jillik Privacy Policy

1 Introduction

jillik ("jillik," "we," "us," "our") is committed to protecting the privacy and personal data of all players and users of the jillik platform. This Privacy Policy ("Policy") is issued in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as administered by the National Privacy Commission ("NPC").

This Policy describes the types of personal information jillik collects, the purposes for which it is collected, how it is used, shared, protected, and retained, and the rights available to you as a data subject under Philippine law. jillik acts as the Personal Information Controller in respect of all personal data collected through the jillik platform.

jillik takes its obligations as a personal information controller seriously. Data privacy is not treated as a compliance checkbox at jillik — it is treated as a core component of the trust relationship between jillik and every Filipino player who chooses to use the platform.

2 Definitions

For the purposes of this Privacy Policy, the following terms carry the meanings set out below:

• "Personal Data" / "Personal Information" means any information from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information, would directly and certainly identify an individual.
• "Sensitive Personal Information" means personal information about an individual's race, ethnic origin, marital status, age, color, religious or political beliefs, health, education, genetic or sexual life, past legal proceedings, government-issued identification numbers, and financial information.
• "Processing" means any operation or set of operations performed upon personal data, including collection, recording, organisation, storage, updating, retrieval, use, disclosure, erasure, or destruction.
• "Data Subject" means the individual whose personal data is being processed — in the context of this Policy, the jillik player or user.
• "KYC" means Know Your Customer identity verification conducted by jillik in compliance with PAGCOR regulations and anti-money laundering requirements.

3 Personal Data We Collect

3.1 Information You Provide Directly

When you register a jillik account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions, jillik collects the following categories of personal information:

3.2 Information Collected Automatically

When you access and use the jillik platform, jillik automatically collects the following technical information:

• IP address and approximate geographic location;
• device type, operating system, and browser type and version;
• session timestamps, page views, and navigation paths within the platform;
• login history and authentication event logs;
• performance and error data from game sessions.

This technical data is used for platform security, fraud detection, and service improvement. It is not used to build marketing profiles or shared with advertising networks.

4 How We Use Your Personal Data

jillik uses personal data collected from players for the following specific purposes:

• Account creation and management — registering your jillik account, authenticating your identity at login, and managing your account settings and balance;
• KYC and age verification — verifying that you are 21 years of age or older and that you are the person you represent yourself to be, as required by PAGCOR regulations;
• Transaction processing — facilitating deposits via GCash, PayMaya, BPI, BDO, Metrobank, and Visa/Mastercard, and processing withdrawal requests to your registered payment method;
• Regulatory compliance — fulfilling obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (Republic Act No. 9160), and related Philippine regulations, including reporting obligations to the AMLC where required by law;
• Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, unauthorised account access, and prohibited conduct in accordance with jillik's Terms & Conditions;
• Customer support — responding to your inquiries, resolving disputes, and maintaining support interaction records;
• Responsible gaming — monitoring play patterns to identify potential problem gambling indicators and providing appropriate responsible gaming tools and interventions;
• Service improvement — analysing aggregated, anonymised usage data to improve the jillik platform, game selection, and user experience;
• Marketing communications — sending promotional information about jillik offers and events, subject to your marketing preferences and opt-out rights.

5 Legal Basis for Processing

jillik processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between jillik and you as a player, including account management, transaction processing, and platform access;
• Legal obligation: Processing required to comply with jillik's obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Tax Code of the Philippines, and other applicable Philippine laws;
• Legitimate interests: Processing for jillik's legitimate interests in platform security, fraud prevention, responsible gaming monitoring, and service improvement, where these interests are not overridden by your data subject rights;
• Consent: Processing for marketing communications, where jillik relies on your freely given, specific, and informed consent, which may be withdrawn at any time.

6 Data Sharing and Disclosure

6.1 Service Providers

jillik shares personal data with carefully selected third-party service providers who process data on jillik's behalf, under binding data processing agreements that require them to maintain appropriate security and confidentiality standards. These categories include: payment processors (GCash, PayMaya, banking partners); KYC verification service providers; cloud infrastructure providers; fraud detection service providers; and customer support platform providers.

6.2 Regulatory and Law Enforcement Disclosure

jillik will disclose personal data to competent government authorities, including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where required or permitted by law, including pursuant to lawful court orders or regulatory investigations.

6.3 No Sale of Personal Data

jillik does not sell, rent, or trade personal data to any third party for marketing purposes. No advertising networks, data brokers, or marketing aggregators receive personal data from jillik in any form.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of jillik's assets, personal data held by jillik may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy and any applicable notification requirements under Philippine law.

7 International Data Transfers

Some of jillik's third-party service providers may be located outside the Philippines and may process personal data in their respective jurisdictions. Where personal data is transferred internationally, jillik implements appropriate safeguards to ensure the receiving entity provides a comparable level of data protection to that required under Philippine law. These safeguards include contractual data transfer agreements incorporating standard data protection clauses and assessments of the recipient jurisdiction's data protection framework.

jillik does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing additional protective measures.

