jili9a Privacy Policy

1 Introduction

jili9a ("the Platform", "we", "us", "our") is an online gaming and entertainment service operating at jili9a.net. We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, whether as a registered player, a visitor to our website, or a recipient of our communications.

This Privacy Policy describes our practices with respect to the collection, use, storage, disclosure, and protection of personal data. It applies to all services offered through jili9a.net, including JILI slots, live dealer games, bingo, fishing games, sports betting, and customer support interactions.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with jili9a. In the event of any conflict between this Policy and those documents on a matter of data privacy, this Privacy Policy shall prevail.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, jili9a is the personal information controller in respect of the personal data collected through the Platform. As controller, jili9a determines the purposes and means by which your personal data is processed.

jili9a has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation. You may contact the DPO directly for any privacy-related enquiries using the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

jili9a collects the following categories of personal data, depending on how you interact with the Platform:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, religious beliefs, health data, or political affiliations, unless required by law (for example, in connection with a self-exclusion or responsible gaming assessment).

4 How We Collect Personal Data

jili9a collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — when you access the Platform, our systems log technical data including your IP address, device identifiers, browser type, and session activity. This is collected via cookies, web beacons, and server logs.
• From third parties — identity verification providers (for KYC), payment processors (GCash, Maya, BPI, BDO, Metrobank), fraud detection services, and regulatory authorities may share data with us in the course of providing services or meeting compliance obligations.
• From public sources — where permitted by law, we may supplement your profile with data from publicly available sources to meet our anti-money laundering (AML) obligations.

5 Purpose & Legal Basis for Processing

jili9a processes your personal data only where a lawful basis exists under the Philippine Data Privacy Act. The table below outlines our primary processing activities, their purposes, and the applicable legal basis:

Where we rely on your consent as the legal basis for processing (e.g., for marketing communications), you may withdraw that consent at any time by updating your notification preferences in your jili9a account settings or by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6 Data Sharing & Disclosure

jili9a does not sell your personal data. We may share your data with the following categories of recipients, strictly for the purposes described in Section 5:

• Payment Processors: GCash, Maya, QR Ph, GrabPay, InstaPay, BPI, BDO, and Metrobank — to process deposits and withdrawals. Each processor operates under its own privacy policy and data protection obligations.
• Identity Verification Providers: Third-party KYC and age verification services that help us confirm your identity and comply with Philippine regulations.
• Game Providers: JILI and other game studios whose titles are hosted on the Platform may receive game session data necessary for game operation, RTP calculation, and dispute resolution.
• Fraud & Security Services: Providers of anti-fraud, cyber-security, and risk management tools that help protect the Platform and our players.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and courts — where we are required by law or valid legal process to disclose data.
• Professional Advisors: Lawyers, auditors, and accountants engaged by jili9a, subject to confidentiality obligations.
• Business Successors: In the event of a merger, acquisition, or sale of jili9a's business or assets, personal data may be transferred to the successor entity, subject to the same protections as set out in this Policy.

All third parties with whom jili9a shares personal data are required to process that data in accordance with applicable Philippine data protection law and to implement appropriate security measures.

7 Data Retention

jili9a retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with AML record-keeping obligations under Republic Act No. 9160, as amended.
• Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for a minimum of three (3) years for dispute resolution purposes and regulatory compliance.
• Customer support communications: Retained for two (2) years from the date of the last interaction, or longer if related to an open dispute or regulatory matter.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.
• Technical and log data: Retained for up to twelve (12) months, unless required longer for security or legal purposes.

When personal data is no longer required, jili9a will securely delete or anonymise it in accordance with our internal data disposal procedures.

8 Security Measures

jili9a implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored in our databases (including passwords and financial identifiers)
• Multi-factor authentication (MFA) available for all player accounts and mandatory for internal staff access to player data systems
• Role-based access controls (RBAC) limiting internal data access to authorised personnel only
• Regular penetration testing and third-party security audits conducted at least annually
• Intrusion detection and monitoring systems operating around the clock
• Secure data centres with physical access controls, fire suppression systems, and redundant power supplies

Despite these measures, no digital platform can guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jili9a will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will communicate with affected players without undue delay, as required under the Data Privacy Act of 2012.

9 Cookies & Tracking Technologies

jili9a uses cookies and similar tracking technologies to operate the Platform, personalise your experience, and analyse usage patterns. The following types of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled without affecting Platform functionality.
• Functional Cookies: Remember your preferences such as language settings and display options to provide a more personalised experience.
• Analytics Cookies: Help us understand how players use the Platform — which games are most popular, where users encounter issues, and how navigation flows are performing. Data is aggregated and anonymised where possible.
• Security Cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorised account access attempts.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality and performance of the jili9a Platform. A cookie preference centre is available within your account settings.

jili9a does not use third-party advertising or retargeting cookies that track your activity across other websites.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jili9a. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 15:

jili9a will respond to all verified data subject requests within 30 calendar days of receipt. Where the request is complex or numerous, this period may be extended by a further 30 days, with notice provided to you. We reserve the right to request proof of identity before actioning any data subject request.

11 Minors

jili9a is strictly an adults-only platform. The minimum age to register and use jili9a is 21 years, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals below the age of 21.

If jili9a becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete the personal data concerned, and, where applicable, return any deposited funds through appropriate channels.

If you are a parent or guardian and believe your child has created a jili9a account or submitted personal data to the Platform, please contact us immediately at [email protected] so we can take prompt corrective action.

12 International Data Transfers

jili9a's primary data processing infrastructure is located within the Philippines. However, in the course of providing the Platform, some personal data may be processed by service providers operating in other countries — for example, game studios, cloud infrastructure providers, or KYC verification services with international operations.

Where personal data is transferred outside the Philippines, jili9a ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that provided under the Philippine Data Privacy Act of 2012. These safeguards may include contractual data protection clauses, binding corporate rules, or transfers to jurisdictions that the National Privacy Commission has determined offer adequate protection.

You may request information about the specific safeguards applied to any international transfer of your personal data by contacting our DPO at the details provided in Section 15.

13 Third-Party Links

The jili9a Platform may contain references to third-party services such as payment providers and game studios. Any links to external platforms are governed by those platforms' own privacy policies and terms of use. jili9a is not responsible for the privacy practices of any third-party platform and recommends that you review each platform's privacy policy before providing personal data to them.

The inclusion of a third-party reference on jili9a.net does not imply endorsement of that party's privacy practices.

14 Changes to This Policy

jili9a reserves the right to update or revise this Privacy Policy at any time. When material changes are made, we will take reasonable steps to notify you — which may include a notice displayed upon your next login to jili9a or an email to your registered address.

The updated Privacy Policy will take effect from the date it is published on jili9a.net, unless a later effective date is specified. Your continued use of the Platform following the publication of an updated Policy constitutes your acceptance of the revised terms. We recommend that you review this page periodically.

The effective date and last updated date at the top of this page will always reflect the most current version.

15 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jili9a processes your personal data, you may reach us through the following channels:

• Data Protection Officer (DPO): [email protected] — please use the subject line "DPO Enquiry" or "Data Privacy Request"
• Live Chat Support: Available 24/7 directly within the jili9a Platform after logging in
• General Support Email: [email protected]

Our support and DPO teams operate in both English and Filipino, seven days a week. We aim to acknowledge all data privacy enquiries within five business days and resolve them within 30 calendar days.

If you are not satisfied with our response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.