Jilli Asia Privacy Policy – How We Protect Your Data

1 Introduction

Jilli asia ("we", "us", "our") is committed to protecting the privacy and personal data of every Filipino player who uses our online casino and sports betting platform at jilliasia.click. This Privacy Policy describes how jilli asia collects, uses, stores, and protects your personal information when you visit our website, register an account, make deposits or withdrawals, place bets, or interact with our customer support team.

This policy is designed to comply with the Republic Act 10173 – Data Privacy Act of 2012 (DPA) of the Philippines and its implementing rules and regulations, as enforced by the National Privacy Commission (NPC). It also aligns with applicable international data protection standards relevant to jilli asia's licensing jurisdiction.

Jilli asia acts as the Data Controller for the personal information you provide to us. This means we are responsible for deciding how and why your data is collected and processed. In cases where jilli asia works with certified third-party service providers to deliver parts of the platform — such as payment processors or identity verification services — those providers act as Data Processors under our instruction and under binding data processing agreements.

2 Personal Data We Collect

Jilli asia collects personal data in several categories depending on how you interact with the platform. Here is a breakdown of what we collect and why:

Jilli asia does not collect sensitive personal information beyond what is strictly necessary for identity verification and legal compliance. We do not collect data on your religion, political views, health conditions, or biometric data beyond what a government-issued ID document contains.

3 How We Collect Your Data

Jilli asia collects your personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in a promotion, or update your account profile settings on jilli asia.
• Automatically during platform use: Technical data such as your IP address, device information, and session activity is collected automatically through standard web server logs and analytics tools when you visit the jilli asia website.
• Through cookies and similar technologies: Jilli asia uses cookies and local storage to maintain your login session, remember your preferences, analyse platform usage, and deliver relevant promotional content. See Section 7 for full details on how cookies work on jilli asia.
• From third-party service providers: Identity verification providers and payment processors may share verification results and transaction references with jilli asia as part of the services they provide to us. Jilli asia does not receive your full financial credentials — only the references needed to process and reconcile your transactions.
• From public sources: In certain circumstances related to fraud prevention or AML compliance, jilli asia may verify your information against publicly available sources such as government databases, court records, or sanctions lists maintained by relevant Philippine and international authorities.

4 How We Use Your Personal Data

Jilli asia uses the personal data we collect for the following purposes:

• Operating and securing your account: Your registration and identity data is used to create and maintain your jilli asia account, authenticate your logins, and protect your account from unauthorised access.
• Processing transactions: Financial data is used to process deposits and withdrawals, reconcile transactions, and prevent payment fraud on the jilli asia platform.
• Legal and regulatory compliance: Jilli asia is legally required to maintain records of player identity and gaming activity for anti-money laundering (AML) purposes under the Philippine AMLA and our operating licence obligations. Your data enables us to meet these requirements.
• Responsible gaming: Gaming activity and account data is used to monitor for signs of problem gambling, apply responsible gaming tools you have set, and — where required by regulation — report unusual patterns to relevant authorities.
• Customer support: Communication history and account data is used by our support team to resolve your queries, investigate complaints, and provide assistance efficiently.
• Platform improvement: Anonymised and aggregated usage data helps jilli asia understand how Filipino players use the platform, identify technical issues, and improve game performance and user experience.
• Marketing communications: Where you have given your consent or where we have a legitimate interest, jilli asia may use your contact details to send you information about new games, promotions, and platform updates. You can opt out of marketing communications at any time via your account settings or by emailing support@jilliasia.click.
• Fraud and security: Technical data including IP addresses, device fingerprints, and session behaviour is used to detect and prevent fraud, account takeovers, and prohibited conduct as defined in jilli asia's Terms and Conditions.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, jilli asia must have a lawful basis for every type of personal data processing we carry out. The legal bases we rely on are:

• Contractual necessity: Processing your registration, identity verification, deposit and withdrawal data is necessary to perform the contract between you and jilli asia — i.e., to operate your account and provide the gaming services you signed up for.
• Legal obligation: Certain data processing activities — particularly around identity verification, transaction record-keeping, and AML reporting — are required by Philippine law (AMLA, DPA, PAGCOR regulations) and by jilli asia's operating licence conditions. Jilli asia cannot waive these requirements.
• Legitimate interests: Jilli asia processes some data — such as technical logs and fraud detection signals — on the basis of our legitimate interest in keeping the platform secure, preventing fraud, and protecting the integrity of the gaming environment for all players.
• Consent: For optional processing activities such as sending promotional communications and using non-essential cookies, jilli asia relies on your consent. You can withdraw consent at any time without affecting the lawfulness of processing that took place before your withdrawal.

6 Data Sharing & Third Parties

Jilli asia does not sell your personal data. We do not trade, rent, or commercially share your personal information with third parties for their own marketing purposes. Personal data is shared only in the following circumstances:

• Payment processors: GCash, Maya, GrabPay, BDO, BPI, UnionBank, Visa, Mastercard, and other payment providers receive the minimum information necessary to process your deposit or withdrawal request. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• Identity verification providers: Licensed KYC and AML service providers receive your identity documents and personal details solely for the purpose of verifying your identity in accordance with regulatory requirements.
• Technology and infrastructure providers: Cloud hosting, platform security, and data analytics service providers may have access to technical data as necessary to deliver and maintain the jilli asia platform. All such providers are bound by contractual data processing agreements.
• Legal and regulatory authorities: Jilli asia is legally required to disclose certain information to the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), PAGCOR, and other relevant Philippine authorities when required by law, court order, or regulatory obligation.
• Business transactions: In the event of a merger, acquisition, or business reorganisation involving jilli asia, your data may be transferred to the successor entity, subject to the same privacy protections described in this policy.

7 Cookies & Tracking Technologies

Jilli asia uses cookies and similar tracking technologies on the jilliasia.click platform. Cookies are small text files stored on your device that help us recognise you, maintain your session, and understand how you use the platform. Here is how jilli asia uses different types of cookies:

• Essential cookies: Required for the platform to function properly. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without disrupting your ability to use jilli asia.
• Functional cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and notification preferences. Disabling these may reduce the quality of your jilli asia experience.
• Analytics cookies: Used to understand how Filipino players navigate the jilli asia platform — which pages are most visited, where users encounter difficulties, and how long sessions last. This data is anonymised and aggregated. We use it purely to improve the platform.
• Marketing cookies: Used to understand the effectiveness of promotional campaigns and to serve relevant offers to players who have consented to receive them. These are only active with your consent.

You can manage your cookie preferences through your browser settings. Most browsers allow you to view, block, or delete cookies at any time. Note that blocking essential cookies will prevent you from logging into your jilli asia account.

8 How Long We Keep Your Data

Jilli asia retains your personal data only for as long as it is necessary for the purposes for which it was collected, or as required by applicable Philippine law and our operating licence obligations. The key retention periods applicable to jilli asia player data are:

• Account and identity data: Retained for the duration of your active jilli asia account plus a minimum of five years after account closure. This is required by Philippine AML legislation (RA 9160 as amended by RA 10365) and PAGCOR record-keeping requirements.
• Transaction records: All deposit, withdrawal, and betting transaction records are retained for a minimum of five years from the date of each transaction.
• Customer support communications: Support chat logs and email correspondence are retained for three years from the date of the communication to support dispute resolution and training purposes.
• Technical logs: Server logs and security-related technical data are retained for 12 months on a rolling basis unless a specific security investigation requires extended retention.
• Marketing consent records: Records of your consent or opt-out for marketing communications are retained for three years after your last interaction with jilli asia.

Once retention periods expire, personal data is securely deleted or anonymised in a way that makes it impossible to identify you from the remaining information. Anonymised and aggregated data (e.g., statistical reports on platform usage) may be retained indefinitely as it no longer constitutes personal data under the DPA.

