jiji18 Privacy Policy —
How We Handle Your Personal Data

Data Controller

This Privacy Policy is issued by jiji18.vip ("jiji18", "we", "us", or "our"), the operator of the online gaming platform accessible at https://jiji18.vip. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, jiji18 acts as the Personal Information Controller (PIC) in respect of all personal data collected from users of the Platform.

As a Personal Information Controller, jiji18 is responsible for determining the purposes and means of processing your personal data. We are committed to processing your data lawfully, transparently, and in a manner consistent with the principles of the Philippine Data Privacy Act.

Personal Data We Collect

jiji18 collects personal data across several categories, depending on the nature of your interaction with the Platform. The following table summarizes the categories of data we collect and examples of specific data points within each category:

jiji18 does not intentionally collect sensitive personal information (as defined under Section 3(l) of the Data Privacy Act) unless it is strictly necessary for compliance purposes, such as data required by PAGCOR regulations or anti-money laundering obligations. Where sensitive personal information is collected, we apply additional safeguards as required by law.

How We Collect Your Data

jiji18 collects personal data through the following means:

• Direct provision: Data you provide voluntarily during account registration, KYC verification, deposit and withdrawal processing, support interactions, and participation in promotions.
• Automated collection: Technical and usage data collected automatically through your use of the Platform, including server logs, session tracking systems, and analytics tools embedded in the Platform.
• Cookies and similar technologies: Data collected through cookies, web beacons, pixel tags, and local storage as described in Section 7 of this Policy.
• Third-party payment processors: Financial transaction data received from GCash, Maya, BPI, BDO, Metrobank, and other payment service providers when you initiate deposits or withdrawals.
• Identity verification providers: Results and metadata from third-party KYC and identity verification services used by jiji18 to confirm the identity and age of registered users.
• Publicly available sources: Where permitted by applicable law, jiji18 may supplement your data with information available from public sources for compliance purposes, such as sanctions lists and politically exposed persons (PEP) databases.

Purposes of Processing

jiji18 processes your personal data for the following specific and documented purposes:

• Account creation and management: Creating, maintaining, and administering your jiji18 Account, including authentication of your identity on login.
• Service delivery: Providing access to all gaming services, processing bets and game outcomes, managing your in-platform Wallet, and facilitating deposits and withdrawals.
• Age and identity verification (KYC): Confirming that you are aged 21 or above, that your identity is as represented, and that your account complies with PAGCOR requirements for registered players.
• Payment processing: Processing deposits, withdrawals, refunds, and chargeback investigations using your registered Philippine payment methods.
• Anti-money laundering (AML) compliance: Monitoring transactions for suspicious activity, conducting enhanced due diligence where required, and fulfilling mandatory reporting obligations under the AMLA (Republic Act No. 9160, as amended).
• Customer support: Responding to your queries, complaints, and support requests through live chat and email.
• Responsible gaming: Monitoring gameplay patterns for indicators of problem gambling, enforcing deposit limits and self-exclusion requests, and providing responsible gaming referrals where appropriate.
• Platform security: Detecting, investigating, and preventing fraudulent activity, unauthorized Account access, and technical security incidents.
• Legal and regulatory compliance: Complying with applicable Philippine laws, PAGCOR requirements, court orders, and requests from law enforcement or regulatory authorities.
• Marketing communications (with consent): Sending promotional offers, bonus notifications, and platform updates to users who have opted in to receive such communications. Opt-out is available at any time.
• Platform improvement: Analyzing aggregated usage data to improve Platform functionality, game selection, and user experience.

Legal Bases for Processing

jiji18 processes personal data only where a valid legal basis exists under the Philippine Data Privacy Act. The legal bases we rely on are:

• Contract performance: Processing necessary to perform the contract between you and jiji18 — including account management, service delivery, and payment processing — is conducted on the basis of contractual necessity.
• Legal obligation: Processing necessary to comply with jiji18's obligations under Philippine law, including KYC requirements under PAGCOR regulations, AML obligations under the AMLA, and data retention obligations under applicable legislation.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregated analytics where these interests are not overridden by your privacy rights.
• Consent: Marketing communications and non-essential cookies are processed on the basis of your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

Sharing Your Personal Data

jiji18 does not sell your personal data to any third party. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment service providers: GCash, Maya, BPI, BDO, Metrobank, and cryptocurrency payment processors, solely for the purpose of processing your financial transactions on jiji18. These providers act as independent data controllers for the payment data they receive.
• Identity verification services: Third-party KYC and age verification providers engaged by jiji18 to conduct identity checks required under PAGCOR and AMLA compliance frameworks.
• Game content providers: Game studios such as JILI Games, PG Soft, and Pragmatic Play may receive limited technical data (such as user session identifiers and bet amounts) for the purpose of delivering their games within the jiji18 Platform. These providers are contractually prohibited from using this data for any purpose other than game delivery.
• Technology service providers: Hosting, cloud infrastructure, customer relationship management, fraud detection, and analytics service providers engaged by jiji18 under data processing agreements that require them to process data only on jiji18's documented instructions.
• Legal and regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and courts, where disclosure is required by applicable Philippine law or by a valid legal order.
• Business transfers: In the event of a merger, acquisition, or sale of jiji18's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections. Users will be notified of any such transfer as required by applicable law.

Cookies and Tracking Technologies

jiji18 uses cookies and similar tracking technologies on its Platform to provide a functional, secure, and personalized user experience. The types of cookies used by jiji18 are as follows:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session authentication cookies, security tokens, and cookies that maintain the state of your Wallet and game session. No consent is required for strictly necessary cookies.
• Functional cookies: These cookies remember your preferences, such as language settings and display preferences, to improve your experience on jiji18. Disabling these cookies may affect Platform functionality.
• Analytics cookies: These cookies collect aggregated, anonymized information about how users interact with jiji18 — such as page views, session duration, and feature usage — to help us improve the Platform. These cookies are only placed with your consent.
• Marketing cookies: If you have consented to marketing communications, these cookies help jiji18 deliver relevant promotional content within the Platform. They are only placed with your explicit consent and may be withdrawn at any time through your Account settings.

You may manage your cookie preferences through your browser settings. Blocking all cookies may prevent certain features of jiji18 from functioning correctly, including login and payment processing.

Data Retention

jiji18 retains personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable Philippine law. The following retention periods apply:

• Account data: Retained for the duration of your registered Account, plus a minimum of five (5) years following permanent Account closure, in accordance with PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the AMLA and PAGCOR regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following Account closure or the completion of the business relationship, whichever is later.
• Support and communications records: Retained for up to three (3) years from the date of the interaction, or longer if relevant to an unresolved dispute or legal proceeding.
• Technical and usage data: Retained for up to two (2) years for security and fraud prevention purposes, then deleted or anonymized.
• Marketing consent records: Retained for the period during which consent is active, plus a reasonable period thereafter to demonstrate prior consent in the event of a complaint.

Upon expiry of the applicable retention period, jiji18 will securely delete or anonymize your personal data in a manner that prevents its reconstruction or identification.

Security Measures

jiji18 implements a layered approach to information security to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include, but are not limited to:

• Transport layer encryption: All data transmitted between your device and jiji18 servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Password security: User passwords are stored using industry-standard one-way hashing algorithms. jiji18 does not store passwords in plain text and cannot retrieve your password.
• Access controls: Access to personal data within jiji18's systems is restricted to authorized personnel on a strict need-to-know basis, with role-based access controls and audit logging.
• Two-factor authentication (2FA): Available to all registered Users and required for certain high-value transactions.
• Infrastructure security: jiji18's Platform is hosted in secure data centre facilities with physical security controls, firewalls, intrusion detection systems, and regular penetration testing.
• Incident response: jiji18 maintains a documented security incident response procedure. In the event of a qualifying personal data breach, jiji18 will notify the National Privacy Commission and affected users as required by the Data Privacy Act.

