jilikl Casino Privacy Policy

jilikl Casino ("jilikl," "we," "us," or "our") operates the online gaming platform accessible at jilikl.club. jilikl acts as the Data Controller for all personal information collected from players and visitors in connection with the use of our platform and services.

jilikl operates under authorization from the Philippine Amusement and Gaming Corporation (PAGCOR) and processes personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where jilikl engages third-party service providers to process personal data on its behalf, those providers act as Data Processors subject to appropriate contractual safeguards.

This Privacy Policy governs the collection and processing of personal data by jilikl in connection with the following activities:

• Account registration, login, and profile management on the jilikl platform.
• Identity verification (KYC) processes required under PAGCOR authorization and Philippine anti-money laundering legislation.
• Deposit and withdrawal processing via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard.
• Participation in jilikl's gaming products: live casino, slots, sports betting, bingo, and all other platform verticals.
• Customer support communications, including live chat, email, and any written correspondence.
• Participation in promotions, tournaments, loyalty programs, and bonus offers.
• Browsing jilikl.club, including interactions tracked via session analytics and cookies.

This Policy does not apply to third-party websites, payment processors, or game providers that operate their own independent privacy policies. jilikl is not responsible for the data practices of such third parties beyond the contractual obligations imposed on them as jilikl's Data Processors.

jilikl collects the following categories of personal data from players. The specific data collected in any given context depends on the nature of your interaction with the platform:

jilikl does not collect sensitive personal information beyond what is strictly required for KYC compliance — specifically, government ID data. jilikl does not collect biometric data beyond liveness verification photos required for remote identity confirmation, and these are processed solely for the purpose of verifying that the person submitting the KYC documents is physically present.

jilikl collects personal data through the following channels:

1. Direct Submission: Data you provide when registering a jilikl account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
2. Automated Collection: Technical and usage data collected automatically through your interaction with the jilikl platform, including server logs, session analytics, and cookie-based tracking as described in Section 12.
3. KYC Verification Partners: Identity verification results from third-party KYC providers engaged by jilikl to validate government-issued Philippine identification documents and perform liveness checks.
4. Payment Processors: Transaction confirmation data received from GCash, PayMaya, and banking partners upon processing deposits and withdrawals. jilikl receives transaction reference numbers and confirmation status — jilikl does not store full payment credentials.
5. Fraud Detection Systems: Risk signals from fraud detection services that analyse transaction patterns and access behaviour to identify potentially unauthorized activity on your jilikl account.

jilikl processes your personal data for the following specific purposes:

• Account Administration: Creating, maintaining, and securing your jilikl account; processing login and authentication; managing password resets and 2FA.
• KYC and Age Verification: Verifying your identity and confirming you meet the 21+ age requirement under PAGCOR regulations and Philippine gaming law.
• Payment Processing: Executing deposits and withdrawals via your chosen Philippine payment method; reconciling transactions; issuing receipts.
• Gaming Service Delivery: Enabling access to all jilikl game verticals; maintaining your wallet balance; recording gaming history for dispute resolution.
• Fraud and Security: Detecting unauthorized account access; preventing multi-accounting; identifying suspicious transaction patterns; reporting to PAGCOR and AMLC as required by law.
• Responsible Gaming Compliance: Monitoring gaming patterns for indicators of problem gambling; enforcing deposit limits, self-exclusion orders, and session restrictions set by the player or mandated by jilikl.
• Legal and Regulatory Compliance: Fulfilling obligations under the Anti-Money Laundering Act (AMLA), PAGCOR authorization conditions, NPC reporting obligations, and other applicable Philippine law.
• Customer Support: Responding to inquiries, resolving disputes, and maintaining records of support interactions.
• Platform Improvement: Analysing aggregate usage data to improve platform performance, game selection, and user experience.
• Marketing (with consent): Sending promotional offers, bonus notifications, and event announcements to players who have opted in.

