jilli Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how jilli ("jilli," "we," "us," or "our"), the operator of the online gaming platform at jilli.vu ("Platform"), collects, processes, stores, shares, and protects the personal information of users ("Players," "you") who access or use the Platform.

jilli is committed to protecting your privacy and processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and all applicable issuances of the National Privacy Commission ("NPC"). By registering for a jilli account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with jilli's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

2. Personal Data We Collect

2.1 Registration & Identity Data

When you create a jilli account, we collect: full legal name; date of birth; Philippine mobile number; username; password (stored in hashed, non-reversible form); and any government-issued identification document submitted for Know Your Customer ("KYC") verification, including but not limited to a Philippine National ID, passport, driver's licence, or SSS/GSIS card.

2.2 Financial & Transaction Data

To process deposits and withdrawals, jilli collects: GCash or Maya account identifiers; BPI, BDO, or UnionBank account details where applicable; transaction amounts, timestamps, and reference numbers; and balance history within the jilli platform. jilli does not store full payment card numbers or online banking credentials.

2.3 Gameplay & Usage Data

jilli automatically collects data related to your use of the Platform, including: games played and bet history; session duration and login timestamps; game outcomes; bonus and promotion usage; and interaction logs for responsible gaming monitoring purposes.

2.4 Technical & Device Data

When you access jilli, we collect technical data including: IP address; device type and operating system; browser type and version; screen resolution; mobile network operator; and session identifiers and cookies. This data is used for security, fraud detection, and platform optimisation.

2.5 Communications Data

Where you contact jilli's support team, we retain records of that communication — including messages, chat logs, and any information you voluntarily provide — for quality assurance, dispute resolution, and regulatory compliance purposes.

3. How We Collect Your Data

jilli collects personal data through the following means:

• Directly from you — through account registration, KYC submission, deposit and withdrawal requests, game play, support interactions, and any forms or surveys you complete on the Platform.
• Automatically — through cookies, server logs, and tracking technologies when you access or use the Platform. See Section 7 for details.
• From third parties — from payment processors (GCash, Maya, BPI, BDO, UnionBank) for transaction verification; from identity verification service providers for KYC; and from fraud detection partners as required for AML compliance.
• From regulatory bodies — jilli may receive data from PAGCOR or other Philippine government bodies in the context of its regulatory obligations.

4. Purposes of Processing

jilli processes your personal data for the following purposes:

• To create and manage your jilli account, including verifying your identity and eligibility to use the Platform.
• To process deposits, withdrawals, and all financial transactions in Philippine Peso.
• To provide access to casino games, sports betting, bingo, keno, slots, and other Platform services.
• To comply with PAGCOR licensing requirements, AML obligations under the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• To conduct Know Your Customer (KYC) and age verification checks — including enforcing the 21+ age requirement mandated by PAGCOR.
• To monitor for and prevent fraud, money laundering, account abuse, and other prohibited conduct.
• To administer responsible gaming tools including deposit limits, self-exclusion, and intervention where problem gambling indicators are detected.
• To personalise your Platform experience and deliver relevant promotional communications (where you have consented or where we have a legitimate interest).
• To provide customer support and resolve disputes.
• To maintain, improve, and secure the Platform's technical infrastructure.

5. Legal Bases for Processing

Under the DPA and its IRR, jilli processes your personal data on the following legal bases:

• Consent — where you have given jilli your express, informed consent to process your personal data for a specific purpose (e.g., marketing communications). You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual necessity — processing required to perform the contract between you and jilli (the Terms and Conditions governing your account and use of the Platform).
• Legal obligation — processing necessary to comply with PAGCOR requirements, AMLA obligations, NPC issuances, and other applicable Philippine law.
• Legitimate interests — processing necessary for jilli's legitimate business interests where those interests are not overridden by your fundamental rights and freedoms, including fraud prevention, security, and platform improvement.

6. Data Sharing and Disclosure

jilli does not sell, rent, or trade your personal data to third parties for commercial purposes. jilli shares personal data only in the following circumstances:

• Service providers — jilli engages third-party processors including payment processors (GCash/Maya/BPI/BDO/UnionBank), identity verification providers, cloud hosting providers, and IT security partners. All processors are bound by data processing agreements consistent with DPA requirements.
• PAGCOR and regulatory authorities — jilli shares data with PAGCOR as required by its operating license and with other Philippine government bodies upon valid lawful request, court order, or regulatory directive.
• Anti-money laundering — jilli may share transaction data with the Anti-Money Laundering Council (AMLC) and other relevant bodies as required by the AMLA and its amendments.
• Corporate transactions — in the event of a merger, acquisition, or sale of all or part of jilli's business, your data may be transferred to the successor entity subject to the same privacy protections.
• With your consent — jilli may share data for any other purpose where you have given explicit consent.

