Privacy Policy

1. Who We Are

j2l ("j2l," "we," "us," or "our") is the operator of the online gaming platform accessible at j2l.one and all associated subdomains and services (the "Platform"). j2l is the personal information controller responsible for the collection and processing of personal data in connection with the Platform, as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations.

If you have questions about this Privacy Policy or the way j2l handles your personal data, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

2. Personal Data We Collect

The categories of personal data j2l may collect about you include, but are not limited to, the following:

j2l does not intentionally collect sensitive personal information beyond what is necessary for identity verification and AML compliance. Where sensitive data is collected (e.g., a scanned government ID containing nationality), it is treated with heightened protection measures.

3. How We Collect Your Data

j2l collects personal data through the following means:

• Directly from you — when you register an account, complete KYC, make a deposit or withdrawal, contact support, or participate in a promotion;
• Automatically — through server logs, cookies, and similar technologies when you access the Platform (see Section 8);
• From third parties — including identity verification service providers, payment processors (GCash, Maya, BPI, BDO, Metrobank), fraud prevention services, and where permitted by law, publicly available sources for AML screening purposes.

4. Why We Use Your Personal Data

j2l processes your personal data for the following purposes:

• To create, verify, and manage your j2l account;
• To process deposits, withdrawals, and in-platform transactions in Philippine Peso (₱);
• To verify your identity and age (21+) in compliance with PAGCOR requirements and the DPA;
• To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Republic Act No. 9160 (Anti-Money Laundering Act) as amended;
• To detect and prevent fraud, cheating, multi-accounting, and other prohibited conduct;
• To operate responsible gaming tools, including deposit limits, self-exclusion, and reality checks;
• To personalise your gaming experience and deliver relevant promotional offers (where you have opted in);
• To provide customer support and resolve disputes;
• To improve the Platform through analytics on aggregate, anonymised usage data;
• To comply with legal obligations, regulatory requests, and court orders.

5. Legal Basis for Processing

Under the Philippines Data Privacy Act and its IRR, j2l processes your personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform the contract with you (your j2l account and the services you use);
• Legal obligation — processing is required to comply with applicable Philippine laws, including AML, PAGCOR regulations, and tax obligations;
• Legitimate interests — processing is necessary for j2l's legitimate interests in fraud prevention, platform security, and responsible gaming, where these interests are not overridden by your rights;
• Consent — for optional processing such as marketing communications, where we rely on your freely given, specific, and informed consent, which you may withdraw at any time.

6. Data Sharing & Disclosure

j2l does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary:

• Payment processors — GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, and Metrobank, for the purpose of processing your transactions;
• Identity verification providers — third-party KYC and liveness check services engaged to verify your identity documents;
• AML screening providers — for sanctions list screening and politically exposed person (PEP) checks;
• Game content providers — third-party game studios that power j2l's slot, live casino, bingo, and other game offerings, which may receive anonymised session data for game operation purposes;
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law;
• Professional advisors — lawyers, auditors, and accountants, subject to confidentiality obligations.

All third-party processors engaged by j2l are contractually required to process personal data only for the specified purpose and to maintain appropriate security measures consistent with DPA requirements.

7. Data Retention

j2l retains personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, regulatory, and accounting requirements. Specific retention periods include:

• Account data — retained for the duration of your active account plus five (5) years following account closure;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLC record-keeping requirements;
• KYC documents — retained for the duration of the account relationship plus five (5) years;
• Communications & support records — retained for two (2) years from the date of the interaction;
• Technical/log data — retained for twelve (12) months from collection.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised.

8. Cookies & Tracking Technologies

j2l uses cookies and similar technologies (web beacons, pixel tags, local storage) on the Platform for the following purposes:

• Essential cookies — necessary for the Platform to function, including maintaining your login session and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences (e.g., language, display settings) to improve your experience.
• Analytics cookies — collect anonymised data on how users navigate the Platform to help us improve performance and content. No personally identifiable information is transmitted to analytics providers.

j2l does not use third-party advertising or behavioural tracking cookies. You may control non-essential cookies through your browser settings; however, disabling essential cookies will affect Platform functionality.

9. Data Security

j2l implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of personal data at rest in j2l's databases;
• Password hashing using industry-standard algorithms (passwords are never stored in plaintext);
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments;
• Intrusion detection and monitoring systems.

In the event of a personal data breach that is likely to adversely affect your rights and freedoms, j2l will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with DPA requirements.

10. Your Data Subject Rights

Under the Philippines Data Privacy Act, you have the following rights regarding your personal data held by j2l:

• Right to be informed — to know what personal data j2l collects, processes, and retains about you;
• Right of access — to request a copy of the personal data j2l holds about you;
• Right to rectification — to request correction of inaccurate or incomplete personal data;
• Right to erasure ("Right to be Forgotten") — to request deletion of your personal data where j2l no longer has a legal basis or legitimate reason to retain it;
• Right to object — to object to specific processing activities, particularly those based on legitimate interests or for direct marketing purposes;
• Right to data portability — to receive a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to withdraw consent — where processing is based on consent, to withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe j2l has violated your data privacy rights.

To exercise any of these rights, please contact our DPO using the details in Section 14. j2l will respond to verified requests within thirty (30) days of receipt. Some rights are subject to legal exceptions; j2l will explain any applicable exceptions when responding to your request.

11. Children and Minors

The j2l Platform is strictly intended for persons aged 21 years and above. j2l does not knowingly collect personal data from individuals under the age of 21. If j2l becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, the associated account will be terminated immediately, all data will be deleted, and any funds will be returned to the source payment method. If you believe a minor has accessed the Platform, please contact our support team immediately.

12. Cross-Border Data Transfers

Some of j2l's third-party service providers — including game content providers and certain technical infrastructure operators — may be located or operate servers outside the Philippines. Where personal data is transferred outside the Philippines, j2l ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection obligations equivalent to those under the DPA. Such transfers are conducted in accordance with the NPC's rules on cross-border data transfers.

13. Updates to This Privacy Policy

j2l reserves the right to update this Privacy Policy at any time. Material changes — those that significantly affect your rights or j2l's data processing practices — will be communicated to registered users via the email address or mobile number on file at least seven (7) days before the effective date. Minor clarifications may be made without advance notice. The "Last updated" date at the top of this Policy reflects the most recent revision. Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgement of the revised terms.

14. Contact & Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or j2l's data processing practices, please contact our Data Protection Officer:

Email: [email protected] (plain text — not a clickable link)

Subject line: Privacy / Data Request

j2l's support team is available 24/7 and includes Filipino-speaking agents. For formal data subject requests, please include your full name, registered email address or mobile number, and a description of your request. j2l may ask you to verify your identity before processing the request.

If you are not satisfied with j2l's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).