jilbay Privacy Policy

1. Who We Are

This Privacy Policy is issued by jilbay ("jilbay," "we," "us," or "our"), the operator of the online gaming platform accessible at jilbay.net and any associated mobile applications or digital services (collectively, the "Platform"). jilbay acts as the data controller in respect of all personal data collected through the Platform.

jilbay is committed to protecting the privacy and personal data of all users in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as the guidelines issued by the National Privacy Commission (NPC). This Policy explains how jilbay handles your personal data from the moment you visit the Platform through the entire lifecycle of your account.

By registering an account on jilbay or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and contact us to close your account.

2. Personal Data We Collect

jilbay collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

jilbay does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (for example, self-exclusion records maintained for responsible gaming purposes).

3. How We Collect Your Data

jilbay collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 7).
• Third-party sources: Identity verification data from KYC service providers; transaction data from payment processors such as GCash, PayMaya, and Philippine banks; fraud prevention data from security partners; and publicly available information where relevant to regulatory compliance.
• Regulatory sources: Self-exclusion status from PAGCOR or other recognised gaming regulatory bodies, where applicable.

4. How jilbay Uses Your Personal Data

jilbay uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your jilbay account, including authentication and password recovery.
• Identity and age verification: Confirming that you meet the 21+ age requirement and verifying your identity in compliance with KYC obligations.
• Transaction processing: Processing deposits and withdrawals in Philippine Peso (PHP) via GCash, PayMaya, bank transfer, and debit card.
• Regulatory compliance: Meeting our obligations under Philippine gaming regulations, anti-money laundering (AML) laws, and the Data Privacy Act of 2012.
• Responsible gaming: Monitoring gaming activity to identify signs of problem gambling, enforcing deposit limits and self-exclusion requests, and complying with PAGCOR responsible gaming guidelines.
• Customer support: Responding to your enquiries, resolving disputes, and improving our support services.
• Platform improvement: Analysing usage patterns to improve game offerings, platform performance, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only where you have consented or where we have a legitimate interest, and always with an easy opt-out option.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorised account access, and other security threats.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, jilbay processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms and Conditions you agreed to upon registration — including account management, transaction processing, and KYC verification.
• Legal obligation: Processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and the Data Privacy Act of 2012.
• Legitimate interests: Processing necessary for jilbay's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional personalisation features. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

jilbay does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya / Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, and debit card networks — solely to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist jilbay in verifying your identity and age in compliance with regulatory requirements.
• Fraud prevention and security partners: Service providers that help jilbay detect and prevent fraudulent activity, money laundering, and unauthorised account access.
• Game software providers: Licensed third-party game studios whose games are available on the jilbay Platform. These providers may receive limited technical data necessary to deliver their games.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory directive.
• Professional advisers: Lawyers, auditors, and accountants who provide professional services to jilbay, subject to strict confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of jilbay's business assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom jilbay shares personal data are required to process that data in accordance with applicable Philippine data protection law and jilbay's data processing standards.

7. Cookies & Tracking Technologies

jilbay uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The types of cookies jilbay uses include:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, display options, and game history to provide a more personalised experience.
• Analytics cookies: Collect aggregated, anonymised data about how players use the Platform — such as pages visited, session duration, and navigation paths — to help jilbay improve performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the jilbay Platform. jilbay does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

8. Data Retention

jilbay retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by AMLA regulations.
• KYC and identity documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Support communications: Retained for three (3) years from the date of the interaction, or longer if relevant to an ongoing dispute or regulatory matter.
• Self-exclusion records: Retained indefinitely to prevent re-registration by excluded players, in accordance with responsible gaming obligations.
• Marketing consent records: Retained for the duration of your account and for one (1) year following opt-out, to demonstrate compliance with consent requirements.

When personal data is no longer required, jilbay will securely delete or anonymise it in accordance with industry-standard data destruction practices.

9. Data Security

jilbay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and jilbay's servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Multi-factor authentication (MFA) options for account access.
• Regular security audits, vulnerability assessments, and penetration testing.
• Strict access controls ensuring that only authorised jilbay personnel can access personal data, on a need-to-know basis.
• Comprehensive staff training on data protection and information security.
• Incident response procedures to detect, report, and address personal data breaches promptly.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, jilbay will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, in accordance with NPC Circular 16-03.

While jilbay takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying jilbay immediately if you suspect any unauthorised access to your account.

10. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by jilbay:

• Right to be informed: The right to know what personal data jilbay collects about you, how it is used, and with whom it is shared — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data jilbay holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data. You can update most account information directly through your jilbay account settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jilbay's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests, subject to jilbay's overriding legitimate grounds.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe jilbay has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact jilbay's Data Protection Officer at [email protected]. jilbay will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with NPC guidelines.

11. Children & Minors

jilbay's Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. jilbay does not knowingly collect personal data from individuals under the age of 21.

During registration, jilbay requires all applicants to confirm that they are at least 21 years of age and to submit government-issued identification for age verification. Any account found to belong to a person under 21 will be immediately suspended, all pending transactions will be cancelled, and any data collected will be securely deleted to the extent permitted by law.

If you are a parent or guardian and believe that a minor has registered on jilbay using your details or otherwise, please contact us immediately at [email protected] so that we can take prompt action.

12. International Data Transfers

jilbay primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where jilbay uses internationally hosted cloud infrastructure or third-party game providers based abroad.

Where such transfers occur, jilbay ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that impose data protection standards equivalent to those required under Philippine law. jilbay will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards and, where required, obtaining your consent.

13. Changes to This Privacy Policy

jilbay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, jilbay will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The most current version of this Privacy Policy will always be available at jilbay.net/privacy-policy, with the effective date clearly indicated at the top of the page. We encourage you to review this Policy periodically. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

14. Contact & Complaints

jilbay has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or complaints about how jilbay handles your personal data, please contact us:

If you are not satisfied with jilbay's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.