40JL Privacy Policy – How We Protect Your Data in PH
Your privacy matters to us at 40JL. This Privacy Policy explains exactly what personal information we collect when you use the platform, why we collect it, how we use it, who we share it with, and what rights you have over your own data. Everything here is written to comply with the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations.
By registering an account or continuing to use the 40JL platform, you confirm that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If something here is unclear, contact our support team — we're happy to explain.
Your Data at 40JL – Short Version
- We collect only what we need to run your account safely.
- We do not sell your personal data to advertisers.
- Data is shared only with licensed processors and where required by Philippine law.
- You can request access to, correction of, or deletion of your data at any time.
- All data is stored with encryption and access controls in place.
Six Core Privacy Principles at 40JL
Security by Design
All data collected by 40JL is stored behind encryption, access controls, and monitored infrastructure. Personal and financial data are separated at the storage level.
No Data Selling
40JL does not sell, rent, or broker your personal information to any third-party marketing companies, data brokers, or advertisers. Period.
Minimal Collection
We collect only the information necessary for account operation, identity verification, payment processing, and legal compliance. Not a byte more.
Your Rights Are Real
Under Philippine law and 40JL policy, you have the right to access, correct, delete, and port your personal data. These are practical rights you can exercise any time.
Clear Language
This policy is written to be understood — not to be skipped. We avoid unnecessary legal jargon and explain what actually happens with your information at 40JL.
Breach Notification
In the unlikely event of a data breach affecting your information, 40JL will notify affected players and the National Privacy Commission within the timeframe required by Philippine law.
Contents
Note: This Privacy Policy applies to all personal data collected and processed by 40JL through the website at 40jl.best, the mobile platform, and any related communication channels including support chat and email. It applies to all registered players and visitors to the platform.
1. Who We Are and Who Is Responsible for Your Data
40JL is the online gaming and sports betting platform accessible at 40jl.best. 40JL acts as the data controller for all personal information collected through the platform. This means we determine the purposes and means of processing your personal data and are accountable for its protection under Philippine law.
Our designated Data Protection Officer (DPO) oversees compliance with the Philippine Data Privacy Act of 2012 (RA 10173) and handles data subject requests. Contact details for our DPO are provided in Section 14 of this policy.
If you have any questions about how 40JL handles your personal information — before or after you register — please contact our support team. We take data privacy questions seriously and will respond to all enquiries promptly.
2. Personal Data We Collect
40JL collects personal data through three main channels: information you provide directly, information generated by your use of the platform, and information provided by third-party verification services. Here is a breakdown of what we collect and when:
| Category | Data Collected | When Collected |
|---|---|---|
| Identity | Full legal name, date of birth, government ID number and image, selfie photo | Registration and KYC verification |
| Contact | Mobile number, email address, home address | Registration and account updates |
| Financial | GCash / Maya account reference, bank account details (last 4 digits), transaction history | Deposits and withdrawals |
| Gameplay | Bet records, game session data, win/loss history, stake amounts | Ongoing platform use |
| Technical | IP address, device type, browser, operating system, session timestamps | Platform access and sessions |
| Communications | Support chat transcripts, email exchanges | Customer support interactions |
40JL does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data. The only biometric data we collect is a selfie photograph used solely for identity verification during the KYC process.
3. How 40JL Uses Your Personal Data
Every piece of data collected by 40JL is used for a specific, documented purpose. We do not use your data for purposes beyond those listed here without first updating this policy and notifying you. The primary uses are:
- Account creation and management: Your name, contact details, and login credentials are used to create and maintain your 40JL account, authenticate your identity at login, and allow you to manage your preferences.
- Identity verification (KYC): Government ID and selfie data are used to verify that you are who you say you are, that you meet the minimum age requirement of 21, and that your payment accounts belong to you.
- Payment processing: Financial data is used to process deposits and withdrawals through your chosen local payment channels. 40JL does not store full card numbers or full bank account details.
- Game and bet settlement: Gameplay records are used to calculate, verify, and settle bets and game outcomes accurately and transparently.
