jl357 Privacy Policy — How We Handle Your Personal Data

1. Information We Collect

jl357 collects personal data from Players in the course of account registration, identity verification, financial transactions, and general platform use. The categories of personal data we may collect include, but are not limited to, the following:

1.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you meet the 21-year age requirement);
• Gender;
• Nationality and country of residence;
• Residential address, including barangay, city or municipality, province, and postal code;
• Username and encrypted account password.

1.2 Contact Information

• Email address registered to your jl357 account;
• Mobile phone number (used for OTP verification, account security alerts, and customer support);
• Preferred communication channel and language.

1.3 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued identification — including Philippine passport, driver's license, UMID, PhilSys National ID, voter's ID, or SSS ID;
• Selfie photographs and liveness verification images submitted during KYC processing;
• Proof of residential address documents such as utility bills, bank statements, or barangay certificates;
• Source-of-funds documentation where required for enhanced due diligence.

1.4 Financial and Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment references;
• GCash account number or Maya account details used for transactions (we do not store full card numbers);
• Bank account names, account numbers (last four digits only where applicable), and bank names for BPI, BDO, UnionBank, Metrobank, and other linked banks;
• Cryptocurrency wallet addresses for USDT TRC20 transactions;
• Account balance history and bonus transaction logs.

1.5 Gameplay and Activity Data

• Game session records including games played, wagers placed, wins, losses, and session durations;
• Bonus redemptions, promotional activity, and wagering requirement progress;
• Responsible gaming tool usage, including deposit limits set, cool-off activations, and self-exclusion requests;
• Customer support interaction history, including chat transcripts and support ticket records.

1.6 Technical and Device Data

• IP address and general geolocation data (country and region level);
• Device type, operating system, and browser version;
• Session identifiers, cookies, and local storage data;
• Referring URLs and navigation paths within the platform.

2. How We Collect Your Data

jl357 collects personal data through the following primary channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the platform, including IP address, device identifiers, and session behavior data via cookies and similar tracking technologies;
• Third-party verification services: Identity and document verification data received from licensed KYC/AML service providers when processing your verification request;
• Payment processors: Transaction confirmation data received from GCash, Maya, and partner banks when processing deposits and withdrawals;
• Game providers: Gameplay records and session data transmitted by certified third-party game providers integrated into the jl357 platform.

jl357 does not purchase personal data from third-party data brokers and does not collect personal data from social media platforms without your explicit consent.

3. How We Use Your Information

jl357 processes your personal data for the following specific, legitimate purposes:

jl357 does not use your personal data to make fully automated decisions that produce legal or similarly significant effects without human review. Automated screening tools used for fraud detection and AML monitoring are always subject to human oversight and review.

4. Legal Basis for Processing

jl357 processes personal data only where a lawful basis exists under the Data Privacy Act of 2012 (RA 10173). The applicable legal bases for our processing activities are:

• Contractual necessity: Processing required to fulfill our obligations under the Terms and Conditions you accepted at registration — including account management, deposits, withdrawals, and gameplay;
• Legal obligation: Processing required to comply with Philippine laws including anti-money laundering obligations under AMLA (RA 9160 as amended), PAGCOR gaming regulations, and NPC data privacy rules;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics — where these interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, optional analytics features, and any non-essential processing activities — where you have provided explicit, freely given, and revocable consent.

Where we rely on your consent as the legal basis for processing, you retain the right to withdraw that consent at any time by contacting our Data Protection Officer. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5. Sharing and Disclosure of Personal Data

jl357 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary and permitted under applicable law:

5.1 Service Providers and Processors

jl357 engages carefully selected third-party service providers to assist with platform operations, including identity verification (KYC) providers, payment processors (including GCash, Maya, and partner banks), game software providers, cloud hosting services, customer support platforms, and fraud detection services. These providers are contractually bound to process your data only on our instructions and in compliance with applicable data privacy laws. They are prohibited from using your data for any independent purpose.

5.2 Regulatory and Law Enforcement Authorities

jl357 may disclose personal data to the following authorities where required by law, court order, or regulatory mandate:

• Philippine Amusement and Gaming Corporation (PAGCOR) for gaming regulatory compliance;
• Anti-Money Laundering Council (AMLC) for compliance with RA 9160 and its amendments;
• National Privacy Commission (NPC) for data privacy regulatory compliance;
• Philippine law enforcement agencies (PNP, NBI) where required by a valid court order or lawful warrant;
• Bureau of Internal Revenue (BIR) for tax compliance and reporting obligations.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of jl357's assets, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and of any material changes to this Privacy Policy that may result from the transaction prior to the transfer taking effect.

6. Data Retention

jl357 retains personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal obligations. The following retention periods apply:

Upon expiration of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines. Where data cannot be deleted due to ongoing legal proceedings or regulatory investigations, it will be quarantined and processing will be restricted until deletion is permissible.

7. Cookies and Tracking Technologies

jl357 uses cookies and similar tracking technologies to operate the platform, enhance your user experience, maintain session security, and gather anonymized analytics data. The categories of cookies used are:

• Strictly necessary cookies: Required for core platform functionality including session management, security tokens, and jl357 login authentication. These cannot be disabled without impairing platform use.
• Functional cookies: Store your preferences such as language settings, preferred payment methods, and responsible gaming tool configurations to improve your experience across sessions.
• Analytics cookies: Collect aggregated and anonymized data about how Players navigate the platform, which pages are visited most, and where technical errors occur — used to improve platform performance.
• Security and fraud prevention cookies: Detect and flag suspicious login patterns, unusual transaction behavior, and device fingerprinting data used for account protection.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the jl357 login and platform features. Cookies do not store payment card numbers, government ID data, or unencrypted personal information.

8. Security Measures

jl357 implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security framework includes:

• SSL/TLS encryption: All data transmitted between your device and the jl357 platform is encrypted using industry-standard SSL/TLS protocols. Login, payment, and KYC data are never transmitted in plain text.
• Data encryption at rest: Sensitive personal data including government ID scans and financial records are stored using AES-256 encryption within our secure data infrastructure.
• Access controls: Internal access to personal data is restricted to authorized jl357 personnel on a strict need-to-know basis. Access logs are maintained and reviewed regularly.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their jl357 account. Internal systems require multi-factor authentication for all staff with access to personal data.
• Penetration testing and security audits: jl357 conducts regular third-party security assessments and penetration testing to identify and remediate vulnerabilities.
• Data breach response: In the event of a personal data breach, jl357 will notify the NPC within 72 hours of discovery in accordance with NPC Circular 16-03. Affected Players will be notified promptly where the breach poses a high risk to their rights.

While jl357 employs commercially reasonable security measures, no system is completely immune to cyberattacks. Players are responsible for maintaining the security of their own account credentials and for using secure, private networks when accessing the jl357 platform.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173) and its IRR, Philippine players have the following rights with respect to their personal data held by jl357:

• Right to be informed: You have the right to know what personal data jl357 collects about you, how it is used, and with whom it may be shared — all of which are disclosed in this Privacy Policy.
• Right to access: You may request a copy of the personal data jl357 holds about you, including the sources from which it was collected and the purposes for which it is processed.
• Right to rectification: If any personal data held by jl357 is inaccurate, incomplete, or outdated, you have the right to request correction. Minor corrections (such as contact details) can be made directly through your account settings.
• Right to erasure (Right to be forgotten): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations under AMLA, BIR, and PAGCOR regulations.
• Right to data portability: You have the right to receive a structured, commonly used, and machine-readable copy of your personal data for transfer to another data controller where technically feasible.
• Right to object: You may object to the processing of your personal data where it is based on legitimate interests, particularly for direct marketing purposes. You may opt out of marketing communications at any time.
• Right to restrict processing: In certain circumstances, you may request that jl357 restricts the processing of your data while a complaint or correction request is being resolved.
• Right to lodge a complaint: If you believe jl357 has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint mechanism.

To exercise any of the above rights, please contact our Data Protection Officer as described in Section 13 of this Policy. Data subject requests will be acknowledged within 5 business days and resolved within 30 calendar days of receipt. Complex requests may require up to 60 days, in which case you will be notified of the extension and the reason for it.

10. Children's Privacy and Age Restriction

The jl357 platform is strictly restricted to individuals who are 21 years of age or older, in accordance with PAGCOR regulations and applicable Philippine law governing casino-style gambling. jl357 does not knowingly collect personal data from individuals below the age of 21, and no person under this age is permitted to register an account, make deposits, or engage in real-money gaming on the platform.

Age verification is performed during account registration using date-of-birth information and is confirmed again during KYC document verification. If jl357 discovers that an account has been registered by a person under 21 years of age, the following actions will be taken immediately:

• The account will be permanently suspended;
• All gameplay sessions will be voided;
• All deposited funds will be returned to the originating payment source after verification;
• All personal data collected in connection with the underage account will be securely deleted within 30 days, except where retention is required for regulatory reporting purposes.

If you are a parent or guardian and believe that a minor under your care has created a jl357 account without authorization, please contact our support team immediately at [email protected] (plain text — not a link).

11. Cross-Border Data Transfers

Some jl357 service providers and game platform infrastructure may be located outside the Philippines. Where your personal data is transferred to a country that does not provide an equivalent level of data protection under Philippine law, jl357 implements the following safeguards to ensure your data remains protected:

• Data processing agreements incorporating the NPC's standard contractual clauses for cross-border data transfers;
• Binding corporate rules or equivalent data protection frameworks where applicable;
• Transfer only to jurisdictions recognized by the NPC as providing adequate data protection levels;
• Contractual obligations on recipient entities to comply with Philippine data privacy standards.

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Protection Officer.

12. Updates to This Privacy Policy

jl357 reserves the right to update, modify, or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform features. The effective date at the top of this page will be updated with each revision.

Where changes are material — meaning they significantly affect your rights or how your personal data is processed — jl357 will notify you by email to the address registered on your account or via an in-platform notification at least 14 days before the changes take effect. For non-material updates (such as minor clarifications or formatting changes), the updated Policy will be published on this page without advance notice.

Continued use of the jl357 platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any revision, you must discontinue use of the platform and may request account closure.

13. Contact Us and Data Protection Officer

For any questions, concerns, or formal requests relating to this Privacy Policy or your personal data rights, please contact the jl357 Data Protection Officer (DPO) using the following contact details:

• Email (plain text — not a link): [email protected]
• Subject Line for DPO Requests: "Data Privacy Request – [Your Registered Username]"
• Support Hours: 24 hours a day, 7 days a week, 365 days a year.
• Response Commitment: Acknowledgment within 5 business days; full resolution within 30 calendar days.

If you are unsatisfied with jl357's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through the NPC's official channels.