40jl Casino Privacy Policy

This Privacy Policy ("Policy") describes how 40jl Casino, operating at 40jl.club ("40jl", "we", "us", "our"), collects, uses, stores, shares, and protects the personal information of individuals who visit the Platform, register a player account, or otherwise interact with 40jl Casino services ("you", "your").

This Policy applies to all personal data processing activities conducted by 40jl Casino in connection with the Platform, including data collected through account registration, gameplay, financial transactions, customer support, promotional activities, and the use of cookies and similar tracking technologies.

By registering an account or using the 40jl Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

For the purposes of the Data Privacy Act of 2012, 40jl Casino is the personal information controller responsible for your personal data collected through the Platform. Our designated Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and applicable data protection law.

To contact our Data Protection Officer regarding any privacy matter, data subject rights request, or complaint, please use the following:

• Email: [email protected] (subject line: "Data Privacy / DPO Request")
• Response time: We aim to acknowledge all DPO enquiries within 2 business days and resolve them within 30 calendar days as required by applicable regulations.

40jl Casino collects the following categories of personal data, depending on how you interact with the Platform:

40jl Casino collects personal data through the following means:

4.1 Direct Collection

You directly provide us with personal data when you: register a 40jl account; complete KYC verification by submitting identity documents; make a deposit or withdrawal; contact customer support; respond to surveys or promotions; or configure your responsible gaming preferences.

4.2 Automated Collection

When you visit 40jl.club, our systems automatically collect certain technical data about your device and browsing behaviour through server logs, cookies, and similar tracking technologies. This includes your IP address, browser type, pages visited, time spent on each page, and referring URL. This data is collected to ensure platform security, analyse usage patterns, and improve the player experience.

4.3 Third-Party Sources

We may receive personal data about you from the following third-party sources: identity verification service providers used during KYC checks; payment processors confirming the outcome of deposit or withdrawal transactions; fraud detection and anti-money-laundering (AML) screening services; and analytics providers that help us understand platform performance. Data received from third parties is handled with the same level of protection as data you provide directly.

40jl Casino uses your personal data for the following specific purposes:

1. Account Registration and Management: Creating and maintaining your 40jl Casino account, verifying your identity, managing your wallet, and processing your login credentials.
2. Payment Processing: Processing deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, PESONet, Visa, and Mastercard; reconciling transactions; and investigating disputed payments.
3. KYC and AML Compliance: Verifying your identity and source of funds as required by PAGCOR regulations and applicable anti-money-laundering laws. This includes screening against sanctions lists and politically exposed persons (PEP) databases.
4. Regulatory Reporting: Providing transaction data and player activity reports to PAGCOR and other regulatory bodies as required by law.
5. Customer Support: Responding to your queries, complaints, and support requests submitted through live chat or email.
6. Responsible Gaming: Monitoring gaming activity to identify potential problem gambling patterns; enforcing self-exclusion requests; applying deposit and session limits you have set; and delivering responsible gaming communications.
7. Platform Security: Detecting, investigating, and preventing fraud, account takeover, bonus abuse, collusion, and other prohibited activities on the Platform.
8. Platform Improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.
9. Marketing Communications: Sending you promotional offers, bonus notifications, and news about 40jl Casino — but only where you have given explicit consent or where this is permitted under applicable law. You may opt out at any time.

Under the Data Privacy Act of 2012, 40jl Casino relies on the following legal bases for processing your personal data:

• Performance of a Contract: Processing necessary to provide the services you have requested, including account management, payment processing, and gameplay access.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, anti-money-laundering laws, KYC requirements, and reporting obligations to regulatory authorities.
• Legitimate Interests: Processing carried out to protect the security and integrity of the Platform, prevent fraud, and improve the gaming experience — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and the use of non-essential cookies, where your freely given, specific, informed, and unambiguous consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

40jl Casino does not sell your personal data. We share your data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

7.1 Payment Service Providers

GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors receive the minimum data required to process your transactions — typically your name and account identifier. These providers operate under their own privacy policies and applicable Philippine financial regulations.

7.2 Identity Verification Providers

Third-party KYC and AML service providers receive identity document data and biometric data as necessary to verify your identity and fulfil 40jl Casino's regulatory obligations. These providers are contractually bound to process your data only for the specified verification purpose.

7.3 Game Content Providers

Game providers, including JILI Games and other licensed studios, may receive anonymised session and transaction data to settle game payouts and maintain the integrity of game outcomes. These providers do not receive directly identifying personal data beyond what is technically required for game operation.

