40jl Casino — Privacy Policy

40jl Casino ("40jl," "we," "us," or "our") is the data controller responsible for the personal information collected and processed through the 40jl platform at 40jl.org. As data controller, 40jl determines the purposes and means by which your personal data is processed.

40jl operates within the Philippine online gaming regulatory context administered by the Philippine Amusement and Gaming Corporation (PAGCOR). All personal data processing activities described in this Privacy Policy are conducted in compliance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and applicable National Privacy Commission (NPC) issuances.

40jl collects the following categories of personal data in connection with the provision of our Services. The specific data points collected depend on the nature of your interaction with the platform.

40jl does not collect sensitive personal information (as defined under RA 10173) such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law or explicitly provided by you (for example, in connection with a self-exclusion request that references a medical condition).

40jl collects personal data through the following means:

• Directly from you — when you register a 40jl account, complete KYC verification, make deposits or withdrawal requests, contact our support team, or respond to promotions;
• Automatically — through cookies, device fingerprinting, and server logs when you visit or interact with the 40jl platform, as described in Section 6;
• From payment service providers — GCash, Maya, BPI, BDO, Metrobank, and other payment processors confirm transaction completion and provide limited payment verification data to 40jl;
• From identity verification services — third-party KYC providers used to verify government-issued identification documents during account verification;
• From fraud prevention and compliance services — risk management tools that assess account activity against known fraud and money laundering patterns.

40jl uses your personal data for the following purposes:

4.1 Account Management and Service Delivery

• Creating, maintaining, and securing your 40jl account;
• Processing deposits and withdrawal requests to and from your linked Philippine payment accounts (GCash, Maya, bank accounts);
• Providing access to games, sports betting markets, and other platform features;
• Sending transactional communications including deposit confirmations, withdrawal notifications, and security alerts.

4.2 Regulatory Compliance and Legal Obligations

• Verifying your age (21+ requirement under PAGCOR regulations) and identity during registration and ongoing KYC reviews;
• Complying with anti-money laundering (AML) obligations under the Philippine Anti-Money Laundering Act (AMLA) and its amendments;
• Reporting required transactions and suspicious activity to the Anti-Money Laundering Council (AMLC) where mandated by law;
• Responding to lawful requests from PAGCOR, the National Privacy Commission, and other competent Philippine authorities.

4.3 Fraud Prevention and Platform Security

• Detecting and preventing fraudulent account activity, duplicate registrations, and payment fraud;
• Identifying and investigating potential breaches of the 40jl Terms & Conditions;
• Monitoring gaming patterns to identify potential collusion or bonus abuse.

4.4 Responsible Gaming

• Monitoring gaming activity to identify patterns that may indicate problem gambling and, where appropriate, proactively engaging the player regarding responsible gaming tools;
• Processing self-exclusion requests and enforcing deposit limits and session reminders set by the player.

4.5 Platform Improvement and Analytics

• Analysing aggregated, anonymised usage data to improve platform performance, game recommendations, and the overall user experience for Filipino players;
• Conducting internal reporting and business analysis.

4.6 Marketing Communications (with Consent)

Where you have provided explicit consent, 40jl may send promotional communications including bonus offers, new game announcements, and VIP programme updates via SMS to your registered Philippine mobile number or to your registered email address. You may withdraw this consent at any time as described in Section 13.

Under the Philippine Data Privacy Act, 40jl relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to fulfil our obligations to you under the 40jl Terms & Conditions, including account management and payment processing;
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulatory requirements, AML obligations under AMLA, and tax reporting requirements;
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring — where those interests do not override your fundamental rights;
• Consent: Processing for marketing communications, where we rely on your explicit opt-in consent.

The 40jl platform uses cookies and similar tracking technologies to provide a functional, secure, and personalised experience. By continuing to use the 40jl platform, you consent to the use of cookies as described in this section.

6.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function, including session management, login authentication, and security features. These cannot be disabled without impairing the platform's functionality.
• Functional Cookies: Remember your preferences such as language settings, game view preferences, and lobby filters, so you do not need to reset them each session.
• Analytical Cookies: Used internally by 40jl to understand how players navigate the platform, which features are used most frequently, and where technical issues occur. This data is aggregated and anonymised.
• Security Cookies: Assist in fraud detection and account protection by identifying unusual patterns in session behaviour.

6.2 Managing Cookies

You may manage or restrict cookies through your browser settings. Restricting strictly necessary cookies will impair the functionality of the 40jl platform, including the ability to log in and complete financial transactions. Instructions for managing cookies in commonly used Philippine mobile browsers (Chrome for Android, Safari for iOS) are available through each browser's help documentation.

40jl does not sell your personal data. We share your data only in the following limited and controlled circumstances:

• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, 7-Eleven (EC Pay), and other payment processors receive the minimum data required to authorise and confirm transactions. These providers operate under their own privacy policies and data protection obligations.
• Identity Verification (KYC) Providers: Third-party KYC vendors who assist in verifying the authenticity of government-issued Philippine identification documents.
• Fraud Prevention and AML Services: Risk management platforms that assist 40jl in detecting and preventing fraud, money laundering, and other prohibited activities.
• Game Providers: Licensed game providers (including JILI, Pragmatic Play, PG Soft, and Evolution Gaming) receive limited technical session data necessary to deliver their games to you through the 40jl platform. These providers are contractually bound to process this data only for game delivery purposes.
• Regulatory and Law Enforcement Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities, where disclosure is required by law or in response to a lawful order.
• Professional Advisers: Lawyers, accountants, and auditors engaged by 40jl on a confidential basis.

