Privacy Policy

jilliz operates an online gaming platform regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and accessible to eligible players in the Philippines at jilliz.club. In the course of providing gaming services, customer support, and financial processing, jilliz necessarily collects and processes personal data relating to its registered players.

jilliz is committed to handling that personal data responsibly, transparently, and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").

This Privacy Policy explains: what personal data jilliz collects about you; the legal bases on which jilliz processes that data; how your data is used, stored, and protected; with whom it may be shared; how long it is retained; and what rights you have as a data subject under Philippine law. We have written this policy in plain language — not to obscure anything, but because we believe you deserve to actually understand it.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal data is:

jilliz has designated a Data Protection Officer (DPO) as required by the DPA. The DPO can be contacted at the email address above for all privacy-related inquiries, requests, and complaints.

jilliz collects the following categories of personal data from players and, where applicable, from third-party sources:

3.1 Registration and Identity Data

• Full legal name as it appears on your Philippine government-issued ID;
• Date of birth (used to verify the mandatory 21+ age requirement);
• Gender;
• Residential address (city, province, postal code);
• Philippine mobile number;
• Email address;
• Username and encrypted password.

3.2 Know Your Customer (KYC) Verification Data

• Copy of government-issued photo ID (UMID, Passport, Driver's License, PhilSys ID, or other PAGCOR-accepted document);
• Proof of address documents where required;
• Selfie or biometric data where used for identity verification;
• Source of funds declarations where required by AML compliance procedures.

3.3 Financial and Transaction Data

• GCash account reference number (last four digits, non-sensitive);
• Maya account reference;
• Bank account details (account holder name, bank name, account number) for bank transfer withdrawals;
• Full transaction history: deposit amounts, timestamps, payment methods, withdrawal requests, and settlement statuses;
• Game bet history, game outcomes, and wallet balance movements.

3.4 Technical and Device Data

• IP address at time of registration and each login;
• Device type, operating system version, and browser type;
• Geolocation data (country/region level, for eligibility and fraud detection — not real-time GPS tracking);
• Session duration, pages visited, and in-app navigation patterns;
• Cookies and similar tracking identifiers (see Section 6).

3.5 Communications Data

• Records of live chat sessions with jilliz support;
• Email correspondence between you and jilliz;
• Feedback, complaints, and dispute records;
• Responses to surveys or promotions where voluntarily provided.

jilliz collects personal data through the following means:

• Directly from you — through account registration forms, KYC submission portals, deposit/withdrawal requests, support interactions, and survey responses;
• Automatically — through cookies, web beacons, session logs, and device fingerprinting technologies as you use the jilliz Platform (see Section 6);
• From identity verification providers — third-party KYC and AML service providers used to verify the accuracy of identity documents submitted during account registration;
• From payment processors — GCash, Maya, and other payment gateway providers share transaction confirmation data with jilliz to record completed deposits and withdrawals;
• From fraud prevention services — jilliz uses third-party fraud detection and risk scoring services that may contribute data points to the player risk profile jilliz maintains for fraud and AML purposes;
• From PAGCOR and regulatory bodies — where jilliz receives data from PAGCOR or other Philippine regulatory authorities as part of its compliance obligations.

jilliz processes your personal data for the following purposes, each supported by a corresponding legal basis under the Data Privacy Act of 2012:

6.1  jilliz uses cookies and similar tracking technologies (web beacons, local storage, session tokens) on the jilliz.club website and mobile Platform. These technologies serve essential operational purposes and, where you consent, analytical and marketing purposes.

Categories of cookies used by jilliz:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens, login persistence cookies, and fraud prevention identifiers. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences — such as your selected game lobby view or language preference — to improve your experience across sessions.
• Analytics Cookies: Used to understand how players navigate the Platform, which games are most popular, and where technical issues occur. Data is aggregated and not used to personally identify you without your consent.
• Security and Fraud Detection Cookies: Help jilliz identify suspicious login patterns, detect multiple accounts, and protect against automated abuse of the Platform.

