jill58 Casino — Privacy Policy

This Privacy Policy is issued by jill58 Casino ("jill58", "we", "us", "our") and applies to all personal data collected from individuals ("you", "your", "data subject") who access, register on, or interact with the jill58 online gaming platform at jill58.org and all associated services.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA) of the Philippines, and its implementing rules and regulations as administered by the National Privacy Commission (NPC). jill58 additionally observes applicable data protection requirements under PAGCOR's licensing framework for online gaming operators in the Philippines.

By registering an account or using the jill58 platform, you acknowledge that you have read, understood, and consent to the collection and processing of your personal data as described in this Policy. If you do not agree to this Policy, you should not register on or continue to use the jill58 platform.

This Policy should be read together with jill58's Terms and Conditions and Responsible Gaming Policy. Where there is a conflict between this Privacy Policy and any other document, this Privacy Policy shall govern with respect to matters of personal data handling and protection.

jill58 Casino acts as the data controller in respect of all personal data collected through the jill58.org platform. As data controller, jill58 determines the purposes for which and the means by which personal data is processed.

jill58 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. The DPO is responsible for overseeing jill58's compliance with applicable data protection laws, handling data subject rights requests, and serving as the point of contact between jill58 and the National Privacy Commission.

Contact details for the jill58 Data Protection Officer are provided in Section 15 of this Policy.

jill58 collects the following categories of personal data in connection with its gaming and related services:

Sensitive Personal Information. To the extent that identity documents submitted for KYC contain sensitive personal information as defined under the Philippine Data Privacy Act (such as government ID numbers or biometric data embedded in certain ID types), jill58 handles such information with the heightened level of protection required for sensitive personal information under the DPA and applies strict access controls limiting its processing to what is strictly necessary for KYC and regulatory compliance purposes.

jill58 collects personal data through the following means:

• Direct Provision: Data you provide voluntarily when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical data collected automatically when you access and use the jill58 platform, including through cookies, session tracking, and server logs. See Section 8 for full details on cookies.
• Payment Processors: Transaction confirmation data received from payment providers including GCash, PayMaya, BDO, BPI, and Metrobank when you deposit or withdraw funds through these channels.
• Third-Party Game Providers: Game session data transmitted by third-party game software providers integrated into the jill58 platform in connection with your gaming activity.
• Identity Verification Services: Data results received from third-party KYC and identity verification service providers used to authenticate government ID documents submitted by players.
• Fraud and Security Monitoring: Data gathered through automated fraud detection and security monitoring systems that analyse patterns of platform activity to identify and prevent prohibited conduct.

Under the Philippine Data Privacy Act of 2012, jill58 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and jill58 — specifically, the provision of online gaming services, payment processing, and account management described in jill58's Terms and Conditions.
• Legal Obligation: Processing is required to comply with jill58's legal obligations under PAGCOR licensing conditions, the Philippine Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine laws and regulations.
• Legitimate Interests: Processing is necessary for jill58's legitimate interests in operating a secure, fair, and compliant gaming platform — including fraud prevention, security monitoring, platform improvement, and responsible gaming administration — provided those interests are not overridden by your rights and interests.
• Consent: Where required by the Data Privacy Act, jill58 will obtain your explicit consent before processing your personal data for specific purposes, such as certain marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

jill58 uses your personal data for the following purposes:

• Account Creation and Management: To register, verify, and manage your jill58 account, including password resets, security updates, and account preference management.
• Identity and Age Verification (KYC): To verify your identity and confirm that you meet the 21+ age requirement imposed by PAGCOR. KYC verification is mandatory before withdrawal processing and may be required before certain account actions.
• Payment Processing: To process GCash, PayMaya, bank, and cryptocurrency deposits and withdrawals, verify payment method ownership, and maintain transaction records.
• Gaming Service Delivery: To provide access to all game categories on the jill58 platform, record game outcomes, administer bonuses and promotions, and settle bets and payouts.
• Responsible Gaming: To monitor gaming activity for indicators of problem gambling behaviour, administer self-exclusion and deposit limits, and send responsible gaming communications where appropriate.
• Security and Fraud Prevention: To detect and prevent unauthorised account access, bonus abuse, money laundering, and other fraudulent or prohibited activity.
• Regulatory Compliance and Reporting: To fulfil jill58's obligations under PAGCOR licensing, AMLA, the Data Privacy Act, and other applicable laws, including required regulatory reporting of certain transactions and activities.
• Customer Support: To respond to your enquiries, resolve disputes, and manage complaints.
• Platform Improvement: To analyse aggregate usage patterns (in anonymised or pseudonymised form where possible) to improve platform performance, game selection, and user experience.
• Marketing Communications: To send promotional offers and gaming updates to players who have not opted out of marketing communications. You may opt out at any time by contacting jill58 support or updating your communication preferences in your account settings.

