jiliff Privacy Policy —
Your Data, Handled with Respect

This Privacy Policy applies to all personal data processed by GoTech Entertainment in connection with the jiliff online gaming platform, accessible at jiliff.org. It governs data collected through the jiliff website, mobile-optimized interfaces, live chat support channels, email communications, and any other interaction between a player and the jiliff platform.

The data controller responsible for your personal information is:

This Privacy Policy should be read together with jiliff's Terms and Conditions and Responsible Gaming Policy, all of which form part of the overall agreement between you and GoTech Entertainment.

The following defined terms apply throughout this Privacy Policy:

jiliff collects personal data through multiple channels. The table below categorizes the types of data collected and the primary source of each:

3.1 Data You Provide Voluntarily

The majority of personal data jiliff processes is provided directly and voluntarily by you — through account registration, the KYC verification process, payment transactions, and communications with our support team. Providing this data is a condition of using jiliff's services; without it, certain features (particularly withdrawals) cannot be made available.

3.2 Data Collected Automatically

jiliff also collects certain technical and behavioral data automatically as a byproduct of your use of the platform. This includes device and browser identifiers, session timestamps, game activity logs, and IP addresses. This automated collection is necessary for security monitoring, fraud prevention, and compliance with PAGCOR audit requirements.

GoTech Entertainment processes your personal data on one or more of the following lawful bases recognized by the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — i.e., to operate your jiliff account, process deposits and withdrawals, deliver gaming services, and administer your Loyalty Program membership.
• Legal Obligation: Processing is required to comply with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160), and the Data Privacy Act (Republic Act No. 10173). KYC verification and transaction monitoring fall under this basis.
• Legitimate Interests: Processing is necessary for legitimate interests pursued by GoTech Entertainment that are not overridden by your privacy rights — including fraud detection, account security, platform improvement, and responsible gaming monitoring.
• Consent: For specific processing activities not covered by the above bases — such as optional marketing communications — we will obtain your explicit, freely given, and informed consent. You may withdraw consent at any time.

jiliff uses personal data for the following primary purposes:

• Creating, verifying, and managing your jiliff Account throughout its lifetime;
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported Philippine payment channels;
• Conducting KYC identity and age verification as required by PAGCOR and the Anti-Money Laundering Act;
• Monitoring transactions for fraud, money laundering, and other financial crime indicators in compliance with Republic Act No. 9160;
• Administering bonuses, promotions, and the jiliff Loyalty Program including tier assessment and reward delivery;
• Providing 24/7 player support through live chat and email;
• Administering responsible gaming tools including deposit limits, session timers, and self-exclusion, in accordance with PAGCOR's Responsible Gaming Framework;
• Sending service communications including transaction confirmations, account security alerts, and policy update notifications;
• Sending promotional communications where you have provided consent or where permitted by applicable law;
• Complying with data requests from PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine regulatory authorities;
• Improving the jiliff platform through aggregated, anonymized analytics of player behavior and game performance.

GoTech Entertainment does not sell, rent, or trade your personal data to third-party marketers. Personal data may be shared in the following limited and controlled circumstances:

6.1 Third-Party Processors

We engage third-party service providers who process personal data on our behalf under written data processing agreements that impose confidentiality and security obligations equivalent to those observed by GoTech Entertainment. Categories of processors include: identity verification providers, payment processors, cloud infrastructure providers, fraud detection services, and customer support platform providers.

6.2 Regulatory Authorities

jiliff is legally required to disclose personal data to PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), and other competent Philippine authorities when compelled by law, court order, or regulatory directive. jiliff will endeavor to notify you of such disclosures where legally permitted to do so.

6.3 Corporate Transactions

In the event of a merger, acquisition, restructuring, or sale of all or substantially all assets of GoTech Entertainment, personal data held by jiliff may be transferred to the acquiring or successor entity. Players will be notified of any material change to the identity of the data controller resulting from such a transaction.

6.4 Safety and Security

jiliff may disclose personal data where reasonably necessary to prevent, detect, or investigate fraud, unauthorized account access, or other unlawful activity affecting players, GoTech Entertainment, or third parties.

