jijiwin Privacy Policy

1 Introduction

1.1 jijiwin ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes our data processing practices in compliance with Republic Act 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

1.2 As a PAGCOR-licensed online gaming operator, jijiwin is additionally subject to data collection and retention obligations under PAGCOR's licensing conditions and the Anti-Money Laundering Act (AMLA) of the Philippines. Where these obligations impose requirements beyond what this Policy describes, we comply with the stricter standard.

1.3 By registering for a jijiwin account or using any jijiwin service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, you must not register for or use the jijiwin platform.

2 Data Controller

2.1 The data controller responsible for your personal data processed through the jijiwin platform is jijiwin, the licensed operator of jijiwin.club. jijiwin has registered its Data Protection Officer (DPO) with the National Privacy Commission as required by the DPA.

2.2 For all data protection inquiries, subject access requests, or complaints, please contact our DPO using the contact details in Section 15 of this Policy.

3 Personal Data We Collect

3.1 jijiwin collects the following categories of personal data:

3.2 jijiwin does not knowingly collect sensitive personal information as defined by the DPA (such as health data, religious beliefs, or sexual orientation) unless explicitly required for responsible gaming or regulatory purposes, and only with your explicit consent.

4 How We Collect Your Data

4.1 Directly from you: When you register a jijiwin account, complete KYC verification, make a deposit or withdrawal request, contact jijiwin customer support, or voluntarily provide information through the platform.

4.2 Automatically: When you access and use the jijiwin platform, we automatically collect technical data including IP addresses, device identifiers, browser type, session data, and gameplay logs through server logs, cookies, and analytics tools.

4.3 From third parties: jijiwin may receive information from payment processors (e.g., GCash, Maya, BPI, BDO, Metrobank) to verify payment transactions, and from identity verification service providers used to assist with KYC compliance.

5 Purposes of Processing

5.1 jijiwin processes your personal data for the following purposes:

• Account Registration and Management: Creating and maintaining your jijiwin account, verifying your identity and age (21+), and managing account security;
• PAGCOR Regulatory Compliance: Fulfilling all obligations under jijiwin's PAGCOR license, including player data reporting, game audit records, and responsible gaming enforcement;
• Anti-Money Laundering Compliance: Meeting obligations under the AMLA, including transaction monitoring, suspicious transaction reporting to the Anti-Money Laundering Council (AMLC), and source of funds verification;
• Payment Processing: Processing deposits and withdrawals in Philippine Peso through GCash, Maya, and other local payment channels;
• Platform Security and Fraud Prevention: Detecting and preventing fraudulent activity, account takeovers, bonus abuse, and other prohibited conduct;
• Responsible Gaming: Monitoring gaming activity for indicators of problem gambling and enforcing player-requested limits and self-exclusions;
• Customer Support: Responding to your queries, complaints, and service requests;
• Marketing (with consent): Sending promotional communications about jijiwin offers, bonuses, and new games where you have opted in. You may withdraw consent at any time.

6 Legal Basis for Processing

6.1 jijiwin processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contract performance: Processing necessary to provide you with the jijiwin gaming services you have contracted for, including account management and payment processing;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the AMLA, tax reporting requirements, and other Philippine legal obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights;
• Consent: Processing for direct marketing communications. You may withdraw your consent at any time by updating your marketing preferences in Account Settings or by contacting jijiwin Support.

7 Sharing Your Personal Data

7.1 jijiwin does not sell, rent, or trade your personal data to any third party for their own marketing purposes.

7.2 jijiwin shares personal data only in the following circumstances:

• Payment Processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment service providers receive the transaction data necessary to process your deposits and withdrawals. These providers are subject to their own privacy policies and Philippine financial regulations;
• Game Software Providers: Game providers (JILI, PG Soft, Pragmatic Play, Evolution, etc.) may receive your player account identifier and game session data as necessary to deliver their games within the jijiwin platform. All game providers operate under data processing agreements with jijiwin;
• PAGCOR: jijiwin is required to provide player account data, gaming activity records, and KYC documentation to PAGCOR upon request as part of its licensing obligations;
• Anti-Money Laundering Council (AMLC): jijiwin files Suspicious Transaction Reports (STRs) and Cash Transaction Reports (CTRs) with the AMLC as required by the AMLA;
• Law Enforcement and Courts: jijiwin will disclose personal data to Philippine law enforcement authorities, courts, or regulatory bodies where required by valid legal process, court order, or applicable law;
• Service Providers: Technical service providers (hosting, cybersecurity, analytics) who process data on behalf of jijiwin under data processing agreements that impose equivalent privacy protections.

