jl500 Casino
Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, or shared by jl500 in connection with the operation of the online casino platform accessible at jl500.club and all associated services, including account registration, gaming activity, financial transactions, customer support interactions, and communications.

For the purposes of the Data Privacy Act of 2012 of the Republic of the Philippines (Republic Act No. 10173), jl500 acts as the Personal Information Controller in respect of all personal data provided by or collected from users of the jl500 Platform. Where jl500 engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors and are subject to data processing agreements that require them to maintain standards equivalent to those set out in this Privacy Policy.

This Privacy Policy applies to all registered players and visitors of jl500, irrespective of the device or connection method used to access the Platform. By accessing jl500.club and using our services, you acknowledge that you have read and understood this Privacy Policy.

jl500 collects the categories of personal data described below. The specific data collected depends on the nature of your interaction with the Platform — not all categories apply equally to all users.

jl500 does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health or medical information, political affiliations, or religious beliefs) unless required by law in specific circumstances such as regulatory investigations.

jl500 collects personal data through the following means:

• Directly from you: when you create an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically via the Platform: Technical Data and Usage Data are collected automatically through session cookies, server logs, and analytics tools whenever you access jl500.club, regardless of whether you are logged into an account.
• From payment providers: When you process a GCash, Maya, bank transfer, or other payment, relevant transaction reference data is transmitted to jl500 from the payment provider to confirm and reconcile the transaction.
• From identity verification partners: During KYC processing, jl500 may share identity document data with a third-party identity verification service provider. The result of the verification check (pass/fail/pending) is returned to jl500 and recorded on your account.
• From fraud prevention services: jl500 uses automated fraud detection tools that may cross-reference your Technical Data against known fraud signals and flagged identifiers from industry-shared databases.

jl500 processes personal data only where a lawful basis for doing so exists under the Data Privacy Act of 2012. The principal purposes and corresponding lawful bases are set out below:

jl500 does not use personal data for automated individual decision-making that produces legal or similarly significant effects on players, except where necessary to comply with anti-money laundering obligations or to enforce responsible gaming restrictions. In such cases, players may request human review of any automated decision by contacting [email protected].

5.1 Third Parties We Share Data With. jl500 shares personal data with third parties only to the extent necessary for the purposes described in Section 4. Categories of third-party recipients include:

• Payment processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), BPI, BDO, Metrobank, and other payment partners receive the minimum data necessary to process financial transactions on behalf of players.
• Identity verification providers: Third-party KYC providers receive identity document images and personal details for the sole purpose of verifying player identity. These providers are contractually bound to process data only for this purpose.
• Game providers: Certified game providers (such as Jili, Red Tiger, Habanero, and others) receive account reference identifiers and game session data to operate games and calculate outcomes. Game providers do not receive financial data or government ID information.
• IT infrastructure and hosting providers: jl500's platform infrastructure relies on cloud hosting and security service providers. These providers process technical data as data processors under jl500's instruction.
• Regulatory and law enforcement authorities: jl500 is required by Philippine law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities upon lawful request or as required by applicable regulation.

5.2 No Sale of Personal Data. jl500 does not sell, rent, lease, or otherwise commercially transfer personal data to any third party for marketing, profiling, or any other commercial purpose. This prohibition applies absolutely and without exception.

5.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or a substantial portion of jl500's assets, personal data held by jl500 may be transferred to the acquiring or successor entity. In such an event, jl500 will notify affected players via the registered email address prior to any transfer and provide an opportunity to request account deletion if the player does not consent to the transfer.

Some of jl500's third-party service providers — including cloud infrastructure providers, game developers, and KYC verification partners — may be located outside the Republic of the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, jl500 will implement appropriate safeguards to ensure the data remains protected in transit and at the destination.

Safeguards used for international transfers include:

• Standard contractual clauses approved by the National Privacy Commission or equivalent competent authority, incorporated into contracts with overseas data processors;
• Ensuring that recipient jurisdictions have been assessed as providing an adequate level of protection for personal data;
• Technical controls including end-to-end encryption for all cross-border data transfers.

Players may request information about the specific safeguards applied to any international transfer of their personal data by contacting [email protected].

jl500 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention period required by Philippine law. The following retention standards apply:

• Account and Identity Data: Retained for the duration of the account and for a minimum of five (5) years following permanent account closure, in accordance with the Anti-Money Laundering Act of 2001 (AMLA, Republic Act No. 9160, as amended) and its implementing regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and PAGCOR regulations.
• Gaming Activity Records: Retained for the duration of the account and for three (3) years post-closure for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the most recent interaction in the support thread.
• Technical and Usage Data (anonymised): May be retained indefinitely in aggregate anonymised form for platform analytics and performance improvement, provided that data is fully anonymised and cannot be re-identified.
• Responsible Gaming Records: Retained for the duration of any active restriction period plus five (5) years post-expiry, for compliance verification purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised using industry-standard data destruction procedures. Players may request confirmation of data deletion after account closure by contacting [email protected].

