Jiliphil Privacy Policy – How We Protect Your Personal Data

Introduction

This Privacy Policy describes how jiliphil ("we," "us," "the platform," "jiliphil") collects, uses, stores, and protects the personal information of individuals who visit or register on jiliphil.best — including all associated services such as sports betting, esports betting, online slots, the VIP Club programme, and customer support channels.

When you register a jiliphil account, access the platform as a guest, contact our support team, or interact with jiliphil in any way that involves you providing information about yourself, this Policy applies to that interaction and to the data resulting from it.

Jiliphil takes its obligations as a personal information controller seriously. We only collect data that has a clear, documented purpose, we store it securely, we limit access to it, and we respect your rights to know what we hold and to ask us to correct or delete it when appropriate.

Who We Are

Jiliphil is an online sports betting and gaming platform operating at jiliphil.best, serving the Philippine market. For the purposes of the Data Privacy Act of 2012, jiliphil acts as a personal information controller in respect of all personal data collected from members and website visitors.

Jiliphil has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with applicable data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy.

Personal Data We Collect

Jiliphil collects the following categories of personal data, depending on the nature of your relationship with the platform:

3.1 Identity & Contact Data

When you register with jiliphil, we collect:

3.2 Financial & Transaction Data

When you deposit or withdraw through jiliphil:

3.3 Betting & Gaming Activity Data

3.4 Technical & Device Data

3.5 Communications Data

Records of any communications you have with jiliphil's support team — including live chat transcripts, emails, and any documents you share — are retained for service quality and compliance purposes.

How We Collect Your Data

Jiliphil collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically through the platform — when you use jiliphil.best, our servers and analytics tools log technical data such as your IP address, browser, device, pages visited, and session duration.
• Through cookies and similar technologies — see Section 10 for full details on cookies used by jiliphil.
• From third-party verification services — jiliphil uses accredited KYC and identity verification partners to confirm your identity during the account verification process. These partners provide us with a verification outcome and may share relevant supporting data.
• From payment processors — when you transact through GCash, Maya, your bank, or another payment provider, the processor shares transaction confirmation data with jiliphil to record the deposit or withdrawal correctly.
• From fraud prevention services — jiliphil uses industry-standard fraud and risk detection tools that may process technical identifiers associated with your device and session to identify patterns associated with account abuse.

How Jiliphil Uses Your Data

Jiliphil uses your personal data for specific, documented purposes. We do not use data in ways that are incompatible with the purpose for which it was collected. The primary uses are as follows:

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules, jiliphil processes your personal data on the following lawful grounds:

• Contract performance — processing is necessary to fulfill the terms of your agreement with jiliphil (i.e., to operate your account and provide betting services).
• Legal obligation — processing is required to comply with applicable Philippine laws, including KYC/AML regulations and gaming licensing requirements.
• Legitimate interests — processing is necessary for purposes that are genuinely important to jiliphil's operations, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent — where jiliphil relies on your consent as the legal basis for processing (primarily for optional marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before the withdrawal.

Sharing Your Personal Data

Jiliphil does not sell your personal data. We share it only where necessary and only with parties who are contractually bound to handle it appropriately. The categories of recipients are:

All third-party service providers engaged by jiliphil are required to sign data processing agreements that comply with the requirements of the Data Privacy Act of 2012. Jiliphil conducts periodic reviews of these arrangements to ensure continued compliance.

Where data is transferred outside the Philippines for processing — for example, to cloud infrastructure located in another country — jiliphil ensures that appropriate safeguards are in place to provide an equivalent level of protection to that required under Philippine law.

Data Retention

Jiliphil retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following general retention periods apply:

After the applicable retention period expires, jiliphil will securely delete or anonymise the data in question so that it can no longer be associated with you as an individual. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

How We Secure Your Data

Jiliphil implements a range of technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in transit: All data transmitted between your browser or app and jiliphil's servers is encrypted using TLS 1.2 or higher. This applies to login, registration, transactions, and all other platform activity.
• Encryption at rest: Sensitive data stored in jiliphil's systems — including identity documents, KYC records, and financial data — is encrypted at rest using AES-256 standard encryption.
• Access controls: Internal access to personal data is strictly limited on a need-to-know basis. Access privileges are reviewed quarterly. Staff with access to sensitive member data undergo background checks and are bound by confidentiality agreements.
• Multi-factor authentication: Jiliphil requires MFA for all internal staff accounts with access to production systems and member data.
• Penetration testing and security audits: The jiliphil platform undergoes regular independent security assessments, including penetration testing, to identify and address vulnerabilities before they can be exploited.
• Incident response: Jiliphil maintains a documented data breach response plan. In the event of a data breach that is likely to result in a risk to your rights and freedoms, jiliphil will notify the National Privacy Commission within 72 hours of becoming aware of the incident, and will notify affected members without undue delay.

Cookies & Similar Technologies

Jiliphil uses cookies and similar tracking technologies on jiliphil.best to make the platform work correctly, to remember your preferences, and to understand how members use the site so we can keep improving it. Here is a summary of the cookies we use:

You can manage your cookie preferences through your browser settings. Blocking or deleting cookies marked as "Essential" will affect the functionality of jiliphil and may prevent you from logging in or placing bets. Functional and analytics cookies can be disabled without affecting core platform access.

Your Data Rights Under Philippine Law

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of the personal data jiliphil holds about you:

To exercise any of these rights, please contact jiliphil's Data Protection Officer at privacy@jiliphil.best with the subject line "Data Subject Request" and your full name and registered email address. Jiliphil may request proof of identity before processing your request to protect against fraudulent access to another member's data.

Minors & Children's Privacy

Jiliphil's services are strictly for individuals aged 21 and above. Jiliphil does not knowingly collect personal information from anyone under the age of 21. If jiliphil becomes aware that a registered account belongs to a person under 21 years of age, that account will be closed immediately, any balance will be returned to the payment source, and all associated personal data will be deleted to the extent permitted by law.

If you believe that jiliphil may have inadvertently collected data from a person under 21, please contact privacy@jiliphil.best immediately so we can investigate and take appropriate action.

Changes to This Privacy Policy

Jiliphil reviews this Privacy Policy at least annually and may update it at any time to reflect changes in our data practices, applicable law, or the services we provide. When material changes are made — meaning changes that could significantly affect your rights or how your data is used — jiliphil will notify registered members via the email address associated with their account at least 7 days before the changes take effect.

The "Last Updated" date at the top of this page reflects the most recent revision. Continued use of jiliphil after the effective date of any update constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated Policy, you may close your account at any time by contacting support@jiliphil.best.

Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the personal data jiliphil holds about you, please contact our Data Protection Officer directly: