jlvv Privacy Policy — How We Handle Your Personal Data

jlvv is the operator of the online gaming platform accessible at jlvv.one, operating under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR). For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jlvv acts as the Personal Information Controller (PIC) with respect to personal data collected from users of the jlvv Platform.

As a Personal Information Controller, jlvv determines the purposes and means by which personal data is processed on this Platform. We are registered with the National Privacy Commission (NPC) of the Philippines in accordance with applicable registration requirements.

jlvv collects personal data in the following categories, depending on the nature of your interaction with the Platform:

jlvv does not collect or process sensitive personal information as defined under RA 10173 — such as racial or ethnic origin, religious beliefs, health information, or sexual orientation — unless this is strictly necessary for a specific regulatory compliance purpose and you have provided explicit consent.

jlvv collects personal data through the following mechanisms:

• Direct collection: Information you voluntarily provide during account registration, KYC verification, deposit and withdrawal requests, and customer support interactions.
• Automated collection: Technical and usage data automatically generated when you access the jlvv Platform, collected via server logs, session tokens, and analytics systems operated by jlvv.
• Third-party payment providers: Confirmation data from GCash, Maya, and bank payment rails when you initiate a deposit or withdrawal. jlvv receives only the data required to confirm transaction completion — we do not receive your full GCash PIN or bank passwords.
• Identity verification providers: Where jlvv uses third-party KYC verification tools, those providers may supply identity match results back to jlvv. The underlying document images are processed in accordance with the third party's own privacy policy, subject to contractual data processing agreements.
• Regulatory sources: Where required, jlvv may receive information from PAGCOR or other regulatory bodies regarding player status, exclusion orders, or compliance flags.

jlvv uses personal data collected from you for the following purposes:

4.1 Account Management and Service Delivery

To create and maintain your jlvv account, authenticate your identity on login, process your deposits and withdrawals, record your gaming activity, provide access to all sections of the Platform (Casino, Slots, Bingo, Sports Events, Bird Catcher), and respond to support requests. This is the core purpose for which jlvv collects personal data.

4.2 Identity Verification and Age Compliance

To verify that you are at least 21 years of age as required by PAGCOR regulations, and to confirm that your identity matches the payment method registered on your account. Age and identity verification is not optional — it is a legal requirement under Philippine gaming law for all players on the jlvv Platform.

4.3 Anti-Money Laundering (AML) and Financial Crime Prevention

To monitor transactions for suspicious activity, comply with the Anti-Money Laundering Act of 2001 (as amended) and its Implementing Rules, and to report suspicious transactions to the Anti-Money Laundering Council (AMLC) where required by law. This processing is a mandatory legal obligation for all PAGCOR-licensed operators.

4.4 Fraud Detection and Platform Security

To detect and prevent account fraud, identify duplicate accounts, flag suspicious login patterns, and protect the integrity of the jlvv Platform and the player community as a whole. This includes automated monitoring and, where warranted, manual review by jlvv's security team.

4.5 Responsible Gaming Compliance

To apply and enforce player-set limits (deposit limits, loss limits, session time limits), to monitor gaming patterns that may indicate problem gambling behaviour, to apply self-exclusion orders, and to comply with PAGCOR's responsible gaming framework.

4.6 Regulatory Reporting

To prepare and submit mandatory reports to PAGCOR, the AMLC, the National Privacy Commission, and other Philippine regulatory authorities as required by applicable law. jlvv cannot provide gaming services in the Philippines without fulfilling these reporting obligations.

4.7 Service Improvement and Analytics

To analyse aggregated, anonymised usage data for the purposes of improving the jlvv Platform — understanding which games are most frequently accessed, identifying technical issues, and optimising the performance of the Platform for Filipino players across different device types and network conditions.

4.8 Direct Marketing (With Consent)

To send you promotional offers, bonus notifications, and gaming-related updates where you have opted in to receive such communications. Marketing communications are entirely opt-in — see Section 13 for details on how to manage your preferences or withdraw consent.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, jlvv processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfill the contractual relationship established when you register an Account and use jlvv's gaming services — including account management, payments, and game access.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and any other mandatory regulatory requirements.
• Legitimate interests: Processing required for fraud prevention, platform security, and the protection of jlvv's business and other players on the Platform — where these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and any non-essential processing where consent is required under applicable law. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jlvv does not sell, rent, or commercially trade personal data. We share personal data with third parties only in the following limited circumstances:

• Payment service providers: GCash, Maya, BPI, BDO, UnionBank, Metrobank, and other payment processors — only the data required to complete a deposit or withdrawal transaction.
• KYC and identity verification providers: Third-party identity verification services used to confirm your identity and age for PAGCOR compliance purposes. These providers operate under strict data processing agreements with jlvv.
• Game content providers: Where live casino games or slot games are delivered by third-party studios, minimal technical data (such as session tokens and game round IDs) may be shared with those providers to operate the game. Personal identity data is not shared with game providers.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, and other Philippine government agencies as required by law. jlvv has no discretion to withhold data from regulatory bodies acting under lawful authority.
• Law enforcement: Where jlvv receives a valid court order, warrant, or lawful demand from a Philippine law enforcement authority.
• Professional advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and engaged solely to support jlvv's regulatory compliance.

