jlwafa Privacy Policy
At jlwafa, your privacy is not an afterthought — it is a core commitment. This Privacy Policy explains exactly how we collect, use, store, share, and protect your personal information when you use the jlwafa platform. We operate under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the regulatory oversight of PAGCOR. Please read this document carefully before creating a jlwafa account.
Our Six Privacy Commitments
These six principles guide how jlwafa handles your personal data. They summarise our full obligations — read the complete policy below for the binding legal detail.
jlwafa collects only the personal data necessary to operate your account, verify your identity, process payments, and comply with PAGCOR and AMLC regulatory requirements. We do not collect data for the sake of it.
Your data is used only for the purposes stated in this policy — account management, KYC verification, fraud prevention, payment processing, customer support, and where you have opted in, promotional communications.
jlwafa uses industry-standard encryption (TLS in transit, AES-256 at rest), access controls, and regular security audits to protect your personal data from unauthorised access, disclosure, or loss.
jlwafa does not sell, rent, or trade your personal information to third-party advertisers or data brokers. Your data is shared only with service providers who directly support jlwafa's operations and are bound by strict data processing agreements.
Under RA 10173, you have the right to access, correct, and request deletion of your personal data. jlwafa provides clear mechanisms to exercise all of these rights directly through your account dashboard or via our support team.
This policy is written in plain, readable English so you always know where your data goes and why. If we update this policy in a material way, we will notify you through your registered email or via an in-platform notification.
1. Who We Are
jlwafa is a PAGCOR-regulated online casino and sports betting platform accessible at jlwafa.app, built specifically for Filipino players. For the purposes of this Privacy Policy, jlwafa acts as the Personal Information Controller (PIC) as defined under Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations.
As a PIC, jlwafa determines the purposes and means of processing your personal data. Where jlwafa engages third-party service providers to process data on its behalf — such as payment processors or fraud detection vendors — those providers act as Personal Information Processors (PIP) and are bound by contractual obligations that are no less protective than the standards set out in this policy.
jlwafa's operations are subject to the oversight of the National Privacy Commission (NPC) of the Philippines and the Philippine Amusement and Gaming Corporation (PAGCOR). Any data processing activities undertaken by jlwafa are conducted in compliance with both bodies' applicable regulations and guidelines.
// controller_identity: jlwafa (jlwafa.app)
// regulatory_framework: Republic Act No. 10173 — Data Privacy Act of 2012
// supervisory_authority: National Privacy Commission (NPC), Philippines
// gaming_regulator: PAGCOR — Philippine Amusement and Gaming Corporation
2. Personal Data We Collect
jlwafa collects the following categories of personal data depending on the nature of your interaction with the platform:
2.1 Registration & Identity Data
When you create a jlwafa account, we collect your full legal name, date of birth, residential address (city, province, ZIP code), email address, and Philippine mobile number (Globe or Smart). This data is required to establish and maintain your account.
2.2 KYC Verification Data
Before withdrawals are processed, jlwafa requires government-issued ID verification. This may include a scanned copy or photograph of a valid Philippine ID (e.g., PhilSys National ID, passport, UMID, driver's licence, SSS ID, or PRC ID), together with a selfie or live photo for biometric matching purposes. We may also request proof of address documents such as utility bills or barangay certificates.
2.3 Financial Data
jlwafa collects details of your deposit and withdrawal transactions, including the payment method used (GCash, Maya, BPI, BDO, or Metrobank), transaction reference numbers, and transaction amounts in Philippine Peso (₱). jlwafa does not store full payment account credentials such as GCash PINs or online banking passwords — these are processed directly by your bank or e-wallet provider.
2.4 Gaming Activity Data
We record your game history, bet amounts, win/loss outcomes, session durations, game preferences, and any responsible gaming limits or self-exclusion requests you have set. This data is retained for regulatory audit purposes and to provide personalised support.
2.5 Technical & Device Data
When you access jlwafa, our systems automatically collect your IP address, browser type and version, device type and operating system, screen resolution, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and geographic eligibility verification.
2.6 Communications Data
If you contact jlwafa support via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and resolution outcomes. This data is used to resolve disputes, improve service quality, and for staff training purposes.
| Category | Examples | Required? |
|---|---|---|
| Identity | Full name, date of birth, address | Yes — account creation |
| KYC Documents | Gov't ID, selfie, proof of address | Yes — before withdrawal |
| Financial | Transaction refs, payment method, amounts | Yes — payment processing |
| Gaming Activity | Bet history, session data, game preferences | Yes — regulatory audit |
| Technical | IP address, device type, browser | Automatic — security |
| Communications | Support chat logs, email records | When support is used |
3. How We Collect Your Data
jlwafa collects personal data through the following channels:
- Directly from you — through the registration form, KYC document upload, support interactions, and any preferences or settings you configure in your account dashboard.
- Automatically — through cookies, server logs, and tracking technologies when you access and interact with the jlwafa platform.
- From payment providers — transaction confirmation data from GCash, Maya, BPI, BDO, and Metrobank when you make deposits or receive withdrawals.
