- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. Purposes of Processing
- 6. Legal Bases
- 7. Data Sharing
- 8. International Transfers
- 9. Data Retention
- 10. Your Rights
- 11. Cookies & Tracking
- 12. Marketing
- 13. Children's Privacy
- 14. Security Measures
- 15. Data Breach
- 16. Policy Updates
- 17. Contact & DPO
This Privacy Policy ("Policy") describes how jillss Casino ("jillss," "we," "us," "our") — the operator of the online gaming platform accessible at jillss.vip — collects, uses, stores, discloses, and otherwise processes personal data relating to individuals ("you," "Data Subject") who visit, register with, or otherwise use the jillss platform and associated services. This Policy is issued pursuant to Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (Philippines) ("DPA"), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission ("NPC"). By using jillss services, you acknowledge that you have read and understood this Policy.
Introduction
1.1 jillss Casino is committed to protecting the privacy and personal data of all individuals who interact with our platform. We understand that privacy is important to our players — particularly Filipino players who entrust us with sensitive personal and financial information when registering an account and transacting on the jillss platform.
1.2 This Policy applies to all personal data collected and processed by jillss in connection with: (a) the use of the jillss website and platform at jillss.vip; (b) account registration and ongoing account management; (c) deposits, withdrawals, and payment processing; (d) gameplay and transaction history; (e) customer support interactions; and (f) marketing and promotional communications where you have provided consent.
1.3 This Privacy Policy should be read alongside our Terms & Conditions, which govern your overall use of the jillss platform. Terms defined in the Terms & Conditions carry the same meaning in this Policy unless otherwise stated.
Note: jillss processes personal data of Filipino residents in accordance with the Data Privacy Act of 2012 (Republic of the Philippines) and the relevant PAGCOR regulations applicable to online gaming operators. Your data rights as a Filipino citizen are fully respected under this framework.
Data Controller
2.1 jillss Casino is the Data Controller in respect of the personal data collected through the jillss platform. As Data Controller, jillss determines the purposes and means by which your personal data is processed and bears primary responsibility for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with the DPA.
2.2 jillss has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and applicable data protection legislation. Contact details for the jillss DPO are provided in Section 17 of this Policy.
2.3 Where jillss engages third-party service providers to process personal data on its behalf, those parties act as Data Processors and are contractually bound to process data only in accordance with jillss's documented instructions and in compliance with the DPA.
Personal Data We Collect
3.1 jillss collects the following categories of personal data from players and platform users:
3.1 Identity and Account Data
- Full legal name as it appears on a government-issued Philippine identification document;
- Date of birth (for age verification purposes — players must be 21 years of age or older);
- Gender (where provided during registration);
- Username chosen at registration;
- Copies of government-issued identification documents submitted for KYC verification (e.g., UMID, Philippine passport, driver's license, SSS ID, PhilHealth ID, voter's ID);
- Selfie or proof-of-life image where required for enhanced identity verification.
3.2 Contact Data
- Registered Philippine mobile number (primary identifier for jillss account access and OTP delivery);
- Email address (where provided for account communications);
- Residential address (where required for identity verification or regulatory purposes).
3.3 Financial and Transaction Data
- Payment method details (GCash mobile number, PayMaya account identifier, bank account details for InstaPay transactions, card data submitted for Visa/Mastercard transactions — card numbers are not stored by jillss and are processed exclusively by our PCI-DSS-compliant payment processors);
- Deposit history, withdrawal history, and account balance records;
- Transaction reference numbers and timestamps;
- Source of funds information where requested for AML compliance purposes.
3.4 Gameplay and Activity Data
- Betting history, game session records, and win/loss data;
- Bonus claims, wagering activity, and promotional participation records;
- Responsible gaming tool settings (deposit limits, session time limits, self-exclusion status).
3.5 Technical and Device Data
- IP address and approximate geolocation derived from IP;
- Device type, operating system, and browser information;
- Login timestamps and session duration records;
- Cookie and tracking data as described in Section 11.
3.6 Communications Data
- Records of customer support interactions (live chat transcripts, support ticket content);
- Feedback and survey responses where provided voluntarily;
- Marketing preference settings and communication opt-in/opt-out records.
How We Collect Your Personal Data
4.1 Directly from You. The majority of personal data jillss holds about you is provided directly by you, including: information submitted during account registration; identity documents uploaded for KYC verification; payment details entered when making deposits or withdrawal requests; communications submitted through customer support channels; and responses to surveys, feedback forms, or promotions.
