jl 58 Privacy Policy

This Privacy Policy applies to all personal data processed by jl 58 ("we", "us", "our", "the Platform") in connection with your use of jl58.bid and any related services, mobile interfaces, promotional communications, and customer support interactions.

jl 58 acts as the Personal Information Controller as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"). We are responsible for determining the purposes and means of processing your personal data and for ensuring that all processing is conducted in accordance with the DPA and applicable PAGCOR regulatory requirements.

This Policy applies to current and former Members, visitors to the Platform, and individuals who contact jl 58 support. It does not apply to data practices of third-party websites that may be linked to or from the Platform — though as a general rule, jl 58 does not include outbound links to third-party websites in its Platform.

jl 58 collects the following categories of personal data in the ordinary course of operating the Platform:

jl 58 does not collect sensitive personal information beyond what is strictly required for identity verification (such as government ID numbers) unless mandated by specific regulatory requirements. We do not collect biometric data beyond liveness check photographs required for KYC.

jl 58 collects personal data through the following channels:

• Directly from you — during account registration, KYC submission, deposit/withdrawal requests, support contact, and preference settings;
• Automatically through platform usage — via server logs, cookies, session tracking, and analytics tools that record how you interact with the Platform;
• From payment processors — GCash, PayMaya, and banking partners share confirmation data for deposit and withdrawal transactions, limited to what is necessary to process the transaction;
• From identity verification services — third-party KYC/AML screening providers may cross-reference submitted identity data against watchlists and public records as required by PAGCOR and AMLC regulations;
• From your device — mobile device identifiers, IP address, and geolocation data (city-level) are collected automatically to support fraud detection and regulatory compliance.

jl 58 processes your personal data only for specified, explicit, and legitimate purposes. The following table sets out the primary processing activities and their applicable legal bases under the DPA:

jl 58 does not sell, rent, or trade your personal data. We share data only in the following circumstances, and only to the minimum extent necessary:

• Regulatory authorities — PAGCOR, AMLC, the National Privacy Commission, and other Philippine government bodies where disclosure is required by law or valid legal process;
• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and USDT infrastructure providers, solely for the purpose of processing your authorized financial transactions;
• KYC/AML service providers — third-party identity verification and watchlist screening providers engaged under data processing agreements that impose equivalent privacy protections;
• Game technology providers — game studios and live casino operators (e.g., JILI Games, live dealer studios) receive anonymized session data for game performance purposes only; they do not receive identifiable personal information;
• Platform infrastructure providers — cloud hosting, CDN, and security service providers operating under data processing agreements, providing services necessary to operate the Platform;
• Professional advisers — lawyers, auditors, and compliance consultants under confidentiality obligations where necessary for legal or regulatory purposes.

jl 58 requires all third-party processors to implement appropriate technical and organizational security measures and prohibits them from using your data for their own independent purposes.

jl 58's primary data processing infrastructure is located within the Philippines or in jurisdictions that provide an adequate level of data protection as recognized by the National Privacy Commission. Where personal data is transferred to processors located outside the Philippines (for example, cloud infrastructure providers), jl 58 ensures such transfers are governed by data processing agreements that incorporate the standard contractual clauses recognized by the NPC or equivalent safeguards.

By using the jl 58 Platform, you acknowledge that your data may be processed in data centers outside your country of residence, subject to the protections described in this Policy.

jl 58 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention guidelines apply:

• Active account data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR recordkeeping requirements;
• KYC and identity documents — retained for a minimum of five (5) years after the end of the business relationship, in compliance with AMLA requirements;
• Financial transaction records — retained for a minimum of five (5) years after the transaction date, as required by AMLC and BIR regulations;
• Support communications — retained for two (2) years from the date of the last interaction, unless related to an ongoing dispute;
• Marketing consent records — retained for the duration of the consent or until withdrawal, plus three (3) years for evidentiary purposes;
• Technical/log data — retained for a maximum of twelve (12) months unless required for ongoing fraud or security investigations.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with jl 58's data lifecycle management procedures.

jl 58 implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and jl 58 servers uses TLS 1.2 or higher (SSL);
• Encryption at rest: Sensitive personal data — including identity documents, payment details, and account credentials — is stored using AES-256 or equivalent encryption;
• Access controls: Personal data access is restricted to authorized jl 58 personnel on a need-to-know basis. Access is logged and subject to periodic review;
• Multi-factor authentication: Administrative access to systems containing personal data requires multi-factor authentication;
• Intrusion detection: Platform infrastructure is monitored for unauthorized access, anomalous activity, and attempted security breaches on a continuous basis;
• Security testing: jl 58 conducts regular vulnerability assessments and penetration testing of its Platform and supporting infrastructure.

In the event of a personal data breach that is likely to result in risk to your rights and freedoms, jl 58 will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will notify affected Members without undue delay, as required under the DPA.

jl 58 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are used:

• Strictly necessary cookies — required for the Platform to function (session management, authentication, fraud prevention). These cannot be disabled.
• Performance cookies — used to measure Platform performance, page load times, and error rates. Data is aggregated and anonymous.
• Functionality cookies — remember your preferences (language, game lobby view) to improve your experience. Can be disabled without affecting core functionality.
• Analytics cookies — collect anonymized usage data to help jl 58 understand how the Platform is used and where improvements can be made.

Non-essential cookies are placed only with your consent, which you may withdraw at any time through your browser settings. Note that disabling certain cookies may affect Platform functionality. jl 58 does not use third-party advertising cookies or track your activity across external websites.

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by jl 58. To exercise any of these rights, contact our Data Privacy Officer at the address in Section 13.

jl 58 will respond to verified data subject requests within thirty (30) calendar days of receipt. Complex requests may require an additional 30-day extension, of which you will be notified. We may request proof of identity before processing a request to protect against unauthorized disclosure.

The jl 58 Platform is strictly intended for individuals aged 21 years and above, as required by PAGCOR regulations for casino-style online gaming in the Philippines. jl 58 does not knowingly collect personal data from individuals under the age of 21.

If jl 58 becomes aware that personal data has been collected from an individual under 21 without appropriate consent, that data will be deleted immediately and the associated account will be closed. All winnings accumulated during underage play will be forfeited in accordance with the jl 58 Terms & Conditions.

Parents or guardians who believe a minor has registered or used the jl 58 Platform should contact our support team immediately via the contact details in Section 13.

jl 58 reserves the right to update or modify this Privacy Policy at any time. The "Last Updated" date at the top of this page will reflect the most recent revision. We will notify registered Members of material changes via the email address or mobile number registered to their account, where practicable, at least seven (7) days before the changes take effect.

Your continued use of the jl 58 Platform after any modification to this Policy constitutes your acceptance of the updated Privacy Policy. If you do not agree to the modified Policy, you must close your account and cease using the Platform.

jl 58 has designated a Data Privacy Officer (DPO) as required under the Philippine Data Privacy Act. For all privacy-related inquiries, access requests, corrections, complaints, or formal notices, you may contact the jl 58 DPO through the following channel:

• Email: support@jl58.bid — subject line: "Data Privacy Request" (plain text only — not a clickable link)
• Live Chat: Available 24/7 within the jl 58 Platform for logged-in Members
• Response Time: Within 30 calendar days for formal data subject requests

For unresolved privacy concerns, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC's contact details are published on their official government website.