jl576 Privacy Policy —
How We Protect Your Personal Data

This Policy applies to all personal data processed by jl576 in connection with the operation of its online gaming platform, including data collected during account registration, KYC verification, deposits, withdrawals, gameplay activity, customer support interactions, and marketing communications.

This Policy covers personal data processed in connection with:

• The jl576 website accessible at jl576.org and all subdomains;
• The jl576 mobile-optimised web platform;
• All communication channels operated by jl576 including live chat, email, and SMS notifications;
• Any third-party services integrated into jl576 where jl576 acts as the data controller.

This Policy does not cover data practices of third-party payment providers (e.g., GCash, Maya, BPI, BDO), third-party game providers, or other external services that may be accessible through or linked to the jl576 Platform. Those parties operate under their own privacy policies, which jl576 encourages you to review independently.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, jl576 is the personal information controller in respect of the personal data of its Members and Platform visitors.

jl576 operates as an online gaming platform serving Filipino players under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). All data processing activities conducted by jl576 are performed in compliance with jl576's PAGCOR licence conditions and applicable Philippine data privacy legislation.

jl576 has appointed a Data Privacy Officer (DPO) who is responsible for overseeing the Platform's compliance with the Data Privacy Act and this Policy. Contact details for the DPO are provided in Section 16 of this Policy.

When you create a jl576 account, we collect the following personal information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — members must be 21 or older);
• Philippine mobile phone number;
• Email address;
• Chosen username;
• Residential address in the Philippines.

As required by PAGCOR for all online gaming account holders, jl576 collects the following during the Know Your Customer (KYC) verification process:

• Copy of a valid Philippine government-issued identification document (passport, driver's licence, UMID, PhilSys National ID, PRC ID, or equivalent);
• A live selfie photograph, which may include a selfie holding your ID document;
• Any additional documents requested to resolve identity verification discrepancies.

When you make deposits or withdrawals, jl576 records:

• Transaction amounts, dates, and times;
• Payment method used (e.g., GCash number, BPI account reference — we do not store full bank account numbers or card numbers);
• Transaction status and processing references;
• Wallet balance history.

• Game session records including games played, wager amounts, outcomes, and session duration;
• Bonus and promotion participation history;
• Login timestamps, session duration, and IP addresses;
• Device type, operating system, and browser information;
• Geographic location data derived from IP address (region/city level only — not GPS coordinates).

When you contact jl576 support, we retain records of your communications including live chat transcripts, email correspondence, and the nature of the issues raised. This is used to resolve your query, improve support quality, and maintain a record for dispute resolution purposes.

jl576 collects personal data through the following means:

• Directly from you: Through the registration form, KYC upload portal, deposit/withdrawal flows, support tickets, and any forms or questionnaires you complete on the Platform;
• Automatically: Through cookies, web beacons, and server logs when you browse jl576.org — see Section 10 for the full Cookie Policy;
• From payment providers: Transaction confirmation data passed back to jl576 from GCash, Maya, BPI, BDO, and other integrated payment gateways following a deposit or withdrawal transaction;
• From identity verification services: jl576 may use third-party KYC technology providers to assist in processing and verifying government ID documents. These providers are contractually bound to process data only on jl576's instructions and in compliance with RA 10173;
• From regulatory sources: PAGCOR exclusion lists and AMLC watchlists used to screen Members as required by law.

Under the Philippine Data Privacy Act, jl576 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil jl576's contractual obligations to you as a registered Member, including account management, payment processing, game delivery, and customer support;
• Legal obligation: Processing required to comply with PAGCOR licensing requirements, anti-money laundering obligations under RA 9160 (Anti-Money Laundering Act), KYC mandates, and the Philippine Data Privacy Act itself;
• Consent: Processing for marketing communications and non-essential cookies is undertaken only where you have provided specific, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing;
• Legitimate interests: Processing undertaken to protect the Platform from fraud, abuse, and security threats, and to improve jl576's services through aggregate analytics — provided these interests are not overridden by your fundamental rights and freedoms.

jl576 uses the personal data we collect for the following purposes:

• Account creation and management: Creating and maintaining your jl576 account, authenticating your identity at each login, and managing account settings and preferences;
• KYC and regulatory compliance: Verifying your identity and age (21+), screening against PAGCOR exclusion lists, and fulfilling AMLC reporting obligations;
• Payment processing: Executing deposit and withdrawal transactions, maintaining wallet balance records, and preventing payment fraud;
• Gaming services: Delivering game content, recording wager and win history, calculating and applying bonus terms, and providing gameplay-related notifications;
• Security and fraud prevention: Detecting, investigating, and preventing unauthorized account access, money laundering, bonus abuse, and other fraudulent or prohibited conduct on the Platform;
• Customer support: Responding to queries, resolving disputes, and following up on support interactions;
• Responsible gaming: Monitoring gameplay patterns to identify members who may benefit from responsible gaming tools, applying self-exclusion requests, and administering deposit and loss limits;
• Legal and regulatory compliance: Responding to requests from PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine authorities;
• Marketing and promotions: Sending promotional offers, game updates, and event notifications — only where you have consented to receive such communications. You may opt out at any time;
• Platform improvement: Analysing aggregate, anonymised usage data to improve Platform performance, game selection, and user experience.

jl576 does not sell, rent, or trade your personal data. We share personal data only in the following circumstances and only to the extent necessary:

jl576 engages trusted third-party service providers who process personal data on our behalf under binding data processing agreements that require them to handle data only according to jl576's instructions and in compliance with RA 10173. These include:

• Payment processors: GCash (GXI), Maya Philippines, BancNet, and other licensed Philippine payment gateways;
• KYC identity verification technology providers;
• Cloud infrastructure and data hosting providers;
• Fraud detection and anti-money laundering screening services;
• Customer support platform providers;
• Certified game providers (PG Soft, Pragmatic Play, Jili, and others) — who receive only the minimum transaction data required to deliver game services.

jl576 is required by law to disclose personal data to the following authorities under specific legal obligations:

• The Philippine Amusement and Gaming Corporation (PAGCOR) — for licensing compliance and player protection;
• The Anti-Money Laundering Council (AMLC) — for covered and suspicious transaction reporting under RA 9160;
• The National Privacy Commission (NPC) — for data breach notifications and regulatory inquiries;
• Philippine courts, law enforcement agencies, and other competent government bodies when required by a valid legal process, court order, or lawful directive.

In the event of a merger, acquisition, restructuring, or sale of jl576 or its assets, personal data may be transferred to the successor entity. jl576 will notify Members of any such transfer and the new privacy policy applicable to their data.

jl576 primarily stores and processes Member data within the Philippines. Where data is processed or stored by service providers located outside the Philippines — for example, cloud infrastructure providers or international game providers — jl576 ensures that such transfers are carried out in compliance with the cross-border data transfer requirements of RA 10173.

Specifically, jl576 implements the following safeguards for international data transfers:

• Contractual clauses with overseas processors requiring them to provide a level of data protection equivalent to that required under Philippine law;
• Transfer of only the minimum data necessary for the specific processing purpose;
• Regular review of processor data protection practices and certifications;
• Registration of cross-border data sharing arrangements with the National Privacy Commission where required.

jl576 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of the active membership and for 5 years following account closure, as required by PAGCOR and anti-money laundering regulations;
• KYC identity documents: Retained for 5 years following account closure in compliance with PAGCOR KYC retention requirements and AMLC obligations under RA 9160;
• Financial transaction records: Retained for 5 years from the date of each transaction as required by AMLC covered transaction reporting rules;
• Gameplay session records: Retained for 2 years from the date of each session for dispute resolution and responsible gaming monitoring purposes;
• Customer support records: Retained for 2 years from the date of the last interaction;
• Marketing consent records: Retained for the duration of the membership and for 1 year following withdrawal of consent;
• Server logs and IP records: Retained for 12 months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, jl576 securely deletes or anonymises personal data in a manner that renders it irrecoverable, unless a specific legal obligation requires continued retention.

jl576 uses cookies and similar tracking technologies to operate the Platform, maintain secure sessions, analyse usage patterns, and where consented, to serve relevant promotional content.

• Essential cookies: Required for the Platform to function — including session authentication tokens, CSRF protection cookies, and load-balancing cookies. These cannot be disabled without breaking core functionality;
• Analytics cookies: Used to collect aggregate, anonymised data on how Members use jl576 — including pages visited, session duration, and navigation paths. This data helps jl576 improve Platform performance;
• Functional cookies: Used to remember your preferences such as language settings, preferred game categories, and notification preferences;
• Marketing cookies: Used only where you have consented, to track promotional campaign performance and deliver relevant jl576 content. These do not track your browsing activity outside jl576.org.

When you first visit jl576.org, a cookie consent banner is displayed. You may accept all cookies, reject non-essential cookies, or configure your preferences by category. You may update your cookie preferences at any time via the cookie settings link in the Platform footer. Note that disabling essential cookies will prevent you from logging in to jl576.

Most modern browsers also provide controls to block or delete cookies at the browser level. Please refer to your browser's help documentation for instructions.

jl576 implements technical and organisational security measures commensurate with the sensitivity of the personal data we hold. Our security infrastructure includes:

• Encryption in transit: All data transmitted between your device and jl576 servers is encrypted using TLS 1.2 or higher;
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is encrypted in storage;
• Password hashing: Member passwords are stored using a one-way cryptographic hash — jl576 cannot recover or read your password in plaintext;
• Access controls: Access to Member personal data is restricted to jl576 staff with a legitimate operational need, enforced through role-based access controls and multi-factor authentication;
• Continuous monitoring: jl576's security systems monitor for unauthorized access attempts, suspicious login patterns, and data exfiltration indicators 24/7;
• Penetration testing: Regular third-party security assessments are conducted on the Platform infrastructure;
• Incident response: jl576 maintains a documented personal data breach response procedure. In the event of a breach likely to result in significant harm to Members, jl576 will notify the National Privacy Commission within 72 hours and affected Members without undue delay, as required by NPC Circular 16-03.

While jl576 employs industry-standard security practices, no online platform can guarantee absolute security. You are also responsible for protecting your own account credentials — see the Account Security provisions in jl576's Terms & Conditions.

Under Republic Act 10173 (the Philippine Data Privacy Act), you have the following rights in respect of your personal data held by jl576. These are enforceable rights — not aspirations. You may exercise them at any time by contacting jl576's Data Privacy Officer.

The jl576 Platform is strictly for individuals aged 21 years and above. jl576 does not knowingly collect personal data from any person under the age of 21. Online gaming services are prohibited for minors under Philippine law and PAGCOR regulations.

All jl576 accounts are subject to KYC age verification. Where jl576 determines or reasonably suspects that an account holder is under 21, the account will be immediately closed, all data will be handled in accordance with applicable legal requirements, and the matter reported to PAGCOR.

If you believe that jl576 has inadvertently collected personal data from a minor, please contact the DPO immediately at the address in Section 16 so that the data can be deleted without delay.

The jl576 Platform may reference or functionally integrate third-party services, including payment gateways (GCash, Maya) and game providers. When you interact with these third-party services, your data is subject to their respective privacy policies.

jl576 is not responsible for the data practices, security standards, or content of third-party services. jl576 selects payment and game provider partners on the basis of their compliance credentials, but cannot guarantee their practices once you are operating within their own platforms or apps.

jl576 recommends that you review the privacy policies of any third-party service you use in conjunction with your jl576 membership — particularly GCash and Maya, which handle your payment credentials independently of jl576.

jl576 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or Platform features. When material changes are made — those that significantly affect your rights or how we handle your data — jl576 will:

• Post a prominent notice on the Platform for at least 14 days prior to the changes taking effect;
• Send an email notification to your registered address where practicable;
• Update the "Effective Date" shown at the top of this Policy.

For non-material updates (administrative corrections, typographical changes, clarifications that do not alter the substance of the Policy), the Policy will be updated without prior notice, and the Effective Date will be revised accordingly.

We encourage you to review this Policy periodically. Your continued use of jl576 following any update constitutes your acknowledgment of the revised Policy.

For any queries, requests, or concerns relating to this Privacy Policy or jl576's data processing practices, please contact jl576's Data Privacy Officer using the details below:

• Data Privacy Officer, jl576
• Email: [email protected] — please mark your subject line as "Data Privacy Request" or "DPO Correspondence" for priority routing.
• Response time: Within 2 business hours for general privacy queries; within 30 calendar days for formal data subject rights requests.

If you believe jl576 has not addressed your privacy concern satisfactorily, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC's contact information and complaint procedures are available on the NPC's official government website.

This Privacy Policy was last reviewed and updated on January 1, 2026. All prior versions of this Policy are superseded by this document.