jiliday Privacy Policy

1.1 jiliday takes the privacy and security of your personal data seriously. This Policy is designed to give you a clear and honest picture of how your data is handled from the moment you visit jiliday.club through the entire lifecycle of your account.

1.2 This Policy applies to all personal data collected through the jiliday website, mobile platform, customer support channels, and any other touchpoint through which you interact with jiliday. It covers data collected both online and, where applicable, offline.

1.3 By registering a jiliday account, using the jiliday platform, or otherwise providing your personal data to us, you consent to the collection, use, and processing of your personal data as described in this Policy. If you do not agree with any part of this Policy, you should discontinue use of the jiliday platform and may request account closure in accordance with our Terms & Conditions.

1.4 This Policy should be read together with jiliday's Terms & Conditions, which govern your use of the platform as a whole.

2.1 jiliday is the operator of jiliday.club, an online gaming platform offering casino games, slots, bingo, live dealer games, and sports betting services to eligible players in the Philippines.

2.2 For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), jiliday acts as the Personal Information Controller in respect of the personal data it collects directly from players and visitors to jiliday.club.

2.3 jiliday has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with RA 10173 and this Policy. Contact details for the DPO are provided in Section 15 of this Policy.

2.4 Where jiliday engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification providers), those providers act as Personal Information Processors and are contractually bound to process data only in accordance with jiliday's instructions and applicable Philippine data privacy law.

3.1 jiliday collects the following categories of personal data from players and platform visitors:

3.2 jiliday does not intentionally collect sensitive personal information as defined under RA 10173 (such as health data, religious beliefs, or political affiliations) unless specifically required for regulatory compliance purposes, in which case your explicit consent will be sought.

4.1 jiliday collects personal data through the following means:

• Direct interactions: Data you provide when registering a jiliday account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical data collected automatically when you access jiliday.club, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 7 for more details on cookies.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention services. jiliday only receives data from third parties where you have authorized that third party to share your data, or where jiliday is legally entitled to receive it.
• Regulatory sources: Data received from PAGCOR, AMLC, or other Philippine regulatory authorities in connection with compliance obligations.

4.2 Where jiliday collects personal data from third-party sources, we will inform you of this and of the source of the data at the earliest practicable opportunity, unless doing so would prejudice an ongoing regulatory or fraud investigation.

5.1 jiliday processes your personal data for the following purposes, each supported by a lawful basis under RA 10173:

5.2 Where jiliday relies on your consent as the legal basis for processing (for example, for marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5.3 Where jiliday relies on legitimate interest as the legal basis for processing, we have assessed that our legitimate interests are not overridden by your rights and interests as a data subject. You may object to processing based on legitimate interest by contacting our DPO.

6.1 jiliday does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Your data is shared only in the following circumstances:

• Service Providers: jiliday engages trusted third-party service providers to assist in operating the platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, fraud detection services, cloud hosting providers, and customer support software providers. These providers are contractually bound to process your data only on jiliday's instructions and in compliance with RA 10173.
• Regulatory Authorities: jiliday is required by Philippine law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities upon lawful request or as required by our operating license conditions.
• Legal Proceedings: jiliday may disclose personal data where required to do so by a court order, subpoena, or other lawful legal process issued by a Philippine court or competent authority.
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of jiliday's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.
• With Your Consent: jiliday may share your data with other third parties where you have given your explicit prior consent to such sharing.

7.1 jiliday uses cookies and similar tracking technologies (such as web beacons and local storage) on jiliday.club to enhance your experience, maintain your session, and analyze platform usage. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of jiliday.club. These cookies enable core functions such as keeping you logged in to your jiliday account, maintaining your session security, and processing transactions. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming configurations. These cookies improve your experience but are not strictly required for the platform to operate.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use jiliday.club, including which pages are visited most frequently and how long sessions last. This data helps jiliday improve the platform. Analytics data is not linked to your individual identity.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on jiliday.club.

7.2 You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of jiliday.club. Instructions for managing cookies are available in the help documentation of your browser.

7.3 jiliday does not use third-party advertising cookies or behavioral tracking cookies for the purpose of serving targeted advertisements on other websites.

8.1 jiliday retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

8.2 The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active jiliday account, and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLC anti-money laundering regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC record-keeping requirements.
• Gaming History: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last communication, for quality assurance and dispute resolution purposes.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, whichever is earlier.
• Technical and Log Data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.

8.3 Upon expiry of the applicable retention period, jiliday will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless retention is required by a specific legal obligation or ongoing legal proceedings.

9.1 jiliday implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and jiliday.club
• Encryption of sensitive data at rest, including financial data and identity documents
• Role-based access controls limiting internal access to personal data to authorized personnel only
• Regular security assessments and penetration testing of the jiliday platform
• Multi-factor authentication requirements for internal systems that process personal data
• Incident response procedures for detecting, reporting, and managing personal data breaches

9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jiliday will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by RA 10173. Where the breach is likely to result in a high risk to you personally, jiliday will also notify you directly without undue delay.

9.3 While jiliday takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your jiliday login credentials and for notifying jiliday immediately if you suspect unauthorized access to your account.

10.1 Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by jiliday:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data jiliday holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data jiliday holds about you. You can update most account information directly through your jiliday account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jiliday's legal retention obligations (see Section 8).
• Right to Object: You have the right to object to the processing of your personal data where jiliday relies on legitimate interest as the legal basis, or where your data is being processed for direct marketing purposes.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that jiliday transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe jiliday has violated your data privacy rights under RA 10173.

10.2 To exercise any of the above rights, please contact jiliday's Data Protection Officer using the contact details provided in Section 15. jiliday will respond to all valid data subject requests within thirty (30) days of receipt. Complex requests may require up to sixty (60) days, in which case jiliday will notify you of the extended timeline.

10.3 jiliday may need to verify your identity before processing a data subject request to ensure that personal data is not disclosed to unauthorized parties. You may be asked to provide a copy of a valid government-issued ID as part of this verification process.

11.1 jiliday's platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. jiliday does not knowingly collect personal data from individuals under the age of 21.

11.2 If jiliday becomes aware that personal data has been collected from a person under the age of 21, it will take immediate steps to delete that data and close the associated account. Any deposits made by an underage player will be returned to the payment method used, subject to verification.

11.3 If you are a parent or guardian and believe that your child or a minor in your care has registered a jiliday account or provided personal data to jiliday, please contact our support team immediately so that we can take appropriate action.

12.1 jiliday primarily processes and stores personal data within the Philippines. However, some of jiliday's third-party service providers (such as cloud hosting providers or software vendors) may process data in jurisdictions outside the Philippines.

12.2 Where personal data is transferred outside the Philippines, jiliday ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173. These safeguards may include:

• Contractual clauses requiring the recipient to process data in accordance with RA 10173 standards
• Transfers to jurisdictions recognized by the National Privacy Commission as providing adequate data protection
• Binding corporate rules where the recipient is part of the same corporate group as jiliday

12.3 You may request information about the specific safeguards in place for any international data transfer by contacting jiliday's Data Protection Officer.

13.1 jiliday.club may contain links to third-party websites or services (for example, payment provider portals). This Privacy Policy applies only to jiliday.club and the jiliday platform. jiliday is not responsible for the privacy practices of any third-party websites or services.

13.2 When you click on a link to a third-party website, you leave jiliday.club and your interaction with that third-party site is governed by that site's own privacy policy. jiliday encourages you to review the privacy policies of any third-party sites you visit.

13.3 The inclusion of a link to a third-party site on jiliday.club does not constitute an endorsement of that site or its privacy practices by jiliday.

14.1 jiliday reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. The date of the most recent revision is displayed at the top of this page.

14.2 Where changes to this Policy are material, jiliday will notify registered players via email or an on-platform notification prior to the changes taking effect. For minor or clarificatory changes, the updated Policy will be posted on jiliday.club without prior notice.

14.3 Your continued use of the jiliday platform following the posting of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should discontinue use of the platform and may request account closure in accordance with our Terms & Conditions.

14.4 jiliday recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being handled.

15.1 If you have any questions, concerns, or complaints about this Privacy Policy or about how jiliday handles your personal data, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing jiliday's compliance with RA 10173 and is your primary point of contact for all data privacy matters.

15.2 You can reach jiliday's Data Protection Officer and general support team through the following channels:

15.3 If you are not satisfied with jiliday's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173.

15.4 jiliday is committed to working constructively with you to resolve any privacy concerns before escalation to the NPC becomes necessary. We encourage you to contact our DPO in the first instance so that we have the opportunity to address your concern directly.