Effective date: This Privacy Policy applies to all players registered with 28jl at 28jl.click. By creating an account and using the platform, you acknowledge that you have read and understood how 28jl collects and processes your personal data as described here.
1. Overview
At 28jl, we believe that being upfront about data is just as important as being upfront about game odds. When you sign up and play on 28jl, you share personal information with us. This Privacy Policy explains precisely what we do with that information — in plain language, without the usual wall of legal text that nobody actually reads.
The short version: 28jl collects the data it genuinely needs to operate a safe, licensed, and fair online gaming platform for Filipino players. We protect that data using industry-standard measures, we do not sell it to third parties for commercial gain, and we give you meaningful control over your own information.
This policy is written to comply with applicable Philippine data protection obligations, including those under the Data Privacy Act of 2012 (Republic Act No. 10173). If you have questions about anything in this policy after reading it, the contact details at the bottom of this page will reach the right person at 28jl.
2. What Personal Data 28JL Collects
The information 28jl collects falls into three broad categories depending on how you interact with the platform.
2.1 Information You Provide Directly
When you register and use your 28jl account, we collect:
- Full legal name as it appears on your government-issued Philippine ID
- Date of birth (to confirm the 21+ age requirement)
- Mobile number and email address
- Home address or province in the Philippines
- Username and encrypted account password
- Identity documents submitted for KYC/AML verification (e.g., valid Philippine national ID, passport, or driver's licence)
- Payment method details — the name on your GCash, Maya, BDO, BPI, UnionBank, or card account
- Any information you provide when contacting 28jl support
2.2 Information Collected Automatically
When you access 28jl, our systems automatically log:
- IP address and approximate geographic location (province or city level)
- Device type, operating system, and browser version
- Session timestamps — when you logged in, how long you played, when you logged out
- Pages viewed and features accessed within the 28jl platform
- Game session data, including bets placed, outcomes, and account balance changes
- Error logs and crash reports used to diagnose technical issues
2.3 Information From Third Parties
When you make a deposit or withdrawal, 28jl receives transaction confirmation data from the relevant payment provider (e.g., GCash, Maya, your bank). This includes the transaction reference number, the amount, and the account name associated with the payment. 28jl does not receive full account credentials or PINs from payment providers.
Where required for identity verification, 28jl may use a third-party KYC service to cross-check information you provide. The result of that check (verified or not verified) is shared with 28jl; the detailed data processed by the KYC provider is governed by that provider's own privacy terms.
3. How 28JL Uses Your Personal Data
28jl uses personal data only for purposes that are necessary and proportionate. The table below summarises the main uses and the legal basis for each.
| Purpose |
Legal basis |
| Creating and managing your 28jl account |
Performance of contract |
| Processing deposits and withdrawals in Philippine Pesos |
Performance of contract |
| Verifying your identity (KYC) and confirming the 21+ age requirement |
Legal obligation |
| Detecting and preventing fraud, money laundering, and prohibited conduct |
Legal obligation / legitimate interest |
| Providing responsible gaming tools and monitoring for problem gambling indicators |
Legal obligation / legitimate interest |
| Responding to support queries and complaints |
Performance of contract |
| Sending transactional notifications (deposit confirmed, withdrawal processed, etc.) |
Performance of contract |
| Sending promotional communications about 28jl offers (with your consent) |
Consent |
| Improving the 28jl platform and game experience using aggregated analytics |
Legitimate interest |
| Complying with regulatory requirements and reporting obligations |
Legal obligation |
28jl does not use automated decision-making or profiling in a way that produces legal or similarly significant effects on individual players without human review. Account restrictions triggered by automated fraud detection are reviewed by a member of the 28jl compliance team before any permanent action is taken.
4. Who 28JL Shares Your Data With
28jl does not sell, rent, or trade personal data. Limited sharing occurs only in the circumstances described below, and only to the extent necessary for the specific purpose.
4.1 Game Providers
Games on 28jl are supplied by licensed third-party game studios. When you launch a game, the provider may receive a player session token and relevant game history data to enable the game to function and to settle outcomes correctly. Game providers do not receive your full name, payment details, or contact information unless specifically required for a particular game type.
4.2 Payment Processors
Processing a deposit or withdrawal on 28jl requires sharing transaction data with the payment provider you select (GCash, Maya, BDO, BPI, UnionBank, GrabPay, Coins.ph, InstaPay/PESONet, or card networks). Each payment provider has its own privacy policy governing how it handles your transaction data.
4.3 Identity Verification Services
28jl uses accredited third-party KYC providers to verify identity documents and confirm the eligibility of players. These providers process the images and data you submit for verification purposes under their own data processing agreements with 28jl.
4.4 Regulatory Authorities
28jl may be required to disclose personal data to Philippine regulatory authorities, law enforcement agencies, or financial intelligence units in connection with legal proceedings, investigations, or compliance obligations. Such disclosures are made only to the extent legally required and are not made voluntarily.
4.5 Service Providers
28jl engages service providers for functions such as cloud hosting, customer support platform software, and technical infrastructure. These providers act as data processors under written agreements requiring them to process data only on 28jl's instructions and to maintain appropriate security standards.
5. Cookies and Tracking Technologies
28jl uses cookies and similar tracking technologies to make the platform function correctly and to understand how players use it. Here is what the main categories do:
- Essential cookies: Required for the 28jl platform to function. They keep you logged in during a session, maintain your cart or bet slip state, and enable secure account access. These cannot be disabled without breaking core platform functionality.