jl500 uses cookies and similar technologies (such as session tokens and local storage) to operate the Platform and deliver a functional, secure experience. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They include session authentication tokens, CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without disrupting access to the Platform. No consent is required for strictly necessary cookies.
• Functional Cookies: These store your preferences such as language selection, game display settings, and responsible gaming tool configurations, so you do not need to re-enter them on each visit.
• Analytics Cookies: jl500 uses first-party analytics tools to understand how players navigate the Platform, which pages are most visited, and where performance bottlenecks occur. This data is used exclusively to improve the jl500 experience and is not shared with third-party advertising networks.
• Fraud Prevention Cookies: Device fingerprinting and session analysis cookies help jl500 identify patterns consistent with fraudulent activity, including account takeover attempts, bot activity, and bonus abuse patterns.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your jl500 account. Most mobile browsers on Android and iOS allow cookie management through Settings > Privacy or Settings > Site Settings.

jl500 implements a comprehensive set of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, and destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data in transit between player devices and jl500 servers.
• AES-256 encryption at rest for sensitive stored data, including identity documents, financial records, and authentication credentials.
• Bcrypt password hashing — jl500 does not store plain-text passwords. All passwords are hashed using adaptive one-way algorithms that are computationally resistant to brute-force attacks.
• Two-factor authentication (2FA) available to all players via SMS OTP. Players are strongly encouraged to enable 2FA from Account Settings.
• Access controls — jl500 staff access to personal data is role-based and limited to the minimum necessary for each staff member's function. Access to sensitive data is logged and audited regularly.
• Intrusion detection systems monitoring jl500's infrastructure for anomalous access patterns and potential security threats on a 24/7 basis.
• Regular security assessments including periodic penetration testing and vulnerability scanning conducted by independent security professionals.

Data Breach Response. In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected players, jl500 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act of 2012 and NPC Circular 16-03. Affected players will be notified promptly where the breach poses a high risk to their rights.

Under the Data Privacy Act of 2012 of the Philippines, jl500 players have the following rights in respect of their personal data. To exercise any of these rights, contact jl500 at [email protected] with your account username and the right you wish to exercise. jl500 will respond within thirty (30) calendar days.

jl500 Casino is strictly prohibited for persons under the age of twenty-one (21) years. This prohibition is absolute and enforced at the point of registration through age declaration and, prior to any withdrawal, through mandatory KYC identity verification.

jl500 does not knowingly collect personal data from any person under the age of 21. If jl500 discovers or is informed that personal data has been collected from a minor, the account will be immediately suspended, all associated data will be reviewed, and — subject to any applicable legal hold requirements — the data will be deleted as soon as practicable.

If you are a parent or guardian and believe that a person under the age of 21 under your care has registered on jl500, please contact [email protected] immediately with details. jl500 will prioritise the investigation and resolution of such reports.

The jl500 Platform may contain references or links to third-party websites, services, or resources — for example, payment provider portals accessed during deposit and withdrawal flows. jl500 is not responsible for the privacy practices or content of any third-party websites.

When you access a third-party service through jl500 (such as the GCash payment interface), you are subject to that third party's own privacy policy and terms of service. jl500 encourages players to review the privacy policies of all third-party services they interact with in connection with their jl500 account.

The inclusion of a link to or interaction with a third-party service on jl500 does not constitute endorsement of that service's privacy practices by jl500.

jl500 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Revised" date at the top of this page will be updated whenever a material change is made.

Where a change to this Privacy Policy is material — meaning it substantively affects how jl500 collects, uses, or shares personal data — jl500 will notify registered players by posting a clear notice on the Platform and, where the registered email address is current, by sending an email notification at least fourteen (14) days before the change takes effect.

Your continued use of jl500 following the effective date of a revised Privacy Policy constitutes your acknowledgement of and agreement to the revised terms. If you do not agree with a material change, you may request account closure before the change takes effect by contacting [email protected].

We recommend reviewing this Privacy Policy periodically, particularly when you begin a new session on jl500 after an extended absence from the Platform.

For any privacy-related enquiries, data access requests, correction requests, or complaints regarding jl500's data processing practices, please contact us through the following channels:

• General Support & Data Requests: [email protected]
• Security & Data Breach Reports: [email protected]
• Live Chat: Available 24/7 directly on jl500.club — use the chat widget and select "Privacy / Data" as the query category.

jl500 will acknowledge all data rights requests within five (5) business days of receipt and will respond substantively within thirty (30) calendar days, or within such shorter period as may be required by applicable law.

If you are not satisfied with jl500's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Republic of the Philippines, which has jurisdiction over complaints relating to violations of the Data Privacy Act of 2012.