Privacy Policy

01 Who We Are / Data Controller

jillstu ("we," "us," or "our") is the data controller responsible for the personal information collected through the jillstu platform at jillstu.org. As data controller, jillstu determines the purposes and means of processing your personal data. If you have any questions or concerns about how your data is handled, you may contact our Data Protection Officer (DPO) via our 24/7 live chat support or by email at [email protected].

02 Data We Collect

jillstu collects personal data that is necessary to provide our gaming services, comply with regulatory obligations, and maintain the security and integrity of the platform. The categories of data we collect include:

2.1 Data You Provide Directly

• Full legal name and date of birth
• Philippine mobile number and/or email address
• Home address (province, city/municipality)
• Government-issued ID details (PhilSys ID, driver's license, passport, or other valid Philippine ID)
• GCash number, PayMaya account, or bank account details (BPI, BDO, Metrobank) for payment processing
• Username, password (stored in hashed form), and security preferences
• Communications you send to our support team via live chat or email

2.2 Data Collected Automatically

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session data including login timestamps, pages visited, and session duration
• Gaming activity logs: games played, bet amounts, win/loss records, and transaction history
• Cookies and similar tracking technologies (see Section 8)

2.3 Data from Third Parties

We may receive personal data from third-party identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention services to verify your identity and protect the platform from abuse.

03 How We Use Your Data

jillstu processes your personal data for the following purposes:

04 Data Sharing & Disclosure

jillstu does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and AML service providers who assist in verifying your identity and screening for financial crime.
• Regulatory Authorities: PAGCOR and other Philippine government agencies as required by law, court order, or regulatory directive.
• Technology Service Providers: Cloud hosting, cybersecurity, and analytics providers who process data on our behalf under strict data processing agreements.
• Game Content Providers: Third-party game studios whose titles are offered on jillstu may receive anonymized gameplay data for technical purposes.

All third-party service providers are contractually required to process your data only for the specified purpose and to maintain appropriate security standards consistent with the Data Privacy Act of 2012.

05 Data Retention

jillstu retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR and Anti-Money Laundering Act (AMLA) regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the last interaction.
• Marketing preferences: Retained until you withdraw consent or close your account.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with jillstu's data disposal procedures.

06 Data Security

jillstu implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Multi-factor authentication options for member accounts
• Regular penetration testing and security audits by independent third parties
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• 24/7 security monitoring and intrusion detection systems
• Incident response procedures compliant with NPC notification requirements

In the event of a personal data breach that is likely to result in harm to affected individuals, jillstu will notify the National Privacy Commission (NPC) and affected members within the timeframes prescribed by the Data Privacy Act of 2012.

07 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jillstu:

• Right to be Informed: You have the right to know what personal data jillstu collects about you and how it is processed.
• Right of Access: You may request a copy of the personal data jillstu holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure / Right to be Forgotten: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact jillstu's Data Protection Officer via 24/7 live chat or by email at [email protected]. We will respond to all verified requests within thirty (30) days.

08 Cookies & Tracking Technologies

jillstu uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and deliver relevant content. The types of cookies we use include:

You may manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the jillstu platform.

09 Children's Privacy

If you believe a minor has registered on jillstu, please contact our support team immediately via live chat or at [email protected] so we can take prompt action.

10 Marketing Communications

jillstu may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, and special offers — but only if you have opted in to receive such communications during registration or through your account settings. You may withdraw your consent to marketing communications at any time by:

• Updating your notification preferences in your jillstu account settings
• Clicking the unsubscribe link in any marketing email
• Contacting our support team via live chat

Withdrawing consent to marketing communications will not affect the processing of your data for other purposes such as account management, transaction processing, or regulatory compliance.

11 Cross-Border Data Transfers

jillstu primarily stores and processes your personal data within the Philippines. In cases where data is transferred to service providers located outside the Philippines — such as cloud infrastructure or game content providers — jillstu ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to provide a level of data protection consistent with the Data Privacy Act of 2012. Such transfers are conducted only where necessary and with appropriate security controls.

12 Changes to This Privacy Policy

jillstu reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered members via email or a prominent notice on the platform prior to the changes taking effect. The "Last Updated" date at the top of this page will always reflect the most recent revision. Continued use of jillstu following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

13 Contact & DPO Information

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact jillstu's Data Protection Officer:

• Live Chat: Available 24/7 via the jillstu platform — fastest response, under 2 minutes
• Email: [email protected] — please note this is plain text only and is not a clickable link
• Operating Hours: Philippine Standard Time (PST), 24 hours a day, 7 days a week

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.