8 Cross-Border Data Transfers

8.1 Some of jijiwin's service providers and game software partners may be located outside the Philippines. Where personal data is transferred outside the Philippines, jijiwin ensures that such transfers comply with Section 21 of the Data Privacy Act and NPC regulations on cross-border data flows.

8.2 Cross-border transfers are permitted only where: (a) the receiving country provides an adequate level of data protection as determined by the NPC; or (b) jijiwin has put in place appropriate safeguards, such as standard contractual clauses or binding corporate rules; or (c) the transfer is necessary for the performance of your jijiwin account contract (e.g., processing a game session delivered by an international game provider).

9 Data Retention Periods

9.1 jijiwin retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal minimum retention requirements:

• Account and KYC records: Retained for a minimum of 5 years from account closure, in compliance with PAGCOR licensing and AMLA requirements;
• Financial transaction records: Retained for a minimum of 5 years from the date of the transaction, as required by the AMLA and BIR regulations;
• Gaming activity logs: Retained for a minimum of 3 years from the date of the activity, as required by PAGCOR;
• Customer support records: Retained for 2 years from the date of the interaction;
• Marketing preferences and consent records: Retained for the duration of your account and for 1 year following account closure or withdrawal of consent.

9.2 Once the applicable retention period expires and there is no legal basis for continued retention, jijiwin will securely delete or anonymise your personal data.

10 Security Measures

10.1 jijiwin implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jijiwin's servers;
• Encryption of sensitive personal data and payment credentials at rest;
• Multi-factor authentication requirements for staff accessing player data systems;
• Segregation of player fund accounts from operational accounts;
• Regular penetration testing and vulnerability assessments by qualified third-party security professionals;
• Access controls limiting staff access to personal data on a strict need-to-know basis;
• Incident response procedures compliant with NPC breach notification requirements.

10.2 In the event of a personal data breach that poses a real risk to your rights and freedoms, jijiwin will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected players as soon as practicable in accordance with NPC guidelines.

11 Cookies and Tracking Technologies

11.1 jijiwin uses cookies and similar tracking technologies to operate and improve the platform. The categories of cookies used are:

• Strictly Necessary Cookies: Required for the jijiwin platform to function — including session management, authentication, and security. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings and game display options) to personalise your jijiwin experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the jijiwin platform to help us improve its performance and usability.
• Marketing Cookies: Used only where you have consented, to help us understand the effectiveness of promotional communications.

11.2 You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may prevent the jijiwin platform from functioning correctly.

12 Minors and Under-21 Policy

12.1 The jijiwin platform is strictly for individuals aged 21 and above, as required by PAGCOR's licensing conditions. jijiwin does not knowingly collect personal data from individuals under the age of 21.

12.2 If jijiwin becomes aware that it has collected personal data from an individual under 21, it will immediately close the account, delete the personal data subject to any legal retention obligations, and report the matter to PAGCOR as required.

12.3 If you are a parent or guardian and believe that your minor child has registered on jijiwin, please contact jijiwin Support immediately using the contact details in Section 15.

13 Exercising Your Data Privacy Rights

13.1 To exercise any of your rights under the Data Privacy Act (access, rectification, erasure, objection, portability, or complaint), submit a written request to jijiwin's Data Protection Officer using the contact information in Section 15. Your request should include:

• Your full name and registered jijiwin account email address;
• A clear description of the right you wish to exercise and the data concerned;
• A copy of a valid government-issued ID for identity verification purposes.

13.2 jijiwin will acknowledge receipt of your request within 5 business days and provide a substantive response within 15 business days. Where a request is complex or involves a large volume of data, jijiwin may extend this period by a further 15 business days and will inform you of the extension and its reasons.

13.3 jijiwin will not charge a fee for data subject requests, unless a request is manifestly unfounded, repetitive, or excessive, in which case a reasonable administrative fee may be levied.

14 Changes to This Privacy Policy

14.1 jijiwin may update this Privacy Policy periodically to reflect changes in our data practices, regulatory requirements, or platform functionality. Material changes will be communicated to registered players via the email address associated with their jijiwin Account at least 15 days before the changes take effect.

14.2 The updated Policy will be published at jijiwin.club/privacy-policy with a revised "Last Updated" date. Your continued use of the jijiwin platform after the effective date of any update constitutes acceptance of the revised Policy.

15 Contact & Data Protection Officer

15.1 For all privacy-related inquiries, subject access requests, or complaints, please contact jijiwin's Data Protection Officer:

15.2 If you are not satisfied with jijiwin's response to your privacy inquiry, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about filing a complaint with the NPC is available through the NPC's official government website.