JilliAsia Privacy Policy - How We Protect Your Data

1. Information We Collect

When you sign up or interact with JilliAsia, we collect personal data that is necessary to provide our online gaming services securely and legally. We only ask for what we genuinely need — walang labis, walang kulang.

1.1 Information You Provide Directly

When you create a JilliAsia account or contact our support team, you voluntarily provide:

• Full legal name as shown on your government-issued ID
• Date of birth for age verification
• Philippine mobile number and email address
• Residential address in the Philippines
• Copies of valid identification documents (for KYC/AML compliance)
• Payment details — including GCash or Maya account numbers, bank account details, or card information — used for deposits and withdrawals
• Any information shared through customer support communications

1.2 Information Collected Automatically

When you visit jilliasia.best or use our platform, we automatically gather certain technical data:

• IP address and device identifiers
• Browser type, version, and operating system
• Pages visited, time spent, and click-through behaviour
• Geolocation data (to verify you are playing from within the Philippines)
• Session timestamps and game history logs
• Cookies and similar tracking technologies (see Section 4)

1.3 Information from Third Parties

We may receive personal data about you from trusted third parties, including identity verification providers, fraud detection services, and payment processors such as GCash, Maya, BDO, BPI, or UnionBank. This information helps us confirm your identity, prevent fraudulent activity, and process transactions smoothly.

2. How We Use Your Data

JilliAsia uses the personal data we collect for specific, legitimate purposes. We do not use your information in ways you would not reasonably expect. Here is a clear breakdown of why we process your data:

We will never sell your personal information to third parties for their marketing purposes. If we want to use your data for any purpose not listed above, we will ask for your explicit consent first.

3. Data Sharing and Disclosure

JilliAsia does not sell, rent, or trade your personal data. We share your information only when it is necessary to operate our platform safely and legally, and only with trusted parties who are contractually bound to protect it.

3.1 Service Providers

We work with carefully vetted third-party service providers to deliver parts of our platform, including:

• Payment processors (GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, Visa/Mastercard acquiring banks) — to process deposits and withdrawals
• Identity verification providers — to complete KYC checks required by Philippine gaming regulations
• Anti-fraud and AML screening services — to detect and prevent illegal activity
• Cloud hosting providers — to store and process platform data securely
• Customer support tools — to manage your enquiries and complaints efficiently

All service providers are required to process your data only on our instructions and in accordance with applicable Philippine data protection laws.

3.2 Legal and Regulatory Disclosure

JilliAsia may be legally required to disclose your personal data to government authorities, regulatory bodies, law enforcement agencies, or courts when compelled by Philippine law or valid legal process. This includes reporting obligations under the Anti-Money Laundering Act (AMLA) and related regulations. We will inform you of any such disclosure where we are legally permitted to do so.

3.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of JilliAsia's business, your personal data may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our website before your data is transferred and becomes subject to a different privacy policy.

4. Cookies and Tracking Technologies

JilliAsia uses cookies and similar technologies to make our platform work properly, keep it secure, and give you a better gaming experience. Here is a plain-language breakdown of the cookies we use:

4.1 Types of Cookies We Use

• Essential Cookies — Required for the platform to function. These keep you logged in, maintain your session, and enable core features like deposits and game loading. You cannot opt out of these.
• Security Cookies — Help us detect suspicious activity, prevent account takeovers, and protect against cross-site request forgery (CSRF) attacks.
• Analytics Cookies — Collect aggregated, anonymised data about how players use jilliasia.best so we can improve the platform. We use privacy-respecting analytics tools that do not share your data with advertising networks.
• Preference Cookies — Remember your settings, such as preferred language and display options, so you do not have to reconfigure them every visit.

4.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Most modern browsers allow you to block or delete cookies, though disabling essential cookies may prevent some JilliAsia features from working correctly. On your first visit, our cookie consent banner gives you clear choices about which optional cookies to accept.

5. Data Security

JilliAsia invests heavily in technical and organisational security measures to keep your personal data safe from unauthorised access, accidental loss, destruction, or disclosure.

5.1 Technical Safeguards

• 256-bit TLS/SSL encryption on all data transmitted between your device and our servers
• At-rest encryption for sensitive data stored in our databases
• Multi-factor authentication (MFA) options for player accounts
• Regular penetration testing and security audits by independent cybersecurity specialists
• Firewalls, intrusion detection systems, and real-time threat monitoring
• Secure, access-controlled cloud infrastructure with redundant backups

5.2 Organisational Safeguards

• Strict access controls — only authorised JilliAsia staff can access player data, and only to the extent necessary for their role
• Regular staff training on data protection and cybersecurity best practices
• A designated Data Protection Officer (DPO) registered with the National Privacy Commission (NPC)
• Written data processing agreements with all third-party service providers

5.3 Data Breach Response

Despite our best efforts, no digital platform can guarantee 100% security. If a data breach occurs that is likely to affect your rights and freedoms, JilliAsia will notify you and the National Privacy Commission within 72 hours of discovering the breach, as required by Philippine law. We will also provide clear guidance on steps you can take to protect yourself.

6. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have clear, enforceable rights over your personal data held by JilliAsia. We are committed to honouring all of these rights promptly and without unnecessary delay.

To exercise any of these rights, contact our Data Protection Officer at support@jilliasia.best. We will respond within 15 business days. Some requests may require us to verify your identity before we can act on them — this is to protect you, not to create obstacles.

If you feel JilliAsia has not addressed your privacy concern adequately, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

7. Data Retention

JilliAsia keeps your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law and regulatory obligations.

• Active account data — retained for the duration of your account and for 5 years after account closure, in line with AML record-keeping requirements
• Transaction records — retained for a minimum of 5 years as required under the Anti-Money Laundering Act
• KYC and identity documents — retained for 5 years after the end of the business relationship
• Customer support communications — retained for 3 years from the date of the last interaction
• Marketing preferences — retained until you withdraw consent or close your account
• Technical logs — retained for 12 months for security and fraud monitoring purposes

When data is no longer needed and no legal obligation requires us to keep it, we securely delete or anonymise it so that it can no longer be linked to you.

8. Minors and Children's Privacy

JilliAsia is strictly an adults-only platform. Our gaming services are available exclusively to individuals aged 21 years and older, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from anyone below the age of 21.

During registration, all players must confirm their age, and we conduct mandatory age verification as part of our KYC process. If we discover that personal data has been collected from a minor, we will immediately delete the account and all associated data, and report the matter to relevant authorities where required.

If you are a parent or guardian and believe your child has created an account on JilliAsia, please contact us immediately at support@jilliasia.best and we will take swift action.

9. Changes to This Privacy Policy

JilliAsia may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make significant changes, we will:

• Update the "Last Reviewed" date at the top of this page
• Post a clear notice on the JilliAsia homepage for at least 30 days
• Send an email notification to all registered players for material changes

Your continued use of JilliAsia after a privacy policy update constitutes your acceptance of the revised policy. We encourage you to review this page periodically so you stay informed about how we protect your data.

10. Contact and Data Protection Officer

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, please get in touch with our dedicated Data Protection Officer:

• Email: support@jilliasia.best
• Platform: Visit our FAQ page for common questions
• Response time: Within 15 business days

For complaints that we are unable to resolve to your satisfaction, you may contact the National Privacy Commission of the Philippines (NPC) directly. Our DPO is registered with the NPC and cooperates fully with regulatory enquiries.