Your personal data matters. This Privacy Policy explains what information jl90 collects from Filipino players, why we collect it, how it is used and protected, and what rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
jl90 respects the privacy of every player. We collect only the personal data required to provide our Services, meet PAGCOR licensing obligations, and comply with Philippine law. We do not sell your personal data to advertisers. We do not share your data with unrelated third parties. Your data is used to operate the jl90 platform and to protect you — nothing else.
1.1 This Privacy Policy is issued by jl90 ("jl90," "we," "us," or "our") and applies to all personal data collected from players ("you," "Player," or "User") who register an Account, access Services, or otherwise interact with the jl90 platform at jl90.one.
1.2 jl90 is committed to processing personal data in a lawful, fair, and transparent manner in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission (NPC) of the Philippines. All data processing activities are also conducted in compliance with the conditions of jl90's PAGCOR operating licence.
1.3 By registering an Account on jl90.one or using the jl90 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree with the terms of this Privacy Policy, you should not use the jl90 platform.
1.4 This Privacy Policy should be read together with the jl90 Terms & Conditions, which are incorporated by reference. In the event of any inconsistency between the Terms & Conditions and this Privacy Policy regarding data privacy matters, this Privacy Policy shall prevail.
2.1 jl90, operating the platform at jl90.one, acts as the Data Controller for all personal data collected from Players in connection with the jl90 Services. As Data Controller, jl90 is responsible for determining the purposes and means of processing your personal data.
2.2 jl90 has designated a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. The jl90 DPO is responsible for overseeing compliance with this Privacy Policy, handling data subject rights requests, and maintaining jl90's registration with the National Privacy Commission. Contact details for the jl90 DPO are provided in Section 15 of this Policy.
3.1 jl90 collects personal data from Players in the categories described below. We collect only the minimum data necessary for the stated purpose (the principle of data minimisation).
| Category | Specific Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number (Passport, UMID, Driver's Licence, PhilSys ID, etc.) | Account registration, KYC age verification, PAGCOR compliance |
| Contact Data | Philippine mobile number (+63 format), email address (if provided) | Account verification via OTP, security alerts, support communications |
| Financial Data | GCash account identifier, Maya account identifier, BPI/BDO/Metrobank account details (truncated), USDT wallet addresses, transaction amounts and references | Deposit and withdrawal processing, AML compliance, transaction history |
| Account Data | Username, password (hashed, never stored in plain text), account preferences, responsible gaming settings, self-exclusion status | Account security, platform personalisation, responsible gaming |
| Technical Data | IP address, device type and operating system, browser type and version, session duration, login timestamps, geolocation (country/region level) | Platform security, fraud detection, PAGCOR jurisdictional compliance |
| Gameplay Data | Game session records, bet amounts, game outcomes, win/loss history, bonus activity, RNG transaction logs | Dispute resolution, RNG audit compliance, responsible gaming monitoring, player support |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Customer support, quality assurance, dispute resolution |
3.2 Sensitive Personal Data. jl90 may collect sensitive personal information — as defined under Section 3(l) of the Philippine Data Privacy Act — in limited circumstances, specifically: (a) financial information beyond standard transactional data where required by AML or PAGCOR regulations; (b) government identification numbers submitted as part of KYC verification. Such sensitive data is processed with the additional safeguards required by the DPA and is subject to strict access controls within jl90's systems.
4.1 jl90 collects personal data through the following means:
5.1 Under the Philippine Data Privacy Act, jl90 processes personal data only where a valid legal basis applies. The legal bases jl90 relies upon are:
6.1 jl90 uses the personal data described in Section 3 exclusively for the following purposes:
jl90 does not sell, rent, or otherwise transfer your personal data to third-party advertisers, marketing brokers, or data aggregators. jl90 does not use your gameplay or financial data for advertising profiling purposes. jl90 does not share your personal data with unrelated third parties outside the specific circumstances described in Section 7 of this Policy.
7.1 jl90 may share your personal data with the following categories of third parties, strictly to the extent necessary for the stated purpose:
7.2 All third parties with whom jl90 shares personal data are contractually required to process that data only for the specified purpose, to implement appropriate security measures, and to comply with applicable Philippine data privacy law.
8.1 jl90.one uses cookies and similar tracking technologies to operate platform functionality, maintain session security, and analyse platform usage. The categories of cookies used by jl90 are as follows:
8.2 jl90 does not use advertising cookies or third-party tracking cookies from ad networks, social media platforms, or marketing analytics providers for the purpose of serving targeted advertisements.
8.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary or security cookies may prevent you from using certain jl90 platform features, including jl90 Login and payment processing.
9.1 jl90 implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data processed, including:
9.2 In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected Players, jl90 will notify the National Privacy Commission and affected Players within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 16-03 and its amendments.
While jl90 implements robust technical security measures, the security of your jl90 Account also depends on you. You are responsible for maintaining the confidentiality of your jl90 Login credentials. Never share your password or OTP with anyone — including persons claiming to be jl90 staff. jl90 support will never ask for your password or OTP via any channel.
10.1 jl90 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by Philippine law and PAGCOR regulations.
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC Data | 5 years after account closure or last transaction | PAGCOR licensing conditions, AMLA requirements |
| Financial Transaction Records | 5 years after the date of transaction | Anti-Money Laundering Act (RA 9160 as amended) |
| Account & Gameplay Data | Duration of account plus 3 years after closure | Dispute resolution, PAGCOR RNG audit requirements |
| Communications Data (Support) | 2 years from date of last interaction | Dispute resolution, quality assurance |
| Technical / Log Data | 12 months from date of collection | Security, fraud detection, platform performance |
| Responsible Gaming Records | Duration of exclusion plus 5 years | PAGCOR responsible gaming compliance |
10.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents identification of the individual Player. Anonymised, aggregated data may be retained beyond these periods for statistical and business analysis purposes.
11.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jl90. Requests to exercise any of these rights should be submitted to the jl90 Data Protection Officer using the contact details in Section 15.
You have the right to be informed of how jl90 collects, uses, retains, and shares your personal data — which is the purpose of this Privacy Policy.
You may request a copy of the personal data jl90 holds about you, including the specific data elements, their source, and the purposes for which they are being processed.
You may request correction of inaccurate or incomplete personal data held by jl90. Account profile data such as contact information can be updated directly within your jl90 Account settings.
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to jl90's legal retention obligations under PAGCOR and AMLA requirements.
You may object to processing of your personal data based on jl90's legitimate interests. Where such objection is upheld, jl90 will cease the relevant processing unless a compelling legal basis overrides your interests.
You may request that jl90 provide your personal data in a structured, commonly used, machine-readable format to allow transfer to another service provider where technically feasible.
To exercise any of the rights described in Section 11, contact the jl90 Data Protection Officer at [email protected] with the subject line "Data Privacy Request — [Right Type]." Include your registered mobile number, Account username, and a description of your request. jl90 will acknowledge your request within three (3) business days and complete the substantive response within fifteen (15) business days, or such other period as specified by NPC guidelines. Identity verification may be required before processing certain requests.
12.1 The jl90 platform is strictly restricted to individuals aged twenty-one (21) years and older in compliance with PAGCOR regulations. jl90 does not knowingly collect personal data from individuals under the age of 21.
12.2 All Account registrations are subject to mandatory age verification as part of the jl90 KYC process. Any Account found to have been created by an individual under 21 years of age will be immediately suspended, and any personal data associated with that Account will be securely deleted except to the extent that retention is required for regulatory compliance purposes.
12.3 If you believe that jl90 has inadvertently collected personal data from an individual under 21 years of age, please contact the jl90 Data Protection Officer immediately using the contact details in Section 15 so that appropriate action can be taken.
