jlo8 Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") explains how jlo8 ("we," "us," "our," or "the Platform"), a PAGCOR-licensed online gaming operator based in the Republic of the Philippines, collects, uses, discloses, stores, and protects personal information obtained from users ("you," "your," or "Player") of our website, mobile applications, and related services (collectively, "Services").

This Policy applies to all personal data processed by jlo8 in connection with your use of our Services and is issued in compliance with Republic Act No. 10173 (the Data Privacy Act of 2012), its Implementing Rules and Regulations, National Privacy Commission (NPC) Circulars and Advisories, and PAGCOR regulatory requirements. By accessing or using jlo8 Services, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy.

If you do not agree with any aspect of this Policy, you must immediately discontinue use of jlo8 Services and request account closure in accordance with Section 12 of this Policy. Continued use of our Services following any amendment to this Policy constitutes acceptance of such changes.

2. Data Controller and Contact Information

jlo8 acts as the data controller for all personal information collected through our Platform. For inquiries, complaints, or requests regarding your personal data or this Privacy Policy, please contact our Data Protection Officer:

• Data Protection Officer (DPO): jlo8 Privacy Team
• Email: [email protected]
• Alternative Contact: [email protected] (Subject: Data Privacy Inquiry)
• Mailing Address: As registered with PAGCOR (available upon request)
• Response Time: We endeavor to respond to all privacy-related inquiries within fifteen (15) business days.

3. Categories of Personal Information Collected

3.1 Information You Provide Directly

When you register for a jlo8 account, use our Services, or communicate with us, we collect the following categories of personal information:

• Identity Data: Full legal name as it appears on government-issued identification, date of birth, nationality, gender, and government-issued identification numbers (e.g., Philippine passport number, driver's license number, UMID number).
• Contact Data: Residential address, email address, mobile phone number, and any other contact details you provide.
• Financial Data: Payment method details (GCash mobile number, Maya account, bank account numbers), transaction history, deposit and withdrawal records, and proof of payment method ownership documentation.
• Authentication Data: Username, password (stored in hashed and salted format), security questions and answers, and two-factor authentication credentials.
• Verification Documents: Copies of government-issued IDs, proof of address documents (utility bills, bank statements), selfie photographs for identity verification, and source of funds documentation when required for enhanced due diligence.
• Communications: Records of correspondence with customer support including live chat transcripts, emails, and complaint submissions.

3.2 Information Collected Automatically

When you access jlo8 Services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, IDFA, Android Advertising ID), and mobile network information.
• Log Data: IP address, access times and dates, pages viewed, time spent on pages, referring/exit pages, clickstream data, and error logs.
• Location Data: General location derived from IP address to verify compliance with geographic restrictions and regulatory requirements. Precise GPS location if you grant permission through mobile app settings.
• Gameplay Data: Games played, bet amounts, win/loss records, session duration, game preferences, and behavioral patterns used for responsible gaming monitoring and fraud prevention.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar technologies as detailed in Section 10 of this Policy.

3.3 Information from Third-Party Sources

We may obtain additional information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Identity verification services and KYC (Know Your Customer) providers.
• Payment processors (GCash, Maya, partner banks) providing transaction confirmation and anti-fraud data.
• Credit reference agencies and fraud prevention databases (where permitted by law).
• Public databases including PAGCOR self-exclusion lists and government watchlists for anti-money laundering compliance.
• Social media platforms if you choose to link your account or use social login features.

4. Legal Bases and Purposes of Data Processing

4.1 Lawful Bases for Processing

jlo8 processes your personal information only when we have a valid legal basis under the Data Privacy Act of 2012. The legal bases we rely on include:

• Consent: You have given clear, informed, and voluntary consent for specific processing activities (e.g., marketing communications, optional data uses).
• Contract Performance: Processing is necessary to fulfill our contractual obligations under the Terms and Conditions governing your use of jlo8 Services (e.g., account management, transaction processing, customer support).
• Legal Obligation: Processing is required to comply with Philippine laws and regulations including Anti-Money Laundering Act (AMLA), Tax Code, PAGCOR regulatory requirements, and court orders.
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, security, improving Services) provided such interests do not override your fundamental rights and freedoms.

4.2 Specific Processing Purposes

We process your personal information for the following specific purposes:

• Account Management: Creating and maintaining your jlo8 account, authenticating your identity, processing registration and verification, managing account settings and preferences.
• Service Delivery: Providing access to gaming products, processing bets and wagers, calculating and paying winnings, managing bonuses and promotions, delivering customer support.
• Payment Processing: Processing deposits and withdrawals, verifying payment methods, preventing payment fraud, reconciling financial transactions, issuing tax documentation when required.
• Regulatory Compliance: Verifying age and identity to prevent underage gambling, complying with PAGCOR licensing conditions, conducting KYC and AML due diligence, reporting suspicious transactions to appropriate authorities, maintaining records as required by law.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, bonus abuse, money laundering, collusion, and unauthorized access. Monitoring gameplay patterns for signs of problem gambling. Protecting the integrity of games and Platform security.
• Communications: Sending transactional notifications (deposits, withdrawals, account changes), responding to inquiries and complaints, providing customer support, sending service updates and important notices.
• Marketing (with consent): Sending promotional offers, bonus notifications, game recommendations, and newsletters. You may opt out of marketing communications at any time.
• Analytics and Improvement: Analyzing usage patterns to improve Services, developing new products and features, conducting market research, optimizing user experience.
• Legal Proceedings: Establishing, exercising, or defending legal claims, cooperating with law enforcement investigations, complying with court orders and legal processes.

