jillis Casino – Privacy Policy

1. Data Controller

The data controller responsible for your personal information collected through the jillis platform is jillis Casino, operating at jillis.club under PAGCOR regulatory oversight in the Republic of the Philippines. References to "jillis," "we," "us," or "our" in this Privacy Policy refer to jillis Casino as data controller.

jillis has appointed a Data Protection Officer (DPO) in accordance with the requirements of Republic Act No. 10173 (Data Privacy Act of 2012). Contact details for the jillis DPO are provided in Section 14 of this Policy.

2. Personal Data We Collect

jillis collects the following categories of personal data from players and platform users:

3. How We Collect Your Data

jillis collects personal data through the following channels:

3.1 Directly from You

• Account registration form (name, email, mobile number, date of birth)
• KYC document submission (government-issued ID, proof of address)
• Deposit and withdrawal transactions (payment method details)
• Live chat conversations and email correspondence with jillis support
• Responsible gaming tool settings you configure on your account

3.2 Automatically

• Browser and device data collected via cookies and server logs when you access jillis.club
• Game play data generated during your sessions on the jillis platform
• Transaction records generated by your deposit and withdrawal activity

3.3 From Third Parties

• Identity verification data from KYC service providers used to verify government ID documents
• Payment confirmation data from GCash, Maya, and Philippine bank payment gateways
• Fraud screening data from anti-fraud service providers used to protect jillis and its players

4. Purposes of Processing

jillis processes your personal data for the following specific purposes:

• Account management: Creating, maintaining, and securing your jillis account; authenticating your identity upon login; communicating account-related notices.
• Service delivery: Enabling access to games, processing deposits and withdrawals via GCash, Maya, and Philippine banks, crediting bonuses to your account.
• KYC and age verification: Verifying that you are 21 years of age or older and that your identity matches account registration details, as required by PAGCOR.
• Anti-money laundering (AML) compliance: Monitoring transactions for suspicious activity as required by the Anti-Money Laundering Act (RA 9160, as amended) and PAGCOR directives.
• Responsible gaming: Monitoring gameplay patterns for signs of problem gambling; enforcing self-imposed deposit limits, session limits, and self-exclusion settings.
• Fraud prevention and security: Detecting and preventing unauthorized access, bonus abuse, collusion, and other forms of fraudulent activity on the jillis platform.
• Customer support: Responding to your enquiries, resolving disputes, and managing complaints submitted via live chat or email.
• Platform improvement: Analysing aggregated, anonymised usage data to improve jillis game offerings, user interface, and platform performance.
• Legal and regulatory compliance: Meeting jillis's obligations under Philippine law, PAGCOR regulations, and other applicable regulatory requirements.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), jillis processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the jillis Casino player agreement — account management, game delivery, payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulatory requirements, AML reporting obligations under RA 9160, and other Philippine legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and platform improvement, where jillis's interests do not override your privacy rights.
• Consent: Processing for marketing communications, where jillis has obtained your explicit opt-in consent. You may withdraw marketing consent at any time without affecting other processing.

6. Data Sharing & Disclosure

jillis does not sell your personal data. We share your data only in the following limited circumstances:

6.1 Service Providers

jillis shares data with third-party service providers who process data on our behalf under contractual data processing agreements, including KYC verification providers, payment processors (GCash, Maya, Philippine banks), anti-fraud systems, and cloud hosting infrastructure providers. All such providers are required to maintain confidentiality and process data only as instructed by jillis.

6.2 Regulatory Authorities

jillis will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.

6.3 Game Providers

Game providers whose titles are available on the jillis platform may receive limited technical session data (such as anonymised session tokens) strictly for the purpose of game delivery. No personally identifiable information is shared with game providers beyond what is technically necessary.