Some of jiliff's third-party processors — particularly game content providers and cloud infrastructure services — may be located outside the Republic of the Philippines. Where personal data is transferred to a foreign jurisdiction, GoTech Entertainment ensures that such transfers are conducted in compliance with Section 21 of the Data Privacy Act, which requires that the destination country provides a level of data protection substantially similar to that afforded under Philippine law, or that appropriate contractual safeguards — such as standard contractual clauses — are in place.

jiliff does not transfer your Sensitive Personal Data (including government ID images and financial account details) to jurisdictions that have not been assessed as providing adequate data protection under the National Privacy Commission's guidelines, except where strictly required by PAGCOR compliance obligations.

jiliff retains personal data for the periods set out below, after which data is securely and irreversibly deleted or anonymized:

• Account and Identity Data: Retained for the duration of your active jiliff account plus five (5) years following permanent account closure. This retention period is mandated by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Financial Transaction Data: Retained for ten (10) years from the date of each transaction, as required by Republic Act No. 9160 and BIR record-keeping obligations.
• KYC Documents: Retained for five (5) years from account closure or from the date of the last KYC review, whichever is later.
• Gaming Session Data: Retained for three (3) years from the date of each session for dispute resolution and PAGCOR audit purposes.
• Communications Data: Support chat transcripts and email correspondence retained for two (2) years from the date of each interaction.
• Technical / Log Data: Retained for twelve (12) months for security monitoring and incident investigation purposes.
• Marketing Consent Records: Retained for the duration of your account plus three (3) years to evidence consent history for compliance purposes.

GoTech Entertainment implements technical and organizational security measures appropriate to the nature, scope, and sensitivity of the personal data processed through jiliff. These measures include, but are not limited to:

• TLS 1.2 or higher encryption for all data transmitted between your device and jiliff's servers, including the login, registration, and payment flows;
• AES-256 encryption for personal data and financial information stored in jiliff's databases at rest;
• Role-based access controls limiting employee access to personal data to the minimum required for their specific job function;
• Multi-factor authentication for all internal administrative access to systems holding player personal data;
• Intrusion detection and prevention systems monitoring jiliff's infrastructure on a continuous 24/7 basis;
• Regular security audits and penetration testing conducted by qualified independent security professionals;
• Formal data breach response plan tested at least annually, with response procedures aligned to the NPC's breach notification requirements.

While GoTech Entertainment takes these measures seriously, no digital system can guarantee absolute security. Players are encouraged to use strong, unique passwords for their jiliff accounts and to enable Two-Factor Authentication, which is available to all registered players at no cost.

jiliff uses cookies and similar tracking technologies to deliver, maintain, and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function — including session authentication cookies that keep you logged in to your jiliff account. These cannot be disabled without impairing the core service.
• Functional Cookies: Remember your language preference, display settings, and other customizations to improve your experience across sessions.
• Performance Cookies: Collect anonymized data about how players interact with jiliff — page load times, navigation paths, error rates — used solely for platform optimization. No personally identifiable information is included in this data.
• Security Cookies: Used for fraud detection and account security monitoring, including device fingerprinting to identify unauthorized login attempts.

jiliff does not deploy third-party advertising or behavioral targeting cookies. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will prevent access to your jiliff account.

As a data subject under the Data Privacy Act of 2012, you have the following enforceable rights with respect to your personal data held by jiliff. These rights may be exercised by contacting our Data Protection Officer via the contact details in Section 16.

jiliff's services are strictly restricted to persons who are twenty-one (21) years of age or older, as required by PAGCOR regulations. GoTech Entertainment does not knowingly collect or process personal data from individuals under 21 years of age.

GoTech Entertainment maintains a formal Personal Data Breach Response Plan. In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected data subjects:

• GoTech Entertainment will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required by the Data Privacy Act and its implementing rules;
• Where the breach is likely to result in a high risk to affected data subjects — for example, a breach involving government ID images or financial account details — GoTech Entertainment will notify affected jiliff players directly via their registered email address without undue delay;
• The notification to players will include: the nature of the breach, the categories and approximate volume of personal data involved, the likely consequences, and the measures GoTech Entertainment has taken or proposes to take to address the breach;
• GoTech Entertainment will cooperate fully with any NPC investigation arising from a notified breach.

The jiliff platform does not contain links to external third-party websites or applications beyond those necessary to complete payment transactions through regulated Philippine payment providers. GoTech Entertainment is not responsible for the privacy practices of third-party payment providers — including GCash (operated by G-Xchange, Inc.), PayMaya (operated by PayMaya Philippines, Inc.), or the banking institutions associated with BPI, BDO, and Metrobank accounts. Players are encouraged to review the privacy policies of their respective payment providers independently.

GoTech Entertainment reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. Material amendments — those that meaningfully affect how your personal data is processed — will be communicated to registered jiliff players via the email address on file at least fourteen (14) days before the amendment takes effect.

The most current version of this Privacy Policy is always available at jiliff.org/privacy-policy. The effective date at the top of this document indicates when the current version came into force. Continued use of jiliff following publication of an amended Privacy Policy constitutes your acknowledgment of the updated terms.

For all data privacy inquiries, rights requests, consent withdrawals, or complaints, please contact GoTech Entertainment's designated Data Protection Officer through the following channel:

All privacy-related inquiries and rights requests will be acknowledged within forty-eight (48) hours of receipt. If you are not satisfied with jiliff's response to a privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines.