Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how Jiliph ("Jiliph," "we," "us," or "our"), the operator of the online gaming platform accessible at jiliph.org (the "Platform"), collects, uses, stores, shares, and protects the personal data of individuals who access or use the Platform ("Players," "Users," or "you").

Jiliph is committed to protecting the privacy and personal data of all its players in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission of the Philippines ("NPC").

By registering an account on Jiliph, accessing the Platform, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Jiliph Platform.

This Policy should be read together with the Jiliph Terms & Conditions, which govern your overall use of the Platform.

2. Definitions

For the purposes of this Policy, the following definitions apply:

• "Personal Data" means any information from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information, would directly and certainly identify an individual.
• "Sensitive Personal Information" means personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic or sexual life, or any proceeding for any offense committed or alleged to have been committed by such person.
• "Processing" means any operation or set of operations performed upon personal data, including collection, recording, organization, storage, updating, retrieval, use, consolidation, blocking, erasure, or destruction.
• "Data Subject" means an individual whose personal data is processed by Jiliph.
• "Personal Information Controller" means Jiliph, which controls the collection, holding, processing, or use of personal data on the Platform.
• "Third-Party Service Provider" means any entity engaged by Jiliph to perform services on its behalf that may involve access to personal data.

3. Personal Data We Collect

3.1 Registration and Account Data

When you register a Jiliph account, we collect the following information:

• Full legal name;
• Date of birth (to verify the 21+ age requirement);
• Email address;
• Mobile number;
• Username and encrypted password;
• Residential address (city, province, region within the Philippines).

3.2 Identity Verification (KYC) Data

To comply with our Know Your Customer obligations, we may collect:

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID);
• Proof of address documents;
• Selfie or live photo for identity matching purposes;
• Proof of payment method ownership.

3.3 Financial and Transaction Data

We collect data related to your financial transactions on the Platform, including:

• Deposit and withdrawal amounts and timestamps;
• Payment method details (GCash account reference, PayMaya reference, BPI/BDO/Metrobank account details — stored in tokenized or masked form);
• Transaction history and account balance records.

3.4 Gaming Activity Data

We collect data about your activity on the Platform, including:

• Games played, bet amounts, and outcomes;
• Session duration and frequency of play;
• Bonus and promotion usage;
• Responsible gaming tool usage (deposit limits, self-exclusion requests).

3.5 Technical and Device Data

We automatically collect certain technical data when you access the Platform:

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Session logs and access timestamps;
• Cookie identifiers and similar tracking data.

3.6 Communications Data

When you contact Jiliph's customer support team, we collect records of your communications, including chat transcripts, email correspondence, and support ticket details, for quality assurance and dispute resolution purposes.

4. How We Collect Your Data

Jiliph collects personal data through the following means:

• Directly from you — when you register, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions;
• Automatically — through cookies, server logs, and similar technologies when you access the Platform;
• From third-party service providers — including payment processors (GCash, PayMaya, BPI, BDO, Metrobank) and identity verification partners, where necessary to complete transactions or verify your identity;
• From publicly available sources — where permitted by law, to verify information you have provided or to comply with anti-money laundering obligations.

5. How We Use Your Personal Data

Jiliph uses your personal data for the following purposes:

Jiliph does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have provided explicit consent.

6. Legal Basis for Processing

Jiliph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent — where you have given clear, informed consent to the processing of your personal data for a specific purpose, such as receiving promotional communications;
• Contractual necessity — where processing is necessary to perform the contract between you and Jiliph (i.e., the Terms & Conditions), including account management and payment processing;
• Legal obligation — where processing is required to comply with applicable Philippine laws, including anti-money laundering regulations, tax obligations, and gaming regulatory requirements;
• Legitimate interests — where processing is necessary for Jiliph's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.

7. Data Sharing and Disclosure

7.1 Third-Party Service Providers

Jiliph may share your personal data with trusted third-party service providers who assist us in operating the Platform, including payment processors, identity verification providers, cloud hosting providers, customer support platforms, and analytics providers. All such providers are contractually required to process your data only on Jiliph's instructions and to maintain appropriate security measures.

7.2 Regulatory and Legal Disclosure

Jiliph may disclose your personal data to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts where required to do so by applicable law, court order, or regulatory directive. This includes disclosures required under anti-money laundering laws and gaming regulations applicable in the Philippines.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of Jiliph's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Policy that may result from it.

7.4 No Sale of Personal Data

Jiliph does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Any sharing of data is limited to what is described in this Policy.

8. Cookies and Tracking Technologies

Jiliph uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform effectively. The types of cookies we use include:

• Essential cookies — required for the Platform to function, including session management and security tokens. These cannot be disabled without affecting Platform functionality;
• Functional cookies — used to remember your preferences, such as language settings and display options;
• Analytics cookies — used to collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. Jiliph uses only first-party analytics tools for this purpose;
• Security cookies — used to detect and prevent fraudulent activity and unauthorized access.

Jiliph does not use third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings. Please note that disabling essential cookies will impair your ability to use the Platform.

9. Data Retention

Jiliph retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and regulatory obligations. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering regulations;
• Financial transaction records are retained for a minimum of five (5) years;
• Gaming activity logs are retained for a minimum of three (3) years;
• Customer support communications are retained for two (2) years from the date of the last interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with Jiliph's data disposal procedures.

10. Data Security

Jiliph implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS encryption for all data in transit between your device and the Platform;
• Encryption at rest for sensitive data, including identity documents and payment information;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments;
• Multi-factor authentication for administrative access to data systems;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, Jiliph will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

11. Children's Privacy

The Jiliph Platform is strictly intended for individuals who are 21 years of age or older. Jiliph does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the registration and KYC process. If Jiliph becomes aware that personal data has been collected from an individual under 21, the associated account will be immediately suspended, the data will be deleted, and any funds will be handled in accordance with applicable regulations.

If you are a parent or guardian and believe that a minor has registered on the Jiliph Platform, please contact our support team immediately so we can take appropriate action.

12. Exercising Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012, you have the right to access, correct, erase, object to, and port your personal data, as described in the "Your Rights" section above. To exercise any of these rights, please contact Jiliph's Data Protection Officer through the customer support channels available within your account.

Jiliph will respond to verified data subject requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, with notice provided to you. Jiliph reserves the right to verify your identity before processing any data subject request to prevent unauthorized access to personal data.

Please note that certain rights may be limited where Jiliph is required to retain or process your data to comply with legal obligations, including anti-money laundering and gaming regulatory requirements.

13. Cross-Border Data Transfers

Jiliph's primary data processing operations are conducted within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting or technical support services — Jiliph ensures that such transfers are conducted in accordance with the Data Privacy Act of 2012 and that appropriate safeguards are in place, including contractual data protection clauses that provide a level of protection equivalent to that afforded under Philippine law.

14. Updates to This Privacy Policy

Jiliph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material, we will notify you by email or through a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Your continued use of the Jiliph Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure.

15. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or Jiliph's data processing practices, please contact our Data Protection Officer through the live chat or support ticket system available within your Jiliph account. You may also reach us at the email address displayed in the footer of this page.

If you are not satisfied with Jiliph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Details on how to file a complaint with the NPC are available on the NPC's official website.

For matters relating to responsible gaming, account restrictions, or self-exclusion, please visit our Responsible Gaming page or contact our support team directly for immediate assistance.