jl76 Privacy Policy

The data controller responsible for the personal information collected through jl76.app is jl76, a PAGCOR-regulated online gaming operator operating within the Republic of the Philippines ("jl76," "we," "us," or "our").

jl76 has designated a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. The DPO is responsible for overseeing jl76's compliance with data protection obligations and handling data subject requests and inquiries. Contact details for the DPO are provided in Section 16 of this Policy.

This Privacy Policy applies to all personal data collected by jl76 through jl76.app and any associated mobile-optimised pages, services, or communications.

jl76 collects two categories of personal data: information you provide directly, and information collected automatically through your use of the Platform.

Information you provide directly:

• Full legal name and date of birth
• Email address and mobile phone number
• Residential address (province, city, barangay)
• Government-issued ID type, number, and image (for KYC verification)
• GCash number, bank account details, or other payment method details linked to your account
• Communications submitted through live chat, email, or support tickets
• Self-declared responsible gaming preferences and limit settings

Information collected automatically:

• Device type, operating system, and browser information
• IP address and approximate geolocation (province/city level)
• Session duration, pages visited, and navigation paths within jl76.app
• Game activity logs including games played, stakes, wins, and losses
• Transaction history (deposits, withdrawals, bonus claims)
• Login timestamps and device fingerprint data

jl76 collects personal data through the following means:

• Account registration: When you create a jl76 account, you provide your name, date of birth, email, and mobile number
• KYC submission: When you submit identity verification documents to enable withdrawals
• Payment transactions: When you deposit or withdraw funds, payment method details are collected via our payment processing partners
• Platform use: Automatic collection of technical and behavioural data as you navigate and play on jl76.app
• Customer support interactions: When you contact jl76 via live chat or email
• Cookies and similar technologies: As described in Section 7

jl76 processes personal data for the following specific, legitimate purposes:

jl76 does not process personal data for any purpose not listed above without first obtaining explicit consent from the data subject or establishing a separate lawful basis.

Under the Data Privacy Act of 2012, jl76 relies on the following legal bases for processing personal data:

• Contractual necessity: Processing required to perform the jl76 service agreement with the Player, including account management, payment processing, and game provision
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML laws, KYC requirements, and NPC reporting obligations
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where jl76's legitimate interests do not override the data subject's rights
• Consent: Processing for marketing communications and non-essential cookies, where explicit consent has been obtained and can be withdrawn at any time

jl76 does not sell, rent, or trade personal data to third parties for their independent commercial use. Personal data is shared with the following categories of third parties only to the extent necessary for the stated purpose:

• Payment processors: GCash (GXI), Maya (Paymaya Philippines), BPI, BDO, and Metrobank — for deposit and withdrawal processing. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• Game providers: JILI Technology, PG Soft, Pragmatic Play, Evolution Gaming, and other certified game suppliers — limited to session data necessary to deliver and record game outcomes.
• Identity verification services: Third-party KYC platform partners used to verify government-issued ID documents.
• Regulatory authorities: PAGCOR (Philippine Amusement and Gaming Corporation), the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) as required by law.
• Law enforcement: Where jl76 is legally compelled to disclose personal data pursuant to a valid court order, subpoena, or law enforcement directive.
• Cloud infrastructure providers: Hosting and data storage providers operating data centres in compliance with Philippine data localisation requirements where applicable.

All third-party data processors engaged by jl76 are bound by data processing agreements requiring them to handle personal data in accordance with applicable Philippine data protection law and the terms of this Privacy Policy.

jl76.app uses cookies and similar browser technologies for the following purposes:

• Essential cookies: Required for the Platform to function, including maintaining your login session and preserving account preferences. These cannot be disabled without affecting Platform functionality.
• Analytics cookies: Used to understand how Players navigate jl76.app — which pages are visited, how long sessions last, and where technical issues occur. Data is aggregated and anonymised where possible.
• Security cookies: Used for fraud detection, bot detection, and CSRF protection. These are essential to platform security and cannot be disabled.
• Marketing cookies: Used to deliver relevant promotional communications where consent has been provided. These can be disabled via browser settings or by contacting jl76 to withdraw marketing consent.

You can manage cookie preferences at any time through your browser settings. Note that disabling certain cookies may affect your ability to use some features of jl76.app.

jl76 retains personal data only for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal retention obligations. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years from account closure, as required by PAGCOR licensing conditions and AML regulations
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction
• Game activity logs: Retained for a minimum of two (2) years from the date of each session
• Customer support records: Retained for two (2) years from the date of the interaction
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance purposes

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with jl76's data disposal procedures.

jl76 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and jl76.app
• Encryption of sensitive stored data including payment details and government ID images
• Role-based access controls ensuring employee access to personal data is restricted to job-related necessity
• Two-factor authentication required for all jl76 internal administrative systems
• Regular penetration testing and vulnerability assessments
• Automated monitoring and alerting for anomalous access patterns
• Staff training on data protection obligations under the Data Privacy Act

While jl76 takes all reasonable precautions, no internet-based system is completely immune to security risks. Players are encouraged to use strong, unique passwords for their jl76 accounts and to enable two-factor authentication.

Under the Republic Act 10173 — Data Privacy Act of 2012, you have the following rights in relation to your personal data held by jl76:

• Right to be informed: The right to know what personal data is collected about you, how it is used, and with whom it is shared
• Right of access: The right to request a copy of the personal data jl76 holds about you
• Right to rectification: The right to request correction of inaccurate or incomplete personal data
• Right to erasure: The right to request deletion of your personal data where jl76 no longer has a lawful basis for processing it — subject to legal retention obligations
• Right to object: The right to object to processing of your personal data for direct marketing purposes
• Right to data portability: The right to receive your personal data in a commonly used, machine-readable format
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated

To exercise any of these rights, contact jl76's Data Protection Officer using the details in Section 16. jl76 will respond to verified data subject requests within fifteen (15) business days.

jl76.app is strictly intended for persons who are 21 years of age or older. jl76 does not knowingly collect personal data from individuals below the age of 21. If jl76 becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated data will be deleted, and any balance will be forfeited in accordance with jl76's Terms & Conditions.

If you are a parent or guardian and believe that your child has provided personal information to jl76, please contact the DPO immediately using the contact details in Section 16.

Some of jl76's third-party service providers — particularly game providers and cloud infrastructure partners — may process personal data on servers located outside of the Philippines. Where cross-border transfers occur, jl76 ensures that adequate safeguards are in place, including:

• Contractual data processing agreements imposing data protection obligations equivalent to those under Philippine law
• Transfer to jurisdictions that the NPC has determined provide an adequate level of data protection
• Adherence to the NPC's guidelines on cross-border data transfers

By using jl76.app, you acknowledge that your personal data may be transferred to and processed in countries other than the Philippines in the circumstances described above.

Where you have provided explicit consent at registration or subsequently, jl76 may send marketing communications via email or SMS regarding promotions, new games, and offers available on the Platform. These communications are targeted to Filipino players and may include content related to PBA events, holiday promotions, and GCash cashback offers.

You may withdraw consent to receive marketing communications at any time by contacting jl76 via live chat or email at [email protected]. Withdrawal of marketing consent does not affect the provision of Platform services or the processing of personal data for other lawful purposes.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected data subjects, jl76 will:

• Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act
• Notify affected data subjects without undue delay where the breach is likely to result in high risk to their rights and freedoms
• Document all data breaches, including those not requiring notification, in jl76's internal breach register

Breach notifications to affected Players will be sent to the registered email address on the affected account and will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures jl76 has taken or proposes to take.

jl76 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or Platform operations. Material changes will be communicated to registered Players via email or Platform notification. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Continued use of jl76.app following the effective date of a revised Privacy Policy constitutes acknowledgement of the changes. We encourage Players to review this Policy periodically.

For questions, requests, or concerns regarding this Privacy Policy or jl76's handling of your personal data, you may contact jl76's Data Protection Officer through the following channels:

• Email: [email protected] — mark your subject line with "Data Privacy Request" or "DPO Inquiry" for routing to the correct team
• Live Chat: Available 24/7 on jl76.app — for general privacy questions; complex requests will be escalated to the DPO team

jl76 will acknowledge data subject requests within five (5) business days and complete substantive responses within fifteen (15) business days. Complex requests requiring regulatory consultation may require additional time; you will be informed of the expected timeline.

If you are not satisfied with jl76's response to a privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines.