Privacy Policy — jilace

1 Introduction

jilace ("jilace," "we," "us," or "our") operates the online gaming platform accessible at jilace.cam. As a PAGCOR-authorized online casino and sports betting platform serving Filipino players across the Philippines — from Manila and Cebu to Davao, Quezon City, and beyond — jilace handles personal data as a necessary part of delivering its services.

This Privacy Policy ("Policy") describes jilace's practices with respect to the collection, use, storage, disclosure, and protection of personal data submitted by or collected from individuals who visit, register on, or interact with the jilace platform. This Policy is issued in compliance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission ("NPC") of the Philippines.

By registering an account on jilace, making a deposit, or otherwise using the jilace platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the terms of this Policy, you must discontinue use of the jilace platform immediately.

2 Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller responsible for the data you provide to the jilace platform is:

jilace has designated a Data Privacy Officer ("DPO") in accordance with Section 21 of the Data Privacy Act of 2012 and NPC Circular No. 17-01. The DPO is responsible for overseeing jilace's data protection practices, handling data subject requests, and serving as the primary point of contact with the National Privacy Commission.

3 Personal Data We Collect

jilace collects personal data that falls into the following categories, depending on how you interact with the platform:

3.1 Identity and Registration Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21-year minimum age requirement mandated by PAGCOR)
• Gender
• Nationality and country of residence
• Current residential address, including city and province (e.g., Manila, Cebu City, Davao)
• Registered mobile number (Philippine network)
• Email address

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification documents (National ID, passport, driver's license, SSS ID, PhilHealth ID, Voter's ID, or equivalent)
• Proof of address documentation where required
• Source of funds documentation where required by anti-money laundering (AML) obligations
• Biometric facial comparison data used during automated identity verification, where applicable

3.3 Financial Data

• GCash mobile number or linked GCash account reference
• Maya (formerly PayMaya) account reference
• Philippine bank account details (BPI, BDO, Metrobank, or other participating banks) used for deposits and withdrawals
• Visa or Mastercard card details (card number, expiry, and billing address — not the CVV, which jilace does not store)
• Transaction history including deposit amounts, withdrawal requests, dates, and payment method references

3.4 Platform Usage Data

• Game session history including games played, wagers placed, and outcomes
• Sports betting history including markets selected, odds accepted, and settlement results
• Bonus and promotion participation history
• Support ticket and live chat interaction records
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion records)

3.5 Technical and Device Data

• IP address and approximate geographic location at the time of login
• Device type, operating system, and browser version
• Device identifier and fingerprint used for fraud prevention and duplicate account detection
• Session timestamps, login history, and activity logs
• Cookie identifiers and tracking pixel interactions (see Section 8)

4 How We Collect Personal Data

jilace collects personal data through the following channels:

• Direct submission: Information you voluntarily provide during registration, KYC verification, deposit and withdrawal requests, support interactions, or when updating your account profile on jilace.
• Automated collection: Technical and device data collected automatically when you access the jilace platform through your browser or device, including via cookies and similar tracking technologies described in Section 8.
• Third-party verification providers: Identity and age verification data received from third-party KYC service providers engaged by jilace to fulfill its PAGCOR compliance and AML obligations.
• Payment processors: Transaction confirmation and status data received from GCash, Maya, BPI, BDO, Metrobank, Visa, Mastercard, and other integrated Philippine payment channels when you make deposits or request withdrawals.
• Fraud prevention partners: Risk signals and device reputation data received from third-party fraud detection services engaged to protect the security of the jilace platform and all players on it.

5 Lawful Basis for Processing

jilace processes personal data only where a lawful basis under the Data Privacy Act of 2012 exists. The applicable lawful bases for jilace's primary processing activities are as follows:

Processing Activity	Lawful Basis
Account registration and management	Performance of contract (provision of the jilace service)
KYC identity and age verification	Legal obligation (PAGCOR licensing conditions, DPA, AML regulations)
Deposit and withdrawal processing	Performance of contract
Fraud prevention and security monitoring	Legitimate interest (protecting the platform and all users)
Responsible gaming monitoring	Legal obligation (PAGCOR responsible gaming requirements)
Regulatory reporting to PAGCOR and authorities	Legal obligation
Marketing communications	Consent (opt-in at registration, withdrawable at any time)
Analytics and platform improvement	Legitimate interest (improving service quality)

6 How jilace Uses Your Personal Data

jilace uses the personal data it collects for the following specific purposes:

• To create, manage, and maintain your jilace Account, including processing your login credentials and managing your Wallet balance.
• To verify your identity and confirm that you meet the 21-year minimum age requirement mandated by PAGCOR before granting access to real-money gaming services.
• To process deposits from and withdrawals to your linked GCash, Maya, BPI, BDO, Metrobank, and other verified Philippine payment accounts.
• To detect, prevent, and investigate fraud, money laundering, duplicate accounts, and other prohibited conduct on the jilace platform.
• To comply with jilace's regulatory obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other relevant Philippine regulatory authorities.
• To operate and enforce jilace's responsible gaming tools, including deposit limits, session timers, cooling-off periods, and self-exclusion records.
• To provide customer support via live chat, email, and other communication channels, and to maintain records of support interactions for quality assurance purposes.
• To send transactional communications including account confirmations, deposit receipts, withdrawal confirmations, and security alerts.
• To send promotional communications regarding jilace bonuses, game releases, and platform updates — where you have provided consent (see Section 13).
• To analyze platform usage patterns and improve the jilace service, including game loading performance, payment processing speed, and user interface design.

7 Data Sharing and Disclosure

jilace shares personal data only with the following categories of third parties, and only to the extent necessary for the stated purpose:

7.1 Payment and Financial Service Providers

jilace shares transaction data with its integrated payment processors — including GCash (G-Xchange Inc.), Maya Philippines Inc., participating banks (BPI, BDO, Metrobank), Visa, and Mastercard — solely for the purpose of processing deposits and withdrawals. These providers have their own data protection obligations under Philippine law and relevant international standards.

7.2 Identity Verification and KYC Providers

jilace engages third-party KYC and identity verification service providers to assist in fulfilling its PAGCOR licensing and AML compliance obligations. Personal data shared with these providers is limited to what is strictly necessary for the verification process and is governed by data processing agreements consistent with the Data Privacy Act of 2012.

7.3 Fraud Prevention and Security Providers

jilace shares limited device and behavioral data with fraud prevention service providers to detect duplicate accounts, unauthorized access, and other security threats. The data shared for this purpose is pseudonymized where technically feasible.

7.4 Game and Technology Providers

Live dealer studios and slot game providers integrated with jilace may receive game session identifiers and pseudonymized player data necessary to deliver real-time game functionality. These providers do not receive personally identifiable registration data unless strictly required for regulatory purposes.

7.5 Regulatory and Law Enforcement Authorities

jilace will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, regulatory demand, or to prevent or investigate serious criminal activity. jilace will not make such disclosures voluntarily beyond what is required by applicable law.

8 Cookies and Tracking Technologies

jilace uses cookies and similar browser-based tracking technologies on the jilace.cam platform. Cookies are small data files stored on your device that help the platform function correctly, remember your preferences, and analyze usage patterns.

8.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the jilace platform to operate. These include session authentication cookies that keep you logged in during an active jilace session and security cookies that protect against cross-site request forgery. These cannot be disabled without preventing the platform from functioning.
• Functional Cookies: Remember your preferences, such as your preferred language, lobby filter settings, and notification preferences on jilace. Disabling these may reduce the quality of your experience but will not prevent platform access.
• Analytics Cookies: Collect pseudonymized data about how players navigate the jilace platform — which pages are visited most often, where sessions begin and end, and which game categories attract the most traffic. This data is used exclusively to improve jilace's services and is not shared with third-party advertising networks.
• Security and Fraud Detection Cookies: Used to identify your device across sessions for the purpose of detecting unauthorized account access, duplicate account creation, and other prohibited conduct described in the jilace Terms and Conditions.

You may manage cookie preferences through your browser settings. Blocking all cookies may impair the functionality of the jilace platform, particularly session authentication and security features.

9 Data Retention

jilace retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to any longer retention period required by Philippine law or PAGCOR regulations. The following retention periods apply:

Data Category	Retention Period
Account registration and identity data	Duration of the account plus 5 years following closure
KYC documents and verification records	5 years following account closure (AMLC regulatory requirement)
Financial transaction records	5 years (Anti-Money Laundering Act of 2001, as amended)
Game session and betting history	3 years following account closure
Support interaction records	2 years following resolution
Self-exclusion records	Permanently, or for the duration of the exclusion period plus 5 years
Security and fraud investigation logs	5 years from the date of the incident or investigation
Marketing consent records	Until consent is withdrawn plus 1 year for compliance records

Upon expiry of the applicable retention period, jilace will securely delete or anonymize your personal data in accordance with NPC-approved disposal methods.

10 Data Security Measures

jilace implements technical and organizational security measures appropriate to the risk profile of the personal data it processes. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption applied to all data transmissions between your device and the jilace platform — the same standard used by Philippine banks for online transactions.
• Password hashing using a one-way cryptographic algorithm. jilace stores only the hash of your password — never the plaintext value — ensuring your credentials remain secure even in the event of a database security incident.
• Access controls restricting internal access to personal data to authorized jilace personnel who have a documented operational need, governed by role-based permission policies.
• Two-factor authentication (2FA) available to all jilace players and applied internally to all administrative accounts with access to personal data systems.
• Regular security audits and penetration testing of the jilace platform infrastructure conducted by qualified cybersecurity professionals.
• Data breach response procedures compliant with the NPC's mandatory 72-hour notification requirement under NPC Circular 16-03.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012, as a data subject you hold the following rights with respect to your personal data processed by jilace:

• Right to be Informed: The right to be informed of the fact of and reasons for the collection and processing of your personal data, as provided in this Policy.
• Right of Access: The right to obtain a copy of the personal data jilace holds about you, including information about how it is being used and with whom it has been shared.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by jilace about you.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary, where consent has been withdrawn, or where processing is unlawful — subject to jilace's overriding legal obligations to retain data under PAGCOR and AML regulations.
• Right to Object: The right to object to jilace's processing of your personal data where that processing is based on legitimate interest, including direct marketing.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission of the Philippines at the NPC's official address if you believe jilace has processed your personal data in a manner inconsistent with the Data Privacy Act of 2012.

To exercise any of the rights above, please submit a written request to jilace's Data Privacy Officer at [email protected]. jilace will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days, in compliance with NPC timelines.

12 Children's Privacy and Age Restriction

The jilace platform is strictly restricted to individuals who are 21 years of age or older as required by PAGCOR for all online gambling services in the Philippines. jilace does not knowingly collect personal data from individuals below this age threshold.

Where jilace becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, it will immediately close the associated account, reverse any transactions processed, and securely delete all personal data collected from that individual, subject to any overriding legal obligations to retain records of the incident.

If you are the parent or guardian of an individual below 21 years of age who has registered or attempted to register on jilace, please contact jilace support immediately at [email protected].

13 Marketing Communications

jilace sends promotional communications — including bonus offers, new game announcements, and platform updates — via SMS, email, and in-platform notifications, but only where you have provided your explicit consent at registration or subsequently through your Account notification settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your notification preferences in your jilace Account Settings.
• Clicking the unsubscribe link in any marketing email sent by jilace.
• Contacting jilace support at [email protected] and requesting removal from all marketing lists.

Withdrawal of marketing consent will be processed within 5 business days. Note that withdrawal of marketing consent does not affect jilace's ability to send transactional communications (account confirmations, withdrawal receipts, security alerts) that are necessary for the operation of your Account and are not subject to opt-out.

14 Changes to This Privacy Policy

jilace reserves the right to update or revise this Privacy Policy at any time to reflect changes in its data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. The effective date displayed at the top of this page will be updated whenever material changes are made.

Where changes are material — such as a new category of data being collected or a new purpose for processing being introduced — jilace will notify registered players via email to their registered address and/or by displaying a prominent in-platform notice at least 14 days before the changes take effect. Your continued use of the jilace platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15 Contact and Data Privacy Officer

For any privacy-related queries, requests to exercise your data subject rights, or concerns about jilace's handling of your personal data, please contact the jilace Data Privacy Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that your data privacy rights have been violated. The NPC can be reached at its official address at 5th Floor, Delegation Building, PICC Complex, Roxas Boulevard, Pasay City, Metro Manila 1307, Philippines.