Privacy Policy

01Introduction

This Privacy Policy ("Policy") describes how jilioo ("jilioo," "we," "us," or "our"), the operator of the online gaming platform accessible at jilioo.org, collects, uses, stores, discloses, and otherwise processes personal information about players and visitors ("you" or "Data Subject") in the course of operating the jilioo platform.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). It supplements and should be read together with the jilioo Terms and Conditions.

By registering a jilioo account, accessing the platform, or providing us with any personal information, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must not create an account or continue to use the jilioo platform.

02Data Controller

The personal information collected through the jilioo platform is controlled by jilioo, the entity responsible for the operation of jilioo.org (the "Data Controller"). As the Data Controller, jilioo determines the purposes and means by which your personal data is processed and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012 and all applicable Philippine data privacy regulations.

jilioo has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data privacy law. Contact information for the DPO is set out in Section 15 of this Policy.

03Personal Data We Collect

jilioo collects personal information that is necessary for the provision of its online gaming services, compliance with regulatory obligations, and the protection of the platform's integrity. The categories of personal data we collect include, but are not limited to, the following:

3.1 Registration Data

• Full legal name as it appears on a valid government-issued identification document;
• Date of birth (used to verify that you meet the 21-year minimum age requirement);
• Philippine mobile number registered in your name;
• Email address;
• Chosen username and encrypted password hash.

3.2 Identity Verification Data (KYC)

• Copies of government-issued photo identification documents (e.g., UMID, PhilSys National ID, Philippine driver's license, or Philippine passport);
• Proof of address documentation where required;
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account showing registered name);
• Selfie or liveness check images where required for enhanced identity verification.

3.3 Financial Data

• Transaction history, including deposit amounts, dates, and payment method used (GCash, PayMaya, BPI, BDO, Metrobank, or other approved methods);
• Withdrawal requests, amounts, and processing status;
• Bonus and promotional credit records;
• Account balance history.

3.4 Gaming Activity Data

• Game session records, including games played, wager amounts, outcomes, and timestamps;
• VIP points and loyalty program activity;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session time alerts, self-exclusion status).

3.5 Technical & Device Data

• IP address and approximate geolocation (city-level) at the time of login and transactions;
• Device type, operating system, and browser type;
• Session identifiers, login timestamps, and session duration;
• Cookie identifiers and similar tracking technology data (see Section 10).

3.6 Communications Data

• Records of customer support interactions via live chat, email, or other supported channels;
• Feedback and survey responses submitted voluntarily.

04How We Collect Your Data

jilioo collects personal data through the following means:

• Directly from you — when you register a jilioo account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey;
• Automatically through your use of the platform — device data, IP addresses, session data, and cookie information are collected automatically when you access jilioo.org;
• From third-party payment processors — transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other approved payment partners;
• From identity verification service providers — where third-party KYC or liveness verification services are used to verify your identity documents;
• From fraud prevention and AML screening services — to detect and prevent fraudulent activity and ensure compliance with anti-money laundering regulations.

05Purposes of Processing

jilioo processes your personal data for the following purposes:

06Legal Basis for Processing

Under the Data Privacy Act of 2012, jilioo processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between jilioo and you — including account management, deposit and withdrawal processing, and game provision;
• Legal obligation: Processing is required to comply with jilioo's obligations under Philippine law, including AML/CTF regulations, age verification requirements, and PAGCOR regulatory reporting obligations;
• Legitimate interests: Processing is necessary for jilioo's legitimate business interests, including fraud prevention, platform security, and improvement of services, provided such interests are not overridden by your rights and freedoms;
• Consent: Where required by law and not covered by the above bases, jilioo will seek your explicit consent before processing your data — for example, for certain direct marketing communications. You may withdraw such consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07Sharing Your Personal Data

jilioo does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Payment Processors

Transaction data is shared with payment service providers (including GCash, PayMaya, BPI, BDO, and Metrobank) as necessary to process deposits and withdrawals. These providers are bound by their own data privacy obligations and are certified payment processors under applicable Philippine regulations.

7.2 Identity Verification Providers

KYC document data may be shared with certified identity verification and liveness detection service providers engaged by jilioo for the purpose of verifying player identity in compliance with AML/CTF regulatory requirements.

7.3 Regulatory and Law Enforcement Authorities

jilioo is required by Philippine law to disclose certain player data to regulatory bodies including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent authorities, upon lawful demand. jilioo will not disclose data to such authorities beyond what is legally required.

7.4 Fraud Prevention and Security Services

Device data, IP addresses, and transaction patterns may be shared with third-party fraud detection and cybersecurity services engaged by jilioo to protect the integrity of the platform and its players.

7.5 Game Content Providers

Certain anonymized or pseudonymized gaming activity data (such as session identifiers) may be shared with licensed game content providers (e.g., JILI, Pragmatic Play, PG Soft) solely for the purpose of game provision, technical support, and jackpot processing. These providers do not receive personally identifiable registration data.

