jiliwi Privacy Policy

This Privacy Policy ("Policy") sets out the manner in which jiliwi ("jiliwi," "we," "us," or "our") collects, uses, stores, discloses, and otherwise processes personal information in connection with the jiliwi Platform, including the website at jiliwi.cam and all associated services, features, and interfaces made available thereon.

This Policy is intended to inform you — as a registered player, visitor, or any individual whose personal data jiliwi processes — of your rights and jiliwi's obligations under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR").

jiliwi is an online casino and sports betting platform operating in the Philippines. As the entity responsible for determining the purposes and means by which your personal data is processed, jiliwi acts as the personal information controller ("PIC") under the Data Privacy Act of 2012.

jiliwi operates in compliance with applicable Philippine gaming regulations and has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and all applicable data privacy laws. Contact details for the DPO are provided in Section 15 of this Policy.

jiliwi collects personal information necessary to provide, operate, and maintain the Platform, comply with regulatory obligations, and protect both players and the integrity of the gaming environment. The categories of personal data we collect include:

jiliwi does not collect sensitive personal information as defined under the DPA — such as health records, political affiliations, or biometric data — except where facial recognition is used as part of the KYC identity verification process, in which case explicit consent is obtained prior to collection.

jiliwi collects personal information through the following means:

• Direct collection: Information you provide when registering a jiliwi account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access and navigate the Platform.
• Third-party sources: Identity and risk information received from payment processors (e.g., GCash, Maya, BPI), fraud prevention services, and regulatory databases, where necessary to verify your identity or fulfill compliance obligations.
• Game providers: Aggregated gameplay statistics and session data shared by our licensed game providers for the purpose of resolving disputes and auditing game outcomes.

jiliwi processes your personal data for the following purposes:

• Account creation and management: To register, verify, and maintain your jiliwi account and enable access to Platform services.
• Identity and age verification: To confirm that you are at least 21 years of age and are who you say you are, as required by PAGCOR regulations and Philippine gaming law.
• Payment processing: To process deposits, facilitate withdrawals, and maintain accurate transaction records in compliance with financial reporting requirements.
• Regulatory compliance: To meet jiliwi's obligations under PAGCOR licensing conditions, anti-money laundering (AML) laws, counter-terrorism financing (CTF) requirements, and the Data Privacy Act.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and unauthorized access to the Platform.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance through jiliwi's Tagalog and English support team.
• Platform improvement: To analyze usage patterns, identify technical issues, and develop features that improve the jiliwi experience for Filipino players.
• Responsible gaming: To monitor gameplay patterns for signs of problem gambling and to administer deposit limits, self-exclusion, and other responsible gaming tools.
• Marketing communications: To send you promotional offers, bonuses, and updates where you have provided consent, and to personalize your experience on the Platform.

Under the Data Privacy Act of 2012, jiliwi processes your personal data on one or more of the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted upon registration, including account management, payment processing, and game service delivery.
• Compliance with a legal obligation: Processing required to comply with PAGCOR licensing requirements, AML/CTF laws, tax reporting obligations, and orders from Philippine regulatory or law enforcement authorities.
• Legitimate interests: Processing necessary for jiliwi's legitimate interests in fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent, particularly for marketing communications and optional data collection activities. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jiliwi does not sell your personal data. We may share your information with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment service providers: GCash, Maya (PayMaya), GrabPay, BPI, BDO, Metrobank, Visa/Mastercard, and InstaPay, for the purpose of processing deposits and withdrawals.
• Game software providers: Licensed game developers and aggregators who supply the casino and betting content available on jiliwi, where sharing is necessary to resolve disputes or audit outcomes.
• Identity verification services: Third-party KYC and AML screening providers used to verify player identity and check against relevant watchlists and exclusion databases.
• Fraud prevention and cybersecurity providers: Services that help jiliwi detect and prevent unauthorized access, account fraud, and platform abuse.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or a valid regulatory order.
• Professional advisers: Lawyers, auditors, and consultants engaged by jiliwi under strict confidentiality obligations.

jiliwi primarily stores and processes your data within the Philippines. However, some of our third-party service providers — particularly international game software providers and fraud prevention systems — may process data on servers located outside the Philippines.

