Privacy Policy — jl186 Online Casino

1. Introduction and Scope

jl186 ("jl186", "we", "our", or "us") is committed to protecting the privacy and personal data of every individual who interacts with the jl186 online gaming platform accessible at jl186.org ("Platform"). This Privacy Policy ("Policy") applies to all registered members, prospective members, visitors, and any other persons whose personal data is processed by jl186 in connection with the Platform.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC") and PAGCOR.

By creating a jl186 account, accessing the Platform, or submitting any personal information to jl186, you acknowledge that you have read, understood, and agree to the collection, use, and processing of your personal data as described in this Policy. If you do not agree, please do not use the jl186 Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, jl186 is the Personal Information Controller in respect of the personal data processed through the Platform. jl186 determines the purposes and means of processing personal data submitted by or collected about its registered members and Platform visitors.

Where jl186 engages third-party service providers — including payment processors, KYC verification services, game software providers, and cloud infrastructure providers — those providers act as Personal Information Processors under jl186's instruction and are bound by data processing agreements consistent with the requirements of the DPA and NPC regulations.

Contact details for jl186's designated Data Protection Officer (DPO) are provided in Section 17 of this Policy.

3. Categories of Personal Data We Collect

jl186 collects personal data across several categories depending on the nature of your interaction with the Platform. The following table summarises the principal categories:

jl186 does not intentionally collect sensitive personal information as defined under the DPA — such as health, religious, or political data — unless specifically required for responsible gaming assessments or as mandated by PAGCOR or Philippine law enforcement, in which case the specific legal basis will be communicated to you at the point of collection.

4. How We Collect Personal Data

jl186 collects personal data through the following means:

• Directly from you: When you register a jl186 account, complete KYC verification, submit a deposit or withdrawal request, contact support, respond to promotions, or update your account settings.
• Automatically through Platform use: When you access the jl186 Platform, our systems automatically record technical data including your IP address, device identifiers, session timestamps, pages visited, and game interactions. This data is collected via server logs, cookies, and similar tracking technologies (see Section 10).
• From third parties: jl186 may receive personal data from third-party KYC verification providers, payment processors, and fraud prevention services engaged to support jl186's compliance obligations. All such data is received and processed in accordance with this Policy and applicable data sharing agreements.
• From publicly available sources: In limited circumstances relevant to anti-money laundering or fraud prevention, jl186 may cross-reference data from publicly accessible government or regulatory databases.

5. Purpose and Legal Basis for Processing

Under the Data Privacy Act of 2012, jl186 is required to identify a lawful basis for each category of personal data processing. The primary legal bases relied upon by jl186 are as follows:

• Contractual necessity: Processing required to register your jl186 account, execute deposits and withdrawals, and fulfil the gaming services you have requested.
• Legal obligation: Processing required to comply with PAGCOR licence conditions, the Anti-Money Laundering Act (AMLA), the DPA itself, and other applicable Philippine laws and regulations — including KYC verification, transaction reporting, and regulatory disclosure obligations.
• Legitimate interests: Processing conducted to detect and prevent fraud, ensure platform security, maintain accurate financial records, and improve jl186 services — where such interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time.

6. How We Use Your Personal Data

jl186 uses the personal data it collects for the following purposes:

• To verify your identity and process your jl186 account registration;
• To conduct mandatory KYC verification in compliance with PAGCOR and AMLA requirements;
• To process deposits, withdrawals, and maintain accurate transaction records;
• To personalise your gaming experience — for example, displaying recently played games and applicable promotions in your jl186 account dashboard;
• To administer promotions, bonuses, and loyalty rewards applicable to your account;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited conduct as defined in the jl186 Terms & Conditions;
• To provide customer support and resolve account queries or disputes;
• To enforce responsible gaming tools — including monitoring gaming activity against self-imposed limits and self-exclusion requests;
• To send service notifications, including account security alerts, deposit confirmations, and withdrawal status updates;
• To send marketing and promotional communications, subject to your opt-in consent and active ability to opt out;
• To comply with all applicable Philippine legal, regulatory, and reporting obligations;
• To improve the jl186 Platform through aggregated, anonymised analytics data.

7. Disclosure to Third Parties

jl186 does not sell, rent, or otherwise commercially disclose your personal data to third parties. We may disclose your personal data only to the following categories of third parties, and only to the extent strictly necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of executing deposit and withdrawal transactions. These providers process only the financial data necessary to complete your requested transaction and are bound by their own privacy policies and Philippine financial regulations.
• KYC Verification Providers: Third-party identity verification services engaged to process government-issued ID documents and verify the identity of jl186 account holders in compliance with PAGCOR and AMLA requirements.
• Game Software Providers: Licensed game providers whose software runs within the jl186 lobby — including providers of live casino, slot, and speciality game titles — may receive limited gaming activity data necessary to operate game sessions and process game outcomes.
• Cloud Infrastructure and IT Service Providers: Providers of hosting, data storage, and technical infrastructure services engaged to support jl186 Platform operations. All such providers are bound by data processing agreements requiring compliance with the DPA.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities, where required by applicable law or regulatory directive. jl186 will comply with lawful disclosures and, where legally permitted, will notify you of such requests.
• Fraud Prevention Services: Third-party fraud screening providers engaged to protect the security of the jl186 Platform and its members from fraudulent activity and financial crime.

8. International Data Transfers

Certain third-party service providers engaged by jl186 — including game software providers and cloud infrastructure providers — may operate servers or data processing facilities outside the Philippines. Where personal data is transferred outside the Philippines, jl186 ensures that such transfers comply with the requirements of the DPA and NPC circulars governing cross-border data transfers, including:

• Execution of data processing agreements incorporating DPA-compliant data transfer provisions;
• Verification that the receiving jurisdiction provides an adequate level of data protection, or imposition of contractual safeguards equivalent to Philippine DPA standards;
• Limitation of transferred data to only what is strictly necessary for the processing purpose.

Your data will never be transferred internationally for commercial purposes or sold to overseas entities.

9. Data Retention

jl186 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active jl186 membership plus a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and PAGCOR licence conditions.
• KYC documentation: Retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later.
• Gaming activity data: Retained for a minimum of three (3) years for responsible gaming monitoring and dispute resolution purposes.
• Customer support communications: Retained for three (3) years from the date of the interaction.
• Technical/log data: Typically retained for twelve (12) months for security monitoring purposes.

Following the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be associated with an identifiable individual.

10. Cookies and Tracking Technologies

The jl186 Platform uses cookies and similar tracking technologies to support essential Platform functionality, personalise your experience, and — with your consent — analyse usage patterns to improve the Platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for Platform operation — including session management, authentication (keeping you logged in), and security functions. These cannot be disabled without rendering the jl186 Platform non-functional.
• Functional Cookies: Remember your preferences such as language settings, deposit limit configurations, and responsible gaming preferences.
• Analytics Cookies: With your consent, help jl186 understand how members navigate the Platform — enabling improvements to game categories, navigation, and content. Analytics data is aggregated and anonymised where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, including login anomaly detection and suspicious activity monitoring.

jl186 does not use third-party advertising or cross-site tracking cookies. You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies will affect your ability to use the jl186 Platform.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of the personal data that jl186 holds about you:

• Right to be Informed: The right to know what personal data jl186 collects, how it is used, with whom it is shared, and how long it is retained — the substance of this Policy.
• Right to Access: The right to request a copy of the personal data jl186 holds about you, along with information on the processing purposes and third parties to whom it has been disclosed.
• Right to Correction: The right to request that inaccurate or incomplete personal data held by jl186 be corrected or updated.
• Right to Erasure / Blocking: The right to request deletion or blocking of personal data where it is no longer necessary for the purposes for which it was collected, subject to jl186's legal retention obligations.
• Right to Object: The right to object to specific processing activities, including direct marketing communications.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another service provider, where technically feasible.
• Right to Damages: The right to claim compensation for damages suffered as a result of a breach of the DPA by jl186.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe jl186 has processed your personal data in violation of the DPA.

