This Privacy Policy explains how 40jl collects, uses, stores, and protects your personal information in accordance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and applicable PAGCOR regulatory requirements.
This Privacy Policy ("Policy") governs the collection, use, storage, disclosure, and protection of personal data by 40jl in connection with the operation of the gaming platform accessible at 40jl.vip and all related services (collectively, the "Platform"). It applies to all registered players, prospective registrants, and visitors to the 40jl website, wherever located in the Philippines.
40jl operates as a Philippine-focused online casino and sportsbook under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). As an operator handling real-money transactions and identity-verified player accounts, 40jl is both a data controller and a regulated gaming entity with obligations under the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable PAGCOR data governance requirements.
By registering an account on 40jl, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not use the Platform.
For the purposes of the Philippine Data Privacy Act of 2012, 40jl is the personal information controller responsible for the personal data of players and users of the Platform. "Personal information controller" means a natural or juridical person, or any other body who controls the collection, holding, processing, or use of personal information.
All enquiries, access requests, correction requests, or complaints relating to the processing of personal data under this Policy should be directed to the 40jl Data Protection Officer (DPO). Contact details for the DPO are provided in Section 16 of this Policy.
40jl collects personal data across several categories, depending on the nature of your interaction with the Platform:
40jl collects personal data through the following channels:
| Source | Data Collected |
|---|---|
| Registration Form | Name, date of birth, mobile number, email, address |
| KYC Submission | Government ID scans, selfie photos, proof of address |
| Payment Transactions | GCash/Maya numbers, bank details, transaction records |
| Platform Usage | IP address, device info, browser logs, session data, bet history |
| Cookies & Tracking | Session identifiers, preference cookies, analytics data |
| Support Interactions | Chat transcripts, emails, support ticket content |
| Third-Party Providers | Identity verification results, payment processor confirmations |
| PAGCOR Compliance Requests | Regulatory data requirements submitted by PAGCOR or law enforcement |
Under the Philippine Data Privacy Act of 2012, 40jl processes your personal data on the following lawful bases:
40jl uses the personal data it collects for the following purposes:
Creating and managing your account, verifying your identity and age, processing deposits and withdrawals via GCash and other payment methods, delivering game access and sportsbook services, and sending transactional communications such as deposit confirmations and payout notifications.
Fulfilling PAGCOR licensing obligations, complying with the Anti-Money Laundering Act including transaction monitoring and suspicious transaction reporting, responding to lawful requests from Philippine government authorities, and maintaining records required by Philippine law.
Detecting and preventing unauthorized access to accounts, identifying and investigating fraud, abuse, money laundering, and multi-account violations, and protecting the integrity of the gaming platform and the wider player community.
Enforcing the 21+ age restriction, administering self-exclusion and deposit limit requests, monitoring for gaming patterns associated with problem gambling risk, and facilitating player-initiated account restrictions.
Analyzing aggregate usage patterns to improve platform performance, game selection, payment processing efficiency, and customer support quality. Analytics are conducted on aggregated or pseudonymized data wherever possible.
Sending promotional offers, bonus notifications, and event information to players who have opted in to marketing communications. You may opt out at any time through Account Settings or by contacting support.
40jl does not sell your personal data to third parties. We share data only in the following circumstances:
40jl retains personal data for as long as necessary to fulfill the purposes for which it was collected, and no longer than required by applicable Philippine law. The following retention periods apply as a general guide:
After the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where legal proceedings, regulatory investigations, or dispute resolution processes are pending, data will be retained until such matters are fully concluded.
40jl implements technical and organizational security measures appropriate to the risk and sensitivity of the personal data it processes. These include, but are not limited to:
40jl uses cookies and similar technologies on the Platform to enhance your experience and support platform operations. The following categories of cookies are used:
| Cookie Type | Purpose | Consent Required |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, load balancing | No — Essential |
| Functional | Language preference, game display settings, responsible gaming tool configurations | Yes — Optional |
| Analytics | Aggregate Platform usage statistics, page performance data (pseudonymized) | Yes — Optional |
| Marketing | Tracking for opt-in promotional targeting (only for players who have consented to marketing) | Yes — Optional |
You may control cookie preferences through your browser settings. Disabling strictly necessary cookies may affect Platform functionality including your ability to log in. Disabling analytics or marketing cookies does not affect your ability to use the Platform or access games.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 40jl. These rights may be exercised by contacting the 40jl Data Protection Officer at the contact details in Section 16.
