Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Jiliaa ("Jiliaa," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "Player," or "User") who access or use the Jiliaa online gaming platform, including the website at jiliaa.app and the Jiliaa mobile application.

Jiliaa is committed to safeguarding the privacy of all Filipino players and to processing personal data responsibly, transparently, and in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.

By registering for a Jiliaa account, accessing the platform, or otherwise providing your personal information to us, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Jiliaa platform.

This Policy should be read alongside Jiliaa's Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with Jiliaa.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection regulations, Jiliaa acts as the Personal Information Controller in respect of the personal data it collects from players and users of the platform.

Jiliaa has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at any time using the contact details provided in Section 15 of this Policy.

3. Data We Collect

Jiliaa collects the following categories of personal data from players and users of the platform:

3.1 Identity and Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify that you meet the minimum age requirement of 21 years)
• Email address and mobile phone number
• Residential address, city, and province (e.g., Manila, Cebu, Davao, Quezon City, Makati)
• Government-issued identification number (e.g., PhilSys ID, passport, driver's licence)

3.2 Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details for BPI, BDO, Metrobank, or other linked bank accounts
• Transaction history, including deposits, withdrawals, and wager records
• Source of funds documentation where required for anti-money laundering compliance

3.3 Technical and Usage Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Session duration, login timestamps, and platform activity logs
• Game history, betting patterns, and wagering behaviour
• Cookie identifiers and similar tracking technology data

3.4 Communications Data

• Records of communications between you and Jiliaa's customer support team
• Feedback, complaints, and dispute records
• Marketing preferences and communication opt-in/opt-out records

3.5 Responsible Gaming Data

• Deposit limits, session time limits, and cooling-off period settings you have applied to your account
• Self-exclusion requests and related documentation
• Responsible gaming tool usage history

4. How We Collect Your Data

Jiliaa collects personal data through the following means:

• Direct collection: Information you provide when registering for a Jiliaa account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Jiliaa platform, including through cookies, web beacons, server logs, and similar technologies.
• Third-party sources: Identity verification data from KYC service providers; payment data from GCash, PayMaya, and banking partners; fraud prevention data from third-party risk management services.
• Regulatory sources: Information received from PAGCOR, the NPC , or other competent Philippine authorities in connection with regulatory compliance obligations.

5. How We Use Your Data

Jiliaa uses the personal data we collect for the following purposes:

Jiliaa will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by law.

6. Legal Basis for Processing

Jiliaa processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our obligations under the Jiliaa Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR licensing requirements, and NPC directives.
• Legitimate interests: Processing necessary for Jiliaa's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly in relation to marketing communications and non-essential cookies. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7. Data Sharing and Disclosure

Jiliaa does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

7.1 Service Providers

Jiliaa engages trusted third-party service providers to assist in operating the platform, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, customer support platforms, and fraud detection services. These providers are contractually bound to process your data only on Jiliaa's instructions and in accordance with applicable data protection law.

7.2 Regulatory and Law Enforcement Authorities

Jiliaa may disclose your personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or other competent Philippine authorities where required by law, court order, or regulatory directive.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Jiliaa's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

7.4 With Your Consent

Jiliaa may share your personal data with other third parties where you have provided your explicit prior consent to such sharing.

8. Cookies & Tracking Technologies

Jiliaa uses cookies and similar tracking technologies on the jiliaa.app website and mobile application to enhance your experience, analyse platform usage, and support security functions. The types of cookies we use include:

• Strictly necessary cookies: Essential for the operation of the Jiliaa platform, including session management, login authentication, and security functions. These cookies cannot be disabled without affecting platform functionality.
• Performance and analytics cookies: Used to collect anonymised information about how players use the Jiliaa platform, including pages visited, time spent, and error reports. This data helps us improve the platform experience.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Marketing cookies: Used, with your consent, to deliver relevant promotional content and to measure the effectiveness of Jiliaa's marketing campaigns. You may opt out of marketing cookies at any time through your account settings.

You can manage your cookie preferences through your browser settings or through the cookie preference centre available on the Jiliaa platform. Please note that disabling certain cookies may affect the functionality of the platform.

9. Data Retention

Jiliaa retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general data retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and BIR regulations.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer if related to an ongoing dispute or legal proceeding.
• Technical and usage data: Retained for up to twelve (12) months, after which it is anonymised or deleted.
• Marketing preferences: Retained until you withdraw your consent or request deletion.

Upon expiry of the applicable retention period, Jiliaa will securely delete or anonymise your personal data in accordance with its data disposal procedures.

10. Data Security

Jiliaa implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and Jiliaa's servers.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular security vulnerability assessments and penetration testing of the Jiliaa platform.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While Jiliaa takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your Jiliaa account credentials and for notifying us immediately if you suspect any unauthorised access to your account.

11. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by Jiliaa:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of access: You have the right to request a copy of the personal data Jiliaa holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to Jiliaa's legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on Jiliaa's legitimate interests.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that Jiliaa has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact Jiliaa's Data Protection Officer using the contact details in Section 15. Jiliaa will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

12. Children's Privacy

The Jiliaa platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR regulations and Philippine law governing online gaming. Jiliaa does not knowingly collect personal data from individuals under the age of 21.

If Jiliaa becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Jiliaa platform, please notify us immediately at [email protected].

13. Third-Party Links

The Jiliaa platform may contain references to third-party services, such as payment providers and gaming content suppliers. This Privacy Policy applies solely to data collected and processed by Jiliaa. Jiliaa is not responsible for the privacy practices of any third-party services, and we encourage you to review the privacy policies of any third parties whose services you access in connection with your use of the Jiliaa platform.

14. Updates to This Policy

Jiliaa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify you by posting a prominent notice on the Jiliaa platform and, where appropriate, by sending a notification to your registered email address.

The date of the most recent revision is indicated at the top of this Policy. Your continued use of the Jiliaa platform following notification of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how Jiliaa protects your personal data.

15. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or Jiliaa's data processing practices, please contact our Data Protection Officer:

• Data Protection Officer: Jiliaa DPO
• Email: [email protected]
• General Support: [email protected]
• Response Time: Within 15 business days for data subject requests
• Availability: 24 hours a day, 7 days a week for general support enquiries

If you are not satisfied with Jiliaa's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.

Note: This Privacy Policy constitutes the complete statement of Jiliaa's data protection practices and supersedes all prior versions. The governing language of this Policy is English. In the event of any inconsistency between this Policy and any translation, the English version shall prevail.