jil8 Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how jil8 ("jil8," "we," "us," or "our") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you," "your," or "Data Subject") who access or use the jil8 online gaming platform, including the jil8 website and any associated mobile-optimised interfaces (collectively, the "Platform").

jil8 is committed to protecting the privacy and security of your personal data in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC") of the Philippines. This Policy should be read together with the jil8 Terms & Conditions, which govern your use of the Platform.

By registering a jil8 account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, jil8 acts as the Personal Information Controller with respect to the personal data collected through the Platform. jil8 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

jil8 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Policy and with the DPA. Contact details for the DPO are provided in Section 13 of this Policy.

3. Personal Data We Collect

3.1 Data You Provide Directly

When you register a jil8 account or interact with the Platform, we collect the following categories of personal data that you provide to us directly:

• Identity Data: Full legal name, date of birth, gender, and nationality;
• Contact Data: Philippine mobile number, email address, and residential address;
• Identity Verification Data: Copies of government-issued identification documents (e.g., passport, driver's licence, UMID, SSS card, PhilSys national ID) and proof of address submitted for KYC purposes;
• Financial Data: GCash or Maya account details, bank account information, and transaction history relating to deposits and withdrawals on the Platform;
• Account Data: Username, encrypted password, account preferences, and communication preferences;
• Communications Data: Records of your correspondence with jil8 customer support, including live chat transcripts and email exchanges.

3.2 Data Collected Automatically

When you access the Platform, jil8 automatically collects certain technical and usage data, including:

• Device & Technical Data: IP address, device type, operating system, browser type and version, and screen resolution;
• Usage Data: Pages visited, games played, session duration, click-stream data, and features accessed;
• Location Data: General geographic location derived from your IP address, used to verify jurisdictional eligibility;
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 7.

3.3 Data from Third Parties

jil8 may receive personal data about you from third-party sources in limited circumstances, including:

• Identity verification and KYC service providers engaged to assist with regulatory compliance;
• Payment processors and e-wallet providers (GCash, Maya) for the purpose of verifying and processing transactions;
• PAGCOR and other regulatory bodies, where required by law.

4. How We Use Your Personal Data

jil8 uses the personal data we collect for the following purposes:

jil8 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

5. Legal Basis for Processing

jil8 processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and jil8 — specifically, to operate your account, process transactions, and provide gaming services;
• Legal Obligation: Processing is required to comply with jil8's obligations under Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act of 2012;
• Legitimate Interests: Processing is necessary for jil8's legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your rights and freedoms;
• Consent: Where jil8 relies on your consent as the legal basis for processing — for example, for direct marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Data Sharing and Disclosure

6.1 Service Providers

jil8 shares personal data with carefully selected third-party service providers who process data on jil8's behalf as Personal Information Processors under the DPA. These include payment processors (GCash, Maya, and Philippine banking partners), KYC and identity verification providers, cloud hosting and infrastructure providers, and customer support platform providers. All such providers are contractually bound to process your data only on jil8's instructions and in accordance with the DPA.

6.2 Regulatory and Law Enforcement Authorities

jil8 is required by Philippine law to disclose personal data to regulatory and law enforcement authorities in certain circumstances, including:

• PAGCOR, in connection with jil8's gaming licence obligations;
• The Anti-Money Laundering Council (AMLC), in connection with suspicious transaction reporting under RA 9160;
• The National Privacy Commission (NPC), in connection with data breach notifications or regulatory investigations;
• Philippine courts and law enforcement agencies, pursuant to a valid court order or legal process.

6.3 No Sale of Personal Data

jil8 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Any sharing of personal data is limited to what is strictly necessary for the purposes described in this Policy.

6.4 Cross-Border Data Transfers

Where jil8 transfers personal data outside the Philippines — for example, to cloud infrastructure providers with servers located abroad — such transfers are carried out in accordance with Section 21 of the DPA and the NPC's rules on cross-border data transfers, ensuring that your data receives an equivalent level of protection to that afforded under Philippine law.

7. Cookies and Similar Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the jil8 Platform. They allow the Platform to recognise your device, remember your preferences, and provide a more personalised experience. jil8 also uses similar technologies such as web beacons and local storage objects for comparable purposes.

7.2 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your logged-in state and security cookies that help detect fraudulent activity. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and game display options to improve your experience on return visits.
• Analytics Cookies: Collect aggregate, anonymised data about how players use the Platform, helping jil8 identify areas for improvement. No personally identifiable information is shared with analytics providers.

7.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the jil8 Platform, including your ability to log in and access your account. Detailed instructions for managing cookies in common browsers are available through your browser's help documentation.

8. Data Retention

jil8 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and AMLC record-keeping obligations under RA 9160;
• Financial and Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Customer Support Records: Retained for three (3) years from the date of the last interaction, or longer if required for ongoing dispute resolution;
• Usage and Technical Data: Retained for up to twelve (12) months from collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jil8's data disposal procedures.

9. Data Security

jil8 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the jil8 Platform;
• Encryption of sensitive data at rest, including financial data and identity verification documents;
• Role-based access controls limiting access to personal data to authorised jil8 personnel on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform;
• Staff training on data protection obligations and information security best practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jil8 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Data Subjects without undue delay, in accordance with Section 20(f) of the DPA and NPC Circular No. 16-03.

10. Exercising Your Data Subject Rights

To exercise any of the data subject rights described in this Policy — including your rights of access, rectification, erasure, objection, and restriction — please submit a written request to jil8's Data Protection Officer using the contact details provided in Section 13.

jil8 will respond to all valid data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. In complex cases, this period may be extended by a further fifteen (15) business days, in which case jil8 will notify you of the extension and the reasons for it.

jil8 may request additional information to verify your identity before processing a data subject request, to ensure that personal data is not disclosed to unauthorised persons. jil8 will not charge a fee for processing data subject requests unless they are manifestly unfounded or excessive.

11. Children's Privacy

The jil8 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. jil8 does not knowingly collect personal data from individuals under the age of 21. If jil8 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

If you believe that jil8 may have inadvertently collected personal data from a minor, please contact the DPO immediately using the details in Section 13.

12. Changes to This Privacy Policy

jil8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The date of the most recent revision is indicated at the top of this document.

Where changes are material, jil8 will provide reasonable advance notice by posting the updated Policy on the Platform and, where practicable, by notifying registered players via email or in-platform notification. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the changes. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or jil8's processing of your personal data, please contact the jil8 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through the jil8 Platform — the fastest way to reach our support team
• Email: [email protected]
• DPO Email: [email protected]

If you are not satisfied with jil8's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint with the NPC is available on the NPC's official website.

Please note that all email addresses above are provided for informational purposes only and are displayed as plain text. They are not clickable links.