Privacy Policy – whalejl Data Protection Notice

whalejl is an online gaming platform operated for the benefit of Filipino players across the Philippines, including players from Manila, Quezon City, Cebu, Davao, Makati, and all other regions of the country. Our platform offers a wide range of gaming products including slots, live casino tables, sports betting, bingo, and sabong, all accessible via desktop and mobile browsers.

For the purposes of the Data Privacy Act of 2012, whalejl acts as the Personal Information Controller in respect of all personal data collected through the whalejl.pro platform. Any questions, requests, or concerns regarding the processing of your personal data may be directed to our Data Protection Officer at [email protected].

whalejl collects the following categories of personal data from players and platform visitors. The specific data collected from you will depend on how you interact with the Platform and which features or services you use.

whalejl collects personal data through the following channels and methods:

• Direct submission: Information you provide when creating an Account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to a survey or promotion on the Platform.
• Automated technologies: Cookies, web beacons, pixel tags, and server logs that automatically capture technical and usage data when you access whalejl.pro from any device or browser.
• Payment processors: When you initiate a deposit or withdrawal via GCash, Maya, GrabPay, BPI, BDO, Metrobank, or 7-Eleven Cliqq, the relevant payment provider may share transaction confirmation data with whalejl to credit or debit your Account balance.
• Identity verification partners: Third-party KYC and identity verification service providers may return verification status results to whalejl following document checks on your submitted identification.
• Fraud and risk detection systems: Automated risk-scoring systems process your session data and betting patterns to detect suspicious activity and protect the integrity of the Platform.
• Publicly available sources: In certain circumstances, whalejl may verify information against publicly available government records or official sanctions lists maintained by Philippine regulatory authorities.

whalejl processes your personal data only for defined, legitimate, and proportionate purposes. The table below summarises the primary purposes for which we use your data and the data categories involved.

Under the Data Privacy Act of 2012, whalejl relies on the following legal bases to process your personal data:

• Contractual necessity: Processing is necessary to perform the contract between you and whalejl — specifically, to operate your Account, process your gaming transactions, and fulfil our obligations under the Terms & Conditions.
• Legal obligation: Processing is required to comply with Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and any lawful requests from regulatory or law enforcement authorities.
• Legitimate interests: Processing is necessary for whalejl's legitimate interests in operating a safe, fair, and commercially sustainable gaming platform — including fraud detection, security monitoring, and responsible gaming oversight — provided these interests are not overridden by your rights and freedoms.
• Consent: Where whalejl sends you direct marketing communications (such as promotional emails or SMS notifications about bonuses and new games), we rely on your freely given, specific, and informed consent. You may withdraw consent at any time by updating your notification preferences in your Account dashboard or by contacting support.

whalejl does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Payment processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and 7-Eleven Cliqq receive the minimum data necessary to process your deposit or withdrawal transaction.
• KYC and identity verification providers: Third-party verification service providers process your identification documents to confirm your identity and age in compliance with PAGCOR requirements.
• Regulatory and law enforcement authorities: whalejl is required by Philippine law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities upon lawful request, court order, or where disclosure is mandatory under applicable legislation.
• Fraud prevention and security partners: Specialised fraud detection and cybersecurity providers may process limited technical data to protect the Platform and its players from fraudulent activity and unauthorised access.
• Professional advisers: Legal, audit, and compliance professionals engaged by whalejl may access personal data under strict confidentiality obligations where necessary for the provision of their professional services.

whalejl uses cookies and similar tracking technologies on the whalejl.pro platform to deliver a functional, secure, and personalised experience for Filipino players. A cookie is a small text file stored on your device by your web browser when you visit our platform.

You can manage or delete cookies at any time through your browser settings. Please note that disabling strictly necessary or security cookies may prevent you from accessing certain features of the whalejl platform, including your Account login. Refer to your browser's help documentation for instructions on managing cookie preferences.

whalejl retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Active Account data (identity, contact, gaming, financial): Retained for the full duration of your active Account relationship with whalejl plus a minimum of five (5) years following Account closure, in compliance with AMLC record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or Account closure, whichever is later.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with AMLA obligations.
• Customer support communications: Retained for three (3) years from the date of the last communication, unless the communication forms part of a dispute or regulatory inquiry record.
• Marketing consent records: Retained for the duration of your Account relationship plus two (2) years following Account closure, to demonstrate consent compliance.
• Technical and analytics data: Typically anonymised or deleted within thirteen (13) months of collection unless required for ongoing security investigations.

When the applicable retention period expires, personal data is securely deleted or anonymised in accordance with whalejl's internal data disposal procedures. Anonymised data that can no longer identify any individual may be retained indefinitely for statistical and analytical purposes.

whalejl employs a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption across all pages of whalejl.pro, including login, deposit, withdrawal, and Account management pages;
• Encrypted storage of sensitive personal data including financial account details and identity verification documents at rest;
• Two-factor authentication (2FA) available for all registered players via OTP sent to your verified Philippine mobile number;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis, with full audit logging of all access events;
• Regular security assessments including penetration testing and vulnerability scanning of the whalejl platform infrastructure;
• Incident response procedures aligned with the Data Privacy Act's 72-hour breach notification requirements to the National Privacy Commission.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by whalejl. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with a clear description of your request and your registered Account username.

whalejl will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reason for it within the initial thirty-day period.

whalejl does not knowingly collect personal data from any individual under the age of 21. If we become aware that personal data has been submitted by or on behalf of a person below the minimum age requirement, we will immediately close the associated Account, forfeit any associated balance, and delete the personal data in accordance with our standard data disposal procedures.

If you are a parent or guardian and believe that your child has registered an Account on whalejl.pro without authorisation, please contact us immediately at [email protected]. We take underage access to gaming platforms extremely seriously and will act promptly on any such report.

The whalejl platform may from time to time contain references to third-party services or payment providers such as GCash, Maya, or BPI. Accessing those third-party services will subject you to their own privacy policies and terms of use, which are entirely separate from this Policy. whalejl accepts no responsibility or liability for the privacy practices of any third-party service provider.

We recommend that you review the privacy policy of any third-party payment provider before submitting your financial account details through their respective interfaces.

whalejl reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements issued by PAGCOR or the National Privacy Commission.

Material changes to this Policy will be communicated to registered players via email to the address on file or via a prominent notice displayed on the whalejl.pro platform, with at least seven (7) days' notice prior to the effective date of the change. The "Effective Date" shown at the top of this page will be updated to reflect the date on which the most recent version takes effect.

Your continued use of the whalejl platform following the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with a material change, you may close your Account prior to the effective date and request withdrawal of your remaining Real Money Funds.

For all privacy-related inquiries, data rights requests, or complaints regarding whalejl's handling of your personal data, please contact our Data Protection Officer:

If you are not satisfied with whalejl's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory authority responsible for administering and enforcing the Data Privacy Act of 2012.