jlbbb CASINO
PRIVACY POLICY

This Privacy Policy ("Policy") describes how jlbbb ("we," "us," "our," or "the Platform") collects, processes, stores, shares, and protects personal data in connection with the operation of the jlbbb online gaming platform accessible at jlbbb.org.

This Policy applies to all individuals who interact with the jlbbb platform, including registered players, prospective players who browse without registering, individuals who contact jlbbb support, and any other persons whose personal data is processed by jlbbb in connection with its operations.

jlbbb is committed to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines. Our data processing activities are further shaped by our obligations under PAGCOR's regulatory framework, the Anti-Money Laundering Act (AMLA), and related Philippine statutes.

By registering an account on jlbbb or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not register an account or use the jlbbb platform.

For the purposes of the Data Privacy Act of 2012, jlbbb acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and platform users. As PIC, jlbbb determines the purposes and means of processing personal data in connection with its gaming and ancillary services.

Certain functions — including payment processing, identity verification, and game hosting — are performed by authorized third-party service providers who act as Personal Information Processors (PIPs) under jlbbb's instructions and under contractual data processing agreements that impose obligations equivalent to those in this Policy.

jlbbb has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Policy. Contact details for the DPO are provided in Section 15 of this Policy.

jlbbb collects the following categories of personal data in connection with its operations:

• Full legal name (as it appears on government-issued identification);
• Date of birth (for age verification — players must be 21 or older);
• Registered mobile number and email address;
• Residential address (province, city or municipality);
• Government-issued ID type, ID number, and ID images (submitted during KYC);
• Selfie photographs submitted for identity verification.

• GCash or Maya account numbers (hashed — full account numbers are not stored);
• Bank account information for BPI, BDO, or Metrobank transfers where applicable;
• Deposit and withdrawal transaction history, amounts, and timestamps;
• Bonus and promotion credit history;
• Source of funds declarations where required by AMLA thresholds.

• Game session logs, including timestamps, game types, bet amounts, and outcomes;
• Sports betting selections and wager details;
• Account balance history and VIP tier progression records.

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type;
• Session timestamps, page visit logs, and navigation paths;
• Cookies and similar tracking technology data (see Section 7).

• Records of live chat support interactions;
• Email correspondence with jlbbb support or compliance teams;
• Responsible gaming tool settings and self-exclusion election records.

jlbbb collects personal data through the following channels and methods:

• Directly from you: When you register an account, submit KYC documents, make deposits or withdrawal requests, contact support, or interact with platform features including responsible gaming tools;
• Automatically through your use of the platform: Technical data and gaming activity data are collected automatically as you navigate and use jlbbb. This includes session logging, IP capture, and cookie-based tracking as described in Section 7;
• From third-party verification providers: During the KYC process, jlbbb may verify identity data against third-party databases or document verification services operating under agreements that comply with the Data Privacy Act;
• From payment processors: Transaction confirmation data is received from GCash, Maya, and banking partners to reconcile deposits and withdrawals in your jlbbb wallet;
• From PAGCOR and regulatory bodies: In certain circumstances, we may receive data from PAGCOR or other competent authorities as part of regulatory oversight, player dispute resolution, or AMLA compliance processes.

The following table sets out the primary purposes for which jlbbb processes personal data and the corresponding lawful basis under the Data Privacy Act of 2012:

jlbbb does not sell, rent, or otherwise transfer your personal data to third parties for their own commercial use. Disclosure of personal data occurs only in the following circumstances:

• Payment processors: Transaction data is shared with GCash, Maya, BPI, BDO, Metrobank, and other payment partners solely for the purpose of processing deposits and withdrawals. These providers are bound by their own data protection obligations and applicable Philippine law.
• KYC and identity verification providers: Government ID data and biometric verification images may be processed by approved third-party identity verification services under contractual agreements imposing data protection obligations equivalent to those in this Policy.
• Game providers: Limited session data is shared with game software providers (including JILI, PG Soft, Pragmatic Play, and others) as necessary to deliver game content and resolve technical disputes. These providers do not receive identifiable personal data beyond what is required to operate the game session.
• PAGCOR and regulatory authorities: jlbbb is required by law to report certain data to PAGCOR as part of its licensing obligations. This may include player activity reports, KYC data, and suspicious transaction reports under AMLA. jlbbb complies with all lawful regulatory information requests.
• Law enforcement and courts: jlbbb will disclose personal data to the National Bureau of Investigation, Philippine National Police, or courts of law when required by a valid legal order, subpoena, or warrant.
• Group companies and service providers: Certain operational functions may be performed by affiliated entities or contracted service providers (hosting, security, IT support) under data processing agreements. These processors act only on jlbbb's documented instructions.

jlbbb uses cookies and similar technologies to operate the platform, maintain your session, analyze usage, and prevent fraud. The following categories of cookies are used:

• Strictly Necessary Cookies: These are essential to operate the platform and cannot be disabled. They include session authentication tokens, CSRF protection cookies, and load-balancing identifiers. No consent is required for these cookies as they are necessary for the platform to function.
• Functional Cookies: These remember your preferences — such as language settings, responsible gaming configurations, and last-visited game categories — to improve your experience between sessions.
• Analytics Cookies: jlbbb uses first-party analytics to understand how players use the platform, which game categories are most popular, and where technical issues occur. This data is aggregated and does not identify individual players.
• Security and Fraud Prevention Cookies: Device fingerprinting and behavioral analysis cookies help jlbbb detect suspicious login attempts, multi-accounting, and automated bot activity in compliance with PAGCOR security requirements.

