Privacy Policy – jilko Casino

1 Introduction

1.1 jilko takes the privacy of its players seriously. As an online gaming platform serving Filipino players across the Philippines — from Manila and Makati to Cebu, Davao, and beyond — jilko recognizes that the personal data you share with us is sensitive and deserves the highest standard of care.

1.2 This Policy applies to all personal data collected through jilko.vip, jilko's mobile web platform, customer support communications, and any other jilko-operated service. It does not apply to third-party websites or services that may be linked from jilko's Platform.

1.3 jilko's data processing activities are conducted in compliance with Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the regulations issued by the National Privacy Commission (NPC) of the Philippines. jilko is also subject to PAGCOR's data governance requirements under its operating license.

2 Data Controller

2.1 The data controller responsible for your personal data is jilko, the operator of jilko.vip. As data controller, jilko determines the purposes and means by which your personal data is processed.

2.2 jilko has designated a Data Protection Officer (DPO) as required under the Data Privacy Act. For all privacy-related inquiries, data subject requests, or concerns about jilko's data practices, you may contact the DPO at: [email protected] (subject line: "Privacy / DPO Inquiry").

3 Personal Data We Collect

3.1 jilko collects personal data in the following categories:

3.2 jilko does not intentionally collect sensitive personal information beyond what is required for KYC identity verification and AML compliance. Where sensitive information is necessarily collected (such as a copy of a government ID), it is handled with additional security measures.

4 How We Use Your Personal Data

4.1 jilko uses your personal data for the following purposes:

• Account administration: Creating, maintaining, and securing your jilko player account;
• Transaction processing: Processing deposits via GCash, PayMaya, and Philippine bank transfers, and processing withdrawals to your registered payment methods;
• Identity verification (KYC): Verifying your identity before processing withdrawals, as required by PAGCOR and Philippine AML regulations;
• Legal and regulatory compliance: Meeting jilko's obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and any applicable Philippine law;
• Fraud prevention and security: Detecting and preventing unauthorized access, fraudulent activity, and prohibited conduct as defined in jilko's Terms & Conditions;
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance;
• Responsible gaming: Monitoring account activity to identify potential problem gambling patterns and enabling deposit limits, self-exclusion, and other responsible gaming tools;
• Service improvement: Analysing aggregated, anonymized usage data to improve the Platform's performance, game selection, and user experience;
• Marketing communications: Sending you promotional offers, bonus notifications, and game updates, where you have consented to receive such communications. You may withdraw consent at any time by updating your account notification preferences.

5 Legal Basis for Processing

5.1 Under the Data Privacy Act of 2012, jilko relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and jilko (i.e., to operate your account and provide gaming services);
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself;
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement, where jilko's interests do not override your fundamental privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6 Data Sharing and Disclosure

6.1 jilko does not sell, rent, or trade your personal data to third parties for commercial purposes. jilko may share your data in the following limited circumstances:

• Payment processors: GCash (GXI), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers, strictly as necessary to process your deposits and withdrawals;
• KYC and identity verification providers: Third-party identity verification services engaged to verify government IDs as required for PAGCOR KYC compliance;
• PAGCOR and regulatory authorities: jilko is required to disclose player data to PAGCOR and other Philippine government agencies upon lawful request or as mandated by jilko's operating license;
• Law enforcement: Where required by a valid court order, subpoena, or other lawful demand from Philippine law enforcement authorities;
• Anti-money laundering authorities: The Anti-Money Laundering Council (AMLC) and related bodies as required under the Anti-Money Laundering Act of 2001 (RA 9160, as amended);
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics service providers engaged by jilko under binding data processing agreements that require them to handle your data in accordance with the Data Privacy Act.

6.2 All third parties to whom jilko discloses personal data are subject to contractual obligations or statutory duties to maintain the confidentiality and security of your information.

7 Data Retention

7.1 jilko retains your personal data for as long as necessary to fulfil the purposes described in this Policy. The following minimum retention periods apply:

• Account and identity data: Minimum five (5) years from account closure, as required by PAGCOR licensing conditions and AML regulations;
• Transaction records: Minimum five (5) years from the date of the transaction, as required by Philippine financial regulations;
• Support and communications records: Three (3) years from the date of the communication;
• Marketing consent records: Until consent is withdrawn, plus one (1) year thereafter for evidence-of-consent purposes.

7.2 Upon expiry of the applicable retention period, jilko will securely delete or anonymize your personal data such that it can no longer be associated with you.

8 Data Security

8.1 jilko implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS encryption for all data in transit between your device and jilko.vip, enforced via HSTS;
• AES-256 encryption for sensitive data at rest, including payment credentials and government ID documents;
• Multi-factor authentication (MFA) for administrative access to systems holding player data;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Regular security audits and vulnerability assessments conducted by qualified third-party security professionals;
• 24/7 intrusion detection and anomaly monitoring systems.

8.2 In the event of a personal data breach that is likely to result in serious harm to affected players, jilko will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act. Affected players will be notified as soon as practicable.

9 Cookies and Tracking Technologies

9.1 jilko uses cookies and similar technologies on jilko.vip for the following purposes:

• Strictly necessary cookies: Required for session management, login authentication, and security. These cannot be disabled without affecting Platform functionality;
• Performance cookies: Aggregate, anonymized analytics data used to understand how players use the Platform and improve performance. These do not identify individual players;
• Functional cookies: Remembering your language preference, login state (where "Remember me" is enabled), and display preferences.

9.2 jilko does not use cookies for third-party advertising, behavioral tracking across other websites, or profiling for marketing by third parties.

9.3 You can manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use jilko's services.

10 Your Data Subject Rights

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jilko:

• Right to be informed: The right to know whether jilko processes your personal data and to receive this Policy;
• Right of access: The right to obtain a copy of the personal data jilko holds about you;
• Right to rectification: The right to have inaccurate or incomplete personal data corrected;
• Right to erasure: The right to have your personal data deleted where jilko no longer has a legal basis to retain it (subject to statutory retention obligations);
• Right to object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe jilko has processed your data unlawfully.

10.2 To exercise any of the above rights, contact jilko's Data Protection Officer at [email protected] with the subject line "Data Subject Request". jilko will respond within fifteen (15) business days of receiving a verifiable request.

11 Minors

11.1 jilko's Platform is strictly intended for individuals who are 21 years of age or older, as required by PAGCOR regulations. jilko does not knowingly collect personal data from persons under 21 years of age.

11.2 If jilko becomes aware that personal data has been collected from a person under 21, such data will be immediately deleted and the associated account will be closed. If you have reason to believe that a person under 21 has registered on jilko, please notify us immediately at [email protected].

12 Changes to This Policy

12.1 jilko may update this Privacy Policy from time to time to reflect changes in legal requirements, regulatory obligations, or jilko's data practices. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

12.2 Where changes are material, jilko will notify registered players by email to the address on record at least seven (7) days before the revised Policy takes effect. Continued use of the Platform after the effective date of a revised Policy constitutes acceptance of the updated terms.