46jl Privacy Policy — How We Collect, Use, and Protect Your Personal Data

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and all other applicable Philippine data protection legislation, the data controller responsible for your personal information is the operator of the 46jl platform, accessible at 46jl.one.

As data controller, 46jl determines the purposes and means by which your personal data is processed. 46jl is accountable for ensuring that all data processing activities are conducted lawfully, fairly, and transparently in accordance with the principles established under RA 10173 and the rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

All data processing activities at 46jl are also subject to the relevant requirements of PAGCOR as the licensing and regulatory authority overseeing 46jl's gaming operations. Where PAGCOR's regulatory requirements impose additional data collection or reporting obligations, those obligations take precedence to the extent required by law.

46jl collects the following categories of personal information:

A. Registration and Account Data

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (used to verify the 21+ age requirement);
• Philippine mobile number (used as primary account identifier and OTP delivery channel);
• Email address (used for account notifications and correspondence);
• Username and hashed password;
• Residential address in the Philippines (required for KYC verification).

B. Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys ID, driver's license, passport, SSS/GSIS ID, UMID);
• Selfie or live photo submitted for identity verification matching;
• Additional supporting documents required under PAGCOR's anti-money laundering (AML) framework.

C. Financial and Transaction Data

• GCash account number linked to your 46jl wallet;
• Maya (formerly PayMaya) account reference;
• BPI, BDO, or Metrobank account references (last four digits, bank name, account name);
• USDT wallet address (where applicable);
• Transaction history, including deposit amounts, withdrawal requests, dates, and processing status;
• Bonus crediting and wagering activity records.

D. Technical and Usage Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser version;
• Session timestamps, login history, and logout times;
• Pages visited, games played, bet amounts, and session duration;
• Cookies and similar tracking technology data (see Section 9).

E. Support and Communication Data

• Live chat transcripts and email correspondence with the 46jl support team;
• Complaint records and their resolution outcomes;
• Responsible gaming requests, including deposit limit changes, cooling-off activations, and self-exclusion requests.

46jl collects personal data through the following means:

• Direct collection from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automated technical collection: Through server logs, cookies, session tracking technology, and analytics tools that record how you interact with the 46jl platform (see Section 9);
• Payment processors: When you initiate a GCash, Maya, or bank transfer transaction, the relevant payment service provider may transmit transaction confirmation data to 46jl for reconciliation purposes;
• Third-party game providers: Game providers (including JILI Gaming and others) may transmit game session data, bet records, and outcome logs to 46jl for account crediting and regulatory reporting purposes;
• Regulatory and law enforcement sources: Where required by PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities, 46jl may receive information about you from those bodies as part of compliance processes.

46jl uses your personal information for the following purposes:

46jl does not use your personal data for automated individual decision-making that produces significant legal effects on you without a human review process being available.

Under the Data Privacy Act of 2012, all personal data processing must be based on one or more lawful criteria. 46jl processes your personal information on the following legal bases:

• Contractual necessity: Processing your name, contact details, payment information, and account data is necessary to perform the contract between you and 46jl — specifically, to provide you with access to gaming services, process transactions, and maintain your account;
• Legal obligation: Identity verification (KYC), AML transaction monitoring, and regulatory reporting to PAGCOR and other competent Philippine authorities are required by Philippine law and PAGCOR's operating conditions;
• Legitimate interests: Platform security monitoring, fraud detection, responsible gaming behavior analysis, and technical analytics are carried out on the basis of 46jl's legitimate interest in operating a safe and compliant platform — balanced against your privacy rights;
• Consent: Where 46jl sends you optional promotional communications via SMS or email, this is done on the basis of your consent given during registration or subsequently through your account settings. You may withdraw this consent at any time.

46jl may share your personal information with the following categories of recipients:

• Payment service providers: GCash (G-Xchange Inc.), Maya (Voyager Innovations), BPI, BDO, Metrobank, and other payment channel partners receive the minimum data required to process your transaction and confirm its completion;
• Game providers: Third-party game developers and aggregators (including JILI Gaming) receive session identifiers and bet data to facilitate game play and outcome delivery. No unnecessary personal data beyond what is technically required is transmitted;
• Regulatory authorities: PAGCOR, the NPC, AMLC, and other Philippine government bodies receive data as required by law, including KYC records, suspicious transaction reports, and player activity summaries;
• Identity verification services: Third-party KYC and document verification service providers process identity documents on 46jl's behalf under strict data processing agreements;
• Technology and infrastructure providers: Cloud hosting, database management, and cybersecurity service providers who process data solely on 46jl's instructions under confidentiality agreements;
• Legal and professional advisers: Where necessary for the pursuit or defense of legal claims, or for the purposes of obtaining professional legal or financial advice;
• Law enforcement: Where 46jl is required by a valid court order, subpoena, or other legal process to disclose personal information to law enforcement or judicial authorities in the Philippines.

All third parties with whom 46jl shares personal data are required to process that data in accordance with applicable Philippine law and to implement appropriate technical and organizational security measures.

46jl retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or for as long as required by applicable Philippine law and PAGCOR regulatory conditions — whichever is longer.

The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from account closure, in compliance with PAGCOR's record-keeping requirements and AML obligations under Philippine law;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC and PAGCOR requirements;
• Game session logs: Retained for a minimum of two (2) years from the session date for dispute resolution and regulatory audit purposes;
• Support communications: Retained for three (3) years from the last interaction for dispute resolution and service quality purposes;
• Technical and usage data: Retained for a maximum of two (2) years in identifiable form, after which it is anonymized or deleted.

When personal data is no longer needed and no legal retention obligation applies, 46jl will securely delete or irreversibly anonymize it using industry-standard data destruction practices.

