Privacy Policy — jluu
Your privacy matters to us. This Privacy Policy explains exactly how jluu collects, uses, stores, and protects your personal information when you use our online casino and sports betting platform in the Philippines.
- 1. Introduction
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Data Sharing & Disclosure
- 6. Cookies & Tracking
- 7. Data Retention
- 8. Data Security
- 9. Your Rights
- 10. Children's Privacy
- 11. International Transfers
- 12. Third-Party Services
- 13. Policy Updates
- 14. Contact & DPO
This Privacy Policy ("Policy") is published by jluu ("jluu", "we", "us", "our") and applies to all personal information collected from users ("you", "Player", "User") who access or interact with the jluu website at jluu.net and all associated services, mobile-accessible features, promotional programs, and customer support channels (collectively, the "Platform").
jluu is committed to protecting the privacy and personal data of every Filipino player who trusts us with their information. We handle your data in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). Where applicable, we also align with internationally recognized data protection standards.
By registering an account, accessing the Platform, or otherwise providing your personal information to jluu, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately and contact our support team to request account closure.
jluu collects personal data that is necessary to provide you with a safe, compliant, and fully functional online gaming experience. The categories of personal data we collect include, but are not limited to, the following:
| Category | Examples | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number, selfie/photo for identity verification | Provided by you during registration and KYC |
| Contact Data | Email address, mobile number, residential address (city, province, region) | Provided by you during registration or profile updates |
| Financial Data | GCash number, Maya account reference, bank account name and last digits, deposit/withdrawal transaction history | Provided by you during Cashier transactions |
| Gaming Activity Data | Game history, wager amounts, win/loss records, session duration, bonus usage, VIP tier status | Automatically generated by Platform activity |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone | Automatically collected via cookies and server logs |
| Usage Data | Pages visited, features used, clicks, navigation paths, referral source, session timestamps | Automatically collected via analytics tools |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions, dispute records | Generated through your interactions with our support team |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, cooling-off elections, session reminder configurations | Provided by you through account settings or support |
We do not collect data that is unnecessary for the purposes described in this Policy. You are not required to submit all categories of data to access the Platform, but failure to provide required data (such as KYC identity documents) may limit your ability to complete certain actions, including withdrawals.
jluu processes your personal data only for specific, legitimate purposes that are directly connected to the operation of a compliant and player-first online gaming platform. We do not use your data for purposes incompatible with those described here without first obtaining your consent or establishing an alternative lawful basis for processing.
The primary purposes for which jluu uses your personal data are:
- Account Creation & Authentication: To register your jluu account, verify your identity, and authenticate your sessions securely.
- KYC & Age Verification: To verify that you meet the minimum age requirement of 21 years and to confirm your identity in accordance with PAGCOR-compliant standards.
- Payment Processing: To facilitate deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, and other supported Philippine payment channels.
- Game Delivery & Platform Operation: To run the games you play, record game results, calculate winnings, apply bonuses, and maintain your account balance accurately.
- Fraud Prevention & AML Compliance: To detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited behaviors on the Platform.
- Customer Support: To respond to your inquiries, resolve disputes, process complaints, and maintain records of support interactions for quality assurance.
- Responsible Gaming: To administer self-exclusion requests, deposit limits, cooling-off periods, and session reminders that you configure through your account settings.
- Regulatory Reporting: To fulfil reporting obligations to PAGCOR and other applicable Philippine regulatory and law enforcement authorities where required by law.
- Marketing Communications (with consent): To send you promotional offers, bonus notifications, VIP program updates, and news about jluu — only where you have opted in to receive such communications.
- Platform Improvement: To analyze usage patterns, identify technical issues, and improve the design, performance, and game selection of the Platform based on aggregated behavioral data.
Under the Philippine Data Privacy Act of 2012, jluu is required to identify a lawful basis for each category of personal data processing. The following table summarizes the primary lawful bases on which jluu relies:
| Processing Purpose | Lawful Basis |
|---|---|
| Account registration and authentication | Performance of a contract (your registration agreement with jluu) |
| KYC and age verification | Legal obligation (PAGCOR-compliant regulatory requirements) |
| Payment processing and transaction records | Performance of a contract; Legal obligation (financial record-keeping) |
| Fraud prevention and AML screening | Legitimate interest; Legal obligation (anti-money laundering regulations) |
| Customer support and dispute resolution | Performance of a contract; Legitimate interest |
| Responsible gaming tool administration | Legitimate interest; Legal obligation (player protection standards) |
| Regulatory reporting | Legal obligation |
| Marketing communications | Consent (opt-in only) |
| Platform analytics and improvement | Legitimate interest (using anonymized/aggregated data where possible) |
Where jluu relies on legitimate interest as a lawful basis, we have conducted an assessment to ensure that our legitimate interests are not overridden by your rights and interests. You may request a summary of these assessments by contacting our Data Protection Officer (DPO) at the details provided in Section 14.
jluu does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is shared only with the categories of recipients described below, and only to the extent necessary for the stated purpose.
