jlking Privacy Policy

This Privacy Policy ("Policy") describes how jlking ("jlking," "we," "us," or "our"), the operator of the online gaming platform accessible at jlking.one, collects, processes, stores, shares, and protects personal information provided by or generated by users ("Player," "you," or "your") in connection with the jlking website and all related services.

jlking acts as the personal information controller in respect of the data described in this Policy, as that term is defined under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA 2012), and its Implementing Rules and Regulations (IRR) issued by the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal information collected through: (a) the jlking website and platform; (b) account registration and verification processes; (c) the jlking cashier, including deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard; (d) customer support communications; and (e) any other interaction between you and jlking.

jlking collects the minimum personal information necessary to provide its services lawfully and effectively. The categories of personal data we collect include:

2.1 Account & Identity Data

• Full legal name as it appears on a Philippine government-issued identification document;
• Date of birth (for mandatory age verification — players must be 21 years or older);
• Residential address, city, and province within the Philippines;
• Username and encrypted password;
• Government-issued identification document details (document type, ID number, expiry date) submitted during Know Your Customer (KYC) verification.

2.2 Contact Data

• Active Philippine mobile number (used for OTP verification and account communications);
• Email address, where provided.

2.3 Financial & Transaction Data

• GCash mobile number or PayMaya account reference associated with deposit and withdrawal transactions;
• Bank account details (account name and account number) for bank transfer transactions via BPI, BDO, or Metrobank, where applicable;
• Partial card details (last four digits, card type) retained for fraud prevention purposes;
• Transaction history including deposit amounts, withdrawal amounts, dates, reference numbers, and payment method used.

2.4 Gaming & Behavioral Data

• Game session records including games played, wager amounts, winnings, losses, session duration, and game type;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status).

2.5 Technical & Device Data

• IP address and approximate geographic location at login;
• Device type, operating system, browser type and version;
• Session identifiers, access timestamps, and navigation patterns within the Platform;
• Cookie and tracking technology data as described in Section 7.

2.6 Communications Data

• Records of live chat support interactions, including chat transcripts and support ticket content;
• Any correspondence submitted through contact forms, email, or other communication channels directed to jlking.

jlking collects personal data through the following means:

• Directly from you — during account registration, KYC verification, deposit and withdrawal requests, responsible gaming tool configuration, and customer support interactions;
• Automatically — through cookies, session tokens, server logs, and device fingerprinting technologies when you access or use the Platform;
• From payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and card networks provide transaction confirmation data necessary to credit or debit your jlking wallet;
• From identity verification providers — where jlking engages a third-party KYC or AML screening service, that service may return identity match or risk-flag data based on the documents you submit;
• From analytics providers — aggregated or pseudonymized behavioral data may be derived from analytics tools used to improve platform performance and user experience.

jlking uses the personal data it collects for the following specific purposes:

jlking does not use your personal data for any purpose materially different from those listed above without first providing you with appropriate notice and, where required by law, obtaining your consent.

Under the Data Privacy Act of 2012, jlking processes your personal information on one or more of the following lawful bases:

• Consent — where you have given your explicit, freely given, specific, and informed consent to the processing, such as for marketing communications or optional data sharing;
• Contractual necessity — where processing is necessary to perform our obligations under the Terms and Conditions you accepted upon registration, including account management, payment processing, and game provision;
• Legal obligation — where processing is necessary to comply with a legal obligation to which jlking is subject, including obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
• Legitimate interests — where processing is necessary for the legitimate interests of jlking or a third party, provided those interests are not overridden by your rights and interests, including fraud prevention, platform security, and service improvement;
• Vital interests — in limited circumstances where processing is necessary to protect life or prevent serious harm, including responsible gaming interventions.

jlking does not sell your personal data to third parties. We may share your data with carefully selected third parties only in the following circumstances and to the minimum extent necessary:

• Payment processors — GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and card network processors receive the financial data necessary to execute your deposit and withdrawal instructions;
• KYC and identity verification providers — third-party services engaged to verify your identity and screen against AML watchlists, as required for regulatory compliance;
• Game providers — JILI Games and other licensed game content suppliers may receive pseudonymized session data necessary for game operation, dispute resolution, and RNG certification compliance;
• Technology and infrastructure providers — cloud hosting, content delivery, and cybersecurity service providers who process data on jlking's behalf under data processing agreements that impose obligations consistent with the DPA 2012;
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where jlking is legally required to disclose data by law, court order, or regulatory direction;
• Professional advisers — legal, accounting, and audit firms, subject to professional confidentiality obligations.

The jlking Platform uses cookies and similar tracking technologies to operate, secure, and improve the user experience. The following types of cookies are used:

• Strictly necessary cookies — required for the Platform to function, including session authentication, security tokens, load balancing, and CSRF protection. These cannot be disabled without affecting Platform functionality;
• Functional cookies — used to remember your preferences, language settings, and login state to provide a more personalized experience;
• Analytics cookies — used to collect aggregated, pseudonymized data about how players navigate and interact with the Platform, enabling jlking to identify areas for improvement;
• Security cookies — used to detect and prevent fraudulent activity, including unusual login patterns and multi-account behavior.

jlking does not use third-party advertising or behavioral tracking cookies that profile you across external websites. You may manage your cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to log in and use the Platform.

jlking retains personal data for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law, whichever is longer. Specific retention periods include:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements and PAGCOR regulatory obligations;
• Transaction data — retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLA obligations;
• KYC and verification documents — retained for a minimum of five (5) years following the termination of the business relationship;
• Customer support communications — retained for a period of two (2) years from the date of the last interaction, or longer where the communication relates to an unresolved dispute or regulatory inquiry;
• Gaming and behavioral data — retained for the duration of your account and for two (2) years following account closure, except where retained longer as part of a dispute or regulatory investigation;
• Technical and device data (logs) — retained for a period of twelve (12) months for security monitoring purposes.

At the end of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual player.

jlking implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport encryption — all data transmitted between your device and jlking servers is encrypted using 256-bit TLS/SSL, the same standard used by Philippine banking applications including GCash and BPI Mobile;
• Password security — account passwords are never stored in plaintext. They are hashed using industry-standard one-way cryptographic algorithms before storage;
• Access controls — access to personal data within jlking's systems is restricted to authorized personnel on a strict need-to-know basis, enforced through role-based access controls and audit logging;
• OTP verification — sensitive account actions including password resets, withdrawal requests above certain thresholds, and contact detail changes require OTP verification to your registered Philippine mobile number;
• Intrusion detection — jlking's infrastructure is monitored continuously for suspicious activity, unauthorized access attempts, and anomalous data access patterns;
• Regular security assessments — the Platform undergoes periodic security audits and vulnerability assessments to identify and remediate risks proactively.

As a data subject under the Data Privacy Act of 2012 and its IRR, you have the following rights in respect of your personal data held by jlking:

• Right to be informed — the right to know whether jlking holds your personal data, the purposes for which it is processed, and how it is being used;
• Right of access — the right to request a copy of the personal data jlking holds about you, together with information about how it has been processed;
• Right to rectification — the right to request correction of any inaccurate, incomplete, or outdated personal data jlking holds about you;
• Right to erasure or blocking — the right to request deletion or blocking of your personal data where processing is unlawful, the data is no longer necessary for the purpose it was collected, or you withdraw consent upon which processing is based, subject to overriding legal retention obligations;
• Right to data portability — the right to receive the personal data you have provided to jlking in a structured, commonly used, and machine-readable format;
• Right to object — the right to object to the processing of your personal data in certain circumstances, including for direct marketing purposes;
• Right to file a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) if you believe jlking has violated your rights under the DPA 2012.

To exercise any of the above rights, please contact jlking's Data Protection Officer (DPO) at [email protected] or via live chat on the Platform. jlking will respond to all verified data subject requests within fifteen (15) business days of receipt, or within such other timeframe as may be specified by the NPC.

The jlking Platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR's responsible gaming regulations for the Philippines. jlking does not knowingly collect, process, or retain the personal data of individuals under 21 years of age.

Age verification is performed at the point of account registration through date-of-birth declaration and, where required, through documentary identity verification. If jlking becomes aware that an account has been registered by or on behalf of a person under the age of 21, the account will be immediately and permanently suspended, all personal data associated with the account will be deleted to the extent permitted by law, and any balance will be handled in accordance with applicable regulatory requirements.

If you are a parent or guardian and believe that a minor in your care has registered an account with jlking, please contact our support team immediately at [email protected].

The jlking Platform is operated primarily for Philippine players, and personal data is processed in data centers located within or serving the Asian region. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines, including cloud infrastructure providers with global data center operations.

Where personal data is transferred outside the Philippines, jlking takes appropriate safeguards to ensure that such transfers are consistent with the requirements of the Data Privacy Act of 2012 and the NPC's regulations on cross-border data transfers. These safeguards may include contractual clauses that impose data protection obligations on the receiving party equivalent to those required under Philippine law, or reliance on adequacy decisions where applicable.

The jlking Platform does not contain links to third-party websites, social media platforms, or external services for commercial or advertising purposes. Where any third-party service is integrated into the Platform (such as payment gateways), that integration is limited to the functionality required to complete transactions and does not result in third parties receiving personal data beyond what is necessary for that purpose.

jlking is not responsible for the data privacy practices of any third-party service providers. Players are encouraged to review the privacy policies of GCash, PayMaya, and any other payment service they use in connection with jlking transactions.

jlking reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, regulatory requirements, or Platform operations. When material changes are made, jlking will notify registered players through a prominent notice on the Platform and, where practicable, by direct notification to the registered mobile number or email address on file.

The effective date at the top of this Policy will be updated to reflect the date the revised Policy takes effect. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must discontinue use of the Platform and may request account closure.

jlking has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to the processing of your personal data by jlking, you may contact the DPO through the following channels:

• Live Chat Support: Available 24/7 via the Platform
• Email: [email protected]

jlking will acknowledge receipt of all data privacy inquiries within three (3) business days and will aim to resolve all substantive requests within fifteen (15) business days. Complex requests involving large volumes of data or requiring third-party coordination may take longer, in which case jlking will notify you of the expected resolution timeline.

If you are not satisfied with jlking's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which has jurisdiction over data privacy matters arising under the Data Privacy Act of 2012. Refer to the FAQ page for general platform information, or the Terms & Conditions for the full contractual framework governing your use of jlking.