9 How We Protect Your Data

Jilli asia implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction:

• Encryption in transit: All data transmitted between your device and jilli asia's servers is protected by 256-bit TLS/SSL encryption — the same standard used by major Philippine banks.
• Encryption at rest: Sensitive personal data stored on jilli asia's systems — including identity documents, financial references, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within jilli asia is restricted on a strict need-to-know basis. Staff access is role-based, logged, and subject to regular review. Only personnel who genuinely need access to specific data to perform their job function are granted it.
• Two-factor authentication: Jilli asia supports and encourages two-factor authentication (2FA) on player accounts to protect against unauthorised logins.
• Regular security audits: Jilli asia's platform and data handling practices are subject to regular internal and external security reviews, penetration testing, and vulnerability assessments.
• Incident response: Jilli asia maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to player rights, jilli asia will notify affected players and the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the DPA.

10 Your Data Rights Under Philippine Law

Under the Philippine Data Privacy Act of 2012, every Filipino player using jilli asia has the following rights regarding their personal data. Jilli asia is committed to honouring all of these rights promptly and without unnecessary friction:

• Right to be informed: You have the right to know what personal data jilli asia holds about you, how it is being used, how long it will be kept, and who it may be shared with. This Privacy Policy is our primary mechanism for fulfilling this right.
• Right of access: You may request a copy of the personal data jilli asia holds about you at any time. Jilli asia will provide this within 15 business days of a verified request, subject to legal exceptions.
• Right to rectification: If any personal data jilli asia holds about you is inaccurate or incomplete, you have the right to request that it be corrected. Most profile information can be updated directly in your account settings. For identity document corrections, contact our support team.
• Right to erasure: You may request deletion of your personal data from jilli asia's systems. Note that this right is subject to our legal retention obligations — data we are required by law to retain (e.g., AML transaction records) cannot be deleted on request during the mandatory retention period.
• Right to object: You have the right to object to certain types of data processing by jilli asia, particularly processing based on our legitimate interests or for direct marketing purposes.
• Right to data portability: You have the right to receive your personal data in a structured, machine-readable format for transmission to another service provider, where technically feasible.
• Right to lodge a complaint: If you believe jilli asia has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, contact jilli asia at support@jilliasia.click with the subject line "Data Rights Request." Please include your registered email address and a clear description of your request. Jilli asia will acknowledge your request within three business days and respond in full within 15 business days.

11 Children's Privacy

The jilli asia platform is strictly for adults aged 21 years and above under Philippine law. Jilli asia does not knowingly collect personal data from individuals under 21 years of age. If you are a parent or guardian and believe that a minor has provided personal data to jilli asia or created an account, please contact us immediately at support@jilliasia.click.

Upon verified notification of an underage account, jilli asia will immediately suspend the account, delete all personal data associated with it that we are not legally required to retain, and return any deposited funds to the original payment source. As stated in our Terms and Conditions, jilli asia takes underage gambling extremely seriously — both as a legal obligation and as a moral responsibility to Filipino families.

12 Changes to This Privacy Policy

Jilli asia may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When we make material changes, we will notify registered players by email to their registered address and/or display a prominent notice on the jilli asia platform before the changes take effect.

The "Last updated" date at the top of this policy indicates when it was most recently revised. We encourage all Filipino players to review this policy periodically to stay informed about how jilli asia protects their data. Minor changes such as typographical corrections or improved clarity without substantive impact may be made without prior notice.

Your continued use of the jilli asia platform after any published change constitutes your acceptance of the revised Privacy Policy. If you do not agree with any material changes, you should stop using the platform and contact us to close your account and request data deletion where applicable.

13 How to Contact Us About Privacy

If you have any questions, concerns, or requests related to this Privacy Policy or to jilli asia's data handling practices, please get in touch with us. Our team is available 24/7 and will always treat privacy enquiries with priority.

• Email (data & privacy): support@jilliasia.click — subject line: "Privacy Query"
• Live Chat: Available on the jilli asia platform after login, 24 hours a day, 7 days a week
• Data rights requests: Email with subject line "Data Rights Request" — response within 15 business days
• Data breach reports: If you believe your jilli asia data has been compromised, email us immediately with subject line "Security Concern"

If you are not satisfied with jilli asia's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), which is the government authority responsible for enforcing the Data Privacy Act of 2012. The NPC is reachable through their official Philippine government channels.

For related policies, see also: Terms and Conditions and Responsible Gaming Policy on jilli asia.