jilissa Privacy Policy

jilissa ("we," "us," "our," or "the Platform") is committed to protecting the personal information of every player, visitor, and user who interacts with our online casino and sports betting platform at jilissa.net. This Privacy Policy has been drafted in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines (the "DPA"), and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

This Privacy Policy governs the collection, use, storage, sharing, and disposal of your personal data in connection with your use of the jilissa Platform. It applies to all services offered by jilissa, including but not limited to online casino games, slot machines, bingo rooms, fishing games, sports betting, live dealer tables, account management, customer support, and promotional activities.

By registering for a jilissa account, accessing any part of the Platform, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Privacy Policy, please discontinue your use of the Platform immediately.

jilissa collects the following categories of personal data. All collection is proportionate to the legitimate purposes for which the data is needed, and we do not collect more than is necessary for those purposes.

We do not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly required for identity verification and regulatory compliance. Where sensitive information is collected — such as a government-issued ID — it is handled with the heightened protections mandated by the DPA.

jilissa collects personal data through the following means:

• Direct Submission: When you register for an account, complete KYC verification, make deposits or withdrawal requests, contact our support team, or participate in promotions, you provide personal data directly to us.
• Automated Collection: When you access the Platform, our servers automatically log technical data including your IP address, device identifiers, browser type, and session activity. This data is collected through server logs, cookies, and similar technologies.
• Third-Party Verification Services: For identity and age verification purposes, jilissa may receive confirmation data from licensed KYC service providers. These providers are contractually bound to process your data only as directed by jilissa and in compliance with the DPA.
• Payment Processors: When you transact via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, or Mastercard, we receive transaction confirmation data from the relevant payment processor necessary to credit or debit your account.
• Responsible Gaming Registers: Where you have registered for self-exclusion with PAGCOR or a similar authority, jilissa may receive notification of this through legitimate regulatory channels to enforce exclusion requirements.

jilissa processes your personal data for the following specific, legitimate purposes:

• Account Registration and Management: To create, verify, maintain, and administer your jilissa account, including enforcing the 21+ age restriction required under PAGCOR regulations.
• Service Delivery: To provide you with access to casino games, sports betting markets, bingo rooms, fishing titles, and all other features of the jilissa Platform.
• Payment Processing: To process deposits, withdrawals, and refunds in Philippine Peso (₱) through your chosen payment method, and to maintain accurate financial records.
• Identity and Age Verification (KYC): To verify that you are who you claim to be, that you meet the minimum age requirement of 21 years, and that you are not on any self-exclusion register, in compliance with PAGCOR guidelines and AML legislation.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, money laundering, and other illegal or prohibited activities on the Platform.
• Legal and Regulatory Compliance: To comply with applicable Philippine laws, PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations, and lawful orders from competent courts or government authorities.
• Customer Support: To respond to your inquiries, resolve complaints, and provide technical assistance through our 24/7 support team.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session limits, and self-exclusion, where applicable.
• Marketing and Promotions: To send you information about jilissa promotions, bonuses, and new features, where you have provided consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyze aggregate usage data to improve the functionality, performance, and user experience of the jilissa Platform.

jilissa will not use your personal data for any purpose that is incompatible with those listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new processing.

Under the Data Privacy Act of 2012, jilissa processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide the gaming and betting services you have registered to use, and to process your deposits and withdrawals.
• Legal Obligation: Processing is required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act itself, including KYC and reporting obligations.
• Legitimate Interests: Processing is necessary for jilissa's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the Platform — where these interests are not overridden by your privacy rights.
• Consent: For specific processing activities — such as marketing communications and certain non-essential cookies — jilissa relies on your freely given, specific, informed, and unambiguous consent. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

jilissa does not sell your personal data. We may share your personal information with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, and Mastercard network operators, to the extent necessary to process your financial transactions.
• Identity Verification Providers: Licensed KYC and AML screening service providers engaged to verify your identity, age, and compliance status as required by PAGCOR and Philippine AML regulations.
• Game and Software Providers: Third-party game studios and live dealer platform providers whose games are hosted on jilissa. These providers may receive anonymized or pseudonymized gameplay data for operational purposes.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies, where disclosure is required by law, court order, or regulatory direction.
• Professional Advisers: Lawyers, auditors, and accountants engaged by jilissa, subject to professional confidentiality obligations.
• IT and Cloud Service Providers: Infrastructure, hosting, and cybersecurity service providers engaged to operate and secure the Platform, subject to binding data processing agreements.

