Privacy Policy — 2026jl1

2026jl1 is the data controller in respect of all personal data collected and processed through the 2026jl1.org platform. As data controller, 2026jl1 determines the purposes for which, and the manner in which, your personal data is processed.

2026jl1 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). The platform is directed exclusively at players who are physically located in the Philippines and who are at least twenty-one (21) years of age, as required by PAGCOR regulations.

This Privacy Policy applies to all personal data collected from the following categories of individuals in connection with the 2026jl1 platform:

• Registered account holders of 2026jl1;
• Visitors to the 2026jl1.org website who have not yet registered;
• Individuals who contact 2026jl1 customer support;
• Individuals who participate in 2026jl1 promotional activities.

This Policy does not apply to the data practices of third-party game studio partners, payment service providers, or other external services that may be accessible through or in connection with the 2026jl1 platform. Those parties operate under their own privacy policies, which we encourage you to review independently.

2026jl1 collects the following categories of personal data, depending on how you use the platform:

2026jl1 collects personal data through the following methods:

• Direct Collection — information you provide when registering your account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated Technical Collection — information collected automatically when you access the 2026jl1 platform, including IP addresses, device identifiers, browser data, session cookies, and usage analytics;
• Payment Processors — transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment service providers when you initiate deposits or withdrawals;
• KYC Verification Partners — identity verification data returned by third-party KYC providers engaged by 2026jl1 to perform document verification and identity checks in compliance with AMLA requirements;
• Regulatory Sources — information received from PAGCOR or other Philippine regulatory authorities in the course of compliance activities.

2026jl1 processes your personal data only for defined, specified, and legitimate purposes. The following table describes our primary processing activities, the personal data involved, and the legal basis for processing under the Data Privacy Act of 2012:

Where processing is based on your consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw marketing consent, update your preferences in Account Settings or contact support.

2026jl1 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly as necessary and subject to appropriate data protection safeguards:

• Payment Service Providers — GCash (G-Xchange Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other PSPs, for the processing of deposits and withdrawals. These providers receive only the data necessary to execute and verify your transactions.
• KYC and Identity Verification Providers — third-party identity verification companies engaged to conduct document authentication and facial verification as part of the KYC process required by PAGCOR and AMLA.
• Game Studio Partners — certified game studios (including JILI, PG Soft, Pragmatic Play, and others) receive limited session and account data necessary to deliver game services. Studios do not receive full identity data.
• Regulatory Authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, as required by law, court order, or regulatory directive.
• IT Infrastructure and Security Providers — cloud hosting, cybersecurity, and analytics technology providers engaged by 2026jl1 to operate and secure the platform, subject to strict data processing agreements.
• Professional Advisers — legal counsel, auditors, and compliance consultants, under confidentiality obligations, where necessary for the operation of the business.

Some of 2026jl1's technology and service partners — including cloud infrastructure providers and certain game studio partners — may process data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, 2026jl1 ensures that such transfers comply with Section 21 of the Data Privacy Act of 2012 and applicable National Privacy Commission rules on cross-border data flows. This includes ensuring that the receiving party provides at least the same level of data protection as that required under Philippine law, through contractual data protection clauses, binding corporate rules, or equivalent mechanisms.

Game studio partners who receive limited session data for the purpose of delivering game services operate under data processing agreements that restrict their use of that data to game delivery purposes only and prohibit further disclosure to third parties.

The 2026jl1 platform uses cookies and similar tracking technologies to enable the platform to function correctly, maintain your login session, and collect usage analytics that help us improve the service.

The following types of cookies may be used on the 2026jl1 platform:

• Strictly Necessary Cookies — required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies — remember your preferences such as language settings, game lobby display preferences, and responsible gaming tool configurations.
• Analytics Cookies — collect anonymised usage data to help us understand how players navigate the platform, which games are most popular, and where usability can be improved. This data does not identify individual players.
• Security Cookies — used to detect and prevent fraudulent activity, including bot detection, multi-accounting checks, and suspicious login pattern identification.

2026jl1 does not use advertising or marketing tracking cookies. Third-party social media tracking pixels are not deployed on the 2026jl1 platform. You may manage or disable non-essential cookies through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.

2026jl1 implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, disclosure, or destruction:

• SSL/TLS Encryption — all data transmitted between your device and the 2026jl1 platform is encrypted using current industry-standard SSL/TLS protocols;
• Password Hashing — account passwords are stored using strong one-way cryptographic hashing algorithms; plain-text passwords are never stored by 2026jl1;
• Two-Factor Authentication (2FA) — SMS-based 2FA is available to all account holders and is strongly recommended to provide an additional layer of login security;
• Access Controls — access to player personal data within 2026jl1's systems is restricted to authorised personnel on a need-to-know basis, with access logs maintained and reviewed;
• Fraud and Anomaly Detection — automated systems monitor transactions and login activity for anomalous patterns that may indicate fraud, account takeover, or money laundering;
• Infrastructure Security — the platform operates on secured cloud infrastructure with regular security assessments, penetration testing, and vulnerability management.

While 2026jl1 takes all reasonable technical and organisational precautions to protect your personal data, no online platform can guarantee absolute security. You also play an important role in protecting your own data: keep your 2026jl1 login credentials confidential, enable 2FA, and notify support immediately if you suspect unauthorised access to your account.

2026jl1 retains personal data only for as long as is necessary for the purposes for which it was collected, including to satisfy applicable legal, regulatory, tax, and accounting requirements:

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Where data must be retained for legal or regulatory reasons beyond the period you would otherwise expect, 2026jl1 will restrict access to that data to the extent possible during the extended retention period.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights in respect of your personal data held by 2026jl1:

2026jl1 does not knowingly collect or process personal data from persons under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person under 21 years of age, we will promptly delete that data, close the associated account, and return any deposits to the payment source where possible. This will be reported to PAGCOR as required by our licensing obligations.

If you believe a minor has registered an account on 2026jl1, please notify us immediately at [email protected].

The 2026jl1 platform may integrate with or reference third-party services, including game studio platforms, payment gateways, and customer support tools. These third parties are independent data controllers or data processors in respect of their own systems and are subject to their own privacy policies.

2026jl1 is not responsible for the privacy practices of third-party services. We recommend that you review the privacy policies of any third-party service you interact with in connection with your use of the 2026jl1 platform.

All third-party service providers engaged by 2026jl1 who process personal data on our behalf are required to enter into data processing agreements that bind them to process data only in accordance with our instructions and to implement appropriate technical and organisational security measures.

In the event of a personal data breach that is reasonably likely to give rise to a real risk of serious harm to affected data subjects, 2026jl1 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03 on personal data breach management.

Where a breach poses a high risk to your rights and freedoms as an individual, 2026jl1 will also notify affected players directly, via the registered email address on your account, without undue delay. The notification will describe the nature of the breach, the data involved, the likely consequences, and the measures taken or proposed to address the breach.

2026jl1 maintains a formal data breach response plan that is tested and reviewed annually. In the event you believe your 2026jl1 account has been compromised, contact support immediately via live chat or at [email protected].

2026jl1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidance, or our own data practices. Material changes will be communicated to account holders via email and by prominent notice on the 2026jl1 platform no less than seven (7) days prior to the effective date, except where immediate amendment is required by regulatory directive.

The "Effective Date" at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of the 2026jl1 platform following the effective date of any amendment constitutes your acceptance of the updated Policy.

2026jl1 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012, this Privacy Policy, and 2026jl1's internal data protection practices. If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a privacy concern you would like to raise, please contact us:

If you are unsatisfied with our response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph. The NPC is the independent regulatory authority responsible for administering and enforcing the Data Privacy Act of 2012 in the Philippines.