Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how jlaaa Casino ("jlaaa," "we," "us," or "our") collects, uses, processes, stores, and protects the personal information of individuals ("you," "your," or "Data Subject") who access or use the jlaaa Casino platform available at jlaaa.app and all associated services, features, and communications (collectively, the "Platform").

jlaaa Casino is fully committed to protecting the privacy and personal data of all Filipino players in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account, accessing the jlaaa Platform, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the jlaaa Platform.

This Policy should be read together with jlaaa's Terms & Conditions and Responsible Gaming Policy.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, jlaaa Casino acts as the Personal Information Controller (PIC) with respect to the personal data collected through the jlaaa Platform. As PIC, jlaaa determines the purposes and means of processing your personal data.

jlaaa has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the DPA and this Privacy Policy. You may contact our DPO directly for any privacy-related concerns using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

jlaaa collects the following categories of personal data from registered players and Platform users:

3.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth and age verification information
• Philippine mobile number and email address
• Residential address (barangay, city/municipality, province)
• Government-issued ID type and number (passport, driver's license, UMID, PhilSys ID, Voter's ID, SSS ID)
• Selfie or biometric photograph for identity verification

3.2 Financial Data

• GCash or Maya wallet account details (registered name and mobile number)
• Bank account details for bank transfer transactions (account name, bank name, account number)
• Debit card details (card number, expiry date — stored in tokenized form only)
• Transaction history, including deposits, withdrawals, and wager records
• Source of funds documentation where required by AMLC regulations

3.3 Gaming & Behavioral Data

• Game play history, including games played, wager amounts, wins, and losses
• Session duration, login times, and frequency of play
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)
• Customer support interaction records and chat transcripts

3.4 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookies and similar tracking technology data (see Section 10)
• Platform access logs and error reports

4. How We Collect Your Data

jlaaa collects your personal data through the following means:

4.1 Direct Collection

Information you provide directly to jlaaa when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or respond to surveys. This includes all information entered into forms on the jlaaa Platform.

4.2 Automated Collection

Technical and behavioral data collected automatically when you access and use the jlaaa Platform, including through cookies, web beacons, server logs, and similar tracking technologies. This data is collected passively as part of normal Platform operation.

4.3 Third-Party Sources

jlaaa may receive personal data about you from third-party sources, including:

• Payment processors (GCash, Maya, banks) for transaction verification
• Identity verification service providers for KYC processing
• Fraud prevention and anti-money laundering screening services
• PAGCOR and other regulatory bodies as required by law

5. How We Use Your Personal Data

jlaaa uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your jlaaa player account
• Identity Verification (KYC): Verifying your identity and age (21+) as required by PAGCOR regulations
• Payment Processing: Processing deposits, withdrawals, and refunds through your chosen payment method
• Game Provision: Delivering casino games, tracking game results, and calculating winnings
• Bonus & Promotions: Administering bonuses, free spins, and promotional offers
• Customer Support: Responding to your inquiries, complaints, and support requests
• Regulatory Compliance: Meeting obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act
• Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, cheating, and money laundering
• Responsible Gaming: Monitoring gaming behavior to identify problem gambling indicators and enforcing self-exclusion requests
• Platform Improvement: Analyzing usage patterns to improve the jlaaa Platform's performance, features, and user experience
• Communications: Sending you account notifications, security alerts, and (with your consent) promotional communications

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, jlaaa processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you (the jlaaa Terms & Conditions), including account management, game provision, and payment processing
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent that you may withdraw at any time

7. Data Sharing & Disclosure

jlaaa does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

7.1 Service Providers

Third-party vendors who provide services on our behalf, including payment processors (GCash, Maya, banks), KYC and identity verification providers, cloud hosting and infrastructure providers, customer support platform providers, and fraud detection services. All service providers are contractually bound to process your data only on jlaaa's instructions and in compliance with the DPA.

7.2 Regulatory & Law Enforcement Authorities

jlaaa may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Philippine National Police (PNP), or other competent authorities where required by law, court order, or regulatory directive. Such disclosures will be made without prior notice to you where legally required or permitted.

7.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of assets involving jlaaa Casino, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance where practicable.

8. Data Retention

jlaaa retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

Upon expiry of the applicable retention period, jlaaa will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.

9. Data Security

jlaaa Casino implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the jlaaa Platform is encrypted using industry-standard SSL/TLS protocols
• Data Encryption at Rest: Sensitive personal and financial data stored in jlaaa's systems is encrypted at rest using AES-256 encryption
• Two-Factor Authentication (2FA): Available for all jlaaa player accounts to add an additional layer of login security
• Access Controls: Strict role-based access controls ensure that only authorized jlaaa personnel can access personal data, on a need-to-know basis
• Regular Security Audits: jlaaa's systems undergo regular penetration testing and security audits by independent cybersecurity firms
• Payment Card Tokenization: Debit card details are stored in tokenized form only — jlaaa never stores full card numbers in plain text
• Incident Response Plan: jlaaa maintains a documented data breach response plan and will notify affected players and the NPC within 72 hours of discovering a personal data breach, as required by NPC Circular No. 16-03

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the jlaaa Platform. They help us recognize your device, remember your preferences, keep you logged in, and analyze how you use the Platform. jlaaa uses both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device for a set period).

10.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled. They include session management, security tokens, and login state cookies.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how players use the jlaaa Platform so we can improve performance and user experience. Data collected is aggregated and anonymized.
• Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content. You may withdraw consent at any time via your account cookie settings.

10.3 Managing Cookies

You can manage your cookie preferences through the jlaaa cookie consent banner displayed on your first visit, or through your browser settings. Note that disabling strictly necessary cookies may impair the functionality of the jlaaa Platform.

11. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jlaaa Casino:

• Right to Be Informed: The right to know what personal data jlaaa collects about you and how it is processed — which is the purpose of this Privacy Policy.
• Right to Access: The right to request a copy of the personal data jlaaa holds about you, including information on how it has been processed.
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal data in your jlaaa account.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jlaaa's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact jlaaa's Data Protection Officer using the contact details in Section 15. jlaaa will respond to all verified data subject requests within fifteen (15) business days of receipt, as required by the DPA.

12. Children's Privacy

The jlaaa Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. jlaaa does not knowingly collect personal data from individuals under the age of 21.

If jlaaa discovers that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, void any transactions, and securely delete all personal data collected from that individual. If you believe that a minor has registered a jlaaa account, please contact our support team immediately.

13. Cross-Border Data Transfers

jlaaa Casino's primary data processing infrastructure is located within the Philippines. However, some of our third-party service providers — including cloud hosting, KYC verification, and fraud prevention providers — may process your personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, jlaaa ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards include:

• Contractual clauses requiring overseas recipients to comply with DPA standards
• Transfers only to jurisdictions with adequate data protection laws as recognized by the NPC
• Binding corporate rules where applicable within corporate group structures

You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting our Data Protection Officer.

14. Changes to This Privacy Policy

jlaaa Casino reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, jlaaa will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page reflects when this Policy was most recently revised. We encourage you to review this Privacy Policy periodically. Your continued use of the jlaaa Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms.

15. Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by jlaaa Casino, please contact our Data Protection Officer:

jlaaa aims to resolve all privacy-related inquiries promptly and fairly. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.