jilulu is committed to protecting the privacy and personal data of every Filipino player. This Privacy Policy explains what information we collect, how we use it, who we share it with, and what rights you have under the Philippine Data Privacy Act of 2012. Please read this document carefully.
Summary: jilulu collects personal information to operate your Casino account, process payments, comply with legal obligations, and improve the Platform. We do not sell your personal data. You have rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) to access, correct, and request deletion of your data. Questions? Contact our Data Protection Officer at [email protected].
This Privacy Policy ("Policy") applies to jilulu Casino ("jilulu," "we," "us," "our") and governs the collection, use, storage, disclosure, and protection of personal data provided by individuals ("Players," "Users," "you") who access or use the jilulu Platform at jilulu.org, including all associated features, games, support services, promotions, and mobile browser interfaces.
This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines. By registering a jilulu Account or using the Platform in any capacity, you acknowledge that you have read, understood, and agreed to the data practices described in this Policy.
This Policy should be read alongside jilulu's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. In the event of any conflict between this Policy and the Terms & Conditions regarding data privacy matters, this Policy shall prevail.
For the purposes of the Philippine Data Privacy Act of 2012, jilulu Casino is the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. A Personal Information Controller determines the purposes and means of processing personal data.
jilulu has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. The DPO can be contacted at the address provided in Section 15 of this Policy. Players may direct any data privacy queries, requests, or complaints to the DPO via the contact details in Section 15.
jilulu collects personal data through various channels including the registration process, account management, gameplay, deposits and withdrawals, customer support interactions, and automatic technical collection. The categories of personal data collected are as follows:
Note: jilulu does not store full bank account PINs, GCash PINs, Maya passwords, or complete credit/debit card numbers. Financial credentials are processed directly by payment providers under their own security and data protection frameworks.
| Category | Examples | Mandatory? |
|---|---|---|
| Identity | Name, DOB, address, mobile, email | Yes — for account creation |
| KYC Documents | Gov't ID copy, selfie verification | Yes — for withdrawals above threshold |
| Financial | GCash number, bank account, USDT wallet | Yes — for deposits/withdrawals |
| Gameplay | Bet history, game sessions, wins/losses | Yes — automatically generated |
| Technical | IP address, device type, browser | Yes — automatically collected |
| Support | Chat logs, email threads | Only when you contact support |
jilulu processes your personal data only for legitimate purposes directly related to operating the Platform and fulfilling our legal and regulatory obligations. Specifically, jilulu uses your personal data for the following purposes:
To register your Account, verify your identity, maintain your Account records, authenticate your login sessions, and communicate account-related updates and security alerts via SMS or email.
To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, Coins.ph, GrabPay, 7-Eleven CLiQQ, and USDT TRC20; to verify transaction authenticity; and to comply with financial reporting and anti-money laundering (AML) obligations under Philippine law.
To fulfil jilulu's obligations under PAGCOR regulations, the Philippine Data Privacy Act of 2012, the Anti-Money Laundering Act, and any other applicable Philippine laws and regulations. This includes age verification (minimum 21 years of age), KYC identity verification, suspicious transaction monitoring and reporting, and record-keeping obligations.
To monitor gameplay patterns for indicators of problem gambling behavior; to apply responsible gaming tools that you have activated (deposit limits, loss limits, self-exclusion); and to fulfil obligations under jilulu's Responsible Gaming Policy.
To analyze aggregated and anonymized usage data to improve platform performance, game selection, payment flows, and user experience. Individual player behavior is not shared externally for this purpose.
To send you promotional offers, bonus notifications, and event announcements via SMS, email, or in-Platform notifications, where you have not opted out of such communications. You may opt out of marketing communications at any time by contacting jilulu support or updating your communication preferences in Account Settings.
To detect, investigate, and prevent unauthorized access, fraud, bonus abuse, money laundering, and other illegal or prohibited activities on the Platform. IP address data, login device fingerprinting, and session data are used for this purpose.
Under the Philippine Data Privacy Act of 2012, jilulu relies on the following legal grounds for processing your personal data:
jilulu does not sell, rent, or trade your personal data to third parties for their own commercial purposes. jilulu may share personal data with the following categories of third parties, strictly for the purposes described in this Policy:
GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO Unibank, Metrobank, GrabPay Philippines, Coins.ph, and other payment service providers — to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Philippine financial regulations.
Third-party game providers including JILI Games, PG Soft, Pragmatic Play, Playtech, and Evolution Gaming — limited to technical data necessary to authenticate your game sessions and record game outcomes. Game providers do not receive your financial or identity documents.
Third-party identity verification providers used to authenticate government-issued identification documents submitted during KYC. These providers are bound by data processing agreements and applicable Philippine law.
PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies — where jilulu is legally required to disclose information, including in response to lawful orders, regulatory examinations, or mandatory suspicious transaction reports.
Cloud hosting providers, cybersecurity vendors, and analytics platforms engaged by jilulu to operate and protect the Platform. All such providers are contractually bound to process data only on jilulu's instructions and in compliance with applicable data protection law.
No Data Sales: jilulu does not sell, lease, or otherwise transfer your personal data to third parties for advertising, profiling, or commercial purposes outside of what is described in this Policy.
Some of jilulu's third-party service providers — including game providers and cloud infrastructure partners — may be located outside the Philippines. Where personal data is transferred to recipients in other countries, jilulu ensures that appropriate safeguards are in place, including contractual data processing agreements that require the recipient to maintain data protection standards consistent with or equivalent to those required under Philippine law.
jilulu does not transfer your personal data to countries or territories that do not provide an adequate level of data protection without implementing appropriate safeguards as required by the NPC.
jilulu retains your personal data for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by Philippine law. The following general retention guidelines apply:
Upon expiry of the applicable retention period, jilulu will securely delete or anonymize your personal data so that it can no longer be linked to you as an identified individual.
jilulu implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
Whilst jilulu takes all reasonable steps to protect your data, no method of data transmission over the internet is 100% secure. Players are responsible for maintaining the security of their Account credentials and should contact jilulu support immediately if they suspect unauthorized access.
Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in respect of your personal data held by jilulu:
Request a copy of the personal data jilulu holds about you and information about how it is processed.
Request correction of inaccurate or incomplete personal data held in your Account.
Request deletion of your personal data where jilulu no longer has a legal basis to retain it.
Object to processing of your data for marketing purposes or processing based on legitimate interests.
Receive a copy of your data in a structured, machine-readable format for transfer to another service.
Lodge a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated.
To exercise any of these rights, please contact jilulu's Data Protection Officer as described in Section 15. jilulu will respond to all verified data rights requests within thirty (30) calendar days of receipt. In complex cases, jilulu may extend this period by a further 30 days with prior notice. jilulu may request proof of identity before processing any data rights request.
Please note that the right to erasure does not apply where jilulu is required to retain your data to comply with a legal obligation — for example, financial and AML record-keeping requirements described in Section 8.
The jilulu Platform is strictly restricted to individuals who are 21 years of age or older, consistent with PAGCOR regulations governing online gambling in the Philippines. jilulu does not knowingly collect personal data from individuals under 21 years of age.
Age verification is carried out at registration via date of birth submission, and through KYC document verification where applicable. If jilulu becomes aware that personal data has been collected from a minor, that data will be immediately deleted and the associated Account will be closed. Any funds held in such an Account will be handled in accordance with applicable law.
If you are a parent or guardian and believe that a minor has registered an Account with jilulu, please contact us immediately at the address in Section 15.
The jilulu Platform may contain references to third-party game providers, payment partners, and support tools. These third parties operate under their own privacy policies and jilulu is not responsible for the data practices of third-party service providers beyond the contractual obligations described in Section 6.
Where jilulu engages third-party processors to handle personal data on its behalf, jilulu enters into data processing agreements that require those processors to: (a) process data only on jilulu's documented instructions; (b) implement appropriate technical and organizational security measures; (c) not sub-process data without jilulu's prior authorization; and (d) assist jilulu in fulfilling data subject rights requests and breach notification obligations.
jilulu may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, jilulu will notify registered Players via email or SMS at least seven (7) days before the changes take effect, except where immediate changes are required by law or regulation.
The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the Platform after any updated Policy takes effect constitutes your acceptance of the revised terms. If you do not agree to any changes, you must stop using the Platform and may request Account closure via jilulu support.
For all data privacy queries, data rights requests, or complaints regarding jilulu's data practices, please contact our Data Protection Officer through any of the following channels:
jilulu will acknowledge receipt of all data privacy requests within three (3) business days and will complete processing within the statutory timeframe of 30 calendar days (extendable to 60 days for complex requests with prior notice).
If you are not satisfied with jilulu's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.
Acknowledgement: By registering for a jilulu Account and using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein, in accordance with the Philippine Data Privacy Act of 2012.
Privacy at jilulu isn't a policy exercise — it's an operational commitment backed by real technology and real processes.
Every data exchange between your browser and jilulu uses TLS 1.3 — the strongest available transport encryption. Data at rest, including KYC documents and transaction records, is encrypted with AES-256. Your information is protected end-to-end.
jilulu does not sell, rent, or trade your personal information to third parties for advertising or commercial profiling. Data shared with third parties is strictly limited to what is necessary to operate the Platform and comply with the law — nothing more.
jilulu operates in full compliance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012. A dedicated Data Protection Officer oversees all data practices, player rights requests, and NPC reporting obligations.
Access, correct, port, or request deletion of your personal data at any time via jilulu's Data Protection Officer. Opt out of marketing communications through Account Settings with no impact on your gaming access. Your rights are real and enforceable.
jilulu maintains a documented data breach response procedure. In the event of a breach that affects your personal data, you and the NPC will be notified promptly as required by law. Security monitoring runs continuously across jilulu's infrastructure.
jilulu keeps your data only as long as legally required. Financial records are retained for five years under AML law. Technical logs are purged after twelve months. Marketing data is deleted when you withdraw consent. Retention schedules are defined and enforced.
Secure accounts, encrypted transactions, no data selling — just great games.
21+ only · Play responsibly · Entertainment purposes only