jlj2 Casino – Privacy Policy

1. Who We Are — Data Controller

1.1 jlj2 is the data controller responsible for personal information collected through the jlj2.org platform and all associated Services. As data controller, jlj2 determines the purposes and means by which your personal information is processed.

1.2 jlj2 operates in the Philippines and is subject to Republic Act No. 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC) of the Philippines.

1.3 jlj2 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for the DPO are provided in Section 13.

2. Personal Data We Collect

jlj2 collects personal data through different channels and at different points in the player relationship. The categories of data collected include:

2.1 jlj2 does not collect sensitive personal information (as defined under RA 10173) such as health data, religious affiliation, or political views, except where required by applicable law or regulation for compliance purposes.

2.2 Where you provide personal data relating to third parties (for example, a nominated next-of-kin for account recovery purposes), you confirm that you have obtained that person's consent to share their data with jlj2 for the stated purpose.

3. How jlj2 Uses Your Personal Data

jlj2 uses personal data for the following purposes:

• Account creation and management: To register your account, verify your identity, maintain your profile, and authenticate your jlj2 login sessions.
• Service delivery: To enable gameplay, process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and Visa/Mastercard, and to credit winnings to your account.
• KYC and regulatory compliance: To verify your age (21+), identity, and source of funds as required by PAGCOR and anti-money laundering regulations applicable in the Philippines.
• Fraud prevention and security: To detect suspicious login activity, monitor for multi-accounting, and investigate potential bonus abuse or fraudulent transactions.
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance with your jlj2 account.
• Platform improvement: To analyse aggregated usage patterns, improve game performance, and develop new features based on player behaviour data (always processed in aggregated or anonymized form where possible).
• Marketing communications: To send promotional offers and bonus notifications to players who have opted in. Players may opt out at any time via account settings or by contacting support.
• Responsible gaming: To monitor for signs of problem gambling behaviour and to apply responsible gaming limits, self-exclusion requests, and intervention tools where applicable.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, jlj2 processes your personal information on the following legal bases:

• 4.1 Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your jlj2 account and provide the Services you have requested.
• 4.2 Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• 4.3 Legitimate Interests: Processing is necessary for jlj2's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests do not override your rights.
• 4.4 Consent: For marketing communications and non-essential cookies, jlj2 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting prior processing.

5. Data Sharing & Third-Party Disclosure

5.1 jlj2 does not sell, rent, or trade your personal information to third parties for their own commercial or marketing purposes.

5.2 jlj2 may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to data processing agreements:

• Payment processors: GCash (GXI), PayMaya/Maya Bank, BPI, BDO, Metrobank — for transaction processing and verification.
• Game software providers: Third-party RNG game studios and live dealer studios whose games are hosted on jlj2, solely for game session management and dispute resolution.
• Identity verification providers: Third-party KYC service providers engaged to assist with document verification for regulatory compliance.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and law enforcement agencies where disclosure is required by applicable Philippine law or a valid legal order.
• IT and security service providers: Cloud infrastructure, cybersecurity monitoring, and fraud detection service providers who process data on jlj2's behalf under strict data processing agreements.

5.3 All third-party service providers engaged by jlj2 are required to process personal data only on jlj2's documented instructions and are prohibited from using it for any other purpose.

6. Data Security Measures

6.1 jlj2 implements technical and organizational security measures designed to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and jlj2 servers.
• Bcrypt password hashing with individual salt values — passwords are never stored in readable form.
• Two-Factor Authentication (2FA) available to all players, strongly recommended for account security.
• Role-based access controls restricting jlj2 staff access to personal data on a strict need-to-know basis.
• Real-time suspicious login detection with SMS alerts to the registered Philippine mobile number.
• Regular security audits and penetration testing of the jlj2 platform infrastructure.

6.2 In the event of a personal data breach that is likely to result in risk to your rights and freedoms, jlj2 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay as required under RA 10173.

7. Cookies & Tracking Technologies

7.1 jlj2 uses cookies and similar technologies to operate and improve the platform. The following cookie categories are used:

• Strictly Necessary Cookies: Required for jlj2 login session management and security. These cannot be disabled without affecting core platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized data about how players interact with jlj2, such as pages visited and session duration, to improve platform performance. Activated only with your consent.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limits. These improve your experience but are not strictly required.

7.2 You may control non-essential cookies via your browser settings. Please note that disabling certain cookies may affect the functionality of jlj2 features.

7.3 jlj2 does not use cookies to deliver third-party advertising or to track your activity across other websites.

8. Data Retention

8.1 jlj2 retains personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law, including PAGCOR regulations and AMLA record-keeping requirements.

8.2 As a general principle, account and transaction records are retained for a minimum of five (5) years following account closure or the last transaction, consistent with AMLA record-keeping obligations. KYC documents are retained for the same minimum period.

8.3 Marketing preference data and communication logs are retained until you withdraw consent or for three (3) years from the last interaction, whichever is earlier.

8.4 Upon expiry of the relevant retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and this Policy, you have the following rights with respect to your personal data held by jlj2:

• Right to be Informed: To know the details of how jlj2 collects and processes your personal data — which this Policy fulfils.
• Right of Access: To request a copy of the personal data jlj2 holds about you, subject to identity verification.
• Right to Rectification: To correct inaccurate or incomplete personal data in your jlj2 account.
• Right to Erasure: To request deletion of your personal data, subject to jlj2's legal obligations to retain certain records (e.g., AMLA requirements).
• Right to Object: To object to processing of your personal data for direct marketing purposes at any time. To opt out of marketing, update your preferences in account settings or contact support.
• Right to Data Portability: To receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission of the Philippines if you believe jlj2 has processed your data in violation of RA 10173.

To exercise any of these rights, contact jlj2's Data Protection Officer at the address in Section 13. jlj2 will respond to verified requests within thirty (30) calendar days.

10. Children's Privacy — 21+ Platform

10.1 🔞 jlj2 is strictly an adult platform restricted to persons aged 21 years and older. jlj2 does not knowingly collect personal data from persons under 21 years of age.

10.2 If jlj2 discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all data will be deleted, and any deposited funds will be returned to the source payment method.

10.3 If you believe that a minor has registered on jlj2, please notify us immediately via the contact details in Section 13 so that we can take prompt corrective action.

11. Cross-Border Data Transfers

11.1 Some of jlj2's service providers (including cloud infrastructure and game software providers) may be located outside the Philippines. Where personal data is transferred outside the Philippines, jlj2 ensures that appropriate safeguards are in place, including data processing agreements that impose obligations equivalent to those under RA 10173.

11.2 jlj2 does not transfer personal data to jurisdictions with inadequate data protection standards without implementing contractual safeguards approved by or consistent with NPC guidelines.

12. Changes to This Privacy Policy

12.1 jlj2 may update this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements, or platform features. Material changes will be communicated to registered players via email or platform notification at least seven (7) days before taking effect.

12.2 The current effective version of this Policy is always available at jlj2.org/privacy-policy. The "Last Updated" date at the top of this page indicates the most recent revision.

12.3 Continued use of the jlj2 platform following notification of changes to this Policy constitutes your acceptance of the revised terms.

13. Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, you may contact jlj2's Data Protection Officer: