jijli Privacy Policy

1. Introduction & Scope

This Privacy Policy ("Policy") describes how jijli ("jijli," "we," "us," or "our") collects, processes, stores, and protects the personal data of individuals ("you," "your," or "Player") who access or use the jijli platform at jijli.net, including all associated games, account services, promotions, and support channels.

This Policy applies to all personal data collected in connection with your use of jijli, regardless of whether you access the platform from Metro Manila, Cebu, Davao, Quezon City, Makati, or any other location in the Philippines. It applies to data collected online via the jijli website and through any communications you have with our support team.

This Policy should be read together with the jijli Terms & Conditions and the jijli Responsible Gaming Policy. By registering an account or using the jijli platform, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

jijli is the data controller responsible for the personal data you provide through the jijli platform. As data controller, jijli determines the purposes and means of processing your personal information and is accountable for ensuring that such processing complies with the Data Privacy Act of 2012.

jijli has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act. The DPO is responsible for overseeing jijli's data protection strategy, monitoring compliance, and serving as the primary point of contact for data subjects and the National Privacy Commission.

You may reach the jijli Data Protection Officer by:

• Live Chat: Available 24/7 directly on the jijli platform — select "Privacy & Data" from the support menu.
• Email: [email protected] — include "DPO Request" in the subject line for prioritised routing.

3. Data We Collect

jijli collects personal data from you directly (when you provide it during registration, KYC, or support interactions), automatically (through your use of the platform), and in some cases from third parties (such as payment processors and identity verification providers). The categories of data we collect are described below.

jijli does not intentionally collect sensitive personal information as defined under the Data Privacy Act (such as health data, religious beliefs, or political affiliations) unless it is voluntarily provided in a support context and is directly relevant to the matter at hand.

4. How We Use Your Data

jijli uses your personal data for the following purposes, each of which is tied to a specific legal basis described in Section 5:

• Account creation and management: To register your jijli account, verify your identity, maintain your account settings, and provide access to all platform features.
• KYC and age verification: To confirm that you are at least 21 years of age as required by Philippine gaming regulations, and to verify your identity in accordance with PAGCOR licensing conditions and Anti-Money Laundering Act (AMLA) obligations.
• Payment processing: To process deposits and withdrawals in Philippine Peso (PHP) via GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other supported payment channels, and to maintain accurate financial records.
• Game delivery and fair play: To operate casino games, maintain RNG integrity, record gameplay outcomes, detect cheating, and ensure a fair experience for all players.
• Fraud prevention and security: To detect and prevent fraudulent activity, money laundering, account takeover, bonus abuse, and other prohibited conduct on the platform.
• Regulatory compliance: To fulfil jijli's obligations under Philippine law, including PAGCOR reporting requirements, AMLA transaction monitoring, and NPC data governance obligations.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of jijli's support services.
• Responsible gaming: To enforce player-set limits, implement self-exclusion requests, monitor for problem gambling indicators, and fulfil jijli's duty of care to Filipino players.
• Marketing and promotions: To send you relevant promotional offers, bonus notifications, and platform updates — but only where you have given explicit consent to receive marketing communications. You may withdraw this consent at any time.
• Platform improvement: To analyse aggregate usage patterns, identify technical issues, and improve the jijli platform experience for all users.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, jijli is required to identify a lawful basis for each category of personal data processing. The primary legal bases on which jijli relies are:

• Performance of a contract: Processing necessary to register your account, process transactions, deliver games, and provide customer support — all of which form part of jijli's contractual obligations to you under the Terms & Conditions.
• Compliance with a legal obligation: Processing required by Philippine law, including PAGCOR licensing conditions, AMLA obligations (Republic Act No. 9160 as amended), NPC compliance requirements, and applicable tax regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and aggregate analytics, where jijli's legitimate interests in maintaining a secure and well-functioning platform do not override your fundamental rights and freedoms.
• Consent: Processing for marketing communications, optional analytics cookies, and any processing not covered by the above bases. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Cookies & Tracking Technologies

jijli uses cookies and similar tracking technologies to operate the platform and improve your experience. The types of cookies used are described below.

jijli does not use third-party advertising cookies or permit advertising networks to place tracking cookies on the jijli platform. You will not be tracked across other websites by cookies originating from jijli.

You can manage your cookie preferences at any time through the Cookie Preferences panel accessible from the footer of the jijli platform. Note that disabling functional or analytics cookies may affect certain non-essential features of the platform.

7. Data Sharing & Third-Party Processors

jijli does not sell, rent, or trade your personal data to any third party for commercial purposes. We share personal data only where necessary to deliver our services, comply with legal obligations, or protect the security of the platform.

The categories of third parties with whom jijli may share your personal data, and the basis for each, are as follows:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, InstaPay-connected institutions, and 7-Eleven CLiQQ — to process deposits and withdrawals in PHP. These processors receive only the minimum data necessary to complete each transaction and are bound by their own data privacy obligations under Philippine law.
• Identity verification providers: Third-party KYC and eKYC service providers that assist jijli in verifying government-issued Philippine IDs and confirming player age. All such providers are engaged under formal Data Processing Agreements (DPAs) that restrict their use of your data to the verification purpose only.
• Fraud detection and security providers: Third-party risk and fraud management systems used to detect suspicious activity, prevent money laundering, and identify multi-accounting. These providers process technical and behavioural data under strict contractual limitations.
• Cloud hosting and infrastructure providers: Providers of the server infrastructure on which the jijli platform operates. These providers act as data processors under binding agreements and do not have access to your data for their own purposes.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine law enforcement authorities — where jijli is required by law to disclose information, or where disclosure is necessary to prevent or investigate a crime.
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by jijli, subject to professional confidentiality obligations.

jijli requires all third-party processors to implement appropriate technical and organisational measures to protect your personal data and to process it only in accordance with jijli's documented instructions.

8. Data Retention

jijli retains your personal data for as long as is necessary to fulfil the purposes described in this Policy, subject to the minimum retention periods required by Philippine law. The key retention periods applicable to jijli player data are:

• Account and registration data: Retained for the lifetime of your jijli account and for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AMLA obligations.
• KYC and identity documents: Retained for a minimum of five (5) years from the date of submission, or five (5) years from account closure, whichever is later, in accordance with AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and applicable tax regulations.
• Gameplay logs: Retained for a minimum of two (2) years from the date of each session to support dispute resolution, fair play verification, and regulatory inspection.
• Customer support communications: Retained for two (2) years from the date of each interaction to support quality assurance, dispute resolution, and regulatory compliance.
• Marketing consent records: Retained for the duration of your consent plus two (2) years, to document the basis for any marketing communications sent.
• Self-exclusion records: Retained indefinitely to prevent re-registration by excluded players, as required by responsible gaming best practice and PAGCOR guidance.

Upon expiry of the applicable retention period, jijli will securely delete or irreversibly anonymise your personal data in accordance with industry-standard data destruction procedures.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by jijli:

To exercise any of the above rights, please contact jijli's Data Protection Officer via live chat or email at [email protected] with the subject line "Data Subject Request." jijli will respond to all verified requests within fifteen (15) calendar days in accordance with NPC guidelines, or notify you if an extension is required.

10. Data Security

jijli implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data exchanged between your browser or device and the jijli platform is encrypted using TLS 1.3 with 256-bit AES encryption. The jijli platform is accessible only over HTTPS; all HTTP requests are automatically redirected.
• Encryption at rest: Sensitive personal data stored on jijli's servers — including KYC documents, financial records, and authentication credentials — is encrypted at rest using AES-256.
• Access controls: Access to personal data is restricted to jijli personnel and authorised third-party processors on a strict need-to-know basis. All internal access is logged, audited, and subject to role-based access control (RBAC) policies.
• Two-factor authentication: All jijli staff accounts with access to player data require 2FA. Player accounts support SMS OTP-based 2FA, which jijli strongly recommends enabling.
• Penetration testing and security audits: The jijli platform undergoes regular third-party security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses proactively.
• Incident response: jijli maintains a documented Personal Data Breach Response Plan. In the event of a breach affecting your personal data, jijli will notify the National Privacy Commission within 72 hours of discovery and notify affected players promptly in accordance with NPC Circular No. 16-03.

While jijli employs industry-standard security measures, no system is completely immune to security threats. You play an important role in keeping your account secure — please refer to the account security guidance in the jijli Terms & Conditions and enable 2FA on your account.

11. Children & Minors

The jijli platform is strictly intended for adults who are 21 years of age or older, as required by Philippine gaming regulations. jijli does not knowingly collect personal data from any individual under the age of 21.

jijli's registration process includes mandatory date-of-birth declaration and age verification as part of the KYC process. Where jijli has reason to believe that a player is under 21, the account will be immediately suspended pending age verification, and will be permanently closed if the player cannot satisfy the age requirement.

If you believe that a minor has accessed or registered on the jijli platform, please contact our support team immediately via live chat or at [email protected]. Any personal data found to have been collected from a person under 21 will be permanently deleted from jijli's systems without delay.

Parents and guardians are encouraged to make use of parental control software to prevent underage access to online gaming platforms. jijli supports the responsible gaming objectives of PAGCOR in this regard.

12. Cross-Border Data Transfers

jijli's primary data processing infrastructure is operated with the Philippines as the primary data jurisdiction. However, certain third-party service providers — including cloud infrastructure, fraud detection, and KYC verification providers — may process data in server facilities located outside the Philippines.

Where personal data is transferred outside the Philippines, jijli ensures that such transfers are protected by appropriate safeguards as required by the Data Privacy Act and NPC regulations. These safeguards include:

• Binding contractual clauses in Data Processing Agreements with all third-party processors receiving Philippine player data.
• Due diligence assessment of each processor's data protection practices and applicable local laws before data transfer.
• Transfer only of the minimum personal data necessary for the processor to fulfil its contracted function.

jijli does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing the safeguards described above. You may request details of the specific safeguards applicable to any cross-border transfer by contacting the jijli DPO.

13. Updates to This Privacy Policy

jijli reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The effective date at the top of this Policy indicates when the current version took effect.

For material changes — those that significantly affect your rights or how jijli processes your personal data — jijli will provide at least seven (7) days' advance notice by email to your registered address and/or through a prominent notice displayed upon login to the jijli platform.

For minor administrative or clarificatory updates that do not materially affect your rights, jijli may update this Policy without advance notice, with the updated version taking effect upon publication at jijli.net/privacy-policy.

Your continued use of the jijli platform following any update to this Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not accept any update, you should cease using the platform and contact support to arrange account closure.

14. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or jijli's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on the jijli platform. Select "Privacy & Data" from the support topic menu for direct routing to the DPO team. Average response time under 2 minutes.
• Email: [email protected] — include "Privacy Policy" or "DPO Request" in the subject line. Responses within 5 business days for non-urgent privacy matters; within 15 calendar days for formal data subject requests.

If you are not satisfied with jijli's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for enforcing the Data Privacy Act of 2012 and can be reached through its official channels at privacy.gov.ph.