Privacy Policy – jill88 Casino Philippines
At jill88, protecting your personal data is not an afterthought — it is a core operational requirement. This Privacy Policy explains exactly what information we collect, why we collect it, how we use and protect it, and what rights you hold as a Filipino data subject under Republic Act No. 10173.
These six cards summarize the most important privacy commitments jill88 makes to every Filipino player. The full legal text below governs in all cases.
Your Data, Encrypted
All personal data stored by jill88 is encrypted using industry-standard AES-256 encryption at rest. Data in transit is protected by TLS 1.3. This means your name, ID details, and payment information are unreadable to anyone who accesses our storage infrastructure without authorization — the same standard used by Philippine banks including BPI and BDO.
No Data Sales — Ever
jill88 does not sell, rent, or trade your personal information to any third party for their own marketing or commercial purposes. Data is shared only where legally required (PAGCOR, AMLC) or where necessary to operate the service (payment processors, KYC verification providers) — all under binding data processing agreements.
Your Rights Under RA 10173
As a Filipino data subject, you have eight enforceable rights under the Data Privacy Act of 2012: to be informed, to object, to access, to correct, to erasure, to data portability, to damages, and to file complaints with the National Privacy Commission. jill88 honors all eight rights and provides clear channels to exercise each one.
Minimal Data Collection
jill88 collects only the personal data necessary to operate legally and deliver the service you expect. We do not collect data "just in case." Every data field collected during registration and KYC has a specific, documented processing purpose and a defined retention period. When retention periods expire, data is securely purged.
Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, jill88 will notify the National Privacy Commission within 72 hours of discovery and notify affected players within a reasonable period thereafter. We maintain an incident response plan that is tested and updated regularly.
Philippine-First Data Governance
Primary data storage for jill88 player accounts is hosted on infrastructure located in the Philippines or in jurisdictions with equivalent data protection standards. Any cross-border data transfers are governed by binding contractual clauses that ensure your data receives the same level of protection as it does under Philippine law.
Contents
- 01 Introduction & Scope
- 02 Data Controller
- 03 Data We Collect
- 04 How We Collect Data
- 05 Purposes of Processing
- 06 Legal Bases
- 07 Data Sharing
- 08 Cookies & Tracking
- 09 Data Retention
- 10 Security Measures
- 11 Your Rights
- 12 Children's Privacy
- 13 Cross-Border Transfers
- 14 Policy Changes
- 15 Contact & DPO
01 Introduction and Scope
This Privacy Policy ("Policy") is published by jill88 ("jill88", "the Company", "we", "us", "our"), the operator of the online gaming platform accessible at jill88.app and all associated subdomains and interfaces (collectively, "the Platform").
This Policy applies to all personal data we process in connection with: (a) your registration and maintenance of a jill88 account; (b) your use of any game, feature, or service on the Platform; (c) all financial transactions conducted through your account; (d) your communications with jill88 customer support; and (e) your browsing of jill88.app, including via mobile browser.
jill88 is committed to processing personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), the issuances of the National Privacy Commission ("NPC"), and the data governance requirements of the Philippine Amusement and Gaming Corporation ("PAGCOR") applicable to licensed online gaming operators.
02 Data Controller Identity
For the purposes of the Data Privacy Act of 2012 and its Implementing Rules, jill88 is the Personal Information Controller ("PIC") in respect of all personal data collected from players and visitors of the Platform. As PIC, jill88 determines the purposes and means of processing your personal data and bears primary accountability for its lawful and secure handling.
jill88 has appointed a Data Protection Officer ("DPO") as required under Section 21 of the DPA IRR. The DPO is responsible for overseeing data protection compliance, handling data subject requests, and serving as the primary point of contact with the National Privacy Commission.
