jl20 Privacy Policy

Your privacy matters to us. This Privacy Policy explains what personal data jl20 collects from players in the Philippines, how that data is used, how it is protected, and what rights you have under Philippine data protection law.

Last updated: June 2026  ·  Applicable to all jl20 accounts and services at jl20.club

Contents
  1. Introduction
  2. Data Controller
  3. Data We Collect
  4. How We Use Your Data
  5. Legal Basis
  6. Data Sharing
  7. Data Retention
  8. Data Security
  9. Cookies
  10. Your Rights
  11. Children's Privacy
  12. Changes to Policy
  13. Contact Us

Your Rights First: jl20 is committed to the responsible handling of personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations. This policy explains your rights and our obligations clearly, in plain English.

1. Introduction

This Privacy Policy ("Policy") applies to jl20.club ("jl20," "we," "us," "our") and governs the collection, processing, storage, and disclosure of personal data related to individuals ("you," "Player," "User") who access or use the jl20 Platform, including the website, account services, casino games, sports betting functionality, and customer support services.

jl20 processes personal data as a Data Controller under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By registering an account or using the jl20 Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read alongside jl20's Terms & Conditions and Responsible Gaming policy, which together govern your use of the Platform.

2. Data Controller

The Data Controller responsible for your personal data is jl20.club, operating under PAGCOR licensing for online casino and sports betting services in the Philippines.

For all privacy-related inquiries, requests, or complaints, you may contact our Data Protection Officer (DPO) at:

jl20's Data Protection Officer is responsible for overseeing compliance with the Data Privacy Act, this Policy, and jl20's internal data handling procedures. The DPO is also the point of contact for the National Privacy Commission (NPC) of the Philippines.

3. Personal Data We Collect

jl20 collects personal data in three main ways: directly from you during registration and account use, automatically through your use of the Platform, and from third parties as part of our regulatory obligations.

3.1 Data You Provide Directly

  • Full legal name, date of birth, nationality
  • Philippine residential address
  • Email address and Philippine mobile number
  • Government-issued ID documents (UMID, PhilSys, driver's license, passport) for KYC verification
  • Payment method details (GCash number, bank account information, PayMaya account)
  • Self-exclusion and responsible gaming preferences
  • Support communications and correspondence with jl20

3.2 Data Collected Automatically

  • IP address and approximate geolocation
  • Device type, operating system, and browser information
  • Login timestamps and session duration data
  • Game activity logs including bets placed, outcomes, and transaction history
  • Cookie and similar tracking technology data (see Section 9)

3.3 Data from Third Parties

  • Identity verification results from KYC service providers
  • Transaction verification data from payment processors (GCash, PayMaya, BDO, BPI, Metrobank)
  • Fraud screening and AML monitoring results from compliance service providers

Minimum Necessary: jl20 applies the principle of data minimization — we collect only the personal data necessary for the specific purpose stated. We do not collect sensitive personal information beyond what is required for PAGCOR-mandated KYC and AML compliance.

4. How jl20 Uses Your Personal Data

jl20 processes personal data for the following purposes:

  • Account registration and management — creating and maintaining your jl20 account, authenticating logins, and managing account preferences
  • Identity verification (KYC) — verifying your identity and age in compliance with PAGCOR licensing requirements
  • Payment processing — executing deposits and withdrawals via your registered PHP payment methods
  • Anti-money laundering (AML) compliance — monitoring transactions and reporting to the Anti-Money Laundering Council (AMLC) as required by Philippine law
  • Game and Platform delivery — providing casino games, sports betting, Bingo, Keno, and all Platform features
  • Customer support — responding to queries, resolving disputes, and providing assistance
  • Responsible gaming — monitoring gaming patterns to identify potential problem gambling indicators and administering self-exclusion requests
  • Security and fraud prevention — detecting unauthorized access, account abuse, and fraudulent transactions
  • Legal compliance — meeting obligations under PAGCOR regulations, the Data Privacy Act, AMLA, and other applicable Philippine law
  • Platform improvement — analyzing aggregated, anonymized usage data to improve jl20's product and user experience

jl20 does not sell your personal data to third parties for their own marketing purposes.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, jl20 relies on the following legal bases for processing your personal data:

  • Contractual necessity — processing is necessary for the performance of your jl20 account agreement and the delivery of casino and betting services
  • Legal obligation — processing is required to comply with PAGCOR licensing conditions, AMLA, and other applicable Philippine regulations
  • Legitimate interests — processing for fraud detection, security monitoring, and Platform improvement, where such interests are not overridden by your privacy rights
  • Consent — where we rely on your consent (for example, for optional marketing communications), you have the right to withdraw that consent at any time

6. Data Sharing and Disclosure

jl20 does not sell personal data. We share personal data only in the following circumstances and with appropriate safeguards:

  • PAGCOR — as required by our licensing conditions and regulatory reporting obligations
  • Anti-Money Laundering Council (AMLC) — where required by the AMLA and implementing rules
  • National Privacy Commission (NPC) — in response to lawful orders or as required by the DPA
  • KYC and identity verification providers — to verify your identity and age as required by PAGCOR
  • Payment processors — GCash, PayMaya, BDO, BPI, Metrobank, and InstaPay, solely to process your deposits and withdrawals
  • Game software providers — limited technical data necessary for game delivery and RNG certification
  • Fraud and security service providers — to detect and prevent account abuse and financial fraud
  • Law enforcement and courts — where required by a valid legal order under Philippine law

All third-party processors engaged by jl20 are required to handle personal data in accordance with the Data Privacy Act and are bound by data processing agreements that prohibit unauthorized use or disclosure.

7. Data Retention

jl20 retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by applicable Philippine law:

  • Account and KYC records — minimum 5 years from account closure, in accordance with PAGCOR and AMLA requirements
  • Transaction records — minimum 5 years from the date of the transaction
  • Support communications — 2 years from resolution of the relevant query
  • Game activity logs — 2 years from the date of activity, or longer where required for dispute resolution or regulatory reporting

After the applicable retention period, personal data is securely deleted or anonymized in accordance with jl20's data disposal procedures.

8. Data Security

jl20 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

  • 256-bit SSL/TLS encryption on all data transmissions between your device and jl20's servers
  • Encryption of stored sensitive personal data, including payment information and government ID records
  • Strict access controls ensuring that only authorized jl20 personnel with a legitimate business need can access personal data
  • Two-factor authentication for internal system access
  • Regular security assessments and penetration testing
  • Incident response procedures for detecting, investigating, and reporting personal data breaches to the National Privacy Commission within 72 hours as required by the DPA

Your Role in Security: jl20's security measures are most effective when combined with your own account security practices. Use a strong, unique password for your jl20 account. Enable 2FA. Never share your login credentials. Treat your jl20 account login with the same care you give your GCash or online banking access.

9. Cookies and Tracking Technologies

jl20 uses cookies and similar technologies on the Platform to enable core functionality, improve your experience, and support our security and analytics operations.

Types of cookies used by jl20:

  • Strictly necessary cookies — required for login sessions, account authentication, and Platform security. These cannot be disabled without affecting core functionality.
  • Functional cookies — remember your language, game preferences, and display settings between sessions
  • Analytics cookies — collect anonymized data on how players use the Platform, used to improve product features and performance
  • Security cookies — used for fraud detection, bot prevention, and session integrity verification

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will prevent login and most Platform functions from operating correctly. jl20 does not use cookies to deliver third-party advertising.

10. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl20:

Right What It Means
Right to Access Request a copy of the personal data jl20 holds about you and information on how it is processed.
Right to Rectification Request correction of inaccurate or incomplete personal data in your jl20 account.
Right to Erasure Request deletion of your personal data, subject to our legal retention obligations under PAGCOR and AMLA requirements.
Right to Data Portability Receive your personal data in a structured, commonly used format for transfer to another controller where technically feasible.
Right to Object Object to processing based on legitimate interests, particularly for direct marketing purposes.
Right to Withdraw Consent Withdraw consent at any time where processing is based on consent. Withdrawal does not affect prior lawful processing.
Right to Lodge a Complaint File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your rights have been violated.

To exercise any of these rights, contact jl20's Data Protection Officer at [email protected]. We will respond within thirty (30) days of receiving your request. Some requests may require identity verification before processing.

11. Children's Privacy and Age Restriction

The jl20 Platform is strictly for adults aged 21 years and above, in accordance with PAGCOR's minimum age requirement for licensed online gambling in the Philippines. jl20 does not knowingly collect personal data from individuals under 21 years of age.

Age verification is a mandatory component of the jl20 KYC process. Any account where the account holder is found to be under 21 years of age will be immediately closed, all personal data will be deleted except for records required to document the age violation, and any deposited funds will be returned in accordance with our Terms and Conditions.

If you believe that jl20 has inadvertently collected data from a person under 21, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

jl20 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When material changes are made, we will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect.

The effective date at the top of this Policy reflects when it was last updated. Your continued use of the jl20 Platform after the effective date of any revision constitutes acceptance of the updated Policy. We encourage you to review this page periodically.

13. Contact Us

For privacy-related inquiries, data subject requests, or to contact jl20's Data Protection Officer:

  • Email (DPO): [email protected]
  • Website: jl20.club
  • Live Chat: Available 24/7 on the Platform

For complaints that cannot be resolved through jl20's internal process, you may contact the National Privacy Commission (NPC) of the Philippines through their official channels.

For terms of service questions, refer to our Terms & Conditions. For responsible gaming support, visit our Responsible Gaming page.

How jl20 Protects Your Privacy

Six concrete commitments jl20 makes on data privacy — not just words, but built-in practices.

End-to-End Encryption

Every data transmission between your device and jl20's servers is protected by 256-bit SSL/TLS — the same standard used by Philippine banks for internet banking.

No Data Sales

jl20 does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Full stop.

Data Minimization

We collect only what is necessary for the stated purpose. Account registration asks for what PAGCOR requires — nothing more, nothing that isn't operationally justified.

DPA Compliance

jl20 processes personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012, and is registered with the National Privacy Commission.

Breach Notification

In the event of a personal data breach, jl20 will notify the National Privacy Commission within 72 hours and affected players without undue delay, as required by the DPA.

Your Controls

Access, rectify, or request deletion of your data at any time. Your rights under the DPA are supported by jl20's dedicated Data Protection Officer.

Your Data Is Safe at jl20

jl20 is built for Filipino players who deserve a platform that takes both privacy and entertainment seriously. PAGCOR-regulated, DPA-compliant, and 21+ only. Your PHP wallet and personal data are in safe hands.

Privacy & Safety: jl20 is open to Philippine residents aged 21 and above only. All data is handled under the Data Privacy Act of 2012. For responsible gaming tools and self-exclusion, visit our Responsible Gaming page.