jilikl processes your personal data on the following legal grounds under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the gaming services contract you entered into by accepting the jilikl Terms & Conditions — including account management, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR authorization conditions, the AMLA, and NPC regulations — including KYC verification, AML transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and aggregate analytics, where these interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and optional platform personalisation features, where you have given explicit opt-in consent. You may withdraw this consent at any time through your jilikl account settings.

jilikl does not sell, rent, or trade your personal data to third parties for their commercial benefit. jilikl shares personal data only in the following circumstances:

1. Data Processors: Third-party service providers who process personal data on jilikl's behalf under strict contractual data processing agreements. These include KYC verification providers, payment processors (GCash, PayMaya, banking partners), cloud hosting providers, fraud detection services, and gaming platform technology providers. All processors are contractually required to process your data only as instructed by jilikl and to maintain appropriate security standards.
2. Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where jilikl is legally obligated to disclose information — including mandatory suspicious transaction reports under the AMLA.
3. Law Enforcement: Philippine law enforcement agencies pursuant to a valid court order, subpoena, or legal process issued under Philippine law. jilikl will notify affected players of such requests where legally permitted to do so.
4. Dispute Resolution: Where required to resolve a formal player dispute, including through PAGCOR's dispute resolution mechanism, limited relevant data may be disclosed.
5. Business Transfer: In the event of a merger, acquisition, or transfer of jilikl's operations, player personal data may be transferred to the successor entity, subject to the same privacy protections as this Policy. Players will be notified in advance of any such transfer.

Some of jilikl's third-party service providers — including cloud hosting infrastructure, game platform providers, and certain fraud detection systems — may be located outside of the Philippines. Where personal data is transferred to recipients in other countries, jilikl takes the following measures to ensure adequate protection:

• Contractual safeguards: jilikl uses data processing agreements containing standard contractual clauses that impose obligations equivalent to the Philippine DPA on overseas processors.
• Adequacy assessment: jilikl conducts risk assessments of overseas processors' data protection frameworks prior to engagement.
• Minimisation: Cross-border transfers are limited to the minimum data necessary for the specific processing purpose.

jilikl prioritises the use of Philippines-based or ASEAN-region infrastructure where operationally practicable, in order to minimise cross-border data flows and regulatory complexity.

jilikl retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to the following statutory minimum retention requirements under Philippine law:

• KYC and Identity Documents: Five (5) years from account closure, as required by PAGCOR regulations and AMLA obligations.
• Financial Transaction Records: Five (5) years from the date of each transaction, as required by AMLA and BSP recordkeeping rules.
• Gaming Activity Records: Three (3) years from the date of each session or wager, or longer where required by PAGCOR directive.
• Support Communications: Three (3) years from the date of resolution of the relevant inquiry or dispute.
• Active Account Data: Retained for the duration of your active jilikl account and for five (5) years following account closure.
• Marketing Data: Retained until you withdraw consent, after which it is deleted within thirty (30) days.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymised. Anonymised aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and business analysis purposes.

jilikl implements a multi-layered information security programme to protect your personal data from unauthorized access, disclosure, alteration, or destruction. The key technical and organizational measures in place include:

• Encryption in Transit: All data transmitted between your device and jilikl's servers is encrypted using TLS 1.2 or higher. The jilikl platform enforces HTTPS throughout.
• Encryption at Rest: Sensitive personal data stored in jilikl's systems — including KYC documents and financial data — is encrypted at rest using AES-256 or equivalent standards.
• Access Controls: Access to personal data is restricted on a need-to-know basis. jilikl staff access is role-based, logged, and subject to multi-factor authentication requirements.
• Infrastructure Security: jilikl's hosting environment undergoes regular security assessments including vulnerability scanning and penetration testing.
• Incident Response: jilikl maintains a documented data breach response plan. In the event of a personal data breach, jilikl will notify affected players and the NPC within seventy-two (72) hours of becoming aware of the breach, where required by the DPA.
• Staff Training: All jilikl personnel with access to personal data receive regular data privacy and information security training.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jilikl. To exercise any of these rights, contact jilikl's Data Protection Officer as described in Section 16.

