jillibb Casino – Privacy Policy

This Privacy Policy ("Policy") describes how jillibb ("the Company", "we", "us", "our"), operating the online casino and sports betting platform at jillibb.co ("Platform"), processes personal data belonging to registered players, prospective players, and website visitors ("you", "your", "User").

jillibb is a data controller as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations. jillibb is registered with the National Privacy Commission (NPC) and complies with all applicable NPC circulars and advisories.

This Policy applies to all personal data processed through the jillibb Platform, including data collected via the website, mobile browser interface, live chat, support correspondence, payment processing, and KYC verification workflows. By registering for a jillibb account or using the Platform, you acknowledge that you have read and understood this Policy.

This Policy should be read together with jillibb's Terms & Conditions and Responsible Gaming Policy, both of which are accessible via jillibb.co.

jillibb collects personal data across several categories, depending on your interaction with the Platform. The following table summarizes the categories of data we collect and their primary source:

jillibb does not collect sensitive personal information as defined under Section 3(l) of the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required to fulfil a legal obligation, in which case separate consent will be sought.

jillibb processes your personal data for the following purposes:

• Account management: Creating, maintaining, verifying, and, where necessary, closing your jillibb account;
• Identity verification (KYC): Complying with PAGCOR's KYC requirements and the Anti-Money Laundering Act (AMLA) by verifying your identity, age (21+), and source of funds where required;
• Payment processing: Facilitating GCash, Maya, BPI, BDO, and other Philippine payment method deposits and withdrawals;
• Contractual performance: Providing access to jillibb's games, promotions, bonuses, and sports betting services as described in our Terms & Conditions;
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, enforcing deposit limits and self-exclusion, and complying with PAGCOR's responsible gaming obligations;
• Fraud prevention and security: Detecting and preventing fraudulent transactions, account takeovers, multi-accounting, and prohibited bonus abuse;
• Legal and regulatory compliance: Reporting to PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other competent Philippine authorities as required by law;
• Platform improvement: Analysing aggregated, de-identified usage data to improve the jillibb platform's performance, game selection, and user experience for Filipino players;
• Customer support: Responding to inquiries, complaints, and dispute resolution requests submitted via live chat, email, Viber, or Messenger;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have not opted out of marketing communications.

jillibb does not use your personal data for automated profiling that produces legal or similarly significant effects without human review and an opportunity for you to contest the outcome.

Under the Philippine Data Privacy Act of 2012, jillibb processes your personal data on the following lawful bases:

• Contract performance: Processing necessary to create and operate your jillibb account and deliver the services described in our Terms & Conditions;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA obligations, NPC requirements, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, security monitoring, platform analytics, and responsible gaming monitoring — where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and optional platform features where you have provided specific, informed consent. You may withdraw marketing consent at any time via your account settings or by contacting jillibb support.

jillibb uses the following categories of cookies and tracking technologies:

• Strictly necessary cookies: Required for the Platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without rendering the Platform unusable;
• Functional cookies: Remember your preferences such as language, login state ("Keep me signed in"), and game display settings to improve your experience on return visits;
• Analytics cookies: Collect aggregated, anonymised data about how players navigate jillibb.co, which games are most popular, and where technical errors occur. This data is used solely for internal platform improvement and is not shared with third-party advertisers;
• Security cookies: Detect unusual login patterns, bot activity, and potential account takeover attempts to protect your jillibb account.

jillibb does not use third-party advertising cookies or behavioural tracking cookies for ad targeting. You may disable non-essential cookies via your browser settings; however, this may affect certain Platform features.

jillibb does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared only in the following circumstances:

• Payment processors: GCash (Mynt/G-Xchange), Maya, GrabPay, BPI, BDO, Metrobank, and 7-Eleven CLiQQ receive the minimum personal and financial data necessary to process your transactions. These processors are contractually bound to handle your data in accordance with applicable Philippine law;
• KYC verification providers: Identity verification service providers who assist jillibb in fulfilling PAGCOR KYC and AMLA obligations. These providers act as data processors under jillibb's instruction and are prohibited from using your data for any independent purpose;
• Regulatory and government authorities: PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), and other competent Philippine government bodies where disclosure is required by law, court order, or lawful regulatory demand;
• Game content providers: Third-party game studios providing live dealer or slot content may receive limited technical data (e.g., anonymised session ID) necessary to deliver game services. These providers do not receive your name, contact details, or financial data;
• Professional advisers: Lawyers, auditors, and insurance advisers where necessary for jillibb's legal compliance or business operations, subject to confidentiality obligations;
• Business transfers: In the event of a merger, acquisition, or sale of jillibb's business, personal data may be transferred to the successor entity, subject to the same level of data protection and advance notice to affected players.

jillibb's primary data infrastructure is located within the Philippines. In limited circumstances, certain service providers (such as cloud infrastructure, KYC verification, or game studio operators) may be located outside the Philippines. Where personal data is transferred outside the Philippines, jillibb ensures that appropriate safeguards are in place as required by NPC regulations, including:

• Contractual data processing agreements with adequate data protection clauses;
• Transfers only to jurisdictions or entities that maintain a comparable level of data protection;
• Where required, completion of NPC cross-border transfer documentation.

Players may request information about specific cross-border transfer arrangements by contacting jillibb's Data Protection Officer at the contact details provided in Section 13.

jillibb retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and Philippine AML regulations;
• Financial transaction records: Retained for five (5) years in accordance with AMLA and PAGCOR requirements;
• Gaming session logs: Retained for two (2) years from the date of the session for dispute resolution and regulatory audit purposes;
• Support communications: Retained for two (2) years from the date of the communication, or longer if the communication relates to an unresolved dispute or legal matter;
• Marketing consent records: Retained for the duration of the consent plus two (2) years following withdrawal to demonstrate compliance.

After applicable retention periods expire, personal data is securely deleted or anonymised in accordance with NPC guidelines. Players may request early deletion of non-essential data subject to jillibb's legal retention obligations — see Section 9 for your data rights.

You have the following rights regarding your personal data held by jillibb:

• Right to be Informed: The right to know that your personal data is being collected, the purposes for collection, and how it will be used — as described in this Policy;
• Right of Access: The right to request a copy of the personal data jillibb holds about you, along with information about how it is processed;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly via your jillibb account settings;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data where it is no longer necessary for the original purpose, subject to jillibb's legal retention obligations. Data subject to PAGCOR or AMLA retention requirements cannot be deleted early;
• Right to Object: The right to object to processing of your personal data for direct marketing at any time, with immediate effect. You may also object to processing based on legitimate interests where your particular circumstances warrant;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe jillibb has processed your data unlawfully. NPC contact details are available at privacy.gov.ph.

To exercise any of the above rights, contact jillibb's Data Protection Officer using the details in Section 13. jillibb may require identity verification before processing a rights request to protect against fraudulent requests.

jillibb implements technical, organisational, and physical security measures proportionate to the sensitivity of the personal data it processes, including:

• Encryption: All data in transit between your device and jillibb's servers is encrypted using TLS 1.2 or higher. Personal and financial data at rest is encrypted using industry-standard AES-256 encryption;
• Access controls: Access to player personal data is restricted to jillibb personnel who require it to perform their specific job functions, enforced through role-based access controls and multi-factor authentication;
• Network security: jillibb's infrastructure is protected by web application firewalls, intrusion detection systems, and regular vulnerability assessments;
• Staff training: All jillibb staff with access to personal data undergo data privacy training in accordance with NPC requirements;
• Breach response: jillibb maintains a data breach response plan. In the event of a personal data breach that poses a real risk to data subjects, jillibb will notify the NPC within 72 hours and affected players as soon as practicable.

While jillibb implements robust security measures, no internet-based platform is completely immune to security risks. Players are responsible for keeping their jillibb account credentials secure and for enabling two-factor authentication to reduce the risk of unauthorised access.

jillibb enforces its 21+ age requirement through mandatory KYC verification using Philippine government-issued identification documents. Any parent or guardian who believes their child under 21 has provided personal data to jillibb should immediately contact jillibb support to request account closure and data deletion.

jillibb reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or NPC guidance. Where changes are material — for example, changes to the categories of data collected, the purposes of processing, or your rights — jillibb will provide at least fourteen (14) days' advance notice via the registered contact information on your jillibb account before the revised Policy takes effect.

Non-material clarifications or corrections may take effect immediately upon publication. The "Last Updated" date at the top of this Policy reflects the most recent revision. We recommend that players review this Policy periodically. Continued use of the jillibb Platform following the effective date of a revised Policy constitutes your acknowledgement of the changes.