jlji Casino Privacy Policy

In this Privacy Policy, the following terms shall bear the meanings set out below:

• "jlji," "we," "us," "our," or "the Company" refers to the operator of jlji Casino and the jlji.asia website and associated services.
• "Platform" means the jlji.asia website, all subdomains, and any associated software through which gaming and account services are accessed.
• "Player," "you," "your" refers to any individual who has registered an Account on the Platform or who accesses the Platform in any capacity.
• "Personal Data" means any information that identifies or can reasonably be used to identify a natural person, consistent with the definition under the Data Privacy Act of 2012.
• "Sensitive Personal Information" has the meaning assigned to it under Section 3(l) of the Data Privacy Act of 2012 and includes information about race, ethnic origin, health, education, and government-issued identification numbers.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, disclosure, and deletion.
• "Data Protection Officer" or "DPO" means the officer designated by jlji to oversee compliance with data privacy obligations under the Data Privacy Act of 2012.
• "NPC" means the National Privacy Commission of the Philippines.
• "DPA 2012" means Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations.

This Privacy Policy applies to all Personal Data collected by jlji in connection with your use of the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your browsing of the jlji.asia website.

This Policy applies to all current and former registered Players, prospective registrants who have initiated but not completed registration, and any visitor to the Platform regardless of whether they hold an Account.

This Policy should be read together with jlji's Terms and Conditions, which are incorporated by reference. In the event of any conflict between this Privacy Policy and the Terms and Conditions on a data privacy matter, this Privacy Policy shall prevail.

jlji collects Personal Data from you directly when you provide it during registration, verification, or support interactions, and automatically through your use of the Platform. The categories of data collected are set out in the table below.

3.1 Data We Do Not Collect

jlji does not collect full payment card numbers (PAN), CVV codes, or full bank account credentials. Payment processing is handled through the secure APIs of your chosen Philippine payment provider — GCash, PayMaya, or your bank's online platform — and jlji receives only the transaction reference and confirmation status, not your raw payment credentials.

jlji uses the Personal Data collected for the following purposes:

• Account Management: To create, maintain, and administer your jlji Account, verify your identity and age (KYC), and authenticate your login sessions;
• Service Delivery: To provide access to Games, process deposits and withdrawals, calculate and credit winnings, and manage your VIP loyalty points and tier status;
• Regulatory Compliance: To fulfil obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine law — including age verification, source-of-funds checks, and suspicious transaction reporting to AMLC;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling behaviour and to apply responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion settings at your request;
• Customer Support: To respond to your inquiries, resolve disputes, and manage complaints through our live chat and email channels;
• Security and Fraud Prevention: To detect and prevent fraudulent activity, unauthorized Account access, money laundering, and Platform abuse;
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates to Players who have consented to receive such communications. You may withdraw this consent at any time through your Account settings or by contacting support;
• Platform Improvement: To analyze usage patterns, troubleshoot technical issues, and develop new features and services on the jlji Platform;
• Legal Proceedings: To establish, exercise, or defend legal claims in any jurisdiction where jlji operates.

jlji processes your Personal Data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of your Account agreement with jlji, including providing access to Games and processing financial transactions;
• Legal Obligation: Processing is required to comply with applicable Philippine law, including PAGCOR regulations, AMLA obligations, and the Data Privacy Act itself;
• Legitimate Interests: Processing is necessary for jlji's legitimate interests in operating a secure and compliant gaming platform, preventing fraud, and protecting the rights and safety of all Players;
• Consent: Where jlji relies on your consent — such as for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jlji uses cookies and similar tracking technologies on the Platform to deliver and improve our services. Cookies are small text files placed on your device by your browser when you visit the Platform. They cannot execute programs or deliver viruses and do not contain Personal Data in isolation.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your authenticated session state and applying your security settings. These cookies cannot be disabled;
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming configurations, and last-played game categories;
• Analytics Cookies: Used to understand how Players interact with the Platform — which games are most popular, how long sessions last, and where technical issues occur. This data is aggregated and does not identify individual Players;
• Marketing Cookies: Used to measure the effectiveness of promotional campaigns. These are only active where you have consented to marketing communications.

6.2 Managing Cookies

You may configure your browser to reject or delete cookies. However, disabling strictly necessary cookies will impair your ability to use the Platform, including preventing you from logging in. Instructions for managing cookies are available in your browser's help documentation.

jlji does not sell, rent, or trade your Personal Data to any third party for commercial purposes. jlji may share your Personal Data only in the following circumstances:

• Payment Processors: Your financial data is shared with Philippine payment service providers — GCash, PayMaya, BDO, BPI, Metrobank, and InstaPay — solely to process your deposit and withdrawal transactions. Each payment provider is subject to its own privacy policy and data security standards;
• Technology Service Providers: jlji engages third-party vendors to provide cloud hosting, identity verification (eKYC), game content delivery, fraud detection, and customer support platform services. These vendors are bound by data processing agreements and may only use your data to provide services to jlji;
• Regulatory Authorities: jlji is required by law to disclose certain data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory or law enforcement authorities upon lawful request or as required by mandatory reporting obligations;
• Corporate Transactions: In the event of a merger, acquisition, or sale of jlji's business assets, your Personal Data may be transferred to the acquiring entity, subject to that entity's commitment to maintain privacy protections equivalent to those described in this Policy;
• Legal Proceedings: jlji may disclose your Personal Data where required by court order, subpoena, or other valid legal process issued by a Philippine court or competent authority.

jlji retains your Personal Data for as long as your Account remains active and for such additional periods as are required by applicable law or necessary for jlji's legitimate operational purposes. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, in compliance with PAGCOR and AMLA record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of ten (10) years in compliance with AMLA and BIR (Bureau of Internal Revenue) record-keeping obligations applicable to gaming operators;
• Gaming Session Logs: Retained for a minimum of three (3) years for dispute resolution, regulatory audit, and responsible gaming monitoring purposes;
• Customer Support Records: Retained for a minimum of three (3) years following the closure of the relevant support interaction;
• Marketing Consent Records: Retained for the duration of your Account and for a minimum of one (1) year following Account closure to demonstrate consent status.

