jil99 Privacy Policy

1 Introduction

jil99 is committed to protecting the privacy and personal data of all individuals who interact with our Platform. We recognise that your personal information is valuable, and we handle it with the care and responsibility it deserves — not merely because Philippine law requires it, but because earning and maintaining your trust is fundamental to operating a legitimate, regulated gaming platform.

This Policy has been prepared in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations as enforced by the National Privacy Commission (NPC). It describes in detail how jil99 collects, uses, stores, protects, and shares your personal data, and explains the rights available to you as a Data Subject under Philippine law.

jil99 also operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR), which imposes its own data collection, record-keeping, and reporting obligations — particularly in relation to KYC (Know Your Customer) verification and Anti-Money Laundering (AML) compliance under Republic Act No. 9160, as amended. Some data processing described in this Policy is required by these regulatory obligations and cannot be opted out of without closing your jil99 Account.

2 Data Controller Information

For the purposes of the Data Privacy Act of 2012, jil99 is the Personal Information Controller (PIC) in respect of personal data collected through the jil99 Platform. As PIC, jil99 determines the purposes and means of processing your personal data.

jil99 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA, liaising with the National Privacy Commission, and serving as the point of contact for Data Subject rights requests. Contact details for jil99's DPO are provided in Section 15 of this Policy.

3 Categories of Personal Data We Collect

jil99 collects personal data that falls within the following categories, depending on how you interact with the Platform:

3.1 Identity and Registration Data

• Full legal name as it appears on a government-issued Philippine ID;
• Date of birth (for 21+ age verification);
• Gender (where provided during registration);
• Philippine mobile number used as your Account identifier;
• Username and encrypted account password.

3.2 KYC and Verification Data

• Copies of government-issued Philippine identification documents (PhilSys National ID, UMID, Passport, LTO Driver's License, SSS Card, PRC ID, Voter's ID);
• Selfie photographs submitted as part of the identity verification process;
• Proof of address documentation where requested by jil99's compliance team;
• Source of funds declarations where required by PAGCOR or AMLC regulations.

3.3 Financial and Transaction Data

• GCash account numbers, Maya account details, and bank account information associated with deposits and withdrawals;
• Complete transaction history including all deposit and withdrawal records, amounts, timestamps, and payment methods;
• Wallet balance history and bonus transaction records.

3.4 Gameplay and Activity Data

• Complete game session records including games played, bet amounts, results, and session durations;
• Login timestamps, session metadata, and Account activity logs;
• Responsible gaming tool usage data (deposit limits set, session reminders configured, self-exclusion activations).

3.5 Technical and Device Data

• IP address and approximate geolocation at time of login and gameplay;
• Device type, operating system, browser type and version;
• Cookies and similar tracking technologies (see Section 8);
• Platform interaction logs used for security monitoring and fraud detection.

3.6 Communications Data

• Content of communications with jil99 customer support via live chat or email;
• Complaint and dispute records;
• Preferences for marketing communications where consent has been given.

4 How We Collect Your Personal Data

jil99 collects personal data through the following means:

• Direct collection at registration: When you create a jil99 Account, you provide identity and contact information directly through the registration interface;
• KYC submission: When you complete identity verification, you upload identification documents and selfie photographs through the secure KYC portal;
• Financial transactions: Deposit and withdrawal processes collect payment account information necessary to process your transactions through GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and other supported payment methods;
• Platform activity: Your gameplay, login activity, and Platform interactions are automatically recorded by jil99's systems as a function of normal platform operation;
• Cookies and tracking technologies: Technical data is collected automatically through cookies and similar technologies when you access jil99.vip (see Section 8);
• Communications: When you contact jil99 support via live chat or email, the content of those communications is retained;
• Third-party service providers: Payment processors and KYC verification service providers may supply jil99 with additional data necessary to complete identity verification or fraud screening, consistent with their own privacy obligations.

