Our Privacy Principles

Six commitments JL866 makes to every Filipino player

Before you read the full policy, here are the principles that guide how JL866 handles every piece of information you share with us.

Collect Only What's Necessary

JL866 collects personal data only to the extent required to provide the service, comply with Philippine regulations, and keep your account safe. We don't collect information just because we can.

Protect What You Share

All personal data stored by JL866 is protected with industry-standard encryption. Access is restricted to personnel with a legitimate operational need, and all access is logged.

Be Transparent About Usage

We tell you what your data is used for before we use it. No data is repurposed for a different reason than what was stated at collection without your knowledge and, where required, your consent.

Respect Your Rights

Under the Philippine Data Privacy Act, you have real rights over your personal data. JL866 honours those rights — access, correction, deletion, objection, and data portability are all available to you.

No Selling Your Data

JL866 does not sell, rent, or trade your personal information to third parties for their independent commercial use. Your data is not a product at this platform.

Keep It Only as Long as Needed

Personal data is retained only for as long as it is required for its stated purpose or as mandated by Philippine law. Data no longer needed is securely deleted or anonymised.

1 Overview

This Privacy Policy describes how JL866 (operating at jl866.best) collects, uses, stores, discloses, and protects the personal information of its users — primarily Filipino players and visitors located in the Philippines. It is issued in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations.

By registering for a JL866 account, depositing funds, playing games, or simply visiting the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the terms described here, you should not use the JL866 platform.

Plain language summary: We collect your information to run your account, process payments, verify your identity as required by PAGCOR, prevent fraud, and improve the platform. We do not sell it. You have real rights over it under Philippine law, and this document explains how to use those rights.

2 Data Controller

The personal data of JL866 platform users is controlled by the entity operating jl866.best under its PAGCOR license. For all data privacy matters, the primary contact is the JL866 Data Protection Officer (DPO), reachable at privacy@jl866.best.

As a PAGCOR-licensed operator, JL866 is also subject to data handling requirements mandated by Philippine regulatory bodies, including the National Privacy Commission (NPC).

3 Personal Data We Collect

The following categories of personal data may be collected by JL866 depending on how you interact with the platform:

3.1 Identity Data

  • Full legal name as it appears on your Philippine government-issued ID
  • Date of birth
  • Gender
  • Government ID number (e.g. PhilSys, passport, driver's licence, SSS/GSIS)
  • Profile photo (where submitted for KYC purposes)

3.2 Contact Data

  • Philippine residential address
  • Email address
  • Mobile phone number (Philippine format)

3.3 Financial Data

  • GCash account number or registered mobile number
  • Maya account details
  • Bank account information (BDO, BPI, UnionBank, etc.) where provided for withdrawals
  • Visa/Mastercard card details (last four digits and card type — full card numbers are processed through a PCI-DSS compliant payment gateway and are not stored on JL866 servers)
  • Transaction history: deposits, withdrawals, wins, losses, and bonus activity

3.4 Technical Data

  • IP address at the time of login and transactions
  • Device type, operating system, and browser version
  • Session timestamps and duration
  • Geolocation data (approximate, based on IP address)

3.5 Behavioural Data

  • Games played and session histories
  • Betting patterns and wagering volumes
  • Bonus redemption and promotion participation history
  • Customer support interaction records

4 How We Collect Your Data

JL866 collects personal data through the following channels:

  • Direct submission: Information you provide during registration, KYC verification, deposit/withdrawal requests, and when contacting support.
  • Automated collection: Technical and behavioural data collected through cookies, server logs, and platform analytics tools when you use the platform.
  • Third-party verification: Identity confirmation data returned by government ID verification services used for KYC compliance.
  • Payment processors: Transaction confirmation data returned by GCash, Maya, and other payment channel processors after a transaction is completed.
  • Regulatory databases: Where required by PAGCOR, cross-referencing with self-exclusion registries or prohibited persons lists.

