jlwafa Privacy Policy – How We Handle Your Personal Data

jlwafa is an online casino and sports betting platform operating at jlwafa.best, built primarily for players based in the Philippines. When this Privacy Policy refers to "jlwafa", "we", "us", or "our", it means the legal entity that operates the jlwafa platform.

This Privacy Policy applies to all personal data collected through the jlwafa website, mobile browser experience, customer support channels, and any promotional or loyalty programme operated under the jlwafa brand. It governs how we handle your personal information from the moment you visit jlwafa for the first time, through the registration process, during your time as an active player, and after your account is closed.

This policy should be read alongside our Terms and Conditions and Responsible Gaming page, both of which contain additional provisions relevant to how jlwafa handles player accounts and personal data in specific contexts.

jlwafa collects only the personal data that is necessary for the operation of the platform, verification of player identity, and compliance with applicable Philippine and international regulations. The categories of data we may collect include:

We do not collect sensitive personal data such as biometric information, religious beliefs, or political opinions unless legally required to do so by a regulatory authority.

jlwafa collects personal data through several channels, all of which are under our operational control:

• Direct input: Information you provide when you register an account, update your profile, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automated collection: Technical and usage data collected automatically when you access or interact with the jlwafa platform, including via cookies and server logs.
• Third-party verification: Identity verification services that jlwafa engages to confirm the accuracy of documents you submit during the KYC process.
• Payment processors: Transaction reference data provided by GCash, Maya, BDO, BPI, UnionBank, Visa, Mastercard, and other payment providers when processing your deposits and withdrawals.
• Regulatory sources: Information received from gaming authorities or law enforcement agencies in the context of compliance obligations, fraud investigations, or legal proceedings.

jlwafa does not purchase personal data lists from third-party data brokers or marketing aggregators.

Every piece of personal data jlwafa holds is used for a specific, documented purpose. Here are the primary reasons we process your data:

• Account management: To create, maintain, and operate your jlwafa player account, including login authentication and profile management.
• Identity verification (KYC): To confirm that you are who you say you are, that you meet the minimum age requirement of 18 years, and that you are eligible to use the platform under applicable law.
• Payment processing: To process deposits to and withdrawals from your jlwafa balance, and to reconcile transaction records.
• Anti-fraud and anti-money-laundering: To monitor for and investigate suspicious transactions, account patterns, or behaviours that may indicate fraud, collusion, or money laundering activity.
• Customer support: To respond to your enquiries, resolve disputes, investigate complaints, and communicate relevant account information.
• Responsible gaming: To monitor gaming activity and apply responsible gaming tools such as deposit limits and self-exclusion, in line with our obligations and your own preferences.
• Platform improvement: To analyse aggregated usage data and identify areas where the jlwafa platform can be made faster, more reliable, or more useful for Filipino players.
• Marketing communications: To send you relevant promotions and offers — but only if you have explicitly opted in to receive them. You can withdraw this consent at any time.
• Legal and regulatory compliance: To fulfil our obligations under Philippine law, including the Data Privacy Act of 2012, anti-money-laundering regulations, and any lawful requests from regulatory or law enforcement authorities.

Under Philippine data protection law (Republic Act No. 10173), jlwafa must have a lawful basis for processing personal data. The bases we rely on are as follows:

• Contractual necessity: Processing required to fulfil our obligations under the jlwafa Terms and Conditions — such as operating your account, processing payments, and providing access to games.
• Legal obligation: Processing required to comply with Philippine laws and regulations, including KYC/AML requirements and gaming authority rules.
• Legitimate interests: Processing necessary for jlwafa's legitimate business interests, including fraud prevention, platform security, and product improvement, provided these interests do not override your fundamental rights.
• Consent: Processing based on your specific, informed consent — most relevantly for marketing communications. Consent can be withdrawn at any time without affecting the lawfulness of prior processing.

jlwafa does not sell, rent, or trade your personal data with third parties for their own marketing or commercial purposes. We may share your personal data only in the following limited circumstances:

• Payment service providers: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, Visa, Mastercard, InstaPay, and PESONet operators, to facilitate deposits and withdrawals. These providers receive only the data necessary to process the specific transaction.
• Identity verification services: Third-party KYC providers engaged by jlwafa to verify identity documents and confirm player eligibility. These providers are contractually bound to process data only for verification purposes.
• Game software providers: JILI and other game providers may receive anonymised session data for technical purposes such as RNG audit compliance and game performance monitoring. No personally identifiable information is shared for these purposes.
• IT infrastructure and cloud service providers: Companies that provide secure data hosting, backup, and cybersecurity services to jlwafa under strict data processing agreements.
• Regulatory and law enforcement authorities: Where jlwafa is legally required or permitted to disclose personal data to a government agency, court, or regulatory body — for example, in response to a lawful order or as part of an AML investigation.
• Professional advisers: Lawyers, auditors, and compliance consultants engaged by jlwafa who may need to access certain player data in the course of their professional services, under obligations of professional secrecy.

All third parties who receive personal data from jlwafa are required to implement appropriate data security measures and are prohibited from using jlwafa player data for any purpose beyond what is specified in their agreement with jlwafa.

jlwafa retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specific retention periods are as follows:

• Active account data: Retained for the duration of your jlwafa account plus a minimum of five years after account closure, as required for AML compliance and dispute resolution purposes.
• Identity verification documents: Retained for a minimum of five years from the date of verification, in line with Philippine AML regulations.
• Transaction records: Retained for a minimum of five years from the date of each transaction.
• Support communications: Retained for three years from the date of the interaction, unless a longer retention period is required for an ongoing dispute or regulatory inquiry.
• Technical and usage logs: Retained for up to 12 months and then anonymised or deleted, unless retained longer for security investigation purposes.
• Marketing consent records: Retained for the duration of your account plus three years after consent is withdrawn, as evidence of our compliance obligations.

When personal data is no longer required, jlwafa securely deletes or anonymises it in a manner that prevents reconstruction of personally identifiable information.

jlwafa uses cookies and similar tracking technologies to operate the platform, maintain your session while logged in, remember your preferences, and analyse how the site is used. Here is a breakdown of the types of cookies we deploy:

• Essential cookies: Required for the jlwafa platform to function. These include session cookies that keep you logged in between pages and security tokens that protect against cross-site request forgery. These cannot be disabled without preventing you from using the platform.
• Functional cookies: Store your preferences such as language settings, display options, and game lobby filters so jlwafa can provide a more personalised experience.
• Analytics cookies: Used by jlwafa to understand how players navigate the platform — which pages are most visited, where people tend to drop off, and how features perform. This data is aggregated and does not identify individual players.
• Marketing cookies: Only deployed if you have opted in to marketing communications. These allow jlwafa to measure the effectiveness of promotional campaigns and avoid showing you the same offers repeatedly.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to log in and use core jlwafa features. Disabling analytics or marketing cookies will not affect gameplay.

jlwafa implements technical and organisational security measures proportionate to the sensitivity of the personal data we hold. Key security practices include:

• TLS encryption: All data transmitted between your device and jlwafa servers is encrypted using current industry-standard TLS protocols.
• Encryption at rest: Personal and financial data stored on jlwafa infrastructure is encrypted at rest.
• Access controls: Access to personal data is restricted to jlwafa staff on a strict need-to-know basis, with role-based permissions and audit logging.
• Two-factor authentication: Available to all jlwafa players for account login, and required internally for staff with access to sensitive systems.
• Regular security audits: jlwafa's systems are subject to regular vulnerability assessments and penetration testing by qualified security professionals.
• Incident response: jlwafa has a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the relevant Philippine authorities in accordance with legal requirements.

Under the Philippine Data Privacy Act of 2012 and related regulations, you have the following rights with respect to your personal data held by jlwafa. You can exercise any of these rights by contacting our Data Protection Officer at the details in Section 13.

jlwafa will respond to rights requests within 15 business days of receipt. In complex cases we may extend this period by a further 15 business days, with notification to you of the extension and the reason for it.

jlwafa is strictly an adults-only platform. The minimum age for registration and gameplay is 18 years. We do not knowingly collect or process personal data from individuals under 18 years of age.

If jlwafa becomes aware that a registered account belongs to a minor, the account will be suspended immediately, any balance returned, and the personal data of the minor deleted as soon as legally permissible.

If you are a parent or guardian and believe your child has registered on jlwafa, please contact our support team immediately at support@jlwafa.best. We will investigate and act promptly.

jlwafa may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform operations. When material changes are made, jlwafa will notify registered players via email or an in-platform notification before the updated policy takes effect.

The revised Privacy Policy will be published on this page with an updated "Last updated" date. Continued use of jlwafa after the effective date of any update constitutes your acknowledgement of the revised policy.

We encourage you to review this page periodically. If you have concerns about any change to this policy, you can contact our Data Protection Officer for clarification before the update takes effect.

If you have questions about this Privacy Policy, want to exercise your data rights, or wish to raise a concern about how jlwafa handles your personal information, please contact us through the following channels:

• Email (General & DPO): support@jlwafa.best
• Live Chat: Available 24/7 from the jlwafa platform when you are logged in.

When contacting us about a data rights request, please include your registered email address or mobile number so we can locate your account records efficiently. We may request additional verification to confirm your identity before processing a rights request.

If you are not satisfied with jlwafa's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC), which is the independent authority responsible for enforcing the Data Privacy Act of 2012.