jilibs Privacy
Policy

01 Who We Are

jilibs ("we," "us," or "our") operates the online gaming platform accessible at jilibs.net, offering casino games, sports betting, live dealer experiences, sabong, bingo, and related entertainment services to players in the Philippines. For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), jilibs is the Personal Information Controller (PIC) responsible for the personal data you provide or that we collect in connection with your use of the jilibs platform.

Our designated Data Protection Officer (DPO) can be contacted at [email protected] for all privacy-related inquiries, data subject access requests, and complaints. We take our obligations under RA 10173 seriously and have implemented appropriate organizational and technical measures to protect the personal data of every jilibs player.

02 Data We Collect

jilibs collects personal data through several touchpoints. The categories of data we collect are described below:

2.1 Data You Provide Directly

• Registration data: Full legal name, date of birth, residential address, email address, and mobile number as required to create your jilibs Account.
• KYC verification documents: Government-issued Philippine photo ID (Passport, SSS/UMID, PhilSys National ID, Driver's License, PRC ID, Voter's ID, or Postal ID), proof of address, and proof of payment method ownership.
• Payment data: GCash or Maya account details (registered name and mobile number), bank account information for BPI, BDO, or Metrobank transfers, and transaction reference numbers. We do not store full card numbers or banking passwords.
• Support communications: Messages, complaints, and feedback you submit via live chat or email, including any attachments you choose to share.
• Responsible gaming preferences: Deposit limits, session time settings, self-exclusion elections, and cool-off period requests made within Account Settings.

2.2 Data Collected Automatically

• Device & technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, game sessions initiated, bet amounts, session duration, login timestamps, and navigation paths within the jilibs platform.
• Geolocation data: Approximate geographic location derived from your IP address, used solely to verify access from permitted jurisdictions and to comply with regulatory requirements.
• Cookies and similar technologies: Session cookies, persistent cookies, and analytics identifiers as described in Section 5.

2.3 Data From Third Parties

• Payment processors: Transaction status confirmations and fraud signals from GCash, Maya, GrabPay, and banking partners.
• Identity verification providers: KYC verification outcomes from third-party identity verification services we engage to fulfill our regulatory obligations.
• Regulatory databases: Self-exclusion registries and watchlists maintained by relevant Philippine authorities, checked as part of our responsible gaming and AMLA compliance processes.

03 How We Use Your Data

jilibs uses the personal data we collect strictly for the purposes described below. We do not use your personal data for purposes that are incompatible with these stated purposes without first obtaining your consent or establishing a separate legal basis:

• Account creation and management: To register your jilibs Account, verify your identity, and maintain accurate account records throughout the life of your account.
• KYC and age verification: To verify that you are at least 21 years of age and that you are who you claim to be, in compliance with Philippine regulations governing online gambling. This is a mandatory process — the platform cannot be used for real-money activity without completing it.
• Payment processing: To facilitate deposits and withdrawals via GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, and 7-Eleven CLiQQ, and to reconcile transaction records.
• Game operation: To operate casino games, sports betting, bingo, and all other platform features, including recording bet outcomes, maintaining game logs, and resolving disputes.
• Security and fraud prevention: To detect and prevent unauthorized account access, bonus abuse, collusion, money laundering, and other fraudulent or prohibited activities.
• Regulatory compliance: To meet our obligations under the Philippine Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and applicable PAGCOR regulatory requirements.
• Customer support: To respond to your inquiries, process complaints, and resolve disputes in a timely and accurate manner.
• Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce player-elected limits, and action self-exclusion requests in accordance with responsible gaming best practices.
• Platform improvement: To analyze aggregated usage patterns and improve the performance, security, and usability of the jilibs platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent to receive such communications and only through channels you have authorized.

04 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations (IRR), jilibs processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contractual obligations to you under the jilibs Terms and Conditions — including account management, payment processing, and game operation — is carried out on the basis of contractual necessity.
• Legal obligation: Processing required to comply with Philippine law — including KYC, age verification, AMLA transaction monitoring, and regulatory reporting — is carried out on the basis of legal obligation.
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and analytics is carried out on the basis of our legitimate interests, where those interests are not overridden by your fundamental rights and freedoms.
• Consent: Processing for marketing communications and non-essential analytics cookies is carried out solely on the basis of your freely given, informed, and specific consent. You may withdraw consent at any time without detriment.

05 Cookies & Tracking Technologies

jilibs uses cookies and similar tracking technologies to operate the platform, maintain your session, and improve your experience. The cookies we use fall into the following categories:

• Strictly necessary cookies: These cookies are essential for the platform to function. They maintain your login session, remember your account preferences, and enable secure payment flows. These cookies cannot be disabled without significantly impairing your ability to use jilibs.
• Analytics cookies: These cookies collect aggregated, anonymized information about how players navigate the jilibs platform. We use this data solely to improve platform performance and user experience. Analytics cookies are only set with your consent.
• Security cookies: These cookies help us detect and prevent fraud, bot activity, and unauthorized access attempts. They are set on the basis of our legitimate interests in platform security.
• Preference cookies: These cookies remember your language, display, and notification preferences so you do not have to reconfigure them on each visit.

You can manage cookie preferences via your browser settings at any time. Note that disabling strictly necessary cookies will prevent you from logging in or placing bets on the jilibs platform. jilibs does not use advertising or third-party tracking cookies for cross-site behavioral advertising.

06 Data Sharing & Disclosure

jilibs does not sell, rent, or trade your personal data to any third party. We share your personal data only in the following circumstances, and only to the minimum extent necessary for the stated purpose:

• Payment processors: We share the transaction data necessary to process your GCash, Maya, GrabPay, bank transfer, or convenience store payment with the relevant payment service provider. These providers act as data processors under binding agreements that prohibit them from using your data for any other purpose.
• KYC and identity verification providers: We share identity document data with third-party KYC verification providers engaged to fulfill our age and identity verification obligations. These providers are contractually restricted to using your data only for verification purposes.
• Game providers: Game providers whose titles are available in the jilibs lobby (including JILI, Pragmatic Play, PG Soft, and others) may receive your player ID and session data as necessary to operate their games and resolve disputes. These providers do not receive your full personal profile.
• Regulatory authorities: We may disclose your personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities where required by law, court order, or regulatory mandate.
• Law enforcement: We may disclose your personal data to law enforcement agencies where required to comply with a lawful request, to prevent or investigate fraud or criminal activity, or to protect the rights, property, or safety of jilibs, our players, or the public.
• Corporate transactions: In the event of a merger, acquisition, or sale of all or substantially all of the jilibs business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

07 Data Retention

jilibs retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active account data: Retained for the duration of your jilibs Account and for a period of 5 years following permanent account closure, in compliance with Philippine AMLA record-keeping requirements.
• KYC documents: Retained for a minimum of 5 years from the date of submission or from the date the account-holder relationship ends, whichever is later, as required under RA 9160 (AMLA) as amended.
• Transaction records: Retained for 5 years from the date of each transaction, as required under AMLA implementing regulations.
• Game logs and bet history: Retained for 3 years from the date of each game session for dispute resolution purposes, and thereafter in anonymized, aggregated form for analytics.
• Support communications: Retained for 2 years from the date of the communication, or for the duration of any related ongoing dispute or regulatory investigation, whichever is longer.
• Marketing consent records: Retained for the period of the marketing relationship plus 1 year following withdrawal of consent, as evidence of the consent previously given.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Where data cannot be immediately deleted due to technical constraints, it is isolated from further processing until deletion can be effected.

08 Data Security

jilibs employs a multi-layered security architecture to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Encryption in transit: All data transmitted between your device and the jilibs platform is encrypted using TLS 1.2 or higher. We enforce HTTPS across all platform endpoints.
• Encryption at rest: Sensitive personal data — including KYC documents, financial data, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within jilibs is restricted to personnel who have a legitimate need to process it for their job function. All access is logged and subject to regular review.
• Two-factor authentication (2FA): jilibs supports and strongly encourages 2FA via SMS OTP for all player accounts. Internal system access for jilibs personnel requires mandatory multi-factor authentication.
• Penetration testing: The jilibs platform is subject to regular third-party security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: jilibs maintains a documented personal data breach response plan. In the event of a breach that is likely to pose a real risk of serious harm to affected data subjects, we will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay.

While jilibs takes all reasonable measures to protect your personal data, no security system is completely impenetrable. You are also responsible for keeping your own account credentials confidential and for notifying jilibs support immediately if you suspect unauthorized access to your account.

