Privacy Policy – jilboss Online Casino

1. Introduction

jilboss ("jilboss", "we", "our", "us") operates the online gaming platform accessible at https://jilboss.club and any related mobile-optimised interfaces. As an operator subject to PAGCOR oversight, jilboss is required to collect and verify certain personal information as a condition of its operating licence. This Privacy Policy sets out our practices in full.

This policy applies to all personal data collected through the jilboss website, the account registration process, game sessions, payment transactions, customer support interactions, and marketing communications. It applies to all players, whether located in Metro Manila, Cebu, Davao, or elsewhere in the Philippines.

2. Data Controller

The data controller responsible for your personal information is jilboss, the operator of jilboss.club. All data processing activities described in this policy are carried out by jilboss or by third-party processors acting on jilboss's documented instructions under data processing agreements that comply with the DPA.

jilboss has designated a Data Protection Officer ("DPO") as required under the DPA. Contact details for the DPO are provided in Section 14.

3. Personal Data We Collect

jilboss collects personal data through several means, including information you provide directly, information collected automatically, and information received from third parties (such as payment processors and identity verification services).

4. How jilboss Uses Your Personal Data

jilboss uses personal data only for specified, legitimate purposes. We do not use your data for purposes incompatible with those for which it was collected.

• Account Management: Creating and maintaining your jilboss account, verifying your identity and age (21+), processing login authentication including OTP verification.
• Payment Processing: Processing GCash, Maya, and bank transfer deposits and withdrawals in Philippine Peso; verifying payment method ownership; detecting and preventing fraudulent transactions.
• Regulatory Compliance: Meeting PAGCOR licensing requirements, complying with the Anti-Money Laundering Act (AMLA), submitting required reports to the Anti-Money Laundering Council (AMLC), and responding to lawful requests from Philippine government authorities.
• Platform Operation: Delivering games, maintaining platform security, preventing multi-accounting, detecting prohibited conduct, and investigating disputes.
• Responsible Gaming: Monitoring usage patterns to identify at-risk players, applying self-exclusion lists, enforcing player-set deposit and session limits.
• Marketing (with consent): Sending promotional emails or SMS about bonuses and new games where you have opted in. You may withdraw consent at any time from account settings.
• Analytics: Aggregated, anonymised analysis to improve the jilboss platform experience for Filipino players.

5. Legal Basis for Processing

jilboss processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to perform our contractual obligations to you as a jilboss account holder — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, tax obligations, and other Philippine law.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Marketing communications and non-essential cookies, where you have given explicit, withdrawable consent.

6. Data Sharing and Disclosure

jilboss does not sell your personal data. We share personal data only with the following categories of recipients, and only to the extent necessary:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), GrabPay, BPI, BDO, Metrobank, and other payment service providers — strictly for processing your transactions.
• Identity verification providers: Third-party KYC services that assist jilboss in verifying the identity and age of players as required by PAGCOR.
• Game providers: Licensed third-party studios whose games are integrated into the jilboss platform — limited to the session data required to deliver and record game outcomes.
• Regulatory and law enforcement authorities: PAGCOR, the AMLC, the National Privacy Commission (NPC), and other competent Philippine government bodies, where required by law or regulatory directive.
• IT and infrastructure providers: Cloud hosting, security, and analytics service providers operating under data processing agreements with jilboss.

Any third-party processor that handles jilboss player data is bound by contractual obligations consistent with the DPA, and is prohibited from using the data for any purpose other than fulfilling their service to jilboss.

7. Cookies and Tracking Technologies

7.1 What We Use

jilboss uses cookies, web beacons, and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and collect aggregated usage analytics. Cookies are small text files stored on your device by your browser.

7.2 Types of Cookies

• Essential cookies: Required for the platform to function — login session management, security tokens, language preferences. Cannot be disabled without breaking core functionality.
• Analytics cookies: Anonymised data on how Filipino players navigate jilboss, which game categories are visited, and how the platform performs. Used to improve the user experience.
• Marketing cookies: Used only where you have consented, to personalise promotional content and measure the effectiveness of jilboss campaigns.

You may manage non-essential cookie preferences via your browser settings. Disabling essential cookies will impair your ability to use the jilboss platform.

8. Data Retention

jilboss retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• KYC and identity records: Minimum 5 years after account closure, as required by PAGCOR and AMLA.
• Financial transaction records: Minimum 5 years after the transaction date, in compliance with AMLA and BIR requirements.
• Player account data: Duration of account existence plus 3 years post-closure, or longer if required by ongoing legal proceedings.
• Marketing preferences and communications data: Until consent is withdrawn or 2 years after last account activity, whichever is earlier.

When data is no longer required and no legal retention obligation applies, jilboss securely destroys or permanently anonymises it.

9. Data Security

jilboss implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These include:

• TLS/SSL encryption for all data in transit between your device and jilboss servers.
• Encryption of sensitive data fields (including financial data) at rest.
• Role-based access controls limiting jilboss staff access to personal data on a strict need-to-know basis.
• Two-factor authentication (OTP via Philippine mobile number) for player account logins and for jilboss staff access to internal systems.
• Regular security audits and penetration testing of the jilboss platform.
• Incident response procedures — in the event of a personal data breach, jilboss will notify the National Privacy Commission and affected players within 72 hours, as required by NPC Circular 16-03.

No security system is impenetrable. While jilboss takes all reasonable measures to protect your data, we cannot guarantee absolute security against all possible threats. You are also responsible for protecting your own jilboss login credentials.

10. Your Data Rights Under the Philippine DPA

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by jilboss:

• Right to be informed: The right to know that jilboss is collecting your data, for what purpose, and how it will be used — as described in this policy.
• Right of access: The right to request a copy of the personal data jilboss holds about you.
• Right to rectification: The right to have inaccurate or outdated personal data corrected.
• Right to erasure (right to be forgotten): The right to request deletion of personal data where it is no longer necessary for the purposes for which it was collected — subject to jilboss's legal retention obligations under PAGCOR and AMLA.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to object: The right to object to processing based on legitimate interests, including direct marketing.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe jilboss has violated your data privacy rights.

To exercise any of these rights, contact jilboss's Data Protection Officer using the details in Section 14. jilboss will respond to all verified requests within 30 days.

11. Children and Age Restriction

jilboss does not knowingly collect personal data from individuals under 21 years of age. The jilboss platform is strictly restricted to adults aged 21 and above, as required by PAGCOR. Age verification is conducted during KYC. If jilboss becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the account will be closed. If you believe a minor has accessed jilboss, please contact us immediately.

12. Third-Party Links

The jilboss platform may contain links to third-party websites (for example, links to PAGCOR's official website or payment provider portals). jilboss is not responsible for the privacy practices of third-party websites. We encourage you to review the privacy policies of any external sites you visit. jilboss's privacy obligations extend only to data collected directly through jilboss.club and its associated services.

13. Changes to This Privacy Policy

jilboss reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform features. Material changes will be communicated to registered players via email or in-platform notification at least seven (7) days before taking effect. The "Last updated" date at the top of this page will be revised accordingly. Continued use of jilboss after the effective date of any update constitutes acceptance of the revised policy.

14. Contact and Data Protection Officer

For all privacy-related requests, questions, or complaints — including requests to exercise your DPA rights — please contact the jilboss Data Protection Officer:

If your concern is not resolved to your satisfaction by jilboss, you may file a complaint with the National Privacy Commission of the Philippines (NPC) — the independent body that enforces the Philippine Data Privacy Act.