jlislot Privacy Policy

1 Who We Are

jlislot is a PAGCOR-licensed online casino and slot platform operated for Filipino players across the Philippines. For the purposes of this Privacy Policy, jlislot acts as the data controller — meaning we are responsible for deciding how and why your personal data is processed in connection with your use of our Platform.

jlislot operates in full compliance with Philippine Republic Act 10173, the Data Privacy Act of 2012, and its implementing rules and regulations as enforced by the National Privacy Commission (NPC). Our gaming operations are separately regulated by PAGCOR, which may also impose its own data handling obligations that we are legally required to follow.

If you have any questions about how jlislot handles your personal data, you may contact our Data Protection Officer (DPO) at the email address provided in Section 13 of this policy.

2 Data We Collect

jlislot collects only the personal data that is genuinely necessary to provide you with a safe, regulated, and enjoyable gaming experience. The categories of data we collect include:

3 How We Collect Your Data

jlislot collects your personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal request, contact our support team, or respond to a promotion.
• Automatically — when you access or interact with the jlislot Platform, our servers and analytics tools automatically record technical and behavioural data such as your IP address, device identifiers, pages visited, and session duration.
• From third-party KYC providers — jlislot uses regulated identity verification service providers to cross-reference the documents you submit against authoritative data sources, in line with PAGCOR's anti-money laundering (AML) requirements.
• From payment processors — our payment gateway partners (including GCash, Maya, and bank transfer partners) share limited transaction confirmation data with jlislot for reconciliation and fraud prevention purposes.
• From cookies and similar technologies — as described in Section 7 of this policy.

4 Why We Use Your Data

jlislot processes your personal data for the following specific purposes:

• Account creation and management — to register your account, authenticate your identity at login, maintain your profile, and enforce the one-account-per-player rule.
• KYC and age verification — to verify that you are at least 21 years of age as required by PAGCOR regulations, and to confirm your identity for AML compliance purposes.
• Payment processing — to process deposits, validate withdrawal requests, reconcile transactions, and detect payment fraud.
• Game delivery and fairness — to log game sessions, resolve disputes, maintain RNG audit trails, and provide accurate transaction histories in your account.
• Responsible gaming — to monitor account activity for signs of problematic gambling behaviour, enforce self-exclusion and deposit limit settings, and comply with PAGCOR's responsible gaming framework.
• Customer support — to respond to your queries, investigate complaints, and maintain records of support interactions for quality assurance.
• Legal and regulatory compliance — to meet jlislot's obligations under PAGCOR regulations, the Data Privacy Act, the Anti-Money Laundering Act (AMLA), and other applicable Philippine law.
• Marketing communications — to send you promotional offers, bonus notifications, and platform updates, but only where you have explicitly opted in to receive such communications. You may withdraw this consent at any time.
• Platform security and fraud prevention — to detect and prevent cheating, collusion, bot usage, multi-accounting, and other prohibited conduct described in jlislot's Terms and Conditions.

5 Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, jlislot relies on one or more of the following lawful bases when processing your personal data:

• Contractual necessity — processing is necessary to perform our contract with you (i.e., to operate your account, process payments, and deliver the games you play).
• Legal obligation — processing is required to comply with PAGCOR licensing conditions, AMLA obligations, NPC regulations, and other applicable Philippine statutes.
• Legitimate interests — processing is necessary for jlislot's legitimate interests in platform security, fraud prevention, responsible gaming enforcement, and business analytics, provided these interests do not override your fundamental rights.
• Consent — for optional processing activities such as marketing communications and the use of non-essential cookies, jlislot relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Sharing Your Data

jlislot does not sell your personal data to third parties. We share your data only in the following limited and controlled circumstances:

• Game providers — licensed game studios (such as PG Soft, Pragmatic Play, and JDB) receive session tokens and anonymised player identifiers to deliver game content. They do not receive your full identity or financial data.
• Payment processors — GCash, Maya, BPI, BDO, Metrobank, UnionBank, Visa/Mastercard acquirers, Coins.ph, and other payment partners receive only the minimum data necessary to process your specific transaction.
• KYC verification providers — regulated identity verification services receive your submitted KYC documents solely for the purpose of identity and age verification.
• PAGCOR and regulatory authorities — jlislot is legally required to share player data, transaction records, and gaming logs with PAGCOR upon request, and with the Anti-Money Laundering Council (AMLC) where suspicious transaction reporting obligations apply.
• Law enforcement — jlislot will disclose personal data to Philippine law enforcement agencies when required by a valid court order, subpoena, or other lawful process.
• Service providers — jlislot uses trusted third-party service providers for hosting, cybersecurity, customer support tooling, and analytics. These providers process data only on jlislot's instructions and under binding data processing agreements.

7 Cookies & Tracking Technologies

jlislot uses cookies and similar tracking technologies to deliver a functional, secure, and personalised experience on the Platform. The types of cookies we use are as follows:

You may manage your cookie preferences at any time through the cookie settings panel accessible from the jlislot Platform footer, or by adjusting your browser settings to block or delete cookies. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform.

8 Data Retention

jlislot retains your personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and PAGCOR regulations. The following retention periods apply as a general guide:

• Active account data — retained for the full duration of your account being open and active on jlislot.
• KYC and identity documents — retained for a minimum of five (5) years after account closure, as required by the Anti-Money Laundering Act and PAGCOR compliance obligations.
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, consistent with AMLA record-keeping requirements.
• Game logs and session records — retained for a minimum of two (2) years to support dispute resolution and regulatory audit requirements.
• Support communications — retained for two (2) years from the date of the most recent interaction for quality assurance and complaint handling purposes.
• Marketing data — retained until you withdraw consent to receive marketing communications, after which your details are removed from marketing lists within 30 days.

At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be associated with you as an individual.

9 Data Security

jlislot implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• AES-256 encryption for all personal and financial data stored at rest on jlislot servers;
• TLS 1.3 encryption for all data transmitted between your device and jlislot's Platform;
• Multi-factor authentication (MFA) available to all players and mandatory for all internal jlislot staff accounts;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists;
• Strict role-based access controls limiting staff access to personal data on a need-to-know basis;
• 24/7 automated threat monitoring and intrusion detection systems;
• Incident response procedures aligned with NPC breach notification requirements under the Data Privacy Act.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to the personal data jlislot holds about you: