Your personal data belongs to you. This Privacy Policy explains exactly what information jilwin collects, how we use it, who we share it with, and the rights you hold as a Filipino data subject under the Data Privacy Act of 2012.
As a registered jilwin player and a Filipino data subject, you hold the following rights under Republic Act No. 10173 (Data Privacy Act of 2012) and its implementing rules.
Know what data we collect and why before we collect it.
Request a copy of the personal data jilwin holds about you.
Request correction of inaccurate or incomplete personal data.
Request deletion of your data in eligible circumstances.
Object to processing of your data for direct marketing purposes.
Claim compensation for damages caused by unauthorized data processing.
Six concrete commitments that underpin jilwin's approach to data privacy and security for every Filipino player on our platform.
All data transmitted between your device and jilwin's servers is encrypted using 256-bit TLS 1.3 — the same encryption standard used by Philippine banks including BPI and BDO. Your credentials, payment details, and gaming data are protected in transit at all times.
jilwin stores personal data on secured, access-controlled servers with industry-standard encryption at rest. Physical and logical access to servers containing player personal data is restricted to authorised personnel only and subject to audit logging.
jilwin maintains a designated Data Protection Officer (DPO) as required by the National Privacy Commission. The DPO oversees all data processing activities, handles data subject requests, and manages the jilwin data breach response protocol.
jilwin shares personal data with third parties only where strictly necessary — payment processors like GCash and PayMaya, KYC verification providers, game studios under data processing agreements, and regulatory bodies including PAGCOR. We do not sell your personal data.
jilwin retains personal data only for as long as necessary for the purposes for which it was collected — and for the minimum periods required by PAGCOR regulations, anti-money laundering law, and Philippine tax requirements. Data no longer needed is securely deleted.
In the event of a personal data breach that poses a risk to your rights and freedoms, jilwin will notify affected players and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach — in compliance with NPC Circular 16-03.
jilwin Casino is an online gambling platform operating under a license issued by the Philippine Amusement and Gaming Corporation ("PAGCOR"). For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, jilwin acts as the Personal Information Controller with respect to the personal data of its registered players and website visitors.
This Privacy Policy applies to all personal data processed by jilwin in connection with the operation of the jilwin Casino platform, including data collected via the jilwin website, mobile browser interface, live chat support, email communications, and telephone interactions. This Policy must be read alongside jilwin's Terms & Conditions and Responsible Gaming Policy, both of which form part of jilwin's complete player agreement framework.
jilwin's data processing practices are governed by: (a) Republic Act No. 10173 – Data Privacy Act of 2012; (b) its Implementing Rules and Regulations (IRR); (c) NPC Circulars and advisory opinions; and (d) applicable provisions of Republic Act No. 9160 – Anti-Money Laundering Act of 2001, as amended, which imposes mandatory data retention obligations on regulated financial service providers including PAGCOR-licensed operators.
jilwin collects the following categories of personal data from players and website visitors:
jilwin collects personal data through the following means:
Under the Data Privacy Act of 2012, jilwin's processing of personal data is based on the following legal grounds:
| Processing Activity | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (player agreement) |
| KYC identity and age verification | Legal obligation (PAGCOR regulations, DPA IRR) |
| Processing deposits and withdrawals | Performance of contract; legal obligation (AMLA) |
| Anti-money laundering monitoring | Legal obligation (Republic Act No. 9160) |
| Responsible gaming monitoring | Legal obligation (PAGCOR responsible gaming regulations) |
| Security monitoring and fraud prevention | Legitimate interest; legal obligation |
| Marketing and promotional communications | Consent (opt-in at registration; withdrawable at any time) |
| Analytics and platform improvement | Legitimate interest |
| Compliance with NPC and court orders | Legal obligation |
jilwin uses your identity and contact data to create, maintain, and administer your player account; to verify your identity and age; to communicate account-related information such as transaction confirmations, security alerts, and account status updates; and to manage your responsible gaming settings and preferences.
Financial data is used to process GCash, PayMaya, and bank transfer deposits and withdrawals; to conduct anti-money laundering transaction monitoring as required by the Anti-Money Laundering Council ("AMLC") and PAGCOR; and to investigate and resolve disputed transactions. jilwin shares the minimum necessary financial data with payment service providers to execute transactions on your behalf.
jilwin is required by PAGCOR, the AMLC, the Bureau of Internal Revenue ("BIR"), and the National Privacy Commission to collect, retain, and in certain circumstances disclose player personal data. This includes maintaining transaction records for a minimum of five (5) years under the Anti-Money Laundering Act, and submitting mandatory reports to PAGCOR on player activity.
Technical data, login records, and gaming activity data are used to detect and prevent unauthorized account access, bonus abuse, cheating, collusion, identity fraud, money laundering, and other prohibited activities. jilwin may share data with law enforcement authorities where required to investigate or report criminal activity.
Aggregated and de-identified gaming activity and technical data are used to analyse platform performance, identify popular game categories, optimize payment flows, and improve the overall jilwin player experience. This analysis does not identify individual players.
With your consent, jilwin will send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, sports betting promotions, and other jilwin offers. You may withdraw your marketing consent at any time by updating your communication preferences in your account settings or by contacting jilwin's support team. Withdrawal of marketing consent does not affect the lawfulness of processing conducted prior to withdrawal.
jilwin uses the following categories of cookies and similar technologies:
You can control the placement of non-essential cookies through your browser settings. Most modern browsers allow you to refuse or delete cookies. Please note that disabling cookies may affect your ability to log in to your jilwin account and access certain platform features.
jilwin shares the minimum necessary financial and identity data with GCash (G-Xchange Inc.), PayMaya Philippines Inc., and Philippine banking partners to process deposit and withdrawal transactions on your behalf. These providers process data as independent controllers under their own privacy policies and in compliance with Bangko Sentral ng Pilipinas ("BSP") regulations.
jilwin engages licensed third-party identity verification service providers to process KYC documentation on jilwin's behalf. These providers act as Personal Information Processors under data processing agreements that require them to process data solely for the purpose of identity verification and in accordance with the DPA.
