jlj22 Privacy Policy

01 Introduction & Scope

jlj22 ("jlj22", "we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the jlj22 online gaming platform. This Privacy Policy sets out in clear, legally grounded terms how jlj22 collects, processes, stores, shares, and protects personal data in connection with the operation of jlj22.net and all associated gaming services.

This policy applies to:

• All registered jlj22 account holders, including players across Manila, Cebu, Davao, Quezon City, Makati, and other Philippine locations;
• Visitors to the jlj22.net website, regardless of whether they have registered an account;
• Individuals who contact jlj22 customer support via any channel;
• Any other individual whose personal data is provided to jlj22 in connection with the use of jlj22's services.

This policy does not apply to third-party websites, services, or applications that may be linked from within the jlj22 platform. jlj22 is not responsible for the privacy practices of any third party.

02 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection regulations, jlj22 acts as the Personal Information Controller (PIC) with respect to all personal data collected through the jlj22 platform. As the PIC, jlj22 determines the purposes and means by which your personal data is processed.

Where jlj22 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and analytics platforms — those providers act as Personal Information Processors (PIPs) and are contractually bound to process your data only on jlj22's instructions and in compliance with applicable data protection laws.

For all data protection enquiries, including requests to exercise your privacy rights, you may contact jlj22's Data Protection Officer (DPO) directly. Contact details are provided in Section 15 of this Policy.

03 Data We Collect

jlj22 collects the following categories of personal data, depending on how you interact with the platform:

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued ID
• Date of birth (for 21+ age verification)
• Residential address (barangay, city/municipality, province)
• Nationality
• Contact number (mobile, for OTP and account alerts)
• Email address (for account communications and notifications)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued ID (e.g., Philippine passport, PhilSys national ID, SSS ID, UMID, driver's licence, PRC ID)
• Selfie or liveness check photograph for facial verification
• Proof of address documentation (e.g., utility bill, barangay certificate)
• Proof of payment method ownership where required for AML compliance

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction amounts and timestamps
• Payment method details (GCash mobile number, PayMaya account reference, BPI / BDO / Metrobank account last digits — full account numbers are not stored by jlj22)
• Account balance history and transaction records
• Bonus and promotion redemption records

3.4 Gaming Activity Data

• Game session logs including game title, duration, wagers placed, and outcomes
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)
• Bonus wagering progress and expiry records

3.5 Technical & Device Data

• IP address and geolocation data (country and region level)
• Device type, operating system, and browser version
• Session identifiers and authentication tokens
• Cookie data and similar tracking technology data (see Section 11)

3.6 Communications Data

• Records of customer support interactions via live chat or email
• Feedback, complaints, and dispute submissions
• Marketing preference settings and opt-in / opt-out records

04 How We Collect Data

jlj22 collects personal data through the following channels:

• Directly from you — when you register a jlj22 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings;
• Automatically — through cookies, server logs, and similar technologies when you visit or use the jlj22 platform (see Section 11);
• From third-party verification providers — where jlj22 engages licensed KYC and AML screening partners to verify identity documents and conduct sanctions screening;
• From payment processors — transaction confirmation data from GCash, PayMaya, and banking partners in connection with deposit and withdrawal processing;
• From regulatory authorities — PAGCOR and other competent Philippine authorities may provide information to jlj22 in connection with regulatory enquiries or self-exclusion registry checks.

05 How We Use Your Data

jlj22 uses the personal data it collects for the following defined purposes:

jlj22 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

06 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, jlj22 relies on the following legal bases for processing your personal data:

• Contractual necessity — processing required to create and maintain your jlj22 account, process transactions, and deliver gaming services under the jlj22 Terms & Conditions;
• Legal obligation — processing required to comply with PAGCOR regulations, AML and KYC requirements under the Anti-Money Laundering Act (AMLA), and other applicable Philippine law;
• Legitimate interests — processing for fraud detection, platform security, responsible gaming monitoring, and anonymous analytics, where these interests are not overridden by your privacy rights;
• Consent — processing for optional marketing communications, where you have explicitly opted in. You may withdraw consent at any time without penalty to your account access.

07 Data Sharing & Disclosure

7.1 Third-Party Service Providers

jlj22 shares personal data with carefully selected third-party service providers only to the extent necessary for them to perform contracted services. These include:

• KYC and identity verification providers — for document authentication and facial recognition matching;
• Payment processors — GCash, PayMaya, and banking partners for transaction processing;
• Game software providers — JILI and other licensed game studios, which may receive session-level data for game integrity purposes;
• Customer support platform providers — for live chat and ticketing systems;
• Cloud infrastructure and security providers — for secure hosting and DDoS protection.

All third-party providers engaged by jlj22 are bound by data processing agreements that require them to maintain confidentiality, implement appropriate security measures, and process personal data solely on jlj22's instructions.

7.2 Regulatory and Legal Disclosure

jlj22 may disclose personal data to competent authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies — where required to do so by law, court order, regulatory directive, or where jlj22 has a good-faith belief that disclosure is necessary to prevent fraud, money laundering, or harm to persons.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of jlj22's business or assets, personal data held by jlj22 may be transferred to a successor entity as part of that transaction. jlj22 will notify affected players of any such transfer and the applicable privacy arrangements in advance, to the extent permitted by law.

7.4 No Sale of Personal Data

jlj22 does not sell, rent, or otherwise provide personal data to any third party for that party's own independent marketing, advertising, or commercial purposes. This prohibition applies absolutely and is not subject to exception.

08 International Data Transfers

The jlj22 platform primarily stores and processes personal data within the Philippines. Where personal data is transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or internationally-based game software studios — jlj22 ensures that such transfers are conducted in compliance with Section 21 of the Philippine Data Privacy Act.

Specifically, jlj22 requires that international data transfers are subject to one or more of the following safeguards:

• A determination by the NPC that the recipient country provides an adequate level of protection;
• The execution of a binding contractual agreement with the recipient that incorporates NPC-approved data protection clauses;
• The application of the recipient's binding corporate rules that have been approved by the NPC or a recognised equivalent authority.

Players who wish to obtain more information about the safeguards applied to international data transfers involving their personal data may contact jlj22's Data Protection Officer.

09 Data Retention

jlj22 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory requirements. The following retention guidelines apply:

• Active account data — retained for the duration of the account's active status plus a minimum of 5 years following account closure, in compliance with PAGCOR record-keeping requirements;
• KYC and identity verification documents — retained for a minimum of 5 years from the date of verification, as required under PAGCOR licensing terms and the Anti-Money Laundering Act;
• Financial transaction records — retained for a minimum of 5 years from the date of the transaction, consistent with AMLA requirements;
• Customer support communications — retained for 2 years from the date of the interaction, or longer if the interaction relates to an open dispute or regulatory investigation;
• Marketing preference records — retained for as long as necessary to demonstrate compliance with consent obligations;
• Technical and device data — retained for up to 13 months for security and fraud detection purposes, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jlj22's data disposal procedures. Anonymised data may be retained indefinitely for statistical and platform improvement purposes, as it can no longer be linked to any individual.

10 Data Security

jlj22 implements a layered, defence-in-depth approach to data security that is designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:

• SSL/TLS encryption for all data in transit between your device and jlj22 servers;
• AES-256 encryption for sensitive personal data stored at rest;
• Password hashing using bcrypt with unique salts — jlj22 never stores plaintext passwords;
• Two-factor authentication (2FA) available to all registered players for enhanced account security;
• Role-based access controls limiting staff access to personal data to those with a legitimate operational need;
• Regular penetration testing and third-party security audits conducted at least annually;
• 24/7 intrusion detection monitoring with automated alerts for anomalous access patterns;
• Data breach response procedures with NPC notification obligations met within 72 hours of a confirmed breach involving risk to data subjects.

11 Cookies & Tracking Technologies

11.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. jlj22 uses cookies and similar tracking technologies (such as local storage and session tokens) to enable core platform functionality, remember your preferences, maintain session security, and analyse platform usage patterns.

11.2 Categories of Cookies Used by jlj22

• Strictly Necessary Cookies — required for the jlj22 platform to function. These include session authentication tokens, CSRF protection tokens, and load balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies — used to remember your preferences such as language settings, responsible gaming tool configurations, and display preferences.
• Analytics Cookies — used to collect anonymised data about how players navigate the jlj22 platform, enabling jlj22 to identify areas for improvement. Analytics data is processed in aggregated, non-identifiable form.
• Security Cookies — used to support fraud detection, bot protection, and account security monitoring.

11.3 Cookie Management

On your first visit to jlj22.net, a cookie consent notice will be presented allowing you to accept or decline non-essential cookies (functional and analytics categories). Strictly necessary and security cookies cannot be declined as they are essential to platform operation.

You may also manage cookie preferences through your browser settings at any time. Note that disabling certain cookies may affect your experience on the jlj22 platform. jlj22 does not use cookies for cross-site behavioural advertising or third-party ad targeting.

12 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jlj22. These rights may be exercised by contacting jlj22's Data Protection Officer as described in Section 15:

• Right to be Informed — You have the right to be informed of how your personal data is collected and processed. This Privacy Policy fulfils that obligation.
• Right to Access — You may request a copy of the personal data jlj22 holds about you, along with information about how it has been processed.
• Right to Rectification — If any personal data held by jlj22 is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure — You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no overriding legal obligation requires its retention. Note that jlj22 is required to retain certain data under PAGCOR and AMLA requirements even after account closure.
• Right to Data Portability — You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object — You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances warrant it.
• Right to Withdraw Consent — Where processing is based on your consent (such as marketing communications), you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal.
• Right to Lodge a Complaint — If you believe jlj22 has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

jlj22 will respond to all verified privacy rights requests within 15 calendar days of receipt. In complex cases, this period may be extended by a further 15 days, and you will be notified of the extension and the reason for it.

13 Minors & Age Restriction

The jlj22 platform is strictly restricted to individuals who are 21 years of age or older, consistent with Philippine law governing casino-style gambling activities. jlj22 does not knowingly collect personal data from individuals under the age of 21.

Where jlj22 identifies, through KYC verification or other means, that an account holder is under 21 years of age, the account will be immediately suspended, all associated balances will be frozen pending review, and jlj22 will comply with applicable legal obligations regarding the handling of that individual's data.

jlj22 recommends that adults sharing devices with minors install appropriate parental control software and ensure that minors do not have access to jlj22 account login credentials.

If you have reason to believe that a minor has registered a jlj22 account or that jlj22 has inadvertently collected personal data from a minor, please contact jlj22's Data Protection Officer immediately at [email protected] so that corrective action can be taken without delay.

14 Changes to This Policy

jlj22 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

Where a change to this Privacy Policy is material — meaning it significantly affects how we process your personal data or alters your privacy rights — jlj22 will notify registered players via the email address associated with their account at least 7 calendar days before the change takes effect.

For non-material changes (such as clarifications of existing language or corrections of typographical errors), the updated Policy will be published on jlj22.net without advance notice. Your continued use of the jlj22 platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

jlj22 encourages you to review this Privacy Policy periodically to stay informed about how your data is being protected. The most current version of this Policy is always available at jlj22.net/privacy-policy.

15 Contact & Data Protection Officer

For all privacy-related enquiries, requests to exercise your data subject rights, or concerns about jlj22's data handling practices, please contact our Data Protection Officer (DPO):

• Email: [email protected] ( subject line: "Privacy Rights Request" or "DPO Enquiry")
• Response time: Within 15 calendar days of receipt of a verified request
• Languages: English and Filipino

If you are not satisfied with jlj22's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and implementing the Data Privacy Act of 2012.