This Privacy Policy applies to all personal data collected by JL Ace ("we", "us", "our") through jlace.best and any related mobile or desktop applications. It is written in plain language so every Filipino player can understand exactly how their information is handled. If anything here is unclear, please contact our Data Protection Officer before using the platform.
Introduction
JL Ace takes the privacy of every Filipino player seriously. When you create an account, make a deposit, play a hand of Tongits, or contact our support team, you share information with us. We understand that trust — and we treat your data accordingly.
This Privacy Policy was written to comply with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines. It explains in clear terms what personal data JL Ace collects, why we collect it, how long we keep it, who we share it with, and the rights you have as a data subject under Philippine law.
By registering an account on jlace.best, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read alongside our Terms and Conditions.
Personal Data We Collect
JL Ace collects only the personal data necessary to provide you with a safe, compliant, and functional gaming experience. We do not collect data that we don't need. Below is a full breakdown of what we collect and why.
| Category | Data Collected | Purpose |
|---|---|---|
| Identity | Full legal name, date of birth, government ID type and number | Age verification, KYC compliance, fraud prevention |
| Contact | Philippine mobile number, email address | Account creation, OTP verification, support communications |
| Financial | GCash number, Maya account, bank account name/number, transaction records | Deposit processing, withdrawal verification, AML compliance |
| Usage | Game history, bet amounts, session duration, login times, device type | Account management, responsible gaming monitoring, fraud detection |
| Technical | IP address, browser type, device identifier, operating system | Security, geolocation compliance, platform optimisation |
| Communications | Support chat transcripts, email correspondence | Customer support, dispute resolution, quality assurance |
We do not collect sensitive personal data such as religious beliefs, political affiliations, or health records. Financial data related to your JL Ace account transactions is collected under our legal obligation as a licensed gaming operator and is handled with additional security measures.
- Data is collected directly from you during registration and account use — we do not buy data lists or obtain your information from third-party data brokers.
- Identity documents submitted during KYC verification are stored in an encrypted document management system with restricted access.
- Financial data is processed through certified payment gateways and is not stored in raw form on JL Ace's main application servers.
How JL Ace Uses Your Personal Data
Every piece of data JL Ace collects has a specific, documented purpose. We do not use your data for anything beyond what is described in this policy. Here is a full account of how your information is used:
- Account creation and management. Your name, contact details, and date of birth are used to create and maintain your JL Ace account, verify your identity, and manage your session securely.
- Payment processing. Financial data is used to process GCash, Maya, and bank deposits and withdrawals, verify that payments originate from accounts in your name, and maintain transaction records as required by Philippine gaming and anti-money laundering regulations.
- Identity verification (KYC). Government ID details are used to verify that you are who you say you are, that you meet the 21+ age requirement, and that you are a Philippine resident eligible to hold a JL Ace account.
- Fraud and security monitoring. IP addresses, device identifiers, login patterns, and game activity are monitored to detect unusual behaviour, prevent unauthorised access, identify multi-account violations, and flag potential money laundering activity.
- Responsible gaming. Game history, session duration, and betting patterns are reviewed to identify players who may be showing signs of problem gambling — enabling us to trigger responsible gaming interventions where appropriate.
- Customer support. Contact details and communication history are used to handle your support inquiries, resolve disputes, and follow up on open issues.
- Platform improvement. Anonymised, aggregated usage data helps us understand how the platform is used, identify technical issues, and improve the JL Ace experience for all Filipino players.
- Marketing communications. If you have opted in, your email and mobile number may be used to send you information about bonuses, promotions, and new game features at JL Ace. You can opt out at any time via your account settings or by replying STOP to any SMS.
DPA 2012 Compliant
JL Ace processes all player data in compliance with Republic Act 10173. Our Data Protection Officer oversees all data handling practices and responds to NPC inquiries.
No Data Selling — Ever
Your personal information is never sold to data brokers, advertisers, or third-party gaming platforms. What you share with JL Ace stays with JL Ace.
End-to-End Encryption
All data transmitted between your device and JL Ace servers is encrypted via TLS. Personal data stored on our servers is encrypted at rest using AES-256 standards.
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, every processing activity must have a lawful basis. JL Ace relies on the following legal grounds:
- Consent. For marketing communications and optional data uses, we rely on your explicit consent given at registration or at the point of opt-in. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- Contractual necessity. Processing your identity, contact, and financial data is necessary to create and maintain your account, process payments, and fulfil the services described in our Terms and Conditions.
- Legal obligation. As a licensed gaming operator in the Philippines, JL Ace is required by law to collect and retain certain personal and financial data for KYC, Anti-Money Laundering (AML), and regulatory reporting purposes.
- Legitimate interests. We process device identifiers, IP addresses, and usage patterns to protect the security and integrity of the platform — preventing fraud, detecting multi-accounting, and ensuring fair play for all registered players.
Data Sharing — Who We Share Your Data With
JL Ace does not share your personal data with third parties for commercial or advertising purposes. We share data only where strictly necessary and only with the following categories of recipients:
- Payment processors. GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and Visa/Mastercard card processors receive only the data necessary to complete your transaction. These providers are subject to their own data protection obligations under Philippine law.
- KYC and identity verification providers. When you submit identity documents, a certified verification service processes them to confirm authenticity. These providers act as data processors under a data processing agreement with JL Ace and may not use your data for their own purposes.
- Regulatory and law enforcement authorities. As a licensed gaming operator, JL Ace is obligated to report certain activity to Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), and law enforcement agencies when required by law or court order.
- Technical service providers. Cloud hosting, security monitoring, and customer support platform providers may process your data as part of delivering the JL Ace service. All such providers are subject to contractual data protection obligations and may not use your data independently.
- Business transfers. In the event of a merger, acquisition, or sale of JL Ace, your personal data may be transferred to the acquiring entity. You will be notified before any such transfer takes effect and given the option to close your account if you do not consent to the transfer.
Data Processing Agreements: Every third party that handles JL Ace player data is required to sign a data processing agreement that limits their use of your data to the specific purpose for which it was shared, and that commits them to equivalent data protection standards. JL Ace maintains a register of all active data processing agreements, available to the NPC on request.
Cookies & Tracking Technologies
JL Ace uses cookies and similar technologies on jlace.best to make the platform work correctly and to understand how it is being used. Here is a plain-language breakdown of the cookies we use:
| Cookie Type | Purpose | Duration | Can Be Disabled? |
|---|---|---|---|
| Essential | Login sessions, security tokens, account state | Session / 30 days | No — required for the platform to function |
| Functional | Language preference, game settings, last-used payment method | 90 days | Yes — via browser settings |
| Analytical | Anonymised usage data, page load times, error tracking | 12 months | Yes — via cookie consent settings |
| Security | Fraud detection, bot prevention, device fingerprinting | Session | No — required for platform security |
JL Ace does not use advertising cookies and does not participate in cross-site tracking or retargeting networks. You can manage non-essential cookies through your browser settings. Disabling essential or security cookies may prevent you from accessing your JL Ace account.
How Long We Keep Your Data
JL Ace retains personal data only for as long as necessary for the purpose it was collected, or as required by Philippine law. Our retention schedule is as follows:
- Active accounts: Personal data is retained for the duration of your account plus a minimum post-closure period as required by Philippine AML and gaming regulations.
- Transaction records: Financial transaction data is retained for a minimum of 5 years from the date of the transaction, as required under the Anti-Money Laundering Act of 2001 and its amendments.
- KYC documents: Identity verification documents are retained for 5 years following account closure or 5 years from the date of the last transaction, whichever is later.
- Support communications: Chat and email records are retained for 2 years from the date of the communication, to support dispute resolution.
- Anonymised analytics: Usage data that has been fully anonymised (where re-identification is not possible) may be retained indefinitely for platform improvement purposes.
When data is no longer required and its retention period has expired, JL Ace securely destroys it using industry-standard data deletion methods.