Where data is shared with overseas processors, jilli ensures that appropriate safeguards are in place consistent with the DPA's requirements for cross-border data transfers.

7. Cookies and Tracking Technologies

jilli uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device when you visit a website. jilli uses the following types of cookies:

• Essential cookies — required for the Platform to function, including session management, jilli login authentication, and security features. These cannot be disabled without impacting Platform functionality.
• Analytics cookies — used to understand how Players use the Platform, which pages are visited most, and where errors occur. This data is aggregated and does not identify individual players.
• Personalisation cookies — used to remember your preferences, language settings, and customise your Platform experience.
• Security cookies — used for fraud detection, bot prevention, and to protect your jilli account against unauthorised access.

You may control or delete cookies through your browser settings. Disabling essential cookies may prevent you from using certain Platform features, including jilli login. jilli does not use cookies to serve third-party advertising on the Platform.

8. Data Retention

jilli retains your personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following guidelines:

• Account data — retained for the duration of your active jilli account plus a minimum of five (5) years following account closure, as required by PAGCOR and AMLA record-keeping obligations.
• Transaction records — retained for a minimum of five (5) years from the date of the transaction in compliance with AML requirements.
• KYC documents — retained for five (5) years following account closure or the last transaction date, whichever is later.
• Support communications — retained for three (3) years from the date of the communication or until resolution of any related dispute, whichever is later.
• Technical logs — typically retained for twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines.

9. Your Data Subject Rights

Under the DPA and its IRR, you have the following rights with respect to your personal data held by jilli:

• Right to be informed — the right to be notified of the processing of your personal data, including the purposes and legal bases, before or at the time of collection.
• Right of access — the right to obtain a copy of your personal data held by jilli, including information about how it is being processed.
• Right to rectification — the right to have inaccurate or incomplete personal data corrected.
• Right to erasure or blocking — the right to request deletion or blocking of your personal data where processing was unlawful, the data is no longer necessary, or you have withdrawn consent and there is no other legal ground for processing.
• Right to object — the right to object to processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to data portability — the right to receive your personal data in a structured, commonly used format and to transmit it to another controller, where technically feasible.
• Right to damages — the right to claim compensation where you have suffered damage due to inaccurate, incomplete, or unlawful processing of your data.

To exercise any of the above rights, please contact jilli's Data Protection Officer at the address provided in Section 13. jilli will respond to verified requests within thirty (30) days. Requests may be subject to identity verification before processing.

10. Data Security Measures

jilli implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and jilli's servers.
• Encryption of sensitive data at rest, including financial and identity data.
• Password hashing using industry-standard cryptographic algorithms — jilli does not store plaintext passwords.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits, penetration testing, and vulnerability assessments.
• Multi-factor authentication for access to internal administrative systems.
• Incident response procedures for data breach detection, containment, and NPC notification within 72 hours as required by law.

While jilli takes all reasonable measures to protect your personal data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the security of your jilli login credentials.

11. Children and Minors

The jilli Platform is strictly intended for individuals who are at least 21 years of age as required by PAGCOR. jilli does not knowingly collect personal data from persons under the age of 21. Age is verified during the registration process and through periodic KYC checks. If jilli becomes aware that it has collected personal data from a person under 21, that account will be immediately closed, any balance returned (subject to AML verification), and the personal data deleted in accordance with applicable law. Parents or guardians who believe a minor may have registered with jilli are requested to contact [email protected] immediately.

12. Changes to This Privacy Policy

jilli reserves the right to update or modify this Privacy Policy at any time. Material changes will be communicated to registered Players via SMS or notification within the Platform with reasonable advance notice. The updated Policy will be posted at jilli.vu/privacy-policy with a revised "Last Updated" date. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy. If you do not agree to the revised Policy, you must discontinue use of the Platform and may request account closure.

13. Contact and Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or wish to report a privacy concern, please contact jilli's Data Protection Officer:

jilli Data Protection Officer
Email (plain text — not clickable): [email protected]
Platform: jilli.vu
Jurisdiction: Republic of the Philippines
Regulatory body: PAGCOR & National Privacy Commission (NPC)

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.