jilluu Privacy Policy

This Privacy Policy ("Policy") describes how jilluu ("jilluu," "we," "us," "our") collects, uses, stores, protects, and shares personal information about individuals ("you," "Player," "Data Subject") who interact with the jilluu online gaming platform, accessible at jilluu.vip and all associated subdomains and mobile interfaces (collectively, the "Platform").

This Policy applies to all personal information processed in connection with your use of the jilluu Platform, including information collected during account registration, identity verification, payment processing, gameplay, customer support interactions, and marketing communications.

By creating a jilluu account or using any jilluu service, you acknowledge that you have read, understood, and agree to the collection and use of your personal information as described in this Policy. If you do not agree with this Policy, you must not use the Platform.

This Policy should be read alongside jilluu's Terms and Conditions and Responsible Gaming Policy, which together form the complete set of terms governing your use of the Platform.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jilluu is the Personal Information Controller (PIC) with respect to the personal data of players and users processed through the Platform.

As the Personal Information Controller, jilluu determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and in a manner consistent with this Policy and applicable Philippine privacy law.

jilluu has designated a Data Protection Officer (DPO) responsible for overseeing data privacy compliance. You may contact the DPO for privacy-related inquiries at: [email protected] (plain text — not a clickable link).

jilluu collects the following categories of personal data, depending on how you interact with the Platform:

jilluu does not intentionally collect sensitive personal information beyond what is required for identity verification (e.g., government ID data) and regulatory compliance. Where sensitive data is collected, it is subject to additional safeguards.

jilluu collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or updating your account settings;
• Automated collection: Technical data collected automatically through cookies, server logs, and analytics tools when you access or use the Platform (see Section 11 for cookie details);
• Third-party collection: Identity and payment verification data provided by KYC service providers and payment processors in connection with account verification and transaction processing;
• Regulatory sources: Information received from regulatory authorities, law enforcement agencies, or fraud prevention services in the course of jilluu's compliance obligations.

Under the Philippine Data Privacy Act and its Implementing Rules, jilluu relies on the following lawful bases for processing your personal data:

• Consent: Where you have given clear, informed, and voluntary consent to processing — for example, when you opt in to receive marketing communications from jilluu;
• Contractual necessity: Where processing is necessary to fulfill jilluu's obligations under your account agreement — for example, processing your deposits, enabling gameplay, and processing withdrawal requests;
• Legal obligation: Where processing is required to comply with applicable Philippine law, including anti-money laundering (AML) regulations, PAGCOR reporting requirements, and KYC obligations under relevant gaming regulations;
• Legitimate interests: Where processing serves jilluu's legitimate business interests in a manner that does not override your fundamental rights — for example, fraud detection, platform security, and service improvement analytics;
• Vital interests: In limited circumstances, where processing is necessary to protect the vital interests of a data subject — for example, responding to a player welfare concern raised by a responsible gaming contact.

Where jilluu relies on your consent as the basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jilluu uses the personal data it collects for the following purposes:

• Account management: Creating and maintaining your jilluu account, authenticating your identity upon login, and managing account settings and preferences;
• Identity verification: Conducting KYC verification to confirm your identity, age (21+), and eligibility to participate in real-money gaming in accordance with Philippine gaming regulations;
• Payment processing: Processing deposits, executing withdrawal requests, maintaining transaction records, and detecting and preventing payment fraud;
• Gaming services: Enabling access to games, recording gameplay history, calculating and crediting winnings, applying bonuses, and resolving game disputes;
• Regulatory compliance: Meeting jilluu's obligations under Philippine AML law, gaming licensing conditions, PAGCOR reporting requirements, and any applicable tax reporting obligations;
• Fraud prevention and security: Detecting suspicious account activity, investigating potential Terms of Service violations, preventing unauthorized access, and protecting the integrity of the Platform;
• Customer support: Responding to your inquiries, resolving account issues, processing complaints, and improving the quality of jilluu's support services;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviors, administering self-exclusion and deposit limit programs, and sending responsible gaming notifications;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive such communications (see Section 14);
• Platform improvement: Analyzing aggregated, anonymized usage data to improve the Platform's features, performance, and user experience.

jilluu does not sell your personal data. We share personal data with third parties only in the following circumstances:

• Payment service providers: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment processors receive the minimum data necessary to execute your deposit or withdrawal transaction. All payment providers used by jilluu operate under their own privacy policies and applicable data processing agreements;
• KYC and identity verification providers: Third-party identity verification services process KYC document data under data processing agreements with jilluu. These providers are not permitted to use your data for any purpose other than identity verification on jilluu's behalf;
• Game content providers: Gaming studios whose games are available on jilluu may receive game session identifiers and technical data necessary to deliver their games. Full personal identity data is not shared with game studios;
• IT infrastructure and security providers: Cloud hosting, server infrastructure, and cybersecurity service providers who process data solely for platform operation purposes under strict data processing agreements;
• Regulatory and law enforcement authorities: Philippine government agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement bodies where jilluu is legally required to disclose information;
• Fraud prevention and AML screening services: Third-party services used to screen transactions and player profiles against sanctions lists and fraud databases for compliance purposes.

All third parties with whom jilluu shares personal data are required to handle such data in accordance with applicable privacy law and are contractually prohibited from using it for any purpose beyond the specific service they provide to jilluu.

Some of jilluu's service providers and technology infrastructure may be located outside the Philippines. Where personal data is transferred to recipients in other countries, jilluu takes steps to ensure that appropriate safeguards are in place to protect your data in accordance with the Philippine Data Privacy Act.

These safeguards include requiring third-party recipients to enter into data processing agreements that impose data protection obligations consistent with Philippine privacy law, and conducting due diligence on the data protection standards of recipient countries and organizations.

