Privacy Policy

jlii ("jlii," "we," "us," or "the Platform") is a PAGCOR-regulated online casino and sports betting platform operating at jlii.app and serving Filipino players across the Philippines, including players in Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), jlii is the Personal Information Controller (PIC) in respect of the personal data you provide when registering and using our platform. jlii has designated a Data Protection Officer (DPO) who is responsible for ensuring our compliance with RA 10173 and the implementing rules and regulations issued by the National Privacy Commission (NPC).

If you have any questions about how jlii handles your personal data, you may contact our DPO directly using the details provided in Section 14 of this Policy.

jlii collects the following categories of personal data in connection with your use of the platform:

jlii does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data beyond the photo ID and selfie required for KYC under PAGCOR regulations.

jlii collects personal data through the following channels:

• Direct Submission: Information you provide when registering an account, completing KYC, making a deposit or withdrawal, or contacting customer support.
• Automated Technologies: Data collected automatically when you access the jlii platform, including IP address, device identifiers, browser information, and session activity, via server logs, cookies, and similar tracking technologies (see Section 7).
• Payment Providers: Transaction confirmation data received from GCash, Maya, BPI, BDO, UnionBank, and other payment processors when you make a deposit or request a withdrawal.
• Third-Party Verification Services: Identity and address verification data obtained from KYC service providers and, where required, from government databases to confirm your eligibility to use jlii.
• Publicly Available Sources: In limited circumstances, jlii may cross-reference information against publicly available government or regulatory lists (such as PAGCOR's self-exclusion registry) to fulfil its compliance obligations.

jlii processes your personal data on the following legal grounds as provided under the Data Privacy Act of 2012 and its implementing rules:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide the jlii gaming platform, process your deposits and withdrawals, and manage your account.
• Legal Obligation: Processing is required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160, as amended), and the Data Privacy Act itself.
• Legitimate Interests: jlii processes certain technical and usage data on the basis of its legitimate interests in maintaining platform security, preventing fraud, and improving service quality, provided such interests are not overridden by your rights and freedoms.
• Consent: Where jlii relies on your consent as the legal basis for processing (for example, for optional marketing communications), you retain the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jlii uses your personal data for the following specific purposes:

• To verify your identity and age (21+) during account registration and KYC in compliance with PAGCOR requirements;
• To operate and maintain your jlii account, including processing deposits and withdrawals via GCash, Maya, and other accepted payment methods;
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities in accordance with RA 9160;
• To monitor gameplay activity for responsible gaming purposes, including identifying problem gambling patterns and enforcing self-exclusion requests;
• To communicate with you regarding your account, including security alerts, transaction confirmations, and support responses;
• To send you promotional offers, bonuses, and platform updates — but only where you have provided consent or where we have a legitimate interest and you have not opted out;
• To improve, personalise, and optimise the jlii platform based on aggregated usage analytics;
• To comply with any court order, regulatory direction, or lawful request from a Philippine government authority.

jlii does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients strictly on a need-to-know basis:

• Payment Processors: GCash (Mynt), Maya (PayMaya), BPI, BDO, UnionBank, and other payment service providers require certain data to process your transactions securely.
• KYC & Identity Verification Providers: Third-party services engaged by jlii to verify your identity documents and confirm eligibility as required by PAGCOR.
• Game Content Providers: Software providers (such as JILI Games and other licensed studios) may receive aggregated or anonymised usage data for the purpose of game performance monitoring. They do not receive your personally identifiable information.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities where disclosure is required by law or regulatory direction.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by jlii, who are bound by professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of jlii's business, your data may be transferred to the successor entity, subject to the same or equivalent privacy protections.

All third parties with whom jlii shares personal data are required to maintain appropriate security measures and to use the data only for the specified purpose. Where required by law, jlii enters into Data Sharing Agreements with recipient organisations.

jlii uses cookies and similar technologies to operate and improve the platform. The following types of cookies may be placed on your device when you visit jlii.app:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens and security cookies. They cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings and display options to provide a more personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players use jlii (page visits, time on page, click paths) to help us improve the platform. No personally identifiable information is transmitted through analytics cookies.
• Security Cookies: Used to detect suspicious login activity, bot access, and potential fraud patterns.

You may manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the jlii platform. jlii does not use third-party advertising cookies or serve interest-based advertisements via cookie-based tracking networks.

jlii retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of your active account relationship with jlii, plus a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLC record-keeping requirements.
• Support and Communications Data: Retained for three (3) years from the date of the relevant interaction, unless a longer retention period is required in connection with an ongoing dispute or regulatory inquiry.
• Technical and Usage Data: Server logs and session data are retained for up to twelve (12) months for security monitoring purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, jlii will securely delete or anonymise your personal data in accordance with its data disposal procedures. Anonymised aggregate data may be retained indefinitely for statistical purposes.

jlii implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS 1.3 encryption for all data in transit between your device and jlii's servers;
• AES-256 encryption at rest for sensitive data fields including KYC documents and financial information;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Multi-factor authentication (MFA) for all administrative system access;
• Continuous intrusion detection and security event monitoring;
• Regular third-party security audits and penetration testing;
• Staff training on data privacy and information security obligations.

In the event of a personal data breach that poses a real risk to your rights and freedoms, jlii will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected data subjects without undue delay, as required under Section 20(f) of RA 10173.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jlii. You may exercise any of these rights by contacting our DPO as described in Section 14:

jlii will respond to all data subject rights requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further thirty (30) days and will notify you accordingly.

The jlii platform is strictly for persons aged twenty-one (21) years and above, in accordance with PAGCOR regulations governing online casino and sports betting platforms in the Philippines. jlii does not knowingly collect personal data from individuals under the age of 21.

If jlii becomes aware that personal data has been submitted by a person under 21, the account will be immediately suspended, the data will be deleted, and any deposited funds will be returned through the original payment method following identity verification. If you believe a minor has registered on jlii, please contact support immediately at [email protected].

In certain circumstances, jlii may transfer personal data to service providers or partners located outside the Philippines — for example, cloud infrastructure providers or international KYC verification platforms. Where such transfers occur, jlii ensures that adequate data protection safeguards are in place, consistent with the requirements of Section 21 of RA 10173 and relevant NPC issuances.

These safeguards may include contractual clauses requiring the recipient to apply data protection standards equivalent to those applicable in the Philippines, or reliance on the recipient's adherence to recognised international data protection frameworks. jlii will not transfer personal data to a jurisdiction that does not provide an adequate level of protection without first obtaining your consent or implementing appropriate safeguards.

jlii reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, jlii will notify registered users via the email address associated with their account and will post a prominent notice on the jlii platform no less than seven (7) days before the revised policy takes effect.

The "Last Updated" date at the top of this page always reflects the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the jlii platform after the effective date of any revision constitutes your acceptance of the updated policy.

The current version of this Privacy Policy is always available at jlii.app/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by jlii, you may contact us through the following channels:

• Data Protection Officer (DPO): Reach our DPO directly for any formal data subject rights requests or privacy compliance queries.
• Email: [email protected] — please include "Privacy Request" in the subject line for DPO-related inquiries.
• Live Chat: Available 24/7 on the jlii platform for general account and support queries.

jlii aims to acknowledge all privacy-related written inquiries within forty-eight (48) hours and to provide a substantive response within thirty (30) calendar days, as required under RA 10173.

If you are not satisfied with jlii's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines (NPC) through the official government channels available in the Philippines.