5 Legal Bases for Processing

jil99 processes personal data on the following legal grounds as defined under RA 10173 and PAGCOR regulatory requirements:

6 How jil99 Uses Your Personal Data

jil99 uses the personal data it collects for the following purposes:

• To create, manage, and maintain your jil99 Account, including authentication and security functions;
• To verify your identity and age in accordance with PAGCOR KYC requirements and the Philippine DPA;
• To process deposits, withdrawals, and all financial transactions through your jil99 Wallet;
• To conduct AML screening and transaction monitoring as required by RA 9160 and PAGCOR compliance circulars;
• To provide access to all Platform features, including slots, live casino, sports betting, and bingo;
• To administer responsible gaming tools, including deposit limits, session reminders, loss limits, and self-exclusion;
• To investigate and resolve player disputes, complaints, and support requests;
• To detect, prevent, and respond to fraud, cheating, account abuse, and other security threats;
• To send transactional communications necessary for Account operation, such as OTP verification messages and withdrawal confirmation notifications;
• To send marketing communications regarding jil99 promotions and offers, where you have provided consent;
• To comply with lawful requests from PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine regulatory or law enforcement authorities;
• To improve the jil99 Platform through aggregated, anonymised analytics.

7 Sharing and Disclosure of Personal Data

7.1 Authorised Third-Party Service Providers

jil99 shares personal data with carefully selected third-party service providers that assist in operating the Platform, strictly for the purposes described in this Policy. These providers are bound by data processing agreements requiring them to maintain confidentiality and process data only on jil99's documented instructions. Categories of service providers with whom data may be shared include:

• KYC and identity verification technology providers;
• Payment processors and electronic money issuers (including GCash/GXI, Maya/Paymaya, and relevant Philippine banking partners);
• Game software providers whose games are accessible through the jil99 Platform;
• Cloud infrastructure and hosting service providers operating within secure, compliant environments;
• Customer support platform providers used to manage live chat and email communications;
• Fraud detection and cybersecurity service providers.

7.2 Regulatory and Legal Disclosure

jil99 is legally required to share certain personal data and transaction records with the following Philippine regulatory bodies and, in appropriate circumstances, law enforcement authorities:

• PAGCOR — for regulatory compliance, audit, and licensing purposes;
• Anti-Money Laundering Council (AMLC) — for suspicious transaction reporting and covered transaction reporting under RA 9160;
• National Privacy Commission (NPC) — in the event of a personal data breach or in response to NPC investigation or inquiry;
• Philippine law enforcement agencies — in response to valid judicial orders, subpoenas, or lawful legal process.

7.3 No Sale of Personal Data

jil99 does not sell, rent, or trade your personal data to third-party advertisers, data brokers, or marketing organisations. This is an absolute policy commitment, not subject to commercial exceptions.

8 Cookies and Tracking Technologies

8.1 What Are Cookies

Cookies are small text files stored on your device when you visit jil99.vip. jil99 uses cookies and similar tracking technologies (such as web beacons and local storage) to enable Platform functionality, maintain login sessions, support security systems, and where consent has been obtained, to understand how users interact with the Platform.

8.2 Types of Cookies Used

• Strictly Necessary Cookies: Required for core Platform functionality including authentication, session management, and security. These cannot be disabled without breaking essential features;
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations;
• Analytics Cookies: Collect aggregated, anonymised data about how users navigate the Platform to help jil99 improve features and performance. Deployed only with your consent;
• Security Cookies: Used by jil99's fraud detection and bot prevention systems to protect account security and Platform integrity.

8.3 Managing Cookies

You may configure your browser to refuse cookies or to alert you when cookies are being set. Note that disabling strictly necessary cookies will prevent certain Platform features from functioning correctly, including Account login. Analytics and functional cookies can be declined via jil99's cookie consent banner, which is presented on your first visit to jil99.vip.

9 Data Security

jil99 implements a layered data security framework designed to protect personal data against unauthorised access, accidental loss, disclosure, or destruction. Security measures include:

• Encryption in transit: All data transmitted between your device and jil99's servers is protected by TLS 1.2+ (256-bit SSL encryption);
• Encryption at rest: Sensitive personal data including KYC documents, government ID images, and financial data is encrypted in storage;
• Access controls: Access to personal data within jil99 is restricted on a need-to-know basis, with role-based access controls and multi-factor authentication for staff accessing sensitive systems;
• OTP authentication: Account access incorporates one-time password (OTP) verification to prevent unauthorised login;
• Regular security auditing: jil99 conducts regular internal and, where required by PAGCOR, external security audits and vulnerability assessments;
• Breach response procedures: jil99 maintains documented data breach response procedures aligned with NPC reporting requirements under RA 10173. In the event of a breach affecting your personal data, jil99 will notify affected Data Subjects and the NPC in accordance with its legal obligations.

10 Data Retention

jil99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal, regulatory, and contractual obligations. The following retention periods apply:

• Active Account data: Retained for the duration of your active jil99 Account relationship plus a minimum post-closure retention period as required by law;
• KYC and identity documents: Retained for a minimum of five (5) years from Account closure or last transaction, as mandated by PAGCOR and the Anti-Money Laundering Act;
• Financial and transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AML record-keeping requirements;
• Gameplay and session logs: Retained for a minimum of twelve (12) months for dispute resolution purposes, and longer where required by PAGCOR audit obligations;
• Communications records: Support communications retained for twenty-four (24) months, or longer where relating to an unresolved complaint or legal matter;
• Marketing consent records: Retained for as long as consent is active and for a reasonable period thereafter as evidence of the consent given.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with jil99's data disposal procedures, except where further retention is required by a specific legal obligation.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by jil99. jil99 will respond to Data Subject rights requests within thirty (30) days of receipt, subject to identity verification.

12 Minors and Underage Data Protection

The jil99 Platform is intended exclusively for adults aged 21 years and above, in compliance with PAGCOR age requirements and Philippine gaming law. jil99 does not knowingly collect personal data from individuals under the age of 21.

Where jil99 discovers or has reasonable grounds to suspect that personal data has been collected from a person under 21 years of age, jil99 will immediately suspend the associated Account, delete the personal data collected to the extent consistent with applicable legal obligations, and retain only such records as are required by PAGCOR or law enforcement for the purposes of documenting the underage access event.

If you are a parent or guardian and believe that your child under the age of 21 has registered an Account on jil99, please contact jil99's Data Protection Officer immediately at [email protected] so that appropriate action can be taken without delay.

13 Cross-Border Data Transfers

Some of jil99's third-party service providers — including cloud infrastructure providers, game software providers, and certain cybersecurity vendors — may process personal data outside the Philippines. Where such cross-border transfers occur, jil99 ensures that:

• The recipient country offers an adequate level of data protection as assessed by jil99 in consultation with applicable NPC guidance;
• Appropriate contractual safeguards, such as data processing agreements incorporating standard contractual clauses, are in place between jil99 and the third-party processor;
• The transfer is limited to data that is strictly necessary for the service being provided by the third-party processor.

jil99 prioritises Philippine-based data processing and storage where commercially feasible and does not transfer data internationally beyond what is necessary to provide the services described in this Policy.

14 Changes to This Privacy Policy

jil99 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, changes in Philippine law or NPC guidance, changes to PAGCOR regulatory requirements, or other operational changes. The date of the most recent update is displayed at the top of this Policy.

Where changes are material — meaning they meaningfully affect your rights as a Data Subject or how your data is used — jil99 will notify registered Account holders via the mobile number or contact information associated with their Account prior to the changes taking effect. For non-material updates (such as clarifications and formatting improvements), publication of the updated Policy on this page constitutes sufficient notice.

Your continued use of the jil99 Platform following the effective date of any Policy update constitutes your acknowledgment of the updated Policy. If you do not agree to the updated Policy, you should cease using the Platform and may request Account closure in accordance with jil99's Terms and Conditions.

15 Contact: Data Protection Officer

For all matters relating to this Privacy Policy, your personal data rights, or data protection concerns, please contact jil99's designated Data Protection Officer:

• Email: [email protected] (Subject: "Data Privacy Request" or "DPO Inquiry")
• Response time: jil99 aims to acknowledge all DPO inquiries within five (5) business days and to provide a substantive response within thirty (30) days.
• NPC Complaint: If you are not satisfied with jil99's response to your data privacy concern, you have the right to lodge a complaint with the Philippine National Privacy Commission. Information on filing a complaint with the NPC is available on the NPC's official website.

For questions about your jil99 Account that are not related to data privacy, please use the FAQ page or contact jil99 customer support via live chat through your Account dashboard.