4.2 Automatically During Platform Use. Certain technical and device data is collected automatically when you access the jillss platform, including IP address, device identifiers, browser type, operating system, session timestamps, and in-platform behavioral data (game selections, navigation patterns) through cookies and similar tracking technologies. See Section 11 for details.
4.3 From Third-Party Sources. jillss may receive personal data about you from third-party sources in limited circumstances, including:
- Identity verification service providers engaged to perform KYC checks on our behalf;
- Payment processors and e-wallet providers (GCash, PayMaya) who transmit transaction confirmation data;
- Fraud detection and anti-money-laundering screening service providers;
- Regulatory bodies and law enforcement authorities in response to lawful requests.
Purposes of Processing
5.1 jillss processes your personal data for the following specific purposes:
- Account Registration and Management: To create and maintain your jillss account, verify your identity, manage your account settings, and provide access to jillss services;
- Age and Identity Verification: To verify that you meet the minimum age requirement of 21 years as required by PAGCOR regulations, and to confirm your identity in accordance with KYC obligations;
- Payment Processing: To process your deposit requests, execute withdrawal payments to your verified payment method, and maintain accurate financial records of all transactions;
- Gameplay Facilitation: To provide access to games, record gameplay outcomes, apply bonuses and promotional credits, and maintain accurate account balances;
- Regulatory Compliance: To meet jillss's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and any other applicable Philippine law or regulatory requirement;
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, account takeovers, money laundering, and other security threats to the jillss platform and its users;
- Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling, to enforce self-exclusion restrictions, and to implement deposit and session limits set by players;
- Customer Support: To respond to your inquiries, resolve disputes, and provide assistance with your jillss account;
- Marketing and Promotions: To send you promotional communications, bonus offers, and platform updates where you have consented to receive such communications;
- Platform Improvement: To analyze aggregate usage data, identify performance issues, and improve the jillss platform's features and user experience;
- Legal Claims: To establish, exercise, or defend legal claims and to comply with court orders or legal process.
Legal Bases for Processing
6.1 jillss processes your personal data on the following lawful bases as recognized under the Data Privacy Act of 2012:
- Contractual Necessity: Processing necessary for the performance of the jillss Terms & Conditions agreement with you — including account management, payment processing, and gameplay facilitation;
- Legal Obligation: Processing required to comply with jillss's legal obligations under Philippine law, including PAGCOR regulatory requirements, AMLA obligations, and tax reporting requirements;
- Legitimate Interests: Processing necessary for the legitimate interests of jillss — including fraud detection, platform security, and aggregate analytics — where those interests are not overridden by your rights and interests;
- Consent: Processing based on your explicit consent — primarily applicable to marketing communications and optional data collection beyond what is required for service delivery. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
Note on Consent Withdrawal: Where jillss processes your personal data on the basis of your consent, you may withdraw that consent at any time by contacting jillss support or adjusting your communication preferences in your account settings. Withdrawal of consent for marketing communications will not affect your ability to continue using jillss services.
Data Sharing and Disclosure
7.1 jillss does not sell, rent, or otherwise commercially transfer your personal data to third parties. Data is shared only in the circumstances described below:
7.2 Service Providers and Processors
jillss engages third-party service providers to perform specific functions on its behalf. These providers process personal data only in accordance with jillss's instructions and are contractually bound to maintain appropriate security standards. Categories of service providers include:
- Payment processing and e-wallet providers (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard processing networks);
- Identity verification and KYC service providers;
- Anti-money-laundering screening services;
- Cloud hosting and IT infrastructure providers;
- Customer support platform providers;
- Game content providers whose games are offered through the jillss platform.
7.3 Regulatory and Law Enforcement Disclosure
jillss may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, or other competent authorities where legally required to do so. Such disclosures are made only to the extent required by law and are documented in accordance with jillss's compliance procedures.
7.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of jillss's assets, personal data held by jillss may be transferred to the acquiring entity, subject to that entity providing equivalent or superior data protection standards. Affected data subjects will be notified of any such transfer in advance.
International Data Transfers
8.1 jillss's primary data processing infrastructure is located within the Philippines. Where personal data is transferred to or processed by service providers located outside the Philippines, jillss takes appropriate safeguards to ensure that such transfers comply with the Data Privacy Act of 2012 and NPC guidelines on cross-border data flows.
8.2 Safeguards for international transfers may include: contractual data protection clauses binding the recipient to data protection standards equivalent to Philippine law; transfers to jurisdictions determined by the NPC to provide adequate levels of protection; or transfers subject to the data subject's explicit prior consent.
8.3 By using jillss services, you acknowledge that your personal data may in some circumstances be processed by service providers operating outside the Philippines, subject to the safeguards described above.
Data Retention
9.1 jillss retains personal data for as long as is necessary to fulfill the purposes for which it was collected, to maintain the jillss account relationship, and to comply with applicable legal retention obligations.
9.2 The following general retention periods apply:
- Active Account Data: Retained for the duration of your active jillss account relationship, plus a minimum of five (5) years following account closure to comply with AMLA record-keeping obligations;
- KYC and Identity Verification Documents: Retained for a minimum of five (5) years following the end of the account relationship, as required by PAGCOR regulations and AMLA;
- Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, consistent with AMLA and tax record-keeping requirements;
- Customer Support Communications: Retained for up to three (3) years following the resolution of the relevant inquiry or dispute;
- Marketing Consent Records: Retained for three (3) years following the withdrawal of consent or the last marketing interaction, whichever is later;
- Technical Logs: Retained for up to twelve (12) months from the date of collection, unless required for longer periods in connection with security investigations or legal proceedings.
9.3 Upon the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with jillss's data disposal procedures, unless further retention is required by law.
Your Data Subject Rights
10.1 Under the Data Privacy Act of 2012, jillss account holders and data subjects have the following rights in respect of their personal data held by jillss:
| Right | What It Means in Practice |
|---|---|
| Right to Access | You may request a copy of the personal data jillss holds about you, along with information about how it is being processed. |
| Right to Rectification | You may request correction of any inaccurate or incomplete personal data jillss holds about you. Certain data corrections (e.g., legal name changes) require supporting documentation. |
| Right to Erasure | You may request deletion of your personal data where it is no longer necessary for the purposes collected, or where you withdraw consent and no other legal basis applies. This right is subject to jillss's legal retention obligations. |
| Right to Object | You may object to processing conducted on the basis of legitimate interests. Where your objection is upheld, jillss will cease the relevant processing unless compelling legitimate grounds override your objection. |
| Right to Data Portability | Where processing is based on consent or contractual necessity and is carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format. |
| Right to Restrict Processing | You may request restriction of processing of your personal data in certain circumstances — for example, where you contest the accuracy of the data pending verification, or where you have objected to processing pending determination of whether legitimate grounds override your objection. |
| Right to Withdraw Consent | Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing conducted prior to withdrawal. |
| Right to Lodge a Complaint | You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe jillss has processed your personal data in breach of the DPA. |
10.2 To exercise any of the above rights, please contact the jillss Data Protection Officer using the details provided in Section 17. jillss will respond to all data subject requests within thirty (30) calendar days of receipt, in accordance with NPC guidelines. Where a request is complex or numerous, this period may be extended by a further two months, with notification of the extension provided within the initial 30-day period.
jillss reserves the right to verify your identity before acting on any data subject request to protect against unauthorized access to personal data. Where we are unable to comply with a request — for example, due to legal retention obligations — we will inform you of the reason for refusal.
Cookies and Tracking Technologies
11.1 jillss uses cookies and similar tracking technologies on the jillss.vip website to enable core platform functionality, improve user experience, and analyze platform usage. Cookies are small text files placed on your device when you access the jillss website.
11.2 jillss uses the following categories of cookies:
- Strictly Necessary Cookies: These cookies are essential for the jillss platform to function. They enable core features such as maintaining your logged-in session, remembering items in your session, and ensuring platform security. These cookies cannot be disabled without affecting platform functionality;
- Performance and Analytics Cookies: These cookies collect anonymized information about how visitors use the jillss platform — pages visited, session duration, error messages — to help jillss improve the platform. No personally identifiable information is collected by these cookies;
- Functional Cookies: These cookies enable jillss to remember your preferences — such as language settings and responsible gaming tool configurations — to personalize your experience;
- Marketing Cookies: Where you have consented to marketing communications, these cookies may be used to deliver relevant promotions and to measure the effectiveness of jillss marketing campaigns.
11.3 You may control cookie settings through your browser's privacy settings. Disabling non-essential cookies will not prevent you from using core jillss services, though some functionality preferences may not be retained between sessions.
Marketing Communications
12.1 jillss may send you promotional communications — including bonus offers, game recommendations, platform updates, and event notifications — where you have provided your explicit consent to receive such communications at the time of account registration or subsequently through your account preference settings.
12.2 Opting Out. You may opt out of marketing communications at any time by: (a) adjusting your notification preferences in your jillss account settings; or (b) contacting jillss customer support with a written opt-out request. Opting out of marketing communications will not affect jillss's ability to send you service communications essential to your account (such as transaction confirmations, security alerts, or important account notifications).
12.3 jillss will not send marketing communications to players who have applied a self-exclusion restriction to their account, in compliance with responsible gambling standards.
Children's Privacy and Underage Access
13.1 The jillss platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. jillss does not knowingly collect personal data from individuals under 21 years of age.
13.2 Age verification is performed during account registration and may be reinforced through identity document verification at the KYC stage. Where jillss discovers or has reason to believe that personal data has been collected from an individual under the age of 21, jillss will promptly close the relevant account, delete the associated personal data, and report the matter to the appropriate regulatory authority where required.
Parent and Guardian Notice: If you are a parent or guardian and believe your child under 21 may have created a jillss account, please contact jillss support immediately. We will investigate and take appropriate action, including account closure and data deletion, as quickly as possible.
Security Measures
14.1 jillss implements a comprehensive set of technical and organizational security measures to protect personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss. These measures include:
- Encryption: All data transmitted between your device and the jillss platform is encrypted using industry-standard SSL/TLS protocols. Sensitive data at rest — including payment credentials and KYC documents — is encrypted using AES-256 or equivalent standards;
- Access Controls: Access to personal data within jillss is restricted on a strict need-to-know basis. Staff access is controlled through role-based access management, with privileged access subject to multi-factor authentication and access logging;
- Network Security: The jillss platform is protected by firewalls, intrusion detection systems, and regular vulnerability assessments. DDoS protection and rate limiting are applied to prevent unauthorized access attempts;
- Incident Response: jillss maintains a documented data breach response procedure. Upon detection of a security incident, jillss's incident response team is activated to contain, investigate, and remediate the incident in accordance with NPC notification requirements;
- Staff Training: All jillss staff who access personal data receive regular data protection and security awareness training.
14.2 While jillss takes all reasonable security precautions, no internet-based platform can guarantee absolute security. Players are strongly encouraged to protect their own account credentials, enable Two-Factor Authentication, and immediately report any suspected unauthorized account activity to jillss support.
Personal Data Breach Notification
15.1 In the event of a personal data breach that poses a real risk to the rights and freedoms of affected data subjects, jillss will:
- Notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03 and subsequent NPC guidelines on data breach management;
- Notify affected data subjects of the breach without undue delay, providing details of the nature of the breach, the categories and approximate number of records affected, the likely consequences of the breach, and the measures taken or proposed to be taken to address the breach;
- Maintain comprehensive internal records of all data breaches, including breaches that do not rise to the threshold for mandatory NPC notification.
15.2 Breach notifications to affected players will be issued through the communication channel associated with your jillss account (SMS to registered mobile number and/or email if provided). In cases of widespread breach, public notification through the jillss platform may also be employed.
Updates to This Privacy Policy
16.1 jillss may update or revise this Privacy Policy from time to time to reflect changes in our data processing practices, updates to applicable Philippine law or NPC guidelines, or changes to our services. The date of the most recent revision is displayed at the top of this document.
16.2 Where a revision involves a material change to how jillss processes your personal data, jillss will notify registered account holders via the contact details associated with their account at least fourteen (14) days prior to the change taking effect, except where immediate amendment is required by law or regulatory directive.
16.3 Continued use of the jillss platform following the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated Policy. If you do not agree with the updated Policy, you may request account closure by contacting jillss support.
16.4 The current version of this Privacy Policy is always accessible at jillss.vip/privacy-policy.
Contact Information and Data Protection Officer
17.1 If you have any questions, concerns, or requests relating to this Privacy Policy or jillss's processing of your personal data, please contact the jillss Data Protection Officer using the details below. All data subject rights requests and privacy complaints will be handled by the DPO team.
Data Protection Officer — jillss Casino
Email: [email protected]
Subject Line: Privacy / Data Protection Request
Live Chat: Available within the jillss platform (24/7) — please state "Privacy Request" at the start of your chat.
Response Time: jillss will acknowledge all privacy-related inquiries within five (5) business days and will respond substantively within thirty (30) calendar days.
17.2 If you are not satisfied with jillss's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for overseeing compliance with the Data Privacy Act of 2012.
jillss is committed to resolving all privacy concerns fairly and promptly. We encourage players to contact us directly in the first instance — most privacy issues are resolved quickly through direct communication with our DPO team without the need for regulatory escalation.