20jl Casino Privacy Policy

1. Introduction

20jl Casino ("20jl," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who use the 20jl platform at 20jl.app. This Privacy Policy describes how we collect, use, store, share, and protect your personal information when you register an account, make deposits or withdrawals, play games, or otherwise interact with the 20jl platform.

This Privacy Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). By registering an account on the 20jl platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, 20jl Casino is the personal information controller responsible for the personal data collected through the 20jl platform. All data processing activities described in this Privacy Policy are carried out by or on behalf of 20jl Casino.

If you have questions, concerns, or requests relating to your personal data, you may contact 20jl's Data Protection Officer (DPO) at the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

20jl collects the following categories of personal data from players:

3.1 Registration and Account Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address in the Philippines

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., PhilSys National ID, UMID, passport, driver's license)
• Selfie or live photo for identity matching purposes
• Proof of address documentation where required
• Source of funds documentation for large transactions, where required by applicable regulations

3.3 Financial and Transaction Data

• GCash or PayMaya account details (mobile number associated with the e-wallet)
• Bank account details for bank transfer transactions (account name, account number, bank name)
• Deposit and withdrawal transaction history
• Account balance and bonus balance information

3.4 Gaming Activity Data

• Game session history, including games played, wager amounts, and outcomes
• Bonus claims and wagering requirement progress
• Responsible gaming settings and limit history
• Self-exclusion records where applicable

3.5 Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session timestamps and login history
• Cookie identifiers and similar tracking data (see Section 10)

3.6 Communications Data

• Live chat transcripts with 20jl support agents
• Email correspondence with 20jl
• Feedback, complaints, and dispute records

Data Category	Examples	Primary Purpose
Registration Data	Name, email, mobile number, date of birth	Account creation and age verification
KYC Data	Government ID, selfie, proof of address	Identity verification and regulatory compliance
Financial Data	GCash number, bank account, transaction history	Payment processing and fraud prevention
Gaming Data	Game history, wagers, session duration	Platform operation and responsible gaming
Technical Data	IP address, device type, login timestamps	Security monitoring and fraud detection
Communications Data	Chat transcripts, emails, complaints	Customer support and dispute resolution

4. How We Collect Your Data

20jl collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — through cookies, session tracking, and server logs when you access and use the 20jl platform. See Section 10 for details on our cookie practices.
• From third-party service providers — including identity verification providers, payment processors (GCash, PayMaya, partner banks), and fraud detection services, who may share data with us as part of their service delivery.
• From regulatory authorities — where required by law, 20jl may receive information from Philippine regulatory bodies including PAGCOR and the NPC.

5. How We Use Your Personal Data

20jl uses the personal data we collect for the following purposes:

5.1 Account Management

To create and maintain your 20jl account, verify your identity and age (21+ requirement), process your login credentials securely, and manage your account settings and preferences.

5.2 Payment Processing

To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers, verify that payment methods are registered in your name, and maintain accurate transaction records.

5.3 Regulatory Compliance

To comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, Know Your Customer (KYC) requirements, and reporting obligations to PAGCOR and other relevant authorities. 20jl is legally required to collect and retain certain personal data and cannot provide services without it.

5.4 Fraud Prevention and Security

To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct on the 20jl platform. This includes monitoring login patterns, transaction behavior, and gaming activity for anomalies.

5.5 Responsible Gaming

To monitor gaming behavior for signs of problem gambling, enforce player-set responsible gaming limits, process self-exclusion requests, and comply with responsible gaming obligations under applicable regulations.

5.6 Customer Support

To respond to your inquiries, resolve complaints and disputes, and maintain records of communications for quality assurance and regulatory purposes.

5.7 Platform Improvement

To analyze aggregated and anonymized usage data to improve the 20jl platform, optimize game performance, and enhance the overall player experience. Individual player data used for this purpose is anonymized wherever possible.

5.8 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates via your registered email address or mobile number, where you have provided consent to receive such communications. You may opt out of marketing communications at any time through your account settings or by contacting 20jl support.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 20jl processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfill our obligations under the 20jl Terms and Conditions, including account management, payment processing, and game provision.
• Legal obligation — processing required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and PAGCOR regulatory obligations.
• Legitimate interests — processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing and Disclosure

20jl does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

7.1 Payment Service Providers

GCash, PayMaya (Maya), and partner Philippine banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) receive the minimum personal data necessary to process your deposit and withdrawal transactions. These providers are bound by their own privacy policies and applicable Philippine financial regulations.

