jil90 Privacy Policy

This Privacy Policy ("Policy") describes how jil90 ("jil90", "we", "us", "our"), the operator of the online casino and sports betting platform accessible at jil90.app, collects, processes, stores, and protects the personal data of individuals who register for or use the jil90 Platform ("you", "your", "Player").

jil90 operates in the Philippines and takes the privacy rights of Filipino players seriously. This Policy is drafted in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines.

By creating a jil90 Account or by using any services on the jil90 Platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not consent to any part of this Policy, you must not register for or continue using the jil90 Platform.

This Policy should be read together with the jil90 Terms and Conditions, which are available at jil90.app/terms-conditions.

For the purposes of the Data Privacy Act of 2012, jil90 acts as the Personal Information Controller (PIC) with respect to all personal data collected through the jil90 Platform. As PIC, jil90 determines the purposes and means by which your personal data is processed.

jil90 has designated a Data Protection Officer (DPO) responsible for overseeing the Platform's compliance with RA 10173 and for handling all data-related inquiries, requests, and complaints from Players. The DPO may be contacted through the details provided in Section 16 of this Policy.

jil90 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect are as follows:

jil90 does not intentionally collect sensitive personal information beyond what is necessary for KYC and regulatory compliance. We do not collect data on racial or ethnic origin, religious beliefs, political affiliations, or health information beyond what may be incidentally disclosed in the context of responsible gaming tool usage.

jil90 collects personal data through the following channels and methods:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, participate in promotions, or respond to surveys;
• Automatically during Platform use: Technical data such as IP addresses, device identifiers, and session logs are collected automatically when you access the jil90 Platform through standard server-side logging and browser technologies;
• From payment service providers: Transaction confirmation data and payment reference information is received from GCash, Maya, BPI, BDO, Metrobank, and other approved payment processors as part of deposit and withdrawal processing;
• From identity verification services: Where jil90 employs third-party KYC verification technology, document authentication results may be received from such service providers;
• From fraud prevention and AML screening services: Risk assessment signals and screening results may be received from third-party compliance service providers for the purposes of anti-money laundering and fraud prevention.

jil90 processes your personal data on the following legal bases, as recognized under Republic Act No. 10173 and its IRR:

• Contractual Necessity: Processing is required to fulfill our obligations under the jil90 Terms and Conditions, including Account management, game provision, payment processing, and customer support;
• Legal Obligation: Processing is required to comply with applicable Philippine law, including AML and CTF regulations, gaming regulatory requirements, and tax obligations;
• Legitimate Interests: Processing is necessary for jil90's legitimate interests in fraud prevention, information security, platform optimization, and responsible gaming monitoring, where such interests are not overridden by your data protection rights;
• Consent: Where processing is based on your consent — such as the receipt of promotional communications — you may withdraw that consent at any time by contacting the jil90 DPO or updating your Account communication preferences.

jil90 processes personal data collected from Players for the following specific purposes:

• Creating, managing, and maintaining your jil90 Account;
• Verifying your identity and age (minimum 21 years) during registration and KYC processes;
• Processing deposits and withdrawals through approved Philippine payment channels;
• Administering bonuses, promotions, and the jil90 VIP Loyalty Program;
• Detecting, investigating, and preventing fraud, unauthorized account access, cheating, collusion, money laundering, and other prohibited activities;
• Monitoring gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour;
• Providing customer support and resolving disputes;
• Complying with applicable legal and regulatory requirements, including reporting obligations to relevant Philippine authorities;
• Improving the functionality, security, and performance of the jil90 Platform;
• Communicating with you regarding your Account, transactions, and relevant Platform updates.

jil90 shares personal data only with the following categories of recipients, and only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash, Maya (PayMaya), GrabPay, BPI, BDO, Metrobank, InstaPay, PesoNet, and 7-Eleven CLiQQ for transaction processing. These providers receive only the data required to process the specific payment transaction;
• Game Providers: Licensed third-party game providers whose games are offered on the jil90 Platform may receive anonymized or pseudonymized session data necessary to facilitate gameplay. Game providers do not receive directly identifying personal information beyond what is technically required for live game session management;
• Identity Verification Services: Third-party KYC and document verification providers engaged by jil90 receive identity documents and biometric data solely for the purpose of completing account verification;
• Fraud Prevention and AML Providers: Compliance and risk management service providers receive transaction data and behavioral signals for fraud detection and AML screening purposes;
• Regulatory and Law Enforcement Authorities: jil90 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory direction;
• Professional Advisors: Legal, audit, and accounting advisors engaged by jil90 may access personal data on a strictly confidential, need-to-know basis.

All third-party service providers engaged by jil90 are subject to contractual obligations to process personal data only on jil90's instructions and in accordance with applicable data protection law. jil90 does not permit service providers to use personal data for their own independent purposes.

jil90 is subject to anti-money laundering and counter-terrorism financing (AML/CTF) obligations under Philippine law. In fulfillment of these obligations, jil90 is required to collect, verify, and retain KYC documentation for all Players, and to monitor and report suspicious transactions to the relevant Philippine authorities, including the Anti-Money Laundering Council (AMLC).

KYC documentation and AML-related transaction records are retained for a minimum period of five (5) years from the date of the last transaction, or such longer period as may be required by applicable law. This retention is mandatory and cannot be waived by an individual Player's data deletion request.

jil90 uses cookies and similar tracking technologies on the jil90 Platform for the following purposes:

jil90 does not use third-party advertising or social media tracking cookies. No cookie data is shared with advertising networks or used to build behavioral advertising profiles. You may manage non-essential cookie preferences through your browser settings, subject to the limitation that disabling essential and security cookies will impair Platform functionality and account security.

jil90 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Active Account Data: Retained for the duration of the Account's active status plus six (6) months following Account closure, to allow for dispute resolution and final account reconciliation;
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of the last transaction, in compliance with AML regulatory requirements. This period may be extended where required by law or ongoing regulatory proceedings;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with Philippine financial record-keeping requirements;
• Customer Support Communications: Retained for three (3) years from the date of last communication, for dispute resolution purposes;
• Technical and Security Logs: Retained for twelve (12) months from the date of generation, unless required for ongoing investigation or legal proceedings.

Upon expiry of the applicable retention period, jil90 will securely delete or anonymize personal data such that it can no longer be associated with an identifiable individual.

jil90 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss. These measures include:

• Encryption: All data transmitted between your device and the jil90 Platform is encrypted using TLS 1.3 protocol. Passwords are stored as salted cryptographic hashes and are never stored in readable form;
• Access Controls: Personal data access within jil90 is restricted on a strict need-to-know basis. Staff and contractor access to Player data is role-based, logged, and subject to regular review;
• OTP Authentication: Account logins from new or unrecognized devices require one-time password (OTP) verification via your registered Philippine mobile number;
• Two-Factor Authentication: Optional 2FA is available to all Players for additional login security;
• Regular Security Assessments: jil90's systems are subject to regular internal security reviews and periodic third-party penetration testing;
• Incident Response: jil90 maintains a data breach response plan in accordance with NPC Circular requirements. In the event of a personal data breach that is likely to result in harm to affected Players, jil90 will notify the NPC and affected Players within the timeframes prescribed by applicable regulations.

Under Republic Act No. 10173 and its IRR, you have the following rights with respect to your personal data held by jil90. These rights may be exercised by contacting the jil90 Data Protection Officer as described in Section 16:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and shared, as described in this Policy;
• Right to Access: You have the right to request a copy of the personal data jil90 holds about you, together with information about how it is processed;
• Right to Correction (Rectification): You have the right to request the correction of any inaccurate, incomplete, or outdated personal data held in your Account;
• Right to Erasure (Right to be Forgotten): You have the right to request the deletion of your personal data, subject to jil90's legal retention obligations. Deletion requests cannot override mandatory retention requirements under AML law and gaming regulatory requirements;
• Right to Data Portability: You have the right to request a machine-readable copy of your Account data for transfer to another service, where technically feasible;
• Right to Object: You have the right to object to the processing of your personal data on grounds relating to your particular situation, where processing is based on jil90's legitimate interests;
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal;
• Right to Complain: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

jil90 will respond to all valid data rights requests within fifteen (15) business days of receipt, or within the period prescribed by applicable NPC regulations where a shorter period applies.

If jil90 becomes aware that personal data has been collected from an individual under the age of 21, such data will be deleted immediately and the associated Account will be closed. All funds deposited by an underage individual will be returned to the originating payment method after deduction of any amounts required for regulatory reporting purposes.

If you are a parent or guardian and believe that a minor in your care has registered a jil90 Account, please contact the jil90 Data Protection Officer immediately at [email protected].

jil90's primary systems are operated within or in connection with the Philippines. However, some third-party service providers engaged by jil90 — including certain game providers, cloud infrastructure providers, and compliance service providers — may process personal data in jurisdictions outside the Philippines.

Where such cross-border transfers occur, jil90 ensures that appropriate safeguards are in place to protect the personal data being transferred, in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular guidance on cross-border data transfers. These safeguards may include:

• Standard contractual clauses requiring the recipient to apply data protection standards equivalent to those under RA 10173;
• Transfers to jurisdictions recognized by the NPC as providing an adequate level of data protection;
• Explicit consent from the Player where required.

jil90 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The revised Policy will be published at jil90.app/privacy-policy, and the "Last Updated" date at the top of the page will be revised accordingly.

For material changes that significantly affect how we process your personal data, jil90 will notify registered Players by email to the address on record at least fourteen (14) days before the changes take effect. Your continued use of the jil90 Platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

For all privacy-related inquiries, data rights requests, or complaints regarding jil90's data processing practices, please contact the jil90 Data Protection Officer (DPO) through the following channels:

• Email: [email protected] — please use the subject line "Data Privacy Request — [Your Full Name]"
• Live Chat: Available 24 hours a day, 7 days a week, via the jil90 Account dashboard. Select "Privacy & Data" from the support topic menu.
• Response Time: jil90 will acknowledge all DPO requests within 3 business days and provide a substantive response within 15 business days, or within the shorter period prescribed by NPC regulations where applicable.

If you are not satisfied with jil90's response to your data rights request, or if you believe jil90 has violated your rights under RA 10173, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines.