jiluck Privacy Policy

This Privacy Policy ("Policy") is issued by jiluck ("jiluck," "we," "us," "our") and applies to all personal data collected from individuals ("you," "Player," "User") who access or use the jiluck online gaming platform at jiluck.cam, including all associated mobile-optimized interfaces, customer support channels, and marketing communications.

jiluck is committed to protecting the privacy and personal data of every Filipino player who entrusts us with their information. We handle your data with care, collect only what is genuinely necessary, and operate under the principles of transparency, legitimate purpose, and proportionality as mandated by Philippine law.

This Policy should be read alongside jiluck's Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your relationship with jiluck. By creating a jiluck account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy.

If you have questions at any point, our Data Protection Officer is reachable as described in Section 14 of this Policy. We genuinely encourage you to reach out – understanding how your data is handled is your right, and we take that seriously.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), the personal information controller responsible for your data collected through jiluck.cam is:

Where jiluck engages third-party processors (such as payment providers, game studios, or KYC verification services) to handle data on its behalf, those processors act strictly under written data processing agreements and are bound to jiluck's data protection standards.

jiluck collects personal data through several points of interaction with the platform. The categories of data collected, and the context in which they arise, are as follows:

jiluck does not knowingly collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. Where sensitive data (such as government ID numbers) is processed, it is subject to enhanced security controls and access restrictions.

jiluck processes your personal data for the following specific, legitimate purposes:

• Account Creation and Management: To register your jiluck account, maintain your account profile, and provide you with access to all platform features including games, wallet management, and promotions.
• Identity Verification (KYC): To comply with PAGCOR regulations and Philippine Anti-Money Laundering Act (AMLA) requirements by verifying that you are who you say you are and that you meet the 21+ age requirement.
• Payment Processing: To process deposits and withdrawals through GCash, PayMaya, and Philippine bank channels, including matching payment account ownership to your registered jiluck account identity.
• Responsible Gaming: To operate deposit limits, session timers, reality checks, self-exclusion tools, and other player protection features that jiluck is committed to providing to all registered players.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, collusion, bonus abuse, and other prohibited conduct.
• Regulatory Compliance: To fulfil record-keeping, reporting, and audit obligations required under PAGCOR regulations, the Philippine AMLA, and the Data Privacy Act of 2012.
• Customer Support: To handle your queries, complaints, and support requests accurately and efficiently, including reviewing interaction history to provide context-aware assistance.
• Platform Improvement: To analyze aggregated, anonymized usage data to improve the jiluck platform, fix technical issues, and develop new features that serve Filipino players better.
• Marketing Communications: To send promotional offers, bonus notifications, and platform updates where you have consented to receive them. You may withdraw this consent at any time.

jiluck will not use your personal data for any purpose that is incompatible with the purposes listed above without providing you with prior notice and, where required by law, obtaining your consent.

Under the Philippine Data Privacy Act of 2012 and its IRR, jiluck relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and jiluck – i.e., operating your account, processing transactions, and providing gaming services.
• Legal Obligation: Processing required for jiluck to comply with applicable Philippine law, including PAGCOR regulations, AMLA requirements, and NPC-mandated data practices.
• Legitimate Interests: Processing conducted to pursue jiluck's legitimate business interests – including fraud prevention, platform security, and network abuse detection – provided those interests do not override your fundamental rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent – primarily for marketing communications. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

jiluck does not sell, lease, or trade your personal data to third parties for their own commercial purposes. We share data only in the following controlled circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other approved Philippine payment service providers receive the transaction and account data necessary to process your deposits and withdrawals.
• Identity Verification Providers: PAGCOR-compliant KYC and AML service providers may receive your identification documents and personal details solely for the purpose of verifying your identity and age in accordance with Philippine regulatory requirements.
• Game Providers: Licensed game studios (such as Pragmatic Play, Evolution Gaming, PG Soft, Jili Games) may receive technical session data necessary to operate their games within the jiluck platform. These providers do not receive your full identity profile.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies may receive your data as required by law, court order, or valid regulatory direction.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers operating under strict data processing agreements that limit use of your data to the provision of services to jiluck only.

jiluck retains personal data for as long as is necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by Philippine law. The following retention guidelines apply:

After the applicable retention period expires, jiluck will securely delete or anonymize your personal data in a manner that makes re-identification impossible. Anonymized and aggregated data that cannot be linked back to an individual may be retained indefinitely for statistical and analytical purposes.

jiluck implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security infrastructure includes:

