Privacy Policy – JL23 Online Gaming Philippines

1Who We Are

JL23 is an online gaming platform operated at jl23.best, offering casino games, sports betting, and related entertainment services to players in the Philippines. For the purposes of this Privacy Policy, jl23 acts as the personal information controller responsible for the collection, use, and protection of your personal data.

This policy applies to all services offered through jl23.best, including account registration, deposit and withdrawal services, casino games, sports and volleyball betting markets, promotions, and customer support interactions. By registering or using jl23 in any capacity, you acknowledge and accept the terms of this Privacy Policy.

2Personal Data We Collect

JL23 collects personal data that falls into the following categories. We collect only the information that is necessary for the specific purpose stated, and we do not collect sensitive information beyond what is required for identity verification and regulatory compliance.

3How We Collect Your Data

JL23 collects personal data through the following channels and methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the jl23 platform, including IP addresses, device identifiers, browser type, session logs, and cookies. See Section 8 for full cookie details.
• Third-party sources: Identity verification data from authorised government databases or licensed KYC service providers to confirm the accuracy of the information you submit. Financial data from payment processors (GCash, Maya, GrabPay, Coins.ph, banks) to confirm transaction status.
• Publicly available sources: In cases of fraud investigation, jl23 may cross-reference publicly available information to verify identity or investigate suspicious activity.

4Why We Use Your Personal Data

JL23 uses your personal data only for legitimate, specified purposes. We do not use your information in ways that are incompatible with the reason it was originally collected. The main purposes for which jl23 processes your data are:

• Account creation and management: To set up and maintain your jl23 account, verify your identity, and manage your access to the platform.
• Transaction processing: To facilitate deposits, withdrawals, and bet settlements in Philippine Peso using your preferred local payment method.
• Regulatory compliance: To fulfil our obligations under Philippine gaming regulations, anti-money laundering laws (AMLA), and the Data Privacy Act, including mandatory record-keeping requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats.
• Responsible gaming: To monitor gaming behaviour, apply member-requested limits, and identify potential signs of problem gambling in line with our responsible gaming obligations.
• Customer support: To respond to your enquiries, resolve disputes, and provide assistance through our 24/7 support channels.
• Platform improvement: To analyse how members use jl23 in aggregate, identify areas for improvement, and develop new features that better serve Filipino players.
• Marketing communications: To send you relevant promotions, bonus offers, and platform news — but only where you have provided your consent or where we have a legitimate interest that does not override your privacy rights.

5Legal Bases for Processing

Every instance of personal data processing at jl23 is grounded in one or more of the following lawful bases as recognised under the Philippine Data Privacy Act:

• Consent: Where you have given explicit consent — for example, opting in to marketing emails or agreeing to this Privacy Policy upon registration.
• Contractual necessity: Processing required to fulfil the contract between you and jl23, including processing your deposits, bets, and withdrawal requests.
• Legal obligation: Processing required to comply with Philippine law, including anti-money laundering regulations (Republic Act No. 9160) and gaming licence conditions.
• Legitimate interests: Processing carried out for jl23's legitimate business interests — such as fraud prevention, platform security, and analytics — where those interests are not overridden by your privacy rights.

6Who We Share Your Data With

JL23 does not sell, rent, or trade your personal data. However, we do share necessary information with the following categories of third parties in order to operate the platform lawfully and effectively:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, Bancnet/InstaPay, and card processing partners receive transaction data to process your deposits and withdrawals.
• KYC and identity verification providers: Licensed third-party services that assist jl23 in verifying the identity documents you submit during the KYC process.
• Regulatory authorities: PAGCOR and other Philippine government agencies when required by law, court order, or regulatory directive.
• Anti-money laundering bodies: The Anti-Money Laundering Council (AMLC) where jl23 is required to report suspicious transactions under the AMLA.
• Technology service providers: Cloud infrastructure, cybersecurity, and platform service providers who process data on jl23's behalf under strict data processing agreements and confidentiality obligations.
• Fraud prevention networks: Industry fraud prevention services used to identify and block fraudulent accounts and transactions.

All third parties who receive jl23 member data are contractually required to handle it securely and use it only for the specified purpose. JL23 remains responsible for ensuring these parties comply with applicable data protection standards.

7How Long We Keep Your Data

JL23 retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Philippine law. The general retention periods jl23 applies are:

• Active account data: Retained for the duration of your account membership plus an additional period required for regulatory compliance after account closure.
• Transaction records: Financial and betting records are retained for a minimum of five (5) years in compliance with Philippine AMLA requirements.
• KYC verification documents: Identity documents are retained for the duration of the account and for a minimum of five (5) years after account closure.
• Support interaction records: Customer support communications are retained for up to two (2) years from the date of the interaction.
• Marketing data: Retained until you withdraw consent or unsubscribe from communications, after which it is deleted within 30 days.

