About This Privacy Policy
This Privacy Policy describes how 12JL (operating at https://12jl.best, hereinafter referred to as "12JL," "we," "us," or "our") collects, uses, stores, and protects the personal data of players and visitors who use our platform.
12JL is a PAGCOR-licensed online gaming operator based in the Philippines. As a licensed operator, we are subject to the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as PAGCOR's data governance requirements.
By registering an account on the 12JL platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This policy applies to all 12JL services, including casino games, live dealer tables, sports betting, and all associated customer support interactions.
Plain Language Commitment: 12JL believes Filipino players deserve to understand exactly how their data is handled. This Privacy Policy is written in plain, accessible English – not legal boilerplate designed to confuse. If anything isn't clear, our Data Protection Officer is available to explain it.
Personal Data We Collect
12JL collects only the personal data that is necessary to operate your account, comply with our PAGCOR license obligations, and provide you with a safe gaming experience. We do not collect data we don't need.
Data You Provide Directly
When you register a 12JL account or interact with our services, you may provide:
| Category | Examples | Why Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality | Age verification, KYC compliance, account security |
| Contact Data | Mobile number, email address, registered address | Account communication, OTP delivery, support |
| Financial Data | GCash/Maya number, bank account details, card last 4 digits | Deposit & withdrawal processing, AML compliance |
| Identity Verification | Government-issued ID image, selfie with ID | KYC for large withdrawals, PAGCOR requirement |
| Account Credentials | Username, encrypted password hash | Account access and security |
Data Collected Automatically
When you use the 12JL platform, we automatically collect certain technical and behavioural data:
- Device & Technical Data: IP address, device type, operating system, browser type and version
- Usage Data: Pages visited, games played, session duration, bet history, deposit and withdrawal records
- Location Data: General geographic location derived from IP address (used for regulatory compliance and geo-restriction enforcement)
- Cookie Data: Session identifiers, preference cookies, analytics data (see Section 8 for full cookie details)
Note on Financial Data: 12JL never stores full card numbers, CVV codes, or GCash PINs. Payment processing is handled by certified payment processors. 12JL only retains the last 4 digits of card numbers and the first/last digits of GCash numbers for transaction reference purposes.
How 12JL Uses Your Personal Data
Every use of your personal data at 12JL serves a specific, legitimate purpose. We do not process data for purposes beyond those disclosed in this policy.
- Account Management: Creating and maintaining your 12JL account, verifying your identity, enabling login and account recovery
- Service Delivery: Processing deposits and withdrawals, delivering game access, managing your wallet balance and transaction history
- Regulatory Compliance: Fulfilling PAGCOR reporting obligations, age verification, anti-money laundering monitoring, responsible gaming compliance
- Security: Detecting and preventing fraud, unauthorised access, account takeover attempts, and prohibited activities
- Customer Support: Responding to your queries, resolving disputes, and improving our support processes
- Product Improvement: Analysing anonymised usage patterns to improve platform performance, game selection, and user experience
- Marketing Communications: Sending promotional offers, bonus notifications, and news – only to players who have consented (see Section 10)
- Legal Obligations: Responding to lawful requests from PAGCOR, AMLC, and other Philippine government authorities
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, 12JL must have a lawful basis for processing each category of personal data. Our legal bases are as follows:
- Contractual Necessity: Processing required to perform our obligations to you under the 12JL Terms and Conditions – including account creation, payment processing, and game delivery
- Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine law
- Legitimate Interests: Processing for fraud prevention, platform security, and analytics that does not override your privacy rights
- Consent: Marketing communications and non-essential cookies, where we rely on your explicit opt-in consent which you may withdraw at any time
Data Sharing and Disclosure
12JL does not sell, rent, or trade your personal data to any third party for commercial purposes. Full stop. Your data is shared only in the limited circumstances described below, and always with appropriate safeguards in place.
Service Providers
12JL works with a limited number of carefully vetted third-party service providers who process data on our behalf under strict data processing agreements. These include:
- Payment processors (for GCash, Maya, and bank transfer services)
- Identity verification providers (for KYC processing)
- Cloud infrastructure providers (for secure data storage)
- Game software providers (who receive anonymised session data for game delivery)
- Customer support platform providers
All service providers are contractually bound to use your data only for the purposes 12JL specifies and to maintain data security standards consistent with RA 10173.
Regulatory Authorities
12JL may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other lawful Philippine authorities when required to do so by law, court order, or PAGCOR directive. We will notify you of such disclosures where legally permitted.
What 12JL will never do: Sell your data to advertisers. Share your data with other gambling operators. Pass your personal details to anyone without a legal basis. Provide your data to foreign entities not bound by equivalent data protection obligations.
Data Security at 12JL
12JL takes data security seriously and has implemented layered technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure.