- Payment Service Providers: GCash (GXI), Maya (Voyager Innovations), InstaPay network participants, BPI, BDO, Metrobank, and other Philippine payment processors — solely to process your deposit and withdrawal transactions.
- Game Content Providers: Third-party game studios and live dealer platform providers whose games are available on jluu — limited to the gaming session data required to run the games and validate results.
- KYC & Identity Verification Partners: Accredited identity verification service providers who assist jluu in verifying government-issued ID documents and conducting liveness checks.
- Fraud Detection & Risk Management Tools: Third-party fraud screening and AML compliance platforms that analyze transaction patterns and flag suspicious activity.
- Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies — where disclosure is required by law, court order, or regulatory directive.
- IT Infrastructure & Cloud Service Providers: Hosting, database, and cloud infrastructure vendors that provide the technical backbone of the jluu Platform, operating under strict data processing agreements.
- Professional Advisers: Legal counsel, auditors, and compliance consultants — subject to professional confidentiality obligations — where their services require access to relevant data.
jluu uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device by a website server. Cookies help us recognize you across sessions, remember your preferences, detect fraud, and analyze how the Platform is used.
The categories of cookies used on jluu.net are as follows:
- Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality.
- Functional Cookies: Used to remember your preferences, such as language settings, display options, and responsible gaming configurations. Disabling these may reduce the quality of your experience.
- Analytics Cookies: Allow us to understand how users interact with the Platform — which pages are most visited, where users encounter errors, and how navigation flows are used. Data collected is aggregated and anonymized where possible.
- Fraud Prevention Cookies: Help us detect and prevent fraudulent sessions, bot traffic, and unauthorized access attempts by fingerprinting device and browser characteristics.
jluu does not use cookies to serve third-party advertising on behalf of external advertisers, and we do not participate in cross-site advertising networks that track your activity across unrelated websites.
jluu retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by Philippine law and applicable regulatory frameworks. The general retention schedule is as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration and identity data | Duration of account + 5 years post-closure | Legal obligation (AML, PAGCOR compliance) |
| KYC verification documents | Duration of account + 5 years post-closure | Legal obligation |
| Financial transaction records | 10 years from transaction date | Legal obligation (AMLC reporting requirements) |
| Gaming activity history | Duration of account + 3 years post-closure | Legitimate interest (dispute resolution) |
| Customer support communications | 3 years from last interaction | Legitimate interest (dispute resolution, quality) |
| Marketing consent records | Until consent is withdrawn + 2 years | Legal obligation (proof of consent) |
| Self-exclusion records | Duration of exclusion + 5 years | Legal obligation (responsible gaming compliance) |
| Server logs and technical data | 13 months from collection | Legitimate interest (security, fraud prevention) |
When your data is no longer required for any of the above purposes, jluu will securely delete or anonymize it in accordance with our internal data disposal procedures. Anonymized data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.
jluu implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss. Our security framework includes:
- 256-bit SSL/TLS Encryption: All data transmitted between your browser and jluu's servers is encrypted using industry-standard TLS protocols, ensuring that your login credentials, payment details, and personal information cannot be intercepted in transit.
- Encryption at Rest: Sensitive personal data stored in jluu's databases — including KYC documents, financial records, and authentication credentials — is encrypted at rest using AES-256 or equivalent standards.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. jluu staff access to player data is role-based, logged, and subject to regular access review audits.
- Two-Factor Authentication (2FA): All internal administrative systems require multi-factor authentication. Players are also strongly encouraged to enable 2FA on their jluu accounts.
- Intrusion Detection & Monitoring: jluu's infrastructure is monitored continuously for anomalous activity, unauthorized access attempts, and potential security threats using automated detection systems.
- Penetration Testing: jluu conducts periodic third-party penetration testing and security audits to identify and remediate vulnerabilities before they can be exploited.
- Staff Training: All jluu personnel who handle personal data receive regular data protection and security awareness training as part of their onboarding and ongoing professional development.
Despite the extensive security measures jluu employs, no digital platform can guarantee absolute security against all threats. You also play a role in protecting your account — please refer to Section 3 of our Terms & Conditions for your account security responsibilities.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jluu. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.
- Right to Be Informed: You have the right to be informed that your personal data is being or will be collected and processed, the purposes of such processing, and the identity of the data controller (jluu).
- Right of Access: You have the right to obtain a copy of the personal data we hold about you, along with information about how it is used, where it is stored, and with whom it has been shared.
- Right to Rectification: You have the right to request the correction of inaccurate or incomplete personal data. You may update most of your profile information directly through your jluu account dashboard.
- Right to Erasure (Right to be Forgotten): You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jluu's legal retention obligations.
- Right to Data Portability: Where technically feasible and where processing is carried out by automated means, you may request a copy of your data in a structured, commonly used, and machine-readable format.
- Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, subject to jluu's right to demonstrate compelling legitimate grounds.
- Right to File a Complaint: If you believe jluu has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
Please note that certain rights may be limited where processing is required to comply with a legal obligation, to perform a contract with you, or to protect the vital interests of another person. jluu will explain any such limitations clearly when responding to your request.
If jluu discovers or has reasonable cause to believe that personal data has been collected from a person under the age of 21, we will immediately:
- Suspend the account associated with the underage individual pending investigation.
- Delete all personal data associated with the underage account in accordance with our data disposal procedures.
- Void and forfeit all wagers, bonuses, and winnings associated with the account.
- Refund the net deposit balance (deposits minus withdrawals) to the payment method used, where this is legally and technically feasible.
If you are a parent or guardian and believe that a minor has accessed jluu using your account or has otherwise created a jluu account, please contact our support team immediately at so we can take appropriate action without delay.
jluu primarily stores and processes personal data on servers located within or serving the Philippine region. However, in the course of operating the Platform and engaging third-party service providers — including game content providers, cloud infrastructure vendors, and fraud detection platforms — your personal data may be transferred to, stored in, or processed in countries outside the Philippines.
Where such international transfers occur, jluu ensures that appropriate safeguards are in place to protect your data to a standard consistent with the Philippine Data Privacy Act, including:
- Binding contractual clauses in Data Processing Agreements with overseas processors that impose data protection obligations equivalent to those under Philippine law.
- Transfers to countries or entities that the National Privacy Commission has recognized as providing an adequate level of data protection.
- Where required, obtaining your consent prior to the transfer of sensitive personal information to an overseas processor.
You may request details of the specific safeguards applied to any international transfer of your personal data by contacting our Data Protection Officer at the contact details in Section 14.
The jluu Platform integrates with third-party game providers, payment processors, and service platforms whose privacy practices are governed by their own separate privacy policies. While jluu applies contractual data protection obligations to all third-party processors (as described in Section 5), each provider's own privacy policy governs their independent data collection practices outside of their processing activities on jluu's behalf.
jluu is not responsible for the privacy practices of third-party websites or services that may be referenced in our communications. We recommend that you review the privacy policies of any third-party service you interact with independently. If you believe a third-party integration has handled your data in a manner inconsistent with what was described to you, please contact our DPO and we will investigate and liaise with the relevant provider on your behalf.
jluu reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance from the National Privacy Commission, or the structure and features of the Platform.
When material changes are made to this Policy, jluu will notify registered players by:
- Sending an email notification to the address registered on your account; and/or
- Displaying a prominent notice on the Platform upon your next login session.
The "Last Updated" date at the top of this page will be revised to reflect the effective date of the most recent changes. We encourage you to review this Policy periodically to stay informed about how jluu protects your personal data. Your continued use of the Platform following notification of any changes constitutes your acceptance of the revised Policy.
If you disagree with any changes to this Policy, please contact our support team to discuss your options, including account closure and data deletion requests.
jluu has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, you may contact the jluu DPO through the following channel:
Email: (Subject: "Data Privacy / DPO Request")
Availability: Monday to Sunday, 9:00 AM – 9:00 PM Philippine Standard Time (PST)
Acknowledgment: Within 5 business days of receipt
Substantive Response: Within 30 calendar days
For general player support inquiries unrelated to data privacy, our 24/7 support team is also reachable at .
If you are not satisfied with jluu's response to your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available through official Philippine government channels.
How jluu Protects Your Privacy
Six core commitments we make to every Filipino player who trusts jluu with their personal data.
Every connection between your device and jluu's servers is protected by industry-standard TLS encryption. Your login credentials, payment details, and personal data are never transmitted in plain text.
jluu enforces a mandatory 21+ age check and full KYC verification on all accounts. No withdrawals are processed without confirmed identity — protecting both you and the integrity of the Platform.
Sensitive records — including KYC documents and financial transaction data — are stored using AES-256 encryption. Even if a storage breach occurred, your data would remain unreadable without the decryption keys.
jluu does not sell, rent, or trade your personal data to third-party advertisers or data brokers. Your information is shared only with service providers essential to running the Platform — and only under strict contractual obligations.
All data processing at jluu is governed by the Philippine Data Privacy Act of 2012. We maintain a registered Data Protection Officer (DPO) and conduct regular compliance reviews aligned with NPC guidelines.
Access, correct, delete, or export your data anytime. jluu honors all data subject rights under the DPA — including the right to erasure and data portability — with responses guaranteed within 30 days of your request.
Your Data Is Safe — Now Enjoy the Game
Now that you know exactly how jluu protects your privacy, it's time to experience the Philippines' fastest-cashout online casino. Slots, live dealer, bingo, sabong, and sports betting — all in one place.