666jilli Privacy Policy

For the purposes of this Privacy Policy, the following definitions apply:

• "666jilli" / "We" / "Us" / "Our" — the 666jilli online gaming platform operated at https://666jilli.app, regulated by PAGCOR.
• "Data Subject" / "You" / "Player" — any natural person who registers, accesses, or uses the 666jilli platform.
• "Personal Data" — any information, whether recorded in material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, consistent with Republic Act No. 10173.
• "Sensitive Personal Information" — personal data as defined under Section 3(l) of the Philippine Data Privacy Act, including government-issued IDs, financial account details, and other categories enumerated therein.
• "Processing" — any operation performed on personal data, including collection, recording, storage, updating, retrieval, consultation, use, disclosure, erasure, or destruction.
• "Data Privacy Act" / "DPA" — Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations.
• "NPC" — the National Privacy Commission of the Philippines.
• "PAGCOR" — the Philippine Amusement and Gaming Corporation.
• "AMLC" — the Anti-Money Laundering Council of the Philippines.
• "DPO" — 666jilli's designated Data Privacy Officer.

This Privacy Policy applies to all personal data processed by 666jilli in connection with the use of the 666jilli platform and all related services, including account registration, gameplay, financial transactions, customer support interactions, loyalty program participation, and marketing communications where consented to.

This Policy should be read in conjunction with 666jilli's Terms & Conditions. In the event of any inconsistency between this Policy and the Terms & Conditions on a data privacy matter, this Privacy Policy prevails.

666jilli collects the following categories of personal data depending on your level of engagement with the platform:

We do not intentionally collect special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, or health data) except where strictly required by applicable law or where you have voluntarily disclosed such information in the course of a support interaction.

666jilli collects personal data through the following means:

• Directly from you — when you register a 666jilli account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or update your account settings;
• Automatically during platform use — technical data such as your IP address, device identifiers, and session behaviour is collected automatically through the 666jilli platform's logging and analytics systems;
• Through cookies and similar technologies — as detailed in Section 8 of this Policy;
• From payment service providers — when you transact via GCash, Maya, or a bank, the relevant payment provider shares transaction confirmation data with 666jilli to facilitate crediting or debiting your account;
• From identity verification services — during KYC processing, 666jilli may use third-party identity verification tools to cross-reference documents you provide against Philippine government databases, consistent with PAGCOR requirements;
• From fraud prevention and regulatory databases — 666jilli may check new registrations against PAGCOR self-exclusion registers and AMLC watchlists as required by law.

Under the Philippine Data Privacy Act, every processing activity requires a lawful basis. 666jilli processes your personal data on the following bases:

• Contractual necessity — processing required to perform the 666jilli account agreement with you, including account management, gameplay facilitation, and payment processing;
• Legal obligation — processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (Republic Act No. 9160 as amended), and other applicable Philippine laws — including mandatory KYC, suspicious transaction reporting, and regulatory record-keeping;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your fundamental rights and freedoms;
• Consent — processing for marketing communications and non-mandatory analytics, where you have provided explicit, informed consent. You may withdraw consent for consent-based processing at any time by adjusting your account settings or contacting the DPO.

666jilli uses the personal data we collect for the following purposes:

• Creating, managing, and securing your 666jilli account;
• Processing deposits, withdrawals, and all wallet transactions in PHP;
• Verifying your age and identity in compliance with PAGCOR's minimum age requirements (21+) and KYC obligations;
• Detecting and preventing fraud, money laundering, and other illegal activities, including reporting to the AMLC as required by the Anti-Money Laundering Act;
• Administering bonuses, promotions, and the 666jilli loyalty program;
• Providing customer support and resolving disputes;
• Monitoring gameplay patterns to identify and respond to potential problem gambling indicators, consistent with our Responsible Gaming Policy;
• Sending account and transaction notifications via SMS to your registered Philippine mobile number;
• Sending promotional communications via SMS or email, where you have opted in to receive them;
• Improving the 666jilli platform through aggregated, anonymised analytics;
• Complying with all applicable Philippine laws, PAGCOR directives, NPC requirements, and court orders.

666jilli does not sell your personal data to third parties. We do not use your personal data for automated profiling that produces legal or similarly significant effects on you, beyond the fraud and responsible gaming monitoring described above.

666jilli shares personal data only in the following circumstances:

7.1 Service Providers and Processors

We engage third-party processors who act under our instructions to provide specific services, including: payment processing (GCash / Maya / bank integrations), identity verification, cloud hosting, platform analytics, and customer support tooling. All processors are bound by contractual data processing agreements consistent with the DPA.

7.2 Game Providers

Game providers such as JILI Gaming and other studios integrated into the 666jilli platform receive the minimum gameplay data necessary to operate their game engines and settle results. Game providers do not receive your identity or financial data beyond what is necessary for regulatory compliance applicable to their own licences.

7.3 Regulatory Disclosures

666jilli is legally required to disclose certain data to Philippine regulatory and law enforcement authorities, including:

• PAGCOR — player account data, transaction records, and gameplay data as required by our gaming licence conditions;
• AMLC — covered transaction reports and suspicious transaction reports as required by Republic Act No. 9160 and related issuances;
• NPC — personal data breach notifications and other disclosures as required by the DPA;
• Courts and law enforcement agencies — pursuant to valid court orders, subpoenas, or lawful demand.

7.4 Business Transfers

In the event of a merger, acquisition, or sale of assets involving 666jilli, personal data held by the platform may be transferred to the relevant successor entity. You will be notified of any such transfer and your rights as a data subject will be maintained.

The 666jilli platform uses cookies and similar tracking technologies for the following purposes:

• Essential cookies — strictly necessary for platform functionality, including session authentication, login state management, and security token validation. These cannot be disabled without breaking platform functionality.
• Functional cookies — store your preferences such as language settings and display preferences to improve your experience across sessions.
• Analytics cookies — used in anonymised/aggregated form to understand how players navigate the platform so we can improve the user experience. No individual-level data is exported from analytics processing.
• Security cookies — support fraud detection and device fingerprinting for account security purposes.

666jilli does not use third-party advertising cookies or tracking pixels that serve behavioural advertising to you on other websites. You may manage cookie preferences through your browser settings; note that disabling essential cookies will affect your ability to log in and use the platform.

666jilli retains personal data for the periods specified below, after which data is securely deleted or irreversibly anonymised:

• Account and KYC data — retained for a minimum of five (5) years from account closure, consistent with PAGCOR and AMLC record-keeping requirements under Philippine law;
• Financial transaction records — retained for a minimum of five (5) years from the date of each transaction, consistent with Anti-Money Laundering Act requirements;
• Gameplay logs — retained for three (3) years from the date of each session for dispute resolution, responsible gaming monitoring, and regulatory audit purposes;
• Customer support records — retained for two (2) years from the date of each interaction;
• Marketing preference data — retained while your account is active and for six (6) months after account closure, unless an earlier deletion request is received.

Where a legal hold applies — such as an ongoing investigation, litigation, or regulatory inquiry — data will be retained beyond the standard period until the hold is lifted.

666jilli implements the following technical and organisational measures to protect your personal data:

• Encryption in transit: All data transmitted between your device and the 666jilli platform is encrypted using TLS 1.2 or higher (256-bit SSL);
• Encryption at rest: Sensitive personal data stored in 666jilli databases is encrypted using AES-256;
• Access controls: Personal data is accessible only to 666jilli personnel and processors with a demonstrated need-to-know, enforced via role-based access controls and multi-factor authentication for administrative systems;
• Audit logging: All access to personal data records is logged and subject to regular review;
• Penetration testing: The 666jilli platform undergoes periodic security assessments by independent security professionals;
• Incident response: 666jilli maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify the NPC within 72 hours of discovery, and notify affected data subjects without undue delay, consistent with DPA requirements.

While 666jilli takes all reasonable steps to protect your data, no internet transmission or electronic storage system is entirely secure. You are responsible for keeping your account login credentials confidential. 666jilli will never ask for your password via any channel.

Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by 666jilli:

To exercise any of these rights, submit a written request to 666jilli's Data Privacy Officer at support@666jilli.app with the subject line "Data Subject Rights Request." We will acknowledge your request within five (5) business days and respond within thirty (30) days, consistent with DPA timelines. We may require identity verification before processing any rights request.

If you believe your data privacy rights have been violated, you have the right to file a complaint with the National Privacy Commission of the Philippines.

The 666jilli platform is strictly not intended for persons under the age of 21 years, consistent with PAGCOR minimum age requirements for online casino gaming in the Philippines. 666jilli does not knowingly collect personal data from any person under 21.

If 666jilli becomes aware that personal data has been collected from a person below the minimum age, we will immediately close the associated account, forfeit any balance consistent with our Terms & Conditions, and securely delete the personal data collected, subject to any mandatory retention obligations arising from the circumstances.

If you are a parent or guardian and believe your child under 21 has created a 666jilli account, please contact us immediately at support@666jilli.app.

Certain 666jilli service providers — including game engine providers and cloud infrastructure services — may process data in data centres located outside the Philippines. Where personal data is transferred internationally, 666jilli ensures such transfers are governed by appropriate safeguards, which may include:

• Contractual data processing agreements incorporating clauses equivalent to those prescribed by the NPC;
• Transfer to jurisdictions assessed by the NPC as providing an adequate level of protection; or
• Other lawful transfer mechanisms recognised under the DPA and its implementing rules.

You may request further information about the safeguards applicable to any specific international transfer by contacting the Data Privacy Officer.

666jilli may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR requirements. When material changes are made, we will notify you via your registered email address or a platform notice at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the 666jilli platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy.

Where an amendment affects processing that was previously carried out on the basis of consent, 666jilli will obtain fresh consent before commencing the new processing activity.

666jilli has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. You may contact the DPO for any data privacy matter using the following channels:

• Email: support@666jilli.app — subject line: "Data Privacy Request" or "Attention: Data Privacy Officer"
• Live Chat: Available daily 8:00 AM to 2:00 AM PHT via the 666jilli platform. Live chat agents can route data privacy matters to the DPO.

All data privacy inquiries are treated with strict confidentiality. We aim to acknowledge all requests within five (5) business days and to provide a substantive response within thirty (30) calendar days.

For general account, payment, and gameplay support, please also refer to our FAQ page or contact the 666jilli support team directly through live chat.