jilboss Privacy Policy

This Privacy Policy ("Policy") describes the data processing practices of jilboss ("jilboss," "we," "us," "our") in connection with the online gaming platform accessible at jilboss.vip and its associated mobile applications, promotional communications, and related services (collectively, the "Platform").

This Policy applies to all individuals who interact with jilboss in any of the following capacities: registered players, visitors who browse the Platform without registering, individuals who contact jilboss support, and recipients of jilboss marketing communications. It governs the collection, use, storage, sharing, and protection of personal data in all such interactions.

This Policy does not apply to third-party websites, applications, or services that may be linked to or accessible through the jilboss Platform. jilboss is not responsible for the privacy practices of such third parties, and players are encouraged to review the privacy policies of any external services they access.

For the purposes of applicable data protection law, including the Philippine Data Privacy Act of 2012 (RA 10173), jilboss is the personal information controller ("PIC") responsible for the processing of personal data collected through the Platform.

As personal information controller, jilboss determines the purposes and means of processing personal data and is responsible for ensuring that such processing is carried out in accordance with applicable law, this Policy, and jilboss's internal data governance procedures.

Where jilboss engages third-party service providers to process personal data on its behalf, those providers act as personal information processors ("PIPs") and are contractually bound to process data only in accordance with jilboss's documented instructions and applicable data protection law.

jilboss collects personal data across several categories depending on your relationship with the Platform. The categories and specific data types are described below:

jilboss does not intentionally collect sensitive personal information beyond what is necessary for identity verification and legal compliance. Biometric data collected during KYC (such as facial comparison images) is processed by certified KYC providers and is not retained by jilboss beyond the verification process unless required by applicable law.

jilboss collects personal data through the following means:

• Direct provision: Information you submit during account registration, KYC verification, deposit and withdrawal requests, support inquiries, and promotional participation;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and device fingerprinting technologies;
• Third-party sources: Identity and fraud risk data obtained from certified KYC and AML service providers during the verification process; payment transaction data received from GCash, PayMaya, and bank payment gateways;
• Regulatory and legal sources: Data obtained in response to lawful requests from PAGCOR, AMLC (Anti-Money Laundering Council), or other Philippine regulatory or law enforcement authorities.

jilboss processes personal data only where it has an appropriate legal basis to do so under the Philippine Data Privacy Act of 2012 and applicable regulations. The primary legal bases relied upon are: (a) performance of a contract (operating your jilboss account), (b) legal obligation (KYC, AML, and regulatory compliance), (c) legitimate interests (fraud prevention, platform security, service improvement), and (d) consent (marketing communications and optional features).

The specific purposes for which jilboss processes personal data include:

• Creating and maintaining your jilboss account and providing access to Platform services;
• Processing deposits, withdrawals, and all financial transactions in Philippine Peso (PHP) through GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels;
• Verifying your identity and age (21+) in compliance with regulatory requirements and jilboss's Terms and Conditions;
• Complying with jilboss's obligations under the Anti-Money Laundering Act (AMLA) of the Philippines, including transaction monitoring and suspicious transaction reporting;
• Detecting and preventing fraud, account compromise, bonus abuse, and other prohibited activities;
• Providing customer support and resolving disputes;
• Operating the jilboss responsible gaming program, including processing self-exclusion requests and enforcing deposit limits;
• Sending transactional communications (account notifications, deposit confirmations, withdrawal receipts);
• Sending marketing communications about jilboss promotions, bonuses, and new features — only where you have consented or where we have a legitimate interest and have provided an easy opt-out mechanism;
• Improving Platform performance, user experience, and game offering based on aggregated and anonymized usage analytics.

jilboss does not sell, rent, or trade your personal data to third parties for their own commercial purposes. Personal data is shared only in the circumstances described below:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard processors receive transactional data necessary to execute your deposit and withdrawal instructions;
• KYC and identity verification providers: Certified third-party KYC platforms receive identity document images and selfie data to perform identity verification on jilboss's behalf;
• Game providers: Licensed game suppliers (including PG Soft, Pragmatic Play, Jili, and JDB) receive a session token and anonymized player identifier to enable gameplay. Your full personal information is not transmitted to game providers;
• Fraud prevention and AML services: Specialized security and compliance platforms that assist jilboss in detecting suspicious activity, money laundering, and fraudulent account behavior;
• Regulatory and law enforcement authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government authorities as required by applicable law or pursuant to a lawful order;
• IT infrastructure and hosting providers: Providers who host, maintain, and support the jilboss Platform infrastructure, subject to strict data processing agreements;
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to confidentiality obligations, to the extent necessary for the conduct of jilboss's business;
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of jilboss's assets, personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent data protection obligations.

Some of jilboss's third-party service providers — including certain game providers, KYC platforms, and cloud infrastructure providers — may process personal data outside the Republic of the Philippines. Where such international transfers occur, jilboss ensures that adequate safeguards are in place in accordance with the requirements of the Philippine Data Privacy Act and NPC guidance on cross-border data transfers.

Safeguards applied to international transfers include contractual data processing agreements incorporating data protection clauses equivalent to those required under Philippine law, and, where appropriate, transfer impact assessments to evaluate the adequacy of data protection in the destination jurisdiction.

Players who wish to obtain further information about the safeguards applied to specific international transfers may contact jilboss's data privacy officer using the contact details provided in Section 15 of this Policy.

jilboss retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, consistent with AMLA record-keeping requirements applicable to covered persons under Philippine law;
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in compliance with AMLA and BSP-related reporting obligations;
• Gaming session data: Retained for up to three (3) years for dispute resolution and regulatory audit purposes, then deleted or anonymized;
• KYC documents: Retained for the duration of the account plus five (5) years after closure, or longer where required by a specific regulatory direction;
• Support communications: Retained for up to two (2) years from the date of the interaction;
• Marketing preference data: Retained until you withdraw consent or close your account, plus a reasonable period for record-keeping.

At the end of applicable retention periods, personal data is securely deleted or anonymized using industry-standard methods. Anonymized data may be retained indefinitely for statistical analysis purposes.

jilboss uses cookies and similar tracking technologies (including web beacons, pixel tags, and session storage) on the Platform. These technologies serve several purposes:

• Strictly necessary cookies: Required for the Platform to function correctly, including maintaining your login session, remembering your language and currency preferences, and enabling secure payment processing. These cookies cannot be disabled without impairing Platform functionality;
• Analytical cookies: Used to collect anonymized data about how players navigate the Platform — including pages visited, time on page, and game categories accessed — to help jilboss improve the user experience and Platform performance;
• Functional cookies: Used to remember your in-Platform preferences (such as display settings, responsible gaming limits you've set, and notification preferences) so that you don't need to reconfigure them each session;
• Security cookies: Used to detect and prevent fraudulent login attempts, credential stuffing, and other security threats by linking your session to verified device characteristics.

You can control and manage cookies through your browser settings. Most browsers allow you to refuse new cookies, delete existing cookies, and receive notifications before cookies are set. Note that disabling strictly necessary cookies will affect Platform functionality and may prevent you from logging in or completing transactions.

jilboss does not use cookies to serve third-party advertising on the Platform, and strictly necessary and security cookies are not subject to consent withdrawal.

Under the Philippine Data Privacy Act of 2012 (RA 10173) and its implementing rules, you have the following rights with respect to your personal data held by jilboss:

• Right to be informed: The right to be notified of how your personal data is being collected and processed — which is the purpose of this Privacy Policy;
• Right of access: The right to request a copy of the personal data jilboss holds about you, together with information about how it is processed;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by jilboss;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jilboss's legal retention obligations (which may prevent deletion of certain data categories);
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. Upon receiving such a request, jilboss will cease marketing communications immediately;
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to complain: The right to lodge a complaint with the Philippines National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of the above rights, please contact jilboss's Data Privacy Officer using the details provided in Section 15. jilboss will respond to all verifiable requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days with written notification to the requesting party.

jilboss implements a multi-layered security architecture to protect personal data against unauthorized access, disclosure, alteration, and destruction:

• All data transmitted between your device and jilboss servers is encrypted using industry-standard TLS 1.2 or higher (256-bit SSL);
• Data stored in jilboss's systems is encrypted at rest using AES-256 encryption;
• Access to systems containing personal data is restricted to authorized personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• jilboss maintains a dedicated security operations function that monitors the Platform for unauthorized access attempts, anomalous activity, and data breaches on a continuous basis;
• All third-party processors with access to personal data are subject to contractual security requirements and are assessed against jilboss's vendor security standards prior to engagement;
• jilboss conducts regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate security risks proactively.

In the event of a personal data breach that poses a risk to player rights and freedoms, jilboss will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay in accordance with RA 10173 and NPC Circular No. 16-03.

The jilboss platform is strictly intended for persons aged twenty-one (21) years and older, consistent with Philippine law governing casino-style gambling. jilboss does not knowingly collect personal data from individuals under the age of 21.

All players are required to submit government-issued identity documents during KYC verification. jilboss's verification process is designed to identify and reject applications from individuals who do not meet the minimum age requirement.

If jilboss becomes aware that personal data has been collected from an individual under 21 years of age — whether through an erroneous registration, document fraud, or any other means — the relevant account will be immediately suspended, and all personal data associated with that account will be deleted within a reasonable timeframe, subject to any legal obligations to retain evidence of the age violation for regulatory reporting purposes.

Parents or guardians who believe their child has registered an account on jilboss are encouraged to contact jilboss support immediately at [email protected] so that the matter can be investigated and resolved promptly.

jilboss processes gaming session data, deposit history, and behavioral signals to operate its responsible gaming program. This includes:

• Monitoring session duration, betting patterns, and deposit frequency to identify indicators of potential problem gambling behavior;
• Enforcing deposit limits, cooling-off periods, and self-exclusion requests that you set through your account dashboard;
• Maintaining records of self-exclusion requests to prevent re-registration by excluded players during the exclusion period;
• Where required by applicable regulatory standards, sharing exclusion data with authorized inter-operator exclusion schemes.

The processing of data for responsible gaming purposes is carried out on the basis of jilboss's legal obligations and legitimate interests in providing a safe gaming environment. This processing cannot be opted out of as it is an integral component of jilboss's regulatory compliance and duty of care obligations.

For more information about the responsible gaming tools available on the jilboss platform, please visit our Responsible Gaming page.

jilboss reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or Platform functionality.

When material changes are made to this Policy, jilboss will notify registered players by email to their registered address and/or by displaying a prominent notice on the Platform for a period of not less than fourteen (14) days prior to the changes taking effect. The updated Policy will also be published on this page with a revised "Last Updated" date at the top.

Minor changes — such as corrections of typographical errors or clarifications that do not alter the substantive rights of data subjects — may be made without prior notice. All amendments take effect from the "Effective Date" stated in the revised Policy.

Continued use of the jilboss platform after an amended Privacy Policy takes effect constitutes your acceptance of the updated terms. If you do not agree with any amendment, you have the right to request account closure and the deletion of your personal data (subject to applicable legal retention obligations) by contacting jilboss support.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a concern about how jilboss processes your personal data, please contact jilboss's Data Privacy Officer ("DPO") using the details below:

If you are not satisfied with jilboss's response to your privacy concern, you have the right to lodge a complaint with the Philippines National Privacy Commission (NPC). Information about how to file a complaint with the NPC is available on the NPC's official website.