5. Data Sharing and Disclosure

5.1 Service Providers and Processors

jlo8 engages trusted third-party service providers to assist in delivering our Services. These data processors access personal information only to the extent necessary to perform their functions on our behalf and are contractually obligated to maintain confidentiality and security. Categories of service providers include:

• Payment Processors: GCash, Maya, partner banks, and cryptocurrency payment gateways for processing deposits and withdrawals.
• Identity Verification Services: KYC providers conducting identity verification, document validation, and fraud screening.
• Technology Infrastructure: Cloud hosting providers (servers, databases, storage), content delivery networks (CDNs), email service providers, SMS notification services.
• Gaming Providers: Third-party game developers and live casino studios whose games are offered on jlo8 Platform.
• Customer Support Tools: Live chat software, ticketing systems, and CRM platforms used to manage customer inquiries.
• Analytics and Optimization: Website analytics providers, A/B testing platforms, and user behavior analysis tools.
• Marketing Services: Email marketing platforms, SMS marketing services (only for users who have consented to marketing communications).

5.2 Regulatory and Legal Disclosures

We may disclose your personal information to government authorities, regulators, and law enforcement agencies when required or permitted by law:

• Philippine Amusement and Gaming Corporation (PAGCOR) for licensing compliance and regulatory audits.
• Anti-Money Laundering Council (AMLC) and Financial Intelligence Unit for suspicious transaction reports.
• Bureau of Internal Revenue (BIR) for tax reporting on winnings exceeding statutory thresholds.
• National Privacy Commission (NPC) in response to data breach notifications or investigations.
• Law enforcement agencies pursuant to valid court orders, subpoenas, or lawful investigations.
• Other regulatory bodies with jurisdiction over gaming activities in the Philippines.

5.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, bankruptcy, or sale of all or substantially all of jlo8's assets, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and/or prominent notice on our website before such transfer, and the acquiring entity will be bound by this Privacy Policy or an equivalent policy.

5.4 What We Do Not Do

jlo8 does NOT:

• Sell, rent, or lease your personal information to third parties for their marketing purposes.
• Share your personal data with affiliates or partners for purposes unrelated to providing jlo8 Services.
• Publicly disclose your personal information except as required by law or with your explicit consent.
• Transfer personal data outside the Philippines without implementing appropriate safeguards as required by the Data Privacy Act.

6. International Data Transfers

jlo8 primarily stores and processes personal data within the Philippines. However, some of our service providers (such as cloud infrastructure providers and gaming platform suppliers) may process data in servers located outside the Philippines. When we transfer personal data internationally, we ensure adequate protection through:

• Contractual clauses requiring data processors to comply with Philippine Data Privacy Act standards.
• Verification that the recipient country has been deemed by the National Privacy Commission to provide adequate data protection.
• Implementation of appropriate technical and organizational security measures.
• Obtaining your explicit consent for cross-border transfers where required by law.

7. Data Security Measures

jlo8 implements comprehensive technical, organizational, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and jlo8 servers is encrypted using TLS 1.2 or higher (256-bit SSL certificates). Personal data stored in our databases is encrypted at rest using AES-256 encryption.
• Access Controls: Role-based access controls ensure that only authorized personnel with legitimate business need can access personal information. All access is logged and audited.
• Authentication: Strong password requirements, password hashing using bcrypt algorithms, optional two-factor authentication (2FA), and session management controls prevent unauthorized account access.
• Infrastructure Security: Firewalls, intrusion detection/prevention systems, DDoS protection, regular security patches, and vulnerability assessments protect our infrastructure.
• Security Monitoring: 24/7 monitoring for suspicious activity, automated alerts for anomalous patterns, regular security audits, and penetration testing by independent security firms.
• Staff Training: All employees receive mandatory data privacy and security training, sign confidentiality agreements, and undergo background checks.
• Incident Response: Documented data breach response procedures to promptly detect, contain, investigate, and notify affected users and authorities as required by NPC regulations.

Despite our best efforts, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us of any unauthorized access.

