jillf Privacy Policy —
How We Protect Your Data

This Privacy Policy applies to all personal data collected, processed, and stored by jillf in connection with the operation of the jillf online gaming platform accessible at jillf.co, including any associated mobile applications, sub-domains , and digital touchpoints operated under the jillf brand.

jillf acts as the Personal Information Controller (PIC) with respect to all personal data collected from Users of the jillf platform, as defined under Republic Act No. 10173 (the Data Privacy Act of 2012) of the Philippines and its Implementing Rules and Regulations (IRR).

This Policy governs personal data processed in connection with: account registration and management; identity verification (KYC); payment processing and transaction records; sports betting and casino gaming activity; responsible gaming tools; customer support interactions; and marketing communications where consent has been obtained.

jillf collects personal data through direct submission by Users, automated technical collection during platform use, and through third-party verification and payment service providers. The categories of personal data jillf collects include:

2.1 Identity & Registration Data

• Full legal name (as appearing on a government-issued Philippine ID);
• Date of birth (for age verification — 21+ requirement);
• Gender (where provided);
• Nationality and country of residence;
• Residential address (barangay, city/municipality, province);
• Government-issued ID type and number (for KYC purposes).

2.2 Contact Data

• Philippine mobile number (+63 prefix);
• Email address;
• Preferred language (English / Filipino-English).

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records (amount, method, timestamp);
• GCash account reference, Maya account reference, or bank account details (where used for transactions);
• jillf Wallet balance history;
• Bonus credit and wagering records;
• Cryptocurrency wallet addresses (where USDT TRC20 is used).

2.4 Gaming & Betting Activity Data

• Sports bets placed, including event, market, odds, stake, and outcome;
• Casino game sessions, including game title, bet amounts, and results;
• Session duration, login times, and frequency of platform access;
• Responsible gaming tool settings and self-exclusion records.

2.5 Technical & Device Data

• IP address and geolocation data (city/region level);
• Device type, operating system, and browser version;
• Mobile device identifier (where applicable);
• Cookie identifiers and session tokens;
• Platform interaction logs (pages visited, features used, errors encountered).

2.6 Communications Data

• Customer support chat and email correspondence;
• Survey responses and feedback submissions;
• Marketing communication interaction data (email opens, clicks — where consent applies).

jillf uses the personal data it collects for the following purposes:

• Account Creation & Management: To register, maintain, and administer your jillf Account, including login authentication and account settings management.
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations and Philippine anti-money laundering obligations under Republic Act No. 9160 (AMLA), as amended.
• Payment Processing: To facilitate deposits and withdrawals via your chosen payment method (GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, Coins.ph, or USDT TRC20) and to maintain accurate transaction records.
• Service Delivery: To provide access to sports betting, live casino, slots, bingo, and other gaming services offered through jillf.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bonus abuse, and other prohibited activities.
• Responsible Gaming: To administer responsible gaming tools including deposit limits, loss limits, session timers, and self-exclusion programs; and to identify and respond to indicators of problem gambling behaviour.
• Legal & Regulatory Compliance: To meet jillf's obligations under PAGCOR's regulatory framework, the Data Privacy Act, the AMLA, and any other applicable Philippine law or regulatory requirement.
• Customer Support: To respond to inquiries, resolve disputes, and provide technical assistance through jillf's support channels.
• Platform Improvement: To analyse usage patterns, diagnose technical issues, and improve jillf's products, features, and user experience.
• Marketing Communications: To send promotional offers, platform updates, and relevant gaming content to Users who have provided marketing consent — with easy opt-out available at any time.

Under the Data Privacy Act of 2012 and its IRR, jillf processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between jillf and the User (i.e., providing gaming services, managing the Account, processing payments).
• Legal Obligation: Processing required to comply with jillf's legal obligations under PAGCOR regulations, the AMLA, the Data Privacy Act, and other applicable Philippine law.
• Legitimate Interests: Processing necessary for jillf's legitimate business interests, including fraud prevention, platform security, and service improvement — where such interests are not overridden by the User's privacy rights.
• Consent: Processing for marketing communications and certain non-essential cookie placements, where jillf has obtained your prior, informed, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

jillf does not sell, rent, or trade your personal information to third parties for marketing purposes. jillf shares personal data only in the following circumstances:

5.1 Service Providers (Personal Information Processors)

jillf engages third-party service providers who process personal data on jillf's behalf, under written data processing agreements that restrict the use of your data to the specific services they provide. These include:

• KYC and identity verification platform providers;
• Payment processors and e-wallet gateway operators (GCash, Maya, bank partners);
• Cloud hosting and data centre infrastructure providers;
• Customer support platform providers;
• Game content studios (receive pseudonymised session data only, not full identity data);
• Anti-fraud and security monitoring service providers.

5.2 Regulatory & Law Enforcement Authorities

jillf may be required to disclose personal data to the following authorities pursuant to legal obligations or lawful orders:

• PAGCOR (Philippine Amusement and Gaming Corporation) — in connection with regulatory reporting, audits, and compliance requirements;
• Anti-Money Laundering Council (AMLC) — in connection with covered and suspicious transaction reporting under the AMLA;
• National Privacy Commission (NPC) — in connection with data breach notifications and regulatory inquiries;
• Philippine National Police (PNP), National Bureau of Investigation (NBI), or courts of competent jurisdiction — pursuant to valid legal process.

jillf uses cookies and similar tracking technologies on its platform to enable core functionality, enhance User experience, and analyse platform performance. The categories of cookies used by jillf are:

• Strictly Necessary Cookies: Required for the jillf platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled.
• Functional Cookies: Store User preferences such as language settings, responsible gaming reminders, and last-visited game categories to improve your experience on return visits.
• Analytics Cookies: Collect pseudonymised data about how Users interact with the jillf platform — pages visited, session duration, feature usage — to help jillf improve its products. Used only with your consent.
• Security Cookies: Support fraud detection and account security monitoring, including detection of unusual login patterns and suspicious activity.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use core jillf Services, but may limit certain personalisation and analytics features. Note that disabling strictly necessary cookies may prevent the jillf platform from functioning correctly.

jillf retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply as general guidelines:

• Account Registration & KYC Data: Retained for the duration of the Account and for a minimum of five (5) years following Account closure, in accordance with PAGCOR regulatory requirements and AMLA record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under AMLA and PAGCOR regulations.
• Betting & Gaming Activity: Retained for a minimum of three (3) years from the date of the activity, or longer where required for regulatory reporting or dispute resolution.
• Customer Support Records: Retained for two (2) years from the date of the last interaction, unless the record relates to an ongoing dispute or regulatory inquiry.
• Marketing Consent Records: Retained for the duration of the marketing relationship and for one (1) year following opt-out, as evidence of consent status.
• Technical & Log Data: Retained for up to twelve (12) months from collection, unless required for longer periods for security investigation purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with jillf's data lifecycle management procedures.

jillf implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. Key security measures include:

• Encryption in Transit: All data transmitted between your device and jillf's servers is encrypted using TLS 1.2 or higher (256-bit SSL). Look for the padlock in your browser's address bar when using jillf.
• Encryption at Rest: Sensitive personal data stored in jillf's databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data within jillf's internal systems is restricted to authorised personnel on a strict need-to-know basis. All access is logged and monitored.
• Two-Factor Authentication: jillf offers 2FA for User accounts and enforces 2FA for all internal staff access to systems containing personal data.
• Regular Security Assessments: jillf conducts periodic security reviews, penetration testing, and vulnerability assessments of its data infrastructure.
• Incident Response: jillf maintains a documented data breach response procedure aligned with the NPC's breach notification requirements under NPC Circular No. 16-03.