Data Security
JL Ace invests significantly in the technical and organisational measures that protect your personal data. No online platform can guarantee zero risk — but here is exactly what we do to protect your information:
Encrypted Infrastructure
All data in transit uses TLS 1.3 encryption. Data at rest — including your personal and financial records — is encrypted using AES-256, the same standard used by Philippine banks.
Access Controls
JL Ace staff access to personal data is strictly limited on a need-to-know basis. All data access is logged and audited. Privileged access requires multi-factor authentication.
Vulnerability Testing
The JL Ace platform undergoes regular penetration testing and vulnerability assessments by independent cybersecurity specialists. Critical issues are patched within 24 hours of discovery.
Breach Response
In the unlikely event of a data breach, JL Ace will notify affected players and the National Privacy Commission within 72 hours of confirmation, as required under the DPA 2012 and NPC regulations.
Your Data Rights Under Philippine Law
Under the Data Privacy Act of 2012, you have the following rights as a data subject. JL Ace is committed to honouring each of these rights promptly and without unnecessary conditions:
Right to Access
You can request a copy of the personal data JL Ace holds about you at any time. We will provide this within 15 business days of your verified request, free of charge for the first request per year.
Right to Rectification
If any personal data JL Ace holds about you is inaccurate or incomplete, you can request that it be corrected. Updates to contact details and address can be made directly from your account settings.
Right to Erasure
You may request deletion of your personal data when it is no longer necessary for its original purpose, subject to our legal retention obligations under Philippine AML and gaming regulations.
Right to Object
You have the right to object to the processing of your personal data for marketing purposes at any time. Opt-out requests are processed immediately and take effect within 24 hours.
Right to Data Portability
You can request your personal data in a structured, commonly used, and machine-readable format for transfer to another service provider, where technically feasible.
Right to Complain
If you believe JL Ace has handled your personal data unlawfully, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).
To exercise any of these rights, contact our Data Protection Officer at support@jlace.best with the subject line "Data Rights Request". Please include your registered mobile number or email address for identity verification. We will acknowledge your request within 48 hours and fulfil it within 15 business days.
Children's Privacy
JL Ace does not knowingly collect personal data from anyone under 21 years of age. The platform is strictly for adults. Age verification is mandatory during account registration and is enforced without exception.
If we become aware that personal data has been collected from a person under 21, we will immediately delete all associated data and close the account. If you believe a minor has created a JL Ace account, please contact our support team immediately so we can take action.
Parents and guardians who are concerned about a minor accessing the platform are encouraged to use parental control software on shared devices and to contact JL Ace support if they have specific concerns.
Third-Party Links
jlace.best may contain links to third-party websites, payment portals, or services. This Privacy Policy applies only to jlace.best and the JL Ace platform. When you leave our platform — for example, by being redirected to your GCash app or bank's online portal to complete a transaction — you are subject to the privacy policy of that third-party service, not ours.
JL Ace is not responsible for the privacy practices of any third-party services linked from our platform. We recommend reviewing the privacy policy of any service you use to complete transactions or communications outside of jlace.best.
Changes to This Privacy Policy
JL Ace may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players by:
- Sending an email notification to your registered email address at least 7 days before changes take effect.
- Displaying a notice on your JL Ace account dashboard on your next login after the change is published.
- Updating the "Last Updated" date at the top of this page.
Continued use of JL Ace after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the changes, you may close your account before the effective date by contacting our support team.
Contact Us & Data Protection Officer
JL Ace has appointed a Data Protection Officer (DPO) responsible for overseeing all data privacy compliance and handling player data rights requests. If you have any question about this Privacy Policy, want to exercise your data rights, or want to report a privacy concern, please reach us through any of the following:
- Email (DPO): support@jlace.best — Subject line: "Privacy / Data Rights Request"
- Live Chat: Available 24/7 from jlace.best — ask to speak with the data privacy team
- Response time: Acknowledgement within 48 hours; full response within 15 business days
If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at privacy.gov.ph.