To exercise any of the above rights, please contact jl186's Data Protection Officer using the details provided in Section 17. jl186 will respond to all verified data subject requests within fifteen (15) business days of receipt.

12. Data Security Measures

jl186 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Encryption in transit: All communications between your device and the jl186 Platform are protected by TLS/SSL encryption. The jl186 Platform is accessible only via HTTPS.
• Encryption at rest: Personal data stored on jl186 infrastructure — including identity documents, financial data, and account credentials — is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data within jl186's internal systems is restricted on a strict need-to-know basis. Staff access is governed by role-based access control policies with regular access reviews.
• Two-factor authentication: Available for all jl186 accounts and mandatory for internal staff access to systems holding personal data.
• Security monitoring: jl186 maintains continuous monitoring of Platform access logs for anomalous activity, including login attempts from unrecognised devices, unusual transaction patterns, and potential account takeover signals.
• Third-party security assessments: jl186 undergoes periodic security assessments and cooperates with PAGCOR's compliance audit requirements.

While jl186 takes all reasonable steps to protect your personal data, no security system is completely impenetrable. You play an important role in protecting your own account — please review the account security guidelines in the jl186 Terms & Conditions and ensure your login credentials are kept confidential.

13. Protection of Minors

The jl186 Platform is strictly intended for adults aged 21 years and above as required by PAGCOR. jl186 does not knowingly collect, process, or retain personal data belonging to individuals under 21 years of age.

jl186 enforces age verification through its mandatory KYC process. Any jl186 account found — at any stage — to belong to a person under the age of 21 will be immediately closed. Any data collected in connection with such an account will be deleted promptly, subject only to any minimum retention obligations required by Philippine law.

14. Marketing Communications and Preferences

jl186 may send you promotional and marketing communications — including information about new games, promotions, bonuses, and platform updates — where you have provided your explicit consent to receive such communications during registration or subsequently via your account settings.

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your jl186 account settings;
• Clicking the unsubscribe link in any jl186 marketing email;
• Contacting jl186 support at [email protected] with an opt-out request.

Opting out of marketing communications does not affect your receipt of essential service communications — such as account security alerts, deposit confirmations, and withdrawal status notifications — which jl186 will continue to send as they are necessary for the operation of your account.

15. Personal Data Breach Notification

In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, jl186 will:

• Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03;
• Notify affected jl186 members without undue delay, providing a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach;
• Document all personal data breaches in jl186's internal breach register, regardless of whether NPC or member notification is required.

jl186 maintains an incident response plan specifically addressing personal data breaches, and conducts regular tabletop exercises to ensure readiness.

16. Amendments to This Privacy Policy

jl186 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or jl186's data processing practices. Where a material change is made, jl186 will notify registered members via the email address on their account or via a prominent notice on the jl186 Platform at least fourteen (14) days prior to the change taking effect.

Continued use of the jl186 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgement and acceptance of the revised Policy. The current version of this Policy is always available at jl186.org/privacy-policy, with the effective date displayed at the top of this page.

17. Contact and Data Protection Officer

jl186 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and all related NPC issuances. If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to make a privacy-related complaint, please contact the jl186 DPO through the following channels:

• Email: [email protected] (subject line: "Privacy / DPO Request")
• Live Chat: Available in-platform 24 hours a day, 7 days a week — reference "DPO" in your message to ensure routing to the privacy team.

jl186 will acknowledge all privacy-related inquiries within forty-eight (48) hours and will provide a substantive response within fifteen (15) business days of receipt of a verified data subject request.

If you are not satisfied with jl186's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. Information on filing a complaint with the NPC is available at the NPC's official government website.