jlj3 Casino —
Privacy Policy

This Policy applies to all personal data processed by jlj3 in connection with the jlj3 platform accessible at jlj3.org, including all games, services, promotions, and customer support interactions. It applies to all registered Players, prospective registrants, and general visitors to jlj3.org, regardless of the device or network used to access the platform.

This Policy should be read together with the jlj3 Terms and Conditions, which govern the overall relationship between jlj3 and its Players. In the event of any conflict between this Policy and the Terms and Conditions on matters of data privacy, this Policy shall prevail.

By registering an account on jlj3.org or by continuing to use the platform, you acknowledge that you have read and understood this Policy and that you consent to the processing of your personal data as described herein, to the extent that such processing is based on consent under the Data Privacy Act of 2012.

jlj3, operating the platform at jlj3.org, is the personal information controller ("Controller") for the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations. As Controller, jlj3 determines the purposes and means by which your personal data is processed.

jlj3 has appointed a Data Protection Officer ("DPO") in accordance with the requirements of the National Privacy Commission. The DPO is responsible for overseeing jlj3's compliance with applicable data privacy laws, handling data subject requests, and serving as the primary point of contact for data privacy matters. Contact details for the jlj3 DPO are provided in Section 14 of this Policy.

Where jlj3 engages third-party service providers to process personal data on its behalf — including payment processors, cloud hosting providers, and fraud prevention services — those providers act as personal information processors under jlj3's instructions and are subject to contractual data processing agreements that require them to handle personal data in a manner consistent with this Policy and the DPA.

jlj3 collects the following categories of personal data from Players and visitors in the course of operating the jlj3 platform:

jlj3 does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) except where this is directly relevant to a responsible gaming assessment or legally required.

jlj3 collects personal data through the following means:

• Direct provision by you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact jlj3 customer support, or participate in a promotion, you directly provide personal data to jlj3.
• Automated collection: When you access or use jlj3.org, technical data — including your IP address, device identifiers, browser information, and session activity — is automatically collected through server logs and cookies.
• Third-party sources: jlj3 may receive identity verification data from approved KYC service providers, fraud risk scores from fraud prevention services, and payment confirmation data from GCash, PayMaya, and banking partners. All third-party data sources are subject to the same data protection standards required under the DPA.
• Publicly available sources: In limited circumstances connected with fraud investigation or regulatory compliance, jlj3 may consult publicly available information sources, including publicly accessible government databases and court records.

Under Section 12 of the Data Privacy Act of 2012, jlj3 processes personal data on the following legal bases:

• Performance of a contract: Processing necessary to register your account, accept your deposits, process your withdrawals, and deliver the games and services you have requested under the jlj3 Terms and Conditions.
• Compliance with a legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine law. This includes mandatory KYC, transaction reporting to the AMLC, and age verification.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and general business operations where those interests are not overridden by your fundamental rights and freedoms as a data subject.
• Consent: Processing for direct marketing communications, including email newsletters and promotional SMS messages. You may withdraw consent for marketing communications at any time without affecting the lawfulness of processing prior to withdrawal.

jlj3 uses the personal data it collects for the following purposes, each of which is tied to a legal basis identified in Section 5:

• Account registration and management: Creating and maintaining your jlj3 account, verifying your identity, and enabling access to platform features.
• Payment processing: Processing your deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard. Verifying that withdrawal requests are directed to payment methods registered in your own name.
• Game service delivery: Providing access to slots, live casino, sports betting, bingo, fishing, and sabong games. Maintaining game session records and transaction histories accessible in your account.
• PAGCOR compliance and reporting: Maintaining records of player activity as required under jlj3's PAGCOR operating authorisation. Submitting regulatory reports as required by PAGCOR and the AMLC.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct identified in the jlj3 Terms and Conditions.
• Responsible gaming: Monitoring gameplay patterns that may indicate problem gambling behaviour, facilitating deposit and loss limits, and processing self-exclusion requests in accordance with jlj3's responsible gaming obligations.
• Customer support: Responding to your queries, resolving complaints, and providing assistance with account, payment, and gameplay issues.
• Marketing communications: Sending you information about promotions, bonuses, new games, and seasonal events — only where you have provided consent and have not subsequently withdrawn it.
• Platform improvement: Analysing aggregated and anonymised data about platform usage to improve jlj3's games, features, and user experience.

jlj3 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. jlj3 shares personal data only in the following circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard receive the financial data necessary to process your deposit and withdrawal transactions. These entities are regulated financial institutions operating under their own regulatory obligations.
• KYC and identity verification providers: jlj3 may share identity document images and related data with certified third-party KYC verification services to facilitate faster, automated identity checks.
• Fraud and security service providers: jlj3 may share Technical Data and limited Identity Data with fraud detection and platform security services to protect the platform and its players.
• Game software providers: Certified game studios whose titles are hosted on the jlj3 platform may receive session-level data necessary for the operation of their games, including bet amounts and game outcomes.
• Regulatory authorities: PAGCOR, the AMLC, and other Philippine government authorities and law enforcement agencies may receive player data where jlj3 is legally obligated to disclose such data under applicable law.
• Professional advisors: jlj3's legal, accounting, and audit advisors may receive access to personal data on a need-to-know basis in connection with the provision of their professional services, subject to confidentiality obligations.

jlj3.org uses cookies and similar tracking technologies to operate the platform, maintain login sessions, detect fraud, and analyse how Players interact with the site. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of jlj3.org, including maintaining your login session and ensuring the security of your account. These cookies cannot be disabled without impairing the functionality of the platform.
• Functional cookies: Remember your preferences — such as language settings and display options — to personalise your experience on jlj3.org.
• Analytics cookies: Collect anonymised data about how Players use jlj3.org, including the pages visited, session durations, and navigation paths. This data is used to improve the platform's usability and performance.
• Security cookies: Used by jlj3's fraud detection and account security systems to identify unusual login behaviour and protect against account takeover attempts.

