jilliok Privacy Policy

1 Who We Are

jilliok ("jilliok," "we," "us," or "our") operates the online gaming platform accessible at jilliok.net and through associated mobile applications. jilliok is the data controller responsible for the personal data of players who register and use the jilliok platform.

This Privacy Policy applies to all personal data collected by jilliok in connection with the provision of our gaming services to players in the Philippines. It should be read alongside our Terms & Conditions and Responsible Gaming Policy.

jilliok operates in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations. We are committed to upholding the rights of data subjects as defined under Philippine law.

2 Personal Data We Collect

jilliok collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Identity and Contact Data

• Full legal name, date of birth, and gender;
• Residential address, city, province, and postal code;
• Email address and mobile phone number;
• Government-issued identification documents (e.g., Philippine passport, driver's licence, SSS/GSIS ID, PhilSys National ID) for KYC verification purposes.

2.2 Account and Financial Data

• jilliok username and encrypted password;
• Account balance, transaction history, deposit and withdrawal records;
• Payment method details (e.g., GCash mobile number, Maya account reference, bank account name and number for withdrawal purposes);
• Bonus and promotional activity records.

2.3 Gaming and Behavioural Data

• Game history, bet amounts, win/loss records, and session durations;
• Responsible gaming tool usage (deposit limits set, cooling-off periods activated, self-exclusion requests);
• Customer support interactions, including chat transcripts and complaint records.

2.4 Technical and Device Data

• IP address, device type, operating system, and browser type;
• Geolocation data (city/region level) derived from your IP address;
• Cookies, session tokens, and similar tracking technologies (see Section 7);
• Log data including pages visited, links clicked, and time spent on each page.

3 How We Collect Your Data

jilliok collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical and device data collected automatically when you access the jilliok platform, including through cookies and similar technologies;
• Third-party sources: Identity verification data from licensed KYC and anti-money laundering (AML) service providers; fraud detection signals from security partners; and payment confirmation data from payment processors such as GCash and Maya.

4 How We Use Your Personal Data

jilliok uses your personal data only for legitimate, specified purposes. The table below summarises our primary data uses and the corresponding legal basis for each:

jilliok will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate legal basis.

5 Legal Basis for Processing

Under the Data Privacy Act of 2012 (Republic Act No. 10173), jilliok processes your personal data on the following legal bases:

• Contract performance: Processing is necessary to fulfil our obligations to you under the jilliok Terms & Conditions, including account management, game provision, and payment processing;
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and data retention mandates;
• Legitimate interest: Processing is necessary for jilliok's legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms;
• Consent: For optional processing activities such as marketing communications, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

jilliok does not sell your personal data to third parties. We may share your data with the following categories of recipients only where necessary and under appropriate data protection safeguards:

• Payment processors: GCash, Maya, and partner banks, for the purpose of processing deposits and withdrawals in Philippine Peso;
• KYC and AML service providers: Licensed identity verification and anti-money laundering compliance partners;
• IT and platform service providers: Cloud hosting, cybersecurity, and software vendors who process data on our behalf under binding data processing agreements;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or court order;
• Responsible gaming organisations: Where you have requested self-exclusion or referral to support services;
• Professional advisers: Lawyers, auditors, and insurers, subject to confidentiality obligations.

7 Cookies and Tracking Technologies

jilliok uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Essential for the platform to function, including session management and security tokens. These cannot be disabled;
• Functional cookies: Remember your language preferences, login state, and display settings to personalise your experience;
• Analytics cookies: Collect aggregated, anonymised data about how players use the jilliok platform, helping us identify areas for improvement;
• Marketing cookies: Used only with your consent to deliver relevant promotional content about jilliok offers and games.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the jilliok platform. Detailed cookie information is available in our Cookie Notice, accessible from the jilliok platform footer.

8 Data Retention

jilliok retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA requirements;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Gaming history: Retained for three (3) years from the date of each gaming session, or longer if required for dispute resolution or regulatory purposes;
• Customer support records: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year for compliance documentation purposes.

When personal data is no longer required, jilliok will securely delete or anonymise it in accordance with our data disposal procedures.

9 Data Security

jilliok implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the jilliok platform;
• Encryption of sensitive data at rest, including identity documents and financial records;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jilliok will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular 16-03.

10 Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jilliok:

• Right to be informed: The right to know how your personal data is being collected and processed — which this Privacy Policy fulfils;
• Right of access: The right to request a copy of the personal data jilliok holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: The right to object to processing based on legitimate interest, including direct marketing;
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting prior processing;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact jilliok's Data Protection Officer using the details in Section 14. jilliok will respond to all verified data subject requests within fifteen (15) business days, in accordance with NPC guidelines.

11 Children's Privacy and Age Restriction

jilliok does not knowingly collect, use, or retain personal data from individuals under the age of 21. Age verification is a mandatory step in the jilliok registration process. If jilliok becomes aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered on the jilliok platform, please contact us immediately at the details provided in Section 14 so that we can investigate and take appropriate action.

12 Cross-Border Data Transfers

jilliok primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international KYC platforms — jilliok will ensure that such transfers are made only to countries or organisations that provide an adequate level of data protection, or under appropriate contractual safeguards such as standard contractual clauses approved by the National Privacy Commission.

jilliok will not transfer your personal data to any jurisdiction that does not provide adequate protection for data subjects' rights without first obtaining your explicit consent or establishing a valid legal basis under the Data Privacy Act of 2012.

13 Changes to This Privacy Policy

jilliok reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, jilliok will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this Privacy Policy indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically. Your continued use of the jilliok platform after the effective date of any revision constitutes your acknowledgement of the updated policy.

14 Contact Us and Data Protection Officer

jilliok has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact:

• Data Protection Officer, jilliok
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the jilliok platform
• Response Time: Within 15 business days for data subject requests; within 2 business days for general enquiries

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. Information about the NPC and how to file a complaint is available through official Philippine government channels.