- From identity verification providers — results of automated or manual KYC checks conducted by jlwafa's third-party verification service partners.
- From fraud prevention services — risk signals and fraud indicators from third-party fraud detection vendors used to protect the integrity of the jlwafa platform.
4. Why We Use Your Data
jlwafa processes your personal data for the following purposes:
- Account creation and management — to register, authenticate, and maintain your jlwafa player account.
- Identity and age verification (KYC) — to confirm that you meet the minimum age requirement of 21 years and that your identity matches your account registration details, as required by PAGCOR.
- Payment processing — to facilitate deposits via GCash, Maya, and Philippine bank transfers, and to process withdrawals to your verified payment account.
- Regulatory compliance — to meet jlwafa's obligations under PAGCOR's licence conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including mandatory record retention and suspicious transaction reporting to the AMLC.
- Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct on the platform.
- Customer support — to respond to your inquiries, resolve disputes, and provide assistance through jlwafa's 24/7 support team.
- Responsible gaming — to monitor gaming patterns for signs of problem gambling, administer deposit limits, loss limits, and self-exclusion requests, and comply with PAGCOR's responsible gaming requirements.
- Platform improvement — to analyse aggregated usage data and improve the jlwafa user experience, game offerings, and platform stability.
- Marketing communications — where you have opted in, to send you personalised promotions, bonus offers, and news about jlwafa via SMS or email. You may opt out at any time.
5. Legal Bases for Processing
jlwafa processes your personal data on the following lawful bases as recognised under the Data Privacy Act of 2012:
- Contractual necessity — processing required to fulfil the player account agreement, including account registration, KYC, and payment processing.
- Legal obligation — processing required to comply with PAGCOR licence conditions, AMLA reporting requirements, NPC data governance standards, and other applicable Philippine law.
- Legitimate interests — processing for fraud prevention, security monitoring, and platform improvement, where jlwafa's legitimate business interests are not overridden by your data protection rights.
- Consent — processing for optional marketing communications, where you have given your explicit consent at the time of registration or subsequently via your account settings. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.
6. Sharing Your Personal Data
jlwafa does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:
6.1 Service Providers (Personal Information Processors)
jlwafa engages third-party service providers who process personal data on our behalf under binding data processing agreements. These include KYC and identity verification vendors, payment gateway partners (including GCash and Maya's technical infrastructure providers), fraud detection and risk management platforms, cloud hosting and infrastructure providers, and customer support software providers. All PIPs are contractually required to process data only as instructed by jlwafa and to maintain security standards equivalent to those described in this policy.
6.2 Regulatory and Law Enforcement Disclosure
jlwafa will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required to do so by law, court order, or regulatory direction. jlwafa will notify affected players of such disclosures to the extent permitted by law.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of jlwafa's business or assets, personal data held by jlwafa may be transferred to the acquiring entity, subject to the same data protection standards described in this policy. Affected players will be notified of any such transfer in advance.
⚠️ jlwafa will NEVER share your personal data with third-party advertisers, affiliate marketing networks, or data brokers. If you receive an unsolicited communication claiming to be from jlwafa through an unexpected channel, treat it as suspicious and contact our support team immediately.
7. Cookies & Tracking Technologies
jlwafa uses cookies and similar tracking technologies to operate the platform, maintain your session, and understand how players interact with our site. The following types of cookies are used:
- Strictly necessary cookies — essential for the platform to function, including session authentication tokens and security cookies. These cannot be disabled without breaking core platform functionality.
- Functional cookies — used to remember your preferences, such as your preferred language, responsible gaming settings, and last-used game categories.
- Analytics cookies — used to collect aggregated, anonymised data about how players navigate the platform, which pages are most visited, and where technical errors occur. This data is used solely for platform improvement.
- Security cookies — used to detect and mitigate fraud, bot activity, and suspicious login behaviour, including IP reputation checks and device fingerprinting for account protection.
jlwafa does not use third-party advertising cookies or allow external ad networks to track you via the jlwafa platform. You may manage your cookie preferences through your browser settings, noting that disabling strictly necessary cookies will impair your ability to log in and use jlwafa.
8. Data Retention
jlwafa retains your personal data for as long as your account remains active and for a defined period after account closure, in line with our legal and regulatory obligations:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity data | 5 years after account closure | PAGCOR licence / AMLA |
| KYC documents | 5 years after account closure | PAGCOR licence / AMLA |
| Transaction records | 5 years after transaction date | AMLA / tax compliance |
| Gaming activity logs | 3 years after account closure | PAGCOR audit requirements |
| Support communications | 2 years after resolution | Dispute resolution |
| Technical / device logs | 12 months | Security monitoring |
| Marketing consent records | Until consent withdrawn + 1 year | DPA consent documentation |
After the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-approved data disposal procedures. Data that has been anonymised and can no longer be attributed to any individual is no longer considered personal data under RA 10173 and may be retained for analytical purposes.
9. Data Security
jlwafa implements a layered security architecture to protect your personal data against unauthorised access, accidental loss, disclosure, or destruction. Our security measures include:
- Encryption in transit — all data transmitted between your device and jlwafa's servers is encrypted using TLS 1.2 or higher.
