jl007 collects only data that is necessary to operate a PAGCOR-licensed gaming platform — including identity details, payment information, and gaming activity records required by regulation.
All personal data stored by jl007 is protected by SSL/TLS encryption in transit and AES-256 encryption at rest, with access restricted to authorised personnel on a strict need-to-know basis.
jl007 does not sell personal data. Sharing is limited to payment processors, game providers, identity verification partners, and regulators — all bound by data processing agreements.
Under R.A. 10173, jl007 players have the right to access, correct, object to, erase, and port their personal data. Requests are handled within 30 calendar days of receipt.
jl007 uses essential session cookies, analytics cookies, and preference cookies. No third-party advertising cookies are deployed. You may manage cookie preferences in your browser settings.
Account and transaction records are retained for a minimum of five years following account closure, as required by PAGCOR regulations and Philippine AML laws. Marketing data is deleted upon opt-out.
This Privacy Policy (the "Policy") describes how jl007 (the "Company," "Platform," "we," "our," or "us") collects, processes, stores, discloses, and protects the personal information of individuals who access or use the jl007 online gaming platform at jl007.org (the "Platform").
jl007 is committed to responsible data stewardship. We operate in full compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations, the issuances of the National Privacy Commission (the "NPC"), and all applicable PAGCOR data-handling requirements.
By creating an account on jl007, logging in, or otherwise using any service on the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not access or use the jl007 Platform.
2.1 Scope. This Policy applies to all personal data collected by jl007 from individuals who: (a) register for a jl007 account; (b) use any Gaming Service on the Platform; (c) contact jl007 customer support; (d) interact with jl007's marketing communications; or (e) visit the jl007.org website, whether or not they hold a registered account.
2.2 Data Controller. For the purposes of the DPA, jl007 acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. jl007 determines the purposes and means of processing personal data and bears primary accountability for compliance with the DPA.
2.3 Data Protection Officer. jl007 has appointed a Data Protection Officer (DPO) as required under the DPA. The DPO is responsible for overseeing compliance with this Policy and applicable data privacy laws. Contact details for jl007's DPO are provided in Section 16 of this Policy.
jl007 collects personal data through several channels, including account registration forms, KYC verification submissions, payment transactions, platform usage, and direct communications with support. The categories of personal data collected include:
| Category | Data Elements | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number (PhilSys, driver's licence, passport), selfie/photo for liveness check | Registration form; KYC submission |
| Contact Data | Philippine mobile number, email address (if provided), city or region of residence | Registration form; account settings |
| Financial Data | GCash account number, Maya account number, bank account details (BPI, BDO, Metrobank, etc.), transaction amounts, deposit and withdrawal history | Payment processor; account dashboard |
| Gaming Activity Data | Game session records, wager amounts, win/loss records, game type and provider, session timestamps, RNG audit logs | Automated platform logging |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, approximate geolocation (country/region level) | Automated collection via cookies and server logs |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions, dispute records | Customer support system |
| Marketing Preference Data | Communication opt-in/opt-out status, promotion interaction records, push notification consent | Account settings; marketing campaigns |
3.1 Sensitive Personal Information. In certain circumstances, jl007 may collect sensitive personal information as defined under the DPA — specifically, national ID numbers and biometric data (selfie photos for liveness checks) — solely for the purpose of mandatory KYC verification as required by PAGCOR. Such data is handled with heightened security controls and is not used for any other purpose without your express consent.
3.2 Data You Are Not Required to Provide. Certain data fields in the registration or account settings are optional. Failure to provide optional data will not prevent you from accessing jl007's core gaming services. However, failure to provide mandatory data — particularly for KYC verification — may limit your ability to process withdrawals.
Under the DPA, jl007 may process personal data only where at least one of the following lawful bases applies:
jl007 uses personal data collected from Players for the following purposes:
6.1 What jl007 Uses. jl007 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. The categories of cookies used are:
6.2 What jl007 Does Not Use. jl007 does not deploy third-party advertising cookies, behavioural tracking cookies for external advertising networks, or any cookies that transmit your personal gaming data to third parties for advertising purposes.
6.3 Managing Cookies. You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. Your cookie preferences can also be managed through jl007's cookie consent interface, available on your first visit to the Platform.
