jiliacr Privacy Policy

1. About This Privacy Policy

This Privacy Policy ("Policy") is published by jiliacr, a PAGCOR-licensed online gaming operator serving Filipino players across the Philippines. This Policy describes how jiliacr collects, uses, stores, shares, and protects the personal information of players, website visitors, and anyone who interacts with the jiliacr platform at jiliacr.net.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the issuances of the National Privacy Commission (NPC), and applicable PAGCOR data handling requirements for licensed online gaming operators.

By accessing the jiliacr website, registering an account, making a deposit, or placing a wager, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. If you do not agree with any part of this Policy, you must discontinue your use of the jiliacr platform.

This Policy should be read together with the jiliacr Terms & Conditions, which govern your overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on data-related matters, this Policy shall prevail.

2. Personal Data We Collect

jiliacr collects only the personal data that is necessary to provide you with a safe, compliant, and fully functional online gaming experience. The categories of personal data we collect are described below.

2.1 Account Registration Data

When you register a jiliacr account, we collect: your full legal name as it appears on your Philippine government-issued identification, date of birth, residential address in the Philippines (city, province, postal code), a valid mobile number registered in the Philippines, and a unique email address. You will also create a password, which is stored in encrypted form and is never accessible to jiliacr staff.

2.2 Identity Verification (KYC) Data

As a PAGCOR-licensed operator subject to Philippine anti-money laundering and know-your-customer regulations, jiliacr is legally required to verify the identity of all account holders. For KYC purposes, we collect copies of one or more of the following valid Philippine government-issued identification documents:

• Philippine Statistics Authority (PSA) National ID or PhilSys ID
• Philippine passport issued by the Department of Foreign Affairs (DFA)
• Driver's license issued by the Land Transportation Office (LTO)
• Unified Multi-Purpose ID (UMID) issued by SSS or GSIS
• Voter's ID issued by the Commission on Elections (COMELEC)
• Professional Regulation Commission (PRC) ID

We may also request proof of residential address (such as a recent utility bill or bank statement in your name showing your Philippine address) and, where required by PAGCOR AML regulations, documentation related to your source of funds.

2.3 Financial Transaction Data

When you make deposits or withdraw funds, jiliacr collects transaction data including: the payment method used (e.g., GCash account number, PayMaya account details, BPI or BDO bank account details), transaction reference numbers, deposit and withdrawal amounts in Philippine Peso (PHP), timestamps of all transactions, and records of any payment processing outcomes. jiliacr does not store full card numbers or full bank account credentials on its own servers — payment processing is handled through secure third-party payment gateways.

2.4 Gaming Activity Data

jiliacr records all gaming activity conducted through your account, including: game rounds played, wager amounts, outcomes, bonus transactions, session durations, and responsible gaming tool settings you have configured. This data is retained as required by PAGCOR regulations and is used to resolve disputes, investigate irregular activity, and provide responsible gaming support.

2.5 Technical and Device Data

When you access jiliacr, we automatically collect certain technical information including: your IP address, device type and model, operating system and version, browser type and version, mobile network operator (for Philippine mobile users), session start and end times, pages visited within the jiliacr platform, and approximate geographic location derived from your IP address. This data is used for security monitoring, fraud prevention, and service optimization.

2.6 Communications Data

If you contact jiliacr through the 24/7 live chat facility or by email, we retain records of those communications including the content of messages, timestamps, and any personal data you provide in the course of the interaction. This data is used to resolve your inquiry, train customer support staff, and maintain records required for PAGCOR compliance.

3. How We Collect Your Data

jiliacr collects personal data through the following channels and methods:

• Directly from you: when you complete the registration form, submit KYC documents, contact customer support, or update your account profile;
• Automatically through the platform: via server logs, session tracking, and standard web analytics technologies when you browse or use the jiliacr website;
• Through cookies and similar technologies: as described in Section 9 of this Policy;
• From payment service providers: when you initiate a deposit or withdrawal transaction through GCash, PayMaya, BPI, BDO, Metrobank, or 7-Eleven, the relevant payment processor confirms the transaction to jiliacr along with reference data necessary to credit your account;
• From identity verification services: jiliacr may use third-party KYC verification services to validate the authenticity of identification documents submitted by players, as permitted under PAGCOR licensing requirements;
• From fraud prevention and security services: jiliacr may receive risk signals from third-party fraud prevention systems to protect the platform and its players from unauthorized access and financial crime.

4. How We Use Your Personal Data

jiliacr processes your personal data only for specific, legitimate purposes as described below. We do not use your data for any purpose that is incompatible with the purposes for which it was originally collected.

• Account management: to create, maintain, and manage your jiliacr player account, process your login credentials, and allow you to access the platform's gaming services;
• Identity verification and KYC compliance: to verify your identity and age (21+) as required by PAGCOR regulations and Philippine law, and to fulfill our Know Your Customer obligations;
• Payment processing: to process deposits and withdrawals in Philippine Peso through your chosen payment method, and to maintain accurate financial records;
• AML and fraud prevention: to monitor transactions and gaming activity for signs of money laundering, financial crime, or fraudulent behavior, as required under Republic Act 9160 (Anti-Money Laundering Act) and PAGCOR regulations;
• Responsible gaming: to monitor your gaming patterns, apply responsible gaming limits you have set, and reach out proactively where our systems identify potential signs of problem gambling behavior;
• Customer support: to respond to your inquiries, resolve disputes, and provide technical assistance through the 24/7 live chat and email support channels;
• Legal and regulatory compliance: to comply with applicable Philippine laws, PAGCOR licensing conditions, court orders, and regulatory requests from government authorities including the AMLC;
• Security and platform integrity: to detect and prevent unauthorized access, cheating, multi-accounting, and other prohibited conduct under the jiliacr Terms & Conditions;
• Service improvement: to analyze aggregate platform usage patterns and improve the jiliacr gaming experience for Filipino players;
• Communications: to send you account-related notifications, transaction confirmations, and — where you have consented — promotional communications about jiliacr bonuses and offers.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, jiliacr processes your personal data on one or more of the following legal bases:

• Contractual necessity: processing is necessary to perform the contract between you and jiliacr — i.e., to provide you with access to the platform's gaming services, process your transactions, and manage your account;
• Legal obligation: processing is required to comply with jiliacr's legal obligations under Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), and NPC regulations under the Data Privacy Act (RA 10173);
• Legitimate interests: processing is necessary for jiliacr's legitimate interests in operating a safe, secure, and compliant online gaming platform — including fraud detection, security monitoring, and service quality improvement — where those interests are not overridden by your rights and interests;
• Consent: where we rely on your consent as the legal basis — specifically for optional marketing communications — you may withdraw that consent at any time by contacting customer support via live chat or email without affecting the lawfulness of processing based on consent before its withdrawal.

6. Sharing Your Personal Data

jiliacr does not share your personal data with third parties except in the following circumstances:

6.1 Regulatory and Government Authorities

jiliacr is required by Philippine law and PAGCOR licensing conditions to share personal data and transaction records with: the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and any other Philippine government authority that issues a lawful request, court order, or subpoena. jiliacr will comply with all such requirements.

6.2 Payment Service Providers

To process your deposits and withdrawals, jiliacr shares necessary transaction data with the payment service providers you use — including GCash, PayMaya, BPI, BDO, Metrobank, and 7-Eleven payment processing partners. These providers process your payment data under their own privacy policies and in accordance with Bangko Sentral ng Pilipinas (BSP) regulations. jiliacr shares only the minimum data required to complete each transaction.

6.3 Identity Verification Services

jiliacr may engage accredited third-party KYC verification service providers to assist in the authentication of identification documents submitted by players. These providers are contractually bound to process your data solely for the purpose of identity verification and in compliance with the Data Privacy Act.

6.4 Technology and Infrastructure Providers

jiliacr uses third-party technology service providers for platform hosting, data storage, customer support software, and security services. These providers act as data processors on behalf of jiliacr and are contractually required to implement appropriate data protection measures consistent with the Data Privacy Act and NPC regulations.

6.5 Game Content Providers

jiliacr's gaming library includes content from third-party game providers. Where technically necessary for the delivery of a game, certain session data (such as session tokens and wager amounts) may be transmitted to the relevant game provider. Game providers do not receive your full personal profile or financial details.

7. Data Retention

jiliacr retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

• Account and KYC data: retained for a minimum of five (5) years after the closure or termination of your jiliacr account, as required by PAGCOR and AML regulations;
• Financial transaction records: retained for a minimum of five (5) years from the date of each transaction, in accordance with the Anti-Money Laundering Act and BSP record-keeping requirements;
• Gaming activity records: retained for a minimum of three (3) years from the date of each game round, for dispute resolution and PAGCOR compliance purposes;
• Customer support communications: retained for two (2) years from the date of the interaction, unless a longer retention period is required for an ongoing dispute or regulatory investigation;
• Technical and device data (logs): typically retained for twelve (12) months for security monitoring and fraud investigation purposes.

At the end of the applicable retention period, personal data that is no longer required will be securely deleted or anonymized in a manner that prevents re-identification. Where data must be retained beyond the standard retention period due to an ongoing regulatory investigation, legal proceeding, or unresolved dispute, it will be retained until that matter is finally concluded.

8. Data Security

jiliacr implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include, but are not limited to:

• Encryption in transit: all data transmitted between your browser or device and the jiliacr platform is encrypted using industry-standard TLS (Transport Layer Security) protocols;
• Encryption at rest: sensitive personal data stored on jiliacr servers — including account credentials and KYC document data — is encrypted at rest using strong encryption standards;
• Access controls: access to personal data within jiliacr's systems is restricted on a need-to-know basis. Staff who are authorized to access personal data are subject to confidentiality obligations and regular security training;
• Firewall and intrusion detection systems: jiliacr's platform infrastructure is protected by enterprise-grade firewalls and continuous intrusion detection and monitoring systems;
• Vulnerability management: jiliacr conducts regular security assessments and penetration testing to identify and remediate potential vulnerabilities in the platform;
• Incident response: jiliacr maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in harm to affected individuals, jiliacr will notify the National Privacy Commission and affected players in accordance with the Data Privacy Act's breach notification requirements.

9. Cookies & Tracking Technologies

jiliacr uses cookies and similar tracking technologies on the jiliacr.net website to ensure the platform functions correctly, to maintain session security, and to analyze how players interact with the site.

9.1 What Are Cookies

Cookies are small text files placed on your device by a website you visit. They are widely used to make websites function efficiently, to maintain login sessions, and to provide information to website operators about how their site is being used.

9.2 Types of Cookies Used

• Strictly necessary cookies: these are essential for the jiliacr platform to operate. They maintain your login session, remember your preferences within a session, and ensure security features function correctly. These cookies cannot be disabled.
• Functional cookies: these allow jiliacr to remember choices you make (such as your preferred language or responsible gaming settings) to provide a more personalized experience across sessions.
• Analytics cookies: these help jiliacr understand how players navigate the platform by collecting aggregated, anonymized data about page visits, session durations, and feature usage. This data is used solely to improve the jiliacr experience for Filipino players.
• Security cookies: these support jiliacr's fraud detection and account security systems by helping identify unusual access patterns that may indicate unauthorized activity.

9.3 Managing Cookies

You can control non-essential cookies through the jiliacr cookie preference settings available on the platform, or through the settings of your browser. Please note that disabling certain cookies may affect the functionality of the jiliacr platform. Strictly necessary and security cookies cannot be disabled as they are essential for the platform's secure operation.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jiliacr. To exercise any of these rights, please contact jiliacr's Data Protection Officer via the contact details in Section 13.

jiliacr will respond to all data subject requests within thirty (30) calendar days of receipt, or such other timeframe as required by the Data Privacy Act and NPC regulations. Where a request cannot be fulfilled — for example, due to a conflicting legal obligation — jiliacr will explain the reason in writing.

11. Children's Privacy and Age Restriction

If jiliacr becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated personal data will be deleted in accordance with the Data Privacy Act, and any funds in the account will be handled in accordance with PAGCOR regulations for underage gambling incidents.

If you are a parent or guardian and believe that a minor in your care has registered for a jiliacr account, please contact jiliacr's customer support immediately via the 24/7 live chat facility so we can take prompt action.

12. Updates to This Privacy Policy

jiliacr reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, amendments to applicable Philippine law or PAGCOR regulations, guidance from the National Privacy Commission, or changes to the jiliacr platform's functionality.

When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where the changes are significant, provide notice to registered players via their registered email address or via an in-platform notification. The version of the Policy in effect at the time of any data processing activity shall govern that activity.

We encourage you to review this Privacy Policy periodically to stay informed about how jiliacr protects your personal data. Continued use of the jiliacr platform following the publication of any updated Policy constitutes your acceptance of the revised terms.

13. Contact & Data Protection Officer

jiliacr has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. If you have any questions, concerns, or requests related to this Privacy Policy or the processing of your personal data by jiliacr, please contact us through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week inside the jiliacr platform. Live chat is the fastest way to reach our support and DPO team for data privacy matters.
• Email: [email protected] — please include "Data Privacy Request" in the subject line so your message is routed directly to the DPO team. Allow up to two (2) business days for a response to email inquiries.

If your concern cannot be resolved through jiliacr's internal process, you may escalate your complaint to the National Privacy Commission of the Philippines through the NPC's official complaints portal. jiliacr will cooperate fully with any NPC investigation.