Some of 40jl's technology infrastructure, third-party service providers, and game providers are located or operate servers outside the Philippines. Where your personal data is transferred to countries that may not offer the same level of data protection as the Philippines, 40jl implements appropriate safeguards, including:

• Contractual data processing agreements with Standard Contractual Clauses ensuring equivalent data protection standards;
• Due diligence assessments of recipient countries and entities to confirm adequate data protection regimes;
• Data minimisation practices to limit the volume of personal data transferred internationally.

In all cases, international transfers are conducted in accordance with the requirements of the Philippine Data Privacy Act and NPC guidelines on cross-border data flows.

40jl retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active accounts: Personal data is retained for the duration of your account relationship with 40jl;
• Closed accounts: Identity and financial data is retained for a minimum of five (5) years following account closure, as required by PAGCOR regulatory requirements and AMLA record-keeping obligations;
• Gaming transaction records: Retained for a minimum of five (5) years to comply with regulatory audit and AML reporting requirements;
• Support communications: Retained for two (2) years following resolution of the relevant support case;
• Marketing consent records: Retained for the duration of the consented marketing relationship and for one (1) year thereafter as proof of consent;
• Legal hold: Where data is subject to legal proceedings, regulatory investigation, or a preservation order, it will be retained until the matter is fully resolved, regardless of the above timeframes.

At the end of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer be associated with any individual.

40jl implements technical and organisational security measures proportionate to the risk involved in processing your personal data. These measures include:

• Encryption in transit: All data transmitted between your device and the 40jl platform is protected by 256-bit SSL/TLS encryption;
• Encryption at rest: Sensitive data stored in 40jl databases is encrypted using AES-256;
• Access controls: Access to personal data systems is restricted on a need-to-know basis with role-based access controls, multi-factor authentication for administrative access, and regular access reviews;
• Network security: The 40jl platform infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular penetration testing;
• Staff training: All 40jl personnel with access to personal data undergo data privacy and security training;
• Incident response: 40jl maintains a documented data breach incident response procedure aligned with NPC notification requirements.

While 40jl implements industry-standard security measures, no online platform can guarantee absolute security. You also play a role in protecting your account — keeping your password confidential, enabling 2FA, and notifying 40jl immediately if you suspect unauthorised access are all important steps.

Under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by 40jl. These rights can be exercised free of charge by submitting a written request to our Data Protection Officer using the contact details in Section 16.

40jl will respond to data subject requests within 30 days of receipt. Where a request is complex or involves multiple related rights, this period may be extended by a further 30 days with notice to the requesting party. 40jl may request proof of identity before responding to a data access or correction request to prevent unauthorised disclosure.

The 40jl platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations and Philippine law. 40jl does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted as part of the mandatory KYC process for all 40jl account registrations. Where 40jl becomes aware that personal data has been collected from an individual under 21 years of age, that account will be immediately suspended, any funds returned to the originating payment method, and all associated personal data deleted to the extent not required to be retained by law.

40jl strongly encourages account holders who share mobile devices or computers with minors to activate device-level parental controls or screen time restrictions to prevent accidental access to the 40jl platform or any other gambling-related content.

Where you have consented to receive marketing communications from 40jl, we may send you promotional messages about bonuses, new games, tournaments, VIP programme updates, and other offers via SMS to your registered Philippine mobile number or to your registered email address.

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in your 40jl account settings;
• Replying "STOP" to any SMS marketing message from 40jl;
• Submitting an opt-out request to our support team via live chat or the support email address in Section 16.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out before withdrawal, and does not affect the receipt of transactional communications such as deposit confirmations, withdrawal notifications, security alerts, or communications required for account management or regulatory compliance.

The 40jl platform may contain references to third-party game providers whose games are embedded within the 40jl lobby. When you launch a game from a licensed provider such as JILI, Pragmatic Play, PG Soft, or Evolution Gaming, limited session data may be processed by that provider's systems to deliver the game experience. These providers are contractually bound by data processing agreements that restrict their use of your data to the delivery of the game.

40jl is not responsible for the privacy practices of third-party game providers in relation to their own platform data (for example, data collected directly through their own websites outside the 40jl platform). This Privacy Policy applies solely to data processed by 40jl through the 40jl.org platform.

40jl may update this Privacy Policy from time to time to reflect changes in our data processing activities, applicable law, or regulatory guidance. The updated Policy will be published on this page with a revised effective date displayed at the top of the document.

Where a material change is made to this Policy — for example, a new category of data collection or a new purpose of processing — 40jl will notify active players via the mobile number or email address registered to their account before the change takes effect, unless immediate implementation is required by law.

Your continued use of the 40jl platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. If you do not accept the updated Policy, you should cease using the platform and may request account closure through the standard process.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 40jl processes your personal data, please contact us through the following channels:

• Data Protection Officer (DPO): The 40jl DPO is the designated point of contact for all data privacy inquiries and data subject rights requests.
• Email: [email protected] — plain text, not a clickable link. Please include "Privacy Request" or "DPO Inquiry" in the subject line.
• Live Chat: Available 24/7 through the 40jl platform. For formal data subject rights requests, please follow up with an email to create a written record.

If you are not satisfied with 40jl's response to your data privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines through their official government channels and complaint procedures.