jiliasa Privacy Policy

01Who We Are (Data Controller)

jiliasa ("jiliasa," "we," "us," "our") is the data controller responsible for your personal data collected through the jiliasa online gaming platform at jiliasa.com. jiliasa operates under a PAGCOR e-Games license and is subject to the data protection framework established by the National Privacy Commission (NPC) of the Philippines under Republic Act No. 10173, also known as the Data Privacy Act of 2012.

This Privacy Policy applies to all personal data processed by jiliasa in connection with your use of the Platform, including registration, account management, deposits, withdrawals, gameplay, and customer support interactions.

02Personal Data We Collect

jiliasa collects personal data through the following channels: registration forms, identity verification submissions, payment transactions, gameplay activity, customer support interactions, and automated technical data collection. The categories of data collected include:

03How jiliasa Uses Your Personal Data

jiliasa processes your personal data for the following specific purposes:

• Account creation and management — to register and maintain your jiliasa account.
• Identity verification (KYC) — to comply with PAGCOR licensing requirements and the Anti-Money Laundering Act (AMLA).
• Payment processing — to facilitate deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank.
• Game provision and personalization — to deliver gameplay, remember game preferences, and recommend relevant titles.
• Responsible gaming — to monitor gaming behavior, enforce deposit and session limits, and respond to self-exclusion requests.
• Fraud prevention and security — to detect and prevent unauthorized access, duplicate accounts, and money laundering.
• Customer support — to respond to your inquiries and resolve complaints.
• Legal and regulatory compliance — to fulfill obligations under PAGCOR, AMLC, and NPC regulations.
• Marketing communications — to send you promotional offers and updates, only where you have provided explicit consent and have not opted out.

04Legal Bases for Processing

Under the Data Privacy Act of 2012, jiliasa relies on the following legal bases for processing your personal data:

• Contractual necessity — processing required to perform the contract between you and jiliasa (account management, payments, game provision).
• Legal obligation — processing required to comply with PAGCOR, AMLC, and NPC regulations.
• Legitimate interests — fraud prevention, platform security, and internal analytics, balanced against your privacy rights.
• Consent — marketing communications and non-essential cookies, where you have provided explicit, freely given consent.

05Disclosure & Data Sharing

jiliasa does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and under appropriate data processing agreements:

• Payment processors — GCash (G-Xchange Inc.), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank, for transaction processing.
• Game providers — licensed game studios (e.g., JILI, Pragmatic Play) to deliver game content. These providers receive only the session token necessary to authenticate gameplay — not your full profile.
• Identity verification services — third-party KYC vendors used to verify government-issued IDs.
• Regulatory authorities — PAGCOR, AMLC, the NPC, and law enforcement agencies, where disclosure is required by law or court order.
• IT and hosting providers — cloud infrastructure and cybersecurity service providers operating under strict data processing agreements.

06Cookies & Tracking Technologies

jiliasa uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us operate the Platform, remember your preferences, and analyze usage patterns. We use the following categories of cookies:

• Strictly necessary cookies — essential for Platform functionality (session management, login state). These cannot be disabled.
• Performance cookies — anonymous analytics data (page load times, error rates) used to improve Platform performance.
• Functional cookies — remembering your language preference, game lobby filters, and display settings.
• Marketing cookies — used to measure the effectiveness of promotional campaigns. Activated only with your consent.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect Platform functionality.

07Data Retention

jiliasa retains personal data for the following periods, after which data is securely deleted or anonymized:

• Active account data — retained for the duration of your account and for 5 years following account closure, as required by AMLC record-keeping obligations.
• Transaction records — retained for 5 years from the date of the transaction, per AMLC requirements.
• KYC/identity documents — retained for 5 years after account closure.
• Gaming activity logs — retained for 3 years from the date of the session.
• Customer support records — retained for 2 years from the date of resolution.
• Marketing consent records — retained until consent is withdrawn, plus 1 year for compliance documentation.

08Security Measures

jiliasa implements technical and organizational security measures proportionate to the risks associated with processing your personal data. These include:

• AES-256 encryption for data stored at rest; TLS 1.3 for data in transit.
• Role-based access controls ensuring only authorized personnel access personal data.
• Regular penetration testing and vulnerability assessments by independent security firms.
• Multi-factor authentication required for all jiliasa administrative systems.
• Employee data protection training conducted annually.
• Incident response procedures aligned with NPC notification requirements.

09Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jiliasa. To exercise any of these rights, submit a written request to [email protected] with the subject line "Data Subject Rights Request." jiliasa will respond within 15 business days.

10Children's Privacy (Under 21)

jiliasa's Platform is strictly restricted to individuals aged 21 years and above. jiliasa does not knowingly collect personal data from individuals below the age of 21. If jiliasa discovers that personal data has been collected from an individual below the required age, that data will be deleted and the account closed immediately. If you believe a minor has registered with jiliasa, please contact us at [email protected] immediately.

11Cross-Border Data Transfers

Some of jiliasa's third-party service providers (including certain game providers and cloud infrastructure partners) may process personal data outside the Philippines. Where such transfers occur, jiliasa ensures that adequate safeguards are in place, including contractual clauses that impose data protection obligations equivalent to those required under Philippine law, as recognized by the NPC.

12Changes to This Privacy Policy

jiliasa may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. Material changes will be communicated to registered players via email or an in-platform notification at least 7 days before the changes take effect. The "Effective Date" at the top of this page will be updated accordingly. Continued use of the jiliasa Platform after the effective date constitutes acceptance of the revised policy.

13Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the jiliasa Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated. The NPC can be reached through their official government website.