7.4 Regulatory Authorities

PAGCOR and other competent Philippine regulatory or law enforcement authorities may receive player data where required by a valid legal obligation, court order, or regulatory directive. 40jl Casino will notify affected players where legally permitted to do so.

7.5 IT Infrastructure and Security Providers

Cloud hosting, cybersecurity, fraud detection, and analytics providers who support the operation of the Platform may process personal data in their capacity as data processors, under written data processing agreements that bind them to the same privacy standards as 40jl Casino.

40jl Casino uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by your browser when you visit a website. We use the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function, including maintaining your login session and enabling secure payment processing. These cannot be disabled without impairing your use of the Platform.
• Performance Cookies: Collect anonymised information about how players use the Platform — which pages are visited most, where error messages occur — to help us improve the experience. No personally identifiable information is stored.
• Functionality Cookies: Remember your preferences such as language settings, display preferences, and recently played games to provide a more personalised experience.
• Analytics Cookies: Used by analytics tools to generate aggregate statistics about Platform usage. Data from these cookies is anonymised before analysis.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the Platform, but may affect certain convenience features. Your consent to the use of non-essential cookies is obtained on your first visit and can be withdrawn at any time through our cookie consent interface.

40jl Casino retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data and gaming activity records: Retained for a minimum of five (5) years from the date of account closure or the last transaction, in compliance with PAGCOR record-keeping requirements and anti-money-laundering regulations.
• KYC and identity verification documents: Retained for five (5) years from the date of verification or account closure, whichever is later.
• Transaction records: Retained for five (5) years in compliance with applicable financial reporting obligations.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable additional period for record-keeping purposes.

Following the expiry of applicable retention periods, personal data will be securely deleted or anonymised so that it can no longer be associated with you as an identifiable individual.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 40jl Casino. To exercise any of these rights, contact us at [email protected] with the subject line "Data Subject Rights Request".

40jl Casino implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 40jl Platform is encrypted using industry-standard SSL/TLS protocols;
• Password Hashing: Account passwords are stored as salted cryptographic hashes — raw passwords are never stored on our systems;
• Access Controls: Access to personal data is restricted to authorised personnel on a need-to-know basis, with role-based access controls enforced at the system level;
• Two-Factor Authentication: Critical internal systems are protected by multi-factor authentication;
• Regular Security Audits: The Platform undergoes regular security assessments and penetration testing by qualified security professionals;
• PCI-DSS Compliant Payment Processing: Card payment data is handled exclusively by certified PCI-DSS payment processors.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights, 40jl Casino will notify you and the National Privacy Commission within the timeframes prescribed by the Data Privacy Act of 2012.

The 40jl Casino Platform and all its services are strictly intended for persons aged 21 years and above, consistent with PAGCOR's minimum age requirement for casino-style gaming activities in the Philippines. 40jl Casino does not knowingly collect or process personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual under the minimum age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has provided personal data to 40jl Casino, please contact us immediately at [email protected].

Some of 40jl Casino's service providers — including cloud infrastructure operators, game studios, and analytics providers — may process data in servers located outside the Philippines. Where such transfers occur, 40jl Casino ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the protection afforded under the Data Privacy Act of 2012.

Safeguards used for cross-border transfers include: contractual clauses requiring the recipient to maintain equivalent data protection standards; transfers to countries recognised as providing adequate data protection by the National Privacy Commission; and the explicit consent of the data subject where other safeguards are not available.

40jl Casino may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or the introduction of new Platform features. When material changes are made, we will notify registered players via the mobile number or email address on file, and display a prominent notice on the Platform.

The "Effective Date" at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Continued use of the 40jl Platform following notification of changes constitutes your acceptance of the updated Policy.

For all privacy-related enquiries, data subject rights requests, or complaints, please contact the 40jl Casino Data Protection Officer using the following details:

• Email: [email protected] (subject: "Data Privacy / DPO Request")
• Live Chat: 24/7 via the live chat widget on 40jl.club
• Response time: DPO enquiries acknowledged within 2 business days; resolved within 30 calendar days

For complaints that have not been resolved to your satisfaction by 40jl Casino, you may escalate to the National Privacy Commission of the Philippines. The NPC's contact information and complaint procedures are published at the NPC's official website.

For general platform support, account enquiries, and payment assistance, visit our FAQ page or use the live chat feature available on 40jl.club.