5 Why We Use Your Data

Purpose Data Used Why Necessary
Account creation & management Identity, contact data To establish and maintain your JL866 account
KYC / identity verification Identity, government ID PAGCOR regulatory requirement before withdrawals
Payment processing Financial data, contact data To process deposits and withdrawals in PHP
Fraud prevention & AML Identity, financial, technical data Legal obligation under Philippine anti-money laundering law
Responsible gaming monitoring Behavioural data To identify at-risk patterns and offer appropriate interventions
Customer support All categories as relevant To resolve account issues and respond to your queries
Marketing communications Contact, behavioural data With your consent — you may opt out at any time
Platform analytics & improvement Technical, behavioural data To identify bugs, improve performance, and enhance user experience

7 Who We Share Your Data With

JL866 does not sell your personal data. We share it only with parties that have a legitimate operational or regulatory reason to receive it:

  • Payment processors: GCash, Maya, GrabPay, InstaPay network, and card payment gateways receive only the data necessary to process your specific transaction.
  • KYC verification providers: Third-party identity verification services receive your ID data solely for the purpose of confirming your identity in line with PAGCOR requirements.
  • PAGCOR and other Philippine regulatory authorities: JL866 is required to report certain activity to its licensing authority and may share data in response to lawful regulatory requests.
  • Law enforcement: Where required by Philippine law or a valid court order, JL866 may disclose personal data to law enforcement authorities.
  • IT and platform service providers: Hosting, analytics, and security service providers operating under strict data processing agreements that prohibit independent use of the data.
Important: All third parties who receive JL866 player data are contractually bound to handle it only for the stated purpose, to maintain appropriate security standards, and not to disclose it further without authorisation.

8 Cookies and Tracking Technologies

JL866 uses cookies and similar tracking technologies on the platform to maintain session state, remember your preferences, detect fraud, and gather anonymised analytics data about platform usage.

Types of cookies used:

  • Essential cookies: Required for the platform to function — these cannot be disabled without breaking core functionality such as login sessions and balance display.
  • Analytics cookies: Collect anonymised data about how pages are used, which features are popular, and where users encounter issues. This data does not identify you personally.
  • Security cookies: Used to detect unusual patterns that may indicate fraud, account takeover attempts, or bot activity.
  • Preference cookies: Remember your language settings, display preferences, and other optional configurations.

You can manage non-essential cookies through your browser settings. Disabling essential cookies will affect platform functionality.

9 How We Protect Your Data

JL866 implements multiple layers of technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, and disclosure:

  • TLS encryption for all data transmitted between your device and JL866 servers
  • Encryption at rest for sensitive data fields including identity documents and financial details
  • Role-based access controls limiting data access to personnel with a specific operational need
  • Comprehensive access logging — all queries against personal data are recorded
  • Regular security assessments and penetration testing by qualified third-party security professionals
  • Staff data privacy training as part of onboarding and annual compliance refreshers
  • Incident response procedures in place to contain, assess, and notify affected individuals in the event of a data breach, in accordance with NPC notification requirements

10 How Long We Keep Your Data

JL866 retains personal data for as long as your account remains active and for such period thereafter as is required by law or legitimate business need. The key retention periods are:

  • Account data: Retained for the duration of your account and for five years after account closure, in line with PAGCOR record-keeping requirements.
  • Financial transaction records: Retained for a minimum of five years as required under Philippine AML regulations.
  • KYC documents: Retained for five years following account closure or the completion of the business relationship.
  • Marketing consent records: Retained for as long as marketing communications are sent plus an additional year, to demonstrate consent compliance.
  • Support records: Retained for three years following case closure.

Upon expiry of applicable retention periods, data is securely deleted or irreversibly anonymised.

11 Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by JL866:

  • Right to be Informed: You have the right to know that your personal data is being collected, the purposes for which it is being processed, and who will receive it.
  • Right to Access: You may request a copy of the personal data JL866 holds about you, along with information about how it has been processed.
  • Right to Rectification: You may request the correction of inaccurate or incomplete personal data. Account details can be updated directly through your account settings for most fields.
  • Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to retention obligations required by law.
  • Right to Object: You may object to processing based on legitimate interest, including direct marketing. Objection to marketing will be actioned immediately upon receipt.
  • Right to Data Portability: You may request a machine-readable copy of personal data you have directly provided to JL866 for transfer to another service provider.
  • Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, contact our Data Protection Officer at privacy@jl866.best. Requests will be acknowledged within 3 business days and responded to within 30 days.

12 Minors

JL866 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under 18 years of age. If you believe that a minor has registered an account or provided personal data to JL866, please contact us immediately at privacy@jl866.best. Any such account will be closed and associated data deleted upon confirmation.

13 Cross-Border Data Transfers

Where JL866 engages service providers located outside the Philippines — such as international cloud hosting providers or global payment networks — personal data may be transferred internationally. Any such transfers are conducted under contractual safeguards that require the recipient to maintain data protection standards consistent with the Philippine Data Privacy Act.

JL866 will not transfer your personal data to a country that does not have adequate data protection safeguards in place without your explicit consent or a specific legal authority permitting the transfer.

14 Changes to This Policy

JL866 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes will be communicated to registered account holders via email at least 7 days before taking effect, along with a notice displayed on the platform.

The "Last Updated" date at the top of this page indicates when the policy was most recently revised. Continued use of the JL866 platform after the effective date of any revision constitutes your acceptance of the updated policy.

15 Contact Our Data Protection Officer

For all data privacy matters — including rights requests, complaints, or questions about this policy — contact the JL866 Data Protection Officer:

  • Email (DPO): privacy@jl866.best
  • General Support: support@jl866.best
  • Live Chat: Available 24/7 inside the JL866 platform
  • FAQ: jl866.best/faq

For complaints to the Philippine data privacy regulator: National Privacy Commission (NPC), 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila. The NPC's contact details are publicly available on their official website.

Your Data Rights

Under Philippine law, your data rights are real and enforceable

The Data Privacy Act of 2012 gives every Filipino genuine control over their personal information. At JL866, these rights aren't buried in legal language — they're practical tools you can actually use. Here's what they look like in practice.

Access Your Data

Request a full copy of everything JL866 holds about you at any time.

Correct Your Data

Fix inaccurate information in your account directly or by contacting support.

Delete Your Data

Request erasure of data no longer required, subject to legal retention rules.

Object to Processing

Opt out of marketing or object to processing based on legitimate interest.

Portability

Get a machine-readable copy of data you've given us to take elsewhere.

File a Complaint

Escalate to the National Privacy Commission if your rights are not respected.

jl866
jl866
Security & Compliance

How JL866 keeps your information safe in practice

Promising to protect your data is easy. Here's what JL866 actually does to back that up — concrete measures, not talking points.

TLS Encryption in Transit

Every piece of data moving between your device and JL866 servers travels over an encrypted TLS connection. This includes your login, deposits, game sessions, and support chats — nothing moves in plain text.

Encrypted Storage

Sensitive fields — identity documents, financial details, and contact information — are encrypted at rest on JL866 servers. Even in the unlikely event of a storage breach, raw personal data is not readable without the encryption keys.

Role-Based Access Control

No JL866 staff member has unrestricted access to your personal data. Access is granted only on a need-to-know basis for specific operational purposes, and all access events are logged for audit purposes.

PAGCOR & NPC Compliance

JL866 operates under PAGCOR licensing and complies with the National Privacy Commission's requirements for personal data controllers. Our data practices are subject to regulatory oversight — not just self-certification.

Breach Notification Procedures

In the event of a data breach that poses a real risk to affected individuals, JL866 is required to notify the NPC within 72 hours of discovery and to inform affected users without undue delay. We have documented procedures in place to carry out these obligations.

Play on a platform that handles your data with respect

JL866 is PAGCOR-licensed, Data Privacy Act compliant, and built to give Filipino players a safe, transparent experience. Your information stays yours. Register free and start playing today.