jb88 Privacy Policy

This Privacy Policy applies to all personal data collected and processed by jb88 ("we", "us", "our") in connection with your use of the jb88 website located at https://jb88.vu, its subdomains, mobile applications, and any other digital products or services operated under the jb88 brand (collectively, the "Platform").

This Policy applies to all categories of data subjects whose personal information jb88 processes, including registered account holders, prospective players who browse the Platform without registering, customer support contacts, and any other individuals who interact with jb88 in connection with its services.

This Privacy Policy should be read alongside jb88's Terms and Conditions and Responsible Gaming Policy. Together, these three documents form the complete framework governing your relationship with jb88. In the event of any conflict between this Policy and jb88's Terms and Conditions, the Terms and Conditions shall prevail except in matters exclusively concerning personal data protection, where this Privacy Policy controls.

jb88 acts as the Data Controller for all personal data collected through the Platform. As Data Controller, jb88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with the Philippines' Data Privacy Act of 2012 (RA 10173) and the National Privacy Commission's (NPC) implementing rules.

jb88 has designated a Data Protection Officer (DPO) responsible for overseeing jb88's data protection compliance programme. You may contact the DPO directly for any privacy-related concerns at [email protected], with the subject line "Data Protection Officer — Privacy Inquiry".

jb88 collects personal data through several channels: directly from you when you register or use the Platform, automatically through technical systems as you interact with the Platform, and in limited circumstances from third-party sources such as payment processors and identity verification providers.

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify 21+ age requirement)
• Nationality and country of residence
• Registered email address and mobile number
• Residential address in the Philippines (barangay, city, province)
• Username and encrypted password

• Scanned or photographed copies of government-issued IDs (PSA National ID, passport, LTO Driver's License, UMID, PRC ID, or COMELEC Voter's ID)
• Selfie or facial photograph submitted for identity matching purposes
• Source of funds declarations where required by AMLA regulations
• Proof of address documents (utility bills, bank statements dated within 90 days)

• GCash mobile number, Maya account reference, or bank account details used for deposits and withdrawals
• Deposit amounts, timestamps, and payment channel used
• Withdrawal requests, amounts, and processing status
• Full transaction history on the jb88 Platform
• Bonus claims, wagering activity, and promotional participation records

• IP address and approximate geolocation derived from IP
• Device type, operating system, browser type, and version
• Session duration, pages visited, and features used
• Cookies and similar tracking identifiers (see Section 7)
• Referral source and marketing channel attribution data

• Live chat transcripts and support ticket correspondence
• Email communications sent to or received from jb88
• Feedback, survey responses, and promotional opt-in records

jb88 uses the personal data we collect for the following specific, legitimate purposes. We do not use your data for any purpose incompatible with the purposes stated below without obtaining your separate consent or without a legal basis for doing so.

jb88 does not use your personal data to make fully automated decisions that produce significant legal effects on you without human review. Where automated systems flag an account for investigation (e.g., fraud detection), a qualified jb88 compliance officer reviews the flag before any action is taken on your account.

Under the Philippines' Data Privacy Act of 2012 (RA 10173), jb88 processes personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations to you under the jb88 Terms and Conditions — including account setup, payment processing, and customer support.
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR regulatory requirements, AMLA obligations, tax reporting, and NPC directives.
• Legitimate Interests: Processing necessary for jb88's legitimate business interests, including fraud prevention, platform security, and aggregate analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes such as direct marketing communications, where you have provided clear, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jb88 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances and only to the extent necessary for each purpose:

jb88 engages third-party companies that process personal data on our behalf under written data processing agreements. These include:

• Payment processors and e-wallet providers (GCash, Maya, BDO, BPI, Metrobank, and similar) for deposit and withdrawal facilitation
• KYC and identity verification service providers
• Cloud hosting and infrastructure providers who store Platform data on secure servers
• Fraud detection and anti-money laundering screening providers
• Customer support software providers
• Email and SMS communication platforms for account notifications

All service providers are contractually bound to process your data only on jb88's documented instructions, to maintain appropriate security standards, and to delete or return data upon termination of the service relationship.

jb88 will disclose personal data to regulatory authorities, law enforcement, and government bodies when required by applicable Philippine law, valid legal process, PAGCOR regulatory directive, or NPC order. This includes mandatory reporting under the AMLA and its implementing rules administered by the Anti-Money Laundering Council (AMLC).

In the event of a merger, acquisition, or sale of jb88 assets, your personal data may be transferred to the successor entity. We will provide reasonable advance notice of any such transfer and the successor entity will be bound by the terms of this Privacy Policy or a substantially equivalent policy.

The jb88 Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to maintain your logged-in session, and to understand how players interact with the site so we can continuously improve the experience.

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred currency display, and game lobby layout choices to personalise your experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate the Platform — pages visited, features used, session length, and error events. This data informs Platform development decisions.
• Marketing Cookies: Used only where you have given consent, to attribute your registration to a specific marketing channel and to avoid showing you irrelevant promotions.

You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the jb88 Platform. Disabling analytics or marketing cookies will not affect your ability to play or transact on jb88.

jb88 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to legal, regulatory, and operational retention requirements. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted or irreversibly anonymised such that it can no longer be associated with any individual. Anonymised aggregate data may be retained indefinitely for statistical and research purposes.

jb88 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures are reviewed and updated regularly in line with industry best practices and regulatory guidance from the National Privacy Commission.

• Encryption: All data transmitted between your device and the jb88 Platform is protected by TLS 1.2 or higher encryption. Sensitive data at rest, including KYC documents and financial records, is encrypted using AES-256 or equivalent standards.
• Access Controls: Personal data is accessible only to jb88 personnel with a documented need-to-know. Role-based access controls, multi-factor authentication, and activity logging are enforced on all internal systems.
• Infrastructure Security: jb88's Platform is hosted in data centres with ISO 27001 certification, physical access controls, redundant power, and continuous environmental monitoring.
• Penetration Testing: jb88 commissions independent security assessments and penetration tests on a regular basis to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, jb88 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay where required by the DPA and NPC Circular 16-03.

Despite these measures, no online system can guarantee absolute security. You are responsible for maintaining the security of your own jb88 account credentials and for notifying us immediately at [email protected] if you suspect any unauthorised access to your account.

As a data subject under the Philippines' Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jb88. These rights may be subject to certain legal limitations where processing is required by law or for the establishment, exercise, or defence of legal claims.

• Right to Be Informed: You have the right to be told what personal data jb88 collects about you, the purposes for which it is processed, and who it may be shared with. This Privacy Policy fulfils that obligation.
• Right to Access: You may request a copy of the personal data jb88 holds about you at any time. We will provide this within 15 business days of a verified request.
• Right to Rectification: If your personal data is inaccurate, incomplete, or outdated, you have the right to request correction. You may update most profile information directly within your jb88 account settings; KYC corrections require document resubmission.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data where it is no longer necessary for the original purpose, where you have withdrawn consent, or where processing was unlawful. This right is subject to overriding legal retention obligations, particularly under AMLA and PAGCOR regulations.
• Right to Data Portability: You may request your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider.
• Right to Object: You may object to processing based on legitimate interests, including for direct marketing purposes. An objection to marketing will be honoured immediately and unconditionally.
• Right to File a Complaint: If you believe your data rights have been violated, you may file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.

To exercise any of these rights, contact jb88's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request". We may ask you to verify your identity before processing your request. We will not charge a fee for reasonable requests.

jb88 services are strictly restricted to individuals aged 21 years and above, in accordance with Philippine gaming regulations administered by PAGCOR. The Platform is not directed at, marketed to, or intended for use by individuals below the age of 21.

jb88 does not knowingly collect personal data from individuals under 21 years of age. Age verification is a mandatory component of the KYC process, and any account where the holder is found to be under 21 will be immediately suspended and all associated personal data will be flagged for deletion subject to any mandatory regulatory reporting obligations.

Some of jb88's service providers and technology partners operate servers or processing infrastructure outside the Philippines. Where your personal data is transferred to a country outside the Philippines, jb88 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required by the Philippine Data Privacy Act.

These safeguards may include:

• Contractual clauses between jb88 and the recipient that require the recipient to protect the data to Philippine DPA standards
• Transfers to jurisdictions recognised by the NPC as providing an adequate level of data protection
• Binding corporate rules where transfers occur within a corporate group

You may request information about the specific safeguards applicable to a cross-border transfer of your data by contacting jb88's Data Protection Officer.

jb88 reviews this Privacy Policy on a regular basis and will update it when necessary to reflect changes in our data processing practices, applicable law, regulatory guidance from the NPC, or changes to the jb88 Platform and its features.

When we make material changes to this Privacy Policy, we will notify registered jb88 account holders via the email address associated with their account and/or via a prominent notice on the Platform at least seven (7) days before the changes take effect. The "Effective Date" at the top of this Policy reflects when the current version came into force.

Your continued use of the jb88 Platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with a revised Policy, you should stop using the Platform and may request account closure in accordance with jb88's Terms and Conditions.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about how jb88 handles your personal data, please contact us through the following channels:

• Data Protection Officer Email: [email protected] — use subject line "DPO Privacy Inquiry" for fastest routing to the privacy team.
• Live Chat: Available 24/7 on the jb88 Platform. Filipino-speaking agents can assist with basic privacy queries and route complex requests to the DPO.

If you are not satisfied with jb88's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC), the supervisory authority for data protection in the Philippines. The NPC can be reached through its official website at privacy.gov.ph. jb88 cooperates fully with all NPC-initiated investigations and will provide requested documentation within the statutory timeframes.