You can control the use of non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your ability to use some features of jlj3.org, including maintaining a login session. Strictly necessary and security cookies cannot be disabled without affecting platform functionality.

jlj3 retains personal data only for as long as necessary for the purposes for which it was collected, subject to overriding legal and regulatory retention obligations. The following retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, in compliance with PAGCOR operating requirements and the Anti-Money Laundering Act.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required under the AMLA and its implementing regulations.
• Gaming session data: Retained for a minimum of three (3) years from the date of the session, for regulatory reporting and dispute resolution purposes.
• Customer support records: Retained for a minimum of two (2) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of the marketing relationship plus two (2) years to evidence consent status in response to any regulatory inquiry.
• Technical logs: Retained for a maximum of twelve (12) months, after which they are deleted or anonymised unless required for a specific security investigation.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be attributed to a specific individual, unless retention is required by a specific legal obligation that has not yet been satisfied.

jlj3 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and jlj3.org is encrypted using 256-bit SSL/TLS protocols. This is the same encryption standard used by Philippine banks for online transactions.
• Encryption at rest: Sensitive personal data — including identity documents, financial account numbers, and passwords — is stored in encrypted form using industry-standard encryption algorithms.
• Access controls: Access to personal data within jlj3's systems is restricted to employees and service providers who require access to perform their specific job functions. Access rights are granted on the principle of least privilege and are reviewed regularly.
• Authentication: jlj3 employees with access to personal data are required to use multi-factor authentication. Players are encouraged to enable two-factor authentication on their jlj3 accounts.
• Intrusion detection: jlj3's platform is monitored continuously for unauthorised access attempts and suspicious activity patterns. Security incidents are escalated and investigated in accordance with jlj3's incident response procedures.
• Third-party security assessments: jlj3 conducts periodic security assessments of its platform and data processing systems, including assessments of third-party service providers with access to personal data.

Under the Data Privacy Act of 2012 and this Policy, you have the right to access, rectify, erase, object to, and port your personal data as summarised in the feature cards at the top of this page. You also have the right to lodge a complaint with the National Privacy Commission if you believe that jlj3 has processed your personal data in violation of applicable law.

How to submit a data privacy request: All data privacy requests must be submitted in writing and addressed to the jlj3 Data Protection Officer using the contact details set out in Section 14 of this Policy. Your request should include: (a) your full name and registered jlj3 account email address; (b) a clear description of the right you wish to exercise and the specific data concerned; and (c) a copy of a valid government-issued ID to verify your identity.

jlj3 will acknowledge receipt of your request within three (3) business days and will respond substantively within thirty (30) calendar days. Where the complexity or volume of requests requires additional time, jlj3 will notify you of the extended response timeline before the initial thirty (30) day period expires.

jlj3 will not charge a fee for processing data privacy requests unless a request is manifestly unfounded, excessive, or repetitive, in which case jlj3 reserves the right to charge a reasonable administrative fee or to decline to respond, subject to providing written reasons.

jlj3 is strictly prohibited from providing gaming services to persons under the age of 21, in accordance with PAGCOR regulations and Philippine law. As such, jlj3 does not knowingly or intentionally collect personal data from persons under the age of 21.

All registration processes on jlj3.org include age verification mechanisms, and jlj3 requires submission of a government-issued ID confirming date of birth as part of the KYC process before any withdrawal is approved. Where jlj3 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

jlj3 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, or jlj3's internal data processing practices.

Where changes to this Policy are material — meaning they affect the fundamental basis on which jlj3 processes your personal data, introduce new data sharing arrangements, or meaningfully reduce your privacy rights — jlj3 will notify registered Players by email to their registered address not less than fourteen (14) days before the changes take effect. The updated Policy will also be published on jlj3.org with the revised "Last Updated" date.

Non-material changes — such as corrections of typographical errors, clarifications of existing provisions, or updates to contact details — may take effect immediately upon publication without prior notice. Your continued use of the jlj3 platform following the publication of any updated version of this Policy constitutes your acceptance of that updated version.

If you have any questions, concerns, or requests relating to this Privacy Policy or jlj3's processing of your personal data, or if you wish to exercise any of your rights under the Data Privacy Act of 2012, please contact the jlj3 Data Protection Officer:

For general account support — including login issues, payment queries, and gameplay concerns — please use the 24/7 live chat support available on jlj3.org. The DPO contact above is specifically for data privacy matters only.

For complaints to the National Privacy Commission of the Philippines, please refer to the NPC's official website for current complaint submission procedures. jlj3 encourages Players to first attempt resolution through jlj3's internal process before escalating to the NPC, though this is not a prerequisite for filing an NPC complaint.