jl23 Privacy Policy

This Privacy Policy ("Policy") describes how jl23 ("jl23," "we," "us," "our") collects, uses, stores, discloses, and otherwise processes the personal information of users ("Player," "User," "you," "your") who access or use the jl23 online gaming platform at jl23.vip.

jl23 is committed to protecting the personal information of Filipino players in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and the relevant issuances of the National Privacy Commission (NPC). jl23's operations are also subject to the data governance requirements imposed by PAGCOR under jl23's online gaming authorization.

By registering an Account on jl23 or by using any service or feature of the jl23 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal information as described herein. If you do not agree with any part of this Policy, you should not use the jl23 Platform.

This Policy should be read in conjunction with jl23's Terms and Conditions, which are available at jl23.vip/terms-conditions. In the event of any conflict between this Policy and the Terms and Conditions with respect to data privacy matters, this Policy shall prevail.

For the purposes of the Data Privacy Act of 2012 and its implementing regulations, jl23 is the Personal Information Controller (PIC) in respect of the personal data of Players collected through the jl23 Platform. As PIC, jl23 determines the purposes for which, and the means by which, personal information is processed.

jl23 operates the online gaming platform accessible at jl23.vip as a PAGCOR-authorized entity operating under Philippine law. jl23's designated Data Protection Officer (DPO) oversees compliance with the Data Privacy Act and serves as the primary point of contact for Player data subject requests. Contact details for the DPO are set out in Section 15 of this Policy.

Third-party game providers, payment processors, and KYC/AML service providers who process personal data in connection with jl23's services act as Personal Information Processors (PIPs) on jl23's behalf. jl23 requires all PIPs to implement appropriate technical and organizational data protection measures and to process personal data only in accordance with jl23's documented instructions and applicable Philippine law.

jl23 collects the following categories of personal information from Players. All data collected is limited to what is necessary and proportionate to the purposes described in Section 5 of this Policy.

3.1 Registration and Identity Data

• Full legal name (as it appears on your government-issued Philippine ID)
• Date of birth (for age verification — 21+ requirement)
• Email address
• Philippine mobile number
• Residential address in the Philippines
• Username selected at registration
• Password (stored in encrypted, hashed form — jl23 does not store plaintext passwords)

3.2 KYC Verification Data

• Government-issued Philippine photo identification (e.g., PSA National ID, Passport, LTO Driver's License, UMID, Voter's ID) — document type, number, and expiry date
• Selfie photograph submitted for biometric identity matching
• Source of funds documentation where required under AML thresholds

3.3 Financial and Transaction Data

• GCash account number or PayMaya account identifier
• Bank account details (BPI, BDO, Metrobank, UnionBank) where provided for bank transfer transactions
• Deposit and withdrawal history, transaction amounts, and timestamps
• Bonus credit history and wagering activity records

3.4 Gaming Activity Data

• Game sessions, bets placed, game outcomes, and session durations across all jl23 games
• Sports betting selections, odds, and outcomes
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

3.5 Technical and Device Data

• IP address and general geolocation (country and region level)
• Device type, operating system, and browser type and version
• Session login and logout timestamps
• Cookies and session identifiers (see Section 9)

3.6 Communications Data

• Records of communications with jl23 support, including live chat transcripts and email correspondence
• Feedback, complaints, and dispute records

jl23 collects personal information through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or use any feature of the jl23 Platform that requires you to provide information.
• Automatically: Through server logs, cookies, and session tracking technologies as you navigate and use the jl23 Platform. This includes IP address, device identifiers, and gameplay data generated as a result of your interactions with the Platform.
• From third-party service providers: jl23 may receive identity verification outcomes, fraud risk scores, and payment verification data from KYC/AML service providers, payment processors (GCash, PayMaya, banks), and fraud prevention services engaged by jl23 in connection with its PAGCOR licensing obligations.
• From PAGCOR and government sources: Where required under jl23's regulatory obligations, information may be cross-referenced against PAGCOR databases, government-issued ID registries, or other official Philippine government data sources for verification purposes.

jl23 processes your personal information for the following specific, legitimate purposes:

