jii7 Casino Privacy Policy

This Privacy Policy ("Policy") is issued by jii7 ("jii7," "we," "us," or "our"), the operator of the online casino and gaming platform accessible at jii7.org (the "Platform"). jii7 acts as the personal data controller for all personal information processed in connection with your use of the Platform.

This Policy applies to all registered players, applicants, visitors, and any other individuals ("Data Subjects," "you") whose personal data is collected and processed by jii7 in the course of operating the Platform. It governs all personal data processing activities carried out by jii7, including registration, KYC, payment processing, gameplay, and customer support.

This Policy is issued in compliance with:

• Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations;
• National Privacy Commission (NPC) advisories and circulars applicable to Philippine online service operators;
• Philippine Amusement and Gaming Corporation (PAGCOR) data governance requirements for licensed online gaming operators;
• Republic Act No. 9160, as amended — the Anti-Money Laundering Act and associated AMLC regulations requiring player data collection and reporting.

jii7 collects the categories of personal data described in the table below. Data is collected only to the extent necessary for the stated purposes and in compliance with the principle of data minimisation under RA 10173.

jii7 collects personal data through the following channels and mechanisms:

• Direct Submission: Data you provide directly during account registration, KYC verification, payment transactions, form submissions, and customer support interactions;
• Automatic Collection: Technical data collected automatically when you access the Platform, including IP address, device identifiers, browser type, and session data via server logs and platform analytics;
• Cookies and Tracking Technologies: Session cookies, functional cookies, and analytics trackers used to maintain your login session, record platform preferences, and generate anonymised usage statistics (see Section 9);
• Third-Party Payment Providers: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, and Metrobank when you make deposits or request withdrawals;
• Identity Verification Services: Data received from third-party KYC verification vendors engaged to validate the authenticity of identity documents submitted during the KYC process;
• PAGCOR Databases: Self-exclusion status data received from the PAGCOR national self-exclusion registry for the purpose of enforcing exclusion obligations.

Under the Philippine Data Privacy Act of 2012, jii7 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and jii7 — specifically, the Terms & Conditions governing your use of the Platform. This includes registration, KYC verification, gameplay, and payment processing;
• Legal Obligation: Processing is required to comply with applicable Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160, as amended), the Cybercrime Prevention Act, and NPC regulations;
• Legitimate Interests: Processing is necessary for jii7's legitimate interests in operating a secure, fraud-free platform, detecting and preventing cheating and abuse, and improving platform performance — provided such interests are not overridden by your fundamental rights;
• Consent: For certain non-essential data processing activities, such as marketing communications and optional analytics, jii7 relies on your specific, freely given, and revocable consent. You may withdraw consent for these activities at any time without affecting the lawfulness of prior processing.

jii7 uses your personal data for the following specific, legitimate purposes:

• Account Administration: Creating and managing your jii7 account, verifying your identity and age (21+), and maintaining accurate account records;
• KYC and AML Compliance: Fulfilling mandatory PAGCOR Know Your Customer and AMLC Anti-Money Laundering obligations, including identity verification, source of funds assessment, and transaction monitoring;
• Payment Processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and maintaining complete transaction records as required by PAGCOR;
• Platform Security: Detecting and preventing fraud, account takeover, multi-accounting, bot usage, and other forms of platform abuse;
• Customer Support: Responding to your enquiries, resolving disputes, and maintaining records of support interactions for quality assurance;
• Responsible Gaming: Monitoring gambling activity for signs of problem gambling, enforcing self-exclusion orders, and providing mandated responsible gaming interventions;
• Legal Compliance: Responding to lawful regulatory requests, court orders, and mandatory disclosures to PAGCOR and the AMLC;
• Platform Improvement: Analysing anonymised and aggregated usage data to improve game performance, interface usability, and overall platform experience.

jii7 does not sell, rent, or commercially transfer your personal data to any third party. Data is disclosed only to the following categories of recipients, and only to the extent strictly necessary for the stated purpose:

• PAGCOR: As jii7's primary regulatory authority, PAGCOR may require access to player data for licensing compliance, audit, and enforcement purposes. These disclosures are mandatory and cannot be refused;
• Anti-Money Laundering Council (AMLC): Transaction data and player identity information may be reported to the AMLC where transactions meet the thresholds or characteristics triggering mandatory reporting obligations under RA 9160, as amended;
• Payment Service Providers: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposit and withdrawal transactions. These providers operate under their own privacy policies and are not permitted to use jii7-transmitted data for other purposes;
• Game Providers: JILI Games, PG Soft, Pragmatic Play, and other platform game providers may receive anonymised session data for technical game performance purposes. Personal identity data is not transmitted to game providers;
• KYC Verification Vendors: Third-party identity verification services engaged by jii7 to validate KYC documents receive document images and identity data solely for verification purposes and under strict data processing agreements;
• Law Enforcement and Courts: jii7 may disclose personal data to Philippine law enforcement authorities and courts where required by a valid court order, subpoena, or equivalent legal instrument;
• Professional Advisers: Legal counsel, auditors, and accountants who are bound by confidentiality obligations and process data only as necessary for their advisory role.

jii7 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention requirements mandated by Philippine law:

• KYC and Identity Records: Retained for a minimum of five (5) years following account closure, in accordance with PAGCOR licensing requirements and AMLC record-keeping obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years following each transaction, as required by AMLC regulations and PAGCOR audit requirements;
• Gaming Activity Records: Retained for a minimum of three (3) years following the recorded activity, for responsible gaming monitoring and dispute resolution purposes;
• Customer Support Records: Retained for a minimum of two (2) years following resolution of the relevant enquiry or dispute;
• Technical Logs (IP, session data): Retained for a maximum of twelve (12) months, after which they are anonymised or deleted, except where required for an ongoing investigation or legal proceeding.

