jilipar Privacy Policy

1. Introduction

jilipar ("jilipar," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the jilipar platform ("Platform"). This Privacy Policy ("Policy") describes how jilipar collects, uses, stores, shares, and protects personal data in connection with your use of the Platform.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It also reflects our obligations under applicable PAGCOR regulations and anti-money laundering laws.

By registering an account on jilipar or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, jilipar acts as the Personal Information Controller in respect of the personal data it collects from users of the Platform. This means jilipar determines the purposes and means of processing your personal data.

Where jilipar engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable law.

3. Data We Collect

jilipar collects the following categories of personal data:

jilipar does not intentionally collect sensitive personal information (as defined under the DPA) unless strictly required for regulatory compliance, such as government-issued ID numbers for KYC purposes. Where sensitive personal information is collected, it is handled with the heightened protections required by law.

4. How We Collect Your Data

jilipar collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from security partners; payment data from payment processors such as GCash, Maya, and partner banks.
• Regulatory sources: Data received from PAGCOR or other regulatory bodies in connection with compliance obligations.

5. Legal Basis for Processing

jilipar processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the DPA itself.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. How We Use Your Data

jilipar uses your personal data for the following purposes:

• To create, verify, and manage your jilipar account;
• To process deposits, withdrawals, and other financial transactions;
• To verify your identity and age in compliance with KYC and PAGCOR requirements;
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity;
• To monitor gaming activity for responsible gaming purposes and to enforce self-exclusion requests;
• To provide customer support and resolve disputes;
• To send you transactional communications, including account notifications and security alerts;
• To send you marketing communications about jilipar promotions and offers, where you have consented to receive them;
• To comply with legal and regulatory obligations, including reporting to PAGCOR and the Anti-Money Laundering Council (AMLC);
• To improve the Platform and develop new features based on aggregated, anonymized usage data.

7. Sharing Your Data

jilipar does not sell your personal data. We may share your data with the following categories of recipients only where necessary and lawful:

• Identity verification providers: Third-party KYC and age-verification services that process identity documents on our behalf to confirm your eligibility to use jilipar.
• Payment processors: GCash, Maya, and partner banking institutions (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to facilitate deposits and withdrawals.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government bodies where disclosure is required by law or regulatory directive.
• Law enforcement: Philippine law enforcement agencies where disclosure is required by a valid court order, subpoena, or other lawful process.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud-detection partners who process data on our behalf under binding data processing agreements.
• Professional advisers: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations.

All third parties with whom jilipar shares personal data are required to handle that data in accordance with applicable Philippine privacy law and jilipar's data protection standards. jilipar does not authorize any third party to use your personal data for their own marketing purposes.

8. Cookies & Tracking Technologies

jilipar uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled without affecting core functionality such as login sessions and security features.
• Functional cookies: Remember your preferences and settings to provide a more personalized experience on jilipar.
• Analytics cookies: Collect aggregated, anonymized data about how users interact with the Platform, helping us identify areas for improvement.
• Security cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the jilipar Platform. jilipar does not use cookies to serve third-party advertising.

9. Data Retention

jilipar retains personal data for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLA requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter as evidence of prior consent.

When personal data is no longer required, jilipar will securely delete or anonymize it in accordance with industry best practices. Anonymized data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

10. Data Security

jilipar implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and jilipar's servers;
• AES-256 encryption for sensitive data stored at rest, including financial information and identity documents;
• Multi-factor authentication options for account access;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Intrusion detection and prevention systems monitoring for suspicious activity;
• Staff training on data protection and information security practices.

While jilipar takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that poses a risk to your rights and freedoms, jilipar will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by NPC regulations.

11. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights in relation to your personal data held by jilipar:

• Right to be informed: The right to know what personal data jilipar collects about you and how it is used — which is the purpose of this Policy.
• Right of access: The right to request a copy of the personal data jilipar holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You may update most of your account information directly through your jilipar account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jilipar's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe jilipar has violated your data privacy rights.

To exercise any of these rights, please contact jilipar's Data Protection Officer using the contact details in Section 16. jilipar will respond to all verified requests within fifteen (15) business days, or within the timeframe required by applicable law.

12. Children and Minors

jilipar is strictly an adult gaming platform. Access to jilipar is limited to individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations. jilipar does not knowingly collect personal data from individuals under the age of 21.

If jilipar discovers that personal data has been collected from a person under the age of 21, it will immediately close the associated account, forfeit any balance in accordance with its Terms & Conditions, and securely delete the personal data of the underage individual. If you believe that a minor has registered on jilipar, please contact us immediately using the details in Section 16.

13. International Data Transfers

jilipar's primary operations and data storage are based in the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international KYC services — jilipar ensures that such transfers are conducted in compliance with the Data Privacy Act of 2012 and NPC regulations.

International transfers of personal data are only made where adequate protections are in place, including contractual safeguards such as standard data protection clauses, or where the recipient country has been recognized as providing an adequate level of data protection. jilipar will not transfer your personal data to a jurisdiction that does not provide adequate protections without your explicit consent.

14. Third-Party Links

The jilipar Platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to data collected by jilipar and does not cover the privacy practices of any third-party websites. jilipar is not responsible for the content or privacy practices of external sites. We encourage you to review the privacy policies of any third-party sites you visit.

15. Changes to This Privacy Policy

jilipar reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, jilipar will notify registered users via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of jilipar following the publication of a revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how jilipar protects your data.

16. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact jilipar's Data Protection Officer:

jilipar will acknowledge all privacy-related inquiries within five (5) business days and will endeavor to resolve them within fifteen (15) business days. If you are not satisfied with jilipar's response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.