jilkk Casino
Privacy Policy

In this Privacy Policy, the following definitions apply:

• "Personal Data" means any information that identifies or can reasonably be used to identify you as an individual, including your name, email address, Philippine mobile number, government ID details, and financial account information.
• "Sensitive Personal Information" means personal data about your government-issued identification numbers, financial data, and any other category of data treated as sensitive under RA 10173.
• "Processing" means any operation performed on Personal Data, including collection, recording, storage, use, transfer, or deletion.
• "Data Controller" means jilkk Casino, which determines the purposes and means of processing your Personal Data.
• "Data Subject" means you — the individual whose Personal Data is processed.
• "NPC" means the National Privacy Commission of the Philippines, the regulatory body responsible for administering and enforcing RA 10173.
• "DPO" means jilkk's Data Protection Officer, responsible for overseeing data privacy compliance within the organisation.
• "RA 10173" means the Data Privacy Act of 2012, Republic Act No. 10173, together with its Implementing Rules and Regulations.
• "Platform" means jilkk.org and all associated applications, services, and features operated by jilkk Casino.

2.1 The Data Controller responsible for processing your Personal Data in connection with jilkk Casino is jilkk, accessible at jilkk.org.

2.2 All enquiries, requests, and complaints relating to the processing of your Personal Data may be directed to jilkk's designated Data Protection Officer via email at [email protected] with the subject line "Privacy / DPO Enquiry".

2.3 jilkk has designated a Data Protection Officer (DPO) in accordance with the requirements of RA 10173 and the NPC's implementing guidelines. The DPO is responsible for monitoring compliance with data privacy laws, training staff, and serving as the primary point of contact for data subjects exercising their rights under this Policy.

3.1 jilkk collects only the Personal Data that is necessary, proportionate, and relevant to the purposes described in this Policy. The categories of data we collect are as follows:

3.2 jilkk does not collect biometric data beyond what is strictly required for identity liveness verification during KYC. Biometric images submitted for this purpose are processed solely for identity verification and are not retained beyond the verification process.

4.1 jilkk collects Personal Data through the following means:

5.1 jilkk processes your Personal Data only where a lawful basis for processing exists under RA 10173. The applicable bases are:

• Contractual Necessity: Processing required to fulfil jilkk's obligations under the Terms and Conditions you agreed to when registering — including operating your account, processing deposits and withdrawals, and delivering game services.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations under RA 9160 as amended, PAGCOR regulatory requirements, and KYC obligations.
• Legitimate Interests: Processing necessary for jilkk's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your data protection rights.
• Consent: Processing of your Personal Data for marketing communications, where we rely on your affirmative opt-in consent. You may withdraw this consent at any time by updating your notification preferences in Account Settings or emailing [email protected].

6.1 jilkk uses the Personal Data we hold about you for the following purposes:

• Account Management: Creating and maintaining your jilkk account, authenticating your identity at login, and managing your account settings and preferences.
• Service Delivery: Processing deposits and withdrawals in Philippine Peso via GCash, Maya, BPI, BDO, and other approved payment methods; crediting winnings; applying bonuses; and maintaining an accurate transaction history.
• KYC and Regulatory Compliance: Verifying your age (21+) and identity in compliance with PAGCOR requirements and AML obligations. This processing is mandatory — accounts where KYC cannot be verified will not be permitted to withdraw funds.
• Fraud and Security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, bonus abuse, multi-accounting, and other prohibited conduct described in the Terms and Conditions.
• Responsible Gaming: Monitoring gaming activity patterns to identify indicators of problem gambling behaviour and, where appropriate, proactively offering responsible gaming tools or initiating protective interventions.
• Customer Support: Responding to queries, resolving disputes, and maintaining records of communications for quality assurance and audit purposes.
• Platform Improvement: Analysing aggregated usage data to understand how players interact with the Platform, identify technical issues, and improve game and feature offerings.
• Marketing Communications: Sending promotional offers, bonus notifications, and relevant platform updates to players who have opted in to receive such communications. You may opt out at any time.

7.1 jilkk does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We share your data only in the following circumstances and only to the minimum extent necessary:

• Payment Processors: GCash, Maya, BPI, BDO, UnionBank, and other payment service providers receive the financial data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are independently regulated.
• KYC and Identity Verification Providers: Third-party identity verification services engaged to process government ID documents and liveness checks during KYC. These providers are contractually bound to use your data solely for verification purposes.
• Game Technology Providers: Game studios and platform software providers may receive limited technical session data necessary to deliver and audit game outcomes. No personally identifiable information beyond session identifiers is shared for this purpose.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies where disclosure is required by law or court order.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged to provide professional services to jilkk, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of business assets, your Personal Data may be transferred as part of the transaction, subject to equivalent privacy protections.