7.1 No Sale of Personal Data. jill58 does not sell, rent, or trade your personal data to any third party for their own independent marketing or commercial purposes. Full stop.

7.2 Authorised Third-Party Recipients. jill58 may share your personal data with the following categories of third parties strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment Processors: GCash (G-Xchange Inc.), PayMaya (Maya Philippines), BDO Unibank, Bank of the Philippine Islands (BPI), Metrobank, and cryptocurrency payment infrastructure providers — solely for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party services used to authenticate government-issued identification documents submitted during KYC, subject to data processing agreements requiring them to handle your data in compliance with the Philippine Data Privacy Act.
• Game Technology Providers: JILI Technology and other game software providers whose titles are hosted on the jill58 platform, to the extent that game session data is processed within their systems for the purpose of game delivery and payout calculation.
• Fraud Prevention and Security Services: Third-party security and fraud detection providers whose tools are used by jill58 to detect and prevent prohibited activity on the platform.
• PAGCOR and Regulatory Authorities: jill58 is required under its PAGCOR license and applicable Philippine law to report certain information and transactions to regulatory authorities, including PAGCOR and the Anti-Money Laundering Council (AMLC). Such reporting is not discretionary — it is a legal obligation.
• Law Enforcement: Where required by a lawful order from a Philippine court or law enforcement authority, jill58 will disclose personal data as legally compelled.
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by jill58, subject to binding confidentiality obligations.

7.3 Data Processing Agreements. Where jill58 shares personal data with third-party processors, jill58 requires those processors to enter into data processing agreements that obligate them to handle your personal data in accordance with applicable data protection law and to implement appropriate technical and organisational security measures.

8.1 What Are Cookies. Cookies are small text files placed on your device by jill58.org when you visit the platform. They enable the platform to recognise your device across page visits, maintain your login session, remember your preferences, and collect anonymous usage data for platform improvement purposes.

8.2 Types of Cookies Used by jill58.

• Essential Cookies: These cookies are strictly necessary for the operation of the jill58 platform. They maintain your login session, preserve security tokens, and ensure game sessions function correctly. These cookies cannot be disabled without disrupting core platform functionality.
• Performance Cookies: These cookies collect anonymised data about how players use the jill58 platform — which pages are visited most, where errors occur, and how load times perform — to help jill58 improve the platform for Filipino users. No personally identifiable information is stored in these cookies.
• Functional Cookies: These cookies remember your preferences such as language settings, game lobby display preferences, and responsible gaming tool settings to provide a more personalised experience.
• Analytics Cookies: Used by jill58's internal analytics systems to understand aggregate traffic patterns and usage trends on jill58.org. Data is processed in pseudonymised form.

8.3 Managing Cookies. You can manage or disable non-essential cookies through your browser's settings. Please note that disabling certain cookies may affect the functionality of the jill58 platform, including your ability to maintain a logged-in session or use certain features. Essential cookies cannot be disabled while using jill58 without disrupting core services.

9.1 Technical Safeguards. jill58 implements the following technical security measures to protect your personal data:

• TLS 1.2 / 1.3 encryption for all data transmitted between your device and jill58 servers
• Encryption at rest for databases containing personal data, using industry-standard AES-256 encryption
• Multi-factor authentication requirements for internal administrative access to player data systems
• Regular penetration testing and vulnerability assessments of jill58's technical infrastructure
• Intrusion detection and monitoring systems with 24/7 security operations oversight
• Secure, access-controlled storage for KYC document images and government ID scans

9.2 Organisational Safeguards. jill58's data security framework includes:

• Data access restricted to jill58 personnel and authorised third parties on a strict need-to-know basis
• Mandatory data privacy and security training for all staff with access to player personal data
• Documented data incident response procedures in compliance with NPC breach notification requirements
• Regular internal audits of data handling practices against this Policy and applicable law

9.3 Your Responsibilities. You also play a role in keeping your jill58 account data secure. Please maintain a strong, unique password for your jill58 account, enable two-factor authentication (SMS OTP), and log out from shared or public devices after each session. Report any suspected unauthorised access to jill58 support immediately.

