jl19
Privacy
Policy

This Privacy Policy ("Policy") is published by the Operator of the jl19 online casino platform accessible at jl19.vip (collectively, "jl19", "we", "us", or "our"). This Policy applies to all personal data collected, processed, stored, or transmitted by jl19 in the course of operating its platform and delivering services to Players and site visitors in the Philippines and any other jurisdiction in which jl19 operates.

jl19 processes personal data in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the data handling standards required by the Philippine Amusement and Gaming Corporation (PAGCOR) under jl19's operating licence. Where applicable, jl19 also adheres to Anti-Money Laundering Act obligations under Republic Act 9160 as amended, which impose mandatory data retention and reporting requirements that may take precedence over certain data subject rights under RA 10173.

By registering an Account with jl19, accessing the jl19 platform, or submitting any personal information to jl19, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

For the purposes of the Data Privacy Act of the Philippines, jl19's Operator — the company incorporated under Philippine law that holds the PAGCOR licence under which jl19 operates — is the Personal Information Controller (PIC) responsible for the personal data collected and processed through the jl19 platform.

jl19 has appointed a Data Protection Officer (DPO) in compliance with Section 21 of the Data Privacy Act and NPC Circular 17-01. The DPO is responsible for overseeing jl19's compliance with RA 10173 and its implementing rules, managing data subject rights requests, and serving as jl19's primary point of contact with the National Privacy Commission (NPC) of the Philippines.

jl19 collects personal data from multiple sources in the ordinary course of operating the platform. The categories of data collected, the specific data types within each category, and the purposes each category serves are set out in the table below.

jl19 processes personal data exclusively for the purposes described in this Policy. We do not use personal data for purposes that are incompatible with those for which it was originally collected without giving prior notice and, where required, obtaining fresh consent. The primary purposes for which jl19 processes personal data are:

• Creating and maintaining your jl19 Account, verifying login credentials, and managing account security settings including two-factor authentication.
• Processing deposits, calculating winnings, recording bet results, applying bonus credits, and processing withdrawal requests to your verified payment method.
• Delivering game content, live dealer streams, sports betting markets, and all other platform services that constitute the jl19 casino experience.

• Conducting Know Your Customer (KYC) identity verification as required by PAGCOR's licensing conditions and the Anti-Money Laundering Act of the Philippines.
• Monitoring account activity for indicators of money laundering, terrorist financing, fraud, or other financial crimes, and filing Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) where required by law.
• Enforcing the age verification requirement of 21 years minimum, as mandated by PAGCOR for casino-style gaming activities.
• Maintaining records required by PAGCOR audits and responding to lawful requests from Philippine government agencies and courts.

• Monitoring gaming patterns to identify indicators of problem gambling and, where appropriate, initiating welfare contact or applying account-level safeguards.
• Processing and enforcing deposit limits, cooling-off requests, and self-exclusion applications submitted through the jl19 account dashboard.

• Sending promotional communications — including bonus offers, new game announcements, and tournament invitations — to Players who have opted in to such communications via their jl19 Account settings.
• Players who have not opted in to marketing communications will not receive promotional messages. Opt-out from previously consented marketing is available at any time via Account Settings.

Under the Data Privacy Act of the Philippines, jl19 relies on the following legal bases to process personal data, depending on the specific processing activity and data category involved:

• Contractual Necessity: Processing required to perform jl19's obligations under the Terms and Conditions you accepted upon registration — primarily account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act itself, and lawful orders of Philippine government authorities and courts.
• Legitimate Interests: Processing carried out for jl19's legitimate business interests where these are not overridden by your fundamental rights — including fraud prevention, platform security, responsible gaming monitoring, and analytics used to improve platform performance.
• Consent: Processing of personal data for direct marketing communications and the setting of non-essential cookies and tracking technologies, where your prior explicit consent has been obtained through the Account settings opt-in mechanism.

jl19 does not sell, rent, or commercially trade personal data. jl19 may share personal data with third parties only in the following circumstances:

jl19 engages certain third-party service providers — classified as Personal Information Processors (PIPs) under RA 10173 — to support specific platform functions. These include payment gateway operators (GCash, PayMaya, and banking partners), game content providers whose software is integrated into the jl19 platform, cloud hosting and data centre infrastructure providers, identity verification and KYC service providers, and customer support software vendors. All PIPs engaged by jl19 are contractually bound to process personal data only on jl19's instructions, for specified purposes, and in compliance with RA 10173.

jl19 is required by law to share personal data with PAGCOR during regulatory audits and compliance reviews, with the Anti-Money Laundering Council (AMLC) in connection with Suspicious Transaction Reports and other AML reporting obligations, and with Philippine law enforcement agencies and courts pursuant to valid legal process — subpoenas, court orders, or lawful demands under applicable Philippine law.

In the event of a merger, acquisition, restructuring, or sale of substantially all of jl19's business assets, personal data held by jl19 may be transferred to the acquirer or successor entity, subject to that entity assuming equivalent data protection obligations. Affected Players will be notified of any such transfer and the identity of the new data controller.

jl19 uses cookies and similar client-side tracking technologies — including local storage objects and session tokens — to operate the platform and improve the user experience. The categories of cookies employed by jl19 are as follows:

• Essential / Session Cookies: Required for the jl19 platform to function. These cookies maintain your login session, remember your account preferences, and ensure game session continuity. They cannot be disabled without impairing platform functionality. Legal basis: Contractual necessity.
• Security Cookies: Used to detect and prevent fraudulent login attempts, credential stuffing, and automated bot activity. Legal basis: Legitimate interests (platform security).
• Analytics Cookies: Aggregate, anonymised data used to understand how Players navigate the jl19 platform, which game categories are most accessed, and where technical performance can be improved. These cookies do not identify individuals. Legal basis: Legitimate interests (platform improvement).
• Preference Cookies: Remember optional display preferences such as language settings and notification preferences. Legal basis: Consent (collected via account settings).

You may control the behaviour of non-essential cookies through your web browser's settings. Most modern browsers provide options to block or delete cookies. Note that blocking essential session cookies will prevent you from maintaining an authenticated session on jl19. jl19 does not use third-party advertising cookies or retargeting pixel tags.

jl19 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following minimum and maximum retention periods apply:

• Account and Identity Data: Retained for the duration of the active Account relationship and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as mandated by the AMLA and PAGCOR regulations.
• KYC Documents: Retained for a minimum of five (5) years following the most recent use of the verified Account, or the period required by AMLC regulations, whichever is longer.
• Gaming Activity Logs: Retained for a minimum of two (2) years for responsible gaming monitoring and dispute resolution purposes.
• Support Communications: Retained for two (2) years from the date of the communication, or until the matter to which they relate is fully resolved, whichever is later.
• Marketing Preference Data: Retained for the duration of the Account relationship, and for a period of twelve (12) months following account closure or marketing opt-out, to maintain a suppression list.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised in accordance with jl19's data destruction procedures. Where anonymisation is not technically feasible, data will be pseudonymised such that re-identification without additional information held separately is not reasonably practicable.

jl19 implements a comprehensive set of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Key security measures include:

• Transport Encryption: All data in transit between user devices and jl19 servers is encrypted using TLS 1.2 or higher.
• Storage Encryption: Sensitive personal data — including KYC documents, identity records, and financial data — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within jl19's internal systems is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication enforced for all staff with data access.
• Vulnerability Management: jl19 conducts regular penetration testing and vulnerability scanning of its platform infrastructure. Critical and high-severity vulnerabilities are remediated within defined service level timescales.
• Employee Training: All jl19 staff with access to personal data receive mandatory data privacy and security training upon onboarding and annually thereafter.
• Incident Response: jl19 maintains a documented Personal Data Breach Response Plan compliant with NPC Circular 16-03, with defined timescales for breach containment, assessment, notification, and remediation.

Under the Data Privacy Act of the Philippines (RA 10173), you have the following rights with respect to your personal data held by jl19. These rights may be exercised by submitting a written request to jl19's Data Protection Officer via the contact address published in the site footer:

The jl19 platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR's casino gaming age requirements. jl19 does not knowingly collect personal data from any individual under the age of 21, and does not knowingly permit any individual under 21 to register an Account or access gambling services.

If jl19 becomes aware that personal data has been inadvertently collected from an individual under the age of 21, that Account will be immediately suspended, all associated data will be deleted in accordance with jl19's data destruction procedures, and any balance held in the Account will be returned to the originating payment method following an investigation to confirm the identity of the rightful owner. Parents or guardians who believe a minor may have accessed jl19 should contact jl19's support team immediately.

jl19 is a Philippines-based operation and processes the personal data of its Players primarily within the Philippines. However, certain service providers engaged by jl19 — including international game software providers and cloud infrastructure vendors — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, jl19 ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act and NPC guidelines on cross-border data flows. These safeguards include contractual data processing agreements with receiving parties that impose data protection standards equivalent to or exceeding those required by RA 10173, and jl19 conducts due diligence on the data protection regimes of recipient jurisdictions before approving cross-border transfers.

jl19 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, jl19's data processing activities, or best practice guidance from the National Privacy Commission. The effective date at the top of this page will be updated whenever a revision is published.

Where changes to this Policy are material — meaning they significantly affect the rights of data subjects or the manner in which personal data is processed — jl19 will notify active Account holders via their registered mobile number or email address at least fourteen (14) days before the changes take effect. Continued use of the jl19 platform after the notified effective date constitutes acceptance of the revised Policy.

All privacy-related enquiries, data subject rights requests, and complaints relating to jl19's handling of your personal data should be directed to jl19's Data Protection Officer. Contact details are published in the footer of the jl19 website. Please include your full registered name, your jl19 Account reference number, and a clear description of your request or complaint. jl19 will acknowledge your request within three (3) business days and provide a substantive response within fifteen (15) business days.

If you are not satisfied with jl19's response to your complaint, or if you believe that jl19 has processed your personal data in violation of the Data Privacy Act of the Philippines, you have the right to file a formal complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the supervisory authority responsible for enforcing RA 10173 and adjudicating data privacy complaints in the Philippines. Information on filing a complaint with the NPC is available from the NPC's official government website.

For disputes relating to jl19's gambling operations that involve personal data — for example, disputes about account access following an identity verification failure — Players may also escalate unresolved matters to PAGCOR's Player Complaints Division in accordance with PAGCOR's published complaints handling procedures.