s20jl Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how s20jl ("s20jl", "we", "us", "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you", "Player", "User") who access or use the s20jl online casino platform available at s20jl.net ("the Platform").

s20jl is committed to safeguarding the privacy and security of your personal data in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

This Policy should be read alongside the s20jl Terms & Conditions, which together govern the relationship between you and the s20jl platform. In the event of any conflict between this Policy and the Terms & Conditions regarding data privacy matters, this Policy shall prevail.

02 Data We Collect

s20jl collects the following categories of personal data from players, collected only to the extent necessary for the purposes described in this Policy:

2.1 Identity and Registration Data

• Full legal name
• Date of birth (used to verify the 21+ age requirement)
• Gender
• Nationality and country of residence
• Government-issued ID type and number (e.g., Philippine National ID, passport, driver's license)
• Profile photograph (where submitted for KYC purposes)

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including barangay, city/municipality, province, and ZIP code for Philippine residents)

2.3 Financial and Payment Data

• GCash or PayMaya mobile wallet account details
• Online banking details (BPI, BDO, Metrobank, or other supported Philippine banks)
• Deposit and withdrawal transaction histories
• Account balance and bonus credit information

s20jl does not store full bank account credentials or card numbers on our servers. Payment data is handled by our vetted payment processing partners using encrypted, tokenized methods.

2.4 Technical and Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Session timestamps and duration
• Pages visited and features used within the platform
• Game history, wagering records, and bet outcomes

2.5 Communications Data

• Records of correspondence with s20jl customer support
• Feedback, complaints, and dispute records
• Preferences for marketing communications (opt-in/opt-out status)

03 How We Collect Data

s20jl collects your personal data through the following means:

3.1 Directly from You

The majority of personal data we hold is provided directly by you during account registration, identity verification (KYC), deposit and withdrawal requests, and when you contact our support team. You are not required to provide data beyond what is necessary for account operation, but failure to provide required data may limit your ability to use certain platform features.

3.2 Automatically During Platform Use

When you access and interact with the s20jl platform, technical data — including your IP address, device identifiers, session data, and game activity — is automatically collected through server logs, cookies, and similar tracking technologies. See Section 9 for more detail on our use of cookies.

3.3 From Third-Party Verification Services

Where required for KYC and anti-money laundering compliance, s20jl may receive verification results and data flags from accredited third-party identity verification and fraud prevention services operating in the Philippines. Data received from these sources is used solely for compliance purposes and not for marketing.

3.4 From Payment Processors

Our payment processing partners — including providers facilitating GCash, PayMaya, and bank transfer transactions — may share transaction confirmation data with s20jl for the purpose of reconciling deposits and withdrawals. s20jl does not receive raw payment credentials from these partners.

04 Purpose of Processing

s20jl processes your personal data for the following specific, legitimate purposes:

s20jl will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for processing.

05 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, s20jl relies on the following lawful bases for processing your personal data:

• Contractual necessity: Processing required to fulfill the s20jl Terms & Conditions, including account management, payment processing, and game delivery;
• Legal obligation: Processing required to comply with Philippine laws and regulations, including anti-money laundering obligations, PAGCOR regulatory requirements, and NPC directives;
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your rights;
• Consent: Processing for optional purposes such as marketing communications, where you have given explicit, freely withdrawable consent.

06 Data Sharing & Disclosure

s20jl does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data may be shared with the following categories of recipients only to the extent necessary and under appropriate data protection agreements:

6.1 Service Providers

Third-party processors engaged by s20jl to provide platform-related services, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank integrations), identity verification services, cloud infrastructure providers, and customer support platforms. All service providers are bound by data processing agreements that restrict their use of your data to the services they provide to s20jl.

6.2 Regulatory and Law Enforcement Authorities

s20jl may disclose your personal data to Philippine government agencies, regulatory bodies (including PAGCOR and the AMLC), and law enforcement authorities where required by law, court order, or regulatory mandate. Such disclosures are made only to the extent required and will be logged in your account file where permissible.

6.3 Game Content Providers

Certain anonymized or aggregated gameplay data may be shared with licensed game studios — including JILI Games and other providers whose content is available on the s20jl platform — for the purposes of game performance monitoring and fair play verification. No personally identifiable information is shared with game studios without your explicit consent.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of s20jl's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified via your registered email address in advance of any such transfer, and your rights under this Policy will be maintained.

07 Data Retention

s20jl retains your personal data only for as long as necessary to fulfill the purposes outlined in this Policy, or as required by applicable Philippine law and regulation.

• Active account data: Retained for the duration of your active s20jl account plus a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• KYC and identity verification documents: Retained for five (5) years post-account closure or longer if required by regulatory directive;
• Customer support communications: Retained for three (3) years from the date of the interaction;
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier;
• Technical and usage logs: Retained for up to twelve (12) months in identifiable form, then anonymized for analytics purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with s20jl's data retention schedule.

08 Data Security

s20jl implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and s20jl servers;
• Encryption at rest for stored sensitive personal and financial data;
• Access controls and role-based permissions ensuring that only authorized s20jl personnel can access personal data, limited to what is necessary for their role;
• Regular security audits and penetration testing of platform infrastructure;
• Two-factor authentication options for player accounts;
• Firewall and intrusion detection systems monitoring platform traffic in real time.

While s20jl takes data security seriously and applies industry-standard protections, no digital platform can guarantee absolute security. You are responsible for maintaining the security of your own s20jl login credentials and for notifying us immediately at [email protected] if you suspect unauthorized access to your account.

09 Cookies & Tracking Technologies

s20jl uses cookies and similar tracking technologies to enhance your platform experience, maintain session security, and collect anonymized usage analytics. The following categories of cookies are used:

• Essential cookies: Required for the platform to function, including session management, authentication tokens, and security features. These cannot be disabled without impacting platform functionality;
• Analytics cookies: Used to collect anonymized data about how players interact with the s20jl platform, helping us identify areas for improvement. No personally identifiable information is included in analytics data;
• Preference cookies: Used to remember your platform settings, such as language preferences and display options;
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and suspicious login pattern identification.

s20jl does not use third-party advertising or tracking cookies. You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may prevent certain features of the s20jl platform from functioning correctly.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by s20jl:

To exercise any of the above rights, contact the s20jl Data Protection Officer at [email protected] with your request and sufficient information to verify your identity. s20jl will respond within the timeframes prescribed under Philippine law.

11 Minors

The s20jl platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine regulations governing casino-style online gambling. s20jl does not knowingly collect personal data from anyone under the age of 21.

If s20jl becomes aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete or anonymize the collected data as required, and report the matter in accordance with applicable Philippine law. If you believe that a minor has registered on the s20jl platform, please contact us at [email protected] immediately.

12 Cross-Border Data Transfers

s20jl primarily processes and stores personal data on servers located within or accessible from the Philippines. In limited circumstances, data may be processed by service providers operating in other jurisdictions — for example, cloud infrastructure providers or specialist fraud detection services.

Where personal data is transferred outside the Philippines, s20jl ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. This may include contractual clauses, data processing agreements, or confirmation that the recipient country provides an adequate level of data protection as recognized by the NPC.

13 Changes to This Policy

s20jl reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable Philippine law and regulation. When material changes are made, we will notify registered players via the email address on file or through a prominent notice on the s20jl platform prior to the changes taking effect.

The "Last updated" date at the top of this page reflects when the Policy was most recently revised. We encourage you to review this Policy periodically to remain informed of how s20jl protects your personal data. Your continued use of the platform following notification of any changes constitutes acceptance of the updated Policy.

14 Contact & Data Protection Officer

s20jl has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests related to this Privacy Policy or the handling of your personal data, please contact us:

• Data Protection Officer, s20jl
• Email: [email protected]
• Platform: s20jl.net
• Operating jurisdiction: Philippines

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.