By using the jilluu Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines where data protection laws may differ from those in your jurisdiction. jilluu will take all reasonably practicable steps to ensure that any such transfers are made securely and that your data receives an adequate level of protection.

jilluu retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, as required for AML compliance and gaming regulatory record-keeping;
• KYC documents: Retained for the period required under Philippine AML regulations — currently a minimum of five (5) years from the date of the last transaction;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction in accordance with AML record-keeping requirements;
• Gameplay history: Retained for a minimum of two (2) years from the date of each gaming session for dispute resolution and regulatory audit purposes;
• Customer support records: Retained for two (2) years from the date of the last support interaction;
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

When personal data is no longer required for its original purpose or legally required retention period, jilluu will securely delete or anonymize it in a manner that prevents reconstruction or re-identification.

jilluu implements technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and jilluu's servers is protected using TLS 1.2 or higher encryption (HTTPS);
• Encryption at rest: Sensitive personal data stored on jilluu's servers is encrypted at rest using AES-256 encryption;
• Password security: Account passwords are hashed using bcrypt with per-user salts. jilluu staff cannot retrieve your password — only reset it through authenticated channels;
• Two-factor authentication: jilluu offers SMS-based 2FA for all player accounts, providing an additional layer of protection beyond your password;
• Access controls: Access to personal data within jilluu's systems is restricted to authorized personnel on a need-to-know basis, governed by role-based access controls;
• Security monitoring: jilluu maintains continuous security monitoring, intrusion detection, and logging of data access events;
• Vendor security: Third-party service providers with access to personal data are required to maintain security standards consistent with or exceeding jilluu's own standards.

While jilluu takes reasonable steps to protect your data, no data transmission over the internet or storage system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your account credentials and for notifying jilluu immediately if you suspect unauthorized access to your account.

jilluu uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyze Platform usage. The following types of cookies are used:

• Essential cookies: Strictly necessary for the Platform to function — for example, session authentication cookies that keep you logged in during your visit. These cannot be disabled without impairing Platform functionality;
• Preference cookies: Used to remember your settings and preferences, such as your language or display settings, so you don't need to set them each visit;
• Analytics cookies: Used to collect anonymized or pseudonymized data about how users interact with the Platform — including pages visited, session duration, and click patterns — to help jilluu improve the user experience;
• Security cookies: Used to detect and prevent fraud, bot activity, and other security threats.

jilluu does not use advertising or cross-site tracking cookies. You can control non-essential cookies through your browser settings. Most modern browsers (Chrome, Safari, Firefox) allow you to view, manage, and delete cookies from the browser settings menu. Note that disabling essential cookies may prevent the Platform from functioning correctly.

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data processed by jilluu:

To exercise any of these rights, contact jilluu's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." jilluu will respond to verified requests within 30 calendar days. In complex cases, this period may be extended by a further 30 days with written notice.

Please note that some rights are subject to limitations. For example, jilluu may be unable to delete data that it is legally required to retain for AML or gaming regulatory purposes. In such cases, jilluu will explain the limitation and, where possible, restrict further active processing of the data in question.

jilluu is an online gaming platform intended exclusively for adults aged 21 years and above. jilluu does not knowingly collect, process, or retain the personal data of individuals under the age of 21.

All accounts are subject to mandatory KYC identity verification, which includes confirmation that the account holder meets the minimum age requirement of 21 years. Any account found to belong to an individual under 21 will be immediately closed, all associated balances forfeited, and the matter reported to the relevant regulatory authority.

If you are a parent or guardian and believe that a minor under your care has registered with jilluu or provided personal information to jilluu without your knowledge, please contact us immediately at [email protected]. jilluu will take immediate action to close the account and delete the associated data.

jilluu may send you promotional communications — including bonus offers, game announcements, VIP tier updates, and platform news — by email or SMS, where you have provided your consent to receive such communications.

You can withdraw consent for marketing communications at any time by:

• Updating your communication preferences in your jilluu account settings;
• Clicking the "Unsubscribe" link in any marketing email from jilluu;
• Contacting jilluu support at [email protected] with an unsubscribe request.

Withdrawal of marketing consent will not affect your ability to receive transactional communications — such as deposit confirmations, withdrawal notifications, KYC status updates, and security alerts — which are sent as a necessary part of operating your account and cannot be opted out of while your account is active.

Players who are on self-exclusion are automatically removed from all marketing communications for the duration of their exclusion period and will not receive bonus offers or promotional content from jilluu.

jilluu may update this Privacy Policy from time to time to reflect changes in our data practices, regulatory requirements, or Platform features. When material changes are made, jilluu will notify registered players via email and/or an in-platform notification, and will update the "Last Updated" date at the top of this page.

Your continued use of the jilluu Platform after any such notification constitutes your acceptance of the updated Privacy Policy. If you do not agree with the updated Policy, you should cease using the Platform and may request account closure.

We encourage you to review this Policy periodically. The current version of the Privacy Policy at any given time is the version accessible at jilluu.vip/privacy-policy.

For any privacy-related inquiries, requests to exercise your data subject rights, concerns about jilluu's data practices, or to contact jilluu's Data Protection Officer, please use the following channels:

• Email: [email protected] — please include "Privacy" or "Data Subject Rights" in the subject line
• Live Chat: Available 24 hours through the Platform's in-app chat — for urgent account security concerns
• Response time: jilluu aims to acknowledge privacy inquiries within 5 business days and to resolve them within 30 calendar days

If you are not satisfied with jilluu's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the data protection regulatory authority in the Philippines responsible for administering the Data Privacy Act of 2012. Information about the NPC and how to file a complaint is available through Philippine government resources.

This Privacy Policy was last reviewed and updated in January 2026. All previous versions are superseded by this document upon publication.