jilid Privacy Policy

This Privacy Policy ("Policy") describes how jilid ("jilid," "we," "us," or "our"), the operator of the online gaming platform accessible at jilid.one, collects, uses, stores, discloses, and protects personal data in connection with your access to and use of the jilid Platform ("Platform").

jilid acts as the Data Controller for all personal data collected through the Platform. As Data Controller, jilid is responsible for determining the purposes and means of processing your personal data, and for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) ("DPA") and its Implementing Rules and Regulations.

jilid operates under a license issued by the Philippine Amusement and Gaming Corporation ("PAGCOR") and is subject to PAGCOR's data governance and player protection requirements in addition to the DPA. jilid has registered with the National Privacy Commission ("NPC") as required by Philippine law.

2.1 This Policy applies to all personal data processed by jilid in connection with: (a) registration and maintenance of a player account on jilid; (b) deposits, withdrawals, and financial transactions on the Platform; (c) gameplay activity including bets, winnings, and game history; (d) communications between you and jilid's support team; (e) your use of jilid's website and mobile platform, including browsing and interaction data; and (f) any other interaction between you and jilid.

2.2 This Policy does not apply to third-party websites, applications, or services that may be linked to or from jilid's Platform. jilid is not responsible for the privacy practices of third parties.

jilid collects the following categories of personal data:

• Identity Data: Your legal full name, date of birth, gender, nationality, and government-issued Philippine identification number (e.g., PhilSys National ID, UMID, LTO Driver's License, Passport, or Voter's ID).
• Contact Data: Your Philippine mobile number, email address, and residential address.
• Account Data: Your jilid username, account registration date, login history, session data, and account preferences.
• Financial Data: Deposit and withdrawal records, payment method identifiers (e.g., GCash-registered mobile number, bank account details for BPI, BDO, or Metrobank), transaction history, and balance records. Note: jilid does not store full card numbers or full bank account numbers beyond what is required for transaction processing.
• Gaming Data: All game session records, bet amounts, outcomes, winnings, bonus usage, and wagering history as required by PAGCOR's record-keeping obligations.
• Technical Data: IP address, device type, operating system, browser type and version, mobile network operator, session timestamps, and platform interaction logs.
• Communication Data: Records of all communications between you and jilid's support team, including support tickets, chat logs, and email correspondence.
• Responsible Gaming Data: Records of any responsible gaming tools you activate, including deposit limit settings, self-exclusion requests, and cooling-off periods.

jilid collects personal data through the following methods:

• Directly from you: During account registration, KYC verification, deposit and withdrawal requests, support communications, and when you activate responsible gaming tools.
• Automatically: When you access and use the Platform, jilid's systems automatically collect technical data including IP addresses, device identifiers, session activity, and game interaction data through server logs, cookies, and similar tracking technologies.
• From third-party payment processors: When you make a GCash, Maya, or bank transfer deposit or withdrawal, jilid receives transaction confirmation data from the relevant payment processor. This data is limited to what is necessary to confirm and record the transaction.
• From identity verification services: jilid may use third-party KYC and identity verification service providers to verify the authenticity of government-issued IDs submitted during the KYC process.
• From fraud prevention services: jilid uses fraud detection systems that may cross-reference data against publicly available watchlists, PAGCOR's self-exclusion register, and AML screening databases as required by Philippine law.

jilid processes your personal data for the following purposes and on the following legal bases under the DPA:

• Account management and service delivery: Processing is necessary for the performance of the contract between you and jilid (your account Terms & Conditions). This includes registration, login authentication, deposits, withdrawals, game access, and support.
• Identity verification and KYC: Processing is required to comply with PAGCOR licensing conditions and Philippines AML legislation (Republic Act No. 9160, as amended), which mandate player identification before account activation and withdrawals.
• Fraud prevention and AML compliance: Processing is necessary for compliance with legal obligations under Philippine AML laws and for the legitimate interests of jilid in protecting the integrity of the Platform.
• Responsible gaming: Processing is required to comply with PAGCOR's responsible gaming obligations and to protect the vital interests of players.
• Marketing and promotions: Processing is based on your consent, which you provide during registration. You may withdraw consent at any time.
• Platform improvement and analytics: Processing is based on jilid's legitimate interest in improving the Platform for Filipino players, subject to appropriate safeguards.
• Legal proceedings and regulatory compliance: Processing is necessary for compliance with legal obligations applicable to jilid as a PAGCOR licensee operating in the Philippines.

6.1 jilid does not sell, rent, or trade your personal data to any third party for commercial purposes. jilid may disclose your personal data to the following categories of third parties only where necessary and on a strictly limited basis:

• PAGCOR and Philippine regulatory authorities: As required by jilid's operating license and applicable Philippine law, player records may be disclosed to PAGCOR upon request for audit, investigation, or compliance purposes.
• Philippine government agencies and law enforcement: jilid will disclose personal data to the Anti-Money Laundering Council (AMLC), Bureau of Internal Revenue (BIR), or other Philippine government bodies where required by law or court order.
• Payment processors: Transaction data is shared with GCash (Mynt), Maya (PayMaya Philippines), and partner banks solely for the purpose of processing deposits and withdrawals.
• KYC and identity verification service providers: Identity documents submitted for verification are processed by accredited verification partners under strict data processing agreements.
• Technology service providers: jilid uses third-party infrastructure, cloud hosting, and security service providers that process data on jilid's behalf under data processing agreements that comply with the DPA.
• Game providers: Gameplay session data (not identity data) may be shared with game providers such as JILI Games, PG Soft, and Pragmatic Play for game integrity and technical support purposes.

6.2 All third-party processors engaged by jilid are bound by contractual obligations requiring them to process personal data only on jilid's documented instructions, implement appropriate security measures, and not engage sub-processors without jilid's prior written authorization.

7.1 Some of jilid's third-party service providers — including certain technology infrastructure and game provider partners — may be located outside the Philippines. Where personal data is transferred internationally, jilid ensures that adequate safeguards are in place as required by Section 21 of the DPA, including contractual clauses that impose DPA-equivalent obligations on the recipient.

7.2 jilid will not transfer personal data to countries that do not provide an adequate level of data protection without implementing appropriate safeguards and, where required, obtaining NPC authorization.

8.1 jilid retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account records: 5 years from account closure, as required by PAGCOR's record-keeping obligations.
• Financial transaction records: 5 years from the date of transaction, as required by Philippine AML legislation.
• KYC documentation: 5 years from account closure or from the date of the last transaction, whichever is later.
• Communication records: 3 years from the date of the communication.
• Technical logs: 12 months from the date of generation, unless required for longer retention in connection with an active investigation or legal proceeding.

8.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized using industry-standard methods.

9.1 jilid uses cookies and similar tracking technologies on its Platform. Cookies are small data files stored on your device that help jilid recognize your browser, maintain your login session, remember your preferences, and analyze Platform usage.

9.2 jilid uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Performance and Analytics Cookies: Used to understand how players use the Platform, which pages are visited most, and where errors occur. Data collected is aggregated and anonymized.
• Functional Cookies: Used to remember your preferences, such as language settings and display preferences.
• Marketing Cookies: Used only with your consent to track promotional campaign effectiveness. These are not used to build advertising profiles for third parties.

9.3 You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair the functionality of the jilid Platform.

10.1 jilid implements technical and organizational security measures appropriate to the risk of processing personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and jilid's servers
• AES-256 encryption for sensitive data at rest, including account credentials and financial records
• Password hashing using bcrypt — jilid staff cannot view your password in plain text
• Two-factor authentication (2FA) available to all players
• Device-bound session tokens and automatic session expiry on inactivity
• Access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular security assessments and penetration testing
• Incident response procedures compliant with the DPA's 72-hour breach notification requirement to the NPC

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by jilid:

To exercise any of the above rights, submit a written request to jilid's Data Privacy Officer at [email protected] with the subject line "Data Subject Rights Request." jilid will respond within 15 business days as required by the DPA.

12.1 The jilid Platform is strictly restricted to individuals 21 years of age and above, as required by PAGCOR regulations. jilid does not knowingly collect personal data from individuals under 21 years of age.

12.2 If jilid becomes aware that personal data has been collected from an individual under 21, the account will be immediately closed and all associated personal data will be deleted in accordance with jilid's data retention procedures and applicable law.

13.1 jilid may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via email to your registered address or via a prominent notice on the Platform.

13.2 The "Last Updated" date at the top of this Policy indicates the most recent revision. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or jilid's processing of your personal data, you may contact jilid's Data Privacy Officer:

• Email: [email protected]
• Subject Line: Privacy Policy Inquiry / Data Subject Rights Request
• Response Time: Within 15 business days
• Support Hours: 8:00 AM – 11:00 PM PHT, daily

For unresolved complaints, you may also contact the National Privacy Commission (NPC) of the Philippines, the supervisory authority for data protection in the Philippines.