Privacy Policy – jilima Casino Philippines

1. Introduction

This Privacy Policy ("Policy") describes how jilima ("jilima," "we," "us," or "our"), the operator of the online gaming platform at jilima.one and associated mobile applications (collectively, the "Platform"), collects, processes, stores, and protects the personal data of users ("you," "Player," or "Data Subject") in connection with the operation of jilima's services.

jilima is committed to upholding the privacy rights of all Filipino players. This Policy is drafted in compliance with Republic Act No. 10173, known as the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC"). It is also informed by applicable PAGCOR regulations governing online gaming operators licensed in the Philippines.

By registering an account with jilima or using any feature of the Platform, you acknowledge that you have read, understood, and freely consented to the collection and processing of your personal data as described in this Policy. If you do not consent, you must not use the Platform.

2. Personal Data We Collect

jilima collects the following categories of personal data in connection with account registration, verification, gameplay, and financial transactions:

2.1 Identity Data

• Full legal name as it appears on your government-issued Philippine identification document;
• Date of birth (for age verification — you must be at least 21 years old);
• Gender (optional, for personalization purposes);
• Photograph or scanned copy of government-issued Philippine ID submitted for KYC verification (e.g., Passport, Driver's License, PhilSys National ID, SSS/UMID, Voter's ID).

2.2 Contact Data

• Philippine mobile number (required for account registration and two-factor authentication);
• Email address;
• Residential address (required for KYC verification and regulatory reporting).

2.3 Financial Data

• GCash account number or Maya/PayMaya account identifier linked to your jilima account;
• Bank account details (BPI, BDO, Metrobank, or other Philippine bank) provided for bank transfer withdrawals;
• Records of all deposits, withdrawals, wagering transactions, bonuses, and account balance history.

2.4 Technical and Usage Data

• IP address, device type, operating system, and browser information;
• Login timestamps, session duration, and geolocation data (city/region level) for fraud prevention;
• Game play history, betting patterns, and preferences;
• Platform interaction data collected through cookies and similar tracking technologies.

2.5 Communication Data

• Records of live chat conversations with jilima support agents;
• Email correspondence between you and jilima;
• Feedback, complaints, and dispute records.

3. How We Collect Your Data

jilima collects personal data through the following means:

• Directly from you — during account registration, KYC document submission, deposit and withdrawal requests, support interactions, and promotional entries;
• Automatically — through cookies, web beacons, pixel tags, log files, and analytics tools as you navigate and interact with the Platform;
• From payment providers — GCash, Maya, and Philippine banks may transmit transaction confirmation data to jilima as part of payment processing;
• From identity verification partners — accredited third-party KYC service providers may process your submitted identification documents and return verification status to jilima;
• From regulatory authorities — PAGCOR and AMLC may share information with jilima as required by law in connection with licensing compliance and anti-money laundering obligations.

4. Purpose and Use of Your Data

jilima processes your personal data solely for the following legitimate and specified purposes:

• Account creation and management — to create, maintain, and secure your jilima player account;
• Identity and age verification — to confirm you are at least 21 years of age and legally eligible to use the Platform under PAGCOR regulations;
• Payment processing — to facilitate deposits and withdrawals via GCash, Maya, Philippine banks, and other supported payment channels;
• PAGCOR compliance and regulatory reporting — to fulfill jilima's obligations as a PAGCOR-licensed operator, including player identification and gaming activity reports;
• Anti-money laundering (AMLA) compliance — to monitor transactions for suspicious activity, conduct enhanced due diligence, and submit mandatory reports to the AMLC as required by Republic Act No. 9160, as amended;
• Fraud prevention and platform security — to detect, investigate, and prevent unauthorized account access, cheating, collusion, and other prohibited conduct;
• Customer support — to respond to your inquiries, resolve disputes, and provide technical assistance;
• Platform personalization and improvement — to tailor game recommendations and promotional offers to your preferences and to improve the Platform's functionality;
• Marketing communications — to send you promotional offers, bonus notifications, and event invitations, subject to your marketing consent preferences which you may update at any time.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act, jilima's processing of your personal data is based on the following legal grounds:

• Consent — processing for marketing communications and Platform personalization rests on your freely given, specific, and informed consent provided at registration and manageable at any time through account settings;
• Contractual necessity — processing required to establish, perform, and administer the user agreement between you and jilima (including account management and payment processing) is necessary for the performance of our contract with you;
• Legal obligation — processing for PAGCOR compliance, KYC verification, and AMLA reporting is required by Philippine law and cannot be waived by either party;
• Legitimate interest — processing for fraud prevention, platform security, and service improvement is based on jilima's legitimate interest in maintaining a safe and functional gaming environment, balanced against your rights and interests.

6. Data Sharing and Disclosure

jilima does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. jilima shares personal data only in the following limited circumstances:

6.1 Regulatory and Law Enforcement Authorities

jilima is required by Philippine law to share certain data with PAGCOR, the AMLC, the NPC, the BIR, and other competent government authorities upon lawful request or as required by our PAGCOR operating license. Such disclosures are mandatory and do not require your separate consent.

6.2 Service Providers and Data Processors

jilima engages accredited third-party data processors to perform specific functions on our behalf, including KYC verification, payment processing, cloud infrastructure, fraud analytics, and customer support technology. All processors are bound by data processing agreements that restrict their use of your data to the specific services they provide to jilima and require them to maintain appropriate security measures.

6.3 Game Content Providers

jilima's third-party game providers (including JILI and live casino streaming partners) may receive limited technical data — such as anonymized session tokens — necessary for game delivery and RNG certification. These providers do not receive your identity or financial data.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of jilima's business, your personal data may be transferred to the successor entity. jilima will provide notice of any such transfer and ensure the successor entity is bound by terms no less protective than this Policy.

7. Data Retention

jilima retains your personal data for as long as your account remains active and for such period thereafter as is required to fulfill our regulatory, legal, and contractual obligations. Specific retention periods include:

• Account and identity data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with BIR and AMLA requirements;
• KYC documents: Retained for five (5) years after account closure or as required by applicable regulatory authority;
• Customer support communications: Retained for two (2) years for dispute resolution and service improvement purposes;
• Marketing consent records: Retained for the duration of your account and for a reasonable period thereafter as evidence of consent.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with the NPC's disposal guidelines.

8. Data Security

jilima implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jilima Platform;
• Encrypted storage of sensitive personal and financial data at rest using AES-256 encryption;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Two-factor authentication available for all player accounts and mandatory for jilima staff accessing production systems;
• Regular third-party security audits and penetration testing of Platform infrastructure;
• Real-time fraud monitoring and intrusion detection systems;
• Incident response procedures compliant with the NPC's 72-hour breach notification requirement under the DPA.

Notwithstanding these measures, no Internet-based system is completely impenetrable. In the event of a personal data breach that poses a real risk of serious harm to affected players, jilima will notify the NPC and affected data subjects within the timeframes required by the DPA and its IRR.

9. Cookies and Tracking Technologies

jilima uses cookies, web beacons, and similar technologies on the Platform. Cookies are small text files placed on your device that help jilima provide a functional and personalized gaming experience.

9.1 Types of Cookies Used

• Strictly necessary cookies: Required for core Platform functions including session authentication, security, and payment processing. Cannot be disabled;
• Functional cookies: Store your language preferences, game settings, and other personalization choices to improve your experience;
• Analytics cookies: Collect anonymized data about Platform usage to help jilima improve performance and usability. No personally identifiable information is collected by analytics cookies;
• Marketing cookies: Used to deliver relevant promotional offers based on your preferences. Requires your consent and can be managed through your account settings.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality and may prevent login or payment processing.

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by jilima:

• Right to be informed — the right to know what personal data jilima collects and how it is used (fulfilled by this Policy);
• Right to access — the right to request a copy of the personal data jilima holds about you and information about how it is being processed;
• Right to correct — the right to request correction of inaccurate or incomplete personal data;
• Right to object — the right to object to processing based on legitimate interest or for direct marketing purposes;
• Right to erasure or blocking — the right to request deletion or suspension of processing of your personal data where there is no longer a lawful basis for retention, subject to overriding regulatory retention obligations;
• Right to data portability — the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to damages — the right to be indemnified for damages sustained as a result of inaccurate, incomplete, or unauthorized processing of personal data.

To exercise any of these rights, please contact jilima's Data Privacy Officer through our 24/7 live support or at [email protected]. jilima will respond to valid data subject requests within ten (10) business days, or within thirty (30) days for complex requests, in accordance with NPC guidelines.

11. Children and Minors

jilima's Platform is strictly intended for adults aged twenty-one (21) years and above, as required by PAGCOR regulations governing online gaming in the Philippines. jilima does not knowingly collect personal data from individuals under the age of 21.

If jilima discovers or has reasonable grounds to believe that a registered user is under the age of 21, jilima will immediately suspend the account, void all winnings, return any unplayed deposits, and permanently delete or anonymize the personal data associated with that account. If you are a parent or guardian and believe your child has registered with jilima, please contact our support team immediately.

12. Cross-Border Data Transfers

As an online gaming platform with global technology infrastructure, certain personal data processed by jilima may be transferred to, stored in, or processed in countries other than the Philippines. jilima ensures that any cross-border transfer of personal data complies with Section 21 of the Data Privacy Act and NPC Circular No. 16-01, including the use of appropriate transfer mechanisms such as contractual clauses, adequacy assessments, and binding corporate rules where applicable.

In all cases, jilima requires receiving parties in other jurisdictions to maintain data protection standards equivalent to or exceeding those required under Philippine law.

13. Amendments to This Policy

jilima reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC issuances, PAGCOR regulations, or jilima's data processing practices. Material amendments will be communicated to registered players via the registered email address or through a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.

Your continued use of the jilima Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not accept a material amendment, you may close your account before the effective date.

14. Contact – Data Privacy Officer

jilima has designated a Data Privacy Officer ("DPO") responsible for overseeing compliance with the Data Privacy Act and handling data subject requests and privacy complaints. You may contact jilima's DPO through the following channels:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: 24/7 via the jilima Platform — identify your query as a Data Privacy matter
• Response Target: Initial acknowledgment within 48 hours; substantive response within 10 business days

This Privacy Policy was last updated in June 2026 and supersedes all prior versions. jilima operates under PAGCOR license for the Philippine market.