13.1 In the course of providing the jl90 Services, certain personal data may be processed by technology infrastructure providers and game software providers whose servers are located outside the Republic of the Philippines. Such cross-border transfers of personal data are carried out in accordance with the Philippine Data Privacy Act and NPC guidelines on cross-border data transfers.
13.2 Where personal data is transferred outside the Philippines, jl90 ensures that the recipient country or organisation offers an adequate level of data protection, or that appropriate contractual safeguards are in place, including data processing agreements that impose obligations consistent with the Philippine Data Privacy Act on the receiving party.
13.3 Players may request information about specific cross-border data transfer arrangements by contacting the jl90 Data Protection Officer.
14.1 jl90 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in Philippine data privacy law or NPC guidance, or changes in PAGCOR licensing requirements. The effective date at the top of this Policy will be updated whenever a material revision is made.
14.2 Where a revision materially affects the way jl90 processes your personal data, jl90 will provide notice to affected Players via a prominent notification on jl90.one and, where a verified contact number is held, via SMS notification. Continued use of the jl90 platform following such notification constitutes acceptance of the updated Policy.
14.3 Players who do not accept the revised Privacy Policy should contact the jl90 Data Protection Officer and may request Account closure in accordance with the procedure in the jl90 Terms & Conditions.
This jl90 Privacy Policy was last reviewed and updated on 1 January 2026. The version published on jl90.one at any given time is the current operative version. If you accessed jl90 prior to this date and wish to understand how the policy has changed, you may request a summary of material changes from the jl90 Data Protection Officer.
15.1 For all data privacy queries, data subject rights requests, or complaints regarding jl90's data processing practices, please contact the jl90 Data Protection Officer:
15.2 National Privacy Commission. If you are not satisfied with jl90's response to a data privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC complaints process is available through the NPC's official government channels.
15.3 PAGCOR. For complaints related to jl90's gaming licence compliance — which may intersect with data handling — you may also contact PAGCOR through its official complaints and licensing channels.
These are not abstract policy commitments — they are implemented technical and operational practices that apply to every jl90 account, every session, every day.
All personal data stored in jl90's database infrastructure is encrypted using AES-256 — the same standard used by Philippine banks for digital banking data. Your identity documents, contact details, and financial records are never stored in plain text. Even in the event of an infrastructure breach, encrypted data cannot be read without the corresponding encryption keys.
Every communication between your device and jl90.one is protected by TLS 1.3 — the most current transport security standard. This applies to jl90 Login, GCash deposits, withdrawal requests, support chat, and every other interaction with the platform. The padlock icon in your browser is not decorative at jl90 — it indicates an actively enforced encryption policy.
jl90 generates revenue from gaming, not from selling Filipino players' data to advertisers. Your GCash transaction history, gameplay patterns, mobile number, and personal information are never shared with ad networks, marketing brokers, or data aggregators. This is a firm policy — not a default that can be changed by a future policy update without explicit notice to affected players.
jl90's data processing practices are designed and audited for compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and NPC regulations. A dedicated Data Protection Officer oversees compliance, handles data subject rights requests, and maintains jl90's NPC registration. Filipino players' privacy rights are enforced under Philippine law.
In the event of a personal data breach that poses a risk to Players, jl90 commits to notifying both the National Privacy Commission and affected Players within 72 hours of becoming aware of the breach — the NPC's required notification window. Players will be informed of what data was involved, what risks exist, and what steps are being taken to address the situation.
The data subject rights described in Section 11 of this Policy — access, correction, erasure, portability, objection — are implemented as actual operational processes at jl90, not legal formalities. The jl90 Data Protection Officer responds to rights requests within 15 business days. Filipino players can exercise their DPA rights without needing a lawyer or filing a court case.
Now that you understand how jl90 handles your personal data — under Philippine law, with PAGCOR oversight, and with genuine technical security — you can play with confidence. Your privacy is part of the jl90 experience.