- Analytics cookies: Help 28jl understand how players navigate the platform — which games are most visited, where players leave the registration flow, and how performance varies across devices. Data is aggregated and does not identify individual players.
- Functionality cookies: Remember preferences such as your selected language, session time reminder settings, and responsible gaming limit configurations so you do not have to re-enter them each visit.
- Security cookies: Used to detect suspicious activity, such as login attempts from unrecognised devices, to protect your 28jl account.
You can manage cookie preferences through your browser settings. Disabling analytics or functionality cookies does not prevent you from using 28jl, but may affect the platform's ability to remember your preferences between sessions. Disabling essential cookies is likely to prevent you from logging in or using key features.
6. How Long 28JL Keeps Your Data
28jl retains personal data for as long as it is necessary for the purpose it was collected, or as required by applicable law. The following general retention periods apply:
- Account and identity data: Retained for the life of your account and for a minimum of five years after account closure, in compliance with anti-money laundering record-keeping requirements.
- Transaction records: Deposit, withdrawal, and wager records are retained for at least five years after the date of the transaction.
- Support and complaint records: Retained for three years after the matter is resolved.
- Marketing consent records: Retained for the period during which consent remains valid and for one year after withdrawal of consent.
- Session and analytics data: Aggregated data is retained indefinitely. Individual session logs are typically purged after 24 months.
When retention periods expire, data is securely deleted or anonymised so that it can no longer be linked to an individual player. Anonymised data may be retained for longer periods for statistical and analytical purposes.
7. Security Measures
Protecting your personal data is a genuine operational priority at 28jl, not a compliance checkbox. The measures we apply include:
- Encryption in transit: All data exchanged between your device and the 28jl platform is transmitted over HTTPS using TLS encryption.
- Encryption at rest: Sensitive data fields — including identity document data and payment references — are encrypted in 28jl's databases.
- Access controls: 28jl staff access to personal data is restricted on a need-to-know basis. Access is authenticated, logged, and periodically reviewed.
- Two-factor authentication: Available for player accounts to add a second layer of security beyond the account password.
- Regular security testing: 28jl systems are subject to periodic vulnerability assessments and penetration testing by qualified security professionals.
- Incident response: In the event of a data breach that poses a risk to players, 28jl will notify affected individuals and relevant authorities in accordance with applicable legal requirements.
Your role matters: Technical security measures are only part of the picture. Keeping your 28jl password private, not sharing OTPs, and logging out on shared devices all make a real difference. 28jl staff will never ask for your password.
8. Your Data Rights as a 28JL Player
As a data subject under applicable Philippine law and 28jl's own policies, you have meaningful rights over your personal data. These are not conditional on closing your account — you can exercise them while your account is active.
Right to Access
Request a copy of the personal data 28jl holds about you and information about how it is being used.
Right to Rectification
Ask 28jl to correct inaccurate or outdated personal data held in your account.
Right to Erasure
Request deletion of your personal data where 28jl no longer has a legal basis to retain it.
Right to Restrict Processing
Ask 28jl to limit how your data is used while a correction request or objection is being reviewed.
Right to Data Portability
Receive a structured copy of data you provided to 28jl in a commonly used machine-readable format.
Right to Object
Object to 28jl processing your data for direct marketing or on the basis of legitimate interest.
To exercise any of these rights, contact 28jl at support@28jl.click with a description of your request. We will acknowledge it within five business days and provide a substantive response within thirty days. We may need to verify your identity before processing the request. In complex cases, the response period may be extended once, with notification.
Exercising your data rights will not result in any penalty to your 28jl account. If your request involves data that 28jl is legally required to retain (for example, transaction records subject to anti-money laundering laws), we will explain the specific retention obligation rather than simply declining.
9. Minors and Children's Data
28jl is strictly for adults aged 21 and above. We do not knowingly collect personal data from anyone under this age. The registration process includes an age declaration, and 28jl reserves the right to verify age at any point using identity documents.
If 28jl becomes aware that a player account belongs to someone under 21, the account will be suspended immediately, the matter will be investigated, and any balance may be withheld pending resolution. Any data collected from a minor will be deleted as soon as possible once the situation is confirmed.
If you are a parent or guardian and believe a minor has registered with 28jl using false information, contact support at support@28jl.click immediately. We take these situations seriously and will act promptly.
10. Changes to This Privacy Policy
28jl may update this Privacy Policy from time to time to reflect changes in how we operate, new regulatory requirements, or improvements to our data practices. Material changes — those that significantly affect your rights or how we use your data — will be communicated via account notification or email at least seven days before they take effect.
Minor or clarifying changes may be made without advance notice. The effective date at the top of this page will always reflect when the current version was last updated. Continuing to use 28jl after a policy update takes effect constitutes acceptance of the revised terms.
We recommend reviewing this page periodically. If the direction of a change concerns you, you can always contact 28jl support or exercise your right to close your account and request deletion of your data before the change takes effect.
11. Contact and Data Complaints
The primary contact for data privacy matters at 28jl is the support team. For questions, data subject access requests, or concerns about how your personal information has been handled, reach us at:
Email: support@28jl.click
If you have raised a privacy concern with 28jl and are not satisfied with the response, you may escalate the matter through the formal complaint process described in our Terms and Conditions. Further escalation options through relevant Philippine regulatory channels are available to you once the internal process is complete.