7. Data Retention

jillis retains personal data for as long as necessary to fulfil the purposes outlined in this Policy, subject to the following retention standards:

• Active account data: Retained for the duration of your jillis account and for five (5) years after account closure, as required by PAGCOR and AML regulations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission, in accordance with AML record-keeping requirements under RA 9160.
• Transaction records: Retained for five (5) years from the date of each transaction.
• Customer support records: Retained for two (2) years from the date of the interaction.
• Technical / log data: Retained for twelve (12) months from the date of generation.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with jillis's data disposal procedures.

8. Security Measures

jillis implements the following technical and organisational security measures to protect your personal data:

• TLS 1.3 encryption for all data in transit between your device and jillis servers;
• AES-256 encryption for sensitive data stored in jillis databases;
• Role-based access controls limiting staff access to personal data to those with a business need;
• Multi-factor authentication required for all jillis internal system access;
• Regular third-party penetration testing and vulnerability assessments;
• Tokenized payment processing — jillis does not store GCash credentials or bank card numbers;
• 24/7 infrastructure monitoring for unauthorized access attempts and anomalous activity.

In the event of a personal data breach that is likely to result in harm to affected players, jillis will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by RA 10173.

9. Cookies & Tracking Technologies

jillis uses cookies and similar technologies to operate the platform effectively. The types of cookies used by jillis include:

• Essential cookies: Required for the jillis platform to function — session management, login authentication, and security tokens. These cannot be disabled without breaking core platform functionality.
• Analytics cookies: Anonymised data on how players navigate jillis, which games are most popular, and where platform improvements are needed. This data is aggregated and does not identify individual players.
• Preference cookies: Storing your language, display preferences, and responsible gaming settings across sessions.

jillis does not use third-party advertising or behavioural tracking cookies. You may manage essential and preference cookies through your browser settings, though disabling essential cookies will affect your ability to use the jillis platform. On mobile, browser-level cookie controls apply equally to the jillis mobile web experience.

10. Your Privacy Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by jillis:

• Right to be informed: You have the right to be told what data jillis holds about you and how it is processed — as set out in this Policy.
• Right to access: You may request a copy of the personal data jillis holds about your account. jillis will respond within fifteen (15) business days.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Account information can be updated via your jillis account settings or by contacting support.
• Right to erasure: You may request deletion of your personal data where jillis no longer has a lawful basis to retain it. Note that AML and PAGCOR retention obligations may prevent immediate deletion.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. Upon receipt of a valid objection, jillis will cease the relevant processing.
• Right to data portability: You may request your account and transaction data in a commonly used, machine-readable format.
• Right to lodge a complaint: If you believe jillis has not handled your data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, contact jillis via live chat or email at [email protected] with the subject line "Data Privacy Request." Identity verification will be required before any data is disclosed or modified.

11. Children's Privacy

The jillis platform is strictly intended for individuals aged 21 years and older. jillis does not knowingly collect personal data from persons under 21. If jillis becomes aware that personal data has been collected from a person under 21, such data will be immediately deleted and the associated account closed. If you believe a minor has registered on jillis, please contact us immediately at [email protected].

12. Cross-Border Data Transfers

Where jillis uses third-party service providers whose infrastructure is located outside the Philippines (such as certain cloud computing services or KYC verification platforms), personal data may be transferred internationally. jillis ensures that all such transfers are made only to countries or organisations that provide an adequate level of data protection, and that appropriate safeguards — including data processing agreements with standard contractual clauses — are in place. Such transfers are conducted in compliance with the NPC's rules on cross-border data transfers under RA 10173.

13. Changes to This Privacy Policy

jillis reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) calendar days before the changes take effect. The date of the most recent revision is displayed at the top of this Policy. Your continued use of the jillis platform after the effective date of any update constitutes your acceptance of the revised Policy.

14. Data Protection Officer & Contact

jillis has designated a Data Protection Officer (DPO) as required under RA 10173. For all privacy-related enquiries, data subject rights requests, or to report a potential data breach, please contact:

• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 on jillis.club — ask to be connected to the data privacy team
• Response time: Within 15 business days for formal data subject requests

For complaints that cannot be resolved directly with jillis, you may contact the National Privacy Commission of the Philippines. jillis fully cooperates with NPC investigations and audits.