Third-party game providers — including Pragmatic Play, JILI Gaming, Evolution Gaming, and others — may receive minimal technical and session data (such as player session tokens) necessary to operate their games within the jilwin platform. These providers are contractually prohibited from using this data for any purpose other than game operation.
jilwin discloses personal data to PAGCOR, the AMLC, the National Privacy Commission, the Bureau of Internal Revenue, and Philippine law enforcement authorities where required by law, court order, or legitimate regulatory demand. Such disclosures are made without prior notice to the affected player where notification would obstruct a legitimate investigation or is prohibited by applicable law.
Certain personal data processed by jilwin may be transferred to, and processed by, entities located outside of the Philippines — particularly where jilwin engages global game providers, cloud infrastructure providers, or KYC verification platforms. Where such transfers occur, jilwin ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act, including:
jilwin retains personal data for the following periods, after which data is securely deleted or anonymised:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years after closure | AMLA; PAGCOR record-keeping requirements |
| KYC identity documents | 5 years from account closure | Republic Act No. 9160 (AMLA) |
| Financial transaction records | 5 years from transaction date | AMLA; BIR record-keeping requirements |
| Gaming activity logs | 2 years from account closure | PAGCOR regulatory requirements |
| Customer support records | 3 years from last interaction | Legitimate interest (dispute resolution) |
| Marketing consent records | 3 years from withdrawal of consent | Legal obligation (DPA compliance) |
| Security & fraud logs | 3 years from creation | Legitimate interest (security) |
jilwin implements a comprehensive suite of technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
As a Filipino data subject, you have the following rights under the Data Privacy Act of 2012, which you may exercise at any time by contacting jilwin's Data Protection Officer:
You have the right to be informed whether jilwin processes your personal data and, if so, to be provided with information about the nature, scope, and purposes of that processing. This Privacy Policy constitutes jilwin's fulfilment of this obligation.
You have the right to request a copy of the personal data jilwin holds about you. jilwin will respond to verified access requests within thirty (30) days. The first access request per calendar year is fulfilled at no charge. Subsequent requests within the same year may be subject to a reasonable administrative fee.
If any personal data jilwin holds about you is inaccurate or incomplete, you have the right to request correction. Requests to correct identity data may require submission of supporting documentation. jilwin will process correction requests within fifteen (15) business days of verification.
You may request erasure or blocking of your personal data where: (a) the data is incomplete, outdated, false, or unlawfully obtained; (b) it is no longer necessary for the purposes for which it was collected; or (c) you withdraw consent and there is no other legal basis for processing. This right is subject to overriding legal retention obligations, including PAGCOR and AMLA-mandated record-keeping requirements, which may prevent full erasure of certain data categories during mandatory retention periods.
You have the right to object to jilwin's processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest where you have grounds relating to your particular situation. Objections to mandatory processing activities — such as AML monitoring — cannot be honoured as these are required by law.
Where jilwin processes your personal data by automated means on the basis of consent or contract, you have the right to receive your personal data in a structured, commonly used, machine-readable format. Portability requests are fulfilled within thirty (30) days.
All data subject rights requests must be submitted in writing to jilwin's Data Protection Officer at the contact details in Section 15. To protect your data, jilwin will verify your identity before processing any rights request. jilwin will not fulfil rights requests that cannot be matched to a verified, registered player account.
Parents or guardians who believe that a minor has registered a jilwin account should contact jilwin's Data Protection Officer immediately. jilwin will investigate and take appropriate action, including account closure and data deletion where legally permissible, within twenty-four (24) hours of a verified report.
jilwin sends marketing communications — including bonus offer notifications, new game announcements, sports betting promotions, and loyalty programme updates — only to players who have provided explicit consent at the time of account registration or subsequently via account settings. Marketing communications are delivered via email, SMS, and in-platform notifications.
You may opt out of marketing communications at any time by: (a) updating your notification preferences in your jilwin account settings; (b) clicking the unsubscribe link in any jilwin marketing email; or (c) contacting jilwin's support team via live chat. Opt-out requests are processed within seventy-two (72) hours. You will continue to receive essential account communications (transaction confirmations, security alerts, account status updates) regardless of your marketing preferences, as these are necessary for contract performance.
jilwin reviews and, where necessary, updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via email to their registered email address and/or via a prominent notice on the jilwin platform at least fourteen (14) days before the changes take effect. The "Effective Date" at the top of this Policy will reflect the most recent revision. Continued use of the jilwin platform after the effective date of any updated Policy constitutes acceptance of the revised terms.
For all privacy-related queries, data subject rights requests, and data breach reports, please contact jilwin's Data Protection Officer through the following channels:
jilwin's DPO is registered with the National Privacy Commission as required under NPC Circular 17-01. If you are not satisfied with jilwin's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission at www.privacy.gov.ph.
jilwin Casino serves Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and all other regions of the Philippines. We are committed to handling the personal data of every player with the care, transparency, and respect that Philippine data privacy law requires — and that Filipino players deserve.
Your data is protected. Your account is secure. Your privacy rights are respected. Now explore 700+ PAGCOR-regulated games — all in Philippine Peso, with instant GCash payouts.
Gambling involves financial risk. 21+ only. Play responsibly. jilwin operates under PAGCOR regulatory oversight.