Privacy Policy

1. Who We Are — Data Controller

jilkk Casino (referred to as "jilkk," "we," "us," or "our") is the data controller responsible for the personal information collected through the jilkk platform at jilkk.app. jilkk operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

Questions, concerns, or requests relating to this Privacy Policy may be directed to jilkk's Data Protection Officer at [email protected].

2. Personal Data We Collect

jilkk collects the following categories of personal data from players registered on the Platform:

3. How We Collect Your Data

jilkk collects personal data through the following means:

• Direct collection: Information you provide when registering your jilkk account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical and gaming activity data collected automatically through cookies, server logs, and Platform analytics as you use jilkk;
• Third-party sources: Identity verification data from PAGCOR-accredited KYC service providers; payment transaction data from GCash, PayMaya, and Philippine banking partners; fraud and AML screening data from regulatory databases as required by law.

4. Purposes & Legal Bases for Processing

jilkk processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account registration and management — necessary for the performance of the contract between you and jilkk;
• Identity verification (KYC) — legal obligation under PAGCOR licensing conditions and the Anti-Money Laundering Act (Republic Act No. 9160, as amended);
• Payment processing — necessary for the performance of the contract; compliance with BSP regulations governing e-money and banking transactions;
• Game provision and Platform operation — necessary for the performance of the contract;
• Fraud prevention, security, and anti-money laundering compliance — legal obligation and legitimate interest of jilkk and its regulators;
• Customer support — legitimate interest and contractual necessity;
• Responsible gaming monitoring — legal obligation under PAGCOR responsible gaming requirements;
• Marketing communications — consent (you may withdraw consent at any time by contacting support or updating your notification preferences in account settings);
• Regulatory reporting — legal obligation to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine authorities.

5. Sharing Your Personal Data

jilkk does not sell your personal data. We share it only in the following circumstances:

5.1 Service Providers

jilkk engages third-party service providers that process personal data on our behalf under written data processing agreements. These include: game software providers (JILI, PG Soft, Pragmatic Play, and others), KYC verification service providers, payment processors, fraud detection services, and cloud hosting infrastructure providers. All service providers are contractually bound to process data only as instructed by jilkk and to maintain appropriate security standards.

5.2 Regulatory Authorities

jilkk discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities when required to do so by law, court order, or regulatory directive. Such disclosures are made without prior notice to the data subject where legally required.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of jilkk's assets, personal data held by jilkk may be transferred to the acquiring entity, subject to that entity's assumption of the obligations in this Privacy Policy. Affected players will be notified in accordance with applicable law.

5.4 Legal Protection

jilkk may disclose personal data when it believes in good faith that such disclosure is necessary to: protect the rights, property, or safety of jilkk, its players, or the public; investigate suspected fraud or security breaches; or comply with a legal proceeding, subpoena, or court order.

6. Cookies & Tracking Technologies

jilkk uses cookies and similar tracking technologies to operate and improve the Platform. The following types of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including authentication tokens that keep you logged in during a session. These cannot be disabled.
• Functional cookies: Remember your preferences (e.g., language settings, last played game) to enhance your jilkk experience.
• Analytics cookies: Collect aggregated, anonymised data about how players navigate the Platform, helping jilkk identify and fix usability issues.
• Security cookies: Help detect and prevent fraud, bot activity, and unauthorized access attempts.

You may manage cookie preferences through your browser settings. Note that disabling cookies other than strictly necessary cookies may affect Platform functionality. jilkk does not use third-party advertising or tracking cookies that share your data with ad networks.

7. Data Security

jilkk implements technical and organisational security measures appropriate to the risk of processing, including:

• TLS 1.3 encryption for all data in transit between your device and jilkk servers;
• AES-256 encryption for sensitive data at rest;
• Two-factor authentication (2FA) for all jilkk accounts and internal administrative access;
• Role-based access controls ensuring staff access only the data necessary for their specific function;
• Regular security audits, penetration testing, and vulnerability assessments;
• Incident response procedures aligned with NPC notification requirements under R.A. 10173.

In the event of a personal data breach that poses a real risk to the rights and freedoms of affected players, jilkk will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required by law.

8. Data Retention

jilkk retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law:

• Active account data: Retained for the duration of your jilkk account;
• Closed account data: Retained for a minimum of 5 years after account closure, as required by PAGCOR licensing conditions and AMLA recordkeeping obligations;
• Financial transaction records: Retained for a minimum of 5 years in compliance with AMLA and BIR requirements;
• KYC documents: Retained for a minimum of 5 years after the end of the business relationship;
• Marketing preference records: Retained until withdrawal of consent or account closure, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with jilkk's data disposal procedures.

9. Your Rights Under Philippine Law

Under the Data Privacy Act of 2012 (R.A. 10173), you have the following rights with respect to your personal data held by jilkk:

• Right to be informed: You have the right to know that jilkk is processing your personal data, as outlined in this Policy;
• Right of access: You may request a copy of the personal data jilkk holds about you;
• Right to rectification: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data, subject to legal and regulatory retention obligations;
• Right to object: You may object to the processing of your personal data where jilkk relies on legitimate interest as the legal basis;
• Right to data portability: You may request your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: If you believe jilkk has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, contact jilkk's Data Protection Officer at [email protected]. jilkk will respond within 15 business days of receiving a verifiable request. Some requests may require identity verification before processing.

10. Children's Privacy

jilkk Casino is strictly intended for individuals who are 21 years of age or older. jilkk does not knowingly collect personal data from individuals under 21. If jilkk discovers that personal data has been collected from a person under 21, that account will be immediately suspended, the data will be deleted, and any deposited funds returned to their source in accordance with applicable regulations.

If you are a parent or guardian and believe your child has registered on jilkk without your knowledge, please contact jilkk support immediately at [email protected].

11. Cross-Border Data Transfers

jilkk's primary servers and data processing operations are located in the Philippines. Some of jilkk's third-party service providers — particularly game software providers and cloud infrastructure partners — may process data outside the Philippines. In all such cases, jilkk ensures that appropriate safeguards are in place, including contractual data protection clauses that require the recipient to maintain data protection standards equivalent to those required under R.A. 10173.

By using jilkk, you acknowledge and consent to the cross-border transfer of your personal data to the extent described in this Section, subject to the safeguards described above.

12. Amendments to This Policy

jilkk reserves the right to amend this Privacy Policy at any time. When material changes are made, jilkk will notify active players via their registered email address or an in-Platform notification before the changes take effect. The "Last Updated" date at the top of this page reflects the date of the most recent revision.

Your continued use of the jilkk Platform following the effective date of any revision constitutes your acceptance of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and close your account.

13. Contact & Data Protection Officer

For all privacy-related inquiries, requests, or complaints, please contact jilkk's designated Data Protection Officer:

• Email: [email protected]
• Response Time: Within 15 business days for data subject requests; within 72 hours for data breach notifications
• Regulator: National Privacy Commission of the Philippines — for formal complaints where jilkk's response is unsatisfactory

jilkk is committed to resolving privacy concerns promptly and transparently. Filipino players in Manila, Cebu, Davao, Quezon City, and across the Philippines can be assured that their personal data is handled with the care and respect it deserves.