jll8 takes the privacy of every Filipino player seriously. This Privacy Policy explains in plain terms — and precise legal language — exactly what personal data jll8 collects, why it is collected, how it is used, who it is shared with, and what rights you hold as a data subject under Philippine law.
Your privacy is a fundamental right, not a feature. This Privacy Policy is a binding legal document that governs jll8's data processing activities. It has been prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines.
This Privacy Policy applies to all personal data collected, processed, stored, and used by jll8 in connection with the operation of jll8.org and the provision of online gaming services to players in the Philippines and other permitted jurisdictions. It applies to all individuals who visit jll8.org, register an Account, deposit or withdraw funds, communicate with jll8 customer support, or otherwise interact with the jll8 platform in any capacity.
For the purposes of this Privacy Policy, "personal data" has the meaning assigned to it under the Data Privacy Act of 2012 — that is, any information, whether recorded in material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information, would directly and certainly identify an individual.
This Privacy Policy should be read together with the jll8 Terms & Conditions (available at /terms-conditions) and the jll8 Responsible Gaming Policy (available at /responsible-gaming). In the event of any conflict between this Privacy Policy and those documents specifically as they relate to data privacy matters, this Privacy Policy shall prevail.
jll8 is the personal information controller (PIC) of all personal data processed in connection with the jll8 platform and its services. As a PAGCOR-licensed operator, jll8 is registered with the National Privacy Commission (NPC) of the Philippines in accordance with Section 46 of the Implementing Rules and Regulations of the Data Privacy Act.
jll8 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act. The DPO can be contacted via the email address provided in Section 16 of this Policy. Players may direct all privacy-related inquiries, access requests, and complaints to the DPO.
Data Protection Officer: [email protected] — Subject line: "DPO Privacy Request." All requests addressed to the DPO are acknowledged within seventy-two (72) hours and substantively responded to within fifteen (15) calendar days, consistent with NPC timelines.
jll8 collects only the personal data that is necessary to provide you with a safe, compliant, and functional gaming experience. The categories of personal data jll8 collects are set out in the table below:
| Category | Specific Data Points | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government ID type and number (e.g., PhilSys ID, passport, UMID, driver's license, Voter's ID) | Account registration, KYC verification, age verification, AML compliance |
| Contact Data | Philippine mobile number (primary), email address | Account authentication, OTP delivery, support communications, notifications |
| Financial Data | GCash account details, PayMaya account details, bank account name and number (BPI, BDO, Metrobank, or other Instapay-enabled banks), deposit and withdrawal history, account balance | Payment processing, withdrawal verification, AML monitoring |
| Gaming Activity Data | Game history, bet amounts, win/loss records, game preferences, session duration, responsible gaming tool usage | Service delivery, responsible gaming monitoring, fraud detection, platform improvement |
| Technical Data | IP address, device type and model, operating system, browser type and version, mobile network provider (Globe, Smart, DITO, etc.), session timestamps | Security monitoring, fraud prevention, geo-restriction compliance, platform optimization |
| Communications Data | Support chat transcripts, email correspondence, complaint records, feedback submissions | Customer service delivery, dispute resolution, quality assurance |
| Location Data | General location inferred from IP address (city/region level — e.g., Metro Manila, Cebu, Davao, Quezon City) | Regulatory geo-restriction compliance, fraud detection |
jll8 does not collect sensitive personal information — as that term is defined under Section 3(l) of the Data Privacy Act — unless expressly required for regulatory compliance (such as processing documents for KYC purposes). Where sensitive personal information is unavoidably processed during KYC, it is handled with heightened security controls and strict access restrictions.
jll8 collects personal data through the following channels and mechanisms:
jll8 processes your personal data only for the purposes listed below. Each processing activity is limited to the data necessary to achieve the stated purpose — the principle of data minimization that underpins the Data Privacy Act:
Each processing activity conducted by jll8 is grounded in one or more of the lawful bases for processing personal data recognized under Section 12 of the Data Privacy Act of 2012:
jll8 does not sell, rent, or trade your personal data to third parties for commercial purposes. Your personal data is shared only in the following limited circumstances, and only to the extent necessary for each purpose:
What jll8 will never do: jll8 will never sell your personal data to advertising networks, data brokers, or marketing companies. Your gaming behavior, financial data, and contact details are not and will never be monetized through third-party data sales.
jll8 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention guidelines apply:
When personal data is no longer required and the applicable retention period has expired, jll8 will securely destroy or anonymize that data using industry-standard methods, ensuring it cannot be reconstructed or re-identified.
jll8 implements technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, destruction, or loss. These measures include:
Security Incident Notification: In the event of a personal data breach that is likely to give rise to a real risk of serious harm to any affected player, jll8 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players as soon as practicable thereafter.
jll8.org uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session continuity, and support platform security and analytics. The categories of cookies used on jll8.org are as follows:
You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair jll8's ability to provide the Services — in particular, maintaining your login session and processing transactions. jll8 does not use third-party advertising cookies or behavioral targeting cookies.
As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by jll8. These rights may be exercised by contacting jll8's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request":
The right to know that your personal data is being collected and processed, the purposes for processing, and the identity of jll8 as data controller.
The right to receive a copy of the personal data jll8 holds about you and information about how it is being processed, upon verified request.
The right to have inaccurate or incomplete personal data about you corrected or completed without undue delay.
The right to request deletion of your personal data, subject to jll8's legal retention obligations under PAGCOR licensing, AML law, and Philippine regulations.
The right to object to specific processing activities, including direct marketing communications, where processing is based on legitimate interests.
The right to receive your personal data in a structured, commonly used, and machine-readable format for transfer to another controller, where technically feasible.