7.1 General Principle. jl007 does not sell, rent, or trade personal data to third parties for their own marketing or commercial purposes. Disclosure is limited to the circumstances described in this Section.
7.2 Service Providers (Personal Information Processors). jl007 shares personal data with third-party service providers who process data on jl007's behalf, strictly for the purposes specified in this Policy. These include:
All service providers engaged by jl007 are bound by data processing agreements that require them to process personal data only on jl007's documented instructions, maintain appropriate security standards, and comply with applicable data privacy laws.
7.3 Regulatory and Legal Disclosure. jl007 may disclose personal data to PAGCOR, the AMLC, the NPC, the Philippine National Police, the National Bureau of Investigation, or any other competent government authority where: (a) required by applicable law, court order, or regulatory directive; (b) necessary to prevent, detect, or investigate fraud, money laundering, or other criminal activity; or (c) required in connection with a PAGCOR compliance audit or investigation.
7.4 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or substantially all of jl007's assets, personal data held by jl007 may be transferred to the acquiring entity as part of that transaction, subject to the acquiring entity assuming obligations equivalent to those in this Policy.
8.1 Primary Data Location. jl007 stores the personal data of Philippine Players primarily on servers located within or compliant with Philippines-equivalent data protection standards.
8.2 Transfers to Third Countries. Some of jl007's third-party service providers — including certain game content providers and cloud infrastructure partners — may process personal data in jurisdictions outside the Philippines. Where such transfers occur, jl007 ensures that appropriate safeguards are in place, which may include: (a) contractual clauses approved or recognized by the NPC; (b) adequacy determinations where applicable; or (c) binding corporate rules in the case of intra-group transfers.
8.3 Player Rights on Transfer. Your rights under the DPA apply regardless of where your personal data is processed. If you have concerns about international data transfers involving your personal data, you may contact jl007's DPO using the contact details in Section 16.
9.1 Technical Measures. jl007 implements the following technical security measures to protect personal data against unauthorized access, loss, disclosure, or destruction:
9.2 Organisational Measures. jl007 maintains written information security policies, conducts regular data privacy training for all staff who handle personal data, and performs due diligence assessments of third-party service providers before engagement.
9.3 Personal Data Breach Response. In the event of a personal data breach that is likely to result in serious harm to data subjects, jl007 will notify the NPC within 72 hours of becoming aware of the breach, as required under the DPA. Affected Players will be notified without undue delay where the breach is likely to adversely affect their rights and freedoms.
jl007 retains personal data only for as long as necessary to fulfil the purposes described in this Policy, subject to the following specific retention periods:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account & Identity Data (KYC records) | 5 years after account closure | PAGCOR licensing requirements; R.A. 9160 (AML) |
| Financial Transaction Records | 5 years after account closure | PAGCOR licensing requirements; R.A. 9160 (AML) |
| Gaming Activity Logs (RNG and live game records) | 3 years after account closure | PAGCOR audit requirements |
| Customer Support Communications | 3 years after resolution | Contractual necessity; legitimate interests (dispute resolution) |
| Marketing Preference Data | Until opt-out; then deleted within 30 days | Consent |
| Website Analytics Data (aggregated) | 26 months on a rolling basis | Legitimate interests (platform improvement) |
| Self-Exclusion Records | Duration of exclusion + 5 years | Legal obligation; responsible gaming policy |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jl007's data disposal procedures. Where anonymisation is used, the resulting data no longer constitutes personal data and may be retained indefinitely for statistical and platform analytics purposes.
Under the Philippine Data Privacy Act of 2012 (R.A. 10173), you have the following rights in respect of your personal data held by jl007:
11.1 Right to be Informed. You have the right to be informed whether jl007 processes your personal data and, if so, to be provided with information about the purposes, legal bases, and categories of data involved. This Policy constitutes jl007's primary privacy notice fulfilling this obligation.
11.2 Right of Access. You have the right to obtain a copy of the personal data jl007 holds about you, together with information about how it is processed. Access requests will be fulfilled within 30 calendar days of receipt.
11.3 Right to Rectification. If personal data jl007 holds about you is inaccurate or incomplete, you have the right to request correction. Some data corrections — particularly those affecting KYC-verified identity information — may require documentary evidence before jl007 can implement the change.
