Privacy Policy for jeli Casino

01 Introduction

jeli Casino ("jeli", "we", "us", or "the Company") operates the online gaming platform accessible at jeli.vu. We are committed to protecting the personal data of every Filipino player who interacts with our platform, and we recognise that transparent data handling is a cornerstone of the trust our players place in us.

This Privacy Policy describes in detail how jeli collects, uses, stores, shares, and protects your personal data in connection with your use of the jeli Casino platform, including the website, mobile-optimised interface, live chat, and any related communications. It also explains the rights you hold as a data subject under Philippine law and how to exercise them.

This policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC). It must be read together with jeli's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

02 Data Controller

For the purposes of the Data Privacy Act of 2012, jeli Casino is the Personal Information Controller (PIC) with respect to the personal data of its registered players and site visitors. As PIC, jeli determines the purposes and means of processing personal data collected through the jeli.vu platform.

jeli has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act and serving as the primary point of contact for all privacy-related inquiries and complaints. Contact details for the DPO are provided in Section 16 of this Policy.

03 Personal Data We Collect

jeli collects the following categories of personal data, depending on how you interact with the platform:

jeli does not collect sensitive personal information such as race, religion, political affiliation, or health data except where expressly required by PAGCOR's responsible gaming obligations (for example, information provided in connection with a self-exclusion or problem gambling referral).

04 How We Collect Your Data

jeli collects personal data through the following means:

• Account Registration: When you create a jeli account, you directly provide identity, contact, and login credential data.
• KYC Verification: When you submit identity documents to complete jeli's Know Your Customer process before your first withdrawal.
• Deposits and Withdrawals: When you initiate financial transactions through GCash, Maya, BPI, BDO, Metrobank, or other supported payment channels.
• Platform Usage: Automatically, as you navigate jeli.vu — including pages visited, games played, wagers placed, and session timing — through server logs, cookies, and analytics tools.
• Customer Support Interactions: When you contact jeli via live chat, email, or any other support channel.
• Promotions and Surveys: When you participate in jeli promotions, competitions, or voluntary player surveys.
• Third-Party Verification Services: jeli may receive identity verification results from accredited KYC service providers acting as Personal Information Processors (PIPs) under data processing agreements.

05 Purpose & Legal Basis for Processing

jeli processes your personal data only where a lawful basis for processing exists under the Data Privacy Act of 2012. The primary purposes and their corresponding legal bases are as follows:

• Account Management & Service Delivery: Processing is necessary for the performance of your contract with jeli (your account agreement). This covers registration, login authentication, gameplay, and account maintenance.
• Identity Verification (KYC): Processing is required by law — specifically by PAGCOR's licensing conditions and Republic Act No. 9160 (Anti-Money Laundering Act, as amended). jeli cannot process withdrawals without completing KYC verification.
• Financial Transaction Processing: Necessary for the performance of your contract and for compliance with PAGCOR's financial reporting obligations and the AMLC's regulatory requirements.
• Fraud Prevention & Platform Security: Processing is necessary for jeli's legitimate interests in preventing fraud, collusion, and unauthorised account access, provided these interests do not override your fundamental rights.
• Responsible Gaming Compliance: Processing is required by PAGCOR's responsible gaming framework, including the maintenance of self-exclusion records and the monitoring of problem gambling indicators.
• Marketing Communications: Where you have given explicit consent to receive promotional communications from jeli, we process your contact data for this purpose. You may withdraw consent at any time (see Section 13).
• Legal and Regulatory Compliance: Processing is necessary to comply with jeli's legal obligations under Philippine law, including tax reporting, regulatory filings with PAGCOR, and mandatory disclosures to the AMLC.

06 Sharing Your Personal Data

jeli does not sell, rent, or trade personal data. We share your data only in the following limited circumstances and only to the extent necessary for each purpose:

• PAGCOR: As jeli's licensing authority, PAGCOR may require access to player account data, gaming activity records, and KYC documentation as part of its regulatory oversight. jeli is legally obligated to comply with such requests.
• Anti-Money Laundering Council (AMLC): jeli reports covered and suspicious transactions to the AMLC as required under Republic Act No. 9160 and its amendments. This disclosure is a statutory obligation, not a discretionary sharing.
• KYC and Identity Verification Providers: Accredited third-party KYC service providers process identity documents on jeli's behalf under binding data processing agreements that require them to maintain confidentiality and security standards consistent with the Data Privacy Act.
• Payment Processors: Financial transaction data is shared with GCash, Maya, and partner banks as necessary to process deposits and withdrawals. These entities are regulated financial institutions under Bangko Sentral ng Pilipinas (BSP) supervision.
• IT and Platform Infrastructure Providers: Cloud hosting and IT security service providers may have access to data as part of their infrastructure services. All such providers are engaged under data processing agreements.
• Law Enforcement and Courts: jeli will disclose personal data to Philippine law enforcement agencies, courts, or other government bodies where required by a valid legal process, court order, or statutory obligation.

In all cases where personal data is shared with a third party acting as a Personal Information Processor, jeli ensures that appropriate data processing agreements are in place requiring the processor to protect the data in accordance with the DPA and its IRR.

07 Data Retention

jeli retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR's record-keeping obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, as required by PAGCOR's licensing conditions and the AMLA's record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act.
• Gaming Activity Data: Retained for five (5) years from the date of each gaming session, for audit and regulatory compliance purposes.
• Customer Support Records: Retained for three (3) years from the date of each interaction, unless a longer period is required for ongoing dispute resolution or regulatory investigation.
• Marketing Consent Records: Retained for as long as you hold an active account and for two (2) years after account closure, to evidence the basis on which communications were sent.
• Technical Logs: Retained for twelve (12) months from collection, after which they are anonymised or deleted.