1. Account creation and management — to register and administer your jl23 Account, authenticate your logins, and maintain your account settings and preferences.
2. Age and identity verification (KYC) — to verify that you are aged 21 years or above as required by PAGCOR regulations, and to confirm your identity before permitting real-money gaming or withdrawals.
3. Payment processing — to process deposits and withdrawals via GCash, PayMaya, and bank transfer, and to maintain accurate financial records of all transactions on your Account.
4. Gaming service delivery — to provide you with access to live casino, slots, bingo, and sports betting games, and to calculate and credit winnings accurately.
5. Bonus and promotion administration — to verify eligibility for promotions, apply bonus credits, track wagering requirement progress, and prevent bonus abuse.
6. Regulatory compliance — to fulfil jl23's obligations under PAGCOR's licensing requirements, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and the Terrorism Financing Prevention and Suppression Act.
7. Fraud prevention and platform security — to detect, investigate, and prevent fraudulent activity, multi-accounting, collusion, money laundering, and other prohibited conduct on the jl23 Platform.
8. Responsible gaming — to administer responsible gaming tools (deposit limits, session timers, self-exclusion), to monitor gaming patterns for problem gambling indicators, and to respond appropriately to Player self-exclusion requests.
9. Customer support — to respond to queries, resolve disputes, and maintain records of communications for quality assurance and audit purposes.
10. Platform improvement — to analyze aggregated, anonymized usage patterns to improve the jl23 Platform's functionality, game offerings, and user experience.
11. Legal proceedings — to establish, exercise, or defend legal claims in litigation or regulatory proceedings involving jl23 and a Player.

Under the Data Privacy Act of 2012, jl23 relies on the following legal bases for processing personal information:

• Consent: Processing for account registration and non-mandatory communications is based on your consent, given when you register an Account and accept jl23's Terms and Conditions. You may withdraw consent at any time, subject to the limitations described in this Policy and jl23's legal retention obligations.
• Contractual necessity: Processing for account management, payment processing, game service delivery, and support is necessary for the performance of the contract between you and jl23 (the Terms and Conditions).
• Legal obligation: Processing for KYC verification, AML compliance, PAGCOR regulatory reporting, and retention of transaction records is required by applicable Philippine law and cannot be refused or restricted by the Player.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement is based on jl23's legitimate interests as a regulated gaming operator, balanced against your rights as a data subject.

jl23 does not sell, rent, or trade your personal information to any third party for commercial or marketing purposes. jl23 shares personal information only in the following circumstances and only to the extent necessary for the stated purpose:

7.1 PAGCOR and Philippine Government Authorities

jl23 is required under its PAGCOR operating authorization and applicable Philippine law to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other lawfully authorized Philippine government bodies upon request or as mandated by regulation. This disclosure is a legal obligation that jl23 cannot refuse or limit.

7.2 KYC and AML Service Providers

jl23 engages accredited third-party KYC and AML compliance service providers to process identity verification documents and conduct fraud screening. These providers act as Personal Information Processors under contract with jl23 and are prohibited from using Player data for any purpose other than the verification services they provide to jl23.

7.3 Payment Processors

GCash (Mynt — Globe Fintech Innovations, Inc.), PayMaya (Maya Bank, Inc.), and the Philippine banks through which jl23 processes deposits and withdrawals will necessarily process account and transaction data as part of the payment process. These entities operate under their own privacy policies and are independently regulated by the Bangko Sentral ng Pilipinas (BSP).

7.4 Game Technology Providers

Third-party game providers (including JILI Games, Pragmatic Play, and other certified gaming studios whose titles are available on jl23) may process limited session and gameplay data as part of the technical delivery of their games through jl23's platform. This data is used solely for game functionality and RNG audit purposes.

7.5 Legal Proceedings

jl23 may disclose personal information to courts, legal counsel, law enforcement, or regulatory bodies where required to respond to a valid legal process (such as a court order or subpoena) or to protect the legal rights, property, or safety of jl23, its players, or the public.

jl23 retains personal information only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law, whichever is longer.

• Active Account data: Retained for the duration of the Account's active status, plus the minimum retention period required by applicable law after Account closure.
• KYC and identity verification records: Retained for a minimum of five (5) years from the date of Account closure, in accordance with the Anti-Money Laundering Act's record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required under Philippine AML regulations and PAGCOR licensing conditions.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each session, for dispute resolution, RNG audit, and regulatory inspection purposes.
• Customer support records: Retained for a minimum of two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.

Upon expiry of the applicable retention period, personal information will be securely deleted or anonymized in a manner that prevents re-identification, unless a longer retention period is required by law or by an ongoing legal, regulatory, or dispute resolution process.

jl23 uses cookies and similar browser-based technologies on the jl23 Platform. Cookies are small text files stored on your device by your browser that allow the Platform to recognize your device across sessions.

Types of Cookies Used by jl23

• Strictly Necessary Cookies: These are essential for the operation of the jl23 Platform. They include session authentication tokens (which keep you logged in during your session), security cookies (which help detect and prevent fraudulent login attempts), and game state cookies (which maintain your current game session). These cookies cannot be disabled without disrupting Platform functionality.
• Functional Cookies: These remember your Platform preferences, such as your preferred language settings, responsible gaming tool configurations, and game lobby view settings. Disabling functional cookies may affect Platform personalization but will not prevent basic Platform access.
• Analytics Cookies: jl23 uses anonymized, aggregated analytics data to understand how Players interact with the Platform — for example, which games are most frequently accessed, and which pages experience technical issues. This data is aggregated and is not used to identify individual Players.

jl23 does not use third-party advertising or tracking cookies for cross-site behavioral advertising. You will not see jl23 advertisements follow you around the internet based on your Platform activity.

