Privacy Policy — jlq Casino

This Privacy Policy ("Policy") is issued by the Operator of jlq Casino ("jlq", "we", "us", or "our") and applies to all personal data collected through the jlq Casino platform accessible at jlq.bio, including the website, all associated game interfaces, the customer support system, and any communication channels maintained by jlq.

This Policy should be read together with jlq's Terms and Conditions and Responsible Gaming Policy. By registering for a jlq account, you confirm that you have read, understood, and agree to the data practices described in this Policy.

This Policy applies to all individuals who:

• Register or attempt to register a player account on jlq;
• Browse or interact with the jlq website, whether registered or not;
• Contact jlq's customer support team via live chat, email, or any other available channel;
• Participate in any promotion, survey, or other engagement activity offered by jlq.

For the purposes of the Data Privacy Act of 2012 and applicable regulations, the data controller responsible for the personal data collected and processed through the jlq Casino platform is the Operator of jlq Casino, operating under PAGCOR licence and registered for the purposes of Philippine data protection law.

All data subject requests and privacy-related queries should be directed to jlq's designated Data Protection Officer (DPO). Contact details for the DPO are provided in Section 15 (Contact and Complaints) of this Policy.

Where jlq engages third-party processors to handle personal data on its behalf — such as payment processors, KYC verification providers, and cloud hosting services — jlq remains the data controller and is responsible for ensuring that such processors handle personal data in accordance with this Policy and applicable Philippine law.

jlq collects the following categories of personal data from players and platform visitors:

jlq does not intentionally collect sensitive personal information beyond what is required for KYC compliance (such as government ID data containing nationality). Where sensitive personal information is collected, it is processed under the strict necessity and proportionality standards required by the DPA.

jlq collects personal data through the following means:

• Direct submission: Information you provide when registering a jlq account, completing KYC verification, submitting a deposit or withdrawal request, or contacting customer support;
• Automated technical collection: Technical and usage data collected automatically when you visit jlq.bio or interact with the platform, including via cookies and similar tracking technologies (see Section 9);
• Third-party verification providers: Identity and document verification data received from KYC service providers engaged by jlq to verify the accuracy of the information you provide during registration;
• Payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, UnionBank, Coins.ph, 7-Eleven CLiQQ, and USDT processing services when you make deposits or withdrawal requests;
• Regulatory sources: Where required by PAGCOR or anti-money laundering regulations, jlq may receive information from government databases or regulatory screening services for compliance purposes.

jlq processes your personal data for the following purposes, each supported by a defined legal basis under the Data Privacy Act of 2012:

1. Account registration and identity verification — to create and manage your jlq player account and verify your identity as required under PAGCOR's KYC standards. Legal basis: contractual necessity and compliance with legal obligation.
2. Processing deposits and withdrawals — to facilitate the movement of PHP funds between your jlq wallet and your registered Philippine payment method (GCash, Maya, bank). Legal basis: contractual necessity.
3. Regulatory compliance and AML screening — to fulfil jlq's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws, including transaction monitoring and suspicious activity reporting. Legal basis: compliance with legal obligation.
4. Fraud prevention and platform security — to detect, investigate, and prevent fraudulent activity, unauthorised account access, and breaches of jlq's Terms and Conditions. Legal basis: legitimate interest.
5. Customer support — to resolve your queries, complaints, and disputes in connection with your use of the jlq platform. Legal basis: contractual necessity.
6. Responsible gaming monitoring — to support jlq's responsible gaming obligations, including detecting patterns of high-risk play that may indicate problem gambling, administering cooling-off periods and self-exclusion requests. Legal basis: compliance with legal obligation and legitimate interest.
7. Platform improvement and analytics — to understand how players use the jlq platform and improve product features, game content, and the user experience. Legal basis: legitimate interest. Data used for analytics purposes is aggregated and anonymised wherever possible.
8. Direct marketing communications — to send you information about jlq promotions, bonuses, and new features, where you have given your consent or where permitted under applicable Philippine law. You may withdraw consent for marketing communications at any time by contacting jlq support. Legal basis: consent.