• SSL/TLS Encryption: All data transmitted between your device and jiluck's servers is encrypted using industry-standard SSL/TLS protocols. The padlock in your browser's address bar confirms this protection is active at all times.
• Password Hashing: Your account password is stored as a one-way cryptographic hash using modern salted hashing algorithms. Not even jiluck's own staff can read your actual password.
• Access Controls: jiluck applies role-based access control (RBAC) so that staff members can only access player data that is strictly necessary for their specific job function. All internal data access is logged and auditable.
• Two-Factor Authentication (2FA): jiluck offers SMS-based 2FA for all player accounts, adding a second layer of verification when logging in from new devices on Philippine mobile networks (Smart, Globe, DITO, TNT).
• Intrusion Detection: jiluck's infrastructure includes automated intrusion detection and anomaly alerting systems that monitor for unusual access patterns indicative of unauthorized access attempts.
• Data Breach Response: In the event of a personal data breach that is likely to result in risk to your rights and freedoms, jiluck will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required by the DPA IRR.

No data transmission over the internet can be guaranteed 100% secure. However, jiluck maintains security measures that meet or exceed the standards recommended by the NPC for personal information controllers in the Philippine gaming sector.

jiluck uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyze usage patterns. The types of cookies used by jiluck are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in to your jiluck account during an active session. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as your language setting, preferred game display mode, and responsible gaming configuration. These improve your experience but are not essential to basic operation.
• Analytics Cookies: Collect aggregated, anonymized data about how players navigate the jiluck platform to help us identify and fix usability issues and improve the overall experience. Individual player sessions are not personally identified in analytics reports.
• Marketing Cookies: Where you have consented to receive jiluck promotions, these cookies help ensure that promotional messages shown to you are relevant to your gaming activity and preferences. You may withdraw consent for marketing cookies at any time.

You can manage cookie preferences through your browser's settings. Note that disabling cookies beyond strictly necessary ones may affect the functionality of certain jiluck features. jiluck does not use cookies to track your activity on third-party websites outside of jiluck.cam.

Under the Philippine Data Privacy Act of 2012 (RA 10173), you are entitled to the following rights with respect to your personal data held by jiluck. To exercise any of these rights, contact our Data Protection Officer using the details in Section 14.

jiluck will acknowledge all data rights requests within five (5) business days and will provide a substantive response within fifteen (15) business days, unless the complexity of the request reasonably requires a longer period, in which case we will notify you of the extension.

Please note that some rights may be subject to limitations where jiluck is required to retain certain data by law (e.g., under PAGCOR regulations or the AMLA), or where processing is necessary for the establishment, exercise, or defence of legal claims. jiluck will inform you of any such limitation when responding to your request.

jiluck does not knowingly collect personal data from any person under the age of 21 years. Access to the jiluck platform is strictly limited to adults aged 21 and above in compliance with PAGCOR regulations governing online gaming in the Philippines.

During account registration, players are required to confirm their date of birth. jiluck verifies this declaration through KYC identity checks. Any account found to belong to a person under 21 years of age will be immediately suspended and all associated data reviewed in accordance with our regulatory obligations.

jiluck's primary data infrastructure is hosted within or in proximity to the Philippines. However, certain service providers engaged by jiluck – such as game studios, cloud infrastructure providers, and fraud detection platforms – may process data in other jurisdictions, including countries in the Asia-Pacific region, the European Union, and the United States.

Where your personal data is transferred outside the Philippines, jiluck ensures that adequate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and NPC Circular 16-03. These safeguards include:

• Standard contractual clauses approved by the NPC or equivalent data protection authority in the recipient country.
• Transfer to countries recognized by the NPC as providing an adequate level of data protection.
• Binding corporate rules where transfers occur within a group of related entities.

Details of specific cross-border transfer arrangements are available from jiluck's Data Protection Officer upon request.

jiluck may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or the introduction of new platform features that involve the processing of personal data. When material changes are made, jiluck will:

• Update the "Effective Date" at the top of this page.
• Display a notice on the jiluck platform login page for a minimum of 30 days following the update.
• Send a notification to your registered email address where the changes materially affect your rights or the way your data is processed.

Your continued use of jiluck following the notification of a Policy update constitutes your acknowledgment of the revised terms. We recommend bookmarking this page and reviewing it periodically. For changes that require your fresh consent (such as new marketing processing activities), we will ask for that consent separately and will not assume it from continued platform use.

For all data privacy inquiries, rights requests, concerns, or complaints relating to jiluck's handling of your personal data, please contact our Data Protection Officer through the following channels:

jiluck serves players across Manila, Cebu, Davao, Quezon City, Makati, and all regions of the Philippines. Our DPO is committed to addressing your privacy concerns in a genuine, timely, and respectful manner. If you feel your concern has not been adequately addressed, you retain the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).