03 Categories of Personal Data We Collect
jill88 collects personal data in the following categories, depending on the nature of your interaction with the Platform:
3.1 Identity Data
- Full legal name as it appears on government-issued identification
- Date of birth (for age verification per PAGCOR 21+ requirement)
- Nationality and citizenship status
- Government-issued ID type, number, and images (front and back) submitted during KYC verification
- Selfie or liveness photograph submitted for identity verification matching
3.2 Contact Data
- Email address (primary account identifier and communications channel)
- Philippine mobile number (used for OTP authentication and account recovery)
- Residential address (required for KYC compliance and PAGCOR reporting)
3.3 Financial Data
- GCash mobile number and account reference (not your GCash PIN — we never receive this)
- Maya (PayMaya) account reference and registered mobile number
- Bank account number, account name, and branch for bank transfer transactions (BPI, BDO, Metrobank, and others)
- USDT wallet address for cryptocurrency transactions
- Transaction history: deposit amounts, timestamps, and payment methods
- Withdrawal history: amounts, destinations, and processing timestamps
3.4 Technical and Usage Data
- IP address at time of login and during sessions
- Device type, operating system, and browser version
- Session duration, login timestamps, and geographic location inferred from IP
- Game history: games played, wagers placed, outcomes, and session lengths
- Bonus usage and wagering progress data
- Customer support interaction logs
3.5 Sensitive Personal Information
Under the DPA, certain categories of information are classified as Sensitive Personal Information (SPI) and receive heightened protection. jill88 processes the following SPI only where strictly required by law or regulatory obligation:
- Government-issued ID numbers (collected for PAGCOR KYC compliance)
- Financial transaction data that may reveal source-of-funds information (collected for AMLC reporting obligations under RA 9160)
04 How We Collect Your Personal Data
jill88 collects personal data through the following channels:
4.1 Directly From You
You provide data directly when you: complete the registration form; submit KYC verification documents; make a deposit or request a withdrawal; contact our customer support team via live chat or email; participate in a bonus offer or promotion; or update your account profile settings.
4.2 Automatically During Platform Use
When you access jill88.app or use the Platform, our systems automatically record technical data including your IP address, device information, session timestamps, and detailed game interaction logs. This data is collected through server logs, session cookies, and analytics tracking described in Section 8 of this Policy.
4.3 From Third-Party Verification Services
For KYC and identity verification purposes, jill88 engages certified third-party verification service providers. These providers may return verification results (pass/fail/refer), risk scores, and extracted document data to jill88 following your submission. All third-party processors are bound by data processing agreements consistent with DPA requirements.
4.4 From Payment Processors
When you transact through GCash, Maya, or other payment channels, the relevant processor provides jill88 with transaction confirmation data including your account reference, amount, and timestamp. jill88 does not receive or store your full payment credentials — we receive only the minimum data necessary to reconcile transactions.
05 Purposes of Data Processing
jill88 processes your personal data only for the following specified, legitimate purposes:
| Purpose | Data Categories Used |
|---|---|
| Account Registration & Management | Identity data, contact data |
| Age Verification (21+ Compliance) | Identity data, date of birth |
| KYC / AML Compliance | Identity data, financial data, technical data |
| Payment Processing | Financial data, contact data |
| Game Service Delivery | Account data, technical and usage data |
| Security & Fraud Prevention | Technical data, financial data, identity data |
| Customer Support | All categories relevant to the query |
| Responsible Gaming Monitoring | Usage data, financial data |
| PAGCOR Regulatory Reporting | Identity data, financial data, usage data |
| Service Improvement & Analytics | Aggregated, anonymized technical data |
| Marketing Communications (with consent) | Contact data, preferences data |
06 Legal Bases for Processing
Every processing activity at jill88 is grounded in at least one lawful basis under the Data Privacy Act of 2012. The primary legal bases we rely on are:
- Consent (Section 12(a) DPA): For marketing communications and optional personalization features. You may withdraw consent at any time without affecting the lawfulness of prior processing.
- Performance of Contract (Section 12(b) DPA): Processing necessary to operate your account, process transactions, and deliver games and services you have subscribed to.
- Compliance with Legal Obligation (Section 12(c) DPA): Processing required by PAGCOR licensing conditions, Anti-Money Laundering Act obligations (RA 9160), AMLC reporting requirements, and National Privacy Commission rules.
- Legitimate Interests (Section 12(f) DPA): For fraud prevention, security monitoring, abuse detection, and service improvement analytics, where our legitimate interests do not override your fundamental rights and freedoms. We have conducted and documented Legitimate Interests Assessments (LIA) for each processing activity relying on this basis.
07 Data Sharing and Third-Party Disclosure
jill88 shares personal data with third parties only in the following circumstances:
7.1 Regulatory Authorities
jill88 discloses data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where required by law or by lawful order. We do not notify players of disclosures to regulatory or law enforcement authorities where such notification would obstruct a legitimate investigation or violate a legal prohibition on disclosure.
7.2 Payment Service Providers
Transaction data is shared with GCash (Mynt), Maya (Paymaya Philippines Inc.), BancNet, InstaPay operators, and USDT blockchain infrastructure as necessary to process deposits and withdrawals. All Philippine payment service providers operate under Bangko Sentral ng Pilipinas (BSP) supervision and relevant data protection requirements.
7.3 KYC and Identity Verification Providers
Identity document data and liveness check images are processed by third-party KYC verification providers engaged by jill88 under binding data processing agreements. These providers are authorized to process your identity data solely for the purpose of verification and must delete raw data after verification is complete, retaining only the verified result and associated audit trail.
7.4 Game Software Providers
Game session data is shared with game providers (PG Soft, JILI, Pragmatic Play, Evolution Gaming, and others) to the extent necessary to deliver game services — specifically, wallet balance updates and game result reconciliation. Game providers do not receive your identity or contact data.
7.5 No Sale of Data
jill88 does not sell, rent, barter, or otherwise make available your personal data to any third party for their own commercial purposes. Any data sharing arrangement is limited to the performance of a specific service function or the fulfillment of a legal obligation.
08 Cookies and Tracking Technologies
jill88 uses cookies and similar tracking technologies on the Platform. The following categories of cookies are in use:
8.1 Strictly Necessary Cookies
These cookies are essential for the Platform to function and cannot be disabled. They include session management cookies (keeping you logged in during a gaming session), security tokens (preventing CSRF attacks), and load balancing cookies. No consent is required for strictly necessary cookies under the DPA.
8.2 Functional Cookies
Functional cookies remember your preferences — such as your selected language, preferred game lobby layout, and session timeout settings — to provide a personalized experience. These are set with your implicit consent on continued use of the Platform after being informed of their use in this Policy.
8.3 Analytics Cookies
jill88 uses first-party analytics tools to understand how players use the Platform — which game categories are most popular, where users exit the deposit flow, and how support chat is used. Analytics data is aggregated and anonymized before analysis. Third-party analytics services are not used in a manner that allows cross-site tracking of individual users.
8.4 Managing Cookies
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent the use of the Platform. Disabling functional or analytics cookies will not prevent access but may reduce the quality of your experience. Instructions for managing cookies are available in the help documentation of all major browsers.
09 Data Retention Periods
jill88 retains personal data only for as long as necessary to fulfill the processing purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account identity and registration data | Duration of account + 5 years after closure | PAGCOR licensing / AML Act |
| KYC verification documents | Duration of account + 5 years after closure | RA 9160 (AMLA) |
| Financial transaction records | 10 years from transaction date | RA 9160 / PAGCOR rules |
| Game session logs | 3 years from session date | PAGCOR audit requirements |
| Customer support records | 3 years from last interaction | Legitimate interests / contract |
| Marketing consent records | Duration of consent + 2 years | DPA consent accountability |
| Technical access logs (IP, device) | 12 months from log date | Security / fraud prevention |
| Self-exclusion records | Indefinite (regulatory requirement) | PAGCOR responsible gaming |
Upon expiry of the applicable retention period, jill88 will securely delete or irreversibly anonymize the relevant personal data. Deletion requests may be fulfilled ahead of the retention period for non-legally-mandated data where this does not conflict with jill88's legal obligations.
