jillino Privacy Policy

This Privacy Policy describes how jillino ("we," "us," "our"), the operator of the online gaming platform at jillino.club, collects, uses, stores, discloses, and otherwise processes the personal information of its registered players, website visitors, and prospective account holders (collectively, "you" or "Data Subject") in connection with the use of the jillino Platform and its associated services.

This Privacy Policy applies to all personal data collected through the jillino website (jillino.club), the jillino mobile-optimized web platform, any jillino-operated customer support channels including live chat and email, and any other touchpoint through which jillino directly collects personal information from you.

This Privacy Policy does not apply to third-party websites, payment processors, or game providers that may be accessible through or in connection with the jillino Platform. Each such third party operates under its own separate privacy policy, and we encourage you to review those policies independently.

jillino collects the following categories of personal data from players and visitors:

Registration and Identity Data

• Full legal name as it appears on your government-issued Philippine identification
• Date of birth (for age verification — 21+ requirement)
• Philippine mobile number (primary account identifier)
• Email address
• Username and encrypted password
• Residential address within the Philippines
• Gender (where voluntarily provided)

KYC Verification Data

• Government-issued Philippine photo identification document (e.g., PhilSys National ID, Passport, UMID, Driver's License)
• Selfie photograph taken for ID matching
• Source of funds documentation (where applicable under jillino's AML threshold policy)

Financial and Transaction Data

• GCash account number linked to your jillino account
• Maya wallet details (where applicable)
• Philippine bank account details (BPI, BDO, UnionBank, etc.) registered for withdrawal
• Deposit history, withdrawal history, and full transaction records
• Cryptocurrency wallet addresses (where USDT or Coins.ph is used)

Gaming Activity Data

• Game play history including game titles, bet amounts, outcomes, and timestamps
• Session duration, session frequency, and login times
• Bonus activation, wagering progress, and promotion participation records
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

Technical and Device Data

• IP address at time of registration and each login
• Device type, operating system, and browser type
• Approximate geolocation derived from IP address
• Cookies and session tracking data (detailed in Section 10)

Communications Data

• Live chat transcripts with jillino support agents
• Email correspondence with jillino's support team
• Records of SMS communications sent by jillino (e.g., 2FA codes, withdrawal confirmations)

jillino collects personal data through the following means:

• Directly from you: When you register an account on jillino, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion or survey.
• Automatically through platform use: When you log in, browse the jillino lobby, play games, or conduct transactions, technical data including IP address, device information, and session data is automatically recorded by jillino's platform systems.
• From third-party payment providers: When you initiate a GCash, Maya, or bank transfer transaction, the relevant payment provider transmits transaction confirmation data to jillino for account crediting and reconciliation purposes. jillino does not receive your full GCash PIN or banking password.
• From identity verification service providers: jillino may use third-party KYC verification services to assist in document authentication and identity matching. These providers process your submitted ID documents on jillino's behalf under data processing agreements.
• From cookies and tracking technologies: As described in Section 10 of this Policy, jillino uses cookies and similar technologies to collect session and behavioral data during your use of the Platform.

jillino processes your personal data for the following specific, legitimate purposes:

Under the Philippine Data Privacy Act of 2012, jillino processes personal data on the following lawful bases:

• Contractual necessity: Processing required to perform jillino's obligations under the player account agreement — including KYC verification, deposit and withdrawal processing, game provision, and account management — is necessary to deliver the services you have contracted for.
• Legal obligation: Certain processing is required to comply with jillino's obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and applicable NPC regulations. This includes AML screening, regulatory reporting, and mandatory data retention.
• Legitimate interests: jillino processes certain data — including fraud detection, platform security, and analytics — on the basis of its legitimate interests in operating a secure and compliant gaming platform. These interests are balanced against your rights and are proportionate to the risks addressed.
• Consent: Where jillino processes your data for marketing communications or optional analytics beyond what is operationally required, such processing is based on your prior, freely given, and specific consent. You may withdraw marketing consent at any time through the unsubscribe option in any jillino marketing communication or by contacting our support team.

jillino does not sell, rent, or trade your personal data to third parties for commercial marketing purposes. We share your data only in the following circumstances and with the following categories of recipients:

• Payment processors (GCash, Maya, BPI, BDO, UnionBank, Coins.ph): Your financial and identity data is shared with the relevant payment provider to process your deposit or withdrawal transaction. Each provider is bound by applicable financial data protection regulations in the Philippines.
• Game software providers (Pragmatic Play, PG Soft, Ezugi, Jili, and others): Game providers receive session tokens and account identifiers to deliver game content and record game outcomes. Full identity data is not shared with game providers unless required for specific compliance purposes.
• KYC and identity verification service providers: jillino may engage third-party providers to assist in the verification of identity documents submitted during KYC. These providers act as data processors under binding data processing agreements with jillino.
• PAGCOR and Philippine regulatory authorities: jillino is legally required to submit player activity reports, suspicious transaction reports, and other compliance data to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) under the AMLA. Such disclosures are mandatory and non-negotiable under Philippine law.
• Law enforcement and courts: jillino will disclose personal data to law enforcement agencies, courts, or other government bodies when required by a lawful order, court process, or regulatory directive under Philippine law.
• Internal group companies and service providers: Where jillino engages affiliated companies or contracted service providers (e.g., cloud hosting, platform infrastructure, customer support software), such parties access only the data necessary to perform their contracted function and are bound by data processing agreements consistent with the DPA 2012.

Some of jillino's third-party service providers — including game software providers and cloud infrastructure providers — may be located outside the Philippines. Where personal data is transferred outside the Philippines in connection with these services, jillino ensures that such transfers are governed by appropriate safeguards, including:

• Data processing agreements incorporating standard contractual clauses consistent with NPC requirements;
• Transfer only to jurisdictions or recipients that maintain an adequate level of data protection as assessed by jillino in accordance with NPC guidance; and
• Transfer of only the minimum data necessary to perform the contracted service function.

Your core identity data, KYC documents, and financial records are stored on servers located within jurisdictions with appropriate data protection frameworks. jillino does not transfer full player identity or financial records to unprotected or non-compliant international environments.

jillino implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Transport Layer Security (TLS 1.3): All data transmitted between your device and jillino's servers is encrypted using TLS 1.3, the same standard used by major Philippine banks.
• At-rest encryption: Sensitive personal data fields — including KYC documents, financial records, and hashed password credentials — are encrypted at rest using industry-standard encryption algorithms.
• Access controls: Access to personal data within jillino's systems is restricted to employees and contractors with a legitimate need to process it for their assigned role. Access is governed by role-based access control and logged for audit purposes.
• Two-factor authentication: Administrative access to systems storing personal data requires multi-factor authentication. Players are also offered 2FA for their individual accounts.
• Security monitoring and incident response: jillino operates continuous security monitoring of its platform infrastructure. A formal data breach incident response procedure is in place, consistent with the NPC's notification requirements under the DPA 2012 — including notification to the NPC and affected Data Subjects where required.
• Regular security assessments: jillino's platform undergoes periodic security assessments and vulnerability reviews conducted by qualified security professionals.

jillino retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with jillino's data disposal procedures.

jillino uses cookies and similar tracking technologies to operate its Platform, enhance your experience, and collect analytical data. The following types of cookies are used:

• Strictly necessary cookies: These cookies are required for the jillino Platform to function. They maintain your login session, remember your account preferences, and ensure platform security functions operate correctly. They cannot be disabled without preventing use of the Platform.
• Functional cookies: These cookies remember your preferences — such as preferred language, lobby display settings, and responsible gaming tool configurations — to personalize your experience on jillino.
• Analytics cookies: jillino uses first-party analytics tools to understand how players interact with the Platform — which games are played most, which pages generate friction, and how navigation flows are used. This data is collected in aggregate form and used to improve the Platform. Analytics cookies are set on a consent basis.
• Security and fraud prevention cookies: These cookies help jillino detect and prevent fraudulent activity, including duplicate account detection, bot activity, and suspicious login patterns.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the jillino Platform. jillino does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving advertisements on external websites.

With your prior consent, jillino may contact you via SMS to your registered Philippine mobile number, email, or in-platform notification to inform you of promotions, bonuses, new game launches, and other offers that may be relevant to your player preferences and activity history on jillino.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any jillino marketing email;
• Replying "STOP" to any jillino SMS message from your registered mobile number; or
• Contacting jillino's support team via live chat or email with a clear marketing opt-out request.

Marketing opt-outs are processed within 48 hours. Please note that withdrawal of marketing consent does not affect your account functionality — you will continue to receive transactional communications such as deposit confirmations, withdrawal notifications, security alerts, and 2FA codes, as these are operationally necessary and are not subject to marketing opt-out.

jillino's online gaming platform is strictly limited to individuals who are twenty-one (21) years of age or older, in accordance with PAGCOR's minimum age requirement for online real-money gaming in the Philippines. jillino does not knowingly collect personal data from individuals under the age of 21.

Age is verified as part of the mandatory KYC process, which requires submission of a government-issued Philippine photo identification confirming the account holder's date of birth. Any account identified as belonging to a person under 21 years of age will be immediately closed.

To exercise any of your rights under the Philippine Data Privacy Act of 2012 — including access, rectification, erasure, data portability, objection, or restriction — submit your request through one of the following channels:

• Live Chat: Available 24/7 through the jillino Platform. Identify yourself as making a formal data rights request and state clearly which right you are exercising.
• Email: Send a written data rights request to [email protected]. Include your registered mobile number, a description of the right you are exercising, and supporting identification if required for verification.

jillino will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days of receiving a verified request. In complex cases requiring extended review, jillino will notify you of the delay and expected completion date.

jillino may require you to verify your identity before processing certain data rights requests — particularly access and portability requests — to prevent unauthorized disclosure of your personal data to a third party claiming to be you.

jillino may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform operations. When material changes are made, we will notify you through one or more of the following channels: a notification to your registered email address; a prominent notice displayed upon your next login to jillino; or an in-platform notification banner.

The updated Privacy Policy will be posted on this page with a revised "Effective Date" at the top. We encourage you to review this Privacy Policy periodically. Your continued use of the jillino Platform following the posting of an updated Privacy Policy constitutes your acknowledgment of the changes.

If you object to any change in this Privacy Policy and the change materially affects how jillino processes data you have previously provided, you may contact our support team to discuss the impact or to request account closure if you no longer wish to use the jillino Platform under the revised terms.

For all privacy-related queries, data rights requests, or concerns regarding jillino's data processing practices, you may contact us through the following channels:

• Live Chat: 24/7 live support available through the jillino Platform. For formal data rights matters, please indicate that you are making a privacy-related inquiry when initiating the chat.
• Email: [email protected] — For formal written data rights requests. Please include "Privacy Request" in the subject line and your registered mobile number in the email body for faster routing.

jillino has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA 2012 and this Privacy Policy. The DPO may be contacted through the same email address listed above, with "Attention: Data Protection Officer" noted in the subject line.