7.2 Identity Verification Providers

Third-party KYC and identity verification service providers process your government ID and biometric data solely for the purpose of verifying your identity as required by 20jl's regulatory obligations. These providers are contractually bound to process your data only for this purpose and to maintain appropriate security standards.

7.3 Regulatory Authorities

20jl may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law, court order, or regulatory directive. 20jl will notify affected players of such disclosures where legally permitted to do so.

7.4 Fraud Prevention and Security Services

Third-party fraud detection and cybersecurity service providers may process technical data (IP addresses, device fingerprints, behavioral patterns) to assist 20jl in identifying and preventing fraudulent activity on the platform.

7.5 Professional Advisors

20jl's legal, accounting, and auditing advisors may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

8. Data Retention

20jl retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Account and KYC data — retained for the duration of your account and for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Transaction records — retained for a minimum of five (5) years from the date of the transaction, in compliance with applicable financial record-keeping requirements.
• Gaming activity data — retained for three (3) years from the date of the gaming session, or longer where required for dispute resolution or regulatory purposes.
• Communications data — live chat transcripts and email correspondence are retained for two (2) years from the date of the communication, or longer where relevant to an ongoing dispute or investigation.
• Self-exclusion records — retained indefinitely to prevent re-registration by self-excluded players.
• Marketing consent records — retained for the duration of your account and for one (1) year following account closure or withdrawal of consent.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with 20jl's data disposal procedures.

9. Data Security

20jl implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 20jl platform
• Encryption of sensitive data at rest, including payment details and identity documents
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security assessments and penetration testing of the 20jl platform
• Two-factor authentication (2FA) available for all player accounts
• Continuous monitoring for unauthorized access attempts and suspicious activity

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 20jl will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by applicable regulations.

10. Cookies and Tracking Technologies

The 20jl platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyze platform usage. The following categories of cookies are used:

10.1 Strictly Necessary Cookies

These cookies are essential for the 20jl platform to function and cannot be disabled. They include session cookies that maintain your login state, security cookies that protect against cross-site request forgery, and cookies that remember your responsible gaming settings. No consent is required for strictly necessary cookies.

10.2 Analytics Cookies

With your consent, 20jl uses analytics cookies to collect aggregated, anonymized data about how players use the platform. This data helps us identify areas for improvement and optimize the player experience. Analytics cookies do not identify you personally.

10.3 Marketing Cookies

With your consent, marketing cookies may be used to deliver relevant promotional content and measure the effectiveness of 20jl's marketing activities. You may withdraw consent for marketing cookies at any time through your browser settings or the 20jl cookie preference center.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the 20jl platform.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 20jl:

• Right to be informed — the right to know what personal data 20jl collects about you and how it is used, as described in this Privacy Policy.
• Right of access — the right to request a copy of the personal data 20jl holds about you.
• Right to rectification — the right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your 20jl account settings.
• Right to erasure — the right to request deletion of your personal data, subject to 20jl's legal retention obligations. Note that data required for AML compliance cannot be deleted before the mandatory retention period expires.
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability — the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact 20jl's Data Protection Officer using the contact details in Section 15. 20jl will respond to all data subject requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days with prior notice to you.

12. Children's Privacy

The 20jl platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. 20jl does not knowingly collect personal data from individuals under the age of 21. If 20jl becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, the data will be deleted, and any deposits will be returned to the original payment method where technically feasible.

If you believe that a minor has registered an account on the 20jl platform, please contact 20jl support immediately so that appropriate action can be taken.

13. Responsible Gaming and Data Processing

20jl processes gaming activity data and behavioral patterns as part of its responsible gaming obligations. This processing is carried out in the legitimate interests of player protection and in compliance with applicable responsible gaming regulations.

Responsible gaming data — including self-exclusion records, deposit limit settings, and loss limit history — is treated with the highest level of confidentiality and is not used for marketing purposes. Self-exclusion records are retained indefinitely to prevent circumvention of self-exclusion by re-registration.

14. Changes to This Privacy Policy

20jl reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. Material changes will be communicated to registered players via the email address on file at least 14 days before the changes take effect, except where immediate changes are required by law.

The current version of this Privacy Policy, including the effective date, will always be available on this page. Your continued use of the 20jl platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

15. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 20jl Casino, please contact our Data Protection Officer:

Data Protection Officer — 20jl Casino

Email: [email protected]

Support: [email protected]

You may also reach us through the live chat feature available on the 20jl platform, available 24 hours a day, 7 days a week. For complaints that cannot be resolved through our internal process, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.