jilic Casino Privacy Policy

In this Privacy Policy, the following terms carry the meanings assigned to them below, unless the context clearly indicates otherwise:

• "jilic," "we," "us," "our" — the operator of the jilic platform at jilic.vip, duly authorized under PAGCOR regulation to provide online gaming services to Philippine players.
• "Personal Data" — any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual. This definition follows Republic Act No. 10173 (the Data Privacy Act of 2012).
• "Sensitive Personal Information" — personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic or sexual life, any proceeding for any offense committed or alleged to have been committed, or government-issued identifiers such as social security numbers and tax identification numbers.
• "Data Subject" — any individual whose personal data is processed by jilic, including registered players, prospective players, and website visitors.
• "Processing" — any operation or set of operations performed upon personal data, including collection, recording, organization, storage, updating, retrieval, use, consolidation, blocking, erasure, or destruction.
• "NPC" — the National Privacy Commission of the Philippines, the government authority responsible for enforcing the Data Privacy Act.
• "PAGCOR" — the Philippine Amusement and Gaming Corporation, the regulatory authority for jilic's gaming operations.
• "AMLC" — the Anti-Money Laundering Council, the Philippine authority responsible for enforcing Republic Act No. 9160 (the Anti-Money Laundering Act).
• "KYC" — Know Your Customer, the identity verification process mandated by PAGCOR and AMLC for licensed online gaming operators.

jilic operates as the Data Controller with respect to the personal data of its registered players and website visitors. As Data Controller, jilic determines the purposes for which personal data is processed and the means by which such processing is carried out, in accordance with the Philippine Data Privacy Act of 2012 and its implementing rules.

jilic operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). All data processing activities are conducted in a manner consistent with PAGCOR's operational requirements for licensed online gaming platforms and with the Anti-Money Laundering Act's customer identification program requirements.

For all data privacy queries, rights requests, and concerns, jilic's designated Data Protection Officer (DPO) may be contacted via the channels described in Section 17 of this Policy.

jilic collects personal data across several categories depending on your relationship with the Platform. The following table describes the categories of personal data collected and their primary source:

jilic collects personal data through the following channels:

• Direct provision by you: Information you provide when registering a jilic account, completing KYC verification, making deposits or withdrawals, submitting support requests, setting responsible gaming limits, or otherwise interacting with the Platform.
• Automated technical collection: Data generated automatically when you access or use the jilic Platform, including IP address, device identifiers, session data, and browsing behavior within the Platform, collected via server logs, cookies, and similar tracking technologies as described in Section 7.
• Third-party verification providers: Information received from licensed KYC and identity verification service providers used to authenticate your identity documents against Philippine government and financial institution records as required by PAGCOR and AMLC.
• Payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, UnionBank, and other payment partners following deposit and withdrawal transactions. jilic does not receive or store your full GCash PIN or bank login credentials.

jilic processes your personal data for the following purposes, each supported by a lawful legal basis under the Philippine Data Privacy Act:

• Account creation and management — necessary for the performance of your player agreement with jilic (contractual basis).
• Identity verification (KYC) — compliance with a legal obligation under PAGCOR regulations and the Anti-Money Laundering Act (legal obligation basis).
• Payment processing and fraud prevention — necessary for the performance of the contract and compliance with financial crime prevention legal requirements.
• Game delivery and platform operation — necessary for the performance of the gaming services contract.
• Responsible gaming monitoring — compliance with PAGCOR player protection requirements and jilic's legitimate interest in preventing harm to vulnerable players.
• Regulatory reporting to PAGCOR and AMLC — compliance with legal obligations under the PAGCOR charter and the Anti-Money Laundering Act.
• Customer support — necessary for the performance of the contract and jilic's legitimate interest in resolving player issues.
• Security and fraud detection — jilic's legitimate interest in protecting the Platform and other players from fraudulent activity.
• Marketing and promotional communications (where consent has been given) — based on your explicit consent, which may be withdrawn at any time as described in Section 12.

jilic does not sell, rent, or commercially exploit your personal data to third parties. Personal data is shared externally only in the following strictly controlled circumstances:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, and other accepted payment providers receive transaction data necessary to process deposits and withdrawals. These providers are independent data controllers with their own privacy policies.
• KYC and identity verification providers: Licensed third-party verification services engaged to authenticate your identity documents and government ID records as required by PAGCOR and AMLC KYC mandates.
• Game content providers: Licensed game studios supplying slot, live casino, and specialty game content to the Platform receive necessary session and bet data to operate games correctly. These studios are contractually bound to process data solely for game delivery purposes.
• Regulatory authorities: PAGCOR receives operational data as required under its licensing and audit functions. The Anti-Money Laundering Council receives reports as required under the Anti-Money Laundering Act. Law enforcement authorities receive data when required by valid legal process or court order.
• IT infrastructure and cloud service providers: Providers of servers, database management, security monitoring, and platform infrastructure receive access to data strictly for technical hosting and support purposes, under data processing agreements with confidentiality obligations.

