Privacy Policy – jilibaby Casino

1. Who We Are

jilibaby ("we", "us", "our") operates the online casino and sports betting platform accessible at jilibaby.app. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jilibaby acts as the Personal Information Controller in respect of personal data collected from users ("Players", "you") of the Platform.

This Privacy Policy applies to all personal data processed by jilibaby in connection with your use of the Platform, including registration, account management, deposits, withdrawals, gameplay, customer support interactions, and any marketing communications you have opted into. By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

jilibaby collects the following categories of personal data from Players:

Identity & Registration Data:

• Full legal name
• Date of birth (used for 21+ age verification as required under Philippine law)
• Philippine mobile number (used as primary account identifier and for OTP delivery)
• Email address (optional but recommended for account recovery)
• Username chosen at registration

KYC & Verification Data:

• Government-issued identification document (PhilSys National ID, UMID, LTO driver's licence, or Philippine passport) — document type, number, and document image
• Proof of payment method ownership (e.g., GCash account screenshot, bank statement) where required for withdrawal processing
• Selfie or liveness check image where required for identity verification

Financial Data:

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• Account balance history
• Bonus and promotional activity records

Technical & Usage Data:

• IP address at time of registration and each login
• Device type, operating system, and browser
• Game activity logs including games played, bet amounts, session durations, and outcomes
• Sportsbook betting history
• Customer support chat transcripts and email correspondence

3. How We Collect Your Data

jilibaby collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to surveys or promotions.
• Automated collection: Technical data collected automatically when you access or use the Platform, including login events, game sessions, and device information captured via standard web technologies.
• Payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, GrabPay, 7-Eleven CLiQQ, Coins.ph, and USDT TRC20 processors when you initiate or receive a payment.
• Identity verification providers: KYC data verified through third-party identity verification services engaged by jilibaby to validate government-issued documents.

jilibaby does not purchase personal data from third-party data brokers and does not collect data from social media platforms without your explicit consent.

4. Purpose & Legal Basis for Processing

jilibaby processes your personal data for the following purposes, each supported by a legal basis under the Data Privacy Act of 2012:

• Account registration and management — necessary for the performance of our contract with you as a Platform user.
• Age verification and KYC compliance — required by Philippine law (21+ restriction) and applicable anti-money laundering regulations; a legal obligation that jilibaby must fulfil.
• Processing deposits and withdrawals — necessary for the performance of our contract with you, including routing payments to and from your chosen Philippine payment methods.
• Fraud prevention and security monitoring — jilibaby's legitimate interest in protecting the integrity of the Platform and the security of all players' accounts and funds.
• Customer support — necessary to respond to your queries, resolve disputes, and deliver the services you have requested.
• Regulatory reporting — legal obligation to report certain transactions and player information to PAGCOR and anti-money laundering authorities as required under applicable Philippine law.
• Responsible gaming monitoring — jilibaby's legitimate interest in identifying and assisting players who may be exhibiting signs of problem gambling, in accordance with responsible gaming obligations.
• Marketing communications — where you have explicitly opted in to receive promotional emails or SMS from jilibaby. You may withdraw consent at any time.

5. Data Sharing & Disclosure

jilibaby does not sell your personal data to third parties. We share personal data only in the following circumstances:

• Payment processors: Transaction data is shared with GCash, Maya, BPI, BDO, GrabPay, CLiQQ, Coins.ph, and USDT network providers solely to process deposits and withdrawals on your behalf. Each processor operates under its own data privacy policy.
• KYC and identity verification providers: Document images and identity data are shared with our contracted identity verification partner solely for the purpose of verifying your identity in compliance with KYC requirements.
• Game providers: Your account identifier and game session data are shared with third-party game studios (e.g., Pragmatic Play, PG Soft, JDB Gaming) solely for the purpose of delivering game content and resolving game disputes.
• Regulatory authorities: jilibaby will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine government agencies where required by law, court order, or regulatory directive.
• Fraud prevention agencies: Where jilibaby reasonably suspects fraudulent activity, relevant data may be shared with fraud prevention services or law enforcement authorities.

