How jl 22 Handles Your Data
Data Security First
jl 22 uses SSL/TLS encryption, secure data storage, and strict access controls to protect your personal information at every point — from registration through to withdrawal processing.
Philippine Law Compliance
We process your data in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules of the National Privacy Commission (NPC) of the Philippines.
No Data Selling
jl 22 does not sell, rent, or trade your personal data to third-party marketers. Your information is used solely to operate the platform, comply with legal obligations, and improve your experience.
Your Rights, Respected
As a data subject under Philippine law, you have the right to access, correct, delete, and port your personal data. jl 22 provides clear channels to exercise all of these rights without unnecessary friction.
Purpose-Limited Collection
We only collect the personal data we actually need. Every data point we gather has a specific, documented purpose — we don't collect information speculatively or "just in case."
Transparent Processing
This Privacy Policy is written in plain English so you can actually understand it. We tell you exactly what we collect, who we share it with, and how long we keep it — no buried footnotes.
Table of Contents
- 1. Who We Are
- 2. Data We Collect
- 3. How We Collect Data
- 4. Why We Use Your Data
- 5. Legal Basis for Processing
- 6. Data Sharing & Disclosure
- 7. Cookies & Tracking
- 8. Data Retention
- 9. Data Security
- 10. Your Rights as a Data Subject
- 11. Children's Privacy
- 12. Cross-Border Transfers
- 13. Changes to This Policy
- 14. Contact & DPO
01 Who We Are
This Privacy Policy applies to the jl 22 online casino platform, accessible at jl22.asia (the "Platform"). References to "jl 22," "we," "us," or "our" in this Policy refer to the operator of the jl 22 Platform.
jl 22 acts as the Personal Information Controller (as defined under the Data Privacy Act of 2012) in respect of the personal data you provide when registering for and using the Platform. This means we determine the purposes and means by which your personal data is processed.
Where we engage third-party service providers to process personal data on our behalf — such as payment processors, KYC verification providers, and game platform operators — those parties act as Personal Information Processors and are contractually bound to process your data only in accordance with our instructions and applicable Philippine data protection law.
Scope: This Policy applies to all personal data collected through the jl 22 Platform, including data collected via the website, mobile interface, customer support channels, and any other touchpoint through which you interact with jl 22.
02 Data We Collect
jl 22 collects the following categories of personal data, depending on how you interact with the Platform:
2.1 Registration and Identity Data
- Full legal name;
- Date of birth (to verify you are 21 years of age or older);
- Nationality and country of residence;
- Residential address (including barangay, city/municipality, province, and postal code for Philippine residents);
- Email address;
- Mobile number (used for account verification and two-factor authentication);
- Username and encrypted password.
2.2 Identity Verification (KYC) Data
- Government-issued photo identification (Philippine passport, driver's license, SSS ID, UMID, PhilSys National ID, or equivalent);
- Proof of address documents (utility bills, bank statements, or government correspondence);
- Selfie or liveness-check image submitted during identity verification;
- Source of funds documentation where required by applicable anti-money laundering regulations.
2.3 Financial and Transaction Data
- Deposit and withdrawal transaction records, including amounts, timestamps, and payment method references;
- GCash or Maya account reference (mobile number registered to the account);
- Bank account details provided for bank transfer withdrawals (account name, bank name, account number);
- Debit card details (card number is tokenized and never stored in full by jl 22);
- Account balance history and bonus credit records.
2.4 Gaming Activity Data
- Game session logs, including games played, bet amounts, win/loss outcomes, and session duration;
- Bonus and promotion usage history;
- Responsible gaming tool settings (deposit limits, loss limits, self-exclusion status);
- Game preferences and platform interaction patterns.
2.5 Technical and Device Data
- IP address and approximate geolocation derived from IP;
- Device type, operating system, and browser type and version;
- Unique device identifiers;
- Session timestamps, page views, and clickstream data collected via cookies and similar technologies.
2.6 Communications Data
- Records of your communications with jl 22 customer support, including live chat transcripts and email correspondence;
- Feedback, survey responses, and complaint records;
- Marketing communication preferences and opt-in/opt-out records.
Sensitive Personal Information: Government-issued ID documents and biometric data collected during KYC verification constitute sensitive personal information under the Data Privacy Act of 2012. jl 22 applies heightened security controls to this category of data and processes it only to the extent strictly necessary for identity verification and regulatory compliance purposes.
03 How We Collect Your Data
jl 22 collects personal data through the following means:
- Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to a survey, or otherwise interact with the Platform;
- Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse or use the Platform (see Section 7 for details);
- From third-party service providers — including KYC verification partners who conduct identity checks on our behalf, payment processors who confirm transaction details, and fraud detection services that flag suspicious activity patterns;
- From publicly available sources — such as sanctions lists, politically exposed persons (PEP) databases, and adverse media sources consulted as part of our anti-money laundering compliance obligations.
04 Why We Use Your Data
jl 22 uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, identity data |
| Identity verification (KYC) | KYC documents, biometric data |
| Processing deposits and withdrawals | Financial and transaction data |
| Providing gaming services | Gaming activity data, technical data |
| Fraud prevention and security | Technical data, transaction data, communications data |
| Anti-money laundering compliance | Identity data, financial data, KYC data |
| Responsible gaming monitoring | Gaming activity data, responsible gaming settings |
| Customer support | Communications data, account data |
| Marketing communications (with consent) | Registration data, marketing preferences |
| Platform improvement and analytics | Technical data, gaming activity data |
| Legal and regulatory compliance | All categories as required |
jl 22 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate lawful basis for the new processing activity.
05 Legal Basis for Processing
Under the Data Privacy Act of 2012, jl 22 relies on the following legal bases for processing your personal data:
- Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and delivery of gaming services — is carried out on the basis that it is necessary for the performance of the contract between you and jl 22.
- Legal obligation: Processing required to comply with applicable Philippine law — including anti-money laundering obligations under RA 9160 (as amended), KYC requirements, and regulatory reporting — is carried out on the basis of legal obligation.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement is carried out on the basis of jl 22's legitimate interests, provided those interests are not overridden by your rights and interests.
- Consent: Processing for direct marketing communications is carried out on the basis of your freely given, specific, and informed consent. You may withdraw your consent at any time by updating your communication preferences in your account settings or by contacting customer support.
06 Data Sharing & Disclosure
jl 22 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
6.1 Service Providers (Personal Information Processors)
We engage trusted third-party service providers to perform functions on our behalf, including:
- Payment processors — GCash, Maya, and banking partners for deposit and withdrawal processing;
- KYC and identity verification providers — to conduct document verification and liveness checks;
- Game platform providers — who supply the gaming software and content available on the Platform;
- IT infrastructure and cloud hosting providers — who store and process Platform data on our behalf;
- Fraud detection and cybersecurity providers — who help us identify and prevent fraudulent activity.
All service providers are contractually required to process your data only in accordance with our instructions, to implement appropriate security measures, and to comply with applicable Philippine data protection law.
6.2 Regulatory and Law Enforcement Authorities
jl 22 may disclose your personal data to government agencies, regulatory bodies, and law enforcement authorities where required or permitted by Philippine law, including but not limited to:
- The Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting under RA 9160;
- The National Privacy Commission (NPC) — in connection with data breach notifications or regulatory inquiries;
- Philippine law enforcement agencies — in response to lawful orders, warrants, or subpoenas.
6.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of jl 22's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and the privacy practices of the acquiring entity before your data is transferred and becomes subject to a different privacy policy.
No Third-Party Marketing: jl 22 does not share your personal data with third-party advertisers or marketing companies. Any marketing communications you receive will come directly from jl 22 and only if you have opted in to receive them.
07 Cookies & Tracking Technologies
jl 22 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, authentication, security, and core Platform functionality | No — required for the Platform to function |
| Functional | Remembering your preferences (language, display settings, responsible gaming tool configurations) | Yes — via cookie settings |
| Analytics | Understanding how players use the Platform to improve performance and user experience | Yes — via cookie settings |
| Marketing | Delivering relevant promotional content to players who have opted in to marketing communications | Yes — via cookie settings or account preferences |
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate securely.
08 Data Retention
jl 22 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as a general guide:
- Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under RA 9160;
- KYC documents: Retained for a minimum of five (5) years from the date of the last transaction or account closure, whichever is later;
- Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
- Gaming activity logs: Retained for a minimum of three (3) years from the date of the session, or longer where required for dispute resolution or regulatory purposes;
- Customer support communications: Retained for three (3) years from the date of the last communication;
- Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.
Where personal data is no longer required for any lawful purpose, jl 22 will securely delete or anonymize it in accordance with our data disposal procedures.