6.2  You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use core Platform features. jilliz does not use third-party advertising network cookies or sell cookie data to advertisers.

jilliz shares personal data with third parties only in the following circumstances:

• Game Providers: JILI Games, PG Soft, Pragmatic Play, Evolution Gaming, and other licensed game providers receive your account identifier (not your full personal details) to authenticate game sessions and record game outcomes. These providers operate under data processing agreements with jilliz.
• Payment Processors: GCash, Maya, and bank payment gateways receive the transaction details necessary to process your deposit or withdrawal requests. These processors are independently regulated and do not receive your gaming history.
• KYC and Identity Verification Providers: Third-party identity verification services receive your submitted ID documents to perform automated and manual identity checks. These providers are bound by strict confidentiality obligations.
• Fraud and AML Service Providers: Risk scoring and fraud detection providers may receive technical and transactional data to generate risk assessments. These providers operate as data processors under jilliz's instruction.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities, where jilliz is required to disclose data by law, court order, or regulatory direction.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by jilliz, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of jilliz assets, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

8.1  Some of jilliz's third-party service providers — particularly game providers and fraud detection services — process data outside of the Philippines. Where such cross-border data transfers occur, jilliz ensures that:

• The receiving party is bound by contractual data protection obligations that meet or exceed the standards required by the Philippine Data Privacy Act;
• Transfers to jurisdictions without adequate data protection laws are governed by standard contractual clauses approved by the NPC or equivalent safeguards;
• Only the minimum personal data necessary for the specific processing purpose is transferred across borders.

8.2  By using the jilliz Platform, you acknowledge that your data may be processed in jurisdictions outside the Philippines where jilliz's service providers operate, subject to the safeguards described in this Section.

9.1  jilliz retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and in any event for as long as required by applicable Philippine law, including PAGCOR licensing conditions and AMLA record-keeping requirements.

9.2  At the end of the applicable retention period, jilliz will securely delete or anonymize your personal data in a manner that prevents reconstruction of the original data.

jilliz implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption in transit: All data transmitted between your device and jilliz servers is encrypted using TLS 1.2 or higher (HTTPS). This includes game sessions, login requests, deposit flows, and support interactions;
• Encryption at rest: Sensitive personal data stored in jilliz databases — including identity documents and financial records — is encrypted using AES-256 encryption;
• Access controls: Access to personal data within jilliz is restricted on a strict need-to-know basis. Staff access rights are role-based, regularly reviewed, and revoked upon role change or departure;
• Password security: Player passwords are stored as salted cryptographic hashes — never in plain text. Not even jilliz staff can read your password;
• Two-factor authentication: Available for all player accounts and mandatory for all jilliz staff with access to production systems;
• Intrusion detection: jilliz operates continuous security monitoring and intrusion detection on its infrastructure;
• Third-party security audits: jilliz undergoes periodic security assessments by independent third-party security firms.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by jilliz. To exercise any of these rights, contact our Data Protection Officer at [email protected].

jilliz will respond to all data subject requests within thirty (30) calendar days of receipt, as required by the DPA. We may request proof of identity before processing a request to prevent unauthorized access to another person's data.

jilliz's KYC verification process — which requires submission of a Philippine government-issued photo ID — is specifically designed to prevent underage registration. The platform does not permit any account access, including browse-only access to real-money game content, without verified age confirmation.

13.1  With your consent given during registration or at any subsequent time, jilliz may send you marketing communications about jilliz promotions, new games, bonuses, and platform updates via email, SMS, in-app notifications, and Messenger or Viber messaging.

13.2  You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email from jilliz;
• Adjusting your notification preferences in your jilliz Account settings under "Communication Preferences";
• Contacting jilliz support and requesting removal from all marketing lists.

13.3  Withdrawal of marketing consent does not affect the lawfulness of processing conducted on the basis of consent before its withdrawal. Transactional communications — such as deposit confirmations, withdrawal notifications, and security alerts — are not marketing communications and cannot be opted out of while your account remains active, as they are necessary for account management.

14.1  jilliz may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The date of the most recent update is displayed at the top of this document.

14.2  Where a material change is made to this Privacy Policy, jilliz will notify registered players by email and/or in-platform notification at least fourteen (14) days before the change takes effect, where practically possible.

14.3  The current version of this Privacy Policy is always available at jilliz.club/privacy-policy. We encourage you to review this document periodically. Your continued use of the jilliz Platform following notification of a material change constitutes your acknowledgment of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or jilliz's processing of your personal data, please contact our Data Protection Officer:

If you are unsatisfied with jilliz's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which oversees enforcement of the Data Privacy Act of 2012.