jiji18 Privacy Policy

This Privacy Policy describes how jiji18 ("we," "us," "our," or the "Platform") collects, processes, stores, and protects personal data belonging to users of the jiji18 online gaming platform ("you" or "Data Subject"). jiji18 operates as a personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. This policy applies to all personal data processed through the jiji18 website, account management system, gaming services, and customer support channels.

1. Introduction and Scope

jiji18 is a PAGCOR-regulated online gaming platform serving Filipino players across the Philippines. As a licensed gaming operator, jiji18 is subject to both PAGCOR's data governance requirements and the National Privacy Commission's regulations implementing the Data Privacy Act of 2012. This Privacy Policy governs all personal data processing activities conducted by jiji18 in connection with the operation of its online gaming services, including but not limited to slots, live casino games, sports betting, bingo, color prediction, and all associated account management and customer support functions.

By registering an account with jiji18 or using any jiji18 service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. This policy is incorporated by reference into the jiji18 Terms and Conditions and forms part of the agreement between you and jiji18.

This policy applies to personal data collected from individuals located in the Philippines and, where applicable, Filipino citizens residing abroad who access the jiji18 Platform. It covers data collected through all channels, including the jiji18 website, mobile browser interface, customer support interactions, and any other means through which jiji18 provides services.

2. Categories of Personal Data We Collect

2.1. Data You Provide Directly

When you register for an account, complete KYC verification, make deposits or withdrawals, contact customer support, or participate in promotions on jiji18, you may provide the following categories of personal data:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine National ID, UMID, passport number, driver's license number).
• Contact Data: Residential address (including barangay, city or municipality, province), Philippine mobile number, and email address.
• Financial Data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank, and other supported banks), cryptocurrency wallet addresses, transaction history, and account balance information.
• Verification Documents: Copies or photographs of government-issued ID documents, selfie photographs taken for liveness verification, and supporting documents such as utility bills or bank statements submitted for address verification.
• Account Credentials: Username and encrypted password (passwords are stored in hashed form and are never stored or accessible in plaintext).
• Communication Data: Records of your communications with jiji18 customer support, including live chat transcripts, email correspondence, and any information you voluntarily provide when submitting complaints or enquiries.

2.2. Data Collected Automatically

When you access and use the jiji18 Platform, certain technical and behavioral data is collected automatically through our systems and third-party analytics tools:

• Device and Technical Data: IP address, device type and model, operating system and version, browser type and version, screen resolution, and device identifiers.
• Usage and Behavioral Data: Pages visited, games played, bet amounts and outcomes, session duration, login timestamps, navigation patterns, and feature interactions.
• Location Data: Approximate geographic location derived from your IP address, used to verify your location for regulatory compliance purposes.
• Cookie and Tracking Data: Data collected through cookies and similar tracking technologies as described in Section 6 of this policy.

2.3. Sensitive Personal Information

In the course of KYC verification and responsible gaming compliance, jiji18 may process certain categories of sensitive personal information as defined under the Data Privacy Act, including but not limited to government identification numbers and financial account information. Such sensitive personal information is processed only to the extent strictly necessary for the purposes identified in this policy and is subject to enhanced security safeguards. jiji18 obtains explicit consent from players prior to processing sensitive personal information.

3. How We Use Your Personal Data

jiji18 processes your personal data for the following specific, legitimate purposes:

Purpose	Data Categories Used
Account registration and management	Identity Data, Contact Data, Account Credentials
KYC identity and age verification (21+ requirement)	Identity Data, Verification Documents
Processing deposits and withdrawals	Financial Data, Identity Data
Providing gaming services and maintaining game records	Usage and Behavioral Data, Account Data
Anti-money laundering (AML) compliance	Financial Data, Identity Data, Transaction Data
Fraud prevention and security monitoring	Device Data, IP Address, Usage Data, Financial Data
Customer support and dispute resolution	Communication Data, Account Data, Transaction Data
Responsible gaming program administration	Usage Data, Account Data, Communication Data
Regulatory reporting to PAGCOR and NPC	Identity Data, Financial Data, Transaction Data
Sending service notifications and account alerts	Contact Data, Account Data
Platform performance improvement and analytics	Usage and Behavioral Data, Device Data
Promotional communications (with consent)	Contact Data, Account Data

jiji18 does not use your personal data for any purpose beyond those listed above. If we intend to process your data for a new purpose not originally covered by this policy, we will notify you and obtain your consent before doing so.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, jiji18 relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing required to fulfill our obligations under the jiji18 Terms and Conditions, including account management, payment processing, and provision of gaming services.
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and the Data Privacy Act itself. This includes mandatory KYC verification, age verification, and regulatory reporting.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and general platform improvement, where such processing does not override your fundamental rights and freedoms.
• Consent: Processing for optional purposes such as promotional communications and non-essential analytics, where jiji18 has obtained your explicit prior consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing and Third-Party Disclosure

5.1. Authorized Service Providers

jiji18 may share your personal data with carefully selected third-party service providers who perform functions on our behalf and under our instructions. These include payment processing partners (including GCash and PayMaya operators, banking partners, and cryptocurrency payment processors), game software providers, identity verification and KYC technology providers, cloud hosting and infrastructure providers, and customer support platform operators. All such service providers are bound by data processing agreements that require them to handle your personal data only for the specified purpose and in accordance with applicable Philippine privacy law.

5.2. Regulatory and Legal Disclosures

jiji18 is legally required to disclose certain personal data to regulatory authorities under Philippine law. This includes mandatory reporting to PAGCOR as jiji18's licensing authority, reporting to the Anti-Money Laundering Council (AMLC) where legally required under the AMLA, compliance with lawful orders from Philippine courts, law enforcement agencies, or other government bodies, and reporting to the National Privacy Commission in connection with data breach notifications or compliance investigations.

5.3. No Sale of Personal Data

jiji18 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own commercial marketing or advertising purposes. Any data sharing arrangements not described in this policy require your explicit prior consent.

6. Cookies and Tracking Technologies

jiji18 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that allow jiji18 to recognize you across sessions, maintain your login state, and analyze how the Platform is used. The types of cookies jiji18 uses are described below:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and cookies required to process financial transactions. These cookies cannot be disabled without impairing your ability to use the Platform.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences to provide a personalized experience.
• Analytics Cookies: Collect anonymized or pseudonymized data about how visitors navigate and interact with the Platform, used to improve site performance and user experience. These cookies are only set with your consent.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, unauthorized account access, and other security threats on the Platform.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the jiji18 Platform. Analytics and non-essential cookies can be declined through the cookie consent banner displayed upon your first visit to the Platform.

7. Data Retention

jiji18 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, and in accordance with retention periods mandated by Philippine law. The following general retention guidelines apply:

• Account and KYC Data: Retained for the duration of your account relationship with jiji18, and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, in compliance with AMLA record-keeping requirements.
• Customer Support Communications: Retained for two (2) years from the date of the most recent interaction, or longer if required for ongoing dispute resolution or legal proceedings.
• Game Play Records: Retained for a minimum of three (3) years to support dispute resolution, game integrity audits, and regulatory compliance.
• Device and Usage Data: Retained for a maximum of thirteen (13) months unless required for ongoing fraud investigations or legal proceedings.

Upon expiry of the applicable retention period, jiji18 will securely delete or anonymize your personal data in a manner that prevents reconstruction or re-identification, in accordance with the National Privacy Commission's guidelines on data disposal.

8. Data Security Measures

jiji18 implements technical, organizational, and physical security measures appropriate to the sensitivity of the personal data we process and the risks associated with unauthorized access, disclosure, alteration, or destruction. Our security measures include but are not limited to:

• Encryption: All data transmitted between your device and jiji18 servers is encrypted using TLS (Transport Layer Security). Sensitive data at rest, including financial information and government ID data, is encrypted using AES-256 encryption.
• Access Controls: Personal data is accessible only to authorized jiji18 personnel on a strict need-to-know basis. Role-based access controls and multi-factor authentication are applied to all internal systems that process personal data.
• Password Security: Passwords are stored in hashed, salted form using industry-standard cryptographic algorithms. jiji18 never stores plaintext passwords and cannot retrieve your original password.
• Regular Security Audits: jiji18 conducts periodic internal and third-party security assessments, penetration tests, and vulnerability scans of its platforms and infrastructure.
• Incident Response: jiji18 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, jiji18 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay where required by law.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jiji18:

• Right to Be Informed: The right to be informed whether jiji18 processes your personal data and to receive clear, accessible information about how that data is used — which this Privacy Policy provides.
• Right of Access: The right to request and receive a copy of the personal data jiji18 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal data held by jiji18. Some corrections may require submission of supporting documentation.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data when it is no longer necessary for the purpose for which it was collected, or when processing lacks a lawful basis. Note that jiji18 may decline erasure requests where retention is required by law (e.g., AMLA record-keeping requirements).
• Right to Object: The right to object to processing of your personal data for purposes based on legitimate interests, or to opt out of direct marketing communications at any time.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible, and to request transmission of that data to another personal information controller where applicable.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission if you believe jiji18 has violated your data privacy rights. jiji18 will cooperate fully with any NPC investigation.
• Right to Damages: The right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal data, in accordance with the provisions of the Data Privacy Act.

To exercise any of the above rights, please submit a written request to jiji18's Data Protection Officer using the contact details provided in Section 14 of this policy. jiji18 will acknowledge your request within five (5) business days and provide a substantive response within the timeframes prescribed by the National Privacy Commission, typically within fifteen (15) business days of receipt of a complete request.

10. Cross-Border Data Transfers

Some of jiji18's service providers and game software partners operate data processing infrastructure outside the Philippines. Where personal data is transferred to, stored, or processed in jurisdictions outside the Philippines, jiji18 ensures that such transfers are conducted in compliance with the Data Privacy Act and NPC guidelines, including through the use of appropriate contractual safeguards such as standard data protection clauses, or transfers to jurisdictions deemed by the NPC to provide adequate levels of data protection.

jiji18 maintains a record of all cross-border data transfers and the safeguards applied to each transfer. You may request details of specific cross-border transfers affecting your personal data by contacting our Data Protection Officer.

11. Children's Privacy and the 21+ Requirement

The jiji18 Platform is strictly intended for adults aged 21 years or older, as required by PAGCOR regulation. jiji18 does not knowingly collect personal data from individuals under the age of 21. If jiji18 becomes aware that a player is under 21 years of age, the account will be immediately suspended, all gameplay and transactions will be reversed where possible, and the account will be permanently closed. Any personal data collected in connection with an underage account will be securely deleted as soon as it is no longer required for the purposes of investigating the age misrepresentation.

If you believe that a minor has registered an account with jiji18 or that jiji18 has inadvertently collected personal data from an individual under 21 years of age, please contact our Data Protection Officer or customer support team immediately so that appropriate action can be taken without delay.

12. Third-Party Links and Services

The jiji18 Platform may contain references to or integrations with third-party services, such as game software providers' platforms and payment processor interfaces. These third-party services operate under their own privacy policies, which jiji18 does not control. When you interact with a third-party service accessed through jiji18, any personal data you provide directly to that third party is subject to the third party's own privacy policy and data practices.

jiji18 is not responsible for the privacy practices of third-party services and recommends that you review the privacy policies of any third-party service with which you interact. jiji18 carefully selects service providers that demonstrate strong data protection practices and requires all providers to comply with standards consistent with the Data Privacy Act.

13. Changes to This Privacy Policy

jiji18 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform features. We will notify you of material changes to this policy by posting the updated version on the jiji18 Platform with a revised "Last Updated" date and, where required by the National Privacy Commission or where the changes materially affect your rights, by sending a direct notification to your registered email address.

We encourage you to review this Privacy Policy periodically to stay informed of how jiji18 handles your personal data. Your continued use of the jiji18 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes and, where required, your consent to the updated processing practices.

14. Contact Information and Data Protection Officer

jiji18 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, you may contact us through the following channels:

• Live Chat: Available 24/7 through your jiji18 account dashboard — the fastest channel for most queries.
• Data Protection Officer Email: [email protected] (please mark your subject line with "Data Privacy Request").

jiji18 will acknowledge all data privacy requests within five (5) business days and will endeavor to resolve them within fifteen (15) business days in accordance with NPC guidelines. For complex requests, we may request an extension of time and will notify you accordingly.