8.1 Where jilkk engages service providers or technology partners located outside the Philippines, your Personal Data may be transferred to and processed in other jurisdictions. Any such cross-border data transfer is conducted only where:

• The recipient country provides an adequate level of protection comparable to RA 10173, as assessed by the NPC or consistent with NPC guidelines;
• Appropriate contractual safeguards — such as standard data processing agreements containing equivalent data protection obligations — are in place with the recipient; or
• The transfer is necessary for the performance of a contract to which you are a party (e.g., processing an international payment method).

8.2 jilkk endeavours to ensure that all international transfers of Personal Data are limited to what is strictly necessary and are subject to appropriate security and contractual protections.

9.1 jilkk retains your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

9.2 Where Personal Data is no longer required, jilkk will securely delete or anonymise it so that it can no longer be associated with an identifiable individual.

10.1 jilkk implements appropriate technical and organisational security measures designed to protect your Personal Data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and jilkk's servers is protected by TLS 1.2 or higher (256-bit SSL encryption).
• Encryption at Rest: Sensitive personal data stored in jilkk's databases is encrypted at rest using industry-standard encryption protocols.
• Access Controls: Access to Personal Data is restricted to authorised jilkk personnel who require it to perform their job functions. Role-based access controls and audit trails are maintained for all systems containing Personal Data.
• Password Hashing: Account passwords are hashed using a strong one-way algorithm (bcrypt). jilkk staff cannot view your password in plain text.
• Two-Factor Authentication: 2FA is available for all player accounts and is mandatory for all jilkk staff accessing internal systems.
• Penetration Testing: jilkk conducts regular third-party penetration tests and security audits of its platform infrastructure.
• Staff Training: All jilkk personnel who handle Personal Data receive regular training on data privacy obligations, phishing awareness, and secure data handling practices.

10.2 While jilkk takes all reasonable steps to protect your Personal Data, no method of electronic storage or transmission is 100% secure. We encourage you to use strong, unique passwords and enable 2FA on your jilkk account to further protect your data.

11.1 jilkk uses cookies and similar tracking technologies on the Platform to support site functionality, maintain your authenticated session, and analyse how the Platform is used. The categories of cookies we use are:

11.2 You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the jilkk Platform. Most modern browsers allow you to block, delete, or receive notifications about cookies through the browser's privacy or settings menu.

11.3 jilkk does not use third-party advertising or retargeting cookies that would allow external advertising networks to build profiles of your browsing activity across other websites.

12.1 Under RA 10173, you have the following rights with respect to your Personal Data held by jilkk:

12.2 To exercise any of the above rights, please contact jilkk's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." jilkk will acknowledge your request within 3 business days and respond substantively within 30 days.

13.1 jilkk Casino is strictly for adults aged 21 years and above. We do not knowingly collect Personal Data from individuals under 21 years of age. If we discover that Personal Data has been collected from an individual under 21, we will immediately delete that data, close the associated account, and refund any deposits to the original payment source.

13.2 If you have reason to believe that a person under 21 has registered an account on jilkk, please contact us immediately at [email protected]. We take such reports seriously and will investigate promptly.

14.1 In the event of a personal data breach that is likely to result in harm to affected individuals, jilkk will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with RA 10173 and NPC Circular No. 16-03.

14.2 Where a breach is likely to result in a high risk to your rights and freedoms, jilkk will also notify affected data subjects without undue delay, providing information about the nature of the breach, the data affected, and the steps jilkk has taken or intends to take to address the breach and mitigate its effects.

14.3 jilkk maintains a Data Breach Response Plan that is reviewed and tested annually by the DPO and the security team. All jilkk personnel are trained to identify and escalate potential data security incidents promptly.

15.1 The jilkk Platform may contain references to third-party services such as GCash, Maya, BPI, and BDO in the context of payment processing. jilkk is not responsible for the privacy practices of third-party websites or services. Any Personal Data you provide directly to a third-party payment provider is governed by that provider's own privacy policy.

15.2 jilkk does not embed third-party advertising, social media widgets, or tracking pixels that could allow external parties to collect your Personal Data through the jilkk Platform without your knowledge.

16.1 jilkk may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Effective" date at the top of this page indicates the date of the most recent revision.

16.2 Where updates are material — meaning they substantially affect how we use your Personal Data or your rights as a data subject — jilkk will notify you by email to your registered address at least 14 days before the changes take effect.

16.3 Your continued use of the jilkk Platform after the effective date of any Privacy Policy update constitutes your acknowledgment of the revised Policy. If you disagree with any update, you should cease using the Platform and may request deletion of your account.

17.1 For all privacy-related enquiries, data subject rights requests, complaints, or questions about this Privacy Policy, you may contact jilkk's Data Protection Officer using the details below:

17.2 If you are not satisfied with jilkk's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC). The NPC's contact details are publicly available through official Philippine government channels.