Technical Measures
- 256-bit TLS/SSL encryption on all data transmitted between your device and 12JL servers
- AES-256 encryption for sensitive data stored at rest
- Bcrypt hashing for all stored passwords – meaning 12JL staff cannot see your password
- Multi-factor authentication (2FA) available for all player accounts
- Web Application Firewall (WAF) and DDoS protection
- Automated intrusion detection and real-time monitoring
- Regular third-party penetration testing
Organisational Measures
- Role-based access controls – 12JL staff can only access data they need for their specific function
- All staff with data access are subject to confidentiality obligations and regular privacy training
- A dedicated Data Protection Officer (DPO) oversees all privacy compliance
- Data breach response plan with NPC notification procedures in place
In the unlikely event of a data breach affecting your personal data, 12JL will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by RA 10173.
How Long We Keep Your Data
12JL retains personal data only for as long as necessary for the purposes it was collected, or as required by law. The following retention periods apply:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | PAGCOR licensing requirement |
| Transaction records (deposits, withdrawals, bets) | 10 years from transaction date | AMLA / Philippine tax law |
| KYC identity documents | 5 years after account closure | PAGCOR / AMLA obligation |
| Customer support records | 3 years from last interaction | Dispute resolution & quality |
| Marketing preferences | Until you unsubscribe + 1 year | Consent withdrawal record |
| Technical / log data | 90 days rolling | Security monitoring |
When data is no longer required, it is securely deleted or anonymised in accordance with our data disposal procedures.
Cookies and Tracking Technologies
12JL uses cookies and similar technologies to make the platform work, keep you logged in, understand how you use the site, and – with your consent – deliver relevant promotional communications. Here is a breakdown of the types of cookies we use:
You can manage your cookie preferences through the Cookie Settings option available in your 12JL account or in your browser settings. Disabling non-essential cookies will not affect your ability to play any 12JL game or make transactions.
Your Data Rights as a Filipino Player
Under the Philippine Data Privacy Act of 2012, every registered 12JL player has the following rights regarding their personal data. These rights are real, enforceable, and 12JL takes them seriously.
Request a copy of all personal data 12JL holds about you. We will provide this within 15 business days of your verified request.
Request correction of any inaccurate or incomplete personal data. Update basic account details directly in your account settings, or contact support for help.
Request deletion of your personal data once it is no longer necessary for the purpose it was collected. Note: some data must be retained for legal compliance (see Section 7).
Object to processing of your data for direct marketing purposes at any time. Your objection will be actioned immediately without affecting your ability to play at 12JL.
Request that 12JL suspend processing of your data pending investigation of a complaint or while a rectification request is being evaluated.
Request a copy of your personal data in a structured, machine-readable format for transfer to another controller. Available on request via our Data Protection Officer.
To exercise any of these rights, contact our Data Protection Officer at dpo@12jl.best or through the support chat on the 12JL platform. All requests are acknowledged within 48 hours and actioned within 15 business days.
Marketing Communications
12JL will only send you promotional emails, SMS notifications, and push notifications if you have explicitly opted in to receive them. Opt-in consent is captured separately during registration and can be managed at any time in your account settings.
Types of marketing communications 12JL may send to opted-in players include: new game announcements, bonus and promotion offers, reload bonus notifications, jackpot alerts, and event-specific promotions relevant to Filipino players.
Unsubscribing: You can opt out of all marketing communications at any time by clicking the "Unsubscribe" link in any email, replying STOP to any SMS, disabling push notifications in your browser or device settings, or by contacting support. Opting out does not affect service communications like transaction confirmations or security alerts.
12JL does not send marketing communications to players who are on self-exclusion or cooling-off periods. This is a firm policy that is enforced automatically by our system.
Children's Privacy
12JL's services are strictly for adults aged 21 and above, in accordance with PAGCOR regulations and Philippine gaming law. We do not knowingly collect, process, or retain personal data of individuals under 21 years of age.
If 12JL becomes aware that a player who has registered is under 21, or that personal data of a minor has been submitted, we will close the account immediately, void all balances, and delete the associated data in accordance with our data disposal procedures.
If you believe a minor may have registered a 12JL account, please contact us immediately at support@12jl.best so we can investigate and take appropriate action.
Changes to This Privacy Policy
12JL may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements, or regulatory guidance. When material changes are made, we will notify registered players via email and/or an in-platform notification at least 7 days before the changes take effect.
The current version of this Privacy Policy is always available at https://12jl.best/privacy-policy. The effective date at the top of the page indicates when the current version took effect. Continued use of the 12JL platform after that date constitutes acceptance of the updated policy.
Contact Our Data Protection Officer
12JL has appointed a dedicated Data Protection Officer (DPO) to oversee privacy compliance and handle player data rights requests. The DPO operates independently and has authority to investigate any data-related concerns.
- Email: dpo@12jl.best
- General Support: support@12jl.best
- Live Chat: Available 24/7 via the chat icon on the 12JL platform
- Response Time: Data rights requests acknowledged within 48 hours, actioned within 15 business days
If you are unsatisfied with how 12JL handles your data rights request, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body that enforces RA 10173 and protects Filipino data subjects' rights.