09 Your Rights Under the DPA 2012

As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by jilibs:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and disclosed. This Privacy Policy is the primary vehicle through which jilibs fulfills this obligation.
• Right of access: You have the right to request a copy of the personal data jilibs holds about you, including information about the purposes for which it is processed and the third parties to whom it has been disclosed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data in your jilibs Account. For basic profile information, you may update this directly in Account Settings; for KYC data, please contact support.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to jilibs's retention obligations under AMLA and other applicable law.
• Right to object: You have the right to object to the processing of your personal data on the basis of legitimate interests or for direct marketing purposes. Where you object to direct marketing, we will cease processing your data for that purpose immediately.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another personal information controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe jilibs has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the rights described above, please submit a written request to our Data Protection Officer at [email protected], including your full name, registered Account ID, and a clear description of the right you wish to exercise. jilibs will respond to all valid data subject requests within 15 business days of receipt.

10 Children & Minors

The jilibs platform is strictly intended for adults aged 21 years and above. jilibs does not knowingly collect personal data from individuals under the age of 21. The minimum age requirement for real-money online casino-style gambling in the Philippines is 21 years, as prescribed under applicable Philippine regulations.

During the registration and KYC process, jilibs employs mandatory age verification measures to confirm that all players meet this requirement before any real-money activity is permitted. If jilibs becomes aware — through any means — that a player account has been created by or on behalf of a person under 21 years of age, the following actions will be taken immediately:

• The account will be suspended and all gaming activity will be disabled.
• Any real-money balance associated with the account will be frozen pending investigation.
• No withdrawals of winnings from real-money play will be honored where underage gambling is confirmed.
• The matter will be referred to the appropriate Philippine authorities.

If you believe that a minor has accessed or registered on the jilibs platform, please notify us immediately at [email protected] so that we can take prompt action.

11 International Data Transfers

jilibs's primary data processing operations are directed at the Philippine market, and we endeavor to store and process personal data within systems that maintain compliance with Philippine data protection standards. However, given the global nature of some of our technology infrastructure and third-party service providers — including cloud hosting providers, game studios, and KYC verification services — some personal data may be processed on servers located outside the Philippines.

Where such cross-border transfers occur, jilibs ensures that adequate safeguards are in place, including:

• Contractual clauses in agreements with third-party processors that impose data protection obligations equivalent to those required under RA 10173.
• Transfer only to jurisdictions or service providers that maintain data protection standards recognized as adequate by the National Privacy Commission.
• Regular review of cross-border data transfer arrangements to ensure continued compliance as regulatory standards evolve.

By creating a jilibs Account and using the platform, you acknowledge that your personal data may be processed in jurisdictions outside the Philippines subject to the safeguards described above.

12 Third-Party Services

The jilibs platform integrates with a number of third-party service providers to deliver a complete online gaming experience. While jilibs carefully vets all service providers for data protection compliance, we are not responsible for the independent privacy practices of these providers. The categories of third-party services used by jilibs include:

• Payment gateways: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and the InstaPay network each maintain their own privacy policies governing how they handle transaction data on their end.
• Game software providers: JILI, Pragmatic Play, PG Soft, and other licensed game studios that supply games available in the jilibs lobby process session data in accordance with their own privacy frameworks.
• KYC and identity verification: Third-party identity verification services process identity document images and biometric data as part of the KYC verification flow, subject to their own data protection policies.
• Cloud infrastructure: jilibs uses cloud hosting providers for platform infrastructure. These providers process data under binding data processing agreements and do not access or use your personal data independently.
• Analytics: Where analytics cookies are enabled with your consent, aggregate platform usage data may be processed by analytics service providers to generate insights for platform improvement.

jilibs does not embed social media tracking pixels, advertising network tags, or third-party retargeting scripts on the jilibs platform. We do not participate in cross-site behavioral advertising networks.

13 Changes to This Privacy Policy

jilibs reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Provide at least 7 days' advance notice via email to the address registered on your jilibs Account, where the changes materially affect your rights or how we use your data.
• Display a prominent notice on the jilibs platform upon your next login session following the update.

Your continued use of the jilibs platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated policy, you may request account closure in accordance with the jilibs Terms and Conditions. Previous versions of this Privacy Policy are archived and available upon request by contacting our DPO.

14 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or to your personal data held by jilibs, please contact our Data Protection Officer through the following channels:

• Email (DPO): [email protected] — please include "Privacy Request" or "DPO Inquiry" in the subject line.
• Live Chat: Available 24/7 via the jilibs platform for general privacy inquiries.

Please include your full name, registered Account ID, and a clear description of your query or request to help us respond efficiently. jilibs commits to acknowledging all privacy-related communications within 3 business days and providing a substantive response within 15 business days.