All third parties with whom jilissa shares personal data are required to handle it in accordance with applicable data protection law and are prohibited from using it for any purpose other than that for which it was shared. jilissa remains accountable for the personal data shared with processors acting on its behalf.

jilissa retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account relationship with jilissa, plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction and Financial Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act and PAGCOR regulations.
• Customer Support Communications: Retained for three (3) years from the date of the communication, or longer if the communication is relevant to a pending dispute or legal proceeding.
• Technical and Usage Data: Retained for up to twelve (12) months from collection, after which it is aggregated or deleted, unless longer retention is required for fraud investigation purposes.
• Marketing Consent Records: Retained for as long as you remain a registered user, plus two (2) years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or permanently anonymized so that it can no longer be associated with you. Where deletion is not immediately technically feasible, the data will be isolated and protected from further processing until deletion is completed.

jilissa uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function. They enable core features such as session management, account authentication, and security protections. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences — such as language settings and game display options — to provide a more personalized experience during your session.
• Analytics Cookies: These cookies collect aggregate, anonymized data about how users navigate the Platform. This information helps jilissa understand usage patterns and improve the Platform's performance and content. No personally identifiable information is extracted from analytics data.

jilissa does not use third-party advertising or behavioral profiling cookies. You can manage and disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use certain features of the Platform.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jilissa. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with a clear description of your request. jilissa will respond within fifteen (15) business days.

• Right to be Informed: You have the right to be informed about what personal data jilissa collects about you, and how it is used — which this Privacy Policy provides.
• Right of Access: You have the right to request a copy of the personal data jilissa holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data jilissa holds about you. For straightforward corrections such as contact details, you may also update information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, where you have withdrawn consent, or where processing is unlawful — subject to jilissa's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data where jilissa relies on legitimate interests as its legal basis, and to object to processing for direct marketing purposes at any time.
• Right to Data Portability: You have the right to receive a structured, commonly used, machine-readable copy of personal data you have provided to jilissa, and to have it transmitted to another controller where technically feasible.
• Right to Lodge a Complaint: If you believe jilissa has handled your personal data in breach of the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

jilissa implements a comprehensive set of technical, organizational, and physical security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• End-to-end encryption of all data transmitted between your device and jilissa servers using TLS 1.2 or higher.
• Encryption of sensitive data at rest using AES-256 encryption.
• Role-based access controls ensuring that only authorized jilissa personnel can access personal data, strictly limited to what is required for their job function.
• Continuous automated monitoring of platform systems for anomalous activity, unauthorized access attempts, and potential data breaches.
• Regular independent security audits and penetration testing conducted by qualified cybersecurity professionals.
• Formal data breach response procedures, including NPC notification within 72 hours where required.
• Staff training on data protection responsibilities and information security best practices.

While jilissa takes all reasonable precautions to protect your personal data, no security system is completely impenetrable. You are responsible for maintaining the security of your account credentials. If you suspect your account has been compromised, contact jilissa support immediately.

jilissa is an online gaming platform intended exclusively for adults aged 21 years and over in accordance with PAGCOR's minimum age requirements for casino-style gambling in the Philippines. jilissa does not knowingly collect personal data from individuals under 21 years of age.

If jilissa discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the affected account will be suspended immediately, all associated personal data will be deleted, and any funds deposited will be handled in accordance with applicable PAGCOR and legal requirements.

Account holders are responsible for ensuring that no person under the age of 21 gains access to their jilissa account. If you are a parent or guardian and believe a minor has registered on the Platform, please contact us immediately at [email protected].

jilissa's primary operations and data storage are based in the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, KYC verification services, and game software partners — may process or store personal data outside of the Philippines.

Where personal data is transferred outside the Philippines, jilissa ensures that such transfers are carried out in compliance with the Data Privacy Act of 2012 and the NPC's cross-border data transfer rules. Specifically, jilissa will only transfer personal data to countries or organizations that provide an adequate level of data protection, or where appropriate contractual safeguards — such as standard contractual clauses approved by the NPC — are in place.

By using the jilissa Platform, you acknowledge that your personal data may be transferred to, stored in, and processed in jurisdictions outside the Philippines in accordance with this Privacy Policy. In all such cases, jilissa remains accountable for ensuring your data is protected to the standards required by the DPA.

jilissa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory guidance from the NPC or PAGCOR, or the features and services offered on the Platform.

When we make material changes to this Privacy Policy, we will notify you by posting the updated Policy on this page with a revised "Last Updated" date, and — where the changes are significant — by sending a notification to the email address associated with your jilissa account. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your data.

Your continued use of the jilissa Platform following the posting of a revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with the revised Policy, you should discontinue use of the Platform and may request account closure by contacting our support team.

jilissa has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, you may contact the jilissa DPO through the following channel:

• Email: [email protected] (subject line: "Privacy / Data Subject Request")
• Platform: jilissa.net
• Response Time: We aim to acknowledge all privacy requests within three (3) business days and to resolve them within fifteen (15) business days. Complex requests may take up to thirty (30) business days, in which case we will notify you of the extended timeline.

If you are not satisfied with jilissa's response to your privacy concern, or if you believe your rights under the Data Privacy Act of 2012 have been violated, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. Information about the NPC's complaint process is available through their official government channels.