JLHot Privacy Policy

1 Overview

JLHot is an online gaming platform operating in the Philippines and serving Filipino players. As part of operating a licensed online gaming service, JLHot is required to collect and process certain personal information about its players. This is not optional — identity verification, payment processing, and regulatory compliance all require us to handle personal data responsibly and in accordance with applicable Philippine law.

This Policy is designed to be transparent about exactly what data JLHot collects, why we need it, who we may share it with, and how long we keep it. We are committed to handling your personal information with care and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

If you have any questions about this Policy or how JLHot handles your personal data, please contact our support team using the details provided in Section 13 of this Policy.

2 Personal Data We Collect

JLHot collects the following categories of personal data from players and platform users:

JLHot does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where specifically required for responsible gaming assessments or as mandated by applicable law.

3 How We Collect Your Data

JLHot collects personal data through the following means:

• Direct submission: Information you provide when registering your JLHot account, completing identity verification (KYC), making deposits or withdrawals, contacting support, or responding to surveys and promotions.
• Automated collection: Technical and usage data collected automatically when you access the JLHot platform, including through cookies, web beacons, and server logs. See Section 9 for more details on cookies.
• Third-party sources: Identity verification data from KYC service providers; payment confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors; fraud detection data from security service providers.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with licensing compliance, responsible gaming obligations, or investigations.

4 Purpose of Processing

JLHot processes your personal data for the following purposes:

• Account management: To create, maintain, and administer your JLHot account, including verifying your identity and eligibility to use the platform.
• Service delivery: To provide access to JLHot's games, process bets, calculate and credit winnings, and deliver all features of the platform.
• Payment processing: To process deposits and withdrawals, verify payment method ownership, and maintain accurate financial records.
• Regulatory compliance: To comply with anti-money laundering (AML) obligations, PAGCOR licensing requirements, the Data Privacy Act of 2012, and other applicable Philippine laws and regulations.
• Responsible gaming: To monitor gameplay patterns, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of problem gambling.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats to the JLHot platform.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of JLHot's support services.
• Platform improvement: To analyze usage patterns, conduct internal research, and improve the features, performance, and user experience of the JLHot platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications.

5 Legal Basis for Processing

JLHot processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing required to perform our obligations under the JLHot Terms and Conditions, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing conditions, and tax reporting obligations.
• Legitimate interests: Processing necessary for JLHot's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, particularly for marketing communications. You may withdraw your consent at any time by contacting JLHot support.

6 Data Sharing and Disclosure

JLHot does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers engaged to verify player identity and age in compliance with regulatory requirements.
• Game providers: Technology partners and game studios whose games are available on the JLHot platform, to the extent necessary for game delivery and integrity monitoring.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or regulatory obligation.
• Security and fraud prevention providers: Third-party services engaged to detect and prevent fraud, money laundering, and other security threats.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by JLHot in connection with its business operations, subject to confidentiality obligations.

All third parties with whom JLHot shares personal data are required to handle that data in accordance with applicable privacy laws and JLHot's data protection standards. JLHot does not transfer personal data outside the Philippines except where required by law or where adequate data protection safeguards are in place.

7 Data Retention

JLHot retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guide, JLHot applies the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable Philippine financial regulations.
• Gaming history: Retained for a minimum of three (3) years from the date of the gaming session.
• Support communications: Retained for a minimum of two (2) years from the date of the communication.
• Marketing consent records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.

Where personal data is no longer required for any lawful purpose, JLHot will securely delete or anonymize it in accordance with our internal data disposal procedures.

8 Data Security

JLHot implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and JLHot's servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments and vulnerability testing of the JLHot platform.
• Secure password hashing — JLHot never stores your password in plain text.
• Two-factor authentication options for player accounts to reduce the risk of unauthorized access.

While JLHot takes data security seriously and implements industry-standard protections, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your JLHot account credentials. If you suspect that your account has been compromised, contact JLHot support immediately.

9 Cookies & Tracking Technologies

JLHot uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. A cookie is a small text file placed on your device when you visit jlhot.app.

JLHot uses the following types of cookies:

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in during your visit and security cookies that help protect your account. These cannot be disabled without affecting platform functionality.
• Analytical cookies: Used to collect anonymized data about how players use the JLHot platform, including which pages are visited most frequently and how long sessions last. This data helps us improve the platform experience.
• Functional cookies: Used to remember your preferences, such as language settings and display options, so you do not need to re-enter them on each visit.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and other security threats to the JLHot platform and its players.

You may control cookie settings through your browser preferences. Please note that disabling essential cookies may prevent certain features of the JLHot platform from functioning correctly. JLHot does not use cookies to serve third-party advertising or to track your activity on other websites.

10 Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by JLHot:

• Right to be informed: You have the right to be informed about how JLHot collects and processes your personal data, as set out in this Policy.
• Right of access: You have the right to request a copy of the personal data JLHot holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data JLHot holds about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to JLHot's legal and regulatory retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to JLHot's overriding legal obligations.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to withdraw consent: Where JLHot processes your data based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe JLHot has not handled your personal data in accordance with applicable law.

To exercise any of these rights, please contact JLHot support. We will respond to all verified requests within thirty (30) days. JLHot may need to verify your identity before processing your request to protect against unauthorized access to personal data.

11 Minors and Age Restriction

The JLHot platform is strictly intended for individuals aged 21 years and above. JLHot does not knowingly collect personal data from any person under the age of 21. If JLHot becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended and the personal data will be deleted in accordance with our data disposal procedures.

If you are a parent or guardian and believe that a minor has registered an account on JLHot or provided personal data to JLHot without your consent, please contact our support team immediately so that we can take appropriate action.

JLHot implements age verification procedures during the registration process and as part of ongoing KYC checks to enforce this restriction. For more information about our responsible gaming commitments, please visit our Responsible Gaming page.

12 Changes to This Privacy Policy

JLHot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, JLHot will update the "Last Updated" date at the top of this page and, where practicable, notify registered players through the platform or via the email address associated with their account.

We encourage you to review this Privacy Policy periodically to stay informed about how JLHot protects your personal data. Your continued use of the JLHot platform following any update to this Policy constitutes your acknowledgment of the revised terms. If you do not agree with any changes to this Policy, you should stop using the JLHot platform and may request account closure as described in our Terms & Conditions.

13 Contact and Data Privacy Inquiries

If you have any questions, concerns, or requests relating to this Privacy Policy or JLHot's handling of your personal data, please contact our support team. JLHot is committed to addressing all privacy-related inquiries promptly and transparently.

You may also direct formal data privacy complaints or requests to JLHot's designated Data Protection Officer (DPO), who is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy.

If you are not satisfied with JLHot's response to your privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.