jillid Casino Privacy Policy —
How We Handle Your Personal Data

1Who We Are and How to Contact Us

This Privacy Policy is issued by jillid Casino ("jillid", "we", "us", "our"), a PAGCOR-licensed online casino and sports betting platform operating at jillid.org. jillid Casino serves Filipino players across the Philippines and is subject to Philippine data privacy legislation, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission ("NPC").

For all privacy-related inquiries, data subject access requests, or complaints, you may contact jillid's Data Protection Officer ("DPO") through the following channels:

• Email: [email protected] (mark subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 at jillid.org
• Response time: Within 72 hours for standard privacy queries; within 30 calendar days for formal data subject requests

2Data We Collect

jillid Casino collects personal data that is necessary to operate a licensed, compliant, and secure online gaming platform. We do not collect data beyond what is reasonably required for the purposes described in this Policy.

The following table summarises the categories of personal data jillid collects and the primary context in which each category is obtained:

jillid does not knowingly collect sensitive personal information beyond identity document images and financial data required under PAGCOR licensing and anti-money laundering (AML) obligations. We do not collect racial, ethnic, political, religious, health, genetic, or biometric data except where a government-issued ID submitted for KYC incidentally contains such information.

3How We Use Your Data

jillid Casino processes personal data only for lawful purposes that are directly connected to the operation of a PAGCOR-licensed online gaming platform. The principal purposes for which jillid uses your personal data are:

• Account management: Creating, maintaining, and administering your jillid Casino account, including login authentication, profile management, and password reset services.
• Identity and age verification (KYC): Verifying that you meet the 21+ age requirement and confirming your identity as required by PAGCOR and Philippine AML regulations.
• Payment processing: Processing GCash, Maya, bank, and other Philippine payment channel deposits and withdrawals, verifying payment ownership, and preventing financial fraud.
• Platform operations: Providing access to games, processing bets, calculating payouts, and maintaining game history and transaction records.
• Regulatory compliance: Fulfilling obligations under jillid's PAGCOR licence, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws, including reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).
• Responsible gaming: Monitoring gaming behaviour to identify potential problem gambling patterns, administering self-exclusion and limit-setting tools, and complying with PAGCOR's responsible gaming framework.
• Security and fraud prevention: Detecting, investigating, and preventing account takeover, money laundering, bonus abuse, collusion, and other prohibited activities.
• Customer support: Responding to queries, resolving disputes, processing complaints, and providing assistance with account and payment issues.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in. You may withdraw consent to marketing communications at any time through your account settings.
• Platform improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.

4Legal Basis for Processing

jillid Casino processes your personal data on the following legal bases under the Data Privacy Act of 2012 and, where applicable, analogous principles under Philippine law:

• Contractual necessity: Processing required to fulfil jillid's obligations under the Terms and Conditions, including account management, payment processing, and game operation.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR licensing obligations, AMLA reporting requirements, NPC directives, and court orders.
• Legitimate interests: Processing necessary for jillid's legitimate interests, including platform security, fraud detection, responsible gaming monitoring, and business analytics, provided that such processing does not unduly prejudice your rights and freedoms.
• Consent: Processing based on your explicit consent, including marketing communications and any data processing activity not covered by the above bases. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

5Data Sharing and Disclosure

jillid Casino does not sell personal data to third parties. We share your personal data only to the extent necessary for the purposes described in this Policy, and only with parties that are subject to appropriate data protection obligations.

• PAGCOR: As jillid's primary gaming regulator, PAGCOR has the authority to require disclosure of player data, including identity, transaction, and gaming activity records, as part of its regulatory oversight functions.
• Anti-Money Laundering Council (AMLC): jillid is obligated to report covered and suspicious transactions to the AMLC under the Anti-Money Laundering Act.
• Payment service providers: GCash, Maya, GrabPay, partner banks, and other payment processors receive the minimum data necessary to process your deposits and withdrawals (e.g., account number, transaction amount, reference).
• Game providers: Licensed game software providers may receive anonymised or pseudonymised session data to deliver games, resolve technical issues, and comply with their own regulatory obligations.
• KYC and identity verification services: Third-party identity verification providers may process identity document images and biometric data (facial comparison) as part of the KYC process. Such providers are bound by data processing agreements and Philippine privacy law.
• IT and security service providers: Cloud hosting providers, cybersecurity firms, and fraud detection platforms process technical data under strict data processing agreements as data processors acting on jillid's instructions.
• Law enforcement and courts: jillid will disclose personal data to Philippine law enforcement authorities, courts, or regulatory bodies where required by law or valid legal process.

6Data Retention

jillid Casino retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with retention obligations imposed by applicable Philippine law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years following each transaction, in compliance with AMLC record-keeping obligations.
• Gaming activity logs: Retained for a minimum of three (3) years for PAGCOR compliance and responsible gaming monitoring purposes.
• Customer support communications: Retained for three (3) years from the date of the last interaction, or longer where related to an unresolved dispute.
• Marketing preference data: Retained until you withdraw consent or request erasure, subject to any overriding legal retention obligations.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that prevents re-identification.

7Cookies and Tracking Technologies

jillid Casino uses cookies and similar tracking technologies on the jillid.org website to enable platform functionality, maintain authenticated sessions, detect fraud, and analyse usage patterns. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that maintain your authenticated login state and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and responsible gaming configurations to improve your experience.
• Analytics cookies: Collect anonymised data about how visitors interact with jillid.org, including pages visited, session duration, and error events. This data is used to improve the platform.
• Security cookies: Used to detect and prevent bot activity, brute force login attempts, and other security threats.

You may manage non-essential cookies through your browser settings. Disabling functional or analytics cookies will not prevent you from using jillid Casino but may affect your experience. Disabling strictly necessary cookies will prevent you from logging in.

8Your Privacy Rights

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by jillid Casino. To exercise any of these rights, contact jillid's Data Protection Officer at [email protected].

9Data Security

jillid Casino implements technical, organisational, and physical security measures appropriate to the sensitivity of the personal data we process. These measures are reviewed and updated regularly in line with industry standards and regulatory guidance from the NPC.

• Encryption in transit: All connections between your device and jillid.org are encrypted using TLS/SSL with 256-bit encryption. Sensitive data including passwords is never transmitted in plain text.
• Encryption at rest: Stored personal data, including identity documents and financial information, is encrypted at rest using AES-256 or equivalent standards.
• Access controls: Access to personal data is restricted on a strict need-to-know basis. Staff with access undergo regular data privacy training. Administrative access is protected by multi-factor authentication.
• Intrusion detection: Automated systems monitor for unauthorised access attempts, unusual data access patterns, and known attack signatures. Security incidents trigger immediate response protocols.
• Third-party security audits: jillid engages independent security professionals to conduct periodic penetration testing and vulnerability assessments of platform infrastructure.

In the event of a personal data breach that poses a risk to your rights and freedoms, jillid will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay where required by RA 10173.

10Amendments to This Policy

jillid Casino reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. When material changes are made, jillid will notify registered players via the platform notification system or by email to the registered address at least seven (7) days before the changes take effect.

The most current version of this Privacy Policy is always available at jillid.org/privacy-policy. The effective date displayed at the top of this Policy indicates when the current version entered into force. Your continued use of jillid Casino after the effective date of any amendment constitutes acceptance of the updated Policy.

If you have questions about this Privacy Policy or about how jillid processes your personal data, please contact our Data Protection Officer at [email protected]. If you believe jillid has not adequately addressed a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.