You may manage cookie settings through your browser's privacy settings. Note that disabling strictly necessary cookies will prevent you from logging in to your jl23 Account and accessing real-money games.

jl23 implements appropriate technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, accidental loss, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and jl23's servers.
• Encryption at rest for sensitive personal data, including KYC documents and financial account identifiers, stored on jl23's servers.
• Password hashing using industry-standard one-way hashing algorithms — jl23 does not store plaintext passwords under any circumstances.
• Access controls: Personal data is accessible only to jl23 personnel and authorized third-party processors who require it for the purposes described in this Policy. Access is role-based and logged.
• Two-factor authentication (2FA) available to all Players for enhanced Account security.
• Intrusion detection and monitoring systems that monitor jl23's infrastructure for unauthorized access attempts and anomalous activity in real time.
• Regular security assessments and penetration testing conducted on the jl23 Platform and its supporting infrastructure.

In the event of a personal data breach that poses a risk to your rights and freedoms, jl23 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under the Data Privacy Act. Affected Players will be notified directly where the breach is likely to result in a high risk to their personal interests.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal information held by jl23. You may exercise these rights at any time by contacting jl23's Data Protection Officer (see Section 15):

jl23 will respond to data subject requests within thirty (30) calendar days of receipt. In complex cases where additional time is required, jl23 will notify you within the initial 30-day period and provide an expected resolution timeline. Note that certain rights may be limited where jl23 is required by law to retain data (e.g., for AML record-keeping) or where exercising a right would adversely affect the rights and freedoms of others.

The jl23 Platform is strictly prohibited for persons under the age of twenty-one (21) years, in accordance with PAGCOR regulations governing online gaming in the Philippines. jl23 does not knowingly collect personal information from persons under the age of 21.

If jl23 becomes aware, through KYC verification or any other means, that a registered Player is under the age of 21, jl23 will immediately and permanently suspend the Account, delete or securely archive all personal information associated with the Account in compliance with applicable law, and report the incident to PAGCOR as required under jl23's licensing obligations.

If a parent or guardian becomes aware that their minor child has registered an Account on jl23 and provided personal information, they should contact jl23's Data Protection Officer immediately at the contact details provided in Section 15. jl23 will take prompt action to close the Account and handle the personal information in accordance with applicable law.

Some of jl23's third-party service providers — including certain game technology providers and platform infrastructure services — may be based outside the Philippines and may process personal data in jurisdictions other than the Republic of the Philippines. Where such cross-border transfers occur, jl23 ensures they are conducted in accordance with Section 21 of the Data Privacy Act of 2012, which requires that the recipient country or organization provides a level of data protection substantially equivalent to the protections afforded under Philippine law.

jl23 implements contractual safeguards — including data processing agreements incorporating the NPC's standard contractual clauses where applicable — to govern all cross-border transfers of personal information to third-party processors outside the Philippines.

All financial data processed in connection with GCash, PayMaya, and Philippine bank transactions is handled by entities operating under BSP regulation and within the Philippine financial system.

jl23 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law (including NPC issuances and PAGCOR directives), or changes in jl23's operational structure.

The date of the most recent update is indicated at the top of this Policy. For material changes — particularly those that affect the purposes for which we process your personal information or the rights available to you — jl23 will notify registered Players via email to their registered address and via an in-platform notification at least fourteen (14) days before the changes take effect.

Your continued use of the jl23 Platform following notification of a material change constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated Policy, you should discontinue use of the Platform and contact jl23 to close your Account.

Minor non-material changes (such as formatting corrections, clarifications that do not alter the substance of our data practices, or updates to contact information) will take effect immediately upon publication on this page.

For all privacy-related queries, data subject access requests, complaints, or concerns, you may contact jl23's designated Data Protection Officer (DPO) through the following channels:

Email: [email protected]
Subject Line: Please include "Data Privacy Request" or "Privacy Complaint" in the subject line for faster routing to the DPO.
Live Chat: Available 24/7 inside your jl23 account dashboard.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe jl23 has not handled your personal information in accordance with the Data Privacy Act of 2012. The NPC's official website and complaints procedure are available through the Philippine government's official digital services portal.

jl23 takes all data privacy complaints seriously and commits to acknowledging receipt within forty-eight (48) hours and providing a substantive response within thirty (30) calendar days.