jil17 Privacy Policy

This Privacy Policy ("Policy") describes how jil17 ("jil17," "we," "us," "our"), the operator of the online casino platform accessible at jil17.app, collects, uses, processes, stores, discloses, and protects the personal information of individuals ("you," "Player," "User") who register for or use the jil17 platform and associated services.

jil17 is committed to protecting the privacy and personal data of all Filipino players using our platform. We operate in full compliance with the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA"), its Implementing Rules and Regulations (IRR), and the circulars and advisories issued by the National Privacy Commission (NPC). We also comply with applicable data processing requirements under PAGCOR regulations and the Philippines Anti-Money Laundering Act (AMLA).

This Policy should be read together with jil17's Terms and Conditions, which are incorporated by reference. By creating or using a jil17 account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

For the purposes of the Philippines Data Privacy Act of 2012 and applicable data protection regulations, jil17 is the Personal Information Controller (PIC) responsible for your personal data collected through the jil17 platform.

jil17 has designated a Data Protection Officer (DPO) who is responsible for overseeing jil17's compliance with applicable data privacy laws and regulations, managing data subject rights requests, and coordinating with the National Privacy Commission where required. Contact details for jil17's DPO are provided in Section 15 of this Policy.

jil17 is registered with the National Privacy Commission in accordance with the registration requirements for personal information controllers under the DPA and its implementing regulations.

jil17 collects personal data in three primary ways: information you provide directly, information generated automatically through your use of the platform, and information obtained from third parties in connection with payment processing and identity verification.

jil17 does not knowingly collect sensitive personal information beyond what is necessary for identity verification (government ID data), unless separately required by PAGCOR AML compliance processes. We do not collect racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, or biometric data for identification purposes.

jil17 processes your personal data only for the following specified, legitimate purposes:

1. Account Registration and Management: To create and maintain your jil17 account, verify your identity through KYC, authenticate your login sessions, and manage account settings and preferences.
2. Platform Service Delivery: To provide access to jil17's game library, process bets and game results, credit and debit your account balance, and deliver the full range of jil17 casino services.
3. Payment Processing: To process GCash, Maya, BPI, BDO, Metrobank, and card deposits and withdrawals, verify payment instrument ownership, and maintain transaction records required under Philippine financial regulations.
4. PAGCOR Regulatory Compliance: To comply with all licensing conditions imposed by PAGCOR, including player identity verification, responsible gaming obligations, and mandatory record-keeping requirements.
5. Anti-Money Laundering (AML) Compliance: To fulfill obligations under the Philippines Anti-Money Laundering Act, including transaction monitoring, suspicious transaction reporting, and customer due diligence processes.
6. Responsible Gaming: To administer deposit limits, loss limits, self-exclusion requests, and session time reminders. To cross-reference with PAGCOR's exclusion register and to identify and support players showing patterns of problematic gambling.
7. Fraud Prevention and Security: To detect and prevent fraudulent activity, account takeover attempts, bonus abuse, and other prohibited conduct as described in jil17's Terms and Conditions.
8. Customer Support: To respond to player inquiries, resolve disputes, process complaints, and improve the quality of jil17's support services.
9. Platform Improvement: To analyze aggregate gameplay and usage data (in anonymized or pseudonymized form) to improve platform features, performance, and user experience.
10. Marketing Communications: To send promotional offers, bonus notifications, and platform updates to players who have consented to receive such communications. Players may withdraw this consent at any time through account settings.

jil17 processes your personal data on the following legal bases recognized under the Philippines Data Privacy Act of 2012:

1. Contract Performance: Processing necessary to fulfill jil17's obligations under the account agreement with you — including service delivery, payment processing, and account management.
2. Legal Obligation: Processing required to comply with PAGCOR licensing requirements, AMLA obligations, NPC registration requirements, and other mandatory Philippine legal obligations applicable to licensed online casino operators.
3. Legitimate Interests: Processing necessary for jil17's legitimate interests in operating a secure, fraud-free platform — including security monitoring, fraud detection, and responsible gaming oversight — provided such interests are not overridden by your fundamental rights.
4. Consent: Processing for purposes beyond the above bases, including marketing communications, is based on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing before withdrawal.

