j5jl Privacy Policy

This Privacy Policy applies to all personal data collected and processed by j5jl in connection with the operation of the j5jl online gaming platform accessible at j5jl.vip, including all account management, payment processing, game provisioning, customer support, and marketing activities.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, j5jl is the personal information controller responsible for your personal data. j5jl operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to PAGCOR's data governance requirements in addition to the Data Privacy Act.

By registering for a j5jl account or continuing to use the j5jl Platform after this Policy is brought to your attention, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing activities described herein to the extent that consent is the applicable legal basis for such processing.

j5jl collects personal data across several categories, as set out in the table below. The specific data elements collected in each category depend on the stage of your relationship with j5jl and the services you use.

j5jl does not intentionally collect sensitive personal information as defined under the Data Privacy Act — such as health information, religious or political beliefs, or biometric data — unless specifically required for a legitimate legal or regulatory purpose and with your explicit informed consent.

j5jl collects personal data through the following channels and mechanisms:

3.1 Direct Collection

The majority of personal data j5jl holds about you is provided directly by you — for example, during the account registration process, when you submit identity verification documents, when you contact customer support, or when you set responsible gaming limits. You are not obligated to provide this information, but failure to do so may prevent j5jl from providing certain services, including account verification and withdrawal processing.

3.2 Automated Collection

When you access and use the j5jl Platform, certain technical and usage data is collected automatically by j5jl's systems. This includes your IP address, device identifiers, browser characteristics, access timestamps, session duration, game interaction logs, and navigation paths within the Platform. This data is necessary for Platform security, fraud prevention, and service quality monitoring.

3.3 Third-Party Sources

j5jl may receive certain personal data from trusted third parties in the following circumstances:

• Payment Providers: GCash, PayMaya, and banking partners may share transaction confirmation data and account ownership verification information with j5jl as part of payment processing.
• Identity Verification Services: j5jl may use PAGCOR-approved third-party identity verification services to cross-reference registration data and validate government-issued identification documents.
• Regulatory Bodies: PAGCOR or other Philippine authorities may share information relevant to licensing compliance, responsible gaming compliance, or anti-money laundering obligations.

j5jl processes personal data only where there is a lawful basis for doing so under the Data Privacy Act of 2012. The following table sets out the primary purposes for which j5jl processes personal data and the corresponding legal basis under the Act:

j5jl does not sell, rent, or trade your personal data to third parties. j5jl may share personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data sharing agreements or legal obligations:

5.1 PAGCOR and Philippine Regulatory Authorities

As a PAGCOR-licensed operator, j5jl is legally required to provide personal data and gaming activity records to PAGCOR upon request and to submit mandatory reports under PAGCOR's regulatory framework. Similarly, j5jl is required to report certain transactions to the Anti-Money Laundering Council (AMLC) under Republic Act No. 9160, as amended. Disclosure to these authorities is a legal obligation, not a discretionary act by j5jl.

5.2 Payment Service Providers

j5jl shares the minimum personal data necessary with GCash, PayMaya, and other payment service providers to facilitate deposit and withdrawal transactions. This may include your registered name, account reference, transaction amount, and purpose of payment. These providers are bound by their own privacy policies and applicable Philippine financial regulations.

5.3 Identity Verification and KYC Providers

j5jl may engage PAGCOR-approved identity verification service providers to assist in verifying the identity and age of account applicants. Such providers process identity document data solely for the purpose of verification and are contractually prohibited from using this data for any other purpose.

5.4 Technology and Infrastructure Providers

j5jl uses third-party cloud infrastructure, game software providers, and platform technology vendors who may process personal data on j5jl's behalf as subprocessors. All such vendors are bound by data processing agreements that require them to implement appropriate security measures and process data only on j5jl's documented instructions.

5.5 Legal and Law Enforcement Disclosures

j5jl may disclose personal data when required to do so by a valid court order, subpoena, or other lawful legal process issued by a Philippine court or competent authority. j5jl will, where legally permissible and practicable, notify affected account holders of such disclosures.

The j5jl Platform uses cookies and similar tracking technologies to enable core Platform functionality, maintain session security, and analyze Platform usage patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. They cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences — such as language settings, responsible gaming limits display, and last-visited game categories — to improve your j5jl experience across sessions.
• Analytics Cookies: Collect aggregate, anonymized data about how players use the j5jl Platform — such as page load times, most-visited game sections, and error frequencies — to help j5jl improve Platform performance and usability.
• Security Cookies: Detect and prevent fraudulent access attempts, suspicious session behaviour, and abnormal login patterns. These are essential for account security.

j5jl does not use third-party advertising tracking cookies or cross-site behavioral tracking technologies. You may manage cookie preferences through your browser settings, though disabling strictly necessary or security cookies will impair your ability to use the j5jl Platform.

j5jl retains personal data for the periods necessary to fulfil the purposes described in this Policy, or as required by applicable law and regulation. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLC record-keeping obligations.
• Financial and Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, in compliance with anti-money laundering record-keeping requirements under Philippine law.
• Gaming Activity Logs: Retained for a minimum of two (2) years for dispute resolution, responsible gaming monitoring, and PAGCOR compliance reporting purposes.
• Customer Support Communications: Retained for a minimum of two (2) years from the date of the communication for quality assurance and dispute resolution.
• Responsible Gaming Records: Self-exclusion, limit, and cooling-off records are retained for the full period of the restriction plus five (5) years to prevent circumvention.
• Technical and Access Logs: Retained for a rolling period of ninety (90) days for security monitoring, subject to extension where an active security investigation is underway.

j5jl implements a layered security framework to protect personal data against unauthorized access, loss, alteration, or disclosure. Key technical and organizational measures include:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher. Sensitive data at rest — including identity documents and financial records — is encrypted using AES-256 or equivalent standards.
• Access Control: Access to personal data systems is restricted to authorized j5jl personnel on a least-privilege basis. All administrative access is logged, monitored, and subject to multi-factor authentication.
• Network Security: j5jl's infrastructure is protected by web application firewalls, intrusion detection systems, and regular vulnerability assessments conducted by independent security professionals.
• Employee Training: All j5jl staff who handle personal data undergo mandatory data privacy training upon onboarding and at regular intervals thereafter.
• Vendor Oversight: All third-party vendors who process personal data on j5jl's behalf are assessed for security compliance prior to engagement and are subject to contractual data protection obligations.
• Incident Response: j5jl maintains a documented data breach response procedure. In the event of a breach, j5jl's Data Privacy Officer is responsible for coordinating the response, assessing harm, and notifying the NPC and affected players as required by law.

Despite j5jl's best efforts, no data transmission over the internet or mobile network can be guaranteed completely secure. Players are responsible for maintaining the confidentiality of their own account credentials and for reporting suspected unauthorized access to j5jl support immediately.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by j5jl. To exercise any of these rights, contact j5jl's Data Privacy Officer through the support channels listed in Section 12.

The j5jl Platform is strictly intended for individuals who are twenty-one (21) years of age or older, as mandated by PAGCOR regulations. j5jl does not knowingly collect personal data from individuals under the age of 21.

If j5jl discovers or has reasonable grounds to believe that personal data has been submitted by or on behalf of an individual under 21 years of age, j5jl will:

• Immediately suspend the associated account;
• Delete all personal data associated with the account to the extent permitted by applicable law and retention obligations; and
• Report the matter to PAGCOR as required by the j5jl license conditions.

Parents and guardians who believe their child may have provided personal data to j5jl should contact j5jl's Data Privacy Officer immediately at the contact details set out in Section 12 of this Policy.

j5jl may update this Privacy Policy from time to time to reflect changes in data processing practices, legal requirements, or PAGCOR directives. When material changes are made, j5jl will:

• Update the "Last Updated" date at the top of this Policy;
• Post a prominent notice on the j5jl Platform or in-account notification panel for at least seven (7) days prior to the change taking effect; and
• Where practicable and where the changes materially affect your rights, notify registered players directly via SMS or email.

Your continued use of the j5jl Platform after the effective date of a revised Privacy Policy constitutes acknowledgment of the updated Policy. If you do not accept the revised Policy, you may close your account by contacting j5jl support, subject to any applicable legal retention requirements that will continue to apply to historical data.

j5jl has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to your personal data and j5jl's handling of it, you may contact the DPO through the following channels:

• Live Chat: Available 24/7 through the j5jl Platform. Request to speak with the Data Privacy Officer or submit a formal data privacy inquiry.
• Email: [email protected] — please include "Data Privacy Request" in the subject line.

All data subject rights requests will be acknowledged within two (2) working days of receipt. j5jl may request proof of identity before processing access, rectification, or deletion requests to prevent unauthorized disclosure of personal data to third parties claiming to act on an account holder's behalf.