jilikl will respond to data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or we receive a high volume of requests, we may extend this period by a further thirty (30) days, with notice provided to you. jilikl does not charge a fee for data subject rights requests unless they are manifestly unfounded or excessive.

jilikl uses cookies and similar session tracking technologies on the jilikl.club platform. Cookies are small text files stored on your device that help jilikl deliver and improve its services. jilikl uses the following categories of cookies:

• Essential Cookies: Strictly necessary for the platform to function — including session authentication, wallet display, and security token management. These cannot be disabled without impairing core platform functionality.
• Analytics Cookies: Aggregate, anonymised data about how players use the jilikl platform — page views, game launch counts, session duration. Used to improve platform performance and identify technical issues. No individual player behaviour is profiled.
• Preference Cookies: Store your platform settings such as language preferences and display options to improve your experience on return visits.

jilikl does not use third-party advertising cookies or behavioural tracking cookies for the purpose of serving targeted advertising outside of the jilikl platform. You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to play on jilikl, though some preference features may not be retained between sessions.

jilikl may send you promotional communications — including bonus offers, tournament announcements, and platform updates — via SMS to your registered Philippine mobile number, email to your registered address, or in-platform notifications. Marketing communications are sent only to players who have explicitly opted in.

You may opt out of marketing communications at any time through the following channels:

• Updating your communication preferences in your jilikl account settings under "Notifications."
• Contacting jilikl support via live chat or email at [email protected] with your opt-out request.
• Using the unsubscribe mechanism included in any marketing email received from jilikl.

Opting out of marketing communications will not affect the delivery of transactional messages that are necessary for the operation of your jilikl account, such as deposit confirmations, withdrawal notifications, OTP messages for account security, and important account status communications.

jilikl's platform is strictly for individuals aged 21 years and above. jilikl does not knowingly collect personal data from individuals under the age of 21. All jilikl accounts are subject to mandatory KYC age verification prior to the processing of any withdrawal.

If jilikl discovers or is made aware that an account has been registered by or is being operated by an individual under 21 years of age, jilikl will:

1. Immediately and permanently close the account.
2. Forfeit all balances in the account, including any winnings generated through the account.
3. Delete the personal data of the minor as promptly as permitted by jilikl's legal obligations.
4. Report the incident to PAGCOR and, where applicable, to the relevant Philippine child protection authority.

jilikl may update this Privacy Policy from time to time to reflect changes in our data practices, platform services, or applicable Philippine law. The "Effective Date" at the top of this Policy indicates the date of the most recent revision.

Where a material change is made to this Policy — particularly changes that affect how we use your data or your rights in relation to that data — jilikl will provide advance notice to registered players via email or prominent in-platform notification, with a minimum of seven (7) calendar days notice before the change takes effect, except where a shorter period is required by law or PAGCOR directive.

Your continued use of the jilikl platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept a material change to this Policy, you should close your account and cease using the jilikl platform before the effective date of the change.

jilikl has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. The DPO is responsible for overseeing jilikl's compliance with the DPA, handling data subject rights requests, and acting as the point of contact with the National Privacy Commission.

To exercise your data subject rights, lodge a privacy concern, or contact jilikl's DPO, please use the following channels:

• Live Chat: Available 24/7 via the jilikl platform. For privacy matters, state "Data Privacy Request" at the start of your message to be routed to the appropriate team.
• Email: [email protected] — for formal data subject rights requests, use the subject line "DPA Rights Request – [your registered mobile/email]." Target response time is five (5) business days for initial acknowledgement.

jilikl aims to resolve all data privacy concerns at the first point of contact where possible. Where a concern cannot be resolved internally to your satisfaction, you have the right to escalate to the National Privacy Commission (NPC) of the Philippines. Information on NPC complaint procedures is available on the NPC's official government website.