jlber Privacy Policy —
Your Data, Your Rights, Our Commitment

jlber ("the Company") is the data controller responsible for the personal information collected through the jlber platform at jlber.net. As data controller, jlber determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its implementing rules and regulations.

jlber operates as an online casino and sports betting platform serving registered players in the Philippines. All personal data processed by jlber in connection with account registration, gaming activity, financial transactions, and customer support is processed by jlber as data controller, unless this Policy expressly identifies a third-party processor acting in that capacity for a specific purpose.

For all data protection matters, including rights requests and complaints, you may contact the jlber Data Protection Officer as described in Section 12 of this Policy.

jlber collects personal data that is necessary, proportionate, and relevant to the purposes described in this Policy. The categories of personal data we collect and the circumstances under which they are collected are set out below.

2.1 Registration Data

When you create a jlber account, we collect:

• Full legal name as it appears on your government-issued ID;
• Date of birth (required for age verification — 21+ only);
• Residential address (province, city, barangay);
• Mobile number (Philippine format) or email address;
• Chosen username and hashed password.

2.2 Identity Verification (KYC) Data

In accordance with Philippine anti-money laundering regulations and PAGCOR-aligned compliance requirements, jlber collects the following when processing your identity verification:

• Scanned or photographed copies of government-issued Philippine identification documents (PhilSys ID, driver's licence, passport, UMID, voter's ID, or equivalent);
• Selfie photograph for live identity comparison where required;
• Proof of address documentation where applicable (utility bill, bank statement).

2.3 Financial Transaction Data

• Deposit and withdrawal amounts, dates, and payment methods used (GCash account reference, Maya reference, bank account name — not full account numbers);
• Transaction history and account balance records;
• Partial payment identifier references required for fraud prevention and transaction reconciliation.

2.4 Gaming Activity Data

• Game session logs including game type, session duration, wager amounts, and outcomes;
• Sports betting selections, stake amounts, and settlement records;
• Bonus and promotional activity records.

2.5 Technical and Device Data

• IP address and approximate geolocation (city/region level);
• Device type, operating system, and browser version;
• Session timestamps and login history;
• Cookie identifiers and analytics data (see Section 6).

2.6 Communications Data

• Support chat transcripts and email correspondence;
• Feedback, complaint, and dispute records.

jlber uses the personal data it collects strictly for the purposes described in this Policy. We do not use personal data for any purpose that is incompatible with the purpose for which it was originally collected without your explicit consent or a lawful basis under the DPA.

jlber does not use personal data to make automated decisions that produce significant legal or similarly significant effects on you without human review, except where expressly authorised by applicable law or where you have provided explicit consent. Responsible gaming intervention triggers are subject to human review by trained staff.

jlber processes personal data only where a lawful basis exists under the Philippine Data Privacy Act. The primary legal bases on which jlber relies are:

• Contractual necessity: Processing required to perform the contract between you and jlber — i.e., providing gaming services, processing transactions, managing your account, and delivering customer support.
• Legal obligation: Processing required to comply with Philippine law, including age verification obligations under PAGCOR guidelines, anti-money laundering reporting requirements under RA 9160 (as amended), and data retention mandates applicable to gambling operators.
• Legitimate interests: Processing carried out for jlber's legitimate interests in platform security, fraud prevention, and responsible gaming compliance — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for direct marketing purposes and optional analytics beyond what is strictly necessary for service delivery. You may withdraw consent for marketing communications at any time through your account settings.

jlber does not sell, rent, or trade your personal data. We share your personal data only in the following circumstances and only to the extent necessary for each purpose:

5.1 Game and Technology Providers

Game providers (such as Pragmatic Play, Evolution Gaming, NetEnt, and others) receive session identifiers and game action data necessary to deliver game content and verify game outcomes. These providers are contractually prohibited from using your data for any purpose beyond service delivery and are bound by data processing agreements consistent with applicable law.

5.2 Payment Service Providers

Payment processors (GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and others) receive the minimum transaction data required to process your deposit or withdrawal. jlber does not transmit full identification documents to payment processors. Each payment provider operates under its own privacy policy and applicable financial regulations.

5.3 Regulatory and Law Enforcement Authorities

jlber is required by law to report certain transactions and to cooperate with regulatory investigations. Personal data may be disclosed to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies where required by a lawful order, court directive, or mandatory reporting obligation under Philippine law.

5.4 Professional Advisers

jlber's legal, audit, and compliance advisers may access personal data to the minimum extent necessary to provide professional services. All such parties are bound by professional confidentiality obligations and data processing agreements.

jlber uses cookies and similar tracking technologies to operate the platform, maintain your session, detect fraud, and analyse platform usage. The categories of cookies we use are:

• Strictly necessary cookies: Required for the platform to function — session management, authentication state, anti-CSRF tokens. These cannot be disabled without impairing platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game lobby view, and recently played games.
• Analytics cookies: Collect aggregated, anonymised data on how users interact with the platform — page load times, navigation paths, feature usage. Used exclusively to improve jlber's service quality.
• Security cookies: Detect bot activity, rate-limit suspicious requests, and support login anomaly detection.

jlber does not deploy third-party advertising cookies or allow external advertising networks to place tracking technologies on the jlber platform. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will affect platform functionality, including the ability to log in and place wagers.

jlber retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Retention periods by data category are as follows:

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised so that it can no longer be associated with any identifiable individual.

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by jlber:

• Right to be Informed: The right to know that your personal data is being collected, the purposes for which it is processed, and how it will be used, shared, and stored — as described in this Privacy Policy.
• Right to Access: The right to obtain a copy of your personal data held by jlber, together with information on how it has been processed.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected or updated. You may update basic account details directly from your jlber account settings; changes to KYC-verified data require additional verification.
• Right to Erasure ("Right to Be Forgotten"): The right to request deletion of your personal data, subject to legal retention obligations. Where data must be retained under AML or tax law, erasure of that data category will be deferred until the mandatory retention period expires.
• Right to Object: The right to object to processing for direct marketing purposes at any time. Objection to processing on legitimate interest grounds is assessed on a case-by-case basis.
• Right to Data Portability: The right to receive a structured, machine-readable copy of personal data you have provided to jlber, for transfer to another data controller.
• Right to Damages: The right to claim compensation for actual damages suffered as a result of jlber's violation of the Data Privacy Act and its implementing rules, in accordance with Section 16 of RA 10173.

To exercise any of these rights, contact the jlber Data Protection Officer using the details in Section 12. Rights requests are acknowledged within five (5) business days and substantively addressed within thirty (30) calendar days, as required by the DPA.

jlber implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include, but are not limited to:

• TLS 1.2 or higher encryption for all data in transit between your browser and jlber's servers;
• AES-256 encryption for sensitive data at rest, including KYC document references, payment identifiers, and hashed credentials;
• Role-based access controls ensuring that jlber personnel access only the personal data necessary for their specific job functions;
• Multi-factor authentication required for all jlber staff accessing systems containing personal data;
• Continuous automated monitoring for anomalous login patterns and data access events;
• Regular security assessments, penetration testing, and vulnerability scanning of the jlber platform and supporting infrastructure;
• Formal data breach response procedures, including NPC notification within 72 hours of becoming aware of a breach that poses a real risk of serious harm to data subjects, as required by the DPA and NPC Circular No. 16-03.

While jlber maintains robust security practices, no online platform can guarantee absolute security. You play an important role in protecting your own account by using a strong, unique password, enabling two-factor authentication, and not sharing your login credentials with anyone.

The jlber platform is strictly restricted to individuals who are 21 years of age or older. jlber does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is enforced at the point of account registration and again prior to the processing of any withdrawal request.

If jlber becomes aware that personal data has been collected from a person under 21 — whether through a fraudulent registration, parental notification, or internal compliance review — jlber will immediately:

• Suspend and permanently close the associated account;
• Void all gaming activity, bonuses, and pending transactions associated with that account;
• Delete all personal data collected from that individual, except as required by applicable law;
• Report the matter to PAGCOR or other relevant authorities where required by the circumstances.

jlber reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable law, or business operations. Where changes are material — meaning they affect your rights or how we process your data in a significant way — jlber will notify you through one or more of the following: a prominent notice on the jlber platform; an in-account notification upon your next login; or a direct communication to your registered mobile number or email address.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was published. We encourage you to review this Policy periodically. Your continued use of the jlber platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms, to the extent permitted by applicable law.

Where an amendment requires your fresh consent under the DPA — such as a new processing purpose that cannot be justified on the basis of an existing lawful ground — we will seek your explicit consent before processing your data for that new purpose.

For all questions, requests, or concerns relating to this Privacy Policy or the processing of your personal data by jlber, you may contact the jlber Data Protection Officer through the following channels:

• Email (plain text): [email protected] — include "Data Privacy Request" in the subject line;
• Live Chat: Available 24/7 directly on the jlber platform — average response time 3–5 minutes;
• Messenger and Viber: Available through jlber's official channels, linked from the platform's support section.

All data subject rights requests are handled by the jlber Data Protection Officer and acknowledged within five (5) business days. Complex requests requiring data review or legal assessment are addressed within thirty (30) calendar days, consistent with NPC guidelines.