8 Data Retention

jillik retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. Key retention periods applied by jillik are as follows:

• Active account data: Retained for the duration of your jillik account relationship, plus a post-closure period required by law;
• KYC and identity verification records: Retained for a minimum of five (5) years following account closure, as required under PAGCOR regulations and Anti-Money Laundering Act obligations;
• Transaction records: Retained for a minimum of five (5) years, consistent with AMLC record-keeping requirements;
• Support communications: Retained for up to three (3) years from the date of the last interaction;
• Marketing consent records: Retained until you withdraw consent or for three (3) years from consent, whichever is earlier.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with jillik's data disposal procedures.

9 Cookies and Tracking Technologies

The jillik platform uses cookies and similar technologies including local storage and session tokens. The categories of cookies used by jillik are:

• Strictly Necessary Cookies: Essential for platform operation, including session authentication and security tokens. These cannot be disabled without impairing your ability to use the platform.
• Functional Cookies: Used to remember your preferences such as language settings, game category selections, and deposit method defaults.
• Analytics Cookies: Used to collect anonymised aggregate data on how players use the jillik platform, to identify areas for improvement. jillik uses internal analytics only and does not use third-party advertising or tracking cookies.

You may manage cookie settings through your browser's privacy settings. Disabling strictly necessary cookies will affect your ability to log in and use the platform.

10 Security Measures

jillik implements the following technical and organisational security measures to protect your personal data:

• Encryption in transit: All data transmitted between your device and jillik's servers is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Sensitive personal data stored on jillik's infrastructure is encrypted at rest;
• Access controls: Access to personal data is restricted to jillik personnel with a documented need to access it for their job functions, governed by role-based access controls and logged access audit trails;
• Two-factor authentication: Available for player accounts and mandatory for administrative system access;
• Regular security assessments: jillik conducts periodic security assessments and penetration testing of its platform infrastructure;
• Data breach response: jillik maintains a documented data breach response procedure and will notify affected data subjects and the National Privacy Commission within seventy-two (72) hours of becoming aware of a personal data breach, as required under Philippine law.

11 Exercising Your Data Subject Rights

To exercise any of your data subject rights under the Data Privacy Act of 2012 — including rights of access, rectification, erasure, data portability, objection, or restriction — please submit a written request to jillik's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request."

Your request should include your full name, registered mobile number, the nature of the right you wish to exercise, and sufficient information to allow jillik to identify and locate your data. jillik may request additional verification of your identity before processing your request.

jillik will respond to verifiable data subject requests within fifteen (15) working days. Where the request is complex or jillik receives a high volume of requests, this period may be extended by a further thirty (30) days, with written notification to you explaining the reason for the extension.

jillik will not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may be charged or the request may be declined, with reasons provided.

12 Children's Privacy and Age Restriction

The jillik platform is strictly restricted to individuals aged twenty-one (21) years and older, in compliance with PAGCOR regulations governing online gaming in the Philippines. jillik does not knowingly collect personal data from any individual under the age of 21.

Age verification is a mandatory component of the jillik KYC process. Where jillik determines that personal data has been submitted by or on behalf of an individual under the age of 21, that Account will be immediately closed and all associated personal data will be deleted, except where retention is required by law in connection with the incident.

13 Marketing Communications

jillik may use your contact information to send you marketing communications about jillik promotions, bonus offers, new games, and platform updates, where you have provided your consent to receive such communications at registration or subsequently through your account settings.

You may opt out of marketing communications at any time by:

• updating your communication preferences in your jillik account settings;
• replying "STOP" to any promotional SMS from jillik; or
• contacting jillik support at [email protected].

Opting out of marketing communications will not affect your ability to use the jillik platform or receive essential transactional communications related to your account, such as deposit confirmations, withdrawal notifications, and security alerts.

14 Third-Party Links

The jillik platform may contain links to third-party websites or services, including payment processors and game providers accessed through the platform interface. This Privacy Policy does not apply to third-party websites or services. jillik is not responsible for the privacy practices of third parties and encourages players to review the privacy policies of any third-party service they access.

15 Changes to This Privacy Policy

jillik reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, jillik's data processing practices, or the jillik platform. Material changes to this Policy will be communicated to registered players via SMS notification to the registered mobile number or by prominent notice on the jillik platform, with a minimum of fourteen (14) days' advance notice before the changes take effect.

The "Last Updated" date at the top of this Policy will be revised to reflect the date of any update. Your continued use of the jillik platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree to the updated Policy, you must discontinue use of the platform and may close your account.

16 Contact and Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or to contact jillik's Data Protection Officer, please use the following channels: