Privacy Policy

This Privacy Policy ("Policy") describes how jillitt ("jillitt," "we," "us," or "our"), the operator of the online gaming platform at jillitt.org, collects, processes, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the jillitt platform, including its website, mobile interface, games, payment services, and customer support channels.

jillitt is committed to protecting the privacy and personal data of all Filipino players in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. Where applicable, jillitt also observes internationally recognized data protection principles.

By registering a jillitt account or using any part of the jillitt platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the jillitt platform.

This Policy should be read alongside jillitt's Terms & Conditions, which govern the overall relationship between you and jillitt.

jillitt collects the following categories of personal data from players, depending on the nature of their interaction with the platform:

2.1 Registration & Identity Data

• Full legal name (as it appears on a government-issued ID);
• Date of birth (for age verification — players must be 21 years or older);
• Philippine mobile number;
• Email address;
• Username and encrypted password;
• Residential address (province, city/municipality).

2.2 Identity Verification (KYC) Data

• Government-issued ID (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, Voter's ID);
• Selfie or live photo for facial verification;
• Proof of address documents where required.

2.3 Financial & Transaction Data

• GCash account number or registered mobile number;
• PayMaya account details;
• Bank account details (BPI, BDO, Metrobank, UnionBank) for withdrawal processing;
• Deposit and withdrawal transaction history;
• Betting history, game activity, and wagering records.

2.4 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser version;
• Mobile network provider (Globe, Smart, DITO, etc.);
• Session timestamps and login history;
• Cookies and similar tracking technologies (see Section 7).

2.5 Communications Data

• Live chat transcripts and support ticket records;
• Email correspondence with jillitt support;
• Feedback, complaints, and dispute records.

jillitt collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions;
• Automatically — through cookies, web beacons, and server logs when you browse or interact with the jillitt platform;
• From payment providers — GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank may share transaction confirmation data with jillitt to verify deposits and process withdrawals;
• From identity verification services — third-party KYC providers may return verification results and document authenticity scores to jillitt;
• From fraud prevention services — risk scoring and device fingerprinting data may be received from anti-fraud technology partners.

jillitt uses the personal data we collect for the following purposes:

Under the Data Privacy Act of 2012 (RA 10173), jillitt processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfill our obligations under the jillitt Terms & Conditions, including account management, payment processing, and game delivery;
• Legal obligation — processing required to comply with Philippine laws, including the Anti-Money Laundering Act (RA 9160), PAGCOR regulations, and NPC guidelines;
• Legitimate interests — processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights;
• Consent — processing for marketing communications and optional analytics features, where you have given explicit, informed consent that can be withdrawn at any time.

jillitt does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your data only in the following limited circumstances:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank receive the minimum data necessary to process your transactions;
• KYC and identity verification providers — third-party services that verify the authenticity of your identity documents on jillitt's behalf;
• Fraud prevention and security partners — technology providers that help jillitt detect and prevent fraudulent activity, account takeovers, and money laundering;
• Regulatory and law enforcement authorities — jillitt will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or Philippine law enforcement agencies when required by law or valid legal process;
• Professional advisors — lawyers, auditors, and compliance consultants who are bound by confidentiality obligations;
• Business transfers — in the event of a merger, acquisition, or sale of jillitt's business, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third-party service providers engaged by jillitt are contractually required to process your personal data only for the specific purposes for which it was shared and to maintain appropriate security standards.

jillitt uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The types of cookies used on jillitt include:

• Essential cookies — required for the platform to function, including session management, login authentication, and security tokens. These cannot be disabled;
• Functional cookies — remember your language preferences, game settings, and display options to personalize your jillitt experience;
• Analytics cookies — collect anonymized data about how players navigate the jillitt platform, which pages are visited most, and where errors occur. This helps jillitt improve the platform;
• Security cookies — used for fraud detection, bot prevention, and identifying suspicious login patterns.

jillitt does not use third-party advertising cookies or share cookie data with advertising networks. You may manage cookie preferences through your browser settings; however, disabling essential cookies may prevent you from accessing certain features of the jillitt platform.

jillitt retains your personal data for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law. Specific retention periods include:

• Account and identity data — retained for the duration of your active account plus a minimum of five (5) years after account closure, in accordance with AML record-keeping requirements under RA 9160;
• Transaction and financial records — retained for a minimum of five (5) years from the date of each transaction;
• KYC documents — retained for five (5) years after account closure or the last transaction, whichever is later;
• Support communications — retained for three (3) years from the date of the last interaction;
• Marketing consent records — retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation.

When personal data is no longer required, jillitt will securely delete or anonymize it in accordance with NPC guidelines and industry best practices.

jillitt implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and jillitt's servers;
• AES-256 encryption for sensitive data stored in jillitt's databases, including payment details and identity documents;
• Multi-factor authentication (MFA) options for player accounts;
• Role-based access controls limiting internal staff access to personal data on a need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• 24/7 security monitoring and intrusion detection systems.

In the event of a personal data breach that is likely to result in harm to affected players, jillitt will notify the National Privacy Commission and affected individuals within the timeframes prescribed by RA 10173 and NPC Circular 16-03.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by jillitt:

• Right to be informed — you have the right to know what personal data jillitt collects about you and how it is used, as described in this Policy;
• Right of access — you may request a copy of the personal data jillitt holds about you at any time;
• Right to rectification — you may request correction of inaccurate or incomplete personal data in your jillitt account;
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jillitt's legal retention obligations;
• Right to object — you may object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability — you may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint — you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe jillitt has violated your data privacy rights.

To exercise any of these rights, please contact jillitt's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." jillitt will respond to all verified requests within thirty (30) days in accordance with NPC guidelines.

The jillitt platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. jillitt does not knowingly collect personal data from individuals under the age of 21.

If jillitt discovers or is notified that personal data has been collected from a person under 21 years of age, the relevant account will be immediately suspended, all associated data will be deleted, and any deposits will be returned in accordance with applicable regulations. If you believe a minor has registered on jillitt, please contact our support team immediately.

Some of jillitt's technology partners and service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, jillitt will ensure that appropriate safeguards are in place, including contractual data processing agreements that impose obligations equivalent to those required under RA 10173.

jillitt will not transfer your personal data to any jurisdiction that has been identified by the NPC as providing inadequate data protection without first obtaining your explicit consent or ensuring that a lawful transfer mechanism is in place.

jillitt may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or NPC guidelines. When material changes are made, jillitt will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The updated Policy will be published on this page with a revised effective date. Your continued use of the jillitt platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed about how jillitt protects your personal data.

jillitt has designated a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the jillitt DPO through the following channels:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 via the jillitt platform
• Response Time: Within 30 days of receiving a verified request
• Support Hours: 24/7, Philippine Standard Time (UTC+8)

If you are not satisfied with jillitt's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.