1. Privacy Overview
At WhaleJL, we believe every Filipino player deserves to game with confidence — not just in the fairness of our games, but also in how their personal information is handled. This Privacy Policy explains in plain and honest language how WhaleJL collects, processes, stores, and protects the personal data of every user who registers and plays on our platform.
This policy applies to all services offered under the WhaleJL brand, including our website at whalejl.best, mobile platform, poker rooms, casino games, fishing games, roulette, jackpot slots, sports betting, and any future features we may add. When you create a WhaleJL account or use any of our services, you agree to the practices described in this Privacy Policy.
We operate in compliance with the Republic Act 10173, also known as the Data Privacy Act of 2012 of the Philippines, along with its Implementing Rules and Regulations issued by the National Privacy Commission (NPC). We take this compliance seriously — hindi ito basta-basta.
Quick note: This policy may be updated from time to time. We'll notify you of significant changes via email or in-platform alerts. Always check the "Last Updated" date at the top of this page.
2. What Personal Data We Collect
WhaleJL only collects personal information that is necessary, relevant, and adequate for the purposes described in this policy. Here's a clear breakdown of the categories of data we gather:
2.1 Registration and Identity Data
When you sign up for a WhaleJL account, we collect the following information:
- Full legal name as it appears on your government-issued ID
- Date of birth (to verify you are at least 21 years old)
- Email address and mobile phone number (Philippine number preferred)
- Username and encrypted password
- Residential address in the Philippines
2.2 Verification Documents (KYC)
As part of our Know Your Customer (KYC) process — which is required by Philippine gaming regulations — we may collect copies of the following:
- Valid government-issued photo ID (Philippine passport, driver's license, SSS ID, UMID, PhilHealth ID, or Postal ID)
- Proof of billing or residential address (utility bill, bank statement, or barangay certificate not older than three months)
- Selfie photo for facial verification purposes
2.3 Financial and Transaction Data
We collect data related to your deposits, withdrawals, and gameplay transactions on WhaleJL. This includes payment method details (GCash number, Maya account, bank account name and last four digits), transaction history, amounts, timestamps, and balance records. We never store full card numbers on our servers.
2.4 Technical and Usage Data
When you access WhaleJL, we automatically collect certain technical information:
| Data Type | Examples | Purpose |
|---|---|---|
| Device info | Device model, OS, browser type | Platform optimisation |
| IP address | IPv4/IPv6 address | Fraud prevention, geo-compliance |
| Session data | Login time, session duration, pages visited | Security and experience improvement |
| Game history | Bets placed, games played, results | Account management, dispute resolution |
| Communication logs | Support chat, email correspondence | Customer service quality |
3. How WhaleJL Uses Your Personal Data
Your privacy data is used strictly for legitimate purposes related to running the WhaleJL platform and keeping your experience safe and enjoyable. We do not use your data for anything outside of what is described here.
3.1 Core Platform Operations
We use your personal information to create and manage your WhaleJL account, process deposits and withdrawals, verify your identity as required by Philippine gaming laws, and ensure that you meet the minimum age requirement of 21 years old. Your data also powers the personalised features of your account dashboard, including balance displays, betting history, and bonus tracking.
3.2 Security and Fraud Prevention
WhaleJL uses your data to detect and prevent fraudulent activity, including unauthorised account access, duplicate account creation, money laundering, and bonus abuse. Our systems monitor transaction patterns and login behaviour to flag suspicious activity — para protektado ang lahat ng manlalaro.
3.3 Regulatory Compliance
As a licensed gaming platform serving Filipino players, WhaleJL is required to maintain records of player activity, identity verification, and financial transactions. This data may be disclosed to relevant Philippine regulatory authorities — including PAGCOR and the National Privacy Commission — when required by law.
3.4 Customer Support
When you contact our support team, we use your account information and communication history to resolve your concern efficiently. Support interactions may be recorded for quality assurance and training purposes.
