jillis Privacy Policy

1 Who We Are and How to Reach Us

jillis ("jillis," "we," "us," "our") operates the online gaming platform accessible at jillis.org. As an online gaming operator operating in the Philippine market, jillis is the personal information controller responsible for the personal data collected through the Platform.

For all privacy-related enquiries, data subject access requests, and complaints, you may contact our Data Protection Officer (DPO) through the jillis live chat support channel available 24/7 at jillis.org. Written requests may also be submitted to our support email address listed in this Policy. We will acknowledge all privacy enquiries within five (5) business days and aim to resolve them within fifteen (15) business days.

2 Personal Data We Collect

jillis collects personal data in the following categories, depending on how you interact with the Platform:

We do not intentionally collect special categories of sensitive personal data (e.g., health information, religious beliefs, political opinions) unless specifically required by law or voluntarily provided by you in a support context relevant to a responsible gaming concern.

3 How We Collect Personal Data

jillis collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC, making deposits or withdrawal requests, contacting support, or updating your profile.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, session tokens, and server logs. See Section 6 for details on cookies.
• Third-party sources: Identity verification data from KYC/AML compliance service providers; payment confirmation data from GCash, PayMaya, and banking partners; fraud signals from anti-fraud service providers.
• Game providers: Aggregated gaming activity data from licensed third-party game providers (PG Soft, Pragmatic Play, Jili, etc.) integrated into the Platform, used for account management and responsible gaming monitoring.

4 Purpose and Legal Basis for Processing

jillis processes your personal data only for specified, legitimate purposes. The legal bases for processing under the Philippine Data Privacy Act are as follows:

Where consent is the legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing. Withdrawal of consent for promotional communications does not affect your ability to use the Platform.

5 Sharing of Personal Data

jillis does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, 7-Eleven, and Cebuana receive only the transactional data necessary to process your deposits and withdrawals.
• KYC and AML service providers: Third-party identity verification and anti-money laundering screening services receive identity and document data to complete the verification process required by law.
• Game providers: Licensed game studios receive the minimum data necessary to operate their games within the jillis Platform (e.g., session identifiers and wager amounts). They do not receive your full identity or financial data.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory bodies may receive data as required by law or lawful regulatory demand.
• Law enforcement: We disclose personal data to law enforcement agencies when required by a valid legal order, warrant, or court direction.
• Professional advisers: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations, where disclosure is necessary for obtaining professional advice.

6 Cookies and Tracking Technologies

jillis uses cookies and similar technologies to operate the Platform, maintain your session, remember preferences, and analyse usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core Platform functionality.
• Functional Cookies: Remember your preferences (e.g., language settings, last-visited game category) to improve your experience. These are set when you use relevant features.
• Analytics Cookies: Help us understand how Players use the Platform — which pages are visited, how long sessions last, and where errors occur. Data is aggregated and does not identify individual users. These cookies require your consent.
• Security and Fraud-Prevention Cookies: Help detect suspicious activity, multiple accounts, and automated bot behaviour. Required for security purposes.

You can manage non-essential cookies through your browser settings. Most browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent login and normal Platform use. For detailed cookie settings, consult your browser's help documentation.

jillis does not use third-party advertising or cross-site tracking cookies. We do not participate in retargeting advertising networks.

7 Data Retention

jillis retains personal data only for as long as necessary to fulfil the purpose for which it was collected, to comply with legal obligations, or as required by PAGCOR and other applicable regulatory directives. Key retention periods include:

• Account and identity data: Retained for the duration of the active Account and for a minimum of five (5) years following Account closure, in accordance with PAGCOR regulatory requirements and Philippine AML obligations.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by RA 9160 (Anti-Money Laundering Act) and relevant PAGCOR directives.
• KYC documents: Retained for a minimum of five (5) years post-Account closure. Copies of identity documents are deleted after this period unless retention is required by a regulatory or legal hold.
• Gaming activity data: Retained for five (5) years for responsible gaming monitoring, dispute resolution, and audit purposes.
• Support communications: Retained for three (3) years from the date of the last communication for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained until consent is withdrawn plus one (1) year to demonstrate prior consent.

When data is no longer required, it is securely deleted or anonymised in a manner that prevents re-identification.

8 Security Measures

jillis implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• TLS/SSL encryption for all data in transit between your device and jillis servers;
• Encryption of sensitive data at rest, including financial and identity data;
• Role-based access controls ensuring that only authorised personnel with a legitimate need can access personal data;
• Two-factor authentication for administrative access to systems containing personal data;
• Regular security assessments, vulnerability scanning, and penetration testing;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC reporting requirements;
• Employee training on data privacy obligations and security practices.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that is likely to result in a risk to the rights and freedoms of affected individuals, jillis will notify the National Privacy Commission within seventy-two (72) hours of becoming aware and will notify affected individuals without undue delay as required by law.

9 Your Rights as a Data Subject

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by jillis:

• Right to be Informed: You have the right to know that your personal data is being collected, processed, and shared, and to understand the purposes and legal bases for that processing. This Policy fulfils that obligation.
• Right to Access: You may request a copy of the personal data jillis holds about you, together with information about how it is processed.
• Right to Correction / Rectification: You may request correction of inaccurate or incomplete personal data. You may update basic account information directly from your Account settings.
• Right to Erasure ("Right to be Forgotten"): In certain circumstances — where data is no longer necessary, where consent has been withdrawn, or where processing was unlawful — you may request deletion of your personal data. This right is subject to overriding legal obligations (e.g., AML retention requirements).
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Object: You have the right to object to processing based on legitimate interests. For marketing communications, you may opt out at any time via your Account settings or by contacting support.
• Right to File a Complaint: If you believe jillis has processed your data in violation of the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

To exercise any of these rights, contact jillis through the live chat support channel or at the support email address listed in Section 13. We will verify your identity before processing any data subject request and will respond within fifteen (15) business days.

10 Children and Minors

jillis is strictly a 21+ platform. We do not knowingly collect personal data from individuals under the age of twenty-one (21). If we discover or are notified that personal data has been collected from an underage individual, we will immediately suspend the associated Account, delete the data, and report the incident as required.

If you are a parent or guardian and believe your minor child has provided personal data to jillis or accessed the Platform, please contact us immediately through live chat. We will investigate and take prompt action.

11 International Data Transfers

Some of the third-party service providers used by jillis — including game providers, payment processors, and KYC/AML partners — may be located or operate infrastructure outside the Philippines. Where personal data is transferred internationally, jillis ensures that:

• The receiving party is bound by data processing agreements that impose data protection obligations at least equivalent to Philippine DPA standards;
• The transfer is subject to appropriate safeguards, including standard contractual clauses where applicable; and
• The transfer is carried out only to the extent necessary for the specific processing purpose and does not extend to broader use of the data by the recipient.

jillis will not transfer personal data to a foreign jurisdiction where adequate privacy protections cannot be guaranteed without your explicit consent, unless required by law.

12 Changes to This Privacy Policy

jillis may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory guidance. Material changes will be communicated to registered Players via the Platform notification system or by email to the registered address at least seven (7) days before taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the jillis Platform after the effective date of any update constitutes your acknowledgment of the revised Policy. If you do not agree with material changes, you may request Account closure in accordance with the jillis Terms and Conditions.

13 Contact Us and Data Protection Officer

For any privacy-related questions, to exercise your data subject rights, or to raise a concern about how jillis handles your personal data, please contact our Data Protection Officer through the following channels:

This Privacy Policy was last reviewed and updated in June 2026. Previous versions are available on request.