jlwin Privacy Policy

1. Data Controller Identity

jlwin, operating the platform accessible at jlwin.one, is the Personal Information Controller ("PIC") in respect of personal data collected through the Platform. jlwin is registered with the National Privacy Commission ("NPC") of the Philippines in accordance with the requirements of the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

For all data-related inquiries, including requests to exercise your data subject rights, please contact jlwin's Data Protection Officer ("DPO") at the contact details provided in Section 13 of this Policy.

2. Personal Data We Collect

jlwin collects personal data through your voluntary provision during registration and use of the Platform, and through automated technical means during your interaction with our services. The categories of data collected include:

jlwin does not collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act (such as racial or ethnic origin, political affiliations, religious beliefs, or health data) except where voluntarily provided in the context of a responsible gaming self-declaration or where required by PAGCOR regulations.

3. How jlwin Uses Your Personal Data

jlwin processes your personal data for the following purposes:

• Account Creation and Management: To register, verify, and maintain your jlwin Account, including enforcing the 21-year minimum age requirement and single-account rule.
• Service Delivery: To provide access to games, process bets, calculate and credit winnings, and operate the jlwin wallet.
• Payment Processing: To facilitate deposits via GCash, PayMaya, BDO, BPI, and Metrobank, and to process withdrawal requests to verified payment instruments.
• KYC and Identity Verification: To verify your identity and age in compliance with PAGCOR regulations and the Anti-Money Laundering Act.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, money laundering, and other illegal conduct.
• Regulatory Compliance: To fulfil jlwin's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), and other applicable Philippine laws.
• Customer Support: To respond to your queries, complaints, and support requests, including responsible gaming assistance.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates via email or SMS, subject to your consent and opt-out preferences.
• Platform Improvement: To analyse gameplay and usage patterns to improve jlwin's services, correct technical issues, and develop new features.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply any deposit limits, cooling-off periods, or self-exclusions you have requested.

4. Legal Bases for Processing

jlwin processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between jlwin and the Player (e.g., Account management, payment processing, game delivery).
• Legal Obligation: Processing required to comply with PAGCOR licensing requirements, AML reporting obligations, and NPC registration requirements.
• Legitimate Interests: Processing necessary for jlwin's legitimate interests in fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your explicit consent has been obtained and can be withdrawn at any time.

5. Data Sharing and Disclosure

jlwin does not sell, rent, or trade your personal data to third parties. jlwin may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash (Mynt/Globe Fintech Innovations), PayMaya (Voyager Innovations), and partner Philippine banks — for the purpose of processing deposits and withdrawals.
• Game Content Providers: Licensed game studios whose titles are available on the Platform — limited to pseudonymised session data necessary for game functionality and RTP auditing.
• Identity Verification Partners: Third-party KYC providers engaged to assist with document verification and sanctions screening.
• PAGCOR: Personal and gameplay data required under jlwin's operating licence conditions and PAGCOR audit requests.
• Anti-Money Laundering Council (AMLC): Transaction data where jlwin is legally required to file a Covered Transaction Report or Suspicious Transaction Report under RA 9160.
• Law Enforcement Authorities: Where jlwin is compelled by a valid Philippine court order, subpoena, or law enforcement directive.

6. Cookies and Tracking Technologies

The jlwin Platform uses cookies and similar tracking technologies to operate core platform functionality, maintain your login session, detect fraud, and — with your consent — deliver personalised promotional content. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for Platform operation (login session, security tokens). Cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your language and display preferences across sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform. Used to identify and fix technical issues.
• Marketing Cookies: Track Platform visits to enable relevant promotional messaging. Require your explicit consent before activation.

You may manage your cookie preferences through your browser settings. Disabling cookies other than strictly necessary cookies may affect Platform performance but will not prevent account access.

7. Data Retention

jlwin retains personal data for as long as your Account is active and for a period thereafter as required by applicable law. Specific retention periods:

• Account and identity data: Retained for the duration of Account activity plus five (5) years following Account closure, in compliance with AMLC record-keeping requirements under RA 9160.
• Financial transaction records: Retained for five (5) years from the date of each transaction.
• Gameplay logs: Retained for three (3) years from the date of each session.
• Support communications: Retained for two (2) years from the date of resolution.
• Marketing preferences and consent records: Retained until withdrawal of consent plus one (1) year for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identified individual.

8. Security Measures

jlwin implements a layered security architecture to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• All data transmitted between your device and the jlwin Platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Passwords are stored using one-way cryptographic hashing with salting — jlwin staff cannot view your password in plain text.
• Sensitive financial data (bank account numbers, e-wallet credentials) is encrypted at rest using AES-256.
• Access to production databases containing personal data is restricted to authorised jlwin personnel on a need-to-know basis, enforced through role-based access controls.
• jlwin conducts regular penetration testing and vulnerability assessments of its platform infrastructure.
• In the event of a personal data breach that is likely to result in harm to Data Subjects, jlwin will notify the NPC within 72 hours of becoming aware of the breach, and affected Players as soon as reasonably practicable.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jlwin:

• Right to Be Informed: To be notified of how your personal data is collected, used, stored, and shared.
• Right to Access: To obtain a copy of your personal data held by jlwin and information about how it is processed.
• Right to Correction: To request correction of inaccurate or incomplete personal data.
• Right to Erasure / Blocking: To request deletion or suspension of processing of your personal data where it is no longer necessary for the stated purpose, subject to jlwin's legal retention obligations.
• Right to Object: To object to the processing of your personal data for marketing purposes. You may opt out of marketing communications at any time by contacting support.
• Right to Data Portability: To receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission of the Philippines if you believe jlwin has violated your privacy rights.

10. Children's Privacy and Age Restriction

The jlwin Platform is strictly for individuals aged 21 years and above in accordance with PAGCOR regulations. jlwin does not knowingly collect personal data from individuals under 21 years of age. If jlwin becomes aware that personal data has been collected from an individual under the minimum age, the relevant Account will be immediately closed, associated funds will be refunded to the originating payment method, and all personal data will be deleted without undue delay.

If you believe a minor has registered an Account on the jlwin Platform, please contact [email protected] immediately so that corrective action can be taken.

11. International Data Transfers

Some of jlwin's service providers — including game studios and cloud infrastructure partners — may be located outside the Philippines. Where personal data is transferred to third countries, jlwin ensures that appropriate safeguards are in place, including data processing agreements that require the recipient to maintain standards of data protection consistent with the Data Privacy Act of 2012 and NPC regulations on cross-border data transfers. jlwin will not transfer personal data to jurisdictions that do not provide adequate protection without implementing compensating controls.

12. Updates to This Privacy Policy

jlwin may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform features. Material changes will be communicated to registered Players via the email address on their Account and/or via a prominent notice on the Platform prior to the changes taking effect. The "Effective Date" at the top of this Policy indicates when the current version entered into force. We encourage you to review this Policy periodically.

13. Contact & Data Protection Officer

For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by jlwin, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe that jlwin has infringed your rights under the Data Privacy Act of 2012. Information about filing a complaint with the NPC is available through official Philippine government channels.