jolliph Privacy Policy

1 Who We Are

jolliph is an online casino and sports betting platform operating at jolliph.net, providing gaming and wagering services to players in the Philippines. jolliph acts as the data controller in respect of the personal data collected from players and website visitors through the platform. As data controller, jolliph determines the purposes and means by which your personal data is processed.

jolliph operates in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the regulations and issuances of the National Privacy Commission (NPC). Our data practices are also aligned with PAGCOR's requirements for licensed online gaming operators serving the Philippine market.

2 Personal Data We Collect

2.1 Account Registration Data

When you create a jolliph account, we collect the following personal data:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number
• Valid email address
• Residential address in the Philippines (barangay, city or municipality, province)
• Username and encrypted password
• Preferred currency (Philippine Peso, PHP)

2.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and Philippine anti-money laundering laws, we collect copies of:

• Government-issued Philippine identification documents (e.g., PhilSys ID, Passport, UMID, Driver's License, SSS ID, PhilHealth ID, Voter's ID)
• Proof of address documents where required (e.g., utility bills, bank statements)
• Source of funds documentation in higher-risk cases as required by the AMLC
• Facial image or selfie where identity verification requires liveness detection

2.3 Financial Transaction Data

We collect data relating to your financial activity on the platform, including:

• Deposit and withdrawal amounts, dates, and methods (GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, Cebuana)
• GCash or PayMaya mobile number linked to transactions
• Bank account details (account name, account number, bank name) where bank transfers are used
• Transaction reference numbers and processing timestamps
• Wallet balance history

2.4 Gaming Activity Data

We collect data about how you use the jolliph platform, including:

• Games played, wager amounts, and game outcomes
• Session durations, login timestamps, and session frequency
• Bonus claims, wagering activity, and promotional participation history
• Responsible gaming settings you have configured (deposit limits, self-exclusion status)

2.5 Technical and Device Data

When you access jolliph, we automatically collect certain technical data, including:

• IP address and approximate geographic location (used for geolocation compliance)
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Pages visited, navigation paths, and feature interactions
• Referral source (how you arrived at jolliph.net)

2.6 Communications Data

We retain records of communications between you and jolliph support, including live chat transcripts, email correspondence, and support ticket history, for quality assurance, dispute resolution, and regulatory compliance purposes.

3 How We Collect Your Data

jolliph collects your personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact support, or participate in promotions.
• Automatically — through cookies, web beacons, server logs, and similar technologies when you browse jolliph.net or use the platform.
• From third-party service providers — including payment processors (e.g., GCash, PayMaya, banks), identity verification providers, and fraud detection services, who share data with us as necessary to complete transactions and verify your identity.
• From regulatory bodies — including PAGCOR and the AMLC, where we are required or permitted by law to receive data from these authorities.

4 Purposes of Processing

jolliph processes your personal data for the following purposes:

5 Legal Bases for Processing

Under the Data Privacy Act of 2012, jolliph processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform the contract between you and jolliph (e.g., account management, transaction processing, game provision).
• Legal obligation — processing required to comply with Philippine laws, including the Anti-Money Laundering Act, PAGCOR regulations, and NPC requirements (e.g., KYC, AML reporting, data breach notification).
• Legitimate interests — processing necessary for jolliph's legitimate business interests, where those interests are not overridden by your rights (e.g., fraud detection, platform security, responsible gaming monitoring).
• Consent — where you have freely given specific, informed, and unambiguous consent (e.g., marketing communications, certain cookies). You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

6.1 Service Providers

jolliph shares personal data with third-party service providers who assist in operating the platform, strictly on a need-to-know basis and under binding data processing agreements that require them to maintain the confidentiality and security of your data. Categories of service providers include: payment processors and e-wallet operators (GCash, PayMaya, BPI, BDO, Metrobank), identity verification and KYC providers, game software providers, cloud hosting and infrastructure providers, fraud detection and cybersecurity services, and customer support platform providers.

6.2 Regulatory Authorities

jolliph is required by law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where required by applicable law, court order, or regulatory direction.

6.3 No Sale of Data

jolliph does not sell, rent, trade, or otherwise transfer your personal data to third-party marketers, data brokers, or advertising networks. Your data is not a product at jolliph.

6.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of jolliph's business, your personal data may be transferred to the acquiring entity as part of that transaction. In such an event, jolliph will notify affected players and ensure the acquiring entity is bound by privacy obligations at least as protective as those in this Privacy Policy.

7 Cookies & Tracking Technologies

7.1 Types of Cookies Used

jolliph uses the following categories of cookies and similar tracking technologies on jolliph.net:

• Strictly necessary cookies — essential for the platform to function, including session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and responsible gaming configurations.
• Analytics cookies — collect aggregated, anonymised data about how players use the platform, used to improve our services. These are set only with your consent.
• Marketing cookies — used to deliver relevant promotional content to you within the jolliph platform. These are set only with your consent.

7.2 Managing Cookies

You can manage your cookie preferences through your browser settings at any time. Disabling strictly necessary cookies may impair the functionality of the jolliph platform. Disabling analytics or marketing cookies will not affect your ability to use the platform's core features.

8 Data Retention

jolliph retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. Specific retention periods include:

• Account and KYC data — retained for a minimum of five (5) years after account closure, as required by the Anti-Money Laundering Act.
• Financial transaction records — retained for a minimum of five (5) years, consistent with AMLC and PAGCOR requirements.
• Gaming activity logs — retained for three (3) years after account closure for dispute resolution and regulatory audit purposes.
• Communications data — retained for two (2) years after the resolution of the relevant interaction or dispute.
• Technical and device data — retained for up to twelve (12) months from collection for security and fraud detection purposes.
• Marketing consent records — retained for the duration of consent and for one (1) year after withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Data Security

jolliph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and jolliph servers.
• AES-256 encryption at rest for sensitive stored data including KYC documents, financial records, and account credentials.
• Multi-factor authentication (MFA) available for all player accounts and mandatory for jolliph administrative access.
• Role-based access controls limiting employee access to personal data to those with a demonstrated need for that access.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Real-time fraud monitoring using automated systems that flag unusual account activity for manual review.
• Secure data centres with physical access controls, CCTV monitoring, and environmental protections.

While jolliph takes all reasonable steps to protect your data, no system is completely immune to security threats. In the event of a data breach, jolliph will respond in accordance with its breach response procedures and NPC notification requirements.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jolliph. To exercise any of these rights, contact jolliph's Data Protection Officer at [email protected]. jolliph will respond to all verified data subject requests within thirty (30) days.

11 Children's Privacy and the 21+ Requirement

The jolliph platform is strictly prohibited for persons under twenty-one (21) years of age. jolliph does not knowingly collect personal data from anyone under 21. This threshold is higher than the general definition of "minor" under Philippine law because PAGCOR regulations set the minimum gambling age at 21 for casino-style gaming.

jolliph enforces the 21+ age requirement through mandatory KYC verification for all accounts. If jolliph discovers or is informed that personal data has been collected from a person under 21, the account will be immediately suspended, the data will be securely deleted to the extent permitted by law, and any balance will be handled in accordance with applicable PAGCOR directives.

If you are a parent or guardian and believe your child under 21 has registered a jolliph account, please contact us immediately at [email protected] so we can take prompt action.

12 Changes to This Privacy Policy

jolliph may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, applicable law, or regulatory requirements. When we make material changes, we will notify registered players via email and/or a prominent notice on jolliph.net at least seven (7) days before the changes take effect, unless a shorter notice period is required by law or urgent security reasons.

The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the jolliph platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

13 Contact & Data Protection Officer

jolliph has designated a Data Protection Officer (DPO) in accordance with the Data Privacy Act and NPC requirements. If you have any questions, concerns, or complaints about this Privacy Policy or jolliph's data practices, or if you wish to exercise your data subject rights, please contact the jolliph DPO:

If you are not satisfied with jolliph's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about filing a complaint with the NPC is available through official Philippine government channels.

This Privacy Policy forms part of jolliph's overall Terms & Conditions. Please also review the Terms & Conditions and our Responsible Gaming page for a complete picture of your rights and obligations as a jolliph player.