When the applicable retention period expires and no legal hold is in effect, jeli will securely delete or anonymise the relevant personal data so that it can no longer be attributed to you as an identifiable individual.

08 Data Security

jeli implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Encryption: All data in transit between your browser or device and jeli's servers is protected using TLS 1.2 or higher (256-bit SSL). jeli enforces HTTPS across all platform touchpoints.
• Data Encryption at Rest: Sensitive data fields — including identity document data and financial account details — are encrypted at rest using AES-256 in jeli's database systems.
• Password Security: Player passwords are never stored in plain text. jeli uses industry-standard one-way hashing with salting (bcrypt) for all password storage.
• Access Controls: Access to personal data by jeli staff is governed by role-based access controls on a strict need-to-know basis. All staff with data access undergo privacy and security training.
• Two-Factor Authentication (2FA): jeli offers optional 2FA for all player accounts and requires 2FA for all internal staff systems handling personal data.
• Vulnerability Management: jeli conducts regular vulnerability assessments and penetration testing of its platform infrastructure. Critical security patches are applied within 48 hours of release.
• Incident Response Plan: jeli maintains a documented data breach incident response plan consistent with the NPC's breach notification requirements.

09 Cookies & Tracking Technologies

jeli uses cookies and similar tracking technologies on jeli.vu to provide a functional, personalised, and secure gaming experience. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game layout choices, and last-used payment method to improve your experience on jeli.
• Analytics Cookies: Used to understand how players use the platform — pages visited, session duration, and navigation paths — so jeli can improve its services. Analytics data is aggregated and does not identify individual players in reports.
• Security Cookies: Detect and prevent fraudulent activity, including account takeover attempts and bot traffic. These are active at all times when you are logged in.

jeli does not use third-party advertising or retargeting cookies that track your activity across other websites. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your jeli account.

10 Minors & Age Policy

jeli Casino is strictly for adults. The minimum age for access to and use of the jeli platform is twenty-one (21) years, consistent with the minimum legal age for casino-style gambling in the Philippines as prescribed under PAGCOR's regulatory framework.

jeli does not knowingly collect personal data from any individual under the age of 21. Age verification is a mandatory step during the registration and KYC process. If jeli discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, jeli will:

• Immediately suspend the account in question.
• Delete all personal data associated with the underage account from active systems.
• Return any deposited funds to the originating payment source after deducting the value of wagers already placed.
• Report the incident to PAGCOR as required by jeli's licensing obligations.

11 Your Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jeli Casino:

To exercise any of these rights, please contact jeli's Data Protection Officer using the details in Section 16. jeli will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) calendar days, or notify you if an extension is required.

12 Cross-Border Data Transfers

jeli's primary data processing and storage infrastructure is located within or under agreements governed by Philippine law. Where personal data is processed or stored outside the Philippines — for example, by cloud infrastructure providers or international game content providers — jeli ensures that appropriate safeguards are in place in compliance with Section 21 of the Data Privacy Act of 2012.

These safeguards include requiring recipient entities to provide a level of data protection that is at least equivalent to the standards of the Data Privacy Act, enforced through binding contractual clauses. jeli does not transfer personal data to jurisdictions that are not recognised as providing adequate data protection without such contractual safeguards being in place.

13 Marketing Communications

With your explicit consent at the time of registration or subsequently through your Account Settings, jeli may send you promotional communications about bonuses, new game launches, special events, and other jeli offers via email or SMS. These communications are entirely optional and are separate from essential account notifications such as deposit confirmations, withdrawal status updates, and security alerts, which are sent regardless of marketing preferences.

You may opt out of marketing communications at any time by:

• Updating your communication preferences in your jeli Account Settings under "Notifications."
• Clicking the unsubscribe link included in every jeli promotional email.
• Contacting jeli's customer support via live chat and requesting to be removed from marketing lists.

Opt-out requests are processed within five (5) business days. Please note that opting out of marketing communications does not affect your receipt of essential transactional and security notifications related to your jeli account.

14 Third-Party Links

The jeli Casino platform does not include links to third-party websites. However, where game content is supplied by third-party software providers (such as live dealer studios or slot game developers), those providers may operate their own data collection processes within the game interface. jeli ensures that all game content providers on the platform are bound by data processing agreements that restrict their collection and use of player data to what is strictly necessary for game delivery and fairness auditing.

jeli is not responsible for the privacy practices of external entities. If you have concerns about how a specific game content provider handles data, please contact jeli's DPO and we will investigate on your behalf.

15 Amendments to This Policy

jeli Casino reserves the right to amend this Privacy Policy at any time to reflect changes in Philippine law, NPC guidance, PAGCOR regulatory requirements, or jeli's data processing practices. When material changes are made, jeli will notify active players by email to the registered account address and display a prominent notice on jeli.vu for a period of not less than seven (7) calendar days before the changes take effect.

The version number and effective date at the top of this Policy are updated each time a revision is made. Your continued use of the jeli platform after the effective date of any revised Policy constitutes your acknowledgment of the changes. If you do not agree with any amendment, you should cease using the jeli platform and may request account closure by contacting our customer support team.

16 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by jeli Casino, please contact our Data Protection Officer:

If you believe that jeli has violated your rights as a data subject under the Data Privacy Act of 2012, and jeli has failed to adequately resolve your complaint, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available through the NPC's official government channels.

jeli is committed to addressing all privacy concerns promptly, fairly, and in full compliance with Philippine law. We value your trust and will always strive to handle your personal data with the highest standards of care and integrity.