Privacy Policy

The data controller responsible for your personal data in connection with the jlli platform is jlli Casino, the operator of the website accessible at jlli.win. As data controller, jlli determines the purposes and means of processing your personal data and is accountable for the lawful and responsible handling of that data under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

This Privacy Policy applies to all personal data collected by jlli in connection with the registration, operation, and closure of player accounts; the provision of gaming services, promotions, and customer support; the processing of financial transactions; and compliance with applicable legal and regulatory obligations in the Philippines.

jlli collects the following categories of personal data in connection with operating your account and providing gaming services:

jlli does not collect sensitive personal information as defined under the Data Privacy Act — such as racial or ethnic origin, political affiliation, religious beliefs, health data, or sexual orientation — except where specifically required by law or regulation in the context of responsible gaming (for example, where a player voluntarily discloses a gambling addiction during a self-exclusion request).

jlli collects personal data through the following methods:

• Direct submission: Information you provide when creating or updating your jlli account, completing KYC verification, submitting a support request, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the jlli platform, including IP address, device identifiers, and session metadata via server logs and analytics systems;
• Cookies and similar technologies: Information collected through cookies, pixel tags, and local storage on the jlli website (see Section 6 for details);
• Payment processors: Transaction confirmation data received from payment providers including GCash, PayMaya, BPI, BDO, and Metrobank when you make deposits or withdrawals;
• Identity verification services: Data returned by third-party KYC and identity verification providers used by jlli to validate government-issued identification documents;
• Fraud prevention systems: Risk signals and device fingerprint data from anti-fraud systems used to protect the platform and players from fraudulent activity.

jlli processes your personal data on the following legal bases as provided under the Data Privacy Act of 2012 and its implementing regulations:

4.1 Contractual Necessity. Processing necessary to enter into and perform the agreement between you and jlli — including creating and managing your account, processing deposits and withdrawals, providing access to games and betting services, and communicating with you about your account. Without this processing, jlli cannot provide the service.

4.2 Legal Obligation. Processing required to comply with jlli's obligations under applicable Philippine law, including anti-money laundering (AML) obligations under Republic Act No. 9160 as amended, KYC requirements, tax reporting, and cooperation with lawful requests from regulatory authorities including PAGCOR and the Anti-Money Laundering Council (AMLC).

4.3 Legitimate Interests. Processing carried out in pursuit of jlli's legitimate business interests, where those interests are not overridden by your fundamental rights. This includes fraud detection and prevention, platform security, responsible gaming monitoring, and internal analytics used to improve the platform experience for Filipino players.

4.4 Consent. Where jlli processes data for purposes beyond those above — specifically, for direct marketing communications about jlli promotions and news — such processing is conducted on the basis of your consent, given at registration or subsequently through your account communication preferences. You may withdraw this consent at any time by updating your notification settings or contacting jlli support.

jlli does not sell or rent your personal data to third parties. jlli may share your personal data with the following categories of recipients only where necessary and under appropriate protections:

5.1 Payment Service Providers. Financial data necessary to process your GCash, PayMaya, BPI, BDO, Metrobank, Visa, or Mastercard transactions is shared with the respective payment service provider for the sole purpose of processing that transaction. These providers are bound by their own data privacy obligations under Philippine and international financial regulations.

5.2 Identity Verification and Fraud Prevention Providers. KYC and anti-fraud service providers engaged by jlli to verify player identities and detect fraudulent account activity. These providers act as data processors under jlli's instruction and are contractually prohibited from using player data for any purpose other than the provision of those services to jlli.

5.3 Game and Technology Providers. Licensed game providers (such as PG Soft, Pragmatic Play, JILI, and others) and platform technology providers may receive anonymised or pseudonymised usage data necessary for game operation, statistical analysis, and technical support. Full identity data is not shared with game providers.

5.4 Regulatory and Legal Authorities. jlli is required by Philippine law to report certain transactions and account data to regulatory bodies including PAGCOR and the AMLC. jlli will also disclose personal data in response to lawful court orders, subpoenas, or binding regulatory directives. Where permitted, jlli will notify affected players of such disclosures.

5.5 Professional Advisors. Legal counsel, auditors, and other professional advisors engaged by jlli may access personal data on a strictly need-to-know basis, subject to professional confidentiality obligations.

The jlli website uses cookies and similar technologies to provide platform functionality, remember your preferences, analyse usage patterns, and support fraud prevention. The following types of cookies are used on the jlli platform:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your jlli session, CSRF protection tokens, and load balancing cookies. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game categories, and notification preferences. Disabling these may affect your experience but will not prevent you from using the platform.
• Analytics Cookies: Used by jlli's internal analytics systems to understand aggregate patterns of platform usage — pages visited, session duration, device types — to guide product improvements. Analytics data is aggregated and does not identify individual players.
• Fraud Prevention Cookies: Device and session fingerprinting data used by jlli's anti-fraud systems to identify potentially fraudulent or suspicious account activity. These are operational and cannot be disabled.

You may manage cookie preferences through your browser settings. Note that blocking strictly necessary or fraud prevention cookies will affect your ability to access and use the jlli platform. jlli does not use third-party advertising or retargeting cookies.

jlli retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer period required by applicable Philippine law. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Data subject to ongoing regulatory investigations or legal proceedings will be retained until the matter is fully resolved, notwithstanding the above periods.

jlli implements technical, organisational, and administrative security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit TLS/SSL encryption of all data in transit between your device and jlli servers;
• AES-256 encryption of personal data at rest in jlli's database systems;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Comprehensive audit logging of all access to player personal data by jlli personnel;
• Multi-factor authentication requirements for all jlli personnel systems that access personal data;
• Regular penetration testing and vulnerability assessments conducted by independent security specialists;
• Network-level controls including firewalls, intrusion detection systems, and DDoS mitigation;
• Incident response procedures designed to detect, contain, and notify affected parties of any personal data breach within the timeframe required by the National Privacy Commission.

While jlli employs robust security measures, no internet transmission is entirely secure. Players are reminded to protect their own jlli account credentials, use unique passwords, and enable two-factor authentication — all of which materially reduce the risk of unauthorised account access.

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by jlli. These rights are not absolute and are subject to applicable exemptions under the Act.

To exercise any of these rights, submit a written request to jlli via the live chat support at jlli.win or by email to [email protected]. jlli will acknowledge your request within five (5) business days and respond substantively within fifteen (15) business days. For complex requests, this period may be extended by an additional fifteen (15) business days with notice to you.

If you believe your privacy rights have not been respected, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

The jlli platform is strictly for individuals aged 21 years and older in compliance with applicable Philippine gaming regulations. jlli does not knowingly collect personal data from minors. The Platform employs age verification controls during registration to prevent underage access.

If jlli becomes aware that personal data has been inadvertently collected from an individual under 21 years of age, that data will be deleted immediately, the account will be closed, and any funds held in the account will be handled in accordance with jlli's underage gambling protocol. If you believe a minor may have accessed or registered on jlli, please contact jlli support immediately at [email protected].

jlli's primary data processing infrastructure is hosted within the Philippines or in jurisdictions that provide an adequate level of data protection recognised under the Data Privacy Act. Where personal data is transferred to service providers located in other jurisdictions — such as game providers or technology platform vendors — jlli ensures that such transfers are governed by appropriate contractual safeguards, including data processing agreements that require the recipient to apply protection standards equivalent to those required under Philippine law.

jlli does not transfer your personal financial or identity data to any jurisdiction outside the Philippines without the contractual protections described above being in place. Players in the Philippines retain all rights under the Data Privacy Act regardless of where jlli's service providers are located.

jlli reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, new legal requirements, or the expansion of jlli's services. When material changes are made, jlli will notify registered players by email to their registered address and by posting a prominent notice on the jlli platform, not less than fourteen (14) days before the amended policy takes effect.

The date at the top of this document reflects when the current version was last reviewed and published. You are encouraged to review this policy periodically. Your continued use of the jlli platform after the amended policy takes effect constitutes your acknowledgement of the revised terms.

Previous versions of this Privacy Policy are available on request from jlli support.

For any privacy-related inquiries, to exercise your data subject rights, or to raise a concern about how jlli handles your personal data, please contact us through the following channels:

This Privacy Policy was last reviewed and updated on 1 January 2026. This version supersedes all previous versions of the jlli Privacy Policy. The governing version is always the version published at jlli.win/privacy-policy at the time of any relevant data processing activity.