jiliap Privacy Policy

This Policy applies to all personal information collected by jiliap in connection with your use of the jiliap platform, including the website at jiliap.cam, the mobile-optimised web application, and all associated services such as account management, game play, payment processing, customer support, and promotional communications.

This Policy does not apply to third-party websites or services that may be referenced in jiliap communications. jiliap is not responsible for the privacy practices of any third party. Where jiliap shares data with third-party processors as described in this Policy, such sharing is governed by data processing agreements that impose obligations consistent with the DPA.

This Policy should be read alongside jiliap's Terms & Conditions and Responsible Gaming Policy, all of which form part of the agreement between you and jiliap.

For the purposes of the Philippine Data Privacy Act of 2012, jiliap acts as the personal information controller with respect to all personal data collected through the jiliap platform. jiliap determines the purposes and means by which your personal information is processed.

jiliap has designated a Data Protection Officer (DPO) as required by the DPA. Queries, requests, or complaints relating to the processing of your personal data may be directed to jiliap's DPO through the contact details specified in Section 15 of this Policy.

jiliap collects personal data that falls into the following categories. The specific data collected depends on how you interact with the jiliap platform:

jiliap does not intentionally collect sensitive personal information beyond what is required for identity verification, regulatory compliance, and responsible gaming purposes. Where sensitive information is collected (such as a government ID number), it is processed only for the specific purpose for which it was provided and is subject to heightened protection measures.

jiliap collects personal data through the following channels and mechanisms:

4.1 Direct Collection

You provide personal data directly to jiliap when you register for an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account settings. This data is provided voluntarily by you, although certain information is mandatory for account operation and regulatory compliance.

4.2 Automated Collection

When you access the jiliap platform, certain technical information is automatically collected by our systems, including your IP address, device identifiers, browser characteristics, and session activity data. This data is collected using standard web server logging, cookies, and similar technologies as described in Section 8 of this Policy.

4.3 Third-Party Sources

jiliap may receive personal data about you from third parties in limited circumstances, including from payment processors confirming transaction details, from fraud prevention and identity verification services used in the KYC process, and from PAGCOR or other regulatory authorities as required by applicable law.

Under the Philippine Data Privacy Act of 2012, jiliap processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform jiliap's contractual obligations to you under the Terms & Conditions, including account management, game provision, payment processing, and customer support.
• Legal Obligation: Processing required to comply with jiliap's obligations under Philippine law, including PAGCOR's regulatory requirements, Republic Act No. 9160 (Anti-Money Laundering Act), and the Data Privacy Act itself.
• Legitimate Interests: Processing necessary for jiliap's legitimate interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement, where these interests are not overridden by your privacy rights.
• Consent: Processing carried out on the basis of your specific, informed consent, such as the sending of promotional communications where consent has been explicitly provided. You may withdraw consent at any time through your account settings without affecting the lawfulness of prior processing.

jiliap uses the personal data we collect for the following purposes:

• Account Management: Creating, verifying, maintaining, and closing your jiliap player account, including processing login authentication and enforcing the one-account-per-person policy.
• Identity Verification (KYC): Verifying your identity as required by PAGCOR and RA 9160 before processing withdrawals and in ongoing monitoring for suspicious activity.
• Payment Processing: Processing deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank, including verifying transaction authenticity and maintaining financial records.
• Game Provision: Delivering game content, recording gaming activity, calculating winnings, applying bonus credits, and managing VIP tier status.
• Regulatory Compliance: Meeting jiliap's obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies, including mandatory reporting requirements.
• Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the jiliap platform.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing player-set limits, managing self-exclusion requests, and complying with PAGCOR's responsible gaming obligations.
• Customer Support: Responding to your inquiries, resolving complaints, and maintaining support correspondence records.
• Platform Improvement: Analysing aggregated usage data to improve platform performance, game offerings, and user experience.
• Marketing Communications: Sending promotional offers, bonus announcements, and platform updates to players who have opted in to receive such communications. You may opt out at any time through your account settings.

jiliap does not sell your personal information. We share personal data only in the following circumstances and only to the extent necessary for each purpose:

7.1 Service Providers

jiliap engages third-party service providers to assist in platform operations, including payment processing companies (GCash/GXI, Maya Philippines, BancNet, and relevant Philippine banks), identity verification and KYC service providers, game content providers (such as JILI Games, Pragmatic Play, PG Soft, Ezugi, and Hacksaw Gaming), cloud infrastructure providers, and customer support technology providers. All service providers are bound by contractual data processing agreements requiring compliance with the DPA and restricting use of your data to the specified service purpose.

7.2 Regulatory Authorities

jiliap is required by law to share certain player information with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government agencies upon lawful request or as required by mandatory reporting obligations. Such disclosures are made only to the extent required by law.

7.3 Legal Proceedings

jiliap may disclose personal data where required by a valid court order, subpoena, or other compulsory legal process issued by a Philippine court or competent authority. Where permitted by law, jiliap will notify affected players before making such disclosure.

7.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of jiliap's business, player personal data may be transferred to the acquiring entity as part of the transaction, subject to the acquiring entity assuming the same data protection obligations as set out in this Policy. Players will be notified of any such transfer that materially affects the processing of their personal data.

jiliap uses cookies and similar web tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device by the jiliap website that enables certain platform functions.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function, including maintaining your login session, storing your account preferences, and enabling secure payment flows. These cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect aggregated, anonymised data about how players navigate the jiliap platform, which pages are visited most frequently, and where errors occur. This data helps jiliap identify and fix performance issues.
• Functional Cookies: Remember your platform preferences, such as your preferred game category, responsible gaming settings, and communication preferences.
• Security Cookies: Support jiliap's fraud detection and account security systems by flagging unusual login patterns or device changes.