The right to request suspension of processing of your personal data where the accuracy of the data is contested or the processing is unlawful.
The right to file a complaint with the National Privacy Commission of the Philippines if you believe jll8 has violated your data privacy rights.
jll8 will respond to all verified data subject rights requests within fifteen (15) calendar days. Where the complexity or volume of a request requires additional time, jll8 will notify you within the initial fifteen-day period and provide a revised timeline not exceeding thirty (30) calendar days in total.
jll8 does not knowingly collect personal data from persons under 21 years of age. As a PAGCOR-regulated gaming platform, jll8 is prohibited from providing services to individuals below the age of twenty-one (21) years. All Accounts are subject to age verification through the KYC process.
If jll8 discovers or reasonably suspects that it has inadvertently collected personal data from a person below the age of 21, it will immediately: (a) suspend the relevant Account; (b) notify the account holder; (c) delete or anonymize the personal data collected; and (d) report the matter to PAGCOR if required by jll8's licensing conditions.
Parents or guardians who believe that a minor in their care has registered an Account on jll8 are encouraged to contact [email protected] immediately with the relevant Account details so that jll8 can take appropriate action.
In the ordinary course of operating the jll8 platform, some personal data may be transferred to, stored in, or processed by systems or personnel located outside the Philippines — for example, in connection with game servers operated by international game providers such as Pragmatic Play or PG Soft, or with cloud infrastructure providers whose data centers are located in other countries.
Any cross-border transfer of personal data by jll8 is subject to the requirements of Section 21 of the Data Privacy Act and the NPC's rules on cross-border data transfers. jll8 will only transfer personal data internationally where:
jll8 maintains a record of all international data transfer arrangements and makes this available to the NPC upon request.
If you believe that jll8 has processed your personal data in a manner that violates this Privacy Policy or the Data Privacy Act of 2012, you are encouraged to first raise the matter directly with jll8's Data Protection Officer at [email protected]. jll8 is committed to resolving privacy complaints fairly and transparently.
If, after engaging with jll8's DPO, you remain unsatisfied with jll8's response, you have the right to file a formal complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory authority responsible for enforcing the Data Privacy Act and has the power to investigate complaints, impose penalties, and order remedies. Information on how to file a complaint with the NPC is available on the NPC's official website.
jll8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable Philippine law, NPC guidance, PAGCOR regulatory requirements, or jll8's data processing practices. The date of the most recent revision is displayed at the top of this page.
When material changes are made to this Privacy Policy — particularly changes that affect how jll8 uses your personal data or that expand your rights or jll8's obligations — jll8 will provide advance notice through one or more of the following channels: a notice displayed on jll8.org upon login, an SMS to your registered Philippine mobile number, or an email to your registered email address, at least fourteen (14) days prior to the effective date of the change.
Your continued use of jll8 following the effective date of an amended Privacy Policy constitutes your acknowledgment of the changes. Previous versions of this Privacy Policy may be requested from jll8's Data Protection Officer.
For all privacy-related matters — including data subject rights requests, consent withdrawals, data breach notifications, or general privacy inquiries — please contact jll8's Data Protection Officer through the following channel:
Data Protection Officer — jll8
Email: [email protected]
Subject line format: "DPO Privacy Request — [Your Name] — [Request Type]"
Response timeline: Acknowledgment within 72 hours; substantive response within 15 calendar days.
For urgent matters involving a suspected personal data breach affecting your Account, please indicate "URGENT — Data Breach" in the subject line.
When submitting a data subject rights request, please include: your full name as registered on your jll8 Account, your registered Philippine mobile number or Account username, a clear description of your request or concern, and — for identity verification purposes — a copy of one valid government-issued Philippine ID. This information is necessary to ensure that jll8 responds to the correct data subject and does not inadvertently disclose another person's data.
Legal language is necessary, but what does jll8's approach to data privacy actually mean for Filipino players day-to-day? Here's the plain version.
Every aspect of jll8's data handling is governed by the Data Privacy Act of 2012 (RA 10173) — one of Southeast Asia's more comprehensive privacy frameworks. Unlike some offshore platforms, jll8 is subject to NPC enforcement jurisdiction. If something goes wrong with your data, you have a real regulatory body you can take it to.
jll8 earns revenue through gaming operations — not data trading. Your GCash details, gaming history, mobile number, and personal information will never be sold to advertisers, data brokers, or any third party for commercial purposes. The only entities that receive your data are those directly necessary to provide you with the jll8 service.
The same 256-bit SSL encryption standard used by BDO and BPI for their online banking platforms protects every data transmission between your device and jll8.org. Your login credentials, financial details, and personal information never travel in plain text across the network — regardless of whether you're on Globe WiFi in Makati or Smart mobile data in Davao.
jll8 will only send you promotional SMS or emails if you have explicitly opted in. You can withdraw that consent at any time by emailing [email protected] — and jll8 is obligated by both this Policy and the Data Privacy Act to honor that withdrawal promptly. No dark patterns, no buried opt-outs.
The eight data subject rights described in Section 11 — including access, rectification, erasure, and portability — are real, exercisable rights with concrete response timelines. jll8's DPO acknowledges requests within 72 hours and responds substantively within 15 days. You can see what data jll8 holds on you and request changes at any time.
In the event of a data breach that poses real risk of harm to players, jll8 is obligated — and committed — to notify the NPC within 72 hours and affected players as soon as possible. This is not just a legal requirement; it's the standard every Filipino player deserves from any platform handling their personal information.
Your personal data is protected. Your gaming is regulated. Log in and enjoy jll8 knowing the platform handling your information takes its legal and ethical obligations seriously.