All third-party service providers engaged by jilibaby are required to process personal data solely for the purposes specified by jilibaby and to implement appropriate security measures. jilibaby does not transfer personal data to countries outside the Philippines without ensuring adequate data protection safeguards are in place.

6. Data Retention

jilibaby retains personal data for the following periods:

• Active account data: Retained for the duration of your account's existence on the Platform plus a mandatory post-closure retention period of five (5) years, as required under Philippine anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years following the transaction date.
• KYC documents: Retained for five (5) years following account closure or the last transaction, whichever is later.
• Customer support records: Retained for two (2) years following the resolution of the relevant support interaction.
• Marketing opt-in records: Retained until you withdraw consent, plus one (1) year as evidence of the consent record.

Following the applicable retention period, personal data is securely deleted or anonymised in accordance with jilibaby's data disposal procedures. Anonymised, aggregated data may be retained indefinitely for statistical and analytical purposes.

7. Security Measures

jilibaby implements technical and organisational security measures appropriate to the risk posed by processing your personal data. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jilibaby Platform.
• Encryption of sensitive data fields (including government ID numbers and financial data) at rest in jilibaby's database infrastructure.
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis.
• Two-factor authentication available (and recommended) for all player accounts.
• Regular security audits and vulnerability assessments of the Platform infrastructure.
• Incident response procedures ensuring that any personal data breach is assessed, contained, and reported to the National Privacy Commission (NPC) and affected individuals within the timeframes required by law.

While jilibaby takes all reasonable steps to protect your personal data, no transmission over the internet or electronic storage system is completely secure. Players are encouraged to use strong, unique passwords and to enable two-factor authentication to further protect their accounts.

8. Cookies & Tracking Technologies

jilibaby uses cookies and similar tracking technologies to deliver and improve the Platform. The categories of cookies used are:

• Strictly necessary cookies: Required for the Platform to function, including session authentication cookies that keep you logged in during your visit. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred lobby view, and bet history display options.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform, helping jilibaby identify and fix usability issues and improve the player experience.
• Security cookies: Assist in fraud detection by identifying unusual access patterns across sessions.

You can control non-essential cookies through your browser settings. Disabling certain cookies may affect Platform functionality. jilibaby does not use third-party advertising or behavioural targeting cookies.

9. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights in relation to the personal data jilibaby holds about you:

• Right to be informed: You have the right to know what personal data jilibaby collects and how it is used — which this Privacy Policy fulfils.
• Right of access: You may request a copy of the personal data jilibaby holds about you. Requests will be processed within thirty (30) days.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction. For account details, you may update most information directly in Account Settings or by contacting support.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jilibaby's legal retention obligations under AML regulations.
• Right to object: You may object to the processing of your personal data for direct marketing at any time. You may also object to processing based on legitimate interest where you have grounds relating to your particular situation.
• Right to data portability: You may request your personal data in a structured, commonly used format for transfer to another service provider.
• Right to lodge a complaint: If you believe jilibaby has failed to comply with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, contact jilibaby's Data Protection Officer at [email protected] (plain text — not a clickable link). Identity verification will be required before we process your request.

10. Children's Privacy

The jilibaby Platform is strictly intended for adults aged 21 years and above as required under Philippine gaming regulations. jilibaby does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the registration process and again during KYC verification prior to withdrawal processing.

If jilibaby becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, funds will be reviewed in accordance with applicable regulations, and the personal data will be handled in accordance with legal requirements. If you believe a minor has registered on jilibaby, please contact support immediately.

11. Changes to This Privacy Policy

jilibaby reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, Platform features, or applicable legal requirements. The date of the most recent revision is displayed at the top of this page.

For material changes — those that significantly affect your rights or how your data is used — jilibaby will notify registered Players via in-platform notification or the mobile number on file at least seven (7) days before the change takes effect. Your continued use of the Platform following the effective date of any revision constitutes acceptance of the updated Privacy Policy.

12. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or jilibaby's data processing practices, you may contact our Data Protection Officer using the details below. Please note that the email address must be typed manually — it is displayed as plain text and is not a clickable link.

You also have the right to escalate unresolved privacy concerns to the National Privacy Commission of the Philippines (NPC). The NPC is the supervisory authority for data privacy matters under Republic Act No. 10173.