7.6 Professional Advisers

jilioo may share relevant data with its legal, accounting, and auditing advisers under strict confidentiality obligations, where necessary to obtain professional advice or to establish, exercise, or defend legal claims.

08Data Retention

jilioo retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Account and registration data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML/CTF record-keeping requirements under Philippine law;
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of submission or the date of account closure, whichever is later;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with applicable anti-money laundering regulations;
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each session, or longer where required by regulatory reporting obligations;
• Customer support communications: Retained for a minimum of two (2) years from the date of the last interaction;
• Technical and device data (session logs): Retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any individual player.

09Security Measures

jilioo implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jilioo servers — the same encryption standard used by major Philippine banking institutions;
• Encryption at rest for sensitive personal data stored on jilioo servers, including KYC documents and financial records;
• Access controls limiting access to personal data to jilioo personnel who require it for their specific job functions, with role-based permissions enforced;
• Two-factor authentication available to players and required for jilioo staff accessing systems that contain personal data;
• Regular security audits and penetration testing conducted by qualified third-party security firms;
• Secure deletion protocols ensuring that data is irreversibly destroyed upon expiry of its retention period.

While jilioo takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of data subjects, jilioo will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach and will notify affected players where required by the DPA and its IRR.

10Cookies & Tracking Technologies

jilioo uses cookies and similar tracking technologies on jilioo.org to provide a functional, secure, and personalized gaming experience. Cookies are small text files stored on your device when you visit the platform.

10.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the operation of the platform, including session management, login authentication, and security functions. These cookies cannot be disabled without impairing platform functionality;
• Functional cookies: Store your preferences (such as language settings and responsible gaming tool configurations) to personalize your jilioo experience;
• Analytics cookies: Collect anonymized and aggregated data about how players use jilioo.org, enabling us to improve platform performance and user experience;
• Security and fraud prevention cookies: Used to detect and prevent fraudulent account activity, including bot detection and unusual session behavior analysis.

10.2 Managing Cookies

You may configure your browser to refuse or delete cookies at any time. However, disabling strictly necessary cookies will impair your ability to log in to your jilioo account and use core platform features. Instructions for managing cookies vary by browser — refer to your browser's help documentation for device-specific guidance.

11Minors and Age Restriction

jilioo's services are strictly restricted to individuals who are at least twenty-one (21) years of age, in accordance with PAGCOR's online gambling age restrictions in the Philippines. jilioo does not knowingly collect personal data from persons under the age of 21.

If jilioo becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account and securely delete the data in question. If you believe that jilioo may have inadvertently collected data from a minor, please contact our Data Protection Officer using the contact information in Section 15.

12Your Rights as a Data Subject

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by jilioo. You may exercise these rights by contacting the jilioo Data Protection Officer as described in Section 15.

To exercise any of the above rights, please contact the jilioo Data Protection Officer in writing using the contact details provided in Section 15. jilioo will respond to all data subject requests within fifteen (15) working days of receipt, or such longer period as may be permitted under applicable law.

Identity verification will be required before any data subject request is processed, to ensure that personal data is not disclosed or altered on the basis of a fraudulent request.

13Cross-Border Data Transfers

Certain personal data processed by jilioo may be transferred to, stored on, or accessed from servers or systems located outside the Republic of the Philippines — for example, where jilioo engages internationally-based game content providers, cloud infrastructure services, or KYC verification platforms.

Where such cross-border transfers occur, jilioo ensures that an appropriate level of data protection is maintained through one or more of the following mechanisms:

• Transfer to countries or organizations recognized by the National Privacy Commission as providing an adequate level of data protection;
• Use of standard contractual clauses or data processing agreements approved by or consistent with the requirements of the NPC;
• Binding contractual obligations on recipient organizations requiring them to protect the personal data to the same standard required under the DPA.

For more information about the safeguards applicable to cross-border transfers of your personal data, please contact the jilioo Data Protection Officer.

14Changes to This Privacy Policy

jilioo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the National Privacy Commission. Material changes to this Policy will be communicated to registered jilioo players via email or a prominent notice on the platform at least seven (7) days before the changes take effect, where reasonably practicable.

The "Effective Date" and "Last Updated" dates at the top of this Policy indicate when the current version came into force. Your continued use of the jilioo platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any update to this Policy, you must cease using jilioo and contact us to request account closure.

15Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by jilioo, please contact the jilioo Data Protection Officer. The DPO is responsible for overseeing jilioo's compliance with the Data Privacy Act of 2012 and is your primary point of contact for all data privacy matters.

You also have the right to submit a complaint to the National Privacy Commission of the Philippines if you believe that jilioo has violated your data privacy rights. The NPC can be reached via its official website: privacy.gov.ph (this URL is provided for reference only and is not a hyperlink on this page).