This Privacy Policy explains how jl17 collects, uses, stores, shares, and protects the personal data of players and visitors in the Philippines. It is prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.
Before reading the full legal text below, here is a plain-English summary of the six core principles that govern how jl17 handles your personal data.
jl17 collects personal data only for specific, legitimate purposes — primarily account registration, KYC verification, transaction processing, and regulatory compliance. We do not collect data beyond what is necessary for these purposes.
All personal data held by jl17 is protected using industry-standard security measures including 256-bit SSL encryption in transit and encrypted storage at rest. Access is restricted to authorised personnel on a strict need-to-know basis.
jl17 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Data shared with third parties is limited to service providers who are contractually bound to handle it in accordance with this Policy.
This Policy explains clearly what data we collect, why we collect it, how long we keep it, and who we share it with. If our practices change in any material way, registered jl17 players will be notified before those changes take effect.
Philippine players have the right to access, correct, and request deletion of their personal data under the Data Privacy Act. jl17 provides a straightforward process for exercising these rights, described in full in Section 9 of this Policy.
jl17 retains personal data only for as long as it is needed for the stated purpose or required by applicable Philippine law — including Anti-Money Laundering Act (AMLA) record-keeping obligations. Data is securely deleted or anonymised once its retention period expires.
1.1 jl17 Casino Philippines ("jl17", "we", "us", "our") is the operator of the online gaming platform accessible at jl17.one. jl17 acts as the Data Controller for all personal data collected from players, prospective players, and visitors to the jl17 platform within the Philippines.
1.2 As Data Controller, jl17 determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and in a manner consistent with the rights of data subjects under Philippine law.
1.3 jl17 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. Contact details for the DPO are provided in Section 16.
2.1 This Privacy Policy applies to all personal data processed by jl17 in connection with:
2.2 This Policy applies exclusively to data processed by jl17. It does not govern the data practices of third-party game providers, payment processors, or any other third parties whose services are accessed through or in connection with the jl17 platform. Those parties are responsible for their own data privacy practices.
3.1 jl17 collects and processes the following categories of personal data:
4.1 jl17 collects personal data through the following means:
5.1 Under the Philippine Data Privacy Act of 2012, jl17 processes personal data on one or more of the following lawful bases:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (Terms & Conditions) |
| KYC identity and age verification | Compliance with legal obligation (PAGCOR, AMLA) |
| Processing deposits and withdrawals | Performance of a contract; compliance with BSP regulations |
| Anti-fraud and security monitoring | Legitimate interests; legal obligation |
| Responsible gaming monitoring | Legitimate interests; compliance with PAGCOR requirements |
| Customer support communications | Performance of a contract; legitimate interests |
| Platform improvement and analytics | Legitimate interests (with anonymised or aggregated data where possible) |
| Direct marketing (where opted in) | Consent |
5.2 Where jl17 relies on your consent as the legal basis for a specific processing activity (such as marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
6.1 jl17 uses the personal data it collects for the following purposes:
6.2 jl17 does not use personal data for automated decision-making that produces legal or similarly significant effects, except where required by law (for example, automated age-gating based on date of birth provided at registration).
7.1 jl17 does not sell, rent, or trade personal data to any third party for their own commercial or marketing purposes under any circumstances.
7.2 jl17 may share personal data with the following categories of third parties, strictly for the purposes described:
7.3 Any third party that receives personal data from jl17 is required to handle it in accordance with applicable Philippine privacy law and the specific terms of their contractual engagement with jl17.
8.1 jl17 retains personal data for no longer than is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as a general guide:
| Data Category | Retention Period |
|---|---|
| Account registration data (active account) | Duration of account plus 5 years after closure |
| KYC identity documents | 5 years from account closure (AMLA requirement) |
| Financial transaction records | 5 years from transaction date (AMLA / BSP requirement) |
| Game session logs | 3 years from session date |
| Customer support communications | 3 years from last interaction |
| Self-exclusion records | Permanent (for irrevocable exclusions); 5 years for time-limited exclusions |
| Marketing consent records | Duration of consent plus 2 years after withdrawal |
8.2 Following the expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Anonymised data (which cannot be linked back to any individual) may be retained indefinitely for statistical and analytical purposes.
9.1 The Philippine Data Privacy Act of 2012 grants all data subjects the following rights with respect to their personal data held by jl17:
You have the right to be informed about the collection, processing, and use of your personal data. This Policy is the primary means by which jl17 fulfils that obligation.
You have the right to request a copy of the personal data jl17 holds about you, including information about its source, how it has been used, and who it has been shared with. Requests will be fulfilled within 15 business days.
You have the right to request correction of any inaccurate, outdated, or incomplete personal data in your jl17 account. Updates to name, mobile number, or email require identity re-verification.
You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for retention. This right is subject to jl17's legal retention obligations under AMLA and PAGCOR regulations, which take precedence where applicable.
You have the right to object to the processing of your personal data for direct marketing purposes. To opt out of all jl17 marketing communications, contact support via live chat or email. Opt-out requests are processed within 3 business days.
You may request a copy of the personal data you provided to jl17 in a commonly used, machine-readable format, to the extent technically feasible and as permitted under applicable law.
If you believe jl17 has not handled your personal data in accordance with applicable Philippine privacy law, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
10.1 jl17 uses cookies and similar tracking technologies on the jl17.one platform to provide functionality, maintain session security, and analyse usage patterns. The following types of cookies are used:
10.2 jl17 does not use third-party advertising or behavioural targeting cookies. No cookie data collected by jl17 is shared with advertising networks or data brokers.
10.3 You may manage or disable non-essential cookies through your browser settings. Disabling essential cookies will impair your ability to log in or use core platform features. See your browser's help documentation for instructions on managing cookies.
11.1 Age is verified through mandatory KYC at the point of account activation and before any deposit or withdrawal is processed. Date of birth provided at registration is cross-referenced against the government-issued ID submitted during KYC.
11.2 If you are a parent or guardian and believe your child (under 21) has registered an account on jl17, contact our Data Protection Officer immediately at [email protected]. jl17 will investigate and take immediate corrective action.
12.1 In the ordinary course of operating an online gaming platform, some personal data processed by jl17 may be transferred to or accessed by service providers whose infrastructure is located outside the Philippines. Such transfers may include:
12.2 Where personal data is transferred outside the Philippines, jl17 ensures that the receiving party provides adequate safeguards for the protection of that data, either through: (a) contractual data processing agreements that impose obligations equivalent to those under the Philippine Data Privacy Act; or (b) the receiving country providing an adequate level of data protection as recognised by the National Privacy Commission.
12.3 jl17 does not transfer KYC identity documents or financial transaction records outside the Philippines except where legally compelled to do so by a court order or regulatory directive.
13.1 jl17 implements the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction:
13.2 Notwithstanding the above measures, no system connected to the internet is completely immune to security risks. jl17 cannot guarantee absolute security of personal data transmitted over the internet, and players are encouraged to take their own precautions including using strong passwords and enabling two-factor authentication on their jl17 accounts.
14.1 In the event of a personal data breach that is reasonably likely to give rise to a risk of harm to affected data subjects, jl17 will:
14.2 If you suspect that your jl17 account has been accessed without your authorisation, contact jl17 support via live chat immediately. jl17 will initiate account security procedures and investigate the incident.
15.1 jl17 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance.
15.2 Material changes to this Policy will be communicated to all registered jl17 players by email to the address on file, with at least 7 calendar days' notice before the changes take effect.
15.3 The "Last Updated" date at the top of this page reflects the date of the most recent revision. Continued use of the jl17 platform after the effective date of any change to this Policy constitutes acceptance of the revised terms.
15.4 The current version of this Privacy Policy supersedes all prior versions. jl17 maintains an archive of previous Policy versions which may be requested from the DPO.
16.1 For all data privacy inquiries, access requests, correction requests, erasure requests, objections, or complaints relating to jl17's handling of your personal data, contact our Data Protection Officer through the following channels:
16.2 If you are not satisfied with jl17's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines:
Every Filipino player on jl17 has these rights under RA 10173. Here's a quick-reference summary.
Request a full copy of the personal data jl17 holds about you, including how it was collected and how it has been used.
Request correction of any inaccurate or outdated personal data in your jl17 account. Name updates require KYC re-verification.
Request deletion of your data where it is no longer needed. Subject to AMLA and PAGCOR legal retention obligations.
Object to the processing of your data for direct marketing at any time. Opt-out requests are processed within 3 business days.
Receive a copy of the personal data you provided to jl17 in a machine-readable format, to the extent technically feasible.
File a complaint with the National Privacy Commission (NPC) if you believe jl17 has not handled your data lawfully or fairly.
jl17 handles every Filipino player's personal data with the seriousness it deserves. Your information is used only to run your account and keep the platform safe — nothing else. Ready to get started? Create your verified jl17 account today. 21+ only.