8. Data Retention

jlo8 retains your personal information only for as long as necessary to fulfill the purposes outlined in this Policy and to comply with legal and regulatory obligations:

• Active Accounts: Personal data is retained for the duration of your account's active status and for as long as you continue to use jlo8 Services.
• Closed Accounts: Following voluntary account closure, personal data is retained for five (5) years to comply with PAGCOR record-keeping requirements, tax obligations, and to resolve any disputes or legal claims that may arise.
• Transaction Records: Financial transaction records (deposits, withdrawals, wagers, winnings) are retained for seven (7) years in accordance with Anti-Money Laundering Act requirements.
• Marketing Data: If you opt out of marketing communications, we will retain a record of your opt-out preference indefinitely to honor your request, but will delete other marketing-related personal data within thirty (30) days.
• Legal Hold: If personal data is subject to ongoing litigation, regulatory investigation, or legal hold request, retention will continue until such matters are resolved.

Upon expiration of retention periods, personal data is securely deleted or anonymized in accordance with industry-standard data destruction practices.

9. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Be Informed: You have the right to know what personal data we collect, how we use it, and who we share it with. This Privacy Policy serves as our primary transparency mechanism.
• Right to Access: You may request a copy of the personal information we hold about you. We will provide this within fifteen (15) business days in a commonly used electronic format.
• Right to Rectification: If any personal information we hold is inaccurate, incomplete, or outdated, you may request correction. You can update most information directly through your account settings.
• Right to Erasure (Right to Be Forgotten): You may request deletion of your personal data when it is no longer necessary for the purposes collected, consent is withdrawn, or processing is unlawful. Note that we may be unable to fully delete data if retention is required by law.
• Right to Object: You may object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests. We will cease such processing unless we demonstrate compelling legitimate grounds.
• Right to Data Portability: You have the right to receive personal data you provided to us in a structured, commonly used, machine-readable format and to transmit it to another data controller.
• Right to Suspend or Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing based on consent before withdrawal.
• Right to Lodge a Complaint: If you believe we have violated your data privacy rights, you may file a complaint with the National Privacy Commission at www.privacy.gov.ph.

To exercise any of these rights, contact our Data Protection Officer at [email protected] with your request and proof of identity. We will respond within fifteen (15) business days and provide the requested action or explain any limitations on our ability to comply.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit jlo8. They help us recognize your device, remember your preferences, and improve your user experience. Similar technologies include web beacons, pixel tags, and local storage.

10.2 Types of Cookies We Use

• Essential Cookies: Required for core Platform functionality including user authentication, session management, security, and fraud prevention. These cookies cannot be disabled without impairing your ability to use jlo8 Services.
• Performance Cookies: Collect anonymous information about how you use jlo8 (pages visited, time spent, errors encountered) to help us optimize performance and user experience.
• Functionality Cookies: Remember your preferences (language settings, display preferences) to provide enhanced personalized features.
• Marketing Cookies (with consent): Track your browsing across jlo8 to deliver targeted advertising and measure campaign effectiveness. Used only if you consent to marketing communications.

10.3 Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies will prevent you from using jlo8 Services. For more information on managing cookies, visit your browser's help section or www.allaboutcookies.org.

11. Children's Privacy

jlo8 Services are strictly prohibited for individuals under twenty-one (21) years of age. We do not knowingly collect personal information from minors. If we become aware that a person under 21 has provided personal information, we will immediately delete such information, close the account, and take appropriate action. Parents or guardians who believe their child has provided personal information to jlo8 should contact us immediately at [email protected].

12. Account Closure and Data Deletion

You may request permanent account closure at any time by contacting customer support. Upon closure:

• Your account will be permanently deactivated and you will lose access to all Services.
• Any remaining account balance must be withdrawn prior to closure (subject to wagering requirements and verification).
• Active bonuses will be forfeited.
• Personal data will be retained for the minimum period required by law (typically five years from closure for PAGCOR compliance), then securely deleted.
• You will be removed from all marketing communications within seven (7) business days.
• We will retain minimal information (such as email address hash) to prevent re-registration if your account was closed due to Terms violations.

13. Changes to This Privacy Policy

jlo8 reserves the right to modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Services offerings. Material changes will be communicated through:

• Email notification to your registered email address.
• Prominent banner notice on the jlo8 website and mobile app.
• In-account notification upon next login.

The "Last Updated" date at the top of this Policy indicates the most recent revision. Your continued use of jlo8 Services after any amendment constitutes acceptance of the revised Policy. If you do not agree with changes, you must discontinue using our Services and request account closure.

14. Contact and Complaints

For questions, concerns, or to exercise your privacy rights, please contact:

• Data Protection Officer: [email protected]
• Customer Support: [email protected] | Live Chat available 24/7
• National Privacy Commission: If your privacy concerns are not resolved to your satisfaction, you may file a complaint with the NPC at [email protected] or visit www.privacy.gov.ph.

jlo8 is committed to resolving privacy complaints promptly and transparently. We will acknowledge your complaint within forty-eight (48) hours and provide a substantive response within fifteen (15) business days.