8.2 Managing Cookies

You may configure your browser to refuse cookies or to alert you when cookies are being set. However, disabling strictly necessary cookies will prevent you from accessing core jiliap platform functions, including logging in and making transactions. jiliap's cookie preferences centre — accessible from the platform settings menu — allows you to manage non-essential cookie categories.

jiliap implements a multi-layered information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and jiliap's servers is encrypted using TLS 1.2 or higher. The jiliap platform is served exclusively over HTTPS.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial records, and identity information — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to jiliap personnel and authorised service providers with a documented operational need. Access is controlled through role-based permissions and multi-factor authentication for privileged systems.
• Security Monitoring: jiliap operates continuous security monitoring of its systems to detect anomalous activity, potential intrusions, and data access irregularities.
• Vendor Security Standards: All third-party service providers with access to player data are required to maintain security standards consistent with or exceeding those applied by jiliap.

While jiliap employs robust security measures, no digital system can guarantee absolute security. In the event of a data breach affecting player personal information, jiliap will follow the breach notification procedures required by RA 10173 and will communicate transparently with affected players.

jiliap retains personal data for the period necessary to fulfil the purpose for which it was collected, subject to the minimum retention periods required by Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification. Anonymised data may be retained for analytical and reporting purposes beyond these periods, as it no longer constitutes personal data.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you hold the following rights with respect to personal data that jiliap processes about you:

• Right to Be Informed: The right to know whether jiliap processes personal data about you, and if so, what data is being processed, the purposes for which it is processed, and who it may be shared with. This Policy fulfils jiliap's obligation to inform you.
• Right of Access: The right to request a copy of the personal data that jiliap holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data that jiliap holds about you. You may update certain account details directly through your jiliap account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent (and no other legal basis applies), or where the data has been unlawfully processed. This right is subject to jiliap's legal retention obligations.
• Right to Restrict Processing: The right to request that jiliap restrict the processing of your personal data in certain circumstances, such as while the accuracy of data is being contested.
• Right to Object: The right to object to processing based on legitimate interests, including processing for direct marketing purposes. If you object to marketing communications, jiliap will cease sending them.
• Right to Data Portability: The right to receive personal data you have provided to jiliap in a structured, commonly used, machine-readable format where technically feasible.
• Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

The jiliap platform is strictly intended for individuals aged 21 years and older, as required by PAGCOR's regulations governing online casino gaming in the Philippines. jiliap does not knowingly collect personal data from individuals under the age of 21.

If jiliap discovers or has reason to believe that a registered account belongs to a person under 21 years of age, jiliap will immediately suspend the account, initiate a review, and take steps to delete the personal data associated with the underage account to the extent permitted by law. Any balance associated with such an account will be handled in accordance with PAGCOR's directives regarding underage player accounts.

Parents and guardians who believe that a minor under their care may have registered a jiliap account are urged to contact jiliap support immediately via live chat or at [email protected].

The jiliap platform's primary operations and data storage infrastructure are located within the Philippines and in jurisdictions that provide an adequate level of data protection. Where personal data is transferred to third-party service providers outside the Philippines — such as internationally hosted cloud infrastructure or game content providers — jiliap ensures that such transfers are made only to recipients that provide adequate protection for personal data, through one or more of the following mechanisms:

• Data processing agreements containing standard contractual clauses approved by the National Privacy Commission
• Transfer to jurisdictions that have been determined to provide an adequate level of protection by the NPC or by jiliap's Data Protection Officer following a documented adequacy assessment
• Other lawful transfer mechanisms recognised under the DPA and its Implementing Rules

You may request information about the specific safeguards jiliap has in place for cross-border data transfers by contacting jiliap's Data Protection Officer as described in Section 15.

jiliap reserves the right to update this Privacy Policy at any time. Material changes — such as changes to the categories of data collected, the purposes for which data is used, or the parties with whom data is shared — will be communicated to registered players via the email address on record at least fourteen (14) days before the changes take effect, unless a shorter notice period is required to comply with applicable law.

The current version of this Policy, including its effective date, will always be published on the jiliap platform at jiliap.cam/privacy-policy. We encourage you to review this Policy periodically. Your continued use of the jiliap platform after any published changes take effect constitutes your acknowledgement of the updated Policy.

If you have questions about this Privacy Policy, wish to exercise your data privacy rights, or have a concern about how jiliap handles your personal data, please contact jiliap's Data Protection Officer:

• Live Chat: Available 24/7 within the jiliap platform — select "Privacy / Data Request" as the inquiry category.
• Email: [email protected] — use the subject line "Data Privacy Request" or "Privacy Complaint" as appropriate.

jiliap will acknowledge all privacy-related communications within five (5) business days and will respond substantively within fifteen (15) business days, extendable to thirty (30) business days for complex requests with prior written notification.

15.1 Right to Lodge a Complaint with the NPC

If you are not satisfied with jiliap's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the Philippine government authority responsible for ensuring compliance with the Data Privacy Act of 2012. Complaints to the NPC may be filed through the NPC's official channels. jiliap encourages players to contact jiliap's DPO in the first instance to allow for internal resolution before escalating to the NPC.