10 Security Measures
jill88 implements a layered security architecture to protect personal data against unauthorized access, disclosure, alteration, and destruction. Key technical and organizational measures include:
10.1 Technical Safeguards
- Encryption at rest: All databases containing personal data are encrypted using AES-256
- Encryption in transit: All data transmitted between your device and jill88 servers is protected by TLS 1.3
- Access controls: Staff access to personal data is role-based and limited to the minimum necessary for each role (principle of least privilege)
- Two-factor authentication: Required for all jill88 staff who access systems containing personal data
- Intrusion detection: Automated monitoring systems detect anomalous access patterns and trigger security alerts in real time
- Regular penetration testing: Third-party security assessments are conducted at least annually
10.2 Organizational Safeguards
- All staff with access to personal data complete mandatory data protection training on joining and annually thereafter
- Data access is logged and audited regularly for anomalous patterns
- jill88 maintains a documented Personal Data Breach Response Plan, tested twice yearly
- Contracts with all third-party processors include mandatory security requirements consistent with DPA obligations
11 Your Rights as a Data Subject
Under Republic Act No. 10173 (Data Privacy Act of 2012), you hold the following rights with respect to your personal data held by jill88. These rights can be exercised by contacting the jill88 DPO at [email protected]:
jill88 will respond to data subject rights requests within thirty (30) calendar days of receipt of a valid, verified request. Where additional time is required due to complexity or volume, jill88 will notify you within the initial 30-day period and provide an updated timeline. Exercising your rights is free of charge; however, manifestly unfounded or excessive requests may be subject to a reasonable administrative fee.
12 Children's Privacy and Age Enforcement
The jill88 Platform is strictly restricted to individuals aged 21 years and above, in compliance with PAGCOR regulations governing casino-style online gambling in the Philippines. jill88 does not knowingly collect personal data from anyone under the age of 21, and the collection of data from minors is not within the intended scope of any jill88 service.
Where jill88 has reason to believe that personal data has been collected from a person under 21, we will: (a) suspend the relevant account immediately; (b) delete the personal data as soon as reasonably practicable, subject only to any retention obligations under PAGCOR or AML regulations that specifically govern underage access incidents; and (c) refund any deposits made, net of any bonuses already applied.
13 Cross-Border Data Transfers
jill88's primary operations and data storage are centered in the Philippines or in jurisdictions that provide equivalent data protection standards. Certain limited data transfers to overseas processors may occur in connection with: game software providers headquartered outside the Philippines; international payment processing infrastructure; or cloud computing services with geographically distributed storage.
All cross-border transfers of personal data by jill88 are governed by one or more of the following safeguards:
- Binding contractual clauses in data processing agreements that impose DPA-equivalent obligations on the overseas processor
- Transfer to jurisdictions recognized by the National Privacy Commission as providing adequate levels of data protection
- Where neither of the above applies, transfer only where necessary for the performance of a contract to which you are a party (e.g., processing a withdrawal to an overseas-domiciled payment network)
14 Changes to This Privacy Policy
jill88 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, and regulatory guidance from the National Privacy Commission or PAGCOR. Material changes — defined as changes that significantly affect your rights, the categories of data we collect, or the purposes for which we process your data — will be communicated to registered players via the email address on file at least fourteen (14) days before taking effect.
Non-material changes (such as clarifications, formatting updates, or corrections to typographical errors) may be made without prior notice, with the updated Policy posted at jill88.app/privacy-policy and identified by an updated version date. The version date at the top of this Policy indicates when it was last substantively revised.
Continued use of the jill88 Platform following the effective date of any Policy change constitutes your acknowledgment of the revised terms. If you do not agree with any changes to this Policy, you should cease using the Platform and may request account closure under the provisions of our Terms & Conditions.
15 Contact Information and DPO Details
For all data privacy matters — including exercising your rights under RA 10173, submitting a data subject access request, withdrawing consent, or raising a concern about our data processing practices — please contact the jill88 Data Protection Officer using the details below:
- Email: [email protected] (Subject: "Data Privacy Request")
- Live Chat: Available 24/7 via the jill88 Platform — for urgent data security concerns
- Response Time: Within five (5) business days for all DPO enquiries
If you believe jill88 has not adequately addressed your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information on lodging a complaint is available on the NPC's website at privacy.gov.ph (external government site — not affiliated with jill88).
This Privacy Policy was last updated in January 2026. The current version supersedes all prior versions and is always available at jill88.app/privacy-policy.
Play at jill88 — Privacy First
Now that you understand how jill88 protects your personal data, you can play with confidence. PAGCOR-licensed, DPA-compliant, and committed to Filipino players aged 21 and above.