Your Privacy is Protected: 40jl is committed to safeguarding the personal data of all players in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable PAGCOR data handling requirements. This policy applies to all data collected through the 40jl website and mobile platform.
1. Introduction
This Privacy Policy ("Policy") describes how 40jl ("we," "us," or "our") collects, uses, stores, and protects the personal information of players and visitors who access the 40jl Platform. This Policy applies to all services offered through the 40jl website and any associated mobile applications.
By registering an account with 40jl or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.
This Policy should be read together with our Terms & Conditions, which govern your use of the 40jl Platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.
2. Data We Collect
40jl collects the following categories of personal data from players and platform visitors:
2.1 Identity Data
- Full legal name as it appears on your government-issued identification
- Date of birth (used to verify the 21-year minimum age requirement)
- Nationality and country of residence
- Government-issued ID number (e.g., Philippine National ID, passport, driver's licence, SSS/GSIS ID)
- Photograph or selfie submitted for identity verification purposes
2.2 Contact Data
- Email address
- Mobile phone number (used for OTP verification and account communications)
- Residential address (for KYC and regulatory compliance)
2.3 Financial Data
- GCash or PayMaya account number linked to your 40jl account
- Bank account details (BPI, BDO, Metrobank) where provided for withdrawal purposes
- Transaction history, including deposits, withdrawals, and bonus credits
2.4 Technical Data
- IP address and approximate geolocation
- Device type, operating system, and browser information
- Session logs, login timestamps, and access records
- Cookies and similar tracking technologies (see Section 9)
2.5 Gaming Data
- Game history, bet amounts, win/loss records, and session duration
- Bonus usage and wagering activity
- Responsible gaming tool settings (deposit limits, self-exclusion status)
2.6 Communications Data
- Records of your communications with 40jl customer support via Live Chat or email
- Feedback, complaints, and dispute records
3. How We Collect Your Data
40jl collects personal data through the following means:
- Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, or contacting customer support.
- Automated collection: Technical data collected automatically when you access the Platform, including through cookies, server logs, and analytics tools.
- Third-party sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, and banking partners; fraud prevention data from regulatory and compliance partners.
4. How We Use Your Data
40jl uses your personal data for the following purposes:
- Account management: To create, maintain, and secure your 40jl account, including identity verification and password recovery.
- Service delivery: To process deposits and withdrawals, credit bonuses, and provide access to games and platform features.
- Regulatory compliance: To fulfil our obligations under PAGCOR licensing requirements, the Philippine Data Privacy Act, and anti-money laundering (AML) regulations, including KYC verification and transaction monitoring.
- Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
- Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
- Customer support: To respond to your enquiries, resolve disputes, and improve our support services.
- Platform improvement: To analyse usage patterns, diagnose technical issues, and improve the performance and features of the 40jl Platform.
- Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
5. Legal Basis for Processing
40jl processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
- Consent: Where you have given explicit consent to the processing of your data, such as for marketing communications or optional platform features.
- Contractual necessity: Where processing is necessary to perform our obligations under the Terms & Conditions, including account management and payment processing.
- Legal obligation: Where processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements and AML obligations.
- Legitimate interests: Where processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
6. Data Sharing and Disclosure
40jl does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
- Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing deposits and withdrawals.
- KYC and identity verification providers: Third-party services engaged to verify your identity and age in compliance with regulatory requirements.
- Fraud prevention and AML partners: Compliance service providers engaged to detect and prevent financial crime.
- Game providers: Licensed game studios whose products are available on the 40jl Platform, to the extent necessary to deliver gameplay services.
- Regulatory authorities: PAGCOR and other competent Philippine government authorities, where disclosure is required by law or regulatory directive.
- Law enforcement: Philippine law enforcement agencies, where disclosure is required by a valid legal order or is necessary to prevent or investigate criminal activity.
- IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers engaged to operate and maintain the Platform, subject to strict data processing agreements.
All third parties with whom 40jl shares personal data are required to handle such data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than those specified by 40jl.
7. Data Retention
40jl retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
In general, 40jl retains account and transaction data for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and Philippine AML regulations. KYC documentation is retained for the same period.
Gaming activity data and session logs are retained for a minimum of three (3) years. Marketing preference data is retained until you withdraw your consent or request deletion.
When personal data is no longer required, 40jl will securely delete or anonymise it in accordance with our data retention and disposal procedures.
8. Security Measures
40jl implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:
- SSL/TLS encryption: All data transmitted between your device and the 40jl Platform is encrypted using industry-standard SSL/TLS protocols.
- OTP verification: One-time password (OTP) authentication is required for login and sensitive account actions, adding an additional layer of security beyond your password.
- Access controls: Access to personal data within 40jl is restricted to authorised personnel on a need-to-know basis, with role-based access controls enforced across all internal systems.
- Data minimisation: 40jl collects only the personal data that is strictly necessary for the purposes described in this Policy.
- Regular security audits: The Platform undergoes regular security assessments and penetration testing to identify and remediate vulnerabilities.
- Incident response: 40jl maintains a data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission (NPC) in accordance with the requirements of the Data Privacy Act.
While 40jl takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorised access to your account.
9. Cookies and Tracking Technologies
9.1 What Are Cookies
Cookies are small text files placed on your device when you visit the 40jl Platform. They allow the Platform to recognise your device, remember your preferences, and provide a more personalised experience.
9.2 Types of Cookies We Use
- Essential cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
- Functional cookies: Remember your preferences, such as language settings and responsible gaming tool configurations.
- Analytics cookies: Collect anonymised data about how players use the Platform, helping us identify areas for improvement. No personally identifiable information is collected through analytics cookies.
- Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only placed with your consent.
9.3 Managing Cookies
You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 40jl Platform. Instructions for managing cookies are available in the help documentation of your browser.
10. Your Data Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 40jl:
- Right to be informed: The right to be notified of how your personal data is being collected and processed — which this Policy fulfils.
- Right of access: The right to request a copy of the personal data 40jl holds about you.
- Right to rectification: The right to request correction of any inaccurate or incomplete personal data.
- Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
- Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
- Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller.
- Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC)
if you believe your data rights have been violated.
To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days in accordance with the Data Privacy Act. We may require you to verify your identity before processing your request.
11. Children's Privacy
The 40jl Platform is strictly intended for persons who are at least 21 years of age, in accordance with PAGCOR regulations governing online gaming in the Philippines. 40jl does not knowingly collect personal data from persons under the age of 21.
If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 40jl Platform, please notify us immediately at [email protected].
Parents and guardians are encouraged to use parental control tools and to monitor the online activity of minors in their care to prevent access to gambling platforms.
12. Changes to This Policy
40jl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will update the "Last updated" date at the top of this page and, where required, notify registered players via email or in-platform notification.
Your continued use of the 40jl Platform following the posting of any changes to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 40jl, please contact our Data Protection Officer through the following channels:
For complaints that cannot be resolved directly with 40jl, you may contact the National Privacy Commission (NPC) of the Philippines through their official government channels.
40jl is committed to resolving all privacy-related concerns promptly and transparently. We aim to respond to all written data privacy enquiries within fifteen (15) business days.