jillik Privacy Policy

1 Data Controller Information

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal information is jillik, operating the online gaming platform accessible at jillik.com.

jillik is the entity that determines the purposes and means of processing your personal data. As data controller, jillik is responsible for ensuring that your personal data is processed lawfully, fairly, and transparently, and that appropriate technical and organizational measures are in place to protect it.

If you have any questions about how jillik handles your personal data, or if you wish to exercise any of your data subject rights, you may contact our Data Protection Officer (DPO) at [email protected]. All data privacy enquiries are handled by our dedicated compliance team and will be acknowledged within seventy-two (72) hours.

2 Personal Data We Collect

jillik collects the following categories of personal data from Players and platform visitors. We only collect data that is necessary, adequate, and not excessive relative to the purposes for which it is processed.

jillik does not collect sensitive personal information as defined under the Data Privacy Act (e.g., health data, religious beliefs, political affiliations) unless specifically required for regulatory compliance purposes and with your explicit consent.

3 How We Collect Your Data

jillik collects personal data through the following means:

• Direct Collection: Information you provide when registering for a jillik account, completing KYC verification, making deposits or withdrawals, contacting our support team, or updating your account profile.
• Automated Collection: Technical data collected automatically when you visit jillik.com or use the jillik mobile application, including through cookies, web beacons, pixel tags, and server logs. See Section 7 for more detail on cookies.
• Third-Party Sources: Identity and fraud verification data from KYC service providers; payment verification data from GCash, PayMaya, BPI, BDO, and Metrobank; and fraud prevention data from third-party risk management services. jillik only receives data from third parties where there is a lawful basis for doing so.
• Regulatory Sources: In certain circumstances, jillik may receive data from PAGCOR or other regulatory authorities in connection with compliance obligations, including self-exclusion registry checks.

4 Purposes of Data Processing

jillik processes your personal data for the following specific, legitimate purposes:

• Account Management: To create, maintain, and administer your jillik account, including verifying your identity and eligibility to use the platform.
• Service Delivery: To provide you with access to jillik's games, promotions, rewards, and all other platform features.
• Payment Processing: To process deposits, withdrawals, and refunds, and to maintain accurate financial records of all transactions.
• KYC & AML Compliance: To verify your identity and comply with anti-money laundering obligations under Philippine law, including the Anti-Money Laundering Act (Republic Act No. 9160, as amended).
• Regulatory Compliance: To meet jillik's obligations under PAGCOR regulations, the Data Privacy Act of 2012, and other applicable Philippine laws.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible Gaming: To administer responsible gaming tools including deposit limits, self-exclusion, and session reminders, and to identify Players who may be at risk of problem gambling.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Marketing & Promotions: To send you promotional offers, bonus notifications, and platform updates, where you have opted in to receive such communications. You may opt out at any time through your account settings.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, design, and content of the jillik platform.

5 Legal Basis for Processing

jillik processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and jillik (i.e., the Terms & Conditions you agreed to upon registration), including account management, payment processing, and service delivery.
• Legal Obligation: Processing is required to comply with jillik's legal obligations under Philippine law, including KYC/AML requirements, PAGCOR regulatory obligations, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for jillik's legitimate interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, jillik relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

jillik does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your financial transactions.
• KYC & Identity Verification Providers: Third-party identity verification and fraud prevention services engaged by jillik to fulfill KYC and AML obligations.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where disclosure is required by law or regulatory mandate.
• Technology Service Providers: Cloud hosting providers, platform infrastructure vendors, analytics providers, and customer support software providers engaged by jillik to operate and maintain the platform. All such providers are bound by data processing agreements that restrict their use of your data.
• Game Content Providers: Third-party game studios and software providers whose games are available on the jillik platform may receive limited technical data (e.g., session tokens) necessary to deliver their games. These providers do not receive your identity or financial data.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by jillik, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of jillik's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties with whom jillik shares personal data are required to handle it in accordance with applicable data protection law and jillik's data protection standards.

7 Cookies & Tracking Technologies

jillik uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage, and deliver relevant content. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming configurations. Disabling these may affect platform functionality.
• Analytics Cookies: Collect anonymized data about how Players use the jillik platform, including pages visited, time spent, and navigation paths. This data helps jillik improve the platform experience.
• Marketing Cookies: Used to deliver relevant promotional content and track the effectiveness of jillik's marketing campaigns. These are only set with your consent.

You may manage your cookie preferences through your browser settings or through the cookie consent tool available on the jillik platform. Please note that disabling certain cookies may limit your ability to use some features of the platform.

8 Data Retention

jillik retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account Data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, in accordance with PAGCOR regulatory requirements and AML obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine AML regulations.
• KYC Documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory authority.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it will be deleted or anonymized within thirty (30) days.
• Technical & Log Data: Retained for up to twelve (12) months for security and fraud prevention purposes, after which it is anonymized or deleted.

Upon expiry of the applicable retention period, jillik will securely delete or anonymize your personal data in accordance with its data disposal procedures.

9 Data Security

jillik takes the security of your personal data seriously and has implemented a range of technical and organizational measures to protect it against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and the jillik platform is encrypted using 256-bit SSL/TLS technology. Sensitive data stored in jillik's systems is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized jillik personnel and service providers on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: jillik supports two-factor authentication (2FA) for Player accounts to provide an additional layer of security against unauthorized access.
• Regular Security Audits: jillik conducts regular security assessments, penetration testing, and vulnerability scans to identify and address potential security risks.
• Incident Response: jillik maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, jillik will notify the National Privacy Commission and affected Players in accordance with the requirements of the Data Privacy Act of 2012.

While jillik takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying jillik immediately if you suspect unauthorized access to your account.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jillik. To exercise any of these rights, please contact our Data Protection Officer at [email protected]. jillik will respond to all verified requests within thirty (30) days.

11 Children's Privacy

The jillik platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. jillik does not knowingly collect personal data from individuals under the age of 21.

If jillik becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the jillik platform, please notify us immediately at [email protected].

jillik employs age verification measures during the registration process and reserves the right to request proof of age at any time. Providing false information about your age to circumvent these measures constitutes a material breach of jillik's Terms & Conditions.

12 Cross-Border Data Transfers

In certain circumstances, jillik may transfer your personal data to service providers or partners located outside the Philippines, for example in connection with cloud hosting, platform infrastructure, or game content delivery. Where such transfers occur, jillik ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized under Philippine law.
• Implementing contractual clauses that require overseas recipients to handle your data in accordance with the Data Privacy Act of 2012 and jillik's data protection standards.
• Conducting due diligence on all overseas data processors to ensure they maintain appropriate technical and organizational security measures.

By using the jillik platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the delivery of jillik's services, subject to the safeguards described above.

13 Changes to This Privacy Policy

jillik reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. Material changes will be communicated to registered Players via email or a prominent notice on the jillik platform at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the jillik platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with the changes, you should cease using the platform and may request account closure in accordance with the Terms & Conditions.

We encourage you to review this Privacy Policy periodically to stay informed about how jillik protects your personal data.

14 Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or jillik's handling of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the jillik platform
• Response Time: All data privacy enquiries will be acknowledged within seventy-two (72) hours and resolved within thirty (30) days

If you are not satisfied with jillik's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. Information about how to file a complaint with the NPC is available through official Philippine government channels.

This Privacy Policy was last updated on January 1, 2026 and supersedes all previous versions.