jill8 Privacy Policy

jill8 is the data controller responsible for the personal information collected and processed through the jill8 Casino platform accessible at jill8.app. As data controller, jill8 determines the purposes and means by which personal data is processed in connection with the operation of its online gaming platform, user account management, financial transaction processing, and all related services provided to Filipino players.

jill8 has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with RA 10173 and this Policy. Contact details for the DPO are provided in Section 15 of this Policy. Filipino players are encouraged to direct all data privacy inquiries and requests to the DPO in the first instance.

jill8 collects personal data in the following categories, depending on your interaction with the platform:

jill8 does not intentionally collect special categories of sensitive personal data (such as health data, religious beliefs, or political opinions) except where specifically required by applicable Philippine law or where you voluntarily provide such information in the context of a responsible gaming or support interaction.

jill8 collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account settings.
• Automated collection: Technical data collected automatically by jill8's systems when you access the platform, including IP address, device identifiers, session metadata, and navigation behaviour via cookies and similar tracking technologies.
• Third-party collection: Identity and payment verification data received from KYC service providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud detection partners in connection with account verification and transaction processing.
• Game provider data: Gaming outcome and session data generated by third-party game providers integrated into the jill8 platform and transmitted to jill8 for account crediting, dispute resolution, and responsible gaming monitoring.

jill8 processes your personal data on the following legal bases as recognized under RA 10173:

• Contractual necessity: Processing necessary to perform the contract between you and jill8 — including account creation, deposit and withdrawal processing, game session management, and customer support.
• Legal obligation: Processing required for jill8 to comply with its obligations under Philippine law, including Anti-Money Laundering Act (RA 9160) compliance, KYC requirements, and reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).
• Consent: Where jill8 relies on your consent as the basis for processing — including marketing communications and certain optional data collections — you may withdraw that consent at any time by contacting the DPO.
• Legitimate interests: Processing for the purposes of fraud prevention, platform security, and improving jill8's services, where such interests are not overridden by your data protection rights.

jill8 uses your personal data for the following purposes:

• Creating, maintaining, and managing your jill8 account;
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank;
• Verifying your identity in compliance with KYC and Anti-Money Laundering regulations;
• Providing live dealer games, slot games, sports betting, and all other services on the jill8 platform;
• Administering the jill8 Black Diamond VIP program and associated promotions, bonuses, and cashback calculations;
• Communicating with you about your account, transactions, security, and platform changes;
• Delivering customer support through live chat and email;
• Monitoring gaming activity for responsible gaming purposes, detecting problem gambling indicators, and enforcing deposit limits, session limits, and self-exclusion;
• Detecting and preventing fraudulent activity, collusion, multi-accounting, and prohibited conduct as defined in the jill8 Terms & Conditions;
• Complying with regulatory and legal obligations, including reporting suspicious transactions to the AMLC;
• Improving platform performance, fixing technical errors, and developing new features through analysis of aggregated and anonymized usage data.

jill8 shares your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash (Mynt), PayMaya (Maya Bank), BPI, BDO, and Metrobank receive transactional data necessary to process your deposits and withdrawals. These processors operate under their own privacy policies and applicable Philippine banking regulations.
• KYC and identity verification providers: Third-party identity verification services receive identity data (ID scans, selfies, address documents) to complete KYC verification as required by Philippine AML regulations.
• Game providers: Certified third-party game studios (such as Pragmatic Play, PG Soft, and Evolution Gaming) receive session identifiers and wager amounts necessary to operate their games within the jill8 platform.
• Fraud prevention partners: Anonymized or limited personal data is shared with fraud detection systems to identify suspicious access patterns and protect the integrity of the jill8 platform.
• Regulatory authorities: jill8 is required by law to disclose certain personal and transactional data to PAGCOR, the AMLC, the National Privacy Commission (NPC), and other Philippine government authorities upon lawful request or as part of mandatory regulatory reporting.
• Legal proceedings: Personal data may be disclosed to law enforcement agencies or courts of competent jurisdiction in the Philippines where jill8 is legally compelled to do so.

All third-party service providers that process personal data on behalf of jill8 are contractually required to implement appropriate data protection measures and to process personal data only on jill8's documented instructions, consistent with RA 10173.

7.1 Storage Location. jill8 stores personal data on secure servers. Data pertaining to Philippine players is processed and stored in accordance with applicable Philippine data localization requirements where mandated by law.

7.2 Security Measures. jill8 implements a multi-layered security framework to protect personal data against unauthorized access, disclosure, alteration, and destruction. Security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jill8 servers;
• Encryption at rest for sensitive data categories including financial information and government ID data;
• Role-based access controls restricting internal access to personal data to authorized personnel on a need-to-know basis;
• Multi-factor authentication requirements for administrative access to data systems;
• Intrusion detection systems and continuous network monitoring;
• Regular third-party security audits and penetration testing;
• Staff training on data handling obligations under RA 10173.

7.3 Data Breach Procedures. In the event of a personal data breach that poses a real risk to your rights and interests, jill8 will notify the National Privacy Commission within seventy-two (72) hours of discovering the breach, and will notify affected players without undue delay, in accordance with Section 20(f) of RA 10173.

jill8 retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer identify you as an individual.

jill8 uses cookies and similar technologies (including session tokens, local storage, and web beacons) to operate and improve the platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the platform to function — including session authentication, account security tokens, and anti-fraud measures. These cannot be disabled without breaking core platform functionality.
• Functional cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming tool configurations. Disabling these may affect your user experience.
• Analytics cookies: Used to understand how players interact with jill8 — including which game categories are most popular, where users experience friction, and how the platform can be improved. Data is aggregated and anonymized where possible.
• Security cookies: Used to detect and prevent fraudulent access, bot activity, and suspicious login patterns by monitoring device and session characteristics.

jill8 does not use third-party advertising cookies or share cookie data with external advertising networks. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in to and using the jill8 platform.

As a data subject under RA 10173, you have the following rights with respect to your personal data held by jill8:

1. Right to be informed — the right to know what data jill8 holds about you and how it is used (fulfilled through this Policy);
2. Right of access — the right to request a copy of your personal data held by jill8;
3. Right to rectification — the right to request correction of inaccurate or incomplete personal data;
4. Right to erasure — the right to request deletion of personal data no longer required for the stated purposes, subject to applicable legal retention obligations;
5. Right to object — the right to object to processing based on legitimate interests, and the right to opt out of direct marketing at any time;
6. Right to data portability — the right to receive your personal data in a structured, commonly used format where technically feasible;
7. Right to damages — the right to be indemnified for damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, in accordance with RA 10173.

To exercise any of these rights, submit a written request to the jill8 Data Privacy Officer as described in Section 15. jill8 will respond within fifteen (15) business days of receiving a complete and verified request, unless a longer period is required and communicated to you. Identity verification may be required before requests are actioned.

The jill8 platform is strictly not intended for and does not knowingly collect personal data from individuals under the age of 21 years. This restriction reflects both the minimum age requirement for online gambling under Philippine PAGCOR regulations and jill8's commitment to responsible gaming.

If jill8 discovers or has reason to believe that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all data associated with the underage registration will be deleted in accordance with RA 10173, and any funds deposited will be returned to the originating payment method following identity verification.

Some of the third-party service providers used by jill8 — including certain game providers, fraud detection systems, and cloud infrastructure services — may process personal data outside the Philippines. Where such international transfers occur, jill8 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with RA 10173.

Safeguards applied to international data transfers include: contractual data protection clauses with receiving parties; transfer to jurisdictions that provide an adequate level of data protection as recognized by the NPC; and binding corporate rules where applicable within provider groups.

By using jill8 and consenting to this Privacy Policy, you acknowledge and agree to the transfer of your personal data outside the Philippines where necessary for the provision of jill8 services, subject to the safeguards described herein.

The jill8 platform may reference or link to third-party services including payment processors (GCash, PayMaya, BPI, BDO, Metrobank) and game providers. These third parties operate their own privacy policies that govern how they handle personal data provided directly to them. jill8 is not responsible for the privacy practices of any third-party service provider, and encourages you to review the relevant privacy policies before providing personal information directly to any third-party service.

jill8 may update this Privacy Policy from time to time to reflect changes in our data processing practices, changes in Philippine data privacy law or regulatory guidance, or operational changes to the jill8 platform. When material changes are made to this Policy, jill8 will notify registered players through a notification displayed upon login, an email to the registered account address, or a notice published prominently on the platform.

The "Last Updated" date at the top of this Policy indicates when the current version took effect. Your continued use of jill8 following the effective date of any updated Policy constitutes your acknowledgment of the changes. If you do not agree with an updated Policy, you should stop using the platform and contact the DPO to request account closure.

For all data privacy matters — including requests to exercise your data rights, questions about this Policy, or reports of potential data privacy violations — please contact the jill8 Data Privacy Officer:

• Email: [email protected] (subject line: Data Privacy Request)
• Live Chat: Available 24/7 within the jill8 platform (accessible after login). Identify your request as a data privacy matter at the start of the conversation.

jill8 will respond to data rights requests within fifteen (15) business days of receiving a complete and verified submission. Where the nature of a request requires additional time — for example, complex erasure requests involving multiple data systems — jill8 will inform you of the extended timeline within the initial 15-day period.

If you wish to escalate a data privacy concern to the national regulator, you may contact the National Privacy Commission of the Philippines (NPC) through their official channels. The NPC is the Philippines' independent authority for personal data protection under RA 10173.