jilic uses cookies and similar tracking technologies on the Platform to enable core platform functionality, maintain your authenticated session, remember your preferences, and support Platform security. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core Platform functions including login session management, security tokens, and responsible gaming limit enforcement. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: Used to remember your account preferences, game lobby settings, language choices, and deposit method defaults. Disabling these cookies will require you to re-enter preferences on each visit.
• Analytics Cookies: Used to understand how players navigate the Platform in aggregate, identifying areas for performance improvement and identifying technical errors. Analytics data is processed in anonymized or pseudonymized form.
• Security Cookies: Used for fraud detection and bot prevention, including session fingerprinting to identify unauthorized access attempts to your account.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing authenticated portions of the jilic Platform.

jilic retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to mandatory retention periods imposed by Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is either permanently deleted from jilic's systems or irreversibly anonymized so that it can no longer be associated with any identifiable individual.

jilic implements technical and organizational security measures proportionate to the sensitivity of the personal data processed and the risks posed by the Platform's operating environment. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jilic's servers.
• AES-256 encryption at rest for sensitive personal data stored in jilic databases.
• Role-based access controls ensuring jilic staff access personal data only where their job function requires it.
• Multi-factor authentication required for all jilic administrative and operational system access.
• Regular penetration testing and security audits conducted by independent third-party security specialists.
• Intrusion detection and prevention systems monitoring jilic's infrastructure in real time.
• Password hashing using industry-standard algorithms — jilic does not store your account password in plain text.
• Staff data privacy training for all jilic employees who handle personal data, conducted at onboarding and on an annual basis.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jilic. These rights may be exercised by contacting jilic's Data Protection Officer as described in Section 17:

To exercise any of the above rights, contact jilic's Data Protection Officer through live chat or email as described in Section 17. jilic will respond within fifteen (15) business days. Identity verification may be required before processing certain requests.

If you have reason to believe that a minor has registered a jilic account or provided personal data to jilic, please contact jilic's support team or Data Protection Officer immediately so that appropriate action can be taken.

jilic may send you promotional offers, bonus notifications, and platform updates via SMS to your registered Philippine mobile number and via email, where you have provided your consent to receive such communications at registration or subsequently through your account settings.

You may withdraw consent to marketing communications at any time by:

• Updating your communication preferences in your jilic account settings (Account → Notifications → Marketing).
• Contacting jilic support via live chat and requesting removal from promotional communications.
• Emailing jilic's Data Protection Officer as described in Section 17.

Withdrawal of marketing consent will be processed within 5 business days. Note that jilic may continue to send you essential account and regulatory communications (such as deposit confirmation, withdrawal status, and security alerts) regardless of your marketing preferences, as these are necessary for service delivery and cannot be opted out of.

jilic's primary data processing infrastructure is located within the Philippines. However, some of jilic's third-party service providers — including game content providers and certain technical infrastructure partners — may process data from servers located outside the Philippines.

Where personal data is transferred outside the Philippines, jilic ensures that such transfers are made only to jurisdictions or recipients that provide an adequate level of data protection, or that appropriate safeguards are in place in the form of data transfer agreements incorporating the standard contractual clauses recognized by the National Privacy Commission.

jilic does not transfer personal data to countries or recipients that lack adequate data protection frameworks without the express consent of the data subject or a specific legal basis authorizing the transfer.

In the event of a personal data breach — meaning any accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed by jilic — jilic will take the following steps:

1. Containment: Immediately activate security incident response procedures to contain the breach and prevent further unauthorized access or data loss.
2. Assessment: Assess the nature and scope of the breach, the categories and approximate number of data subjects affected, and the likely consequences.
3. Regulatory notification: Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach where it is likely to result in a risk to the rights and freedoms of affected individuals, as required by the Data Privacy Act.
4. Player notification: Notify affected players of the breach, its nature, likely consequences, and the measures jilic has taken or proposes to take, without undue delay where the breach is likely to result in a high risk to their rights.
5. Remediation: Implement technical and organizational measures to prevent recurrence and review security protocols accordingly.

If you have a concern about the way jilic has handled your personal data, you are encouraged to contact jilic's Data Protection Officer in the first instance using the details in Section 17. jilic will acknowledge your complaint within 5 business days and provide a substantive response within 15 business days.

If you are not satisfied with jilic's response, or if jilic fails to respond within the timeframe above, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC), which is the supervisory authority for data protection matters in the Philippines.

jilic may amend or update this Privacy Policy from time to time to reflect changes in data processing practices, regulatory requirements, or Platform operations. When material changes are made, jilic will notify registered players via SMS to their registered Philippine mobile number and via in-platform notification, at least seven (7) days before the amended Policy takes effect.

Non-material amendments — such as clarifications, typographical corrections, or reformatting — may take effect upon publication without advance notice. The version date at the top of this Policy reflects the date of the most recent revision.

Continued use of the jilic Platform following the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the revised terms. If you disagree with any amendment, you should cease using the Platform and may request voluntary account closure as described in jilic's Terms and Conditions.

For all data privacy queries, rights requests, consent withdrawals, and privacy complaints, please contact jilic's designated Data Protection Officer through the following channels: