jl667 Privacy Policy

1Data Controller

jl667 ("jl667," "we," "us," or "our") is the data controller responsible for your personal information collected through jl667.org. As data controller, jl667 determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC) of the Philippines.

jl667 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. You may reach our DPO at [email protected] with the subject line "Data Privacy — DPO Enquiry."

2Personal Data We Collect

jl667 collects the following categories of personal data, to the extent necessary for the purposes set out in Section 4 of this policy:

jl667 does not intentionally collect sensitive personal information beyond what is required for regulatory identity verification. We do not collect government biometric data, health information, or political or religious affiliation data.

3How We Collect Your Data

3.1 Directly from You

The majority of personal data jl667 holds is provided directly by you during the following interactions:

• Account registration and KYC identity verification;
• Payment processing — deposits and withdrawal requests;
• Customer support communications via live chat or email;
• Completion of responsible gaming tools (deposit limit requests, self-exclusion submissions);
• Responses to promotions, surveys, or competitions.

3.2 Automatically

When you access jl667.org, certain technical data is collected automatically by our servers and analytics systems. This includes your IP address, device identifiers, browser information, and session activity logs. This data is used for security monitoring, fraud detection, and platform performance analysis.

3.3 From Third Parties

In limited circumstances, jl667 may receive data about you from third parties, including:

• Payment service providers (GCash, PayMaya, BPI, BDO, Metrobank) for payment verification and fraud prevention;
• Identity verification service providers used for KYC compliance;
• PAGCOR and Philippine government authorities, where required by law;
• Fraud and AML screening services.

4Purposes & Legal Basis for Processing

jl667 processes your personal data only where there is a lawful basis to do so under the Philippine Data Privacy Act. The following table sets out our processing purposes and the corresponding legal basis:

5Data Sharing & Disclosure

jl667 does not sell your personal data to third parties. We share your personal information only in the following circumstances and with the following categories of recipients:

5.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment processors (GCash, PayMaya, BPI, BDO), identity verification providers, game providers, fraud prevention services, and cloud infrastructure providers. All service providers are required to implement appropriate security measures and may only process data in accordance with our instructions.

5.2 Regulatory Authorities

jl667 is legally required to share certain data with PAGCOR as part of our operating license conditions. We may also be required to disclose data to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or law enforcement authorities when required by a valid legal order or applicable Philippine law.

5.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of jl667's business or assets, personal data may be transferred to the acquiring entity as part of the transaction. Players will be notified in advance of any such transfer where practicable, and the acquiring entity will be required to honor this Privacy Policy.

6Cookies & Tracking Technologies

jl667.org uses cookies and similar tracking technologies to operate the platform, remember your preferences, detect fraud, and analyze site usage. Cookies are small data files stored on your device by your browser.

6.1 Types of Cookies We Use

• Strictly Necessary Cookies: Required for core platform functions such as session authentication and security. These cannot be disabled without affecting platform functionality;
• Functional Cookies: Remember your preferences such as language settings and login state on trusted devices;
• Analytics Cookies: Collect aggregated, anonymised data about how players use jl667.org to help us improve the platform experience;
• Security Cookies: Help detect fraudulent sessions, bot activity, and unauthorized login attempts.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect your ability to use some jl667 platform features. jl667 does not use third-party advertising cookies.

7Data Retention

jl667 retains personal data only for as long as is necessary for the purpose for which it was collected or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and KYC Data: Retained for the lifetime of your account plus a minimum of five (5) years after account closure, as required by PAGCOR and AMLC regulations;
• Transaction and Payment Records: Retained for a minimum of five (5) years from the transaction date in compliance with AML and tax reporting requirements;
• Gaming Activity Logs: Retained for five (5) years from the date of activity for regulatory compliance and dispute resolution purposes;
• Customer Support Records: Retained for three (3) years from the date of the support interaction;
• Marketing Consent Records: Retained until consent is withdrawn, plus one (1) year thereafter as evidence of prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymised using methods that prevent reconstruction of the original data.

8Data Security

jl667 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and jl667.org is protected by TLS 1.2 or higher (HTTPS). The padlock icon in your browser confirms this protection is active;
• Encryption at Rest: Personal data and financial records stored in our databases are encrypted using AES-256 encryption;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with data access undergo background checks and regular security training;
• Two-Factor Authentication: Available for all player accounts to add an additional layer of protection against unauthorized access;
• Security Monitoring: Our systems are monitored 24/7 for unauthorized access attempts, suspicious activity, and potential data breaches;
• Regular Audits: jl667 conducts regular internal security reviews and third-party penetration tests to identify and address vulnerabilities.

In the event of a personal data breach that poses a risk to your rights and freedoms, jl667 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where required by the Data Privacy Act.

9Your Data Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by jl667:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Rights Request." jl667 will respond within thirty (30) days of receiving a verifiable request. Identity verification may be required before processing your request.

10Children's Privacy

jl667 is strictly prohibited to persons under the age of 21 years. We do not knowingly collect, process, or retain personal data from individuals under 21 years of age. Age verification is conducted at the point of registration as part of our KYC process.

If jl667 discovers that personal data has been collected from a person under 21 years of age, we will immediately close the account, return any deposit funds in accordance with our standard procedures, delete the personal data concerned, and report the incident to PAGCOR as required by our operating license conditions.

If you are a parent or guardian and believe your child under 21 may have accessed jl667, please contact [email protected] immediately.

11Cross-Border Data Transfers

Some of jl667's service providers and game suppliers are located outside the Philippines. Where personal data is transferred to a country outside the Philippines, jl667 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act, including contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law.

Personal data transferred internationally is limited to what is strictly necessary for the provision of the specific service. jl667 does not transfer personal data to jurisdictions without adequate data protection frameworks unless appropriate contractual protections are first established.

12Marketing Communications

jl667 will send you promotional emails, SMS messages, or in-platform notifications about bonuses, tournaments, new games, and other offers only if you have provided your explicit consent during registration or at any subsequent point through your account notification preferences.

You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in the jl667 account settings dashboard;
• Clicking the "unsubscribe" link in any marketing email received from jl667;
• Sending a written opt-out request to [email protected].

Withdrawal of marketing consent will be processed within three (3) business days. Please note that opting out of marketing does not affect transactional communications — you will continue to receive account-related notifications such as deposit confirmations, withdrawal updates, and security alerts.

13Changes to This Privacy Policy

jl667 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When we make material changes — that is, changes that significantly affect your data rights or how we use your personal information — we will notify you by email to your registered address and via an in-platform notice at least fourteen (14) days before the changes take effect.

The updated policy will always be accessible at jl667.org/privacy-policy with a current "Last Updated" date. Your continued use of jl667 after the effective date of any update constitutes acceptance of the revised Privacy Policy. If you do not agree to material changes, you should cease using jl667 and may request account closure as set out in the Terms & Conditions.

14Contact & Complaints

For any questions, concerns, or formal requests regarding this Privacy Policy or jl667's data practices, please contact our Data Protection Officer:

If you are not satisfied with jl667's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the supervisory authority for data protection in the Philippines.

jl667 is committed to resolving all data privacy concerns fairly and promptly. We take every data-related complaint seriously and investigate all issues thoroughly.