jilliz is committed to protecting the personal data of every Filipino player on our platform. This Privacy Policy explains what data we collect, why we collect it, how we use and protect it, and what rights you have under Philippine law.
jilliz processes all personal data in accordance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and its implementing rules. Our data practices are registered with the National Privacy Commission (NPC).
jilliz does not sell, rent, or trade your personal data to any third party for commercial purposes. Data sharing is limited to regulated service providers — payment processors, KYC verifiers, and PAGCOR — all bound by strict data processing agreements.
Filipino players on jilliz have the right to access, correct, delete, and object to the processing of their personal data under RA 10173. These rights are exercisable by contacting our Data Protection Officer through the support channel.
All data transmitted between your device and jilliz is encrypted using 256-bit SSL — the same standard used by Philippine banks. Your personal data, payment information, and gaming history are never transmitted in plaintext.
jilliz ("we", "us", "our") operates the online casino and sports betting platform accessible at jilliz.app (the "Platform"). We understand that the personal data you share with us is important, and we take our responsibility as a data controller seriously.
This Privacy Policy describes how jilliz collects, uses, stores, shares, and protects the personal data of registered players and visitors in the Philippines. It is written in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).
By registering on jilliz, depositing funds, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy. Your continued use of the jilliz Platform after any revision to this Policy constitutes acceptance of the updated terms.
For the purposes of the Philippine Data Privacy Act and applicable data protection law, jilliz is the data controller responsible for the personal data collected through the Platform.
jilliz has appointed a Data Protection Officer (DPO) as required under RA 10173. The DPO is responsible for overseeing jilliz's compliance with data privacy obligations, handling data subject requests, coordinating with the National Privacy Commission, and managing incident response procedures.
jilliz collects personal data necessary to provide the Platform's services, satisfy PAGCOR's licensing requirements, and comply with applicable Philippine laws. The categories of personal data collected are set out below.
| Category | Data Elements | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality | Registration, KYC verification, age check (21+) |
| Contact Data | Mobile number (+63), email address, residential address | Account communications, OTP delivery, support |
| Identity Documents | Government-issued ID (passport, driver's license, UMID), selfie photos | KYC/AML compliance per PAGCOR requirements |
| Financial Data | GCash number, Maya account, bank account details (masked) | Deposit and withdrawal processing, AML monitoring |
| Transaction Data | Deposit and withdrawal history, amounts, timestamps, methods | Account management, AML reporting, disputes |
| Gaming Data | Game sessions, bets placed, game results, bonus usage | Platform operation, responsible gaming monitoring, disputes |
| Technical Data | IP address, device type, browser, OS, session timestamps | Security, fraud prevention, platform optimization |
| Communications Data | Support chat logs, email correspondence | Service delivery, dispute resolution, quality assurance |
| Marketing Data | Promotional preferences, communication opt-in/opt-out records | Sending relevant offers (with consent only) |
jilliz collects personal data through the following means:
Under the Philippine Data Privacy Act, jilliz processes your personal data based on one or more of the following lawful bases:
jilliz uses your personal data for the following purposes:
jilliz does not sell, rent, or trade your personal data. Data is shared with third parties only in the following circumstances, and only to the extent necessary for the stated purpose:
| Recipient Category | Data Shared | Basis |
|---|---|---|
| PAGCOR | Player identity, transaction records, AML reports | Legal obligation (PAGCOR licensing) |
| Payment Processors (GCash, Maya, banks) | Account details, transaction amounts | Contractual necessity |
| KYC/Identity Verification Providers | Identity documents, selfie photos | Legal obligation (KYC/AML) |
| AMLC (Anti-Money Laundering Council) | Suspicious transaction reports, covered transaction reports | Legal obligation (AMLA) |
| National Privacy Commission | Breach notifications, compliance reports | Legal obligation (RA 10173) |
| IT Infrastructure & Cloud Providers | Encrypted platform data | Legitimate interest; subject to DPA |
| Law Enforcement | Data as required by valid legal process | Legal obligation |
All third-party processors engaged by jilliz are bound by written Data Processing Agreements (DPAs) that require them to process data only for the stated purpose, implement appropriate security controls, and comply with RA 10173.
jilliz uses cookies and similar tracking technologies on the Platform to ensure functionality, enhance security, and improve user experience. All cookies used by jilliz are first-party — we do not deploy third-party advertising cookies or behavioral tracking cookies from external ad networks.
You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the jilliz Platform. Analytics cookies can be disabled without affecting core Platform functionality.
jilliz retains personal data for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention schedule applies:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account plus 5 years post-closure | PAGCOR licensing, AMLA requirements |
| KYC/identity documents | 5 years from date of verification | AMLA, PAGCOR KYC requirements |
| Transaction records | 5 years from transaction date | AMLA, tax compliance, dispute resolution |
| Gaming history | 5 years from session date | Responsible gaming, dispute resolution |
| Support communications | 3 years from last contact | Dispute resolution, service quality |
| Marketing consent records | Until consent withdrawal plus 3 years | RA 10173 accountability principle |
| Technical/log data | 12 months from collection | Security, fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with jilliz's data disposal procedures. Anonymized data may be retained indefinitely for Platform analytics and improvement purposes.
jilliz implements technical and organizational security measures appropriate to the risks associated with processing personal data on a regulated gaming platform. These measures include:
Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal data held by jilliz. To exercise any of these rights, contact our Data Protection Officer at [email protected] or via the live chat channel on the Platform.
To be told how your data is being collected and processed — which this Policy fulfills.
To request a copy of the personal data jilliz holds about you, including the purposes and recipients of that data.
To request correction of inaccurate or incomplete personal data. Some corrections require identity re-verification.
To request deletion of your personal data, subject to legal retention obligations under AMLA and PAGCOR requirements.
To object to processing based on legitimate interests, including marketing and profiling for bonus personalization.
To receive your personal data in a structured, commonly used format for transfer to another controller.
To file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.
To claim compensation for damages sustained as a result of inaccurate, incomplete, or unauthorized use of your personal data.
jilliz does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly intended for adults aged 21 and above, as required by PAGCOR regulations and Philippine law. Age verification is conducted at registration and as part of the KYC process.
If jilliz discovers that personal data has been collected from an individual under 21 years of age, the Account will be immediately suspended, all data securely deleted to the extent permitted by legal retention obligations, and the matter reported to PAGCOR. Parents or guardians who believe a minor has registered on jilliz should contact our DPO immediately.
In the event of a personal data breach that is likely to give rise to a real risk of harm to affected individuals, jilliz will comply with its notification obligations under RA 10173, which include:
jilliz maintains a documented incident response plan and conducts regular breach simulation exercises. In the event of a confirmed breach affecting your data, jilliz's DPO will be the primary point of contact for affected players.
jilliz's Platform and primary data processing infrastructure are located in the Philippines. Where technical operations require data processing by service providers located outside the Philippines (for example, cloud infrastructure providers or KYC technology platforms), jilliz ensures that such transfers comply with Section 21 of RA 10173 and the NPC's rules on cross-border data flows.
Specifically, jilliz will only transfer personal data outside the Philippines where: (a) the recipient country provides an adequate level of data protection as determined by the NPC; (b) appropriate contractual safeguards are in place, including standard contractual clauses; or (c) you have explicitly consented to the transfer. All cross-border data processing is documented in jilliz's data processing register.
jilliz may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. When material changes are made, we will notify registered players via the contact information on their Account (SMS or email) at least fourteen (14) days before the changes take effect.
Non-material changes — including clarifications, formatting corrections, or changes that strengthen (rather than reduce) data subject protections — may take effect on publication. The effective date displayed at the top of this Policy indicates the version currently in force.
We encourage you to review this Privacy Policy periodically. The most current version will always be available at jilliz.app/privacy-policy. Continued use of the Platform after any change constitutes your acceptance of the updated Policy.
For all privacy-related inquiries, data subject rights requests, or complaints, contact the jilliz Data Protection Officer using the following channels:
jilliz's commitment to data privacy extends beyond regulatory compliance — it is part of the trust we have built with Filipino players since our launch. Your personal data is handled with the same care you expect when dealing with a Philippine financial institution, and we take that responsibility seriously.
These are the practical privacy protections every Filipino player on jilliz benefits from, regardless of whether you read the full legal text above.
Your GCash and Maya account details are transmitted over 256-bit SSL and stored in encrypted form. jilliz staff cannot see your full GCash or bank account number — only masked identifiers are visible in our systems. Payment data is shared only with the processor needed to complete your transaction.
jilliz sends promotional SMS and email only with your consent. You can withdraw marketing consent at any time from your Account notification settings — no need to contact support. Unsubscribing from marketing has no impact on account access, bonus eligibility, or any other Platform feature.
Under RA 10173, you can request a full copy of the personal data jilliz holds on you at any time. jilliz will respond within 15 working days. You can also request correction of any inaccurate data or deletion of data where retention is not required by law, directly through the jilliz support channel.
The jilliz Data Protection Officer and support team are available 24/7 to answer any questions about how we handle your personal data. You can also review our full Terms & Conditions and Responsible Gaming policy for more context. 21+ only.