jilioo Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how jilioo ("jilioo," "we," "us," "our"), the operator of the online gaming platform at https://jilioo.club ("Platform"), collects, uses, stores, shares, and protects the personal data of individuals ("you," "Player," "User") who access or use our services.

jilioo is committed to protecting your privacy in full compliance with the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC) of the Philippines.

By registering an account with jilioo or using any of our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the jilioo Platform.

2. Data Controller

For the purposes of the Philippines Data Privacy Act of 2012, jilioo is the personal information controller in respect of the personal data collected from players on the Platform. jilioo has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection law.

Contact information for jilioo's data protection function is provided in Section 15 (Contact) of this Policy. All data subject requests, privacy queries, and data breach notifications should be directed to the contact details specified therein.

3. Data We Collect

jilioo collects the following categories of personal data from players in connection with the provision of our services:

jilioo does not collect sensitive personal information as defined by Section 3(l) of the Data Privacy Act of 2012 (such as health data, political views, or religious beliefs) unless strictly required by specific regulatory compliance obligations, in which case explicit consent will be obtained.

4. How We Collect Data

jilioo collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your account settings.
• Automatically through Platform use: Technical and gaming data is collected automatically when you access and use the jilioo Platform, through server logs, session tracking, and similar technologies.
• From payment processors: When you make a deposit or request a withdrawal via GCash, Maya, BPI, BDO, Metrobank, or other integrated payment providers, limited transaction confirmation data is shared with jilioo by the payment processor.
• From identity verification services: During KYC verification, jilioo may use third-party identity verification services that process the document images you submit. These services act as personal information processors under jilioo's instruction.
• From regulatory authorities: In limited circumstances, jilioo may receive data from PAGCOR or the Anti-Money Laundering Council (AMLC) of the Philippines in connection with licensing compliance or regulatory inquiries.

5. Purposes & Legal Basis for Processing

jilioo processes your personal data for the following purposes, each grounded in a lawful basis under the Data Privacy Act of 2012:

• Account creation and management — Necessary for the performance of our contract with you as a registered jilioo player.
• Identity verification (KYC) and age verification — Required by Philippine gaming regulations and anti-money laundering legislation. This includes confirming that all players are 21 years of age or older.
• Processing deposits and withdrawals — Necessary for contract performance and compliance with Philippine financial regulations and AMLC requirements.
• Providing customer support — Necessary for the performance of our service obligations to you.
• Responsible gaming management — Processing gaming behaviour data to identify players at risk and administer self-exclusion and limit-setting tools is carried out under our legitimate interest in promoting responsible gambling, and is required by our regulatory obligations.
• Fraud prevention and security — Processing technical and account data to detect and prevent fraud, account abuse, and prohibited conduct is carried out under our legitimate interests in maintaining Platform integrity and protecting players.
• Marketing communications — jilioo sends promotional emails and SMS notifications only with your explicit consent, which you may withdraw at any time via your account settings or by contacting support.
• Regulatory compliance and reporting — Processing required to fulfil jilioo's obligations under Philippine gaming law, AMLC anti-money laundering regulations, and NPC data protection requirements.
• Platform improvement and analytics — Aggregated, anonymised technical and gaming data may be used to improve Platform performance and user experience under our legitimate interests, where this does not adversely impact your privacy rights.

6. Data Sharing

jilioo does not sell, rent, or trade your personal data. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, and other integrated payment providers receive the minimum data necessary to process your deposit or withdrawal transaction.
• Identity verification providers: Third-party KYC services receive your submitted identity documents for verification purposes. These providers act as data processors under binding data processing agreements with jilioo.
• Game providers: JILI Games, Pragmatic Play, Evolution, and other licensed game studios integrated on jilioo receive a pseudonymised player session token necessary to load and operate games. They do not receive your full identity or financial data.
• Regulatory authorities: PAGCOR, the AMLC, the NPC, and other competent Philippine government authorities may receive player data where required by applicable law, regulation, or valid legal order.
• Professional advisors: Legal counsel, auditors, and accountants may access limited player data under strict confidentiality obligations where necessary for jilioo's legal and compliance obligations.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of jilioo's assets, player data may be transferred to the acquiring entity subject to the same data protection commitments in this Policy.

7. International Data Transfers

Some of jilioo's service providers and game platform partners operate from outside the Philippines. Where personal data is transferred internationally, jilioo ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and relevant NPC guidelines. These safeguards include standard contractual clauses, data processing agreements, and verification that the recipient country provides an adequate level of data protection.

jilioo will not transfer your personal data to a country or territory that does not provide an adequate standard of protection for personal data without your explicit consent or without the implementation of appropriate contractual safeguards.

8. Data Retention

jilioo retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to applicable legal retention requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account plus a minimum of 5 years following account closure, in accordance with Philippine anti-money laundering requirements under Republic Act No. 9160, as amended.
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by AMLC regulations.
• Gaming data: Retained for 2 years following account closure unless a longer period is required by regulatory obligation or dispute resolution.
• Communication and support records: Retained for 2 years from the date of the interaction.
• Marketing consent records: Retained for the duration of your consent plus 1 year following its withdrawal, as evidence of compliance.

After applicable retention periods expire, personal data is securely deleted or anonymised in a manner that prevents reconstruction of identifiable data.

9. Security Measures

jilioo implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• All data transmitted between your device and the jilioo Platform is encrypted using TLS 1.2 or higher (256-bit SSL).
• Passwords are stored using industry-standard one-way hashing algorithms. jilioo staff cannot view your password.
• Access to player personal data within jilioo's systems is restricted to personnel with a legitimate need for access, governed by role-based access controls.
• jilioo conducts regular security assessments, penetration testing, and vulnerability scanning of its Platform infrastructure.
• Two-factor authentication (2FA) is available to all players for account access and is strongly recommended.
• jilioo maintains an incident response plan. In the event of a data breach affecting Filipino players' rights, jilioo will notify the NPC and affected individuals within the timeframes required by the Data Privacy Act of 2012.

10. Cookies & Tracking Technologies

jilioo uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for the Platform to function correctly — including session authentication, load balancing, and security tokens. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limits across sessions.
• Analytics cookies: Aggregate, anonymised data on Platform usage patterns to support performance improvements. No individually identifiable data is used for analytics.
• Security cookies: Detect and prevent fraudulent activity, bot access, and account takeover attempts.

jilioo does not use third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling essential cookies will impair your ability to log in and use the Platform.

11. Minors

jilioo's services are strictly limited to individuals who are 21 years of age or older, in accordance with PAGCOR gaming regulations applicable to online casinos serving Filipino players. jilioo does not knowingly collect personal data from persons under the age of 21.

If jilioo becomes aware that it has inadvertently collected personal data from a player who is under 21, that account will be immediately suspended, all associated data will be deleted as required by applicable law, and the matter will be handled in accordance with jilioo's age verification enforcement procedures.

Parents and guardians who believe a minor may have accessed jilioo's Platform should contact jilioo support immediately via Live Chat for prompt investigation and account action.

12. Exercising Your Data Subject Rights

To exercise any of your rights under the Data Privacy Act of 2012 — including rights of access, rectification, erasure, objection, or data portability — please submit a written request to jilioo through either of the following channels:

• Live Chat: Available 24/7 on the jilioo Platform — the fastest method for standard requests.
• Email: [email protected] (plain text — not a clickable link). Please use the subject line "Data Subject Request – [Your Username]."

jilioo will acknowledge all data subject requests within 72 hours and will respond substantively within 30 calendar days. Where a request is complex or involves a large volume of data, jilioo may extend this period by a further 30 days with written notice to you. jilioo reserves the right to verify your identity before processing any data subject request to protect against unauthorised requests by third parties.

Data subject requests are provided free of charge. However, jilioo reserves the right to charge a reasonable administrative fee for manifestly unfounded or excessive requests, particularly where they are repetitive in nature.

13. Complaints

If you are dissatisfied with jilioo's handling of your personal data or jilioo's response to a data subject request, you have the right to lodge a complaint with the Philippines' National Privacy Commission (NPC).

jilioo encourages you to contact us directly in the first instance so that we may address your concern internally before escalation. If jilioo's internal resolution is unsatisfactory, you may contact the NPC through its official channels. Information on how to contact the NPC is available through official Philippine government information channels.

14. Changes to This Policy

jilioo may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or Platform features. Material changes that affect your rights or how your data is used will be communicated to you via email or in-platform notification at least 7 days before taking effect.

The current version of this Policy is always accessible at https://jilioo.club/privacy-policy. The effective date of the current version is displayed at the top of this document. Your continued use of the Platform following a policy update constitutes your acknowledgment of the revised Policy.

15. Contact

For all privacy-related enquiries, data subject requests, or concerns regarding this Policy, please contact jilioo through the following channels:

• Live Chat: Available 24/7 directly on the jilioo Platform.
• Email: [email protected] (plain text — not a clickable link). Mark the subject line "Privacy Enquiry" or "Data Subject Request."

jilioo's Data Protection Officer reviews all privacy-related correspondence and is responsible for ensuring this Policy is implemented and maintained in compliance with the Data Privacy Act of 2012.