11.4 Right to Erasure. You may request that jl007 delete your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where processing is unlawful. This right is subject to jl007's regulatory retention obligations — jl007 may be unable to delete all data if retention is required by PAGCOR rules or AML law.
11.5 Right to Object. You have the right to object to processing of your personal data that is based on jl007's legitimate interests or for direct marketing purposes. Objection to marketing communications can be exercised at any time through your account settings or by contacting jl007 support.
11.6 Right to Data Portability. Where processing is based on your consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
11.7 How to Exercise Your Rights. To exercise any of the rights described in this Section, contact jl007's Data Protection Officer using the contact details in Section 16. jl007 will not charge a fee for data subject rights requests unless a request is manifestly unfounded or repetitive. jl007 may request proof of identity before fulfilling a request to protect against unauthorized data disclosure.
The jl007 Platform is strictly restricted to individuals aged 21 years and older. jl007 does not knowingly collect personal data from persons under 21 years of age. The minimum age requirement is enforced through mandatory age verification at registration and KYC processes.
If jl007 becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the relevant account will be closed. Any deposits received will be returned to the originating payment method in accordance with jl007's underage account procedures.
Parents or guardians who have reason to believe that a minor has registered on jl007 should contact jl007 support immediately. jl007 will investigate and take appropriate action without delay.
13.1 Consent-Based Marketing. jl007 sends marketing communications — including promotional offers, bonus announcements, PBA season promotions, Philippine holiday campaigns, and platform news — only to Players who have opted in to receive such communications at the time of registration or through their account settings.
13.2 Channels Used. Marketing communications are delivered via SMS to your registered Philippine mobile number and/or email (if provided), subject to your communication preferences.
13.3 Opting Out. You may withdraw your consent to marketing communications at any time by: (a) updating your communication preferences in your jl007 account settings; (b) clicking "Unsubscribe" in any marketing email; or (c) replying "STOP" to any marketing SMS. Opt-out requests will be processed within 5 business days. Withdrawal of marketing consent does not affect transactional communications (such as deposit confirmations, withdrawal processing notices, or account security alerts), which jl007 continues to send as necessary for contract performance.
13.4 No Profiling for Third-Party Advertising. jl007 does not share player data with third-party advertising networks and does not use personal gaming data for targeted advertising on external platforms.
The jl007 Platform integrates with third-party services — including GCash, Maya, and licensed game content providers — which are necessary to deliver the Platform's core functionality. These third parties operate their own privacy policies and are independently responsible for their own data processing activities. jl007 is not responsible for the privacy practices of third-party service providers beyond the obligations imposed by data processing agreements.
The jl007 website does not contain links to third-party websites for advertising or affiliate purposes. Any external links that appear in informational content (such as links to PAGCOR or NPC official resources) are provided for reference purposes only. jl007 is not responsible for the content or privacy practices of externally linked websites.
jl007 reviews this Privacy Policy regularly and reserves the right to update it at any time to reflect changes in law, regulation, jl007's data processing activities, or industry best practice. The "Last Updated" date at the top of this Policy will be amended to reflect any changes.
Where changes are material — meaning they significantly affect your rights or how jl007 uses your personal data — jl007 will notify registered Players via the mobile number or email address on file at least 15 days before the revised Policy takes effect, and will post a prominent notice on the jl007 Platform.
Your continued use of the jl007 Platform after the effective date of a revised Policy constitutes acceptance of the updated terms. If you do not agree with any change, you should discontinue use of the Platform and may request account closure by contacting jl007 support.
16.1 Data Protection Officer. For any questions, concerns, or requests relating to this Privacy Policy or jl007's handling of your personal data, please contact jl007's Data Protection Officer. The DPO can be reached via jl007's customer support live chat or by written correspondence to the email address displayed in the footer of this website.
16.2 Response Timeframe. jl007 will acknowledge receipt of all data-related enquiries within 5 business days and will provide a substantive response within 30 calendar days of receipt, unless the complexity of the request requires a reasonable extension, in which case you will be informed of the extended timeline.
16.3 NPC Complaints. If you are not satisfied with jl007's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines. The NPC is the independent government authority responsible for enforcing R.A. 10173 and protecting the privacy rights of all Filipino data subjects.