Privacy Policy

This Privacy Policy ("Policy") describes how 12jl Casino ("12jl," "we," "us," or "the Platform"), operating through the domain 12jl.org, collects, processes, stores, and discloses the personal information of players and visitors who interact with the 12jl platform and its associated services.

12jl is committed to handling personal data with the respect, care, and transparency that Filipino players deserve. This Policy is written in plain, accessible English to ensure that every player — whether they're logging in from Makati, Cebu City, or Davao — fully understands how their information is being used before they choose to share it with us.

This Policy applies to all personal data processed in connection with your registration, account management, deposits and withdrawals, gameplay, and any communications you have with 12jl's support team. By creating and using a 12jl account, you acknowledge that you have read and understood this Policy.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 12jl Casino acts as the Personal Information Controller (PIC) in respect of all personal data collected through the 12jl platform.

As PIC, 12jl determines the purposes for which personal data is collected and the means by which it is processed. 12jl has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance. Contact details for the DPO are provided in Section 15 of this Policy.

12jl collects personal data in the categories described below. We apply the principle of data minimisation — we collect only what is necessary for the specific purposes described in Section 5.

12jl does not collect sensitive personal information — such as health data, religious beliefs, or political opinions — except where age and identity information forms part of the KYC verification process required by applicable regulations.

4.1 Directly From You

The majority of personal data 12jl holds is provided directly by you during account registration, KYC document submission, deposit and withdrawal transactions, live chat and Viber support interactions, and completion of responsible gaming questionnaires.

4.2 Automatically

12jl's platform automatically collects certain technical and behavioural data when you access the website or gaming interfaces. This includes your IP address, device identifiers, session duration, pages viewed, and interaction patterns with game interfaces. This data is collected via server logs, cookies, and similar tracking technologies as described in Section 8.

4.3 From Third Parties

In limited circumstances, 12jl receives personal data from third-party sources including: payment service providers (GCash, Maya, BPI, BDO) for transaction confirmation purposes; identity verification partners used to support the KYC process; and fraud prevention services that provide risk-scoring data linked to device fingerprints or known fraudulent activity patterns.

12jl processes personal data only where there is a lawful basis for doing so under the Philippine Data Privacy Act. The primary purposes and their corresponding legal bases are as follows:

• Account registration and management — Processing is necessary to fulfil the contract between 12jl and the player (account agreement and Terms & Conditions).
• Age verification and KYC compliance — Processing is required to comply with legal obligations under Philippine gaming regulations and PAGCOR requirements.
• Payment processing and transaction recording — Necessary for performance of the contractual relationship and compliance with applicable financial regulations and anti-money laundering obligations.
• Responsible gaming monitoring and intervention — Legitimate interest in protecting player welfare and complying with PAGCOR responsible gaming standards; also required by law in certain circumstances.
• Fraud detection and security — Legitimate interest in protecting the platform and its players from fraudulent activity, account takeover, and financial crime.
• Customer support — Necessary for performance of the contract and to respond to your requests and enquiries.
• Personalised game recommendations and promotional communications — Based on your consent where explicitly given, or on legitimate interest for logged-in players where such communications relate directly to your account activity and can be opted out of at any time.
• Legal compliance and regulatory reporting — Required by applicable Philippine laws, including data retention obligations and reporting to PAGCOR or other authorities as mandated.

12jl does not sell your personal data. We share personal information only in the limited circumstances listed below, and only to the extent necessary for the stated purpose:

6.1 Payment Processors

Transaction data is shared with GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment providers solely to facilitate your deposit and withdrawal transactions. These providers process your data as independent data controllers under their own privacy policies and applicable Philippine regulations.

6.2 Identity Verification Partners

For KYC compliance, identity data including government ID scans may be shared with contracted verification service providers. These processors are bound by strict data processing agreements and are prohibited from using your data for any purpose other than identity verification on behalf of 12jl.

6.3 Game Software Providers

To deliver live dealer games, slots, and sports betting markets, 12jl works with licensed third-party game studios and providers. Limited account and session data (not including financial account numbers) is shared with these providers to facilitate your active gaming session. Data shared is strictly limited to what is required for game delivery.

6.4 Regulatory and Legal Authorities

12jl may disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other Philippine government bodies where required by law, court order, or regulatory direction. 12jl will notify affected players of such disclosures where legally permitted to do so.

6.5 Fraud Prevention Services

To protect the platform and all players, 12jl works with fraud prevention and cybersecurity partners who may receive device-level technical data for the purpose of detecting and preventing account takeover, financial fraud, and bonus abuse. No financial account credentials are shared with these services.