9.4 Data Breach Notification. In the event of a personal data breach that is likely to result in serious harm to affected data subjects, jill58 will notify the NPC and affected players in accordance with the timelines and procedures required under the Data Privacy Act of 2012 and NPC Circular No. 16-03.

jill58 retains your personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account Data (active accounts): Retained for the duration of your active account relationship with jill58, plus a period of five years following account closure to satisfy potential dispute resolution, PAGCOR reporting, and litigation hold requirements.
• KYC and Identity Documents: Retained for a minimum of five years following account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of seven years following the transaction date, in compliance with the Anti-Money Laundering Act and PAGCOR requirements for financial record retention.
• Game History and Session Data: Retained for a minimum of two years for dispute resolution purposes, and up to five years for PAGCOR compliance and audit purposes.
• Support Communications: Retained for two years from the date of the communication for quality assurance, training, and dispute resolution purposes.
• Technical and Log Data: Retained for up to twelve months for security monitoring and fraud investigation purposes, after which it is anonymised or deleted.

Upon the expiry of the applicable retention period, jill58 will securely delete or irreversibly anonymise your personal data in accordance with jill58's data disposal procedures. Anonymised data (from which all identifying information has been permanently removed) may be retained indefinitely for statistical and analytical purposes.

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in respect of your personal data held by jill58:

jill58 Casino's services are strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR's minimum age requirements for licensed online gaming platforms in the Philippines. jill58 does not knowingly collect personal data from individuals under the age of 21.

Age verification is conducted through jill58's KYC process, which requires submission of a valid government-issued Philippine ID confirming the account holder's date of birth. Any account found to be registered or operated by an individual under 21 years of age will be immediately closed, all associated data will be deleted (subject to any applicable legal retention requirements), and the matter may be reported to PAGCOR.

If you are a parent or guardian and you have reason to believe that a minor has registered on jill58 or provided personal data to jill58, please contact our Data Protection Officer immediately using the contact details in Section 15. jill58 will promptly investigate and, where confirmed, close the account and delete the associated data.

13.1 Primary Processing Location. jill58 processes personal data primarily within data centre infrastructure serving the Philippine market. jill58's operations are structured to keep player data processing as close to the Philippines as is technically and commercially practicable.

13.2 International Transfers. Certain technology and service providers used by jill58 — including game software providers and technical infrastructure vendors — may process data in data centres located outside the Philippines. Where such international transfers occur, jill58 ensures that:

• The recipient country provides an adequate level of protection for personal data, or
• jill58 has put in place appropriate safeguards (such as contractual data protection clauses) to ensure the transferred data is handled in accordance with standards equivalent to those required under the Philippine Data Privacy Act.

13.3 NPC Registration. Where required under the Data Privacy Act and NPC regulations, jill58 registers its cross-border data transfer arrangements with the National Privacy Commission.

14.1 Right to Update. jill58 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law (including updates to the Data Privacy Act implementing rules or NPC circulars), changes in jill58's data processing practices, changes in the technologies used by jill58, or PAGCOR licensing requirement updates.

14.2 Notification of Material Changes. Where changes to this Privacy Policy are material — meaning they significantly affect how jill58 processes your personal data or the rights available to you — jill58 will provide advance notice by publishing a notice on jill58.org and, where practicable, by sending a notification to your registered email address or mobile number. The effective date of any updated Policy will be clearly stated at the top of the document.

14.3 Continued Use. Your continued use of the jill58 platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not agree to a material change, you should cease using the jill58 platform and may request account closure in accordance with the Terms and Conditions.

For all data privacy-related enquiries, requests to exercise your data subject rights, or to contact jill58's Data Protection Officer, please use the following contact channels:

• Data Protection Officer (DPO) Email: privacy at jill58.org (plain text — not a clickable link)
• General Support (Live Chat): Available 24/7 via the live chat widget on jill58.org — fastest response for account-related queries
• General Support Email: support at jill58.org (plain text — not a clickable link)

jill58's DPO will acknowledge data subject rights requests within five (5) business days and will endeavour to provide a substantive response within thirty (30) calendar days of receipt, as required under the Data Privacy Act of 2012.

If you are not satisfied with jill58's response to a data privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines at privacy.gov.ph.