jil9 Privacy Policy

1. Who We Are and How to Contact Us

This Privacy Policy is issued by jil9 ("jil9," "we," "us," or "our"), the operator of the online gaming platform accessible at jil9.org. jil9 acts as the Personal Information Controller (PIC) in respect of all personal data collected through this platform, as defined under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, you may contact our Data Protection Officer (DPO) at the following address:

Email: [email protected]
Subject line: Data Privacy – [Your Query]

jil9 will respond to all data privacy enquiries within fifteen (15) business days of receipt.

2. Scope of This Policy

This Privacy Policy applies to all personal data collected, used, stored, and disclosed by jil9 in connection with your use of the jil9 platform, including the jil9.org website, any associated mobile-accessible web applications, customer support channels, and marketing communications. It applies to all registered players and visitors to the jil9 platform, whether or not they have created an account.

3. Personal Data We Collect

jil9 collects the following categories of personal data from its users:

jil9 does not collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, or health data) unless voluntarily provided in the context of a responsible gaming support request.

4. How We Collect Your Data

jil9 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically — through cookies, server logs, and similar tracking technologies when you access the jil9 platform;
• From third parties — from identity verification service providers during KYC, payment processors when you make a deposit, and fraud detection partners where applicable.

5. Legal Basis for Processing

jil9 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing your registration information, KYC data, and transaction records is necessary to fulfil jil9's obligations to you under the Terms & Conditions;
• Legal obligation — jil9 is required by PAGCOR and the Anti-Money Laundering Council (AMLC) to collect and retain certain player identification and transaction data;
• Legitimate interests — jil9 processes Technical Data and Account Data to detect fraud, prevent multiple-account abuse, and improve platform security;
• Consent — jil9 processes your contact data for marketing communications where you have given explicit opt-in consent. You may withdraw this consent at any time.

6. How We Use Your Personal Data

jil9 uses personal data collected from players for the following purposes:

• To create, verify, and maintain your jil9 account;
• To process deposits and withdrawals via GCash, Maya, BPI, BDO, and other accepted payment methods;
• To comply with PAGCOR KYC requirements and AMLA obligations, including filing Suspicious Transaction Reports where legally required;
• To detect, investigate, and prevent fraud, money laundering, and abuse of the platform or its promotions;
• To provide customer support and respond to account enquiries;
• To send you account-related notifications such as deposit confirmations, withdrawal updates, and security alerts;
• To send you promotional communications where you have opted in to receive them;
• To personalise your experience on the jil9 platform, including surfacing games and promotions relevant to your preferences;
• To enforce jil9's Terms & Conditions and Responsible Gaming Policy, including implementing self-exclusion requests;
• To improve the jil9 platform through aggregated analytics and performance monitoring.

7. Disclosure of Personal Data to Third Parties

jil9 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. jil9 may disclose your personal data to the following categories of recipients:

• Payment processors (e.g. GCash/GXI, Paymaya/Voyager, BPI, BDO) — solely for the purpose of processing your deposits and withdrawals;
• KYC and identity verification providers — to verify your identity and age as required by PAGCOR;
• Fraud prevention and AML compliance services — to screen transactions and detect suspicious activity in accordance with AMLA;
• Game software providers (e.g. JILI, PG Soft, Pragmatic Play) — limited technical data necessary to facilitate gameplay;
• Regulatory authorities — including PAGCOR, the AMLC, and the National Privacy Commission (NPC) of the Philippines, where disclosure is required by law;
• Professional advisers — including legal counsel, auditors, and accountants, subject to confidentiality obligations.

All third-party service providers engaged by jil9 are contractually required to process personal data only in accordance with jil9's instructions and to maintain appropriate security standards consistent with the Data Privacy Act of 2012.

8. Cookies and Tracking Technologies

jil9 uses cookies and similar technologies to operate the platform, authenticate user sessions, prevent fraud, and measure platform performance. The following types of cookies are used:

• Strictly necessary cookies — required for the platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game lobby view.
• Analytics cookies — collect aggregated, anonymised data about how players use the platform, used exclusively to improve jil9's services.

You may configure your browser to refuse non-essential cookies. Disabling strictly necessary cookies may impair your ability to access and use the jil9 platform. jil9 does not use third-party advertising cookies or sell cookie data to data brokers.

9. Data Retention

jil9 retains personal data for as long as necessary to fulfil the purposes described in this Policy and to comply with applicable legal obligations. The following retention periods apply:

• Account and KYC data — retained for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations;
• Transaction records — retained for a minimum of five (5) years from the date of each transaction;
• Support communications — retained for two (2) years from the date of the last interaction;
• Technical and log data — retained for twelve (12) months from collection;
• Marketing consent records — retained until consent is withdrawn, plus one (1) year thereafter.

After the applicable retention period, personal data is securely deleted or anonymised in accordance with jil9's data disposal procedures.

10. Data Security

jil9 implements technical and organisational security measures appropriate to the risks presented by the processing of personal data on the platform. These measures include:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and jil9 servers;
• Encrypted storage of all passwords using industry-standard hashing algorithms. jil9 staff cannot view your password in any form;
• Two-factor authentication (2FA) via OTP sent to your registered Philippine mobile number;
• Role-based access controls limiting jil9 staff access to personal data on a strict need-to-know basis;
• Regular security audits and penetration testing conducted by independent third-party security professionals;
• Incident response procedures compliant with the NPC's mandatory personal data breach notification requirements under NPC Circular 16-03.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jil9 will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

11. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by jil9:

• Right to be Informed — the right to know that jil9 is collecting your personal data and the purposes for which it is being processed;
• Right of Access — the right to obtain a copy of the personal data jil9 holds about you;
• Right to Rectification — the right to have inaccurate or incomplete personal data corrected;
• Right to Erasure or Blocking — the right to request deletion or blocking of personal data where its processing is no longer necessary or lawful, subject to jil9's legal retention obligations;
• Right to Object — the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to Data Portability — the right to receive your personal data in a structured, commonly used format;
• Right to Damages — the right to be indemnified for any damages sustained due to inaccurate, incomplete, outdated, or unlawfully obtained or used personal data.

To exercise any of these rights, please contact our DPO at [email protected] with the subject line "Data Privacy – Rights Request". jil9 will respond within fifteen (15) business days. You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your rights have been violated.

12. Children's Privacy

The jil9 platform is strictly restricted to individuals aged 21 years and above. jil9 does not knowingly collect personal data from individuals under the age of 21. If jil9 becomes aware that personal data has been collected from a person under 21 without parental or guardian consent, such data will be deleted immediately and the associated account will be suspended. If you believe that a minor has provided personal data to jil9, please contact us at [email protected] immediately.

13. Changes to This Privacy Policy

jil9 may update this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, or the way in which jil9 processes personal data. Material changes will be communicated to registered players via the email address or mobile number on file at least seven (7) days before taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Continued use of the jil9 platform following any update constitutes your acknowledgment of the revised Policy.