jilliko Privacy
Policy

jilliko ("we," "us," or "our") is an online gaming platform operating at jilliko.app, offering live casino games, slot machines, bingo, sports betting, and other gaming products to eligible players in the Philippines. jilliko is the data controller responsible for the personal data collected through the jilliko platform.

This Privacy Policy applies to all personal data collected by jilliko through the jilliko.app website, mobile applications, customer support channels, and any other touchpoints through which you interact with the jilliko brand.

jilliko collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

jilliko collects personal data directly from you (during registration, verification, and gameplay), automatically (through cookies and server logs), and from third parties (such as payment processors and identity verification providers) where necessary and permitted by law.

jilliko uses your personal data for the following purposes:

• Account Management: To create, verify, and maintain your jilliko player account, including identity verification and age confirmation (21+ requirement).
• Service Delivery: To provide access to jilliko's games, process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and deliver customer support.
• Legal & Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable Philippine laws.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats.
• Responsible Gaming: To monitor gaming behaviour, identify at-risk players, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Communications: To send you account notifications, transaction confirmations, promotional offers (where you have opted in), and important platform updates.
• Platform Improvement: To analyse usage patterns, conduct A/B testing, and improve the jilliko platform's features, performance, and user experience.
• Dispute Resolution: To investigate and resolve disputes relating to game outcomes, transactions, or account activity.

jilliko will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

Under the Data Privacy Act of 2012 (RA 10173), jilliko processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your jilliko account and deliver gaming services.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA reporting obligations, tax laws, and other applicable Philippine legal requirements.
• Legitimate Interests: Processing necessary for jilliko's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent — for example, for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jilliko does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to verify your identity and age in compliance with PAGCOR requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulatory instruction.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged to operate and secure the jilliko platform.
• Legal & Professional Advisers: Lawyers, auditors, and other professional advisers engaged by jilliko in connection with legal proceedings or compliance matters.
• Law Enforcement: Philippine law enforcement agencies, where jilliko is legally required or permitted to disclose personal data in connection with a criminal investigation or court order.

All third-party service providers engaged by jilliko are contractually required to process your personal data only for the specified purpose, to maintain appropriate security standards, and to comply with the Data Privacy Act of 2012.

jilliko uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform, remember your preferences, and analyse usage patterns. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the platform to function — including session management, login authentication, and security tokens. These cannot be disabled.
• Performance Cookies: Used to collect anonymised data about how players use the jilliko platform, helping us identify and fix performance issues.
• Functional Cookies: Used to remember your preferences, such as language settings and display options, to personalise your experience.
• Analytics Cookies: Used to understand aggregate usage patterns and improve the jilliko platform. Analytics data is anonymised and not linked to individual player identities.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the jilliko platform. jilliko does not use cookies to serve third-party advertising or to build advertising profiles.

jilliko retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your active jilliko account, plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act (AMLA) and BIR regulations.
• Gaming History: Retained for five (5) years from the date of each gaming session, for dispute resolution and regulatory compliance purposes.
• Customer Support Records: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent.

Upon expiry of the applicable retention period, jilliko will securely delete or anonymise your personal data in accordance with our data disposal procedures. Anonymised data (which can no longer identify you) may be retained indefinitely for statistical and analytical purposes.

jilliko implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS Encryption: All data in transit between your device and jilliko's servers is encrypted using industry-standard TLS 1.3 protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored in jilliko's databases is encrypted at rest using AES-256 encryption.
• Two-Factor Authentication (2FA): SMS OTP-based 2FA is available for all account logins and withdrawal requests.
• Access Controls: Access to personal data within jilliko is restricted to authorised personnel on a strict need-to-know basis, with role-based access controls and audit logging.
• Regular Security Audits: jilliko's platform and infrastructure undergo regular penetration testing and security audits by independent third-party security firms.
• Incident Response: jilliko maintains a documented data breach response plan. In the event of a personal data breach, affected players and the National Privacy Commission will be notified within 72 hours as required by RA 10173.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by jilliko:

• Right to be Informed: The right to know what personal data jilliko collects about you and how it is used — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data jilliko holds about you.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to applicable legal retention requirements.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact jilliko's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond to all verified requests within fifteen (15) business days.

The jilliko platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations applicable in the Philippines. jilliko does not knowingly collect personal data from any person under the age of 21.

If jilliko discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, delete all personal data collected from that individual, and cancel any pending transactions. Any winnings accumulated by an underage player will be forfeited.

jilliko primarily stores and processes your personal data on servers located within the Philippines or in jurisdictions that provide an adequate level of data protection as recognised by the National Privacy Commission. Where personal data is transferred outside the Philippines — for example, to cloud infrastructure providers or international payment processors — jilliko ensures that appropriate safeguards are in place, including:

• Standard contractual clauses approved by the National Privacy Commission.
• Binding corporate rules where applicable.
• Transfers to jurisdictions recognised by the NPC as providing adequate data protection.

By using the jilliko platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

jilliko reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email to their registered address and/or by prominent in-platform notification at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. The most current version of this Privacy Policy is always available at jilliko.app/privacy-policy. Your continued use of the jilliko platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

If you have any questions, concerns, or complaints regarding this Privacy Policy or jilliko's data processing practices, please contact our Data Protection Officer:

• Email: [email protected] (Subject: "Data Privacy Request")
• Response Time: Within 15 business days for all verified data privacy requests
• Platform: 24/7 Live Chat available via the jilliko platform

If you are not satisfied with jilliko's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines.