jiji99 Privacy Policy

jiji99 ("the Company," "we," "us," or "our") is committed to protecting the personal information of every individual who uses the jiji99 online gaming platform ("the Platform"), accessible at https://jiji99.org. This Privacy Policy ("Policy") sets out how jiji99 collects, uses, stores, discloses, and protects personal data in connection with the operation of the Platform and the provision of online casino, sports betting, and related gaming services to players in the Philippines.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission ("NPC") of the Philippines. It is also consistent with jiji99's obligations as a platform operating under the regulatory oversight of the Philippine Amusement and Gaming Corporation ("PAGCOR") and with the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).

By registering an account on jiji99, accessing the Platform, or otherwise providing personal information to the Company, you acknowledge that you have read, understood, and freely consent to the collection and processing of your personal data as described in this Policy.

For the purposes of the Data Privacy Act of 2012, jiji99 is the personal information controller in respect of your personal data. The Company determines the purposes and means of processing personal data collected through the Platform.

Where jiji99 engages third-party service providers — such as payment processors, identity verification providers, game content providers, and cloud infrastructure providers — to process personal data on its behalf, such providers act as personal information processors and are bound by data processing agreements that require them to process personal data only on jiji99's documented instructions and to maintain appropriate security standards.

jiji99 collects the following categories of personal data in connection with the Platform. We apply the principle of data minimization: we collect only what is necessary for the specified purpose.

jiji99 does not knowingly collect sensitive personal information as defined under Section 3(l) of the DPA — such as health or medical data, racial or ethnic origin, religious beliefs, or political affiliation — unless specifically required by law or regulatory authority.

jiji99 processes your personal data for the following specific, legitimate purposes:

• Account creation and management: To establish, maintain, and close your player account, and to verify your identity in accordance with PAGCOR's licensing requirements.
• Know Your Customer (KYC) and Anti-Money Laundering (AML) compliance: To fulfill mandatory identity and source-of-funds verification obligations imposed by PAGCOR and the Anti-Money Laundering Council.
• Payment processing: To process deposits and withdrawals through your designated payment methods, including GCash, PayMaya, and Philippine bank accounts.
• Platform operation and game provision: To operate the Platform, deliver game content, calculate and record game outcomes and winnings, and manage sports betting markets.
• Fraud detection and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, bonus abuse, and other security threats.
• Responsible gaming: To operate deposit limits, loss limits, self-exclusion tools, and other responsible gaming features, and to identify players who may be experiencing gambling-related harm.
• Customer support: To respond to your queries, complaints, and support requests through live chat and email.
• Marketing communications: To send you promotional offers, newsletters, and personalized recommendations where you have consented to receive such communications.
• Legal and regulatory compliance: To comply with applicable Philippine law, respond to lawful requests from PAGCOR, the AMLC, law enforcement agencies, or courts.
• Platform improvement: To analyze aggregate and anonymized usage data for the purpose of improving Platform performance, user experience, and product development.

jiji99 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent (Section 12(a) DPA): Where you have given your freely given, specific, informed, and unambiguous consent — for example, when opting in to marketing communications.
• Contractual necessity (Section 12(b) DPA): Where processing is necessary for the performance of the contract between you and jiji99 — including account registration, game play, and payment processing.
• Legal obligation (Section 12(c) DPA): Where processing is required to comply with a legal obligation applicable to jiji99 — including KYC, AML, and PAGCOR reporting requirements.
• Legitimate interests (Section 12(f) DPA): Where processing is necessary for the legitimate interests pursued by jiji99 — including fraud prevention, platform security, and service improvement — provided such interests are not overridden by your fundamental rights and freedoms.

Where jiji99 relies on consent as the legal basis for processing, you retain the right to withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

jiji99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), the National Privacy Commission (NPC), Philippine law enforcement agencies, and courts of competent jurisdiction, where required by applicable law or a valid legal order.
• Payment processors: GCash (G-Xchange, Inc.), PayMaya (Maya Bank, Inc.), BPI, BDO, Metrobank, Visa, and Mastercard, to the extent necessary to process your deposits and withdrawal requests.
• Identity verification providers: Third-party KYC and biometric verification service providers engaged to assist with identity document verification and fraud prevention.
• Game content providers: Licensed game studios and live dealer operators whose games appear on the Platform, for the purpose of game delivery, random number generation certification, and dispute resolution.
• Technology and infrastructure providers: Cloud hosting, content delivery network, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Professional advisers: Lawyers, accountants, auditors, and insurers engaged by jiji99 in connection with the operation of the Platform, subject to professional confidentiality obligations.