09 Data Security
jl 22 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
- Encryption in transit: All data transmitted between your device and the jl 22 Platform is encrypted using TLS (Transport Layer Security) protocols;
- Encryption at rest: Sensitive personal data stored on jl 22 servers is encrypted using industry-standard encryption algorithms;
- Access controls: Access to personal data is restricted to authorized jl 22 personnel and service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
- Payment data security: jl 22 does not store full payment card numbers. Card data is tokenized by our payment processor partners in compliance with applicable payment security standards;
- Security monitoring: jl 22 operates continuous security monitoring to detect and respond to potential threats and anomalous activity;
- Staff training: All jl 22 personnel with access to personal data receive regular data protection and security awareness training.
Data Breach Notification: In the event of a personal data breach that is likely to result in serious harm to affected individuals, jl 22 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with NPC Circular No. 16-03.
While jl 22 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials and for notifying jl 22 immediately if you suspect any unauthorized access to your account.
10 Your Rights as a Data Subject
Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights in respect of your personal data held by jl 22:
Right to Be Informed
Know what personal data we collect, why we collect it, and how it is used — which is the purpose of this Privacy Policy.
Right to Access
Request a copy of the personal data jl 22 holds about you, along with information about how it is being processed.
Right to Rectification
Request correction of inaccurate or incomplete personal data. You can update most account details directly in your account settings.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to legal retention obligations.
Right to Object
Object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
Right to Data Portability
Receive a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another controller.
Right to Withdraw Consent
Withdraw consent for marketing communications at any time without affecting the lawfulness of processing carried out before withdrawal.
Right to Lodge a Complaint
Lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.
To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 14. jl 22 will respond to all data subject requests within fifteen (15) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further fifteen (15) days, in which case we will notify you of the extension and the reasons for it.
jl 22 will not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive, in which case we may charge a reasonable administrative fee or decline to act on the request, with written reasons provided.
11 Children's Privacy
The jl 22 Platform is strictly intended for adults aged 21 years and above. jl 22 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the account registration and KYC process.
If jl 22 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the jl 22 Platform, please contact our customer support team immediately.
Underage Access: Allowing a person under 21 years of age to access the jl 22 Platform using your account or device is a serious violation of our Terms & Conditions and may constitute a criminal offence under Philippine law. Please ensure your account credentials are kept secure and inaccessible to minors.
12 Cross-Border Data Transfers
jl 22 primarily processes and stores personal data within the Republic of the Philippines. However, some of our third-party service providers — including game platform providers, cloud infrastructure partners, and KYC verification services — may process personal data in jurisdictions outside the Philippines.
Where personal data is transferred outside the Philippines, jl 22 ensures that appropriate safeguards are in place to protect your data, including:
- Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission;
- Implementing contractual clauses that require overseas recipients to protect your personal data to standards equivalent to those required under Philippine law; and
- Conducting due diligence on overseas service providers to verify their data protection practices before engaging them.
By using the jl 22 Platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside the Philippines, subject to the safeguards described above.
13 Changes to This Privacy Policy
jl 22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The date of the most recent revision is displayed at the top of this page.
Where changes to this Policy are material — meaning they significantly affect your rights or the way we process your personal data — jl 22 will provide advance notice to registered players via email or a prominent notice on the Platform, at least fourteen (14) days before the changes take effect.
Your continued use of the jl 22 Platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.
14 Contact & Data Protection Officer
jl 22 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 17-01. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:
- Email: [email protected] — for data subject requests, privacy inquiries, and data breach reports. Please include "Privacy Request" in the subject line.
- General Support Email: [email protected] — for general account and platform queries.
- Live Chat: Available 24/7 via the jl 22 Platform for urgent matters.
If you are not satisfied with jl 22's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.
We Take Privacy Seriously: Our support team includes Filipino agents who understand local data protection concerns. Whether it's a data access request, a correction, or a deletion — reach out and we'll handle it promptly and professionally.
Play with Confidence at jl 22
Your data is protected, your privacy is respected, and your gaming experience is our priority. Join thousands of Filipino players who trust jl 22 for safe, fair, and responsible online gaming.
21+ only. Gambling is addictive. Know when to stop.
Your Data Rights (PH)
Protected under the Data Privacy Act of 2012 (RA 10173). Supervised by the National Privacy Commission.