jiloko Privacy Policy

1. Introduction

jiloko ("jiloko," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use jiloko.club and the services offered thereunder. This Privacy Policy explains how jiloko collects, processes, stores, shares, and protects personal data in connection with your use of our platform.

This Policy is aligned with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC"). By accessing jiloko or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data Controller

jiloko is the personal information controller ("PIC") responsible for your data. jiloko determines the purposes and means of processing personal data collected through the jiloko platform. For all data privacy inquiries, please contact the jiloko Data Protection Officer through the live chat support channel or via the email address provided in Section 15 of this Policy.

3. Personal Data We Collect

jiloko collects the following categories of personal data in connection with account registration, verification, and gameplay:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details provided during KYC verification (e.g., PhilSys ID, UMID, passport, driver's licence, SSS/GSIS ID number)
• Contact Data: Philippine mobile number, email address
• Financial Data: GCash number, PayMaya account, bank account name and number (BPI, BDO, Metrobank, or other registered accounts used for deposit or withdrawal at jiloko)
• Transaction Data: Deposit history, withdrawal history, game bet and win records, bonus redemption history
• Technical Data: IP address, device type, operating system, browser type and version, session timestamps, and geolocation data (country/region level) for compliance verification
• Usage Data: Pages visited on jiloko, games accessed, session duration, click patterns, and navigation paths
• Communications Data: Records of support chat conversations, dispute submissions, and feedback submitted to jiloko

4. How We Collect Your Data

1. Directly from you — when you register a jiloko account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion
2. Automatically — through cookies, log files, and analytics tools embedded in jiloko.club that record technical and usage data as you navigate the site
3. From third parties — including payment processors (GCash, PayMaya, banks), identity verification service providers, and fraud detection partners, in connection with transaction processing and KYC compliance

5. Legal Basis for Processing

jiloko processes your personal data on the following legal bases under the DPA and its IRR:

• Contractual necessity — processing required to register and maintain your jiloko account, process deposits and withdrawals, and deliver gaming services
• Legal obligation — processing required to comply with Philippine anti-money laundering laws (AMLA), PAGCOR-regulated KYC requirements, tax reporting obligations, and NPC data protection mandates
• Legitimate interest — fraud detection, account security, abuse prevention, and platform analytics to improve jiloko services
• Consent — for optional marketing communications and non-essential cookies, where your separate consent is obtained and can be withdrawn at any time

6. How We Use Your Personal Data

jiloko uses collected personal data for the following purposes:

• To register, verify, and maintain your jiloko player account
• To process deposits, withdrawals, and in-game transactions via GCash, PayMaya, and Philippine bank channels
• To conduct KYC identity and age verification (confirming you are 21 or older) as required by law and PAGCOR standards
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities on jiloko
• To comply with AMLA reporting obligations and regulatory requests from PAGCOR, the NPC, or other competent Philippine authorities
• To send transactional communications including OTPs, deposit confirmations, withdrawal status updates, and security alerts
• To provide customer support and resolve account or transaction disputes
• To administer bonuses, promotions, and loyalty programmes
• To analyse platform usage and improve the jiloko user experience
• To send marketing communications where you have provided separate opt-in consent

7. Disclosure to Third Parties

1. jiloko does not sell, rent, or trade your personal data to third-party advertisers or data brokers.
2. Personal data may be shared with the following categories of third parties, solely to the extent necessary for jiloko to provide its services: payment processors (GCash/PayMaya/banks), KYC verification service providers, fraud prevention and AML compliance vendors, cloud hosting providers, and licensed game content providers.
3. All third-party service providers with whom jiloko shares personal data are bound by contractual data processing agreements requiring them to maintain appropriate security measures and to use the data only for the specified purpose.
4. jiloko may disclose personal data to Philippine government authorities, law enforcement agencies, PAGCOR, or the NPC where required by law, court order, or legitimate regulatory request.
5. In the event of a corporate restructuring, merger, or acquisition involving jiloko, personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

8. International Data Transfers

Some of jiloko's service providers — including cloud infrastructure, game platform, and fraud detection vendors — may process personal data outside the Philippines. Where such transfers occur, jiloko ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to process the data in accordance with standards equivalent to those required under the Philippine DPA. jiloko does not transfer personal data to jurisdictions that do not offer adequate data protection without implementing such safeguards.