Some of jiji99's technology and game content providers are located outside the Philippines. Where personal data is transferred to service providers in other countries, jiji99 implements appropriate safeguards to ensure that such transfers comply with the DPA, including:

• Entering into data processing agreements that incorporate standard contractual clauses approved by the National Privacy Commission;
• Transferring data only to service providers located in countries with an adequate level of data protection as recognized by the NPC; or
• Obtaining your explicit consent for specific transfers where other safeguards are not available.

jiji99's primary data centers are located within the Philippines or in jurisdictions that maintain data protection standards consistent with the DPA. All personal data related to Filipino players is subject to the protections of Philippine law regardless of where it is physically stored.

jiji99 retains personal data for as long as is necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with any identifiable individual.

jiji99 implements technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, disclosure, or alteration. Key security measures include:

• Encryption in transit: All communications between your device and jiji99's servers are protected by TLS 1.2 or higher (256-bit SSL encryption).
• Encryption at rest: Sensitive personal data stored in jiji99's databases is encrypted using AES-256 encryption.
• Password security: Passwords are stored as salted cryptographic hashes; plaintext passwords are never stored or transmitted.
• Access controls: Strict role-based access controls limit internal access to personal data to authorized personnel on a need-to-know basis.
• Two-factor authentication: Available to all Players for account login; mandatory for administrative access by jiji99 employees.
• Penetration testing: Regular third-party security assessments and penetration tests are conducted to identify and remediate vulnerabilities.
• Audit logging: All access to personal data by jiji99 personnel and systems is logged and subject to periodic review.

jiji99 uses cookies — small text files placed on your device — and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly — including session authentication, security tokens, and load balancing. These cannot be disabled without preventing the Platform from working.
• Functional Cookies: Remember your preferences and settings — such as language selection, game favorites, and interface customizations — to provide a more personalized experience.
• Analytics Cookies: Collect anonymized data about how Players interact with the Platform — including pages visited, time on site, and game categories browsed — to help jiji99 improve Platform performance and content.
• Security Cookies: Used for fraud detection and session integrity monitoring, including identifying unusual login patterns or suspicious device behavior.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impair Platform functionality. Strictly necessary and security cookies cannot be disabled without affecting your ability to use the Platform.

The jiji99 Platform is strictly for adults aged 21 years and older. jiji99 does not knowingly collect personal data from individuals under the age of 21. Our registration process incorporates mandatory date-of-birth verification, and KYC document checks are used to confirm age eligibility before withdrawal rights are activated.

If jiji99 discovers or is notified that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended, any associated balance will be forfeited in accordance with our Terms and Conditions, and all personal data relating to that individual will be deleted from our systems within thirty (30) days to the extent permitted by applicable legal hold obligations.

To exercise any of the data subject rights described in Section 12 of the DPA — including your rights to access, correction, erasure, objection, data portability, or blocking — please submit a written request to jiji99's Data Protection Officer using the contact details in Section 15 below.

Your request should clearly identify:

• The specific right you wish to exercise;
• Your registered username or email address on jiji99;
• Sufficient information to verify your identity (to prevent unauthorized access requests); and
• Where applicable, the specific data or processing activities to which your request relates.

jiji99 will respond to verified requests within thirty (30) calendar days of receipt. Where a request is complex or involves a large volume of data, this period may be extended by a further sixty (60) days, in which case jiji99 will notify you of the extension and the reasons for it within the initial thirty-day period.

If you are dissatisfied with jiji99's response, or if you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission at its official offices or through its published online complaint channels.

In the event of a personal data breach that is likely to result in a real risk of serious harm to affected individuals, jiji99 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under the DPA and NPC Circular No. 16-03.

Where a breach is likely to adversely affect your rights and freedoms, jiji99 will also notify you directly within a reasonable period, providing details of the nature of the breach, the personal data categories involved, the likely consequences, and the measures taken or proposed to address the breach and mitigate its effects.

jiji99 maintains a documented data breach response procedure and conducts regular incident response drills to ensure readiness to respond to a breach in a timely and effective manner.

jiji99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this Policy and, where appropriate, notify registered Players by email.

Your continued use of the Platform following the publication of any revised Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any changes, you should cease using the Platform and request account closure.

jiji99 has appointed a Data Protection Officer ("DPO") as required by the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or jiji99's personal data processing activities, please contact the DPO:

• Email: [email protected] (mark subject line: "Data Privacy Request – DPO")
• Live Chat: Available 24/7 via the jiji99 Platform — request to be connected to the Data Privacy team
• Response Time: We aim to acknowledge all data privacy correspondence within two (2) business days and provide a substantive response within thirty (30) calendar days.