12jl retains personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The principal retention periods applied by 12jl are as follows:

• Active account data: Retained for the lifetime of the account plus five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and applicable financial regulations.
• KYC documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later, as required by anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of last interaction, to assist with dispute resolution and account history.
• Technical and log data: Retained for ninety (90) days for security monitoring and fraud detection purposes, unless a specific incident requires longer retention.
• Marketing preferences: Retained until you withdraw consent or close your account, plus a reasonable period to confirm preference updates.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with NPC guidance on secure disposal of personal information.

12jl uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve the gaming experience. The categories of cookies used by 12jl are:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that maintain your login state, security tokens that protect against CSRF attacks, and cookies that store your language and currency preferences. These cookies cannot be disabled without significantly impairing platform functionality.
• Functional Cookies: Remember your preferences and personalisation settings, such as your preferred game lobby layout, recently played game lists, and responsible gaming settings. These are disabled by default and activated only when you save a preference.
• Analytics Cookies: Used to understand how players navigate the platform — which games are most visited, where login errors occur, and how the deposit flow performs on different devices. Analytics data is aggregated and does not identify individual players.
• Security & Fraud Prevention Cookies: Used by 12jl's fraud detection systems to identify unusual device behaviour patterns. These cookies help protect your account from takeover attempts.

Most modern mobile browsers allow you to manage cookie preferences through your browser settings. Blocking strictly necessary cookies may impair your ability to log in or use the platform. For cookies that are not strictly necessary, you may adjust your preferences in the Cookie Preferences section accessible from the platform's footer.

12jl implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. Key security measures include:

• 256-bit TLS 1.3 encryption for all data in transit between your device and 12jl's servers;
• Encryption at rest for all sensitive personal and financial data stored in 12jl's database systems;
• Role-based access controls ensuring that personal data is accessible only to 12jl employees with a documented operational need;
• Two-factor authentication (2FA) required for all administrative access to systems containing personal data;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity firms;
• Automated monitoring systems that detect and alert on unusual access patterns or data exfiltration attempts in real time.

Notwithstanding these measures, no internet-based system is entirely immune from security risk. 12jl recommends that players also take personal security precautions, including enabling 2FA on their 12jl account, using a unique password not shared with other services, and accessing 12jl only through devices they personally control.

Under Republic Act No. 10173 and its Implementing Rules and Regulations, Filipino players have the following data subject rights in respect of their personal information held by 12jl:

12jl's services are strictly intended for individuals aged 21 years and above. 12jl does not knowingly collect, process, or retain personal data from any individual under the age of 21. Where 12jl discovers that personal data of an individual under 21 has been collected — whether through misrepresentation at registration or any other means — that data will be deleted immediately and the associated account will be suspended without refund of any deposited amounts, pending regulatory guidance.

If you have reason to believe that a minor has registered or accessed 12jl, please contact support immediately via live chat or email so that the matter can be investigated and resolved promptly.

Certain service providers engaged by 12jl — including game software studios and fraud detection services — may be located outside the Philippines. Where personal data is transferred to entities outside Philippine jurisdiction, 12jl ensures that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers, including:

• Contractual clauses that impose data protection obligations on the recipient at least equivalent to those applicable in the Philippines;
• Transfer only to jurisdictions with adequately comparable data protection frameworks;
• Technical safeguards ensuring that data is encrypted in transit and at rest regardless of geographic location.

By accepting this Privacy Policy, you acknowledge that your data may be processed by providers located outside the Philippines where the safeguards described above are in place. You may request information about specific cross-border transfers by contacting the DPO.

The 12jl platform integrates third-party game studios, live dealer streaming technology, and payment gateway interfaces. While 12jl carefully vets these providers, each operates under its own privacy policy and data practices once you interact directly with their embedded interfaces. 12jl is not responsible for the privacy practices of third-party game providers or payment platforms; players are encouraged to review the privacy policies of GCash, Maya, BPI, and other payment services used in conjunction with 12jl.

12jl does not embed or link to social media widgets, external advertising networks, or affiliate tracking services that would collect your personal data without your knowledge. All functional integrations on the 12jl platform are disclosed in this Policy.

12jl may update this Privacy Policy periodically to reflect changes in applicable law, regulatory guidance from the National Privacy Commission, or changes in how 12jl processes personal data. Material changes — that is, changes that significantly affect your rights or how your data is used — will be communicated to registered players via the mobile number or email associated with their account, and will be prominently flagged on the platform, with a minimum of 14 days' notice before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of the 12jl platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 12jl, please contact our Data Protection Officer (DPO) through the following channels:

• Email: [email protected] (subject line: Data Privacy Request)
• Live Chat: Available 24/7 through the 12jl platform — identify your inquiry as a data privacy matter
• Viber & Messenger: Available 24/7 with an average response time of 3–5 minutes

When submitting a data subject rights request or privacy complaint, please include your registered Philippine mobile number or username, a clear description of your request or concern, and any relevant supporting information. 12jl will acknowledge your submission within 72 hours.

If you are not satisfied with 12jl's response to a privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines, which is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.