3.5 Marketing Communications (With Your Consent)
If you have opted in to receive promotional communications, we may use your email address or phone number to send you information about WhaleJL bonuses, new games, special events, and exclusive offers for Filipino players. You can opt out of these communications at any time.
5. Data Retention
WhaleJL retains your personal data only for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by Philippine law and gaming regulations. Here's a general guide to our retention periods:
- Active account data: Retained throughout the lifetime of your WhaleJL account.
- Transaction and financial records: Kept for a minimum of five (5) years after the date of the transaction, as required by anti-money laundering regulations in the Philippines.
- KYC and identity documents: Retained for five (5) years after account closure.
- Support communications: Kept for two (2) years from the date of the last interaction.
- Marketing preferences and consent records: Kept until you withdraw consent or for three (3) years after your last interaction with WhaleJL, whichever comes first.
When the applicable retention period expires, WhaleJL will securely delete or anonymise your personal data so that it can no longer be linked back to you as an individual.
7. Security Measures
WhaleJL implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, or disclosure. Our security practices include:
- TLS (Transport Layer Security) encryption on all data transmissions between your browser/app and WhaleJL servers
- AES-256 encryption for sensitive data stored at rest, including payment information and KYC documents
- Multi-factor authentication (MFA) options available to all registered players
- Regular security audits and penetration testing by independent cybersecurity professionals
- Role-based access controls ensuring that only authorised WhaleJL staff can access player data, and only when necessary for their role
- Secure data centres with physical access controls and 24/7 monitoring
- Incident response procedures to quickly contain and notify players in the event of a data breach
While WhaleJL takes every reasonable precaution to protect your data, no system is 100% immune to security threats. We encourage you to also take steps to protect your own account — use a strong password, enable two-factor authentication, and never share your login credentials with anyone.
8. Your Data Rights as a Philippine Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by WhaleJL. We are committed to honouring these rights fully and without unnecessary delay.
Right to Access
Request a copy of the personal data WhaleJL holds about you, including how it is being used.
Right to Rectification
Request correction of inaccurate or outdated personal information in your WhaleJL account.
Right to Erasure
Request deletion of your personal data when it is no longer necessary or when you withdraw consent, subject to legal retention requirements.
Right to Object
Object to the processing of your personal data for direct marketing or other purposes based on legitimate interest.
Right to Data Portability
Request a portable copy of your personal data in a structured, commonly used, machine-readable format.
Right to Lodge a Complaint
File a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
To exercise any of these rights, contact our Data Protection Officer (DPO) at privacy@whalejl.best. We will respond to your request within fifteen (15) business days in accordance with NPC guidelines.
9. Protection of Minors
WhaleJL strictly prohibits individuals under the age of 21 from registering or playing on our platform. We do not knowingly collect personal data from minors. If we discover that a user under 21 years of age has registered an account, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned to the originating payment method.
If you are a parent or guardian and believe your child has created a WhaleJL account, please contact us immediately at privacy@whalejl.best so we can take swift action.
10. Changes to This Privacy Policy
WhaleJL reserves the right to update this Privacy Policy at any time to reflect changes in our practices, applicable Philippine laws, or platform features. When we make material changes, we will:
- Update the "Last Updated" date at the top of this page
- Send a notification to your registered email address
- Display an in-platform banner or alert for significant updates
We encourage you to review this Privacy Policy periodically. Your continued use of WhaleJL after any changes means you accept the updated version. If you disagree with any material change, you may close your account by contacting our support team.
11. Contact Our Data Protection Officer
WhaleJL has designated a Data Protection Officer (DPO) as required by the Philippine Data Privacy Act. If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please reach out to our DPO directly:
- Email: privacy@whalejl.best
- General Support: support@whalejl.best
- FAQ: Visit our FAQ page
Response time: We aim to respond to all data-related inquiries within 15 business days. For urgent matters — particularly those involving a potential data breach — we prioritise response within 72 hours.