🔐 49jl Privacy Policy — How We Handle Your Personal Data

1.1 Data Controller Identity. For the purposes of the Philippine Data Privacy Act of 2012, 49jl is the personal information controller (PIC) in respect of personal data collected through the 49jl platform. As the PIC, 49jl determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

1.2 PAGCOR License Context. 49jl operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR). As a PAGCOR-licensed operator, 49jl is subject to both the data protection obligations imposed by the National Privacy Commission (NPC) under the DPA and the data handling requirements specified in 49jl's PAGCOR licensing conditions. Where PAGCOR licensing requirements impose data handling obligations additional to or more stringent than those in the DPA, the more stringent requirement applies.

1.3 Data Protection Officer. 49jl has designated a Data Protection Officer (DPO) in accordance with Section 21 of the DPA Implementing Rules. The DPO is responsible for ensuring compliance with data protection obligations, handling data subject rights requests, and liaising with the NPC. The DPO can be contacted at [email protected]. Please include "Data Privacy" in the subject line of any written privacy-related enquiry.

2.1 49jl collects the following categories of personal data. The specific data collected varies depending on whether you are a registered player, a platform visitor, or a player undergoing KYC verification.

2.2 Special Categories of Data. 49jl does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA (e.g., racial or ethnic origin, religious beliefs, health data, sexual orientation) unless you voluntarily disclose such information in a support communication or as part of a responsible gaming self-referral. Any such information is processed solely for the purpose for which it was provided and is subject to heightened security controls.

3.1 49jl collects personal data through the following channels:

• Direct Registration: When you create a 49jl account, you provide your mobile number or email address, chosen password, and date of birth. This is the primary point of initial data collection.
• KYC Verification Process: When you submit identity documents for withdrawal verification, we collect the information contained in those documents, including your full name, ID number, date of birth, and ID photograph.
• Payment Transactions: When you initiate a deposit or withdrawal through GCash, PayMaya, or a Philippine bank, your financial account details are shared with us or with our payment processing partners as necessary to complete the transaction.
• Platform Usage: Technical data including your IP address, device information, and browsing behavior within the 49jl platform is automatically collected when you access the site or log in to your account.
• Support Interactions: When you contact 49jl support via live chat or email, the content of those communications is collected and stored.
• Cookies and Tracking Technologies: See Section 6 for full details on how 49jl uses cookies and similar technologies on the platform.

4.1 Under the Philippine Data Privacy Act, 49jl processes personal data on the following legal bases:

• Contract Performance: Processing is necessary to perform the contract between you and 49jl — specifically, to provide the gaming services you have registered for, to process deposits and withdrawals, and to manage your account.
• Legal Obligation: Processing is required to comply with PAGCOR licensing conditions, anti-money laundering law (Republic Act No. 9160 as amended), and other applicable Philippine legislation.
• Legitimate Interests: Processing is necessary for 49jl's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement — where these interests are not overridden by your fundamental rights and freedoms.
• Consent: For marketing communications and non-essential cookies, processing is based on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of processing conducted before withdrawal.

5.1 Account Operation. To create and maintain your 49jl account, authenticate your identity when you log in, manage your account balance, process deposits and withdrawals, and provide access to all games and services on the platform.

5.2 Identity Verification and KYC. To fulfill 49jl's PAGCOR-mandated Know Your Customer obligations, including verifying your age (21+ requirement), identity, and the source of your payment methods before processing withdrawals. KYC documentation is reviewed by authorized 49jl personnel and, where required, submitted to PAGCOR.

5.3 Payment Processing. To process your deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other accepted payment methods. Your financial account information is transmitted to payment processors using encryption and is not stored in full by 49jl beyond what is required for transaction record-keeping.

5.4 Fraud Prevention and Security. To detect and prevent fraudulent transactions, unauthorized account access, bonus abuse, money laundering, collusion, and other prohibited activities. This includes automated screening of transactions and game activity against fraud risk indicators, and manual review by the 49jl security team where flags are raised.

5.5 Responsible Gaming. To monitor game activity for behavioral patterns that may indicate problem gambling, to implement deposit limits, cooling-off periods, and self-exclusion restrictions you have requested, and to comply with PAGCOR responsible gaming reporting requirements.

