jilisaga Privacy
Policy

This Privacy Policy ("Policy") describes how jilisaga ("we," "us," "our," or "the Platform") collects, uses, stores, discloses, and protects the personal information of users ("you," "your," or "Player") who access or use the jilisaga website at https://jilisaga.app and all associated services, games, and features.

jilisaga is committed to protecting your privacy and handling your personal data with transparency, integrity, and respect. We recognize that Filipino players entrust us with sensitive information, and we take that responsibility seriously. This Policy is designed to give you a clear and honest picture of our data practices so you can make informed decisions about using the jilisaga platform.

This Policy applies to all personal data processed by jilisaga in connection with your use of the platform, regardless of whether you access jilisaga from a desktop browser, mobile browser, or any other device. It should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable data protection legislation, jilisaga acts as the Personal Information Controller (PIC) in respect of the personal data it collects from players and visitors to the platform.

As the Personal Information Controller, jilisaga determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data protection law.

Where jilisaga engages third-party service providers to process personal data on its behalf (for example, payment processors, identity verification providers, or analytics platforms), those parties act as Personal Information Processors (PIPs) and are bound by contractual obligations to process your data only in accordance with jilisaga's instructions and this Policy.

jilisaga collects the following categories of personal data from players and platform visitors. The specific data collected depends on how you interact with the platform:

jilisaga collects personal data through the following channels:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated technologies: Technical and usage data collected automatically when you access the jilisaga platform, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 9 for more details on cookies.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors, and fraud prevention services. jilisaga may also receive data from publicly available sources to verify the accuracy of information you have provided.
• Referral programs: If you were referred to jilisaga by another player or affiliate, we may receive limited information about the referral relationship from the referring party.

jilisaga processes your personal data only where there is a lawful basis for doing so under the Data Privacy Act of 2012. The following table sets out the primary purposes for which we process your data and the corresponding legal basis:

• Account creation and management: Processing is necessary for the performance of the contract between you and jilisaga (i.e., the Terms & Conditions you agreed to upon registration).
• Identity verification (KYC/AML): Processing is necessary for compliance with legal obligations under Philippine anti-money laundering regulations and PAGCOR licensing requirements.
• Processing deposits and withdrawals: Necessary for the performance of the contract and for compliance with financial regulations.
• Fraud prevention and platform security: Necessary for the legitimate interests of jilisaga in protecting the platform and its players from fraudulent activity.
• Customer support: Necessary for the performance of the contract and for jilisaga's legitimate interest in providing quality service.
• Responsible gaming monitoring: Necessary for compliance with legal obligations and for jilisaga's legitimate interest in player welfare.
• Marketing communications: Based on your explicit consent, which you may withdraw at any time through your account settings or by contacting support.
• Platform analytics and improvement: Based on jilisaga's legitimate interest in understanding how the platform is used and improving the player experience.

jilisaga does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and under strict data protection obligations:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers require transaction data to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable financial regulations.
• KYC and identity verification providers: Third-party services that assist jilisaga in verifying your identity and age as required by law. These providers process your identity documents under strict confidentiality agreements.
• Fraud prevention and security services: Providers that help jilisaga detect and prevent fraudulent activity, money laundering, and other illegal conduct on the platform.
• IT and hosting providers: Cloud infrastructure and hosting providers that store and process platform data on jilisaga's behalf, subject to data processing agreements.
• Regulatory and law enforcement authorities: jilisaga may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities in response to lawful requests, court orders, or regulatory requirements.
• Professional advisors: Lawyers, auditors, and other professional advisors who require access to data in the course of providing services to jilisaga, subject to professional confidentiality obligations.

jilisaga retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a period of five (5) years following account closure, in accordance with Philippine anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act (AMLA) and its implementing rules.
• KYC documents: Retained for the duration of your account and for five (5) years after account closure.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Technical and usage data: Typically retained for twelve (12) months in identifiable form, after which it may be anonymized and retained for analytical purposes.
• Marketing preferences: Retained until you withdraw your consent or close your account.

When personal data is no longer required, jilisaga will securely delete or anonymize it in accordance with our internal data disposal procedures.

jilisaga implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the jilisaga platform is encrypted using TLS (Transport Layer Security). Stored personal data is encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorized jilisaga personnel on a strict need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and regular security training.
• Two-factor authentication (2FA): jilisaga supports and encourages the use of 2FA for player accounts to provide an additional layer of security against unauthorized access.
• Regular security audits: jilisaga conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities in the platform.
• Incident response: jilisaga maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of RA 10173 and its Implementing Rules and Regulations.

jilisaga uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform, remember your preferences, and analyze how the platform is used. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, display preferences, and responsible gaming limits you have set. Disabling these may affect your experience.
• Analytics cookies: Help jilisaga understand how players use the platform — which games are most popular, where players encounter difficulties, and how the platform can be improved. Data collected is aggregated and anonymized where possible.
• Security and fraud prevention cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats on the platform.

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the jilisaga platform. jilisaga does not use cookies to serve third-party advertising.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by jilisaga:

• Right to be informed: You have the right to be informed about how your personal data is collected and processed. This Privacy Policy fulfills that obligation.
• Right of access: You may request a copy of the personal data jilisaga holds about you, along with information about how it is being processed.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account information directly through your account settings.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jilisaga's legal retention obligations.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to jilisaga's overriding legitimate grounds.
• Right to withdraw consent: Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact jilisaga's Data Protection Officer using the contact details in Section 14. We will respond to all verified requests within thirty (30) calendar days in accordance with RA 10173.

The jilisaga platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing online casino-style gaming. jilisaga does not knowingly collect personal data from individuals under the age of 21.

During the registration process, all players are required to confirm that they are at least 21 years of age. jilisaga reserves the right to request government-issued identification at any time to verify a player's age. If jilisaga discovers that personal data has been collected from a player who is under 21 years of age, the following steps will be taken immediately:

• The player's account will be suspended and access to the platform revoked.
• Any funds deposited by the underage player will be returned to the verified payment source.
• All personal data associated with the underage account will be securely deleted.
• The incident will be reported to relevant authorities where required by law.

jilisaga primarily stores and processes personal data within the Philippines. However, some of our third-party service providers — including cloud hosting providers, KYC verification services, and analytics platforms — may process data in other countries.

Where personal data is transferred outside the Philippines, jilisaga ensures that appropriate safeguards are in place to protect your data in accordance with RA 10173 and the standards set by the National Privacy Commission. These safeguards may include:

• Contractual clauses requiring the recipient to protect personal data to the same standard as required under Philippine law.
• Transfers to countries that have been assessed as providing an adequate level of data protection.
• Binding corporate rules where data is transferred within a corporate group.

By using the jilisaga platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.

jilisaga reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the jilisaga platform informing players of the update.
• Send an email notification to registered players where the changes are significant and affect their rights.

Your continued use of the jilisaga platform after any changes to this Privacy Policy have been posted constitutes your acceptance of the updated Policy. If you do not agree with the changes, you should stop using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how jilisaga is protecting your personal data. Previous versions of this Policy are available upon request.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way jilisaga handles your personal data, please contact our Data Protection Officer (DPO) using the details below:

• Data Protection Officer: jilisaga DPO
• Email: [email protected]
• Platform: https://jilisaga.app
• Operating Hours: Monday to Sunday, 9:00 AM – 11:00 PM (Philippine Standard Time)

jilisaga is committed to resolving all data privacy concerns promptly and fairly. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173.