46jl implements a combination of technical, organizational, and operational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your browser and 46jl's servers;
• Cryptographic password hashing — your password is never stored in plain text; it is processed through a one-way hashing algorithm before storage;
• Encrypted at-rest storage for sensitive personal data fields including payment references and ID document files;
• Access control and role-based permissions ensuring that 46jl staff can only access personal data to the extent necessary for their specific job function;
• Multi-factor authentication for internal staff systems that process player personal data;
• 24/7 security monitoring and intrusion detection systems across 46jl's server infrastructure;
• Regular security audits and vulnerability assessments conducted by independent cybersecurity professionals;
• Data breach response procedures including mandatory notification to the NPC and affected players within seventy-two (72) hours of discovering a breach that poses a real risk to data subjects, as required under NPC Circular 16-03.

While 46jl implements rigorous security controls, no online platform can guarantee absolute security. You are encouraged to maintain strong, unique passwords for your 46jl account, enable OTP verification, and contact support immediately if you suspect unauthorized account access.

46jl uses cookies and similar tracking technologies on 46jl.one to enable platform functionality, enhance your experience, and collect technical analytics. A cookie is a small text file stored on your device by your browser when you visit a website.

The following categories of cookies are used by 46jl:

• Strictly necessary cookies: Essential for core platform operation — including maintaining your authenticated session, remembering your language preferences, and enabling the game lobby to function. These cannot be disabled without significantly impairing your use of the platform;
• Functional cookies: Remember your preferences (such as previously selected payment method and display settings) to personalize your 46jl experience across sessions;
• Analytics cookies: Collect aggregated, anonymized data about how visitors use 46jl.one — which pages are visited most, how long sessions last, and which game categories are most popular. This data helps 46jl improve the platform;
• Security cookies: Used to detect and prevent fraud, bots, and unauthorized access attempts. These cookies track login patterns and flag anomalous activity for security review.

46jl does not use third-party advertising or behavioral retargeting cookies. No cookie data collected by 46jl is sold or licensed to external advertising networks.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use 46jl's gaming services. For mobile users, device browser settings govern cookie controls in the same way as desktop browsers.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by 46jl. These rights may be exercised by contacting our Data Protection Officer (see Section 14):

46jl will respond to data rights requests within thirty (30) calendar days of receipt. Some requests may be refused or partially fulfilled where they conflict with 46jl's legal obligations — for example, where retention of data is required by PAGCOR regulations or AML law. In such cases, 46jl will explain the reason for refusal in writing.

46jl does not knowingly collect or process personal information from individuals under the age of 21. During registration, all applicants must confirm that they are at least 21 years old and provide a date of birth. 46jl may require submission of government-issued Philippine identification to verify this declaration.

If 46jl discovers or has reason to believe that personal data belonging to a person under the age of 21 has been collected — whether through misrepresentation at registration or any other means — 46jl will:

1. Immediately suspend the associated account and restrict all gaming and financial activity;
2. Conduct a review of all transactions associated with the account;
3. Securely delete all personal data collected from the underage individual to the extent not required for regulatory reporting or recovery purposes;
4. Report the incident to PAGCOR as required under its operating conditions.

Parents or guardians who believe a minor has registered at 46jl are urged to contact our support team immediately via live chat or email so the account can be reviewed and closed promptly.

As an online platform, certain technical services used by 46jl — including cloud infrastructure, game server hosting, and analytics tools — may be operated by providers whose servers are located outside the Philippines. Where such international data transfers occur, 46jl ensures that they are conducted in accordance with the requirements of the Data Privacy Act of 2012 and NPC issuances on cross-border data flows.

Specifically, 46jl requires that all international data recipients implement data protection standards that are at least equivalent to those required under Philippine law. This is typically achieved through contractual data processing agreements that impose RA 10173-aligned obligations on the receiving party.

Player data processed by Philippine payment service providers (GCash, Maya, BPI, BDO, Metrobank) remains subject to Philippine data protection law and the Bangko Sentral ng Pilipinas (BSP) regulations applicable to those entities.

46jl reviews and updates this Privacy Policy periodically to reflect changes in the platform's data practices, changes in applicable Philippine law, and guidance issued by the NPC or PAGCOR. The effective date at the top of this document indicates when the current version came into force.

When material changes are made to this Privacy Policy — changes that meaningfully affect how your personal data is collected, used, or shared — 46jl will notify registered players through one or more of the following channels: a notice on the 46jl platform upon next login; an SMS to your registered Philippine mobile number; or an email to your registered email address.

Your continued use of the 46jl platform following notification of material changes constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the updated policy, you should discontinue use of the platform and may request account closure as described in the Terms and Conditions at 46jl.one/terms-conditions.

The most current version of this Privacy Policy will always be accessible at 46jl.one/privacy-policy.

46jl has appointed a Data Protection Officer (DPO) as required under Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing 46jl's data protection compliance and is the point of contact for data rights requests, privacy complaints, and data breach notifications.

To exercise your data rights, report a privacy concern, or contact the 46jl DPO, please use the following channels:

• Email: [email protected] — mark the subject line as "Data Privacy Request" or "DPO Query" for faster routing;
• Live Chat: Available 24/7 from within your 46jl account dashboard — inform the agent that your query relates to data privacy and it will be escalated to the DPO team;
• Response Time: Data rights requests and privacy complaints will be acknowledged within five (5) business days and fully addressed within thirty (30) calendar days.

If you believe that 46jl has not adequately addressed your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. NPC contact details are available on the NPC's official website.

This Privacy Policy was last updated on January 1, 2026. It supersedes all prior versions of the 46jl Privacy Policy.