Request a copy of the personal data 40jl holds about you, along with information about how it is being used and who it has been shared with.
Request correction of inaccurate or incomplete personal data. Some corrections require supporting documentation (e.g., name changes require updated government ID).
Request deletion of personal data that is no longer necessary or lawfully held, subject to 40jl's legal obligations to retain data under AMLA and PAGCOR requirements.
Object to processing carried out on the basis of legitimate interests or for direct marketing purposes. Objection to marketing is always granted; other objections are assessed case by case.
Request your personal data in a structured, commonly used, machine-readable format for transfer to another controller, where technically feasible and legally permissible.
Lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe 40jl has not handled your personal data in compliance with the Data Privacy Act.
40jl will respond to data subject rights requests within thirty (30) calendar days of receipt. Complex requests may require an extension of up to an additional thirty (30) days, in which case you will be notified of the extension and the reason for it.
If 40jl becomes aware or reasonably suspects that an account is held by a person under the age of 21, it will immediately suspend the account, conduct an age verification review, and delete any personal data collected from the underage individual to the extent permitted by applicable legal and regulatory obligations.
If you believe that personal data of a person under 21 years of age has been submitted to 40jl, please contact our Data Protection Officer immediately at the contact details in Section 16.
The 40jl platform integrates with third-party services to deliver its full functionality, including licensed game providers, payment processors, and identity verification services. These third parties operate under their own privacy policies and data processing agreements. 40jl requires all third-party processors to maintain data protection standards consistent with the Philippine Data Privacy Act and to process personal data only for the purposes specified in their agreements with 40jl.
The Platform does not contain links to external third-party websites for which 40jl has no responsibility. Any third-party services visible within the Platform (such as game lobby interfaces from licensed game providers) operate within a controlled environment governed by 40jl's data processing agreements.
Some of 40jl's service providers, including certain game suppliers and technology infrastructure providers, may process or store personal data outside the Philippines. Where such cross-border transfers occur, 40jl ensures that:
Cross-border transfers of financial data and KYC documentation are subject to additional restrictions under AMLA and PAGCOR regulations and are only conducted where legally required or explicitly authorized.
40jl reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, our data processing practices, or the features of the Platform. When material changes are made to this Policy — meaning changes that significantly affect your rights or how your personal data is processed — 40jl will provide reasonable advance notice through in-platform notifications or email to your registered address before the changes take effect.
The effective date shown at the top of this Policy reflects the date of the most recent revision. Continued use of the Platform after the updated Policy becomes effective constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you should contact 40jl to request account closure.
The current version of this Privacy Policy is always available at 40jl.vip/privacy-policy. It is your responsibility to review the Policy periodically for any updates.
To exercise your data subject rights, submit a privacy-related complaint, or ask any questions about this Privacy Policy or 40jl's data processing practices, please contact our Data Protection Officer using the details below:
If you are not satisfied with 40jl's response to your privacy complaint, you have the right to escalate the matter to the Philippine National Privacy Commission (NPC), which has regulatory oversight of data privacy compliance in the Philippines.
Six core data protection principles that guide how 40jl handles every piece of information it holds about you.
40jl's data practices are built around the Data Privacy Act of 2012 (RA 10173). We maintain a registered Data Protection Officer, conduct privacy impact assessments for high-risk processing activities, and report data breaches to the NPC within the required timeframes.
Every data exchange between your device and 40jl's servers is encrypted using TLS 1.3 — the current industry standard for transport security. Sensitive data at rest, including KYC documents and payment identifiers, is encrypted using AES-256 class algorithms.
40jl does not sell, rent, or trade your personal information to advertisers, data brokers, or third parties for commercial purposes. Your data exists to deliver the 40jl service to you — not to generate advertising revenue for third parties outside our platform.
Access, correction, erasure, portability, and objection rights under the Philippine DPA are actionable on 40jl. Submit a request to our DPO and receive a substantive response within 30 days — not an automated acknowledgement followed by silence.
40jl collects only the personal data that is actually necessary for the purposes described in this Policy. We do not collect data "just in case." Retention periods are defined and enforced — data that is no longer needed is deleted or anonymized on schedule.
In the unlikely event of a data breach affecting your personal information, 40jl will notify affected players and report to the National Privacy Commission within 72 hours where required — in full compliance with NPC breach notification guidelines.
40jl handles your personal data with the care it deserves — and handles your GCash withdrawals with the speed you expect. Create your account in under 2 minutes. Must be 21 or older.