Privacy Policy — jiloko Casino

1. Introduction

jiloko ("jiloko," "we," "us," "our") is committed to protecting the privacy and personal data of all users of the jiloko online casino platform available at jiloko.app and any associated mobile applications or services (collectively, the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal information when you access or use the Platform.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). By registering an account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, each of which is incorporated by reference.

2. Data We Collect

jiloko collects personal data that you provide directly, data generated through your use of the Platform, and data received from third parties. The categories of personal data we collect include:

2.1 Registration and Account Data. When you create a jiloko account, we collect: full name, date of birth, nationality, residential address, email address, mobile number, and username. We may also collect a government-issued identification number for identity verification (KYC) purposes.

2.2 Identity Verification Documents. To comply with anti-money laundering (AML) regulations and to verify your age and identity, we may collect copies of government-issued identification documents (e.g., Philippine passport, driver's license, SSS/GSIS ID, PhilSys National ID), proof of address documents, and proof of payment method ownership.

2.3 Financial Data. We collect information necessary to process deposits and withdrawals, including GCash account details, PayMaya / Maya account details, bank account details (account name, account number, bank name), and debit card details (card number is not stored in full — only the last four digits and card type are retained). We do not store complete payment card numbers on our servers.

2.4 Transaction Data. We maintain records of all deposits, withdrawals, wagers, game results, bonus activations, and other financial transactions conducted through your jiloko account.

2.5 Usage and Technical Data. When you access the Platform, we automatically collect: IP address, device type and model, operating system, browser type and version, session duration, pages visited, features used, and referring URLs. This data is collected through cookies, web beacons, and similar tracking technologies.

2.6 Communications Data. We retain records of communications between you and jiloko, including customer support chat logs, emails, and any feedback or complaints you submit.

2.7 Responsible Gaming Data. If you use responsible gaming tools such as deposit limits, self-exclusion, or cooling-off periods, we record these preferences and the dates on which they were set or modified.

3. How We Use Your Data

jiloko uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your jiloko account, including processing your registration, verifying your identity, and managing your login credentials;
• Service Delivery: To provide access to games, process deposits and withdrawals, calculate and credit winnings, and deliver the core functionality of the Platform;
• Regulatory Compliance: To comply with applicable Philippine laws and regulations, including AML obligations, KYC requirements, PAGCOR-aligned gaming regulations, and the Data Privacy Act of 2012;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct;
• Responsible Gaming: To enforce responsible gaming tools you have activated, including deposit limits, self-exclusion, and cooling-off periods, and to identify players who may be exhibiting signs of problem gambling;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications or where we have a legitimate interest in doing so;
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the Platform;
• Legal Claims: To establish, exercise, or defend legal claims in connection with your use of the Platform.

4. Legal Basis for Processing

jiloko processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given clear, informed consent to the processing of your personal data for a specific purpose, such as receiving marketing communications;
• Contractual Necessity: Where processing is necessary to perform our contract with you — i.e., to provide the Platform services you have registered for;
• Legal Obligation: Where processing is required to comply with a legal obligation applicable to jiloko, including AML, KYC, and gaming regulatory requirements;
• Legitimate Interests: Where processing is necessary for jiloko's legitimate interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.

5. Data Sharing

5.1 Third-Party Service Providers. jiloko may share your personal data with trusted third-party service providers who assist us in operating the Platform, including: payment processors (GCash, PayMaya / Maya, and banking partners), identity verification and KYC service providers, fraud detection and AML screening providers, cloud hosting and infrastructure providers, customer support platform providers, and analytics service providers. All third-party processors are contractually bound to process your data only on jiloko's instructions and in accordance with applicable data protection law.

5.2 Regulatory and Law Enforcement Authorities. jiloko may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other government authorities where required by law, court order, or regulatory directive.

5.3 Business Transfers. In the event of a merger, acquisition, restructuring, or sale of all or part of jiloko's business, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

5.4 No Sale of Data. jiloko does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes.

6. Cookies & Tracking Technologies

6.1 Types of Cookies. jiloko uses the following categories of cookies and similar technologies:

• Essential Cookies: Required for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns. These are only set where you have consented.

6.2 Managing Cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Instructions for managing cookies are available in your browser's help documentation.

7. Data Retention

jiloko retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements;
• KYC and identity verification documents are retained for the period required by applicable Philippine regulations;
• Customer support communications are retained for three (3) years from the date of the communication;
• Marketing consent records are retained for the duration of your account and for a reasonable period thereafter as evidence of consent;
• Responsible gaming records, including self-exclusion data, are retained for the duration of the exclusion period and for a minimum of five (5) years thereafter.

When personal data is no longer required for the purposes for which it was collected and retention is not required by law, jiloko will securely delete or anonymize the data.

8. Data Security

jiloko implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest using AES-256 or equivalent standards;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While jiloko takes all reasonable steps to protect your data, no system is completely immune to security risks. You are responsible for maintaining the security of your jiloko Login credentials and for notifying us immediately if you suspect unauthorized access to your account.

9. Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jiloko:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which this Policy fulfills;
• Right of Access: The right to request a copy of the personal data jiloko holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 13. jiloko will respond to all verified requests within thirty (30) days. We may require proof of identity before processing your request.

10. Children's Privacy

The jiloko Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. jiloko does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the Platform, please contact us immediately at the details in Section 13.

11. International Data Transfers

jiloko's primary operations and data storage are based in the Philippines. Where it is necessary to transfer your personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting providers — jiloko ensures that such transfers are subject to appropriate safeguards, including contractual data protection clauses that provide a level of protection equivalent to that required under Philippine law. jiloko will not transfer your personal data to jurisdictions that do not provide adequate data protection without implementing appropriate safeguards.

12. Changes to This Policy

jiloko reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material, we will notify you by email or by posting a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of the Platform following notification of any amendment constitutes your acceptance of the revised Policy.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact jiloko's Data Protection Officer (DPO):

Data Protection Officer — jiloko
Email: [email protected]
Support: [email protected]

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated. Information about the NPC and how to file a complaint is available on the NPC's official website.

This Privacy Policy was last reviewed and updated on 15 May 2026. Previous versions are available upon request by contacting our Data Protection Officer.