- Encryption at rest — sensitive personal data stored on jlwafa's servers is encrypted using AES-256 encryption.
- Access controls — access to personal data within jlwafa is restricted on a strict need-to-know basis. Staff with access to player data are subject to background checks and regular data privacy training.
- Two-factor authentication — jlwafa's internal systems require multi-factor authentication for all staff accessing production environments containing player data.
- Regular security audits — jlwafa conducts periodic vulnerability assessments and penetration tests of its platform infrastructure.
- Breach response — jlwafa maintains an incident response plan. In the event of a personal data breach, jlwafa will notify the NPC within 72 hours of discovery and will inform affected players without undue delay where the breach poses a risk to their rights and freedoms.
// security_standards: TLS 1.2+, AES-256 at rest
// access_model: role-based, least-privilege
// breach_notification_sla: 72 hours to NPC
// audit_frequency: periodic third-party assessment
10. Your Data Rights
Under the Data Privacy Act of 2012, you have the following rights regarding your personal data held by jlwafa. To exercise any of these rights, contact our Data Privacy Officer at the details listed in Section 14.
Your Rights Under RA 10173
You may request a copy of the personal data jlwafa holds about you, along with information on how it is being processed.
If any personal data we hold is inaccurate or incomplete, you have the right to request that it be corrected or updated.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to jlwafa's legal retention obligations.
You may object to jlwafa processing your personal data for direct marketing or on the basis of legitimate interests, at any time.
You may request a machine-readable copy of your personal data to transfer to another service provider, where technically feasible.
If you believe jlwafa has mishandled your personal data, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
11. Children's Privacy
The jlwafa platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations. jlwafa does not knowingly collect personal data from individuals under the age of 21.
If jlwafa discovers or is notified that personal data has been collected from an individual who is under 21 years of age, we will immediately close the associated account, delete the collected data to the extent not required for regulatory reporting purposes, and take appropriate action in accordance with our PAGCOR obligations.
If you are a parent or guardian and believe that your child under 21 has registered a jlwafa account, please contact our support team immediately so that we can investigate and take corrective action.
⚠️ 21+ ONLY: jlwafa takes underage access extremely seriously. Robust age verification checks are applied at the KYC stage. Any account where the player cannot confirm they are 21 or older will be immediately suspended pending investigation.
12. Cross-Border Data Transfers
jlwafa's primary data processing infrastructure is located within or serving the Philippines. Where personal data is transferred to or processed by third-party service providers located outside the Philippines — for example, cloud infrastructure providers or international fraud detection platforms — jlwafa ensures that such transfers are conducted in compliance with NPC guidelines on cross-border data flows.
Specifically, jlwafa requires that all cross-border data transfers are subject to: binding contractual clauses that impose data protection obligations equivalent to those under RA 10173; confirmation that the recipient jurisdiction provides adequate data protection under NPC standards; or other lawful transfer mechanisms approved by the National Privacy Commission.
jlwafa will not transfer your personal data to a jurisdiction that does not provide adequate protections without first obtaining your explicit consent or ensuring that a compliant transfer mechanism is in place.
13. Changes to This Privacy Policy
jlwafa reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, PAGCOR regulatory requirements, or NPC guidance. The effective date at the top of this page will always reflect when the policy was last updated.
Where changes are material — meaning they significantly affect how we process your personal data or your rights as a data subject — jlwafa will notify you via your registered email address or through a prominent notice on the jlwafa platform at least 14 days before the changes take effect. Your continued use of the jlwafa platform after the effective date of any updated policy constitutes your acknowledgement of the changes.
We encourage you to review this Privacy Policy periodically. If you have concerns about any changes, you are welcome to contact our Data Privacy Officer before the changes take effect.
// policy_version: 2026.01
// last_reviewed: 2026
// material_change_notice: 14 days advance notice via registered email
// change_log: maintained internally and available on request
14. Contact Us & Data Privacy Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or jlwafa's data processing activities, please contact our dedicated Data Privacy Officer (DPO). jlwafa is committed to responding to all data subject requests within 15 business days of receipt, in line with NPC guidelines.
You can reach the jlwafa Data Privacy Officer by emailing:
Please include "Data Privacy Request" in the subject line of your email and provide your registered account email address and a clear description of your request so that we can process it efficiently. For identity verification purposes, jlwafa may ask you to confirm certain account details before actioning any data subject request.
If you are not satisfied with jlwafa's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC can be reached through their official website and public assistance channels.
// dpo_contact: support@jlwafa.app
// subject_line: "Data Privacy Request"
// response_sla: 15 business days
// escalation: National Privacy Commission (NPC), Philippines
Ready to Play at jlwafa?
Now that you know exactly how jlwafa protects your personal data, explore our full range of casino games — from live dealer baccarat and roulette to slots, bingo, and more. Safe, regulated, and built for Filipino players.
21+ ONLY | PAGCOR REGULATED | RESPONSIBLE GAMING