jilioh Privacy Policy

1. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jilioh is the personal information controller responsible for the personal data collected through the jilioh Platform at jilioh.net.

jilioh operates as a PAGCOR-regulated online casino and sports betting platform serving Filipino players. As the data controller, jilioh determines the purposes and means of processing your personal data and bears responsibility for ensuring that such processing is carried out in compliance with applicable Philippine law, including RA 10173 and PAGCOR's data governance requirements for licensed gaming operators.

For all privacy-related inquiries, please contact jilioh's designated Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

2. Scope & Application

This Privacy Policy applies to all personal data collected by jilioh through:

• The jilioh website accessible at jilioh.net and all associated subdomains;
• The account registration, KYC verification, and login processes;
• Deposit and withdrawal transactions conducted via GCash, Maya, BPI, BDO, Metrobank, GrabPay, 7-Eleven, and other supported payment methods;
• Gaming activity including casino games, sports betting, bingo, and slots;
• Customer support interactions via live chat and email;
• Responsible gaming tools including deposit limits, self-exclusion requests, and cooling-off periods;
• Promotional communications and bonus claim processes;
• Technical data collected automatically when you access the Platform, including cookies and device identifiers.

This Policy does not apply to third-party websites or services that may be linked to from the jilioh Platform. jilioh is not responsible for the privacy practices of any third party, and you are encouraged to review the privacy policies of any external service you choose to use.

3. Data We Collect

3.1 Data You Provide Directly

When you register a jilioh account, complete KYC verification, or interact with our support team, you provide us with the following categories of personal data:

3.2 Data Collected Automatically

When you access the jilioh Platform, our systems automatically collect certain technical data necessary for security monitoring, fraud prevention, and service optimization:

• Device Data: Device type, operating system version, browser type and version, screen resolution, and unique device identifiers;
• Network Data: IP address, approximate geographic location derived from IP (city/region level), internet service provider;
• Usage Data: Pages visited, features accessed, session start and end times, click-path data, error logs;
• Cookie Data: Session cookies, authentication tokens, and persistent preference cookies as described in Section 10.

3.3 Data from Third Parties

jilioh may receive limited personal data from trusted third-party sources in the following contexts:

• Payment Processors: Transaction confirmation data from GCash, Maya, and partner banks to verify deposits and validate withdrawal recipients;
• Identity Verification Providers: Results of automated KYC screening checks conducted by PAGCOR-approved verification partners;
• Fraud Prevention Services: Risk scores and device reputation signals from fraud detection partners to protect all jilioh account holders.

4. How We Use Your Data

jilioh processes your personal data for the following specific purposes. We will never use your data in a manner inconsistent with the purpose for which it was originally collected without first obtaining your explicit consent.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, jilioh processes your personal data on the following legal bases:

• Contractual Necessity: Processing your identity data, financial data, and gaming data is necessary to fulfill our contractual obligations to you under the jilioh Terms and Conditions — including operating your account, processing transactions, and providing gaming services.
• Legal Obligation: Processing for KYC verification, anti-money laundering compliance under the Anti-Money Laundering Act (AMLA), and regulatory reporting to PAGCOR is required by Philippine law. jilioh cannot provide services without fulfilling these obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service analytics is carried out on the basis of jilioh's legitimate interests in operating a safe and fair gaming environment, provided those interests are not overridden by your rights and freedoms.
• Consent: Processing your contact data for direct marketing communications, bonus offers, and promotional notifications is conducted only where you have given your explicit opt-in consent at the time of registration or subsequently through your account settings. You may withdraw this consent at any time.

6. Data Sharing & Disclosure

jilioh does not sell your personal data. We share your data only in the following limited and controlled circumstances:

6.1 Regulated Disclosures

jilioh is legally required to share certain personal and financial data with the following Philippine regulatory bodies under applicable law:

• PAGCOR: As the licensing and regulatory authority for Philippine online gaming operators, PAGCOR may require access to account data, transaction records, and KYC documentation as part of its regulatory oversight functions;
• AMLC (Anti-Money Laundering Council): Transaction reports and suspicious activity reports required under the Anti-Money Laundering Act;
• National Privacy Commission (NPC): Data breach notifications and compliance reports as required under RA 10173.

6.2 Service Providers

jilioh engages a limited number of trusted third-party service providers who process data strictly on our behalf and under binding data processing agreements that prohibit independent use of your data:

• Payment processing partners (GCash, Maya, partner banks) for transaction facilitation;
• KYC and identity verification technology providers;
• Fraud detection and cybersecurity services;
• Cloud infrastructure and data hosting providers operating within compliant data centers;
• Customer support platform providers.

6.3 Legal Process

jilioh may disclose personal data in response to a valid court order, subpoena, legal process, or lawful request from Philippine law enforcement authorities. Where legally permissible, jilioh will notify affected account holders of such requests before disclosure.

7. Cross-Border Data Transfers

The jilioh Platform primarily stores and processes data within data centers located in the Philippines or in jurisdictions with data protection standards recognized as adequate under NPC guidelines. Where any personal data is transferred outside the Philippines — for example, to cloud infrastructure providers or game content licensors operating internationally — jilioh ensures that appropriate safeguards are in place, including:

• Binding contractual clauses requiring the overseas recipient to provide a standard of data protection equivalent to RA 10173;
• Verification that the recipient jurisdiction has been assessed as providing adequate protection by the NPC or an equivalent recognized authority;
• Your explicit consent where required for specific data transfers not covered by the above mechanisms.

You may request information about the specific safeguards applied to any cross-border transfer of your personal data by contacting jilioh's Data Protection Officer.

8. Data Retention

jilioh retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where anonymization is not technically feasible, data is destroyed using industry-standard methods.

9. Security Measures

jilioh implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• Encryption in Transit: All data transmitted between your device and jilioh's servers is encrypted using TLS 1.2 / 1.3 with 256-bit SSL certificates;
• Encryption at Rest: Sensitive data fields including KYC documents and financial identifiers are encrypted at the database level using AES-256;
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. jilioh staff with access to personal data undergo mandatory data privacy training and are bound by confidentiality obligations;
• Two-Factor Authentication (2FA): Available and strongly encouraged for all jilioh account holders to protect against unauthorized login;
• Device Fingerprinting & Fraud Detection: Automated systems monitor login patterns and transaction behavior to identify and block suspicious activity in real time;
• Vulnerability Management: Regular penetration testing and security assessments are conducted by qualified cybersecurity professionals to identify and remediate vulnerabilities;
• Incident Response: jilioh maintains a documented data breach response plan. In the event of a breach that poses a real risk to your rights, jilioh will notify the NPC within 72 hours of discovery and will notify affected individuals without undue delay as required by RA 10173.

10. Cookies & Tracking Technologies

jilioh uses cookies and similar technologies on the Platform for the following purposes:

Strictly necessary cookies cannot be disabled as they are essential to the operation of the Platform. You may manage your preferences for functional and analytics cookies through your account settings or your browser's cookie management tools. Note that disabling certain cookies may affect the functionality of the jilioh Platform.

jilioh does not use third-party advertising cookies or allow third-party advertisers to place tracking technologies on the Platform.

11. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jilioh. To exercise any of these rights, contact the jilioh Data Protection Officer as described in Section 14.

12. Minors & Age Restriction

The jilioh Platform is strictly restricted to individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. jilioh does not knowingly collect personal data from persons under 21 years of age.

Age verification is a mandatory component of the jilioh KYC process. If jilioh becomes aware that personal data has been collected from an individual who is under 21 years of age, we will immediately close the associated account, void all gaming activity conducted through that account, return any legitimate deposits to the verified payment method, and securely delete the personal data collected.

If you are a parent or guardian and believe that a minor has registered a jilioh account using your details or theirs, please contact jilioh support immediately at [email protected] so we can take prompt action.

13. Policy Amendments

jilioh reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, NPC guidelines, PAGCOR requirements, or our data processing practices. The "Last Reviewed" date at the top of this Policy will always reflect the most recent revision.

Where changes are material — particularly those that affect how we use your personal data, introduce new data sharing arrangements, or alter your rights — jilioh will provide at least 7 days' prior notice by posting a prominent notification on the Platform and, where practicable, sending an email notification to your registered address.

Non-material changes such as clarifications, typographical corrections, and restructuring that do not affect the substance of the Policy may be made without prior notice. Your continued use of the jilioh Platform following any update to this Privacy Policy constitutes your acknowledgment of the revised terms.

14. Contact & Data Protection Officer

For all privacy-related inquiries, data subject rights requests, or concerns regarding jilioh's data processing practices, please contact our designated Data Protection Officer (DPO):

jilioh is committed to resolving all privacy concerns promptly and in good faith. Where a concern cannot be resolved directly with jilioh, you retain the right to escalate your complaint to the Philippine National Privacy Commission (NPC).