jlq may share your personal data with the following categories of recipients, strictly on a need-to-know basis and under appropriate data protection safeguards:

• KYC and identity verification providers: Third-party services engaged to verify the identity documents you submit during registration. These providers process your data only for verification purposes under contractual data processing agreements.
• Payment processing partners: GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven CLiQQ, Coins.ph, and USDT processing services require transaction data to process deposits and withdrawals. They act as independent data controllers for their own processing activities.
• Cloud infrastructure and hosting providers: jlq's platform operates on cloud infrastructure. Hosting providers store platform data, including encrypted player records, under strict service agreements.
• Game providers: JILI Games, PG Soft, Pragmatic Play, and other content providers may receive limited session and wagering data required to operate games and resolve game disputes. These providers do not receive your full identity profile.
• PAGCOR and regulatory authorities: jlq is required by law to report certain player information and transaction records to PAGCOR and, where applicable, the Anti-Money Laundering Council (AMLC) of the Philippines. These disclosures are made without prior notice to the player where required by law.
• Law enforcement and government agencies: jlq will disclose personal data to Philippine law enforcement, courts, or government agencies where required by valid legal process, court order, or mandatory regulatory requirement.
• Professional advisers: Legal counsel, auditors, and compliance consultants engaged by jlq may access personal data on a confidential basis where required to provide their professional services to the Operator.

Some of jlq's third-party service providers — including cloud hosting services, game providers, and KYC verification platforms — may be located outside the Philippines or may process data in servers outside Philippine territory.

Where personal data is transferred outside the Philippines, jlq ensures that such transfers are carried out only where:

• The receiving country has been assessed to provide an adequate level of data protection under NPC standards;
• The recipient has entered into a data transfer agreement incorporating standard data protection clauses consistent with Philippine DPA requirements; or
• The transfer is required for the performance of a contract between jlq and the player, or is necessary for the establishment, exercise, or defence of legal claims.

Players who have questions about specific international transfers, or who wish to obtain a copy of the relevant data protection safeguards, may contact jlq's Data Protection Officer using the contact details in Section 15.

jlq retains personal data for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable Philippine law. The following retention periods apply:

• Active account data (identity, contact, financial data): Retained for the duration of the account's active status plus a minimum of five (5) years from the date of account closure, as required by PAGCOR anti-money laundering regulations and the AMLA;
• Transaction records (deposit, withdrawal, and game history): Retained for a minimum of five (5) years from the transaction date, in accordance with PAGCOR requirements and Philippine tax regulations;
• KYC documents (copies of government-issued IDs): Retained for the lifetime of the account plus a minimum of five (5) years post-closure;
• Technical and usage data: Retained for up to two (2) years from the date of collection, after which it is anonymised or deleted;
• Customer support communications: Retained for up to three (3) years from the date of the last communication, or longer where relevant to an unresolved complaint or regulatory matter;
• Marketing consent records: Retained for the duration of the active marketing relationship plus one (1) year from withdrawal of consent, for record-keeping purposes.

At the expiry of the applicable retention period, personal data is securely deleted or permanently anonymised. Where deletion is not technically feasible within normal system operations, the data will be quarantined and access restricted pending scheduled deletion.

jlq uses cookies and similar technologies on jlq.bio to support the operation of the platform, improve performance, and analyse usage patterns. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of the jlq platform — including maintaining your login session, storing your wallet state, and enabling game interfaces to function correctly. These cannot be disabled without preventing the platform from functioning.
• Functional cookies: Remember your preferences (such as language settings or display preferences) to personalise your jlq experience across sessions.
• Analytical cookies: Collect aggregated and anonymised data about how visitors use jlq.bio — including which pages are visited most often, session lengths, and navigation paths. This information helps jlq improve the platform experience. Where possible, analytical data is de-identified at collection.
• Security cookies: Used to detect and prevent fraud, account hijacking attempts, and bot activity on the jlq login and registration pages.

jlq does not use advertising or cross-site tracking cookies that share your data with third-party advertising networks for targeted advertising purposes.

Most browsers allow you to control cookies through browser settings. However, disabling strictly necessary cookies will prevent you from accessing your jlq account and using the platform's game features. Instructions for managing cookies are available in your browser's help documentation.

Under the Data Privacy Act of 2012, as a data subject you have the following rights with respect to your personal data held by jlq:

To exercise any of the above rights, please contact jlq's Data Protection Officer using the contact details provided in Section 15 of this Policy. jlq will respond to data subject requests within 30 calendar days of receipt. Requests may be extended by a further 30 days in complex cases, in which case jlq will notify you of the extension and the reason for it.

jlq implements a range of technical and organisational security measures designed to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Transport encryption: All data transmitted between players' devices and jlq's servers is protected by TLS (HTTPS) encryption;
• Data encryption at rest: Sensitive personal data, including identification records and payment method details, is encrypted in storage using AES-256 or equivalent standards;
• Access controls: Access to personal data held by jlq is restricted on a need-to-know basis. Internal staff access is subject to role-based permissions, multi-factor authentication, and activity logging;
• Penetration testing and security audits: jlq's platform infrastructure undergoes regular security assessments and vulnerability testing;
• Session security: jlq's login system implements account lockout after repeated failed attempts and requires SMS-based OTP verification for new device logins to reduce the risk of unauthorised access;
• Incident response: jlq maintains a data breach response plan. In the event of a breach affecting your personal data, jlq will notify affected players and the National Privacy Commission within the timeframes required by the DPA.

While jlq takes reasonable security precautions, no online platform can guarantee absolute security. Players are also responsible for protecting their own login credentials and maintaining the security of the devices they use to access jlq.

jlq's age verification procedures are designed to prevent individuals under 21 from registering or maintaining active accounts. Where jlq discovers or has reasonable grounds to believe that an account has been registered by a person under 21, the account will be suspended immediately, all pending transactions will be halted, and the matter will be investigated in accordance with jlq's KYC and compliance procedures.

Any personal data collected from an individual later found to be under 21 will be deleted from jlq's systems as soon as the account closure process is complete, except where retention is required for regulatory or legal purposes relating to the account closure itself.

If you are a parent or guardian and believe that a minor under your care has registered on jlq, please contact jlq's support team immediately via live chat. jlq will take prompt action to close the account and address any related transactions.

The jlq platform may contain functional integrations with third-party services — in particular, game providers whose content is embedded within the jlq game lobby interface. These third-party providers operate their own platforms and privacy policies, which are independent of jlq's Policy.

jlq is not responsible for the privacy practices of third-party game providers or other external services accessible through the jlq platform. Where you interact directly with a third-party provider's interface (for example, a live game stream powered by a provider's proprietary software), your data may also be processed by that provider in accordance with their own privacy policy.

jlq does not include external website links in the player-facing areas of jlq.bio. Where any such links are present in informational or support contexts, this Policy does not cover data processed by those external sites, and jlq makes no representations about their data practices.

jlq may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulations, or jlq's data processing practices. The effective date at the top of this document will be updated to reflect the date of the most recent revision.

Where changes to this Policy are material — meaning they affect how your personal data is collected, used, or shared in ways that may be significant to you — jlq will notify you through one or more of the following channels before the changes take effect:

• A notice displayed on the jlq platform upon your next login;
• An SMS notification to your registered Philippine mobile number;
• A notification to your registered email address.

Your continued use of jlq Casino after the effective date of a revised Policy constitutes your acknowledgement of the changes. If you do not agree to the revised Policy, you should stop using the platform and may request account closure in accordance with jlq's Terms and Conditions.

The most current version of this Policy is always accessible at jlq.bio/privacy-policy.

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about jlq's data practices, please contact jlq's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 on the jlq platform — the fastest route for urgent privacy-related queries;
• Email: [email protected] — please include "Privacy Request" in the subject line along with a brief description of your query;
• Postal / Written Requests: If you need to submit a formal written data subject request, this may be made in writing to jlq's registered business address. Please contact jlq support via live chat to obtain the current postal address.

jlq aims to acknowledge all privacy-related queries within 5 business days and to provide a substantive response within 30 calendar days of the date of receipt. Complex requests may take up to 60 days, in which case jlq will notify you of the extended timeline.