jil17 does not sell, rent, or trade your personal information to third parties for commercial purposes. We may share your data only in the following strictly defined circumstances:

jil17 engages third-party service providers who process personal data on our behalf as Personal Information Processors (PIPs) under the DPA. These include: payment processors (GCash/GXI, Maya/PayMaya, BPI, BDO, Metrobank, Visa/Mastercard networks), KYC identity verification providers, cloud infrastructure providers, fraud detection systems, and customer support platform providers. All PIPs are contractually bound to process data only on jil17's instructions, maintain appropriate security measures, and comply with Philippine data privacy law.

Game providers including JILI and other licensed studios may receive anonymized session and gameplay data necessary to deliver, debug, and improve their games on the jil17 platform. Game providers do not receive personally identifiable information beyond what is technically necessary for game delivery.

jil17 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and courts of competent jurisdiction in the Philippines, where required by law, court order, PAGCOR licensing condition, or legitimate regulatory investigation. Such disclosures are made only to the extent required by the applicable legal obligation.

In the event of a merger, acquisition, asset sale, or corporate restructuring involving jil17, personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. Affected players will be notified in advance of any such transfer affecting their personal data rights.

jil17 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and to comply with applicable legal, regulatory, and contractual obligations. Specific retention periods are as follows:

1. Active Account Data: Retained for the duration of your active jil17 account relationship plus a mandatory post-closure retention period.
2. KYC Identity Documents: Retained for a minimum of 5 years from account closure, as required by PAGCOR licensing conditions and Philippine AML regulations.
3. Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, in compliance with AMLA record-keeping requirements.
4. Communication and Support Records: Retained for 3 years from the date of the communication, to support dispute resolution and regulatory investigation if required.
5. Marketing Consent Records: Retained until you withdraw consent, plus a reasonable period thereafter as evidence of consent management compliance.
6. Security and Fraud Logs: Retained for up to 2 years for security monitoring and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized using industry-standard data destruction methods.

jil17 implements a comprehensive set of technical and organizational security measures to protect your personal data from unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

1. Transport Encryption: All data transmitted between your device and jil17 is protected by TLS 1.2 or higher (256-bit SSL) encryption. The jil17.app domain maintains an up-to-date SSL certificate verifiable through your browser's security indicator.
2. Data Encryption at Rest: Sensitive personal data including government ID documents, financial identifiers, and authentication credentials are stored in encrypted form using AES-256 encryption.
3. Access Controls: Access to personal data systems is restricted on a strict need-to-know basis. jil17 staff access to player personal data is role-based, logged, and subject to regular access review.
4. Two-Factor Authentication: jil17 offers 2FA for player account access and enforces 2FA for all internal administrative systems that process personal data.
5. Regular Security Audits: jil17 undergoes regular security assessments including penetration testing and vulnerability scanning conducted by independent security professionals.
6. Data Minimization: jil17 systems are designed to collect and retain only the minimum personal data necessary for each specific processing purpose.

While jil17 applies industry-standard security measures, no data transmission or storage system can be guaranteed absolutely secure. You are encouraged to use strong, unique passwords for your jil17 account and to enable two-factor authentication to reduce the risk of unauthorized account access.

jil17 uses cookies and similar tracking technologies to operate the platform, maintain your session, remember your preferences, analyze usage patterns, and deliver relevant content. The categories of cookies used by jil17 are:

1. Strictly Necessary Cookies: Essential for the basic operation of jil17.app — including maintaining your login session, processing transactions, and delivering platform security features. These cannot be disabled without affecting platform functionality.
2. Functional Cookies: Remember your preferences such as language settings, preferred games, and display options to improve your experience across sessions.
3. Analytics Cookies: Collect anonymized data about how players use jil17 to help us improve platform performance and user experience. These cookies track aggregate usage patterns, not individual player behavior for profiling purposes.
4. Security Cookies: Used to detect and prevent fraudulent sessions, unauthorized access attempts, and bot activity on the platform.

jil17 does not use third-party advertising cookies or behavioral tracking cookies for the purpose of delivering targeted advertisements to players or sharing behavioral data with advertising networks.

You may configure your browser settings to refuse or delete cookies. Note that disabling strictly necessary cookies will affect your ability to use core jil17 platform features. For mobile browser cookie management, refer to your specific browser's settings menu.

Under the Philippines Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by jil17:

To exercise any of these rights, please contact jil17's Data Protection Officer using the contact details in Section 15. jil17 will respond to verified data subject requests within 15 business days of receipt, as required by the DPA. We may need to verify your identity before processing a data rights request.

jil17 is strictly a platform for adults. Under PAGCOR regulations, only individuals who are 21 years of age or older are permitted to register and use the jil17 platform. jil17 does not knowingly collect personal data from individuals under 21 years of age.

Age is verified through mandatory KYC identity verification using valid Philippine government-issued identification documents at the time of account registration. jil17 may conduct additional age verification checks at any time where age eligibility is in question.

If jil17 discovers that personal data has been collected from an individual under 21 years of age, the account will be immediately suspended, any balance will be returned to the source payment method, and the personal data will be deleted in accordance with the DPA, except to the extent that retention is required by applicable law to record the violation.

Parents or guardians who believe their minor child may have registered a jil17 account should contact jil17's support team via live chat or the DPO contact in Section 15 immediately.

In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, jil17 will:

1. Notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in compliance with DPA Section 20(f) and NPC Circular 16-03;
2. Notify affected players directly within 72 hours via their registered mobile number and email address where the breach is likely to result in a high risk to their rights and freedoms;
3. Take immediate containment and remediation actions to stop the breach, secure affected systems, and prevent further unauthorized access;
4. Conduct a full post-breach investigation and implement improvements to prevent recurrence;
5. Maintain a documented record of all data breaches, including those that do not require NPC or player notification, for internal accountability purposes.

jil17's breach notification to affected players will include: a description of the nature of the breach, the categories and approximate number of records affected, the likely consequences, the measures taken or proposed to address the breach, and the contact details of jil17's DPO.

jil17 primarily processes and stores personal data within systems accessible from the Philippines. Where the use of international service providers (including cloud infrastructure, game platform providers, or KYC verification services) requires transfer of personal data to servers or processors outside the Philippines, jil17 ensures that such transfers comply with the requirements of the Philippines Data Privacy Act.

Cross-border transfers of personal data by jil17 are made only where:

1. The receiving country or territory has been deemed to provide an adequate level of data protection; or
2. The receiving Personal Information Processor has executed data processing agreements incorporating appropriate safeguards, including standard contractual clauses aligned with Philippine DPA requirements; or
3. The transfer is necessary for the performance of the contract between jil17 and you (for example, processing a payment via an international card network).

Specific cross-border transfer arrangements are documented in jil17's Data Protection Impact Assessments and available for review by the NPC upon request.

jil17 reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or regulatory requirements. When changes are material, jil17 will provide advance notice to registered players via their registered mobile number or email address, or via a prominent notice on the jil17 platform, at least 15 days before the revised Policy takes effect.

The effective date at the top of this Policy indicates when the current version came into effect. Your continued use of jil17 after the effective date of any amendment constitutes your acknowledgment of and agreement to the updated Policy.

Where amendments relate to new processing purposes that require your consent, jil17 will seek your fresh consent before commencing the new processing. You are not obligated to provide that consent; however, if the new processing is necessary for continued service delivery, jil17 may not be able to continue providing certain services if consent is withheld.

For all matters relating to this Privacy Policy, including exercising your data subject rights, raising a privacy concern, or requesting information about jil17's data processing practices, please contact jil17's Data Protection Officer:

jil17 aims to acknowledge all privacy inquiries within 3 business days and to resolve data subject rights requests within 15 business days of receipt and identity verification. For complex requests, jil17 will communicate the expected resolution timeline at the time of acknowledgment.

If you are not satisfied with jil17's response to a privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission at privacy.gov.ph.

This Privacy Policy was last reviewed and updated on January 1, 2026, and supersedes all prior versions of jil17's Privacy Policy.