When your Personal Data is no longer required for any lawful purpose, jlji will delete or anonymize it in a secure manner. Data that has been anonymized so that it can no longer identify you may be retained indefinitely for aggregated analytics purposes.

jlji implements a range of technical, organizational, and physical security measures to protect your Personal Data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and jlji servers is encrypted using SSL/TLS protocols. The padlock indicator in your browser's address bar confirms this protection is active during your session;
• Encryption at Rest: Sensitive Personal Data stored on jlji servers — including KYC documents and financial records — is encrypted using industry-standard algorithms;
• Access Controls: Access to Personal Data is restricted on a need-to-know basis. jlji staff and service providers are granted only the minimum level of data access required to perform their designated functions;
• Two-Factor Authentication: jlji offers 2FA for Player Account access and requires it for administrative access to backend systems containing Personal Data;
• Penetration Testing: jlji's Platform undergoes regular security assessments and penetration testing by qualified third-party security professionals to identify and remediate vulnerabilities;
• Incident Response: jlji maintains a documented data breach response procedure that includes detection, containment, assessment, notification, and post-incident review stages.

While jlji implements robust security measures, no method of electronic transmission or storage is 100% secure. You also bear responsibility for maintaining the security of your Account credentials as described in the Terms and Conditions.

Under the Data Privacy Act of 2012, you have the following rights in relation to your Personal Data held by jlji. To exercise any of these rights, submit a written request to jlji's Data Protection Officer using the contact details in Section 14.

• Right to Be Informed: You have the right to be informed of how your Personal Data is being processed, which this Privacy Policy provides;
• Right of Access: You have the right to obtain a copy of the Personal Data jlji holds about you, together with information about how it is processed;
• Right to Rectification: You have the right to request correction of inaccurate or incomplete Personal Data. Basic profile information can be updated directly in Account settings;
• Right to Erasure: You have the right to request deletion of your Personal Data where it is no longer necessary for the purpose for which it was collected, subject to jlji's legal record-keeping obligations under PAGCOR and AMLA regulations;
• Right to Data Portability: You have the right to receive your Personal Data in a structured, commonly used, machine-readable format where technically feasible;
• Right to Object: You have the right to object to jlji processing your Personal Data for direct marketing purposes at any time. You may withdraw marketing consent through Account settings or by contacting support;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe jlji has not handled your Personal Data in accordance with the DPA 2012.

jlji will respond to data subject requests within fifteen (15) business days of receipt. Where a request is complex or voluminous, jlji may extend this period by a further thirty (30) days, with written notice provided to you within the initial fifteen-day period.

jlji primarily stores and processes your Personal Data on servers located within the Philippines. Where it is necessary to transfer your Personal Data to service providers or infrastructure located outside the Philippines — for example, cloud hosting providers or game content delivery networks — jlji will ensure that such transfers are conducted in compliance with the Data Privacy Act of 2012 and NPC regulations governing cross-border data flows.

Such transfers occur only where:

• The recipient country is recognized as providing an adequate level of data protection; or
• Appropriate contractual safeguards are in place between jlji and the recipient, such as data processing agreements incorporating standard contractual clauses; or
• The transfer is necessary for the performance of your Account agreement with jlji, including processing your payment transactions through global payment infrastructure.

If jlji becomes aware that it has inadvertently collected Personal Data from a person under the age of 21, jlji will immediately suspend the associated Account, delete the Personal Data to the extent permitted by law, and report the registration attempt to PAGCOR as required by applicable regulations.

If you are the parent or guardian of a person under 21 who you believe has registered on the jlji Platform, please contact our DPO immediately using the contact details in Section 14. jlji will take all necessary steps to remediate the situation promptly.

jlji reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The date at the top of this Policy reflects the most recent revision.

Where material changes are made to this Policy — changes that substantively affect how your Personal Data is collected, used, or shared — jlji will provide notice through one or more of the following methods:

• A prominent notice on the Platform login page or within your Account dashboard;
• A direct notification to your registered email address;
• An in-account notification visible upon your next login.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of and agreement to the revised Privacy Policy. Where your consent is required for any new processing activity, jlji will obtain that consent before proceeding.

jlji has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a privacy concern, please contact the jlji DPO through the following channels:

• Live Chat: Available 24/7 through your authenticated jlji Account dashboard. Mark your inquiry as "Privacy / Data Request" for routing to the appropriate team;
• Email: [email protected] — for formal written data subject requests and privacy complaints. Include "DPO Request" in the subject line;

jlji aims to acknowledge all data subject requests within five (5) business days and to resolve them within the timeframes specified in Section 10. For urgent privacy concerns — such as suspected unauthorized access to your Account — contact support via live chat immediately.