Upon expiry of the applicable retention period, jii7 will securely delete or anonymise personal data in a manner that prevents recovery or reconstruction, in accordance with NPC guidelines on data disposal.

jii7 implements technical, organisational, and administrative security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS 1.2 or higher) for all data transmitted between players' devices and jii7's servers;
• Encryption at rest for sensitive personal information, including KYC document images and financial account details;
• Role-based access controls ensuring that internal staff can access personal data only to the extent required for their specific job function;
• Multi-factor authentication requirements for staff accessing data processing systems;
• Regular penetration testing and security assessments conducted by qualified third-party security professionals;
• An internal data breach response plan aligned with NPC notification requirements under RA 10173;
• Mandatory data protection training for all staff who handle personal data as part of their role.

Notwithstanding these measures, no digital platform can guarantee absolute data security. Players are encouraged to use strong, unique passwords for their jii7 accounts and to access the Platform only from trusted, private devices and networks.

jii7 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential Cookies: Session management cookies that are strictly necessary to maintain your login state and enable core platform functionality. These cannot be disabled without impairing the Platform's functionality;
• Functional Cookies: Cookies that remember your preferences, such as language settings and display preferences. Disabling these will not prevent you from using the Platform but may affect personalisation features;
• Analytics Cookies: First-party analytics cookies used by jii7 to generate anonymised, aggregated statistics about how players use the Platform — for example, which game categories are most frequently accessed. Individual players are not identified from analytics data.

jii7 does not use third-party advertising cookies or behavioural tracking cookies that serve targeted advertisements to players based on their gaming activity.

You may manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Please note that blocking essential cookies will prevent you from accessing your jii7 account and using the Platform.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jii7:

• Right to be Informed: The right to receive clear, plain-language information about how your personal data is collected, used, and processed — as provided by this Policy;
• Right to Access: The right to obtain confirmation of whether jii7 holds personal data about you and, if so, to receive a copy of that data and information about how it is processed;
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. Certain corrections (e.g., name changes) require supporting documentation consistent with KYC requirements;
• Right to Erasure: The right to request deletion of your personal data. Note that this right is subject to jii7's legal retention obligations under PAGCOR and AMLC requirements — data that must be retained by law cannot be deleted on request;
• Right to Object: The right to object to the processing of your personal data for legitimate interest purposes. You may also opt out of marketing communications at any time;
• Right to Data Portability: The right to receive personal data you have provided to jii7 in a structured, machine-readable format;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe jii7 has violated your data privacy rights.

To exercise any of the above rights, contact jii7's Data Protection Officer using the contact details in Section 14. jii7 will respond to data rights requests within fifteen (15) business days of receipt. Identity verification may be required before processing certain requests.

The jii7 Platform is strictly prohibited for use by individuals under twenty-one (21) years of age. jii7 does not knowingly collect personal data from individuals under 21. The minimum age for real-money gambling in the Philippines under PAGCOR regulation is 21 years.

Age verification is a mandatory component of jii7's KYC process. All applicants are required to provide government-issued identification confirming they meet the 21-year age requirement before any account is activated for real-money play.

jii7's primary data processing infrastructure is located in the Philippines. However, certain service providers — including game providers such as JILI Games, PG Soft, and Pragmatic Play — may operate servers in other jurisdictions. Where personal data is transferred outside the Philippines in connection with these services, jii7 ensures that appropriate safeguards are in place, including:

• Contractual clauses in data processing agreements that require overseas processors to apply data protection standards equivalent to those required by RA 10173;
• Transfers only to jurisdictions that maintain adequate data protection frameworks, or in circumstances where the transfer is necessary for the performance of the contract between jii7 and the player;
• Where required, registration of cross-border data transfers with the National Privacy Commission in accordance with NPC registration requirements.

jii7 will not transfer personal data to overseas parties for purposes beyond those stated in this Policy, and will not transfer data to jurisdictions that lack adequate data protection safeguards without implementing appropriate contractual protections.

jii7 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, NPC guidance, or PAGCOR regulatory requirements. The updated Policy will be posted on the Platform with a revised effective date.

Where amendments are material — meaning they significantly affect how we process your personal data or the rights you have under this Policy — jii7 will notify registered players via a notice on the Platform and/or via the mobile number or email address registered on the account, at least seven (7) days prior to the amended Policy taking effect.

Your continued use of the jii7 Platform after the effective date of any amended Policy constitutes your acknowledgment and acceptance of the updated Policy. If you do not accept the revised Policy, you must cease using the Platform and may close your account in accordance with the procedures in the Terms & Conditions.

jii7 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy — including data rights requests under Section 10 — you may contact jii7's DPO as follows:

Data Protection Officer, jii7

Email (plain text — not a clickable link): support at jii7.org

Please mark correspondence addressed to the DPO with the subject line "Data Privacy Request" so it is routed correctly.

jii7 will acknowledge receipt of data privacy correspondence within three (3) business days and provide a substantive response within fifteen (15) business days. Complex requests may require additional time; in such cases jii7 will inform you of the expected response timeline.