Data Privacy
48jl processes personal data in full compliance with Republic Act 10173 (Data Privacy Act of 2012) and the implementing rules issued by the National Privacy Commission of the Philippines.
48jl does not sell, rent, or otherwise transfer your personal data to third-party advertisers, data brokers, or marketing networks. Your data is used solely to operate your account and comply with regulatory obligations.
All data transmitted between your device and the 48jl platform is protected by industry-standard SSL/TLS encryption. Account data, financial records, and personal information are stored in secured environments with access controls.
As a data subject under Philippine law, you have the right to access, correct, erase, object to, and port your personal data. 48jl maintains a clear process for exercising these rights without undue delay.
Certain categories of player data are retained for periods mandated by PAGCOR licensing requirements and Philippine AML law. Retention schedules are proportionate to the regulatory purpose and data is deleted when retention periods expire.
In the event of a personal data breach that poses risk to your rights and freedoms, 48jl is obligated under RA 10173 to notify the National Privacy Commission and affected individuals within prescribed timeframes.
This Privacy Policy ("Policy") sets out how 48jl ("48jl," "we," "us," or "our"), the operator of the online gaming platform at 48jl.club, collects, uses, discloses, stores, and protects personal data relating to registered players, prospective users, and visitors to the 48jl website ("you" or "data subject").
48jl operates under a license issued by the Philippine Amusement and Gaming Corporation ("PAGCOR") and is subject to the data privacy obligations of the Data Privacy Act of 2012 (Republic Act 10173, "DPA"), its Implementing Rules and Regulations, and any applicable issuances of the National Privacy Commission ("NPC") of the Philippines.
This Policy is incorporated into and forms part of the 48jl Terms and Conditions. Defined terms used in this Policy that are not separately defined herein carry the meanings assigned to them in the 48jl Terms and Conditions. In the event of any conflict between this Policy and the Terms and Conditions, this Policy shall govern in respect of data privacy matters.
For the purposes of the Data Privacy Act of 2012 and applicable NPC regulations, 48jl is the personal information controller ("PIC") in respect of the personal data processed through the 48jl platform. As PIC, 48jl determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.
48jl has designated a Data Protection Officer ("DPO") as required under the DPA Implementing Rules and Regulations. Inquiries, requests, and complaints relating to personal data processing may be directed to the 48jl DPO via the contact details set out in Section 14 of this Policy.
48jl collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the platform, and from third-party sources such as payment processors and identity verification providers. The categories of personal data we collect are described below.
Sensitive personal information: Government ID numbers and biometric data (where collected for liveness verification) are classified as sensitive personal information under the DPA. 48jl processes these categories only to the extent strictly required for identity verification and PAGCOR KYC compliance, and applies additional access controls to such data.
48jl processes your personal data for the following purposes. The table below maps each processing purpose to the data categories involved.
| Processing Purpose | Data Categories Involved |
|---|---|
| Account registration and identity verification (KYC) | Identity data, government ID, biometric data (where applicable) |
| Age verification (21+ compliance per PAGCOR and Philippine law) | Date of birth, government ID |
| Processing deposits, withdrawals, and wallet transactions | Financial data, transaction history, payment method details |
| Anti-money laundering (AML) monitoring and reporting | Financial data, identity data, source of funds, transaction patterns |
| Platform access, login authentication, and session management | Account credentials, device data, IP address, session tokens |
| Game provision, bet settlement, and game history recording | Gaming activity data, transaction data |
| Responsible gaming monitoring and tool administration | Gaming activity data, deposit history, responsible gaming settings |
| Customer support and dispute resolution | Identity data, transaction data, communications data, gaming data |
| Fraud detection and platform security | Device data, IP address, transaction patterns, session logs |
| Regulatory reporting to PAGCOR and other authorities | Identity data, financial data, gaming data, AML reports |
| Platform performance analytics and improvement | Technical data, anonymised or aggregated gaming data |
| Legal compliance and record-keeping obligations | All categories, subject to applicable retention requirements |
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, 48jl relies on the following legal bases for processing personal data:
48jl does not rely on consent as the legal basis for processing that is required to operate your account or comply with legal obligations. Withdrawal of consent will not affect the lawfulness of processing carried out prior to withdrawal, nor will it affect processing carried out on other legal bases.
48jl does not sell, rent, or trade your personal data to third parties. Disclosure of your personal data is limited to the following categories of recipients, each of whom processes data only as necessary for the stated purpose and subject to appropriate data protection obligations:
48jl engages third-party service providers who process personal data on our behalf as personal information processors ("PIPs") under contracts that impose data protection obligations consistent with the DPA. These include:
48jl is legally required to disclose personal data to the following authorities where applicable law mandates such disclosure:
In the event of a merger, acquisition, reorganisation, or sale of all or substantially all of the assets of 48jl, personal data held by 48jl may be transferred to the successor entity, subject to the successor assuming the data protection obligations set out in this Policy and applicable law.
No advertising data sales. 48jl does not share your personal data with advertising networks, social media platforms, or data brokers for commercial targeting purposes. Your gaming and financial data are not used to profile you for third-party advertising.
48jl retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention obligations. The table below sets out the principal retention periods applicable to each data category.
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| Account registration and KYC identity data | Duration of account + 5 years post-closure | PAGCOR licensing requirement; RA 9160 AML obligations |
| Financial transaction records | Duration of account + 5 years post-closure | RA 9160 AML retention mandate; PAGCOR audit requirements |
| Game session and betting history | Duration of account + 3 years post-closure | PAGCOR licensing; dispute resolution requirements |
| Customer support communications | 3 years from last communication | Contractual and dispute resolution purposes |
| Technical and device logs | 12 months from creation | Fraud prevention; platform security |
| Self-exclusion records | Duration of exclusion + 5 years | PAGCOR responsible gaming compliance |
| Consent records (where applicable) | Duration of processing + 3 years | DPA accountability obligations |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where data subject to a mandatory regulatory retention period would otherwise be eligible for deletion, the regulatory retention period takes precedence.
48jl implements technical, organisational, and physical security measures proportionate to the risks to your personal data, taking into account the nature, scope, context, and purposes of processing and the likelihood and severity of potential harm to data subjects.
No security system is impenetrable. While 48jl applies robust security measures, no internet-connected platform can guarantee absolute security. Players are strongly encouraged to use unique, strong passwords for their 48jl account and to enable OTP verification. If you suspect your account has been compromised, contact 48jl support immediately.
The 48jl platform uses cookies and similar tracking technologies (collectively, "cookies") to operate the platform, remember your session, and improve your user experience. A cookie is a small data file placed on your device when you visit a website.
You can manage or delete cookies through your browser settings at any time. Disabling strictly necessary cookies will prevent you from logging in to or using the 48jl platform. Disabling functional or analytics cookies will not affect your ability to play but may impact personalisation features.
48jl does not use third-party advertising cookies or tracking pixels for behavioural advertising purposes. No cookie data from the 48jl platform is shared with advertising networks.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by 48jl. To exercise any of these rights, contact the 48jl Data Protection Officer using the details in Section 14.
You have the right to obtain confirmation that 48jl processes your personal data, and to receive a copy of that data along with information about how it is processed. We will respond to access requests within 15 business days.
You have the right to have inaccurate or incomplete personal data corrected. Changes to core identity data (name, ID number) may require re-verification. Update requests can be submitted through account settings or support.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 48jl's regulatory retention obligations under PAGCOR licensing and AML law.
You have the right to object to processing based on legitimate interests. Where an objection is raised, 48jl will cease processing unless we can demonstrate compelling legitimate grounds that override your interests.
Where processing is based on consent or contractual necessity and carried out by automated means, you have the right to receive your personal data in a structured, commonly used format to transfer to another controller.
You have the right to be informed about personal data processing activities — including the identity of the controller, purposes of processing, data categories, and your rights — which this Policy provides.
The 48jl platform is strictly restricted to individuals who are at least twenty-one (21) years of age, as required by PAGCOR regulations and Philippine gaming law. 48jl does not knowingly collect personal data from individuals under 21.
Age verification is conducted as a mandatory step before any registered account may access real-money gameplay. Age is verified through government-issued Philippine ID documents. If 48jl discovers that personal data has been collected from a person who is under 21, the account will be suspended immediately, all collected data will be reviewed for deletion in accordance with legal obligations, and the matter will be reported to PAGCOR in accordance with licensing requirements.
If you believe a minor has accessed or registered on the 48jl platform using false information, please contact 48jl support immediately so that the account can be reviewed and appropriate action taken.
The 48jl platform primarily processes and stores personal data within the Philippines. However, certain third-party service providers (including cloud infrastructure providers and game software developers) may process personal data outside Philippine territory as part of service delivery.
Where personal data is transferred outside the Philippines, 48jl ensures that such transfers are carried out in compliance with Section 21 of the Data Privacy Act and NPC Circular 16-01 on cross-border data transfers. Safeguards applied include: standard contractual clauses incorporating DPA-compliant data protection obligations; transfer only to jurisdictions with adequate data protection frameworks recognised by the NPC; or on the basis of your consent for specific processing activities.
48jl does not transfer your personal data to AMLC-reportable third parties outside Philippine regulatory jurisdiction except as required by Philippine law and with appropriate safeguards in place.
48jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. The effective date of the current version is displayed in the page header.
Where changes are material — for example, a new purpose of processing, a new category of data collected, or a new type of third-party disclosure — 48jl will provide reasonable advance notice to registered players via email or the registered mobile number on file, or by a prominently displayed notice on the platform.
Your continued use of the 48jl platform after any amendment takes effect constitutes acceptance of the revised Policy. If you do not agree with a material change, you may close your account and request deletion of your data in accordance with Section 10 and applicable retention obligations.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 48jl, please contact our Data Protection Officer:
Email: [email protected] (subject line: "Privacy — [Your Request Type]")
If you are not satisfied with 48jl's response to your data privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent supervisory authority responsible for data privacy oversight in the Philippines and may be contacted through the official NPC website and published complaint channels. 48jl will cooperate fully with any NPC investigation.
Players seeking information about the responsible gaming tools available on the 48jl platform — including deposit limits, self-exclusion, and session controls — are encouraged to visit our Responsible Gaming page or contact support for assistance.
Play with Confidence
PAGCOR-regulated, DPA-compliant, and built for Filipino players. GCash-ready, SSL-encrypted, and transparent about how your data is handled — from first deposit to withdrawal.
21+ Only. Must be 21 years or older to play. Gambling can be addictive — play responsibly. PAGCOR-regulated.