9. Data Retention

1. jiloko retains personal data for as long as your account is active and for a minimum period of five (5) years following account closure, consistent with Philippine AMLA record-keeping requirements and PAGCOR regulatory standards.
2. Transaction records and KYC documentation are retained for the period specified by applicable Philippine anti-money laundering regulations, which currently prescribe a minimum retention period of five years from the date of the transaction.
3. Upon expiry of applicable retention periods and in the absence of any legal hold, personal data will be securely deleted or anonymised.
4. Communications data (support chat records) is retained for a period of two (2) years following the conclusion of the support interaction, unless retention for a longer period is required by an ongoing dispute or legal proceeding.

10. Cookies & Tracking Technologies

1. jiloko uses cookies and similar tracking technologies (local storage, session tokens) to manage login sessions, maintain security, enable site functionality, and analyse usage patterns.
2. Essential cookies are required for jiloko to function and cannot be disabled without impacting core services such as login, session management, and fraud detection.
3. Analytics cookies collect aggregated, anonymised usage data to help jiloko improve the platform. These are enabled by default but can be disabled through your browser settings.
4. jiloko does not use third-party advertising cookies or behavioural tracking pixels for cross-site advertising purposes.
5. You can manage cookie preferences through your browser's privacy settings. Note that disabling essential cookies may prevent you from accessing certain features of jiloko.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jiloko:

• Right to be informed — to be notified about how your data is collected and used, as detailed in this Policy
• Right of access — to request a copy of the personal data jiloko holds about you
• Right to rectification — to request correction of inaccurate or incomplete personal data
• Right to erasure or blocking — to request deletion or blocking of data where processing is no longer necessary, subject to applicable legal retention obligations
• Right to object — to object to processing based on legitimate interest, particularly for direct marketing communications
• Right to data portability — to receive your personal data in a structured, commonly used format
• Right to damages — to claim compensation for any injury sustained as a result of inaccurate, incomplete, or unlawfully obtained personal data

To exercise any of these rights, submit your request through the jiloko live chat support channel or email the Data Protection Officer (see Section 15). jiloko will respond within the timeframe prescribed by the NPC.

12. Security Measures

jiloko implements the following technical and organisational security measures to protect your personal data:

• SSL/TLS encryption for all data transmitted between your device and jiloko.club
• Encrypted storage of sensitive personal data and financial information at rest
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• Two-factor authentication (OTP) available for all player accounts
• Automated fraud detection and anomaly monitoring systems
• Regular security assessments and vulnerability testing of jiloko platform infrastructure
• Data breach response procedures aligned with NPC notification requirements

In the event of a personal data breach that poses a real risk of serious harm to data subjects, jiloko will notify the NPC within 72 hours of becoming aware of the breach, and will inform affected data subjects without undue delay, in accordance with NPC Circular 16-03.

13. Children and Minors

jiloko is strictly for individuals who are 21 years of age or older. jiloko does not knowingly collect or process personal data from persons below the age of 21. Age verification is conducted during KYC as part of the account registration process. If jiloko becomes aware that personal data has been collected from a person below the minimum age, that account will be immediately suspended and the personal data deleted or returned in accordance with the DPA. Parents or guardians who believe a minor has registered on jiloko should contact the Data Protection Officer immediately.

14. Changes to This Privacy Policy

jiloko may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or NPC guidance. Material changes will be communicated to registered members via the mobile number or email address on their account. The current version of this Policy is always available at jiloko.club/privacy-policy. Your continued use of jiloko after an updated Policy takes effect constitutes your acceptance of the revised terms.

15. Contact & Data Protection Officer

For data privacy inquiries, requests to exercise data subject rights, concerns about this Privacy Policy, or to report a suspected data breach involving your jiloko account, please contact the jiloko Data Protection Officer through the live chat support channel available in your member dashboard. Our support team is available 24/7.

Email: [email protected]

jiloko takes all data privacy concerns seriously and will respond to requests within the period required by the NPC. Complaints that cannot be resolved through jiloko's internal process may be escalated to the National Privacy Commission of the Philippines.