JiliHost Privacy Policy

JiliHost ("we", "us", "our") is the data controller responsible for the personal information collected through the JiliHost platform at jilihost.app, including all associated mobile applications, games, and support channels. As data controller, JiliHost determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.

JiliHost has appointed a Data Protection Officer (DPO) who oversees compliance with applicable data privacy laws and serves as the primary point of contact for data subjects exercising their rights under RA 10173. Contact details for the DPO are provided in Section 12 of this Policy.

JiliHost collects personal data from you in several ways: directly when you register or interact with the platform, automatically through your use of the platform, and from third parties where permitted by law. The categories of personal data we collect are described in the table below.

JiliHost does not collect sensitive personal information as defined under RA 10173 (such as health data, political opinions, or religious beliefs) unless specifically required by law or with your explicit consent. We do not collect full payment card numbers — all financial data is handled through PCI-DSS compliant payment processors.

JiliHost processes your personal data only for specific, legitimate purposes and only where a valid legal basis exists under RA 10173. The table below sets out the primary purposes for which we process your data and the corresponding legal basis for each.

JiliHost uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and deliver a personalized gaming experience. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and notification preferences. Disabling these may reduce your experience quality.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the platform — which games are most popular, where players encounter errors, and how navigation flows are used. This data helps JiliHost improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized account access attempts.

JiliHost does not use third-party advertising cookies or behavioral profiling cookies for the purpose of serving advertisements on external websites. You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to the JiliHost platform.

JiliHost does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are subject to Bangko Sentral ng Pilipinas (BSP) regulations.
• KYC / Identity Verification Providers: Third-party identity verification services may process your KYC documents to confirm your identity and age. These providers are contractually bound to process data only for verification purposes and to maintain appropriate security standards.
• Game Content Providers: Game providers whose titles are hosted on the JiliHost platform may receive anonymized session data (e.g., game round IDs, RNG seed data) for game integrity and audit purposes. No personally identifiable information is shared with game providers beyond what is technically necessary.
• Regulatory Authorities: PAGCOR and other competent Philippine government authorities (including the Anti-Money Laundering Council / AMLC) may receive player data where JiliHost is legally required to report or disclose such information.
• Law Enforcement: JiliHost will disclose personal data to law enforcement agencies where required by a valid court order, subpoena, or other lawful legal process under Philippine law.
• IT Infrastructure & Security Providers: Cloud hosting, cybersecurity, and platform infrastructure providers may process data as data processors acting on JiliHost's instructions, subject to data processing agreements that impose equivalent data protection obligations.

JiliHost retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, JiliHost will securely delete or anonymize your personal data in accordance with industry-standard data destruction procedures. Anonymized data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

JiliHost implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes the following controls:

• Encryption in Transit: All data transmitted between your device and the JiliHost platform is encrypted using TLS 1.2 or higher. Look for the padlock icon and https:// prefix in your browser address bar.
• Encryption at Rest: Sensitive data stored in JiliHost databases — including KYC documents, financial records, and account credentials — is encrypted using AES-256 encryption.
• Password Security: User passwords are never stored in plain text. JiliHost uses industry-standard one-way hashing with salting (bcrypt) to store password credentials.
• Access Controls: Access to personal data within JiliHost's internal systems is restricted on a strict need-to-know basis. All staff with data access undergo background checks and regular data privacy training.
• Intrusion Detection: JiliHost operates 24/7 security monitoring, intrusion detection systems, and automated anomaly alerts to identify and respond to potential security incidents in real time.
• Penetration Testing: JiliHost conducts regular third-party penetration testing and vulnerability assessments of its platform infrastructure.

While JiliHost takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your account credentials confidential and for notifying JiliHost immediately if you suspect unauthorized access to your account.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by JiliHost. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 12.

JiliHost will respond to all data subject requests within fifteen (15) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, in which case you will be notified of the extension and the reason for it. JiliHost will not charge a fee for exercising your rights unless requests are manifestly unfounded or excessive.

JiliHost enforces age verification at the point of registration and during KYC review. All players are required to submit a valid government-issued ID confirming their date of birth before their account is fully activated and before any withdrawal is processed. Providing false information about your age constitutes a breach of our Terms & Conditions and may result in account termination and forfeiture of funds.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. If you believe a minor has registered on JiliHost, please contact our support team immediately so we can investigate and take appropriate action.

JiliHost primarily processes and stores personal data within the Philippines or in jurisdictions that provide an adequate level of data protection as recognized by the National Privacy Commission. In limited circumstances, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game content providers operating internationally.

Where such transfers occur, JiliHost ensures that appropriate safeguards are in place to protect your personal data, including:

• Data processing agreements incorporating standard contractual clauses approved by the NPC or equivalent data protection authority;
• Transfers only to jurisdictions with data protection laws that provide a level of protection substantially equivalent to RA 10173;
• Technical and organizational security measures equivalent to those applied within the Philippines.

By using the JiliHost platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

JiliHost reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page;
• Notify registered players via the email address or mobile number associated with their account;
• Where required by law, obtain fresh consent for any new processing activities.

Your continued use of the JiliHost platform following notification of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you may request account closure in accordance with our Terms & Conditions. We recommend reviewing this Policy periodically to stay informed of how JiliHost protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or JiliHost's data processing practices, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing JiliHost's compliance with RA 10173 and serves as the primary contact for all data privacy matters.

If you are not satisfied with JiliHost's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173.