jili256 Privacy Policy — How We Handle Your Data

1 Introduction

jili256 ("we", "us", "our", or "the Platform") is committed to protecting the privacy and personal data of every player who accesses our online casino, sports betting, bingo, and gaming services. This Privacy Policy describes our practices in relation to the collection, use, storage, disclosure, and protection of personal data in full compliance with the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

By registering a jili256 account, completing the jili256 Login, making a deposit via GCash or any other supported payment method, or otherwise accessing any feature of jili256, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

If you are a player located in the Philippines and have questions about how your data is handled, please contact our Data Protection Officer (DPO) using the details provided in Section 13 of this Policy.

2 Data We Collect

jili256 collects personal data through multiple touchpoints across the Platform. The categories of data we collect, and the specific data points within each category, are described in the table below:

2.1 Data You Provide Directly

The majority of personal data we hold is information you provide directly — either when registering your jili256 account, completing KYC identity verification, making a payment, contacting our support team, or updating your account preferences.

2.2 Data We Collect Automatically

When you access jili256, our servers and analytics systems automatically record technical data about your session. This includes your IP address (used for geolocation and fraud detection), device identifiers, and gameplay data generated by your in-session activity. This data is collected regardless of whether you are logged into a jili256 account or browsing as a guest.

2.3 Data From Third Parties

jili256 may receive personal data about you from third-party sources in limited circumstances. These include identity verification partners (who confirm the authenticity of ID documents), payment processors (who confirm successful GCash or bank transfer transactions), and fraud prevention agencies. All third-party data providers are contractually bound to share data with jili256 only in compliance with applicable Philippine data privacy laws.

3 How We Use Your Data

jili256 uses your personal data for the following purposes. Each purpose is tied to a lawful basis, which is detailed in Section 4:

• Account Creation and Management: To register your jili256 account, authenticate your jili256 Login sessions, and maintain your account records, PHP wallet balance, and gaming history;
• Identity Verification (KYC): To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations and the Philippines' Anti-Money Laundering Act (AMLA), and to prevent underage gambling and fraudulent account creation;
• Payment Processing: To process your GCash, PayMaya, BPI, BDO, and Metrobank deposits and withdrawals, to match transactions to your PHP wallet, and to ensure that withdrawals are paid only to payment methods registered in your name;
• Game Delivery and Integrity: To provide you with access to jili256's full game library — including JILI slots, live casino, bingo, and sports betting — and to maintain the integrity and fairness of all game outcomes;
• Customer Support: To respond to your queries, complaints, and disputes via live chat and email, and to maintain records of our communications for quality assurance and dispute resolution purposes;
• Responsible Gaming: To monitor your gaming activity for indicators of problematic gambling behaviour, to enforce the responsible gaming tools you have set (deposit limits, session limits, self-exclusion), and to contact you proactively if we identify signs of potential gambling harm;
• Fraud Prevention and Security: To detect and prevent fraudulent activity, account takeover attempts, bonus abuse, money laundering, and other prohibited conduct described in the jili256 Terms & Conditions;
• Legal and Regulatory Compliance: To comply with our obligations under Philippine law, PAGCOR licensing conditions, Anti-Money Laundering Council (AMLC) reporting requirements, and any lawful requests from competent Philippine authorities;
• Marketing Communications: To send you personalised promotions, bonus offers, tournament invitations, and platform updates — but only where you have provided your express opt-in consent and have not subsequently withdrawn it.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, jili256 must have a lawful basis for each type of personal data processing it undertakes. The following lawful bases apply to jili256's data processing activities:

• Performance of a Contract: Processing your identity data, contact data, and financial data is necessary to open and maintain your jili256 account and to deliver the gaming services you have signed up for. Without this processing, jili256 cannot provide you with a functional account.
• Compliance with a Legal Obligation: Processing for KYC verification, AMLC reporting, age verification, and responses to lawful requests from PAGCOR or other Philippine authorities is required by law. jili256 cannot lawfully operate without performing this processing.
• Legitimate Interests: Processing for fraud prevention, platform security, gameplay integrity monitoring, and responsible gaming activity monitoring is conducted on the basis of jili256's legitimate interest in operating a safe, fair, and legally compliant gaming platform. We have assessed that these legitimate interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications (email, SMS, push notifications) is conducted only on the basis of your freely given, informed, and unambiguous consent. You may withdraw this consent at any time through your account settings or by contacting our support team.

