jilliz Privacy Policy – How We Handle Your Personal Data

1. Who We Are (Data Controller)

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jilliz — accessible at jilliz.vip — is the Personal Information Controller (PIC) in respect of the personal data it collects from Players and visitors to the platform.

jilliz operates under PAGCOR regulatory oversight. PAGCOR, as a supervisory authority with lawful access to certain Player data for regulatory purposes, may be considered a Personal Information Processor (PIP) in relation to data shared with it pursuant to jilliz's licensing obligations.

References to "jilliz", "we", "us", or "our" in this Privacy Policy refer to the jilliz platform as the data controller.

2. Personal Data We Collect

jilliz collects personal data that is necessary for the provision of its services, regulatory compliance, and the protection of both Players and the platform. The categories of data collected are set out in the table below.

jilliz does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly necessary for KYC verification and regulatory compliance. We do not collect health data, religious beliefs, political affiliations, or biometric data other than ID photographs used for identity verification purposes.

3. How We Collect Your Data

3.1 Data You Provide Directly

The majority of personal data jilliz holds is provided directly by you during:

• Account registration (name, date of birth, contact details, username, password).
• KYC verification (government ID documents, selfie verification).
• Financial transactions (payment method details provided when depositing or withdrawing).
• Communications with jilliz support (chat transcripts, email content).
• Completion of responsible gaming forms (limit settings, self-exclusion requests).

3.2 Data Collected Automatically

When you access and use the jilliz platform, we automatically collect certain technical data, including:

• IP address and approximate geographic location derived from IP.
• Device and browser information (device type, operating system, browser version).
• Session logs (login timestamps, pages visited, actions taken).
• Cookie data — see Section 7 for the jilliz Cookies Policy.

3.3 Data from Third Parties

jilliz may receive personal data from the following third-party sources:

• Payment processors (GCash, PayMaya, BPI, BDO, Metrobank, USDT providers) — transaction confirmation and payment status data.
• Identity verification services — confirmation of KYC document authenticity.
• Fraud prevention services — risk scoring data to protect the platform against fraudulent activity.
• PAGCOR — in certain circumstances, regulatory data exchanges as required by our licensing obligations.

4. Legal Basis for Processing Personal Data

jilliz processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil the contract between jilliz and the Player — account management, game delivery, deposit and withdrawal processing.
• Legal obligation: Processing required to comply with PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and other applicable Philippine law — including KYC verification and transaction monitoring.
• Legitimate interests: Processing necessary for jilliz's legitimate business interests, including fraud detection, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your privacy rights.
• Consent: For non-essential processing such as marketing communications, where jilliz relies on your explicit, freely given consent. You may withdraw consent to marketing communications at any time by contacting jilliz support.

5. How jilliz Uses Your Personal Data

jilliz uses the personal data we collect for the following purposes:

• Creating and managing your jilliz Account, including authentication and security.
• Processing your deposits and withdrawal requests via GCash, PayMaya, BPI, BDO, Metrobank, and USDT.
• Verifying your identity and age (21+) through the KYC process as required by PAGCOR.
• Delivering game services, processing bets, calculating winnings, and managing bonus credits.
• Monitoring for compliance with Anti-Money Laundering Act (Republic Act No. 9160, as amended) requirements, including transaction monitoring and suspicious activity reporting.
• Administering and enforcing responsible gaming tools, including deposit limits, loss limits, session controls, and self-exclusion requests.
• Providing customer support services and maintaining records of your support interactions.
• Detecting, investigating, and preventing fraud, cheating, collusion, and other prohibited conduct.
• Complying with PAGCOR regulatory reporting obligations.
• Improving platform performance, user experience, and game selection based on aggregated, anonymised usage analytics.
• Sending transactional communications (deposit confirmations, withdrawal updates, security alerts, account notifications) — these are not marketing and cannot be opted out of while your Account is active.
• Sending promotional communications (bonuses, offers, new game announcements) — only where you have consented, and you may opt out at any time.

6. Data Sharing & Third-Party Disclosure

jilliz does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

6.1 Service Providers (Processors)

jilliz engages trusted third-party service providers to assist in platform operations, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, game software providers (JILI, Pragmatic Play, Evolution, and others), cloud infrastructure providers, and customer support tools. These providers process data on jilliz's behalf and are contractually bound to handle data only as instructed by jilliz and in accordance with applicable law.

6.2 Regulatory & Legal Disclosure

jilliz will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), law enforcement agencies, or courts where required to do so by applicable Philippine law, a valid court order, or regulatory direction. jilliz will notify affected Players of such disclosure where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of jilliz's assets, personal data held by jilliz may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected Players will be notified of any such transfer.

6.4 No Sale of Data

jilliz does not and will not sell, rent, or otherwise commercially disclose your personal data to third parties for their independent marketing or commercial purposes.

7. Cookies & Similar Technologies

jilliz uses cookies and similar browser storage technologies to support platform functionality, maintain your logged-in session, and collect anonymised usage analytics. The types of cookies jilliz uses are:

• Essential cookies: Required for the platform to function correctly — including session authentication, security tokens, and login state. These cannot be disabled without breaking platform functionality.
• Performance cookies: Anonymised analytics data used to understand how Players use the platform — pages visited, session duration, game categories accessed. Data is aggregated and not linked to your personal identity.
• Functional cookies: Store your preferences such as language setting and responsible gaming display options.

jilliz does not use third-party advertising cookies or tracking pixels for behavioural advertising purposes on its platform. You may manage or clear cookies through your browser settings. Disabling essential cookies will prevent you from logging in to jilliz.

8. Data Retention

jilliz retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following retention principles:

• Active Account data: Retained for the duration of your Account's active status plus a minimum of 5 years following Account closure, as required by PAGCOR licensing conditions and Philippine AML law.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction in compliance with the Anti-Money Laundering Act.
• KYC documents: Retained for a minimum of 5 years from Account closure or last transaction, whichever is later.
• Support communications: Retained for up to 3 years from the date of the communication.
• Technical/session logs: Retained for up to 12 months for security and fraud investigation purposes.

After applicable retention periods expire, personal data is securely deleted or anonymised in accordance with jilliz's internal data destruction protocols.

9. Data Security

jilliz implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, or destruction. These measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your device and the jilliz platform.
• Encrypted storage of passwords using industry-standard salted hashing algorithms — jilliz staff cannot view your password in plain text.
• Access controls limiting internal access to personal data to authorised personnel on a need-to-know basis.
• Regular security audits and penetration testing of the platform infrastructure.
• Two-factor authentication (2FA) available to all Players for Account login security.
• Automated monitoring for suspicious login attempts and account access anomalies.

While jilliz takes all reasonable steps to protect your personal data, no system can be guaranteed to be completely secure. If you have reason to believe your Account security has been compromised, contact jilliz support immediately.

10. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of the personal data jilliz holds about you:

• Right to be informed: The right to be informed about how your personal data is collected, used, and shared — fulfilled by this Privacy Policy.
• Right to access: The right to request a copy of the personal data jilliz holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure / blocking: The right to request deletion or blocking of personal data that is unlawfully processed or is no longer necessary for the purpose for which it was collected, subject to jilliz's legal retention obligations.
• Right to object: The right to object to the processing of your personal data, including for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used format for transfer to another service, where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, contact jilliz's Data Protection Officer (DPO) as described in Section 13. jilliz will respond to data rights requests within 30 days of receipt. We may require identity verification before processing any data rights request.

11. Children & Minors Under 21

jilliz does not knowingly collect or process personal data from individuals under the age of 21. The jilliz platform is strictly for adults aged 21 and above, as required by PAGCOR regulations governing online gaming in the Philippines. If jilliz becomes aware that personal data has been collected from a person under 21, that Account will be immediately closed, any funds returned at jilliz's discretion, and the associated personal data deleted.

If you believe a minor has registered on jilliz, please contact our support team or DPO immediately using the contact details in Section 13.

12. Changes to This Privacy Policy

jilliz may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered Players via the registered email address or an in-platform notification at least 7 days prior to the changes taking effect.

The effective date of the current version of this Privacy Policy is stated at the top of this page. Your continued use of jilliz following notification of a material change constitutes acceptance of the updated Privacy Policy. If you disagree with any changes, you should close your Account before the new policy takes effect.

13. Contact & Data Protection Officer

jilliz has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. For any privacy-related enquiries, data rights requests, or concerns about jilliz's data processing practices, please contact:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.