jl677 Privacy Policy — Your Data, Your Rights

This Privacy Policy is published by and applies to jl677, the online gaming platform accessible at jl677.app (the "Platform"), which is operated under a license issued by the Philippines Amusement and Gaming Corporation (PAGCOR). jl677 is the data controller responsible for the personal information you provide when you register an account, use the platform's services, or otherwise interact with jl677.

This Policy applies to all personal data collected from individuals who access or use the jl677 platform, regardless of the device used to access it — whether that's a mobile phone in Manila, a laptop in Cebu, or a tablet in Davao. It covers information collected through the jl677 website, mobile-optimized interface, live chat support channels, and any other official jl677 communication channels.

This Policy does not apply to third-party services linked to or integrated with the jl677 platform — such as your GCash or Maya application, your bank's online banking portal, or game providers whose titles appear in the jl677 lobby. Those services have their own privacy policies, and jl677 has no control over how those third parties handle your data within their own systems.

jl677 collects only the personal data that is necessary for the specific, legitimate purposes described in Section 4 of this Policy. The categories of personal data we collect are as follows:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (to verify that you are 21 years of age or older);
• Philippine mobile number (primary account identifier and two-factor authentication channel);
• Username chosen at the time of registration;
• Password (stored exclusively in hashed, non-reversible format — jl677 staff cannot view your password).

2.2 Identity Verification (KYC) Data

• Scanned copy or photograph of a valid Philippine government-issued identification document (passport, driver's license, SSS/GSIS ID, PhilHealth card, Postal ID, or UMID);
• Proof of residential address (utility bill, bank statement, or government-issued document bearing your address, dated within 90 days);
• Source of funds documentation (where required by jl677's AML compliance procedures or PAGCOR regulations for large transactions);
• Selfie photograph for identity matching purposes, where required.

2.3 Financial and Transaction Data

• Payment method identifiers — such as your GCash-registered mobile number, Maya account reference, or bank account details — as provided by you for deposit and withdrawal processing;
• Deposit amounts, dates, and transaction reference numbers;
• Withdrawal requests, amounts, and processing status;
• Account balance history and bonus wallet activity.

2.4 Gaming Activity Data

• Games played, including game titles, session start and end times, and duration;
• Wager amounts, bet outcomes, and net gaming results;
• Bonus offers claimed and wagering requirement progress;
• Responsible gaming tool settings and usage history (e.g., deposit limits set, cool-off periods activated).

2.5 Technical and Device Data

• IP address at time of registration and each subsequent login;
• Device type, operating system, and browser type;
• Session timestamps and login history;
• Cookies and similar tracking technologies (see Section 7).

2.6 Communications Data

• Records of your communications with jl677 support, including live chat transcripts and any emails exchanged;
• Feedback, complaints, and dispute records.

jl677 collects personal data through the following means:

3.1 Directly From You

The majority of personal data jl677 holds is provided directly by you during the account registration process, during KYC verification, when you initiate a deposit or withdrawal, when you contact jl677 support, or when you update your account profile. This direct provision is entirely voluntary — however, where certain data is required for regulatory compliance (such as KYC documentation for withdrawals), jl677 may be unable to process your request without it.

3.2 Automatically Through Platform Use

When you access or use the jl677 platform, certain technical data is collected automatically. This includes your IP address, device information, session duration, pages visited within the jl677 platform, and cookie-based tracking data. This automatic collection is a standard function of web-based platforms and is necessary for security monitoring, fraud prevention, and platform performance optimization.

3.3 From Third-Party Payment Providers

When you initiate a transaction via GCash, Maya, or a bank transfer, jl677 receives transaction confirmation data from the respective payment provider, including the transaction reference number, amount, and confirmation status. jl677 does not receive your full GCash PIN, Maya login credentials, or online banking password — these remain entirely within the respective provider's secure systems.

3.4 From Identity Verification Partners

In certain circumstances, jl677 may use third-party identity verification services to assist with KYC processing. These services may cross-reference the identification documents you submit against Philippine government databases to confirm their authenticity. Any such partner operates under a data processing agreement with jl677 and is bound to handle your data in accordance with this Privacy Policy and applicable Philippine law.

jl677 processes your personal data exclusively for the following stated purposes. We do not process personal data in any manner incompatible with these purposes without your prior consent.

• Account Creation and Management: To create and maintain your jl677 player account, including your profile, balance, transaction history, and responsible gaming settings.
• Age Verification: To verify that you are at least 21 years of age before granting access to the jl677 platform, as required by PAGCOR regulations and Philippine gaming law.
• Identity Verification (KYC): To comply with PAGCOR licensing requirements and Philippine Anti-Money Laundering Act (AMLA) obligations by verifying the identity of players, particularly in connection with withdrawal processing and large transaction monitoring.
• Payment Processing: To process your deposits and withdrawals via your chosen payment method, to maintain accurate financial records, and to reconcile transactions with payment providers.
• Security and Fraud Prevention: To protect your jl677 account from unauthorized access, to detect and prevent fraudulent activity, bonus abuse, and multi-accounting, and to monitor for suspicious patterns indicative of money laundering or other illegal conduct.
• Platform Delivery and Technical Support: To deliver the gaming services you request, to optimize platform performance on your device, and to diagnose and resolve technical issues affecting your account or gaming experience.
• Customer Support: To respond to your queries, complaints, and dispute submissions, and to maintain records of communications for quality and accountability purposes.
• Regulatory Compliance and Reporting: To fulfill jl677's obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act of 2012, and any other applicable Philippine laws and regulations.
• Responsible Gaming: To implement and monitor responsible gaming measures, including deposit limit settings, cool-off periods, and self-exclusion requests, and to identify players who may be at risk of problem gambling.
• Marketing Communications (with consent): Where you have explicitly opted in, to send you information about jl677 promotions, bonuses, and new game releases via SMS or other channels. You may withdraw this consent at any time.

Under the Philippine Data Privacy Act of 2012, jl677 is required to have a lawful basis for each category of personal data processing. The legal bases on which jl677 relies are as follows:

• Contractual Necessity: Processing that is necessary to perform the contract between jl677 and you — specifically, the Terms and Conditions you agree to upon registration. This covers account creation, payment processing, and game delivery.
• Legal Obligation: Processing that jl677 is required to carry out to comply with applicable law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act. This covers KYC, AML monitoring, and regulatory reporting.
• Legitimate Interests: Processing that is necessary for jl677's legitimate business interests — such as security monitoring, fraud prevention, and platform performance optimization — where these interests are not overridden by your privacy rights.
• Consent: Where no other legal basis applies, jl677 will request your explicit consent before processing your data. This covers marketing communications. You have the right to withdraw this consent at any time without affecting the lawfulness of prior processing.

jl677 does not sell, rent, or disclose your personal data to third parties for their own commercial or marketing purposes. Your personal data may be shared with third parties only in the following circumstances:

6.1 Payment Service Providers

Transaction-related data is shared with GCash, Maya, BPI, BDO, UnionBank, 7-Eleven CLiQQ, USDT/TRC20 network processors, and Coins.ph solely for the purpose of processing your deposits and withdrawals. These providers act as independent data controllers with respect to transaction data processed within their own systems and are subject to their own privacy policies.

6.2 Identity Verification and KYC Partners

Where jl677 uses third-party services to assist with KYC document processing, your identity documents may be shared with those services under contractual data processing agreements that bind them to use the data exclusively for the stated verification purpose and to maintain appropriate security standards.

6.3 Game Providers

Certain game providers whose titles are integrated into the jl677 lobby may receive limited player data (such as a player session token or pseudonymous player identifier) necessary to initialize and authenticate your gaming session. No directly identifiable personal information such as your name, mobile number, or payment details is shared with game providers for this purpose.

6.4 Regulatory Authorities

jl677 may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities in connection with regulatory inspections, compliance audits, or pursuant to a valid legal order. jl677 will comply with such requirements in accordance with applicable law.

6.5 Law Enforcement

jl677 may disclose personal data to Philippine law enforcement authorities where required by law or where jl677 has a good-faith belief that such disclosure is necessary to prevent fraud, protect the rights of jl677 or other players, or comply with a legal process.

jl677 uses cookies and similar browser storage technologies on the platform. Cookies are small data files placed on your device when you visit a website. jl677 uses the following categories of cookies:

• Strictly Necessary Cookies: These are essential for the jl677 platform to function. They maintain your session login state, store your authentication token, and enable core platform features. These cookies cannot be disabled without disrupting your use of the platform.
• Functional Cookies: These remember your preferences on the jl677 platform — such as your chosen language, game display settings, and responsible gaming preferences — so you don't have to reconfigure them on each visit.
• Security Cookies: These are used to detect and prevent fraudulent access attempts, multi-accounting, and other security threats. They record device fingerprint and session metadata for comparison against known risk patterns.
• Analytics Cookies: Where consented to, jl677 uses analytics tools to understand how players use the platform — which pages are most visited, where players encounter friction, and how platform performance can be improved. Analytics data is aggregated and does not directly identify individual players.

You may manage cookie preferences through your browser's settings. Disabling strictly necessary cookies will prevent you from logging into and using the jl677 platform. Disabling analytics cookies will not affect your gaming experience.

jl677 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, and unlawful disclosure. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and jl677 servers is encrypted using industry-standard TLS (Transport Layer Security) protocols, equivalent to the encryption used by major Philippine banks.
• Password Hashing: Your account password is stored exclusively as a one-way cryptographic hash. jl677 staff cannot retrieve or view your original password. In the event of a data breach, your actual password cannot be derived from the stored hash.
• Two-Factor Authentication (2FA): jl677 provides and strongly encourages the use of SMS-based 2FA for all player accounts. 2FA adds an additional authentication step requiring a one-time passcode sent to your registered Philippine mobile number.
• Access Controls: Access to systems containing personal data is restricted to jl677 personnel with a direct operational need. All internal access is logged and subject to periodic review.
• Data Minimization: jl677 collects only the personal data that is strictly necessary for stated purposes and retains it only for as long as required (see Section 9).
• Regular Security Audits: jl677 conducts periodic security assessments of its platform infrastructure and data handling practices.

Despite these measures, no online system can guarantee absolute security. In the unlikely event of a personal data breach that poses a risk to your rights, jl677 will notify affected players and the National Privacy Commission (NPC) within the timeframes required by Philippine law.

jl677 retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Active Account Data: Retained for the duration of your account's active status on the jl677 platform, plus a minimum post-closure retention period as described below.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the record-keeping requirements of the Philippine Anti-Money Laundering Act and PAGCOR regulations.
• KYC Documentation: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction associated with the account, whichever is later, in compliance with AMLA requirements.
• Support Communications: Retained for a period of three (3) years from the date of the communication, for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for the duration of your consent and for a period of two (2) years following withdrawal of consent, to demonstrate compliance.

Following the expiry of applicable retention periods, jl677 will securely delete or anonymize your personal data in accordance with its internal data lifecycle management procedures. Anonymized or aggregated data that cannot be used to identify you may be retained indefinitely for analytical or statistical purposes.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights with respect to the personal data jl677 holds about you. To exercise any of these rights, submit a written request to jl677's Data Privacy Officer at [email protected] with the subject line "Privacy Rights Request."

The jl677 platform is strictly intended for individuals aged 21 years and older. jl677 does not knowingly collect, process, or retain personal data from persons under the age of 21. The platform employs age verification measures at registration, including date-of-birth confirmation and KYC identity checks, to prevent underage access.

If jl677 discovers or is notified that personal data has been collected from a person under the age of 21, it will immediately close the associated account, delete or securely destroy all personal data collected in connection with that account, and refund any real money balance to the payment method used for deposits (where verifiably linked to a responsible adult). Any pending bonus balances associated with an underage account will be forfeited.

Parents or guardians who believe that a person under 21 in their care has registered an account on jl677 are urged to contact the jl677 support team immediately at [email protected]. jl677 also strongly recommends the use of parental control and content filtering software on devices accessible to minors to prevent access to online gambling platforms.

jl677 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, jl677 will:

• Post the updated Privacy Policy at jl677.app/privacy-policy with a revised effective date displayed at the top of the document;
• Notify registered players via SMS to their registered Philippine mobile number, where the changes materially affect their rights or the processing of their personal data.

Your continued use of the jl677 platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this Policy periodically. If you do not agree with the terms of an updated Policy, you should discontinue use of the platform and may request account closure under the procedure described in jl677's Terms and Conditions.

jl677 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with this Privacy Policy and with the Data Privacy Act of 2012. The DPO is your primary point of contact for any privacy-related concerns, requests to exercise your data subject rights, or complaints about jl677's data handling practices.

How to Contact the jl677 DPO

• Email: [email protected] — use the subject line "Privacy Rights Request" or "Data Privacy Complaint" as appropriate.
• Live Chat: Available 24/7 on the jl677 platform. Ask the support agent to escalate your request to the Data Privacy Officer.

jl677 will acknowledge receipt of your privacy request within 72 hours and aims to provide a substantive response within 15 business days, in accordance with the NPC's recommended response timelines. For complex requests involving large volumes of data or requiring legal review, the response period may be extended by up to an additional 15 business days, in which case jl677 will notify you of the extension and the reasons for it.

If you are not satisfied with jl677's response to your privacy request, or if you believe your rights under the Data Privacy Act have been violated, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.