- Fraud prevention and security: Technical data including IP addresses and device identifiers are used to detect unusual activity, prevent account takeovers, and identify potential fraud or terms violations.
- Legal compliance: Transaction and identity data is retained to comply with the Anti-Money Laundering Act (AMLA), PAGCOR requirements, and other applicable Philippine regulatory obligations.
- Customer support: Communication records are used to resolve your queries, track issue resolution, and improve support quality.
- Platform improvement: Aggregated, anonymised usage data may be used to identify bugs, improve the user interface, and develop new features. Individual-level data is not used for this purpose without anonymisation.
- Responsible gaming: Gameplay and deposit data helps 40JL identify potential problem gambling patterns and apply account protections where appropriate.
40JL does not use personal data to train external AI models, sell to advertisers, or profile you for commercial targeting beyond the 40JL platform itself.
4. Legal Basis for Processing
Under the Philippine Data Privacy Act, 40JL processes your personal data on the following legal grounds:
- Contractual necessity: Processing required to fulfil our obligations under your account agreement — including account management, payment processing, and bet settlement.
- Legal obligation: Processing required to comply with Philippine regulatory requirements including AMLA, PAGCOR licensing conditions, and Bureau of Internal Revenue obligations.
- Consent: Where you have specifically consented to a particular use of your data at the point of collection, such as receiving promotional communications from 40JL. Consent can be withdrawn at any time.
- Legitimate interests: Processing for fraud detection, platform security, and responsible gaming monitoring — activities that protect both 40JL and its players, balanced against your privacy interests.
5. Who We Share Your Data With
40JL does not sell or rent your personal data. We share data only where necessary, with the following categories of recipients:
- Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet, BDO, BPI, UnionBank, and Visa/Mastercard processing networks — solely for the purpose of completing your deposit or withdrawal transaction.
- KYC verification providers: Licensed identity verification services that cross-check your submitted ID documents against government records. These providers are bound by confidentiality agreements and process data only for verification purposes.
- Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement where required by law or court order.
- Cloud and hosting providers: Infrastructure providers that store platform data. All hosting partners are contractually bound to PDPA-equivalent data protection standards.
- Fraud prevention services: Third-party services that help 40JL detect suspicious login activity, multi-account registrations, and payment fraud.
All third parties who process data on behalf of 40JL do so under written data processing agreements that restrict their use of your information to the specified purpose only.
6. How Long We Keep Your Data
40JL retains personal data only for as long as it is needed for the purpose it was collected, or as required by Philippine law. The following retention periods apply:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account registration data | Duration of account + 5 years | AMLA and PAGCOR compliance |
| KYC documents | Duration of account + 5 years | Regulatory requirement |
| Transaction records | 10 years | AMLA statutory requirement |
| Gameplay and bet records | 5 years after account closure | Dispute resolution and audit |
| Support communications | 3 years | Quality assurance and dispute evidence |
| Marketing consent records | Until withdrawal + 3 years | Consent audit trail |
When data is no longer required and retention periods have lapsed, 40JL securely deletes or anonymises it in a manner that makes re-identification impossible.
7. Your Data Rights Under Philippine Law
As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by 40JL. These are genuine, exercisable rights — not just policy language:
Right to Access
Request a copy of the personal data 40JL holds about you, along with information on how it is being used.
Right to Correction
Request correction of inaccurate or incomplete data. Name corrections require supporting ID documentation.
Right to Erasure
Request deletion of personal data where it is no longer needed for the original purpose and no legal obligation requires retention.
Right to Object
Object to specific types of data processing, including direct marketing. We will stop that processing unless we can demonstrate compelling legitimate grounds.
Right to Data Portability
Receive your personal data in a machine-readable format to transfer to another service provider where technically feasible.
Right to File a Complaint
File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe 40JL has violated your data privacy rights.
To exercise any of these rights, contact our Data Protection Officer via the details in Section 14. 40JL will respond to verified requests within 15 business days. Some requests may require identity verification before they can be processed.
8. Cookies and Tracking Technologies
40JL uses cookies and similar technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. Here is how 40JL uses them:
You can control cookie preferences through your browser settings. Note that disabling essential cookies will affect the functionality of your 40JL account, including the ability to log in. 40JL does not use third-party advertising cookies or cross-site tracking pixels.
9. Data Security
Protecting your personal and financial data is a core operational priority at 40JL. The technical and organisational security measures we have in place include:
- TLS encryption for all data transmitted between your device and the 40JL platform.
- AES-256 encryption for personal data stored at rest in our databases.
- Role-based access controls that restrict employee access to personal data on a strict need-to-know basis.
- Multi-factor authentication for all internal administrative access to systems holding player data.
- Regular security audits and penetration testing of the 40JL platform and infrastructure.
- Separation of financial and personal data at the database level to minimise the impact of any single incident.
- Incident response procedures that comply with NPC breach notification requirements under RA 10173.
No system is entirely immune to risk. If you suspect that your 40JL account has been accessed without your authorisation, change your password immediately and contact support via live chat. Do not delay — early reporting significantly limits potential harm.
10. Children and Minors
The 40JL platform is strictly for persons aged 21 years and above. We do not knowingly collect personal data from anyone under the age of 21. If you are a parent or guardian and believe a minor has registered at 40JL, please contact us immediately at support@40jl.best.
Upon receiving a verified report of underage account registration, 40JL will immediately suspend the account, delete any personal data collected, and return any deposited funds to the originating payment account. We take underage access seriously and report confirmed cases to relevant authorities as required by Philippine law.
11. Cross-Border Data Transfers
Some of 40JL's service providers and infrastructure partners are located outside the Philippines. Where personal data is transferred internationally — for example, to a cloud hosting provider operating regional data centres — 40JL ensures that adequate data protection safeguards are in place, consistent with the requirements of the Philippine Data Privacy Act and the NPC's guidelines on cross-border data flows.
These safeguards include data processing agreements with equivalent privacy protection standards, contractual clauses that restrict the recipient's use of data to the specified purpose, and confirmation that the recipient jurisdiction provides an adequate level of data protection. 40JL does not transfer personal data to jurisdictions with inadequate data protection frameworks without additional safeguards in place.
12. Third-Party Links and Services
The 40JL platform does not contain links to external websites. However, if you access 40JL through a third-party referral link or use a browser extension, those third-party tools operate under their own privacy policies. 40JL is not responsible for the privacy practices of third-party services you use independently of the platform.
If you contact 40JL through a social media platform or third-party messaging service, the data you share through those channels is also subject to the privacy policy of that service provider. 40JL's privacy responsibilities begin when data is received through our own platform channels.
13. Updates to This Privacy Policy
40JL will update this Privacy Policy when there are changes to our data practices, applicable Philippine law, or our platform's functionality that affects how personal data is handled. The effective date at the top of this page reflects the current version.
For material changes — those that significantly affect your rights or how we use your data — 40JL will notify registered players via email or in-platform notification at least 14 days before the update takes effect. Continued use of the 40JL platform after the effective date of an updated policy constitutes acceptance of the revised terms.
We recommend checking this page periodically. If a change concerns you, contact our support team or Data Protection Officer for clarification before the new version takes effect.
14. Contact Us and Data Protection Officer
For any questions, concerns, or requests related to this Privacy Policy or your personal data at 40JL, contact us through the following channels:
- Email: support@40jl.best
- Data Protection Officer Email: privacy@40jl.best
- Live Chat: Available directly on the 40JL platform, 24/7 in English and Filipino.
Data subject rights requests (access, correction, deletion, portability) should be submitted in writing to privacy@40jl.best with the subject line "Data Subject Request – [Your Full Name]." Include your registered mobile number or email address for identity verification. 40JL will acknowledge your request within three business days and provide a full response within 15 business days.
If you are not satisfied with our response, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint is available on the NPC's official website.