Where such transfers occur, jiliwi ensures that appropriate safeguards are in place to protect your data to at least the standard required by the Data Privacy Act of 2012. These safeguards include contractual data processing agreements, adherence to internationally recognized security standards, and, where applicable, compliance with transfer mechanisms approved by the National Privacy Commission.

jiliwi uses cookies and similar tracking technologies to enhance Platform functionality, analyze usage, and maintain session security. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly, including maintaining your login session and loading the game interface. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game display options, and responsible gaming limit configurations.
• Analytical cookies: Collect anonymized data about how visitors navigate the Platform, which pages are visited most frequently, and where technical errors occur. This helps jiliwi improve the service.
• Security cookies: Help detect and prevent fraudulent login attempts, bot activity, and session hijacking.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality and may prevent you from accessing your jiliwi account. jiliwi does not use third-party advertising cookies or sell cookie data to any marketing platforms.

jiliwi retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention periods required by law and regulatory obligations:

• Account and transaction records: A minimum of five (5) years following the last account activity or account closure, in compliance with PAGCOR reporting requirements and the Anti-Money Laundering Act.
• KYC and identity documents: A minimum of five (5) years after account closure or the last transaction, whichever is later, in line with AMLC guidelines.
• Support communications: Three (3) years from the date of the interaction, unless the matter relates to an ongoing dispute or regulatory investigation.
• Technical and usage logs: Twelve (12) months from collection, unless retention is required for security investigation or legal proceedings.
• Marketing consent records: Until consent is withdrawn, plus three (3) years thereafter as evidence of lawful processing.

Upon expiry of the applicable retention period, jiliwi will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jiliwi:

To exercise any of the above rights, please contact jiliwi's Data Protection Officer using the details provided in Section 15. jiliwi will respond to all verifiable requests within fifteen (15) working days of receipt, in accordance with NPC guidelines.

jiliwi implements industry-standard technical, organizational, and administrative security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, and accidental loss. These measures include:

• SSL/TLS encryption: All data transmissions between your device and the jiliwi Platform are encrypted using 256-bit SSL/TLS protocols.
• Password hashing: Account passwords are stored exclusively as one-way salted cryptographic hashes. jiliwi employees and systems cannot retrieve your actual password.
• Two-factor authentication: OTP-based two-factor authentication is available and strongly recommended for all jiliwi accounts.
• Access controls: Personal data is accessible only to jiliwi personnel who require it to perform their job functions, governed by role-based access controls and audit logging.
• Payment tokenization: Financial data such as GCash numbers and bank account details are handled through tokenization systems provided by our accredited payment partners. jiliwi does not store raw payment credentials on its own servers.
• Regular security audits: The Platform and its infrastructure undergo periodic security assessments and penetration testing by qualified cybersecurity professionals.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jiliwi will notify affected individuals and the National Privacy Commission within the timeframes prescribed by the Data Privacy Act and its IRR.

The jiliwi Platform is strictly intended for use by individuals aged twenty-one (21) years and above. jiliwi does not knowingly collect, process, or retain personal data from individuals below the age of 21.

If jiliwi discovers or is notified that personal data has been collected from a person below the age of 21, the associated account will be immediately suspended, all collected data will be securely deleted, and any deposited funds will be returned through appropriate channels in accordance with applicable regulations.

jiliwi reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or operational circumstances. The "Effective Date" at the top of this document will be updated each time a material change is made.

Where changes are material, jiliwi will provide notice to registered players via email or a prominent in-Platform notification prior to the changes taking effect. Your continued use of the Platform after any updated Policy has been posted constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how jiliwi is protecting your personal information.

If you have questions, concerns, or requests relating to this Privacy Policy or jiliwi's handling of your personal data, please contact the jiliwi Data Protection Officer (DPO) or general support team through any of the following channels:

• Email (plain text — not a link): [email protected]
• Live Chat: Available 24/7 on the jiliwi Platform. Average response time: 3–5 minutes.
• Messenger & Viber: Via jiliwi's official verified accounts.

Please include "Privacy Request" or "DPO Inquiry" in your message subject so that your request is routed directly to the appropriate team. jiliwi will acknowledge all privacy-related requests within forty-eight (48) hours and will respond substantively within fifteen (15) working days, in accordance with NPC guidelines.

If you are not satisfied with jiliwi's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. Further information on this process is available on the NPC's official website.