5.6 Customer Support. To respond to your enquiries, resolve complaints, and improve the quality of support services. Support chat transcripts and emails are retained to enable resolution of escalated disputes and for quality assurance purposes.

5.7 Legal and Regulatory Compliance. To prepare and submit reports to PAGCOR as required by 49jl's licensing conditions, to respond to Suspicious Transaction Reports (STR) obligations under the Anti-Money Laundering Act, and to cooperate with lawful requests from competent Philippine authorities.

5.8 Marketing (Consent-Based). Where you have opted in, to send you promotional communications about bonuses, new games, special events, and platform updates via SMS, email, or in-platform notifications. You can opt out at any time — see Section 13.

6.1 The 49jl platform uses cookies and similar tracking technologies to enhance your experience, maintain session continuity, and support platform security functions. A cookie is a small text file placed on your device when you access a website. The following categories of cookies are used by 49jl:

• Essential Cookies: Required for core platform functionality — including maintaining your logged-in session, storing your language preference, and enabling secure communication between your browser and the 49jl server. These cookies cannot be disabled without severely impairing platform functionality.
• Security Cookies: Used for fraud prevention purposes, including device fingerprinting to identify and flag suspicious login attempts, and CSRF tokens to prevent cross-site request forgery attacks.
• Analytics Cookies: Used, subject to your consent, to collect aggregated and anonymized information about how players navigate and use the platform, in order to identify technical issues and improve the user experience.
• Preference Cookies: Used to remember your in-platform settings, such as your preferred game lobby view or notification preferences, across sessions.

6.2 You can manage cookie preferences through your browser settings. Blocking essential or security cookies may prevent you from logging in or using core platform features. Most mobile browsers used by Philippine players — including Chrome on Android and Safari on iOS — allow you to view and clear cookies in their respective privacy settings menus.

7.1 49jl does not sell, rent, or trade your personal data to any third party. Personal data is shared only in the circumstances described below:

• PAGCOR and Regulatory Authorities: 49jl discloses player data to PAGCOR as required by its licensing conditions. This includes periodic reporting on player activity, KYC records upon request, and investigation cooperation where PAGCOR exercises its oversight functions. 49jl also discloses data to the Anti-Money Laundering Council (AMLC) in accordance with Republic Act No. 9160 as amended.
• Payment Processors: Your financial account details are shared with GCash, PayMaya, and banking partners solely for the purpose of executing the specific transaction you have requested. Payment processors operate under their own privacy policies and are responsible for their own data handling practices in relation to data shared with them.
• Game Providers: Game providers whose products appear on the 49jl platform may receive limited technical data (such as a pseudonymous player session token and bet/result data) to support game operation and dispute resolution. Game providers do not receive your full identity or financial information.
• Service Providers: Vetted third-party service providers engaged by 49jl to assist in platform operations — such as KYC verification services, fraud detection providers, customer support platforms, and cloud infrastructure providers — may process personal data on 49jl's behalf under data processing agreements that impose confidentiality and security obligations consistent with the DPA.
• Law Enforcement and Courts: Where required by a valid and lawful order from a competent Philippine court, law enforcement authority, or other government body, 49jl will disclose personal data to the extent required by such order.

8.1 Certain service providers and game providers engaged by 49jl may process personal data on servers located outside the Philippines. Where such cross-border data transfers occur, 49jl ensures that adequate safeguards are in place as required by Section 21 of the DPA Implementing Rules, including contractual data transfer agreements that impose DPA-equivalent protections on the recipient party.

8.2 49jl does not transfer personal data to jurisdictions that do not provide an adequate level of data protection as assessed against the standards of the Philippine DPA without implementing appropriate contractual safeguards. Where you have concerns about specific cross-border transfers, you may direct your enquiry to our Data Protection Officer at [email protected].

9.1 49jl implements a comprehensive set of technical and organizational security measures designed to protect personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser and the 49jl platform is protected by TLS 1.2 or higher (HTTPS). This applies to login credentials, financial data, and all other personal data communicated via the platform.
• Encryption at Rest: Sensitive personal data fields, including identity document information and financial account details, are encrypted at rest in 49jl's database systems.
• Password Security: Account passwords are processed using industry-standard one-way cryptographic hashing algorithms. 49jl never stores passwords in plain text and is unable to retrieve your password — only reset it.
• Access Controls: Access to personal data within 49jl's systems is restricted to authorized personnel whose roles require such access. All internal access is subject to role-based permissions and audit logging.
• Intrusion Detection: 49jl's infrastructure includes continuous monitoring for unauthorized access attempts, anomalous activity, and known attack signatures.
• Security Assessments: 49jl conducts periodic security assessments of its platform and data handling practices to identify and remediate vulnerabilities.

9.2 Data Breach Response. In the event of a personal data breach that is likely to give rise to a real risk of serious harm to data subjects, 49jl will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with NPC Circular No. 16-03 and subsequent NPC guidance. 49jl maintains a documented Data Breach Response Plan for this purpose.

10.1 49jl retains personal data for as long as is necessary for the purposes described in this Policy, subject to the following minimum retention periods:

• Active Account Data: Retained for the full duration of your account relationship with 49jl.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the relevant transaction, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• KYC Documentation: Retained for a minimum of five (5) years following account closure, or longer where required by ongoing PAGCOR or AMLC reporting obligations.
• Support Communications: Retained for a minimum of two (2) years from the date of the communication, to enable resolution of escalated disputes.
• Marketing Preference Records: Opt-in and opt-out records are retained indefinitely to demonstrate consent compliance, even if the associated marketing data is deleted.

10.2 Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymized such that it can no longer be linked to an identifiable individual. Where full deletion is not technically feasible (e.g., in backup systems), data will be isolated and protected from further processing until deletion is possible.

11.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 49jl. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." 49jl will respond to your request within thirty (30) calendar days.

12.1 The 49jl platform is strictly intended for persons who are at least twenty-one (21) years of age, as required by PAGCOR. 49jl does not knowingly collect personal data from any person under 21 years of age.

12.2 If 49jl becomes aware that it has collected personal data from an individual who is below the minimum age requirement, that data will be immediately deleted and the associated account will be closed. Any deposits made to the account during the period of underage access will be handled in accordance with PAGCOR's requirements.

12.3 If you have reason to believe that a minor has registered on the 49jl platform or has provided their personal data to 49jl, please contact us immediately at [email protected] so that appropriate action can be taken.

13.1 49jl sends promotional communications — including bonus offers, game announcements, seasonal promotions, and platform updates — only to players who have affirmatively opted in to receive such communications during registration or through their account settings.

13.2 You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in your 49jl account settings;
• Clicking the unsubscribe link in any marketing email from 49jl;
• Replying STOP to any promotional SMS from 49jl; or
• Contacting our support team at [email protected] with a request to be removed from marketing lists.

13.3 Opting out of marketing communications does not affect essential account communications, including transaction confirmations, security alerts, KYC verification requests, and notifications required by PAGCOR or other regulatory obligations.

14.1 The 49jl platform does not contain links to third-party websites, social media platforms, or external services beyond those necessary for payment processing integrations. Where a game is served by a third-party game provider within the 49jl platform interface, that provider operates under its own privacy practices in relation to any data processed directly by the game — 49jl does not control and is not responsible for the privacy practices of third-party game providers.

14.2 This Policy applies exclusively to data collected and processed by 49jl as data controller. It does not apply to data collected by PAGCOR, payment processors, or any other third party with whom you interact in connection with your use of the platform.

15.1 49jl may update this Privacy Policy periodically to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Updated versions will be published on this page at 49jl.bio/privacy-policy with the "Last Updated" date revised accordingly.

15.2 Where an update materially changes how we process your personal data in a way that requires your renewed consent, we will notify you via the email address or mobile number registered to your 49jl account and provide you with the opportunity to review the changes before they take effect.

15.3 Your continued use of the 49jl platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not accept the updated Policy, you must cease using the platform and contact support to close your account.

16.1 For any questions, requests, or concerns relating to this Privacy Policy or 49jl's handling of your personal data, please contact our Data Protection Officer using the details below. We aim to respond to all data privacy enquiries within five (5) business days of receipt.

16.2 If you are not satisfied with 49jl's response to a data privacy complaint, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, the government body responsible for administering and enforcing the Data Privacy Act of 2012. Information about the NPC complaint process is available through official NPC government channels.

16.3 This Policy is governed by the laws of the Republic of the Philippines. Any dispute arising from this Policy that is not resolved through 49jl's internal process shall be subject to the jurisdiction of the competent courts of the Philippines.