1 jlj2 primarily processes personal data within the Philippines. Where it is necessary to transfer personal data to a third party located outside the Philippines — for example, to an internationally-hosted KYC verification provider — jlj2 will ensure that such transfers comply with Section 21 of the Data Privacy Act and the NPC's guidelines on cross-border data flows.

12.2 jlj2 will only transfer personal data to countries or organisations that provide an adequate level of protection, or where appropriate safeguards (such as binding contractual clauses) are in place.

13. Updates to This Privacy Policy

13.1 jlj2 reserves the right to amend this Privacy Policy at any time. When material changes are made, we will post the updated Policy on this page with a revised effective date and, where appropriate, notify registered players by email.

13.2 Continued use of the jlj2 Platform following the publication of an amended Policy constitutes your acknowledgment of the updated terms. If you do not agree to the amended Policy, you must stop using the Platform and may close your Account at any time.

14. Contact & Complaints

For questions about this Privacy Policy, to exercise your data subject rights, or to raise a data protection concern, please contact jlj2's Data Protection Officer:

Email: [email protected] (subject line: "Privacy / Data Protection")

jlj2 support is available 24 hours a day, 7 days a week. Our Data Protection Officer will acknowledge your request within 3 business days and provide a substantive response within 15 business days.

If you are not satisfied with jlj2's response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.