jijiwin Privacy Policy

1.Data Controller Information

jijiwin operates as the data controller in respect of all personal data collected through the jijiwin Platform. As data controller, jijiwin determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC).

jijiwin has appointed a Data Protection Officer (DPO) who is responsible for overseeing data protection strategy and implementation, and for serving as the primary point of contact for data subjects and the NPC. Contact details for the DPO are provided in Section 12 of this Policy.

2.Personal Data We Collect

jijiwin collects personal data from you in the following categories:

• Registration Data: Full name, date of birth, nationality, residential address, email address, and mobile number provided when you create a jijiwin account.
• Identity Verification (KYC) Data: Government-issued identification documents (e.g., Philippine passport, driver's licence, UMID, SSS card), selfie photographs, and proof of address documents submitted for KYC compliance.
• Financial Data: GCash account details, PayMaya account details, BPI, BDO, or Metrobank account information, transaction history, deposit and withdrawal records, and account balances — all denominated in Philippine Peso (PHP).
• Gaming Activity Data: Game history, wager amounts, win/loss records, session durations, responsible gaming tool usage, and bonus participation records.
• Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and geolocation data (where permitted).
• Communications Data: Records of your interactions with jijiwin's customer support team via live chat, email, or other channels, including the content of those communications.
• Marketing Preferences: Your opt-in or opt-out status for promotional communications, and records of your engagement with jijiwin marketing materials.

jijiwin collects personal data directly from you (e.g., during registration and KYC), automatically through your use of the Platform (e.g., technical and gaming activity data), and in limited circumstances from third-party sources such as identity verification service providers and fraud prevention agencies.

3.How We Use Your Personal Data

jijiwin processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your jijiwin account, including processing your login credentials and account settings.
• Identity Verification: To verify your identity and age (21+) in compliance with PAGCOR regulations and anti-money laundering (AML) requirements under Philippine law.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods in PHP.
• Service Delivery: To provide access to jijiwin's games, promotions, VIP programme, and all other Platform features.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, AML obligations, tax reporting requirements, and other applicable Philippine legal and regulatory obligations.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeover, and other security threats.
• Responsible Gaming: To monitor gaming behaviour, enforce responsible gaming tools (deposit limits, self-exclusion), and identify players who may be at risk of problem gambling.
• Customer Support: To respond to your enquiries, resolve disputes, and improve the quality of jijiwin's support services.
• Marketing and Personalisation: To send you promotional offers, personalised game recommendations, and platform updates — subject to your marketing preferences and applicable consent requirements.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the performance, security, and user experience of the jijiwin Platform.

4.Legal Basis for Processing

jijiwin processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our contract with you — including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, AML obligations, and NPC requirements.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, where we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time by updating your marketing preferences in your jijiwin account settings.

5.Data Sharing and Disclosure

jijiwin does not sell, rent, or trade your personal data to third parties for their own marketing purposes. jijiwin may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers engaged to verify your identity and screen for sanctions, politically exposed persons (PEP), and adverse media.
• Game Software Providers: Licensed game developers and studios (e.g., Pragmatic Play, PG Soft, Jili) who may receive limited technical data necessary to deliver their games on the jijiwin Platform.
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where required by law or regulatory directive.
• Law Enforcement: Philippine law enforcement agencies, where jijiwin is legally compelled to disclose data pursuant to a valid court order, subpoena, or other lawful process.
• IT and Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers engaged to operate and secure the jijiwin Platform, subject to strict data processing agreements.

Where jijiwin engages third-party processors, we require them to process your personal data only on jijiwin's documented instructions, to implement appropriate technical and organisational security measures, and to comply with the Data Privacy Act of 2012.

6.Data Retention

jijiwin retains your personal data for as long as necessary to fulfil the purposes for which it was collected, and in any event for the minimum periods required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:

• Account and KYC Data: Retained for a minimum of five (5) years from the date of account closure, in compliance with AML record-keeping requirements under the Anti-Money Laundering Act (AMLA) and PAGCOR regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming Activity Data: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer Support Communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted or anonymised within thirty (30) days.

Upon expiry of the applicable retention period, jijiwin will securely delete or anonymise your personal data in accordance with its data disposal procedures.

7.Data Security Measures

jijiwin implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jijiwin Platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls limiting jijiwin staff access to personal data on a strict need-to-know basis.
• Multi-factor authentication (MFA) for jijiwin staff accessing systems that process personal data.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• 24/7 security monitoring and intrusion detection systems.
• Regular staff training on data protection and information security best practices.
• A documented data breach response procedure, including NPC notification within 72 hours of becoming aware of a breach that poses a real risk of serious harm.

While jijiwin takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your jijiwin login credentials and for notifying jijiwin immediately if you suspect unauthorised access to your account.

8.Cookies and Tracking Technologies

jijiwin uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files stored on your device that help jijiwin recognise you, remember your preferences, and analyse how you use the Platform.

jijiwin uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in to your jijiwin account. These cannot be disabled.
• Performance and Analytics Cookies: Used to collect anonymised data about how players use the jijiwin Platform, helping us identify areas for improvement.
• Functionality Cookies: Used to remember your preferences (e.g., language settings, game lobby layout) to personalise your jijiwin experience.
• Marketing Cookies: Used to deliver relevant promotional content based on your interests and gaming activity, subject to your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the jijiwin Platform.

9.Your Rights Under the DPA

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jijiwin:

• Right to be Informed: The right to be informed of how your personal data is collected, used, and processed — as set out in this Privacy Policy.
• Right to Access: The right to request a copy of the personal data jijiwin holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data jijiwin holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jijiwin's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on jijiwin's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe jijiwin has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact jijiwin's Data Protection Officer using the details provided in Section 12. jijiwin will respond to all verified data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you.

10.Protection of Minors

jijiwin strictly prohibits the use of its Platform by persons under 21 years of age, in accordance with PAGCOR regulations and Philippine law. jijiwin does not knowingly collect personal data from individuals under 21. If jijiwin becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be closed.

If you are a parent or guardian and believe that your child under 21 has registered on jijiwin or provided personal data to jijiwin, please contact our Data Protection Officer immediately using the contact details in Section 12. jijiwin will investigate and take prompt remedial action.

11.Changes to This Privacy Policy

jijiwin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, jijiwin will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. jijiwin encourages you to review this Privacy Policy periodically. Your continued use of the jijiwin Platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

12.Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or jijiwin's data processing practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official website.