jillino Privacy Policy

This Privacy Policy ("Policy") describes how jillino ("jillino", "we", "us", or "our") collects, uses, stores, discloses, and protects personal information in connection with the operation of the online gaming platform accessible at jillino.vip ("Platform").

jillino is operated in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC). Our gaming operations are additionally regulated by the Philippine Amusement and Gaming Corporation (PAGCOR), which imposes its own data handling and player protection requirements that this Policy reflects.

By registering an account or using any service on the jillino Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. This Policy should be read together with jillino's Terms and Conditions.

For the purposes of the Data Privacy Act of 2012, jillino acts as the Personal Information Controller (PIC) with respect to the personal data of registered players and Platform visitors. As PIC, jillino determines the purposes and means of processing your personal data.

jillino has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. Queries and requests relating to personal data may be directed to the DPO via the contact details set out in Section 15 of this Policy.

Where jillino engages third-party service providers to process personal data on its behalf (such as payment processors, KYC verification providers, and cloud hosting services), those providers act as Personal Information Processors (PIPs) and are bound by appropriate data processing agreements that require them to handle data only in accordance with jillino's instructions and applicable law.

jillino collects personal data in the following categories:

4.1 Directly from You

The majority of personal data jillino holds about you is provided directly by you when you: register an Account; complete KYC verification by submitting identity documents; make a deposit or withdrawal; contact our support team; respond to surveys or promotions; or set responsible gaming preferences.

4.2 Automatically Through Platform Use

When you access and use the jillino Platform, we automatically collect technical and usage data through cookies, log files, and session tracking technologies. This includes your IP address, device information, browser type, pages visited, game sessions played, and the time and duration of your activity. See Section 10 for detailed information on cookies.

4.3 From Third Parties

jillino may receive personal data about you from third parties in limited circumstances, including:

• Payment processors (GCash, Maya, banking partners): transaction confirmation and fraud signals;
• KYC and identity verification providers: document authenticity checks and identity validation results;
• PAGCOR and regulatory authorities: self-exclusion register data, compliance notifications;
• Fraud prevention services: risk scores and flagged patterns relevant to account security.

jillino processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

jillino does not sell, rent, or trade your personal data. We share personal information only in the following circumstances and with the following categories of recipients:

6.1 Service Providers (Personal Information Processors)

jillino engages trusted third-party providers to assist in operating the Platform. These include payment processors (GCash, Maya, BPI, BDO partners), KYC and identity verification providers, cloud infrastructure providers, and customer support software vendors. All such providers are bound by data processing agreements and are authorized to process your data only as instructed by jillino.

6.2 Regulatory and Law Enforcement Authorities

jillino is required by Philippine law to share certain information with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other relevant authorities where mandated — for example, Suspicious Transaction Reports under the AMLA, or player data requested under a valid legal order.

6.3 Fraud Prevention and Security

jillino may share technical data and account information with fraud prevention networks, security researchers, and cybersecurity providers where necessary to protect the Platform and its players from unauthorized access, fraud, or financial crime.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of jillino's business, personal data held by jillino may be transferred to the relevant acquiring party, subject to equivalent data protection obligations. jillino will notify affected players of any such transfer before it takes effect.

jillino's primary operations and data storage are based within the Philippines. However, some service providers engaged by jillino — such as cloud infrastructure providers or game software vendors — may be located in other jurisdictions. Where personal data is transferred outside the Philippines, jillino ensures that such transfers comply with the Data Privacy Act of 2012, including:

• Entering into data transfer agreements that impose data protection standards equivalent to those required under Philippine law;
• Ensuring that recipient countries or organizations provide an adequate level of protection for personal data;
• Obtaining explicit consent where required for the transfer of specific categories of data.

jillino will not transfer your personal data to any jurisdiction or entity that does not meet the data protection standards required under applicable Philippine law.

jillino retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, comply with legal and regulatory obligations, and resolve disputes. The following general retention periods apply:

• Account and identity data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in accordance with PAGCOR licensing requirements and AMLA obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA and PAGCOR;
• Customer support communications: Retained for three (3) years from the date of the interaction, unless a longer period is required for an ongoing dispute;
• Technical and log data: Typically retained for twelve (12) months, after which it is aggregated or deleted;
• Responsible gaming records: Retained for the duration of self-exclusion or limit periods plus five (5) years for regulatory compliance purposes.

Upon expiry of the applicable retention period, personal data is securely deleted, anonymized, or pseudonymized so that it can no longer be attributed to a specific individual.

jillino employs a combination of technical, organizational, and procedural security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Key measures include:

• Encryption in transit: All data transmitted between your browser and jillino's servers is protected by TLS 1.2 or higher (SSL);
• Encryption at rest: Sensitive data stored in jillino's databases — including identity documents and financial data — is encrypted using AES-256;
• Access controls: Access to personal data within jillino's systems is restricted to authorized personnel only, enforced through role-based access controls, multi-factor authentication, and audit logging;
• Two-Factor Authentication (2FA): Players may enable 2FA on their accounts for an additional layer of login security;
• Intrusion detection and monitoring: jillino's platform is continuously monitored for suspicious activity, unauthorized access attempts, and anomalies;
• Regular security assessments: jillino conducts periodic security audits and vulnerability assessments to identify and remediate risks.

jillino uses cookies and similar technologies to operate the Platform effectively, maintain your session, and understand how players use our services. The following types of cookies are used:

jillino does not use third-party advertising cookies or sell cookie-derived data to advertisers. You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary or security cookies will impair your ability to use the Platform.

Under the Data Privacy Act of 2012, as a registered jillino player you have the following rights regarding your personal data. You may exercise these rights at any time by contacting jillino's Data Protection Officer as described in Section 15.

jillino will respond to all data subject rights requests within 30 calendar days of receipt. Where a request requires additional time to process — for example, in complex cases — jillino will notify you of the extended timeline and the reasons for it. Note that certain rights may be limited where legal or regulatory obligations require jillino to retain or continue processing specific data.

The jillino Platform is strictly intended for adults aged 21 years and older, as mandated by PAGCOR's regulations on online gaming in the Philippines. jillino does not knowingly collect personal data from persons under the age of 21.

During registration, jillino collects date of birth and performs age verification as part of its KYC process. Where jillino discovers or has reason to believe that a user is under 21 years of age, the Account will be immediately suspended, further access will be denied, any deposited funds will be returned, and all associated personal data will be securely deleted or pseudonymized to the extent permitted by applicable law.

If a parent or guardian believes their child under the age of 21 has registered an Account on jillino, they should contact jillino's support team immediately for urgent investigation and Account closure.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, jillino will:

• Notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03;
• Notify affected players without undue delay where the breach is likely to result in a high risk to their personal rights and freedoms — specifically, where their identity data, financial data, or authentication credentials may have been compromised;
• The notification to affected players will describe the nature of the breach, the types of data affected, the likely consequences, and the steps jillino has taken or will take to address the breach.

jillino maintains an incident response procedure and conducts regular breach readiness exercises to ensure a prompt, organized, and effective response to any data security incident.

jillino reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this Policy indicates when the current version came into effect.

Where changes are material — that is, where they substantively affect the way jillino collects, uses, or shares your personal data — jillino will provide advance notice to registered players via email or through a prominent notice on the Platform, with a reasonable lead time before the changes take effect.

Your continued use of the jillino Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you should cease using the Platform and request Account closure before the changes take effect.

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or want to raise a data privacy concern, please contact jillino's Data Protection Officer through the following channels:

• Email: [email protected] — subject line: "Privacy / Data Request"
• Live Chat: Available 24/7 at jillino.vip — ask to be connected with the Data Protection team for privacy-specific enquiries.

jillino will acknowledge all privacy enquiries within 3 business days and provide a substantive response within 30 calendar days in accordance with the Data Privacy Act of 2012.

If you are dissatisfied with jillino's response to a privacy concern or believe that jillino has breached its obligations under the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.