Under the Data Privacy Act of 2012 and its IRR, jillf Users have the following rights with respect to their personal data. These rights may be exercised by submitting a written request to jillf's Data Protection Officer (DPO) at the contact details set out in Section 15.

To exercise any of the above rights, please submit a written request to jillf's Data Protection Officer (see Section 15). jillf may require identity verification before processing rights requests to prevent unauthorised access to another person's data.

The jillf platform is strictly prohibited for use by persons under 21 years of age, in accordance with Philippine law governing online gaming and PAGCOR's regulatory requirements. jillf does not knowingly collect personal data from any person under the age of 21.

If jillf discovers or is notified that an Account has been registered by a person under 21, jillf will immediately suspend the Account, reverse any transactions where possible, delete the personal data of the underage individual, and report the incident to PAGCOR as required by its regulatory obligations.

If you are a parent or guardian and believe a minor has registered a jillf Account using false age information, please contact jillf's support team immediately at [email protected]. Include the subject line "Minor Account Report" for priority handling.

jillf may send marketing communications — including promotional offers, bonus announcements, new game alerts, and platform updates — to Users who have provided explicit marketing consent during Account registration or through Account Settings.

Marketing communications may be sent via email, SMS to your registered Philippine mobile number, or push notification through the jillf mobile application (where enabled). jillf will not send marketing communications to Users who have not provided marketing consent or who have subsequently opted out.

You may withdraw marketing consent and opt out of all marketing communications at any time by:

• Clicking the "Unsubscribe" link included in any jillf marketing email;
• Updating your communication preferences in Account Settings;
• Submitting an opt-out request to [email protected].

Opt-out requests for marketing communications will be actioned within five (5) business days. Withdrawal of marketing consent does not affect the lawfulness of processing that occurred prior to withdrawal, and does not affect jillf's ability to send transactional or service communications (such as deposit confirmations, withdrawal notifications, or security alerts) which are not marketing in nature.

jillf's primary data infrastructure is located within or directed toward the Philippines. However, certain service providers engaged by jillf — including cloud infrastructure providers, game content studios, and security monitoring services — may process personal data in servers located outside the Philippines.

Where personal data is transferred outside the Philippines, jillf ensures that appropriate safeguards are in place in accordance with the Data Privacy Act and NPC issuances on cross-border data flows, including:

• Contractual clauses in data processing agreements that require overseas recipients to maintain data protection standards equivalent to those required under Philippine law;
• Transfer only to recipients in jurisdictions assessed to provide an adequate level of data protection;
• Disclosure to Users where required under applicable regulations.

The jillf platform integrates with third-party services including game content providers, payment gateways, and analytics tools. While jillf selects these providers carefully and requires them to meet appropriate data protection standards through contractual agreements, each third party operates under its own privacy policy with respect to the data it independently controls.

jillf is not responsible for the privacy practices of third-party operators whose services are accessed through the jillf platform. Users are encouraged to review the privacy policies of any third-party service providers they interact with in connection with their jillf Account, including GCash, Maya, BPI, BDO, and other payment providers.

jillf reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC issuances, PAGCOR regulatory requirements, or jillf's data processing practices. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision.

Where an amendment materially affects your rights or how jillf processes your personal data, jillf will notify you by email to your registered address and/or via a prominent notice displayed upon your next login to the jillf platform. Continued use of jillf Services following the effective date of any amendment constitutes acknowledgement of the revised Policy.

jillf has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and NPC regulations. The DPO is responsible for overseeing jillf's compliance with the Data Privacy Act and serving as the primary point of contact for data subject rights requests, privacy inquiries, and data breach notifications.

To exercise your data subject rights, raise a privacy concern, or submit a data breach report, please contact:

• Email: [email protected] (Subject line: "Privacy / DPO Request")
• Response Time: Acknowledgement within 3 business days; substantive response within 15 business days for standard requests.
• Language: English (Filipino-English accepted)

If you are not satisfied with jillf's response to your privacy inquiry or data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through official NPC channels.