jilijili Privacy
Policy

1 Who We Are

This Privacy Policy is issued by jilijili ("jilijili," "we," "us," or "our"), the operator of the online gaming platform accessible at jilijili.net (the "Platform"). jilijili acts as the data controller in respect of all personal data collected through the Platform, meaning we determine the purposes and means of processing your personal data.

jilijili is committed to protecting the privacy and security of all players, visitors, and users of the Platform. This Privacy Policy explains in plain language what personal data we collect, why we collect it, how we use and protect it, and what rights you have under Philippine law. We encourage you to read this policy carefully before registering an account or using any jilijili service.

2 Data We Collect

jilijili collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we may collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Nationality and country of residence;
• Email address and mobile phone number;
• Residential address (barangay, city/municipality, province, ZIP code).

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine National ID, passport, driver's license, SSS/GSIS ID, Voter's ID, PRC ID);
• Proof of address documents (e.g., utility bill, bank statement);
• Selfie or liveness check images submitted during verification;
• Source of funds declarations where required by anti-money laundering regulations.

2.3 Financial Data

• GCash or PayMaya account numbers linked to your jilijili account;
• Bank account details (BPI, BDO, Metrobank, UnionBank, or other Philippine banks) for withdrawal processing;
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used;
• Bonus and promotional credit history.

2.4 Gaming & Behavioral Data

• Game session logs, including games played, wager amounts, win/loss records, and session duration;
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests);
• Bonus and promotion participation history;
• Customer support interaction records.

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP;
• Device type, operating system, and browser type and version;
• Unique device identifiers;
• Cookie identifiers and session tokens (see Section 7);
• Platform access timestamps and navigation logs.

3 How We Collect Your Data

jilijili collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated collection: Technical and device data collected automatically when you access the Platform, through cookies, log files, and similar tracking technologies (see Section 7);
• Third-party sources: Identity verification data from KYC service providers; fraud and sanctions screening data from compliance databases; payment confirmation data from GCash, PayMaya, and banking partners.

jilijili does not collect personal data from social media platforms or purchase data from data brokers for marketing purposes.

4 How We Use Your Data

jilijili uses your personal data for the following purposes:

jilijili does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by anti-money laundering or fraud prevention regulations.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, jilijili processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and jilijili (i.e., to operate your account, process transactions, and provide gaming services);
• Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering laws, PAGCOR licensing requirements, and the Data Privacy Act itself;
• Legitimate interests: Processing necessary for jilijili's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your privacy rights;
• Consent: Where jilijili relies on your consent as the legal basis for processing (e.g., for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

jilijili does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

6.1 Service Providers

jilijili engages trusted third-party service providers to assist in operating the Platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection and anti-money laundering screening services, cloud hosting and data storage providers, and customer support platform operators. All service providers are contractually bound to process your data only on jilijili's instructions and to maintain appropriate security standards.

6.2 Regulatory & Law Enforcement Authorities

jilijili may disclose your personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent government authorities where required by law, court order, or regulatory directive. jilijili will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of jilijili's assets, your personal data may be transferred to the acquiring entity as part of that transaction. jilijili will notify you before your data is transferred and becomes subject to a different privacy policy.

7 Cookies & Tracking Technologies

jilijili uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyze how the Platform is used. The types of cookies we use are:

• Strictly necessary cookies: Required for the Platform to function. These cannot be disabled. They include session authentication tokens, security cookies, and load-balancing cookies;
• Functional cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations;
• Analytics cookies: Help jilijili understand how players navigate the Platform so we can improve the user experience. Data collected is aggregated and anonymized where possible;
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized account access attempts.

jilijili does not use third-party advertising or retargeting cookies. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the Platform.

8 Data Retention

jilijili retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, in compliance with Philippine anti-money laundering regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming session logs: Retained for three (3) years from the date of each session;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Technical and device logs: Retained for twelve (12) months from the date of collection.

Upon expiry of the applicable retention period, jilijili will securely delete or irreversibly anonymize your personal data, unless a longer retention period is required by a specific legal obligation or ongoing regulatory investigation.

9 Data Security

jilijili implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jilijili Platform;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls ensuring that only authorized jilijili personnel can access personal data, and only to the extent required for their specific job function;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Multi-factor authentication requirements for all jilijili staff accessing systems that contain personal data;
• Incident response procedures that include mandatory notification to the National Privacy Commission within 72 hours of discovering a personal data breach that poses a real risk of serious harm.

10 Your Rights Under the DPA

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jilijili:

• Right to be informed: The right to know what personal data jilijili collects about you and how it is used — which is the purpose of this Privacy Policy;
• Right of access: The right to request a copy of the personal data jilijili holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to jilijili's legal retention obligations;
• Right to object: The right to object to the processing of your personal data on grounds relating to your particular situation, where jilijili relies on legitimate interests as the legal basis;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe jilijili has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact jilijili's Data Protection Officer using the contact details in Section 13. jilijili will respond to all data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, jilijili may extend this period by a further thirty (30) days, with prior notice to you.

11 Children's Privacy

The jilijili Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. jilijili does not knowingly collect personal data from any person under the age of 21.

If jilijili discovers or is notified that personal data has been collected from a person under 21 years of age, jilijili will immediately suspend the relevant account, delete all associated personal data to the extent permitted by law, and report the matter to the appropriate regulatory authority where required.

If you are a parent or guardian and believe that your child under 21 has registered an account on jilijili, please contact us immediately at the details provided in Section 13 so that we can take prompt action.

12 Changes to This Policy

jilijili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, jilijili will notify registered players by email and by posting a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last updated" date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how jilijili protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy.

13 Contact & DPO Details

If you have any questions, concerns, or requests relating to this Privacy Policy or jilijili's handling of your personal data, please contact our Data Protection Officer (DPO):

• Data Protection Officer: jilijili Privacy Team
• Email: [email protected]
• General Support: [email protected]
• Response Time: All privacy-related inquiries will be acknowledged within 48 hours and fully responded to within 30 calendar days

If you are not satisfied with jilijili's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila
• Website: privacy.gov.ph (do not visit — listed for reference only)