This Privacy Policy describes how jililo collects, uses, stores, and protects your personal information when you use the jililo platform. It is written in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.
jililo ("jililo," "we," "us," "our") operates the online casino and gaming platform accessible at jililo.org and any associated mobile interfaces. jililo is committed to protecting the personal information of all registered members, visitors, and users of its platform in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA") and its Implementing Rules and Regulations (IRR), as administered and enforced by the National Privacy Commission (NPC) of the Philippines.
This Privacy Policy applies to all personal data collected, processed, stored, and used by jililo in the course of operating its gaming platform, processing financial transactions, fulfilling regulatory obligations, and communicating with registered players. It applies whether you interact with jililo through a desktop browser, mobile device, or any other interface we may offer.
This Privacy Policy should be read alongside jililo's Terms and Conditions, which govern the contractual relationship between jililo and registered players. In the event of any conflict between these two documents on a data privacy matter, this Privacy Policy shall prevail.
For the purposes of the Philippine Data Privacy Act, jililo acts as the Personal Information Controller (PIC) with respect to personal data collected from its registered players and platform visitors. As PIC, jililo determines the purposes and means of processing personal information in connection with its platform operations.
jililo engages certain third-party service providers who act as Personal Information Processors (PIPs) — processing personal data on jililo's behalf and under jililo's documented instructions. These processors are contractually bound to data protection obligations consistent with this Policy and the requirements of RA 10173. A list of the categories of processors engaged by jililo is set out in Section 7 (Data Sharing) of this Policy.
jililo has appointed a Data Protection Officer (DPO) responsible for overseeing data protection compliance and responding to data subject inquiries and complaints. Contact details for the jililo DPO are provided in Section 15 of this Policy.
jililo collects the following categories of personal data from and about its players and platform users:
| DATA CATEGORY | SPECIFIC DATA ELEMENTS |
|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID type and number (PhilSys, UMID, Driver's License, Passport, Voter's ID, SSS/GSIS), selfie photograph for liveness verification. |
| Contact Data | Philippine mobile number (primary account identifier), email address, residential or mailing address (where provided for KYC). |
| Account Data | Account username, encrypted password, account registration date, account status, security question responses, two-factor authentication settings. |
| Financial Data | GCash account reference, Maya account reference, bank account details (BSB, BPI, BDO, Metrobank), InstaPay/PesoNet identifiers, deposit and withdrawal transaction records, wallet balance history. |
| Gaming Data | Game history, bet amounts, win/loss records, session durations, game preferences, bonus participation records, wagering activity logs. |
| Technical Data | IP address, device type and model, operating system, browser type and version, mobile network provider (Smart, Globe, DITO), session timestamps, login history, geolocation data (city/region level). |
| Communications Data | Support chat transcripts, email correspondence with jililo, complaint and dispute records, survey responses, feedback submissions. |
| Responsible Gaming Data | Deposit limit settings, session limit configurations, self-exclusion records, problem gambling self-assessment responses, cool-off period records. |
jililo collects personal data that you provide directly when you: register an account (mobile number, email, date of birth, age confirmation); complete KYC verification (government ID upload, selfie, address details); make a deposit or withdrawal (payment method identifiers, transaction details); contact jililo support (name, account details, query content); respond to promotions or surveys; or submit a complaint or dispute.
When you access and use the jililo platform, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device identifiers, browser type, session data, page views, and interaction events within the platform. This data is used to operate the platform, detect fraud, ensure security, and improve the user experience. Please refer to Section 10 (Cookies & Tracking) for further details.
jililo may receive personal data about you from third parties in specific circumstances: from payment processors (GCash, Maya, BPI, BDO, and others) in the course of processing your transactions; from identity verification service providers during the KYC process; from fraud prevention databases in the course of account security checks; and from PAGCOR or other regulatory bodies in the exercise of their regulatory functions.
jililo processes your personal data for the following specific, legitimate purposes:
Under the Philippine Data Privacy Act, jililo relies on the following legal bases for processing your personal information:
jililo shares personal data with third-party service providers (Personal Information Processors) who process data on jililo's behalf under strict contractual data protection obligations. Categories of processors include: payment processors and e-wallet providers (GCash, Maya, BPI, BDO, and other financial institutions); identity verification and KYC service providers; cloud hosting and infrastructure providers; fraud detection and cybersecurity services; customer support platform operators; and SMS and communication service providers.
jililo may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and other government bodies where disclosure is required or permitted by Philippine law — including pursuant to a court order, regulatory direction, or legal process.
In the event of a merger, acquisition, asset sale, or other corporate restructuring involving jililo, personal data may be transferred to the successor entity as part of the transaction. In such circumstances, jililo will notify affected players via their registered contact details and ensure the receiving entity is bound by data protection obligations at least equivalent to those in this Policy.
jililo retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR's regulatory framework:
Where retention beyond the periods above is required by applicable law, court order, or regulatory direction, jililo will retain the relevant data for the required extended period and will notify you where practicable.
jililo implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, loss, and destruction. Key security measures include:
jililo uses cookies and similar client-side storage technologies to operate the platform, maintain your login session, remember your preferences, and collect analytics data. Cookies used by jililo fall into the following categories:
You can manage non-essential cookie preferences through your browser settings. Most modern browsers on Android and iOS devices allow you to view, block, or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging into or using jililo's real-money gaming features.
jililo may use third-party analytics tools to process aggregated, anonymised usage data for platform improvement purposes. These tools process data under jililo's instructions as Personal Information Processors and are contractually bound by data protection obligations consistent with RA 10173.
Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by jililo. To exercise any of these rights, contact jililo's Data Protection Officer as specified in Section 15.
You have the right to request confirmation of whether jililo holds personal data about you and, if so, to receive a copy of that data along with information about how it is processed.
You have the right to request correction of inaccurate, incomplete, or outdated personal data held about you by jililo. You can update most account data directly in your jililo account settings.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jililo's legal and regulatory retention obligations under AMLA and PAGCOR requirements.
You have the right to object to or request blocking of the processing of your personal data where the processing is based on jililo's legitimate interests, including the right to object to direct marketing communications at any time.
Where technically feasible, you have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format — applicable to data you have provided to jililo directly and which is processed by automated means.
If you believe jililo has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) via its official channels, independent of any complaint filed with jililo directly.
jililo will respond to data subject rights requests within thirty (30) days of receipt. Where jililo requires additional time to process a complex request, it will notify you within the initial 30-day period and provide an extended response timeline not exceeding a further thirty (30) days.
jililo's platform is strictly for persons aged 21 years and older. jililo does not knowingly collect personal data from persons under 21. The minimum age requirement is enforced through OTP mobile verification, KYC identity checks, and age confirmation at registration. All of these measures are designed, in part, to prevent the collection of personal data from underage individuals.
If jililo becomes aware that it has inadvertently collected personal data from a person under 21, jililo will immediately suspend the associated account, delete the personal data to the extent permitted by applicable legal and regulatory retention obligations, and, where appropriate, report the matter to relevant authorities.
If you are a parent or guardian and believe your child (under 21) has registered or provided personal data to jililo, please contact jililo's Data Protection Officer immediately at [email protected].
jililo's primary data infrastructure is hosted in data centres with operations in the Asia-Pacific region, including facilities with Philippine jurisdiction connections. In the ordinary course of operating the platform — for example, through cloud hosting, game delivery networks, and certain analytics systems — personal data may be processed on servers located outside of the Philippines.
Where personal data is transferred to entities in countries outside the Philippines, jililo takes steps to ensure that adequate protections are in place consistent with RA 10173's requirements for cross-border data flows. These protections include: contractual data processing agreements with receiving entities; transfer to jurisdictions with data protection frameworks recognised as providing an adequate level of protection; or other mechanisms prescribed by the National Privacy Commission.
By using jililo's platform, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside the Philippines for the purposes described in this Privacy Policy, subject to the protections described above.
jililo reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory requirements, platform functionality, or data processing practices. The effective date at the top of this Policy reflects the most recent update.
Where amendments are material — affecting the nature of personal data collected, the purposes for which it is used, or the rights of data subjects — jililo will notify registered players via SMS or email to their registered contact details no less than seven (7) days prior to the amendments taking effect.
Continued use of the jililo platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not accept an amendment, you may request account closure in accordance with jililo's Terms and Conditions. Your data will thereafter be handled in accordance with jililo's legal and regulatory retention obligations.
For all data privacy inquiries, rights requests, complaints, or concerns regarding this Privacy Policy or jililo's handling of your personal data, please contact jililo's Data Protection Officer (DPO) using the details below.
If you are not satisfied with jililo's response to a privacy complaint, you have the right to refer the matter to the National Privacy Commission (NPC) of the Philippines, which oversees enforcement of the Data Privacy Act. The NPC maintains a complaint intake process for data subjects whose privacy rights have been violated. You may contact the NPC through its official Philippine government channels.
This Privacy Policy was last updated on 1 January 2026 and is effective as of that date. All previous versions of jililo's Privacy Policy are superseded by this version.
Six concrete data protection practices jililo maintains for every registered player in the Philippines.
All data exchanged between your device and jililo is protected by TLS encryption. Your GCash payment details, KYC documents, and login credentials are never transmitted in plaintext — not over mobile data, not over Wi-Fi, not over any channel.
Within jililo, your personal data is accessible only to personnel who have a specific, documented operational need. Customer support agents see what they need to assist you. No jililo employee has blanket access to all player data.
jililo does not sell your personal data to third parties for their commercial use. Your contact details, gaming history, and financial information are not a revenue stream at jililo. They are processed to operate your account and meet legal obligations — nothing more.
jililo's data practices are designed around the Philippine Data Privacy Act of 2012 and the National Privacy Commission's implementing rules. A designated Data Protection Officer oversees compliance and handles data subject rights requests.
In the event of a data breach that affects your personal data, jililo's obligation is to notify the NPC within 72 hours and affected players without undue delay. jililo maintains an incident response plan specifically for data security events.
Marketing communications from jililo are sent only with your consent. You can withdraw consent and opt out of promotional SMS and email at any time through your jililo account settings — no questions asked, effective immediately.
Now that you know how jililo handles your personal information, you can play with confidence. Register your jililo account, make your first GCash deposit, and enjoy 500+ games — in Philippine Peso, on a PAGCOR-regulated platform. 21+ only.