5 Data Sharing & Third Parties

5.1 Service Providers

jili256 engages third-party service providers to support the delivery of our platform. These include cloud hosting and infrastructure providers, identity verification and KYC service providers, payment gateway operators (for GCash, PayMaya, and bank transfers), customer support platform providers, and fraud detection and cybersecurity service providers. All service providers are engaged under data processing agreements that restrict their use of your data to the specific services they provide to jili256.

5.2 Game Content Providers

jili256 partners with JILI Technology Corp. and other licensed game studios to deliver game content on the Platform. Certain technical and gaming activity data — such as session identifiers and wager amounts — may be transmitted to game providers' servers for the purpose of delivering game outcomes and calculating RTP. Game providers do not receive your identity data or financial data.

5.3 Regulatory and Law Enforcement Bodies

jili256 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities when required to do so by law, regulatory directive, court order, or other lawful authority. jili256 will not disclose more data than is required to satisfy the lawful request.

5.4 Corporate Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of jili256's business, your personal data may be transferred to the acquiring entity as part of the transaction. You will be notified of any such transfer and the privacy implications via a prominent notice on the jili256 platform at least 30 days before the transfer takes effect, or within the timeframe required by applicable law.

6 Cookies & Tracking Technologies

jili256 uses cookies and similar tracking technologies to provide you with a functional, personalised, and secure platform experience. A cookie is a small text file stored on your device by your browser when you visit jili256. The following categories of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the operation of jili256. They enable core functions such as your jili256 Login session, PHP wallet access, and game loading. You cannot opt out of strictly necessary cookies without disabling the Platform entirely.
• Functional Cookies: These cookies remember your preferences — such as your chosen language, notification settings, and responsible gaming configurations — so that you do not have to re-enter them on every visit.
• Analytics Cookies: jili256 uses internal analytics cookies to understand how players navigate the Platform, which games are most popular, and where technical issues may be occurring. This data is used in aggregate and is not linked to your individual identity without your consent.
• Security Cookies: These cookies support fraud detection and session integrity verification by identifying unusual login patterns, device changes, or suspicious wagering activity that may indicate account compromise or bonus abuse.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of jili256 and your ability to access game content or manage your PHP wallet.

7 Data Security

jili256 implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and jili256's servers is encrypted using TLS 1.2 or higher. This applies to jili256 Login sessions, game data, payment transactions, and support communications.
• Segregated Player Funds: PHP wallet balances are maintained in accounts that are segregated from jili256's operational funds, providing an additional layer of financial protection for player deposits.
• Access Controls: Access to systems containing personal data is restricted to jili256 personnel who require it to perform their job functions. All staff with access to player data undergo regular privacy and security training.
• Intrusion Detection and Monitoring: jili256 operates 24/7 monitoring systems that detect and respond to suspicious access attempts, anomalous transaction patterns, and potential security incidents in real time.
• Data Breach Response: In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected players, jili256 will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act of 2012 and its Implementing Rules.

While jili256 takes all reasonable steps to secure your personal data, no internet-based system can guarantee absolute security. You also play a role in keeping your data safe — please use a strong, unique password for your jili256 Login and never share your credentials with anyone.

8 Data Retention

jili256 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by Philippine law. The following general retention periods apply:

• Active Account Data: Personal data associated with an active jili256 account is retained for the lifetime of the account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Philippines' Anti-Money Laundering Act.
• KYC and Identity Verification Documents: Copies of identity documents submitted during KYC verification are retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, as required by AMLC regulations.
• Transaction Records: Deposit, withdrawal, and gaming transaction records are retained for a minimum of five (5) years in compliance with financial record-keeping obligations under Philippine law.
• Support and Communications Records: Live chat transcripts, email correspondence, and support ticket records are retained for a minimum of two (2) years from the date of the interaction.
• Marketing Data: Records of your marketing consent and associated contact data are retained for the duration of your consent plus two (2) years, or until you withdraw consent, whichever occurs first.

Upon the expiry of the applicable retention period, personal data is securely and permanently deleted from jili256 systems, or rendered anonymous in a manner that makes re-identification impossible. Requests for early deletion are handled in accordance with your data subject rights as described in Section 9.

9 Your Data Subject Rights

• Right to Be Informed: You have the right to be informed about how jili256 collects and processes your personal data. This Privacy Policy is the primary vehicle through which jili256 fulfils this obligation.
• Right to Access: You have the right to request a copy of the personal data jili256 holds about you. jili256 will provide this data in a structured, commonly used format within 15 business days of a verified request.
• Right to Rectification: If any personal data jili256 holds about you is inaccurate, incomplete, or outdated, you have the right to request its correction. Many data points — such as your contact email or mobile number — can be updated directly through your jili256 account settings.
• Right to Erasure (Right to Be Forgotten): You have the right to request the deletion of your personal data from jili256 systems. This right is subject to applicable legal retention obligations — jili256 cannot delete data that it is required to retain by Philippine law (e.g., AMLC transaction records) or that is necessary to defend against a pending legal claim.
• Right to Data Portability: You have the right to receive the personal data you have provided to jili256 in a structured, machine-readable format, and to transmit that data to another data controller where technically feasible.
• Right to Object: You have the right to object to jili256 processing your personal data for direct marketing purposes at any time. You also have the right to object to processing based on legitimate interests where you believe your rights override those interests.
• Right to Restrict Processing: In certain circumstances — such as when you have contested the accuracy of your data or objected to processing — you may request that jili256 restrict processing of your personal data pending resolution of the issue.
• Right to Lodge a Complaint: If you believe jili256 has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines.

10 Children's Privacy

If jili256 discovers or is notified that personal data has been collected from a person under the age of 21, that account will be immediately closed and all associated personal data will be deleted from jili256 systems as promptly as is legally permissible. Any deposits held in such an account will be returned via the original payment method following verification.

If you are a parent or guardian and believe your child has registered a jili256 account in violation of this age restriction, please contact our Data Protection Officer immediately using the contact details provided in Section 13 of this Policy.

11 International Data Transfers

jili256 primarily stores and processes player data on servers located within or serving the Philippine market. In certain circumstances, personal data may be transferred to or processed by service providers operating in other jurisdictions — for example, cloud infrastructure providers or game content providers whose servers may be located outside the Philippines.

Where personal data is transferred internationally, jili256 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Data Privacy Act of 2012. These safeguards include contractual data protection clauses binding the recipient to processing your data only in accordance with Philippine data privacy standards, and due diligence assessments of the data protection laws applicable in the recipient jurisdiction.

jili256 will not transfer your personal data to a country or territory that the National Privacy Commission has determined does not provide an adequate level of protection for personal data without first implementing appropriate additional safeguards and, where required, obtaining your prior consent.

12 Changes to This Privacy Policy

jili256 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law or NPC guidance, or changes in the services we offer on the Platform. When material changes are made to this Policy, jili256 will:

• Update the "Last Updated" date at the top of this page;
• Notify active account holders via email or in-platform notification at least seven (7) days before the revised Policy takes effect, except where an immediate update is required by law or regulatory directive;
• In cases of significant changes to how we use your data or to your rights, seek your renewed consent where that consent is required as the lawful basis for the affected processing.

Your continued use of jili256 following the effective date of a revised Privacy Policy constitutes your acknowledgement of the changes. The most current version of this Policy is always accessible at jili256.net/privacy-policy.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or jili256's handling of your personal data, please contact our dedicated Data Protection Officer (DPO). jili256 has appointed a DPO in compliance with the Data Privacy Act of 2012 and NPC Circular 16-01.

If you are not satisfied with jili256's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.