Data Protection & Privacy
jjloit Privacy Policy
How We Handle Your Personal Data
Your privacy matters to jjloit. This Policy explains exactly what personal information we collect when you use the platform, why we collect it, how we protect it, and what rights you have over it under Philippine law.
Privacy at jjloit — The Short Version
These cards summarise jjloit's core privacy commitments. They are not a substitute for the full Policy below — please read the complete document for the binding terms that govern your data.
We Collect Only What We Need
jjloit collects personal data for specific, legitimate purposes: account registration, identity verification, payment processing, regulatory compliance, and platform improvement. We do not collect data speculatively or retain it longer than necessary for the stated purpose.
Your Data Is Encrypted and Secured
All personal and financial data transmitted to and from the jjloit platform is protected using SSL/TLS encryption. Sensitive data including payment information and identity documents is stored with additional encryption at rest. Access to personal data within jjloit is restricted on a need-to-know basis.
We Don't Sell Your Data
jjloit does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data is shared with service providers only to the extent necessary to operate the platform and in compliance with applicable Philippine data protection law.
You Control Your Data
Registered jjloit players have the right to access, correct, and request deletion of their personal data, subject to legal retention obligations. You may also object to or restrict certain types of data processing. Data rights requests are handled by the jjloit Data Privacy team.
Philippine Law Compliance
jjloit processes personal data in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012, its Implementing Rules and Regulations, and the data governance standards of the National Privacy Commission of the Philippines.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to affected individuals, jjloit will notify the National Privacy Commission and affected players within the timeframes prescribed by Philippine data protection law and will take immediate remediation action.
Table of Contents
- 1. Introduction and Scope
- 2. Data Controller Information
- 3. Personal Data We Collect
- 4. How We Use Your Personal Data
- 5. Legal Bases for Processing
- 6. Cookies and Tracking Technologies
- 7. Sharing Your Personal Data
- 8. International Data Transfers
- 9. Data Retention
- 10. Your Data Privacy Rights
- 11. Security Measures
- 12. Children and Minors
- 13. Changes to This Policy
- 14. Contact and Complaints
This Privacy Policy ("Policy") describes how jjloit ("jjloit," "we," "us," "our") collects, uses, stores, shares, and protects personal information obtained from users ("Player," "User," "you") of the online casino and sports betting platform accessible at https://jjloit.cam. This Policy forms part of the agreement between you and jjloit and should be read alongside the Terms & Conditions and Responsible Gaming Policy. By registering a jjloit account or using the platform, you confirm that you have read and understood this Policy.
01 Introduction and Scope
jjloit is committed to protecting the privacy and personal data of all users of its platform. This Policy applies to all personal information collected in connection with the operation of the jjloit platform, including data collected through the website at https://jjloit.cam, through any related customer support interactions, and through any promotional or marketing activities directed at registered or prospective jjloit players in the Philippines.
This Policy applies to all residents of the Philippines who access or use the jjloit platform. jjloit processes personal data in accordance with Republic Act No. 10173 (the Data Privacy Act of 2012, or "DPA"), its Implementing Rules and Regulations ("IRR"), the issuances of the National Privacy Commission ("NPC"), and PAGCOR's data governance requirements applicable to licensed online gaming operators.
02 Data Controller Information
For the purposes of the Data Privacy Act of 2012, jjloit acts as the Personal Information Controller in respect of the personal data collected through the jjloit platform. This means jjloit determines the purposes for which personal data is collected and the means by which it is processed.
jjloit has appointed a Data Protection Officer ("DPO") responsible for overseeing the platform's compliance with applicable data protection laws and for handling data privacy inquiries and rights requests from players. The DPO can be contacted at the email address provided in Section 14 of this Policy.
jjloit's registration and primary operational compliance is governed under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). Data processing activities are conducted in accordance with both PAGCOR licensing requirements and the NPC's standards for personal information controllers operating in the Philippines.
03 Personal Data We Collect
jjloit collects the following categories of personal data:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID type and number, selfie or photograph for KYC verification | Account registration and KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address | Account registration; updates via account settings |
| Financial Data | GCash account reference, PayMaya account reference, BPI/BDO/Metrobank/UnionBank account details, transaction history, deposit and withdrawal records | Deposit and withdrawal processing; KYC verification |
| Account Data | Username, account balance, bonus credits, active promotions, preferences, self-exclusion status, deposit limit settings | Account operation; ongoing platform use |
| Gaming Activity Data | Game session logs, wager history, bet amounts, game outcomes, sports betting records, session duration, win/loss data | Ongoing platform use; regulatory compliance |
| Technical Data | IP address, browser type and version, device type, operating system, screen resolution, session identifiers | Platform access; fraud prevention; analytics |
| Communication Data | Customer support chat transcripts, emails, and other correspondence between you and jjloit | Customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional communications, preferred notification channels | Account registration; updated via account settings |
jjloit does not intentionally collect sensitive personal information as defined under the Data Privacy Act (e.g., health information, religious affiliation, political views) except where such information is voluntarily provided in the context of a responsible gaming self-disclosure or required by PAGCOR compliance obligations. Such sensitive data is subject to heightened protection and is processed only to the extent strictly necessary.
04 How We Use Your Personal Data
jjloit uses personal data for the following purposes:
- Account Management: To create, maintain, and administer your jjloit account, including processing deposits, withdrawals, and bonus credits, and maintaining your gaming history and account preferences.
- Identity Verification (KYC): To verify your identity and age in compliance with PAGCOR licensing requirements and Philippine anti-money laundering regulations before processing withdrawal requests or upon regulatory request.
- Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, collusion, bonus abuse, and other violations of the jjloit Terms & Conditions.
- Regulatory Compliance: To fulfil jjloit's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws. This includes producing records for regulatory audit, reporting suspicious transactions, and responding to lawful requests from Philippine government authorities.
- Customer Support: To respond to your enquiries, resolve disputes, process complaints, and provide technical assistance relating to your jjloit account.
- Responsible Gaming: To monitor gaming patterns for indicators of problem gambling, to process self-exclusion requests, and to administer deposit limit and cooling-off tools as required under PAGCOR's responsible gaming standards.
- Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game selection, user experience, and security architecture. Individual players are not identifiable from this analysis.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. You may withdraw marketing consent at any time via your account settings or by contacting customer support.
05 Legal Bases for Processing
Under the Data Privacy Act of 2012, jjloit processes personal data on the following legal bases:
- Contractual Necessity: Processing required to perform the contract between jjloit and you, including account operation, payment processing, game delivery, and customer support.
- Legal Obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, NPC directives, and other mandatory Philippine legal requirements. This includes KYC verification, transaction monitoring, and regulatory reporting.
- Legitimate Interests: Processing necessary for jjloit's legitimate interests, where those interests are not overridden by your data protection rights. This includes fraud detection, platform security, and internal analytics.
- Consent: Processing based on your freely given, specific, and informed consent. This applies primarily to marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing based on consent.
06 Cookies and Tracking Technologies
The jjloit platform uses cookies and similar tracking technologies to enable platform functionality, maintain session states, prevent fraud, and analyse usage patterns. Cookies are small text files placed on your device when you access the jjloit website.
jjloit uses the following categories of cookies:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without breaking platform functionality.
- Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations. Disabling these may affect your platform experience.
- Analytics Cookies: Collect anonymised data on how players navigate the jjloit platform to help us identify areas for improvement. Data collected by analytics cookies does not identify individual players.
- Security Cookies: Used for fraud detection, bot prevention, and identifying potentially compromised sessions. These are classified as strictly necessary for security purposes.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will prevent you from accessing the jjloit platform. jjloit does not use third-party advertising or behavioural tracking cookies.
07 Sharing Your Personal Data
jjloit does not sell or rent personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:
- Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and their respective processing partners receive transaction data necessary to process deposits and withdrawals. These providers operate under their own data protection obligations and are separately regulated.
- Game Providers: Third-party game software providers (e.g., Pragmatic Play, Ezugi) may receive anonymised session identifiers and technical data necessary to deliver game content and verify game outcomes. These providers do not receive identity or financial data beyond what is technically required for game delivery.
- KYC and Compliance Providers: Identity verification service providers receive identity documents and biometric data solely for the purpose of conducting KYC checks. These providers are bound by confidentiality obligations and data processing agreements with jjloit.
- Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government agencies may receive personal data where jjloit is legally required to report or produce records under applicable law.
- Professional Advisers: Legal counsel, auditors, and accountants may access personal data to the minimum extent necessary in connection with the provision of professional services to jjloit, under strict confidentiality obligations.
- Business Transfers: In the event of a merger, acquisition, or sale of all or part of jjloit's business, personal data may be transferred to the relevant successor entity, subject to that entity assuming the obligations under this Policy or providing equivalent privacy protections.
08 International Data Transfers
Some of jjloit's service providers, including game software providers and certain technical infrastructure partners, may be located outside the Philippines. Where personal data is transferred to a country that is not recognised as providing an equivalent level of data protection to the Philippines under the Data Privacy Act, jjloit implements appropriate safeguards including contractual data processing agreements that incorporate the NPC's standard contractual clauses or equivalent protections.
Personal data transferred internationally is limited to the minimum necessary for the technical purpose of the transfer and is subject to the same use restrictions and security measures that apply within the Philippines. jjloit monitors changes to NPC guidance on international data transfers and updates its transfer mechanisms accordingly.
09 Data Retention
jjloit retains personal data for as long as necessary to fulfil the purpose for which it was collected, to maintain an active player account, or to comply with applicable legal, regulatory, and audit retention obligations. The following general retention periods apply:
- Account and KYC Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
- Transaction and Gaming Records: Retained for a minimum of five (5) years from the date of each transaction or gaming session, as required for PAGCOR compliance and potential dispute resolution.
- Customer Support Records: Retained for a period of three (3) years from the date of the relevant interaction, unless a longer period is required in connection with an unresolved dispute or regulatory investigation.
- Marketing Consent Records: Retained for as long as you remain a registered jjloit player and for a reasonable period following account closure to evidence compliance with consent obligations.
- Technical and Log Data: Generally retained for periods of six (6) to twelve (12) months for security monitoring purposes, after which it is anonymised or deleted.
Following the expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data derived from gaming activity may be retained indefinitely for aggregate statistical analysis.
10 Your Data Privacy Rights
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by jjloit:
Right to Access
Request a copy of the personal data jjloit holds about you, including information on how it is used and with whom it has been shared.
Right to Correction
Request correction of inaccurate or incomplete personal data. Some corrections (e.g., name changes) may require supporting documentation.
Right to Erasure
Request deletion of personal data where it is no longer necessary for its original purpose, subject to legal retention obligations that may apply.
Right to Object
Object to the processing of your personal data for direct marketing purposes. This right is absolute — we will stop marketing processing immediately upon a valid objection.
Right to Block or Restrict
Request that processing of your data be restricted while a dispute about accuracy or lawfulness is being investigated. Restrictions do not affect legally required processing.
Right to Complain
Lodge a complaint with jjloit's Data Protection Officer or directly with the National Privacy Commission if you believe your data privacy rights have been violated.
To exercise any of the above rights, please submit a written request to jjloit's Data Protection Officer at [email protected] with the subject line "Data Privacy Rights Request." Please include your registered username, the right you wish to exercise, and sufficient information for us to identify your account and verify your identity. jjloit will acknowledge receipt within five (5) business days and will respond substantively within thirty (30) calendar days, extendable by a further fifteen (15) days for complex requests with prior notification to you.
11 Security Measures
jjloit implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include but are not limited to:
- Encryption in Transit: All data transmitted between your device and the jjloit platform is protected using SSL/TLS encryption (minimum TLS 1.2).
- Encryption at Rest: Sensitive personal data including identity documents and financial account references are stored using industry-standard encryption at rest.
- Access Controls: Access to personal data within jjloit's systems is restricted to authorised personnel on a strictly need-to-know basis, enforced through role-based access controls and multi-factor authentication for administrative systems.
- Network Security: The jjloit platform is protected by firewalls, intrusion detection systems, and regular vulnerability assessments and penetration testing conducted by qualified security professionals.
- Staff Training: All jjloit personnel with access to personal data receive regular data privacy and information security training appropriate to their role.
- Incident Response: jjloit maintains a documented data breach response plan that includes procedures for containment, assessment, notification of the NPC, and communication with affected players within the timeframes prescribed by the Data Privacy Act.
Notwithstanding these measures, no internet-based system is completely immune to security risks. jjloit strongly recommends that players use strong, unique passwords for their jjloit accounts, enable two-factor authentication, and avoid accessing their accounts from unsecured public networks.
12 Children and Minors
The jjloit platform is strictly for individuals aged 21 years and older, consistent with PAGCOR regulations governing online gambling in the Philippines. jjloit does not knowingly collect personal data from persons under the age of 21. The KYC age verification process is designed to identify and prevent the registration of underage individuals.
If jjloit becomes aware that personal data has been collected from a person under 21 — whether through the KYC process, a third-party report, or any other means — the relevant account will be suspended immediately. Personal data collected from the underage individual will be deleted from jjloit's systems within a reasonable period, subject to any minimum legal retention obligations that may apply. Any funds deposited to the account will be returned to the source payment method following verification.
13 Changes to This Policy
jjloit may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The updated Policy will be published on this page with a revised effective date. For material changes that significantly affect how we collect or use personal data, jjloit will provide advance notice to registered players via the email address associated with their account, at least fourteen (14) days before the revised Policy takes effect.
Continued use of the jjloit platform after the effective date of a revised Policy constitutes your acceptance of the revised terms. If you do not accept the revised Policy, you should close your jjloit account before the effective date and submit a data erasure request if appropriate. Prior versions of this Policy are available upon request.
14 Contact and Complaints
For all privacy-related enquiries, including data rights requests, questions about this Policy, or to contact jjloit's Data Protection Officer, please use the following contact details:
Data Protection Officer — jjloit
Email: [email protected]
Please use the subject line "Data Privacy — [Nature of Request]" to ensure your message is routed to the correct team.
If you are not satisfied with jjloit's response to a privacy complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC handles complaints from Philippine data subjects regarding alleged violations of the Data Privacy Act of 2012 by personal information controllers. Information on filing a complaint with the NPC is available on the NPC's official website.
jjloit is committed to resolving privacy complaints promptly and in good faith. We encourage players to first raise concerns directly with jjloit before approaching the NPC, as most issues can be resolved more quickly through the platform's internal process.
Questions About Your Privacy?
Our team is available 24/7. You can also review our Terms & Conditions and Responsible Gaming policies to understand the full picture of how jjloit operates.
Terms & Conditions Responsible Gaming