You may manage cookie settings through your browser's privacy settings. Note that disabling strictly necessary cookies will impair your ability to use the jlbbb platform, as session authentication requires cookie storage.

jlbbb retains personal data for defined periods based on the purpose of processing and applicable legal retention requirements:

• Account and identity data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in accordance with PAGCOR licensing obligations and Philippine records retention requirements applicable to regulated gaming operations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and Bureau of Internal Revenue (BIR) regulations. Suspicious transaction records may be retained for longer periods as required by AMLC directives.
• KYC documents (government IDs, selfies): Retained for the minimum period mandated by PAGCOR and AMLA — generally five (5) years following account closure — after which documents are securely destroyed.
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Support communications: Retained for two (2) years following the closure of a support case, except where the communication relates to a formal complaint or legal proceeding, in which case it is retained until resolution plus one (1) year.
• Marketing data: Retained until you withdraw your marketing consent, at which point you will be removed from marketing lists. Historical records of consent and withdrawal are retained for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with jlbbb's data destruction procedures.

jlbbb implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, accidental loss, alteration, or disclosure:

• Encryption in transit: All data transmitted between your device and jlbbb's servers is encrypted using TLS 1.2 or higher. The padlock icon visible in your browser confirms an active encrypted connection.
• Encryption at rest: Sensitive personal data stored on jlbbb's infrastructure — including government ID data, financial records, and KYC documents — is encrypted using AES-256 encryption.
• Access controls: Access to personal data within jlbbb's systems is restricted on a strict need-to-know basis. Staff access is role-based, logged, and reviewed periodically. Administrative access requires multi-factor authentication.
• Penetration testing and vulnerability assessments: jlbbb's infrastructure undergoes regular third-party security assessments to identify and remediate vulnerabilities before they can be exploited.
• Incident response: jlbbb maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to players' rights, jlbbb will notify the National Privacy Commission (NPC) within the timeframe required by the Data Privacy Act and will inform affected players without undue delay.
• Staff training: All jlbbb staff who handle personal data undergo data privacy training as part of onboarding and on an annual basis thereafter.

jlbbb's primary data processing infrastructure is located in the Philippines. Certain service providers engaged by jlbbb — including cloud infrastructure providers and game software companies — may process data on servers located in other jurisdictions.

Where personal data is transferred outside the Philippines, jlbbb ensures appropriate safeguards are in place, including:

• Contractual data processing agreements that impose obligations equivalent to those in this Policy and consistent with the Data Privacy Act of 2012;
• Transfer only to jurisdictions assessed to provide an adequate level of data protection, or where specific safeguards such as standard contractual clauses are in place;
• Limiting international transfers to the minimum data necessary for the specific processing function.

jlbbb does not transfer personal data to countries with inadequate data protection frameworks without the safeguards described above.

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by jlbbb. These rights are enforceable and can be exercised by contacting jlbbb's Data Protection Officer as described in Section 15.

To exercise any of these rights, submit a written request to jlbbb's Data Protection Officer via live chat or the email address in Section 15. jlbbb will verify your identity before processing any data subject request. Responses are provided within the timeframes required by the Data Privacy Act. If you are dissatisfied with jlbbb's response, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

The jlbbb platform is strictly prohibited for individuals under the age of twenty-one (21) years, in accordance with PAGCOR gaming regulations. jlbbb does not knowingly collect personal data from anyone under the age of 21.

Age is verified during the KYC process through government-issued identification. Accounts found to be registered by individuals under 21 years of age are permanently closed and the data collected in connection with such accounts is processed only to the extent required to close the account and satisfy applicable legal retention obligations.

If you have reason to believe that a minor has registered a jlbbb account or that jlbbb has inadvertently collected personal data from a minor, please contact our Data Protection Officer immediately at the contact details in Section 15. jlbbb will investigate and take appropriate action, including data deletion where legally permissible.

The jlbbb platform may contain references to third-party payment providers (GCash, Maya, BPI, BDO, Metrobank) and gaming software providers (JILI, PG Soft, Pragmatic Play, and others). These entities operate their own platforms and are governed by their own privacy policies.

jlbbb is not responsible for the data practices of third-party services. When you interact with a third-party payment gateway or contact a payment provider directly regarding a transaction, you are subject to that provider's privacy policy, not this one. jlbbb recommends reviewing the privacy policies of any third-party service with which you interact in connection with your jlbbb account.

Game software providers who power games within the jlbbb platform receive only the session data necessary to operate the game. They do not receive your full identity data, contact details, or financial account information.

jlbbb may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, PAGCOR regulatory requirements, or the features offered on the platform. The following process governs amendments:

• Material changes — those that affect your rights or significantly alter how your data is processed — will be communicated to registered players via the email address or mobile number on their Account at least seven (7) days before the change takes effect;
• Minor amendments — such as typographical corrections, clarifications, or structural reorganizations that do not alter substantive rights — may take effect upon publication;
• The effective date and last-updated date displayed at the top of this page will always reflect the current version;
• Continued use of the jlbbb platform following the effective date of an amendment constitutes your acceptance of the updated Policy. If you disagree with any amendment, you should close your account and withdraw any remaining balance before the amendment takes effect.

For any inquiries, concerns, or requests relating to your personal data and your rights under this Privacy Policy or the Data Privacy Act of 2012, please contact jlbbb's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 on the jlbbb platform. Use the keyword "DPO" or "Data Privacy Request" to route your inquiry directly to the Data Protection team.
• Email: [email protected] — mark your subject line "Data Privacy Request – [Your Full Name]" to ensure prompt routing to the DPO team. Responses are provided within 15 business days of identity verification.

If you are dissatisfied with jlbbb's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent authority responsible for enforcing the Data Privacy Act of 2012.

This Privacy Policy was last reviewed and updated on January 1, 2026. Effective Date: January 1, 2026. This Policy applies to all jlbbb accounts active as of the effective date and to all new registrations thereafter.