99jl Privacy Policy

99jl ("we," "us," or "our") is the operator of the online gaming platform accessible at 99jl.club, offering live casino games, slot games, bingo, and sports betting services to eligible players in the Philippines. 99jl operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173), 99jl acts as the Personal Information Controller in respect of the personal data of registered players and website visitors. Our designated Data Protection Officer (DPO) can be contacted at the details provided in Section 13 of this Policy.

99jl collects the following categories of personal data from players and website visitors:

2.1 Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — players must be 21 or older)
• Nationality and country of residence
• Government-issued ID number and document type (for KYC verification)
• Photograph or selfie (where required for enhanced KYC)

2.2 Contact Data

• Philippine mobile number
• Email address
• Residential address (for KYC and regulatory reporting purposes)

2.3 Financial Data

• GCash or PayMaya account number (masked)
• Bank account details (for bank transfer transactions)
• Debit card details (masked, processed by our payment processor)
• Transaction history: deposits, withdrawals, wagers, and winnings

2.4 Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session timestamps and duration
• Cookies and similar tracking technologies (see Section 7)

2.5 Gaming Activity Data

• Game history, bet amounts, and outcomes
• Bonus and promotion usage
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

2.6 Communications Data

• Live chat transcripts and email correspondence with our support team
• Feedback and survey responses

99jl collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access 99jl.club, including through cookies, server logs, and analytics tools.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment confirmation data from GCash, PayMaya, and banking partners.
• Regulatory sources: Information received from PAGCOR or other regulatory bodies in connection with compliance obligations.

99jl uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your 99jl player account.
• Age and identity verification: Confirming that you meet the 21+ age requirement and verifying your identity as required by PAGCOR regulations.
• Payment processing: Processing deposits, withdrawals, and refunds through your chosen payment method.
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling indicators and administering responsible gaming tools such as deposit limits and self-exclusion.
• Platform improvement: Analysing aggregated usage data to improve the performance, features, and user experience of the 99jl platform.
• Marketing communications: Sending promotional offers and updates to players who have opted in to receive such communications. You may opt out at any time.

Under the Data Privacy Act of 2012, 99jl processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to when registering your account (e.g., account management, payment processing).
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, AMLA reporting obligations, and NPC data protection requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

99jl does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, and banking partners receive the minimum data necessary to process your transactions. These processors are contractually bound to handle your data securely and in accordance with applicable law.
• KYC and compliance providers: Identity verification and AML screening service providers receive identity data solely for the purpose of regulatory compliance checks.
• Game providers: Game software providers may receive anonymised or pseudonymised session data for the purpose of game performance monitoring and dispute resolution.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities may receive data where required by law or regulatory directive.
• Law enforcement: Where required by a valid court order, subpoena, or other lawful process issued by a competent Philippine authority.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of 99jl's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

All third parties with whom 99jl shares personal data are required to implement appropriate technical and organisational security measures and to process data only for the specified purpose.

99jl uses cookies and similar technologies to operate and improve the platform. The categories of cookies we use are:

• Strictly necessary cookies: Required for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where errors occur. This data is used solely to improve platform performance.
• Marketing cookies: Used only where you have given explicit consent, to deliver relevant promotional content. You may withdraw consent at any time via your account settings.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the platform.

99jl implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and 99jl servers.
• AES-256 encryption for sensitive data stored at rest, including payment details and identity documents.
• Role-based access controls ensuring that only authorised 99jl personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits and penetration testing conducted by independent third-party security firms.
• Multi-factor authentication requirements for all 99jl staff accessing systems that process personal data.
• Incident response procedures to detect, contain, and notify affected players and the NPC of any personal data breach within the timeframes required by law.

While 99jl takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying 99jl immediately if you suspect unauthorised access to your account.

99jl retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements:

• Active account data: Retained for the duration of your account registration.
• Post-closure data: Following account closure, identity and transaction data is retained for a minimum of five (5) years to comply with PAGCOR licensing conditions and AMLA record-keeping requirements.
• KYC documents: Retained for five (5) years from the date of submission or account closure, whichever is later.
• Support communications: Retained for two (2) years from the date of the last interaction.
• Analytics data: Anonymised analytics data may be retained indefinitely as it cannot be linked back to individual players.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 99jl's data disposal procedures.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 99jl:

• Right to be informed: The right to know what personal data 99jl holds about you and how it is being processed — which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data 99jl holds about you.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You can update most account details directly in your profile settings.
• Right to erasure: The right to request deletion of your personal data, subject to 99jl's legal retention obligations under PAGCOR and AMLA requirements.
• Right to object: The right to object to processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified data subject requests within fifteen (15) business days.

The 99jl platform is strictly intended for adults aged 21 years and above. 99jl does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete the data, and report the matter to PAGCOR as required.

If you are a parent or guardian and believe that a minor has registered on the 99jl platform, please contact our support team immediately so that we can take appropriate action.

99jl may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Where changes are material, we will notify you by email to your registered address or via a prominent notice on the platform at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the 99jl platform following the effective date of any revision constitutes your acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or your personal data rights, please contact the 99jl Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with our response to your data privacy concern.