jlvv primarily processes and stores personal data within the Philippines. Where data is transferred to or processed by infrastructure or service providers located outside the Philippines — for example, cloud hosting or third-party KYC platforms with operations in other jurisdictions — jlvv ensures that such transfers are made only to countries or recipients that provide an adequate level of data protection, or are governed by contractual safeguards consistent with the requirements of the Data Privacy Act and the National Privacy Commission's guidelines on cross-border data transfers.

jlvv will not transfer personal data to jurisdictions that do not provide adequate protections without your explicit consent, unless the transfer is required by Philippine law or court order.

jlvv retains personal data for as long as is necessary to fulfill the purposes for which it was collected, and in compliance with applicable Philippine legal retention obligations. The following general retention periods apply:

Following the expiry of applicable retention periods, jlvv will securely delete or anonymise personal data such that it can no longer be associated with an identified or identifiable individual. Where complete deletion is not technically feasible due to system backup architecture, jlvv will isolate the data from further processing pending scheduled deletion cycles.

jlvv implements a multi-layered information security programme designed to protect personal data against unauthorised access, disclosure, alteration, or destruction. Key security measures include:

• Encryption in transit: All data transmitted between your device and the jlvv Platform is protected by TLS 1.2 or higher (256-bit SSL encryption), preventing interception by third parties.
• Encryption at rest: Sensitive personal data stored in jlvv's systems is encrypted using AES-256 encryption. Password data is stored only as a salted cryptographic hash — plain-text passwords are never stored.
• Access controls: Access to systems holding personal data is restricted to authorised jlvv personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication for all administrative access.
• OTP authentication: Account login and high-value transactions are secured by One-Time Password verification tied to your registered Philippine mobile number, preventing unauthorised access even if login credentials are compromised.
• Intrusion detection: jlvv operates automated systems to detect unusual access patterns, brute-force attempts, and other security anomalies, with alerts triggering immediate investigation.
• Security audits: jlvv's information security posture is subject to periodic internal and external review in accordance with its PAGCOR licensing obligations.

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by jlvv. These are substantive legal rights, not courtesy options — jlvv is obligated to honour them.

To exercise any of the above rights, submit a written request to jlvv's Data Protection Officer using the contact details in Section 15. jlvv will respond within the timeframes prescribed by the Data Privacy Act and will not charge a fee for reasonable requests.

The jlvv Platform uses cookies and similar tracking technologies to operate core platform functions, maintain your session after login, and collect anonymised usage analytics. The categories of cookies used are:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication tokens, security cookies, and load balancing cookies. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language, game lobby layout, and notification settings. Disabling these may affect your experience but will not prevent you from using the Platform.
• Analytics cookies: Collect anonymised, aggregated data on how players use the Platform — which sections are most visited, session lengths, and error events. This data is used to improve Platform performance and is not linked to individual identities.

jlvv does not use third-party advertising cookies, cross-site tracking cookies, or any cookie technology that profiles you for external advertising purposes. You can manage your browser cookie settings at any time — however, disabling strictly necessary cookies will prevent you from logging in to your jlvv account.

Age verification is conducted as part of the account registration and KYC process for all players on the jlvv Platform. Where jlvv discovers or is notified that personal data has been collected from an individual under 21 years of age, jlvv will immediately close the account, delete the data to the extent permitted by applicable legal obligations, and report the matter to PAGCOR if required.

If you are a parent or guardian and believe that a minor under your care has registered on jlvv, please contact jlvv support immediately via Live Chat or by emailing the DPO at the address provided in Section 15.

jlvv may send promotional and informational communications — including bonus offers, new game announcements, and platform updates — to players who have opted in to receive such communications during account registration or subsequently through their account notification settings.

Marketing messages are sent only to players who have expressly opted in and only through the contact channel they have specified (SMS to registered Philippine mobile number or, where provided, email). Marketing communications will always clearly identify jlvv as the sender and will include an unsubscribe or opt-out mechanism.

You may withdraw consent for marketing communications at any time by updating your notification preferences in your jlvv Account settings, or by contacting jlvv support via Live Chat. Withdrawal of marketing consent does not affect your ability to use jlvv's gaming services. Opt-out requests will be processed within five (5) business days.

jlvv reserves the right to update this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, or the way the jlvv Platform operates. The effective date at the top of this page will be updated whenever the Policy is revised.

For material changes — changes that meaningfully affect how jlvv processes your personal data or that reduce your privacy rights — jlvv will provide direct notification to affected players via in-platform notification or SMS to the registered Philippine mobile number, at least fourteen (14) days prior to the change taking effect where practicable.

Continued use of the jlvv Platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the updated terms. If you do not accept material changes to this Policy, you may close your account and request deletion of your personal data in accordance with Section 10.

For any data privacy enquiry, request to exercise a data subject right, or complaint related to the processing of your personal data by jlvv, please contact the jlvv Data Protection Officer using the details below. jlvv will acknowledge your request within five (5) business days and provide a substantive response within the timeframes required by the Data Privacy Act.

If your complaint cannot be resolved through direct engagement with jlvv, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for enforcing the Data Privacy Act and can be reached through its official channels.