When personal data is no longer required and its retention period has expired, jl23 securely deletes or anonymises it in a manner that prevents reconstruction of the original information.

8Cookies and Tracking Technologies

JL23 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. Here is how each type of cookie is used:

• Essential cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. You cannot disable these without affecting platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and game history so you do not have to reset them each visit.
• Analytics cookies: Used in aggregate to understand how members navigate jl23, which pages are most visited, and where technical issues occur. This data is anonymised and never used to identify individual users.
• Security cookies: Help jl23 detect and prevent fraudulent logins, unusual session behaviour, and other security threats.

You can manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies may prevent certain parts of the jl23 platform from working correctly. JL23 does not use advertising tracking cookies or share cookie data with advertising networks.

9How We Protect Your Data

JL23 implements a layered security approach to protect your personal data from unauthorised access, disclosure, alteration, or destruction:

• TLS encryption: All data transmitted between your device and jl23 is encrypted in transit using TLS 1.2 or higher.
• Encryption at rest: Sensitive personal and financial data stored on jl23 servers is encrypted using AES-256 standard encryption.
• Access controls: Internal access to member personal data is restricted on a strict need-to-know basis. Staff with access undergo data privacy training and are bound by confidentiality agreements.
• Regular security audits: JL23 undergoes periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Two-factor authentication: JL23 offers and encourages the use of two-factor authentication (2FA) to add an additional layer of protection to member accounts.
• Incident response plan: JL23 maintains a documented data breach response procedure aligned with the notification requirements of the Philippine Data Privacy Act.

No security system is completely impenetrable. JL23 will notify affected members and the National Privacy Commission (NPC) within the legally required timeframe if a data breach occurs that poses a risk to your rights and freedoms.

10Children's Privacy

JL23 is strictly an adult gaming platform. We do not knowingly collect personal data from individuals under the age of 21. The minimum age to register and use jl23 is 21 years old, in line with Philippine gaming regulations.

If jl23 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the account, delete the associated data, and refund any deposits minus any applicable fees required by our compliance obligations. If you believe a minor has accessed jl23, please contact our support team immediately.

11Exercising Your Data Rights

To exercise any of your rights under the Philippine Data Privacy Act — including access, correction, erasure, or objection — please contact the jl23 Data Protection Officer (DPO) using the contact details in Section 15. Your request should include:

• Your full name as registered on your jl23 account
• Your registered mobile number or email address for verification
• A clear description of the right you wish to exercise and any specific data concerned
• A copy of a valid government-issued ID for identity verification (required for access and erasure requests)

JL23 will respond to all data rights requests within fifteen (15) business days of receipt. In complex cases, this may be extended by a further 15 business days with written notification to you explaining the reason for the delay.

If you are not satisfied with how jl23 has handled your personal data or your data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12Data Breach Protocol

In the event of a personal data breach that poses a risk to your rights and freedoms, jl23 will:

1. Contain the breach and assess its scope within 24 hours of discovery.
2. Notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Philippine Data Privacy Act.
3. Notify affected members within a reasonable time period where the breach is likely to result in high risk to your personal rights or freedoms, providing clear information about what happened, what data was affected, and what steps jl23 is taking.
4. Take all necessary remediation steps to prevent recurrence and document the breach in jl23's internal breach register.

JL23 maintains a dedicated data breach response team and a documented incident response plan that is reviewed and tested regularly.

13Third-Party Links

The jl23 platform may contain links to third-party websites, such as payment provider portals or regulatory information pages. This Privacy Policy applies only to jl23 and does not cover the privacy practices of any third-party sites you may access through those links.

JL23 is not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policy of any third-party site before submitting personal information to it.

14Updates to This Privacy Policy

JL23 may update this Privacy Policy from time to time to reflect changes in Philippine law, regulatory requirements, our data practices, or the features of the jl23 platform. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page.
• Send a notification to your registered email address at least seven (7) days before the changes take effect.
• Display a prominent notice on the jl23 platform drawing attention to the update.

Your continued use of jl23 after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with material changes, you may close your account by contacting jl23 support.

15Contact Us and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data at jl23, please contact our Data Protection Officer (DPO):

• Email: privacy@jl23.best
• General Support: support@jl23.best
• Live Chat: Available 24/7 within the jl23 platform after login
• Response time: Within 15 business days for formal data rights requests; within 24 hours for general privacy enquiries

For disputes that cannot be resolved directly with jl23, you may contact the National Privacy Commission (NPC) of the Philippines, which oversees the enforcement of the Data Privacy Act. JL23 cooperates fully with NPC investigations.

For questions related to responsible gaming, visit our Responsible Gaming page. For general platform terms, see our Terms and Conditions.