Your Data Subject Rights

As a Philippine data subject, you are entitled to the following rights under the Data Privacy Act of 2012 in respect of your personal data held by jiji18:

Children's Privacy and Age Restriction

jiji18 is an online gaming platform that is strictly for adults aged 21 years and above, in accordance with PAGCOR regulations on the minimum legal age for online casino gaming in the Philippines. jiji18 does not knowingly collect personal data from individuals under the age of 21.

If jiji18 discovers or is notified that personal data has been collected from a person under the age of 21, all data belonging to the under-age individual will be deleted and the associated account will be permanently closed. Any deposited balance will be refunded to the original payment source after verification.

If you are a parent or guardian and believe that your child under the age of 21 has registered an account on jiji18, please contact our support team immediately via live chat or at the email address provided in Section 16.

International Data Transfers

Some of jiji18's technology service providers — including cloud hosting infrastructure, analytics platforms, and game content providers — may be located outside the Philippines. Where personal data is transferred to recipients in other countries, jiji18 ensures that appropriate safeguards are in place to protect your data to a standard at least equivalent to that required by the Philippine Data Privacy Act.

Safeguards used for international data transfers may include contractual data processing agreements incorporating standard data protection clauses, or transfers to entities in countries that the National Privacy Commission has recognized as providing adequate data protection.

You may obtain further information about international data transfers involving your personal data by contacting the jiji18 Data Protection Officer.

Anti-Money Laundering and Regulatory Compliance

As an online gaming platform subject to Philippine gaming regulations and the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended by RA 10365 and RA 11521), jiji18 has specific legal obligations that require the collection and processing of certain personal and financial data.

These obligations include:

• Customer identification and verification (KYC) for all registered players prior to processing withdrawals above prescribed thresholds
• Ongoing transaction monitoring for indicators of money laundering or terrorist financing
• Mandatory reporting of covered and suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Record-keeping of customer and transaction data for a minimum of five years as required by the AMLA

jiji18 is required by law to fulfill these obligations regardless of user consent. Players who decline to provide the information necessary for AML compliance may be unable to access certain services, including withdrawals, on the jiji18 Platform.

Third-Party Services and Links

The jiji18 Platform integrates with third-party services including payment processors (GCash, Maya, BPI, BDO, Metrobank) and game content studios (JILI Games, PG Soft, Pragmatic Play). These third-party services operate under their own privacy policies and terms of service, which jiji18 does not control.

When you initiate a deposit via GCash or Maya, for example, your transaction data is processed by the relevant e-wallet provider in accordance with their own privacy terms. jiji18 is not responsible for the privacy practices of third-party payment providers or game studios. We encourage you to review the privacy policies of any third-party service you use in connection with jiji18.

jiji18 does not embed external links to third-party websites within the Platform's content pages, and this Privacy Policy does not apply to any website operated by a party other than jiji18.

Updates to This Privacy Policy

jiji18 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

When material changes are made to this Policy, jiji18 will provide advance notice to registered users via email to the address on file or via a prominent in-platform notification, at least seven (7) days before the changes take effect. Your continued use of jiji18 after the effective date of any revised Privacy Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically. The current version is always available at jiji18.vip/privacy-policy.

Contact and Data Protection Officer

If you have questions about this Privacy Policy, wish to exercise your data subject rights, or have concerns about how jiji18 handles your personal data, you may contact us through the following channels:

• Data Protection Officer: Available via the support channel — address your query to the DPO specifically when using live chat or email
• Live Chat: 24/7 support available directly through the jiji18 Platform
• Email: [email protected] — jiji18 aims to respond to all privacy-related enquiries within five (5) business days

If you are not satisfied with jiji18's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the regulatory body responsible for enforcing the Data Privacy Act and may be contacted through official Philippine government channels.