Ji55 Privacy Policy

Ji55 (referred to throughout this Policy as "Ji55," "we," "us," or "our") is committed to the responsible and lawful handling of the personal data of all individuals who access or use the Ji55 Platform at ji55.app. This Privacy Policy ("Policy") describes our data collection and processing practices and explains your rights in respect of your personal information.

This Policy applies to all personal data collected from or about: registered Ji55 players; visitors who browse the Platform without registering; and individuals who contact Ji55 through live chat, email, or other support channels. It applies whether you access the Platform from Metro Manila, Cebu, Davao, or anywhere else in the Philippines.

By registering a Ji55 account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should not use the Platform and should request account closure.

For the purposes of the Data Privacy Act of the Philippines, Ji55 is the personal information controller ("PIC") of all personal data collected through the Platform. This means Ji55 determines the purposes and means by which your personal data is processed.

Ji55 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data protection obligations. You may contact the DPO regarding any data privacy concern by using the contact channels set out in Section 14 of this Policy. The DPO's contact details are filed with the National Privacy Commission in accordance with NPC Circular No. 17-01.

Ji55 collects personal data through several channels: information you provide directly during registration, KYC, or support interactions; data generated automatically through your use of the Platform; and, in limited cases, data obtained from third-party payment processors and identity verification services.

3.1 Data You Provide to Us

3.2 Data Generated Automatically

3.3 Data from Third Parties

Ji55 may receive limited personal data from licensed identity verification service providers used during the KYC process, and from payment processors (GCash, Maya, BancNet) confirming the status of transactions. Ji55 processes such third-party data under the same security and retention standards that apply to directly collected data.

Ji55 processes your personal data for the following specific purposes. Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

• Account creation and management: Processing registration data to create and maintain your Ji55 account, authenticate your identity at login, and manage account settings.
• Age verification and KYC compliance: Verifying that you are at least 21 years of age and confirming your identity, as required by PAGCOR regulations and Philippine law.
• Payment processing: Processing deposits and withdrawals via GCash, Maya, and bank channels; reconciling transactions; investigating payment discrepancies.
• Service delivery: Providing access to games, live dealer tables, bingo rooms, and sports betting; displaying your balance and transaction history; applying bonuses to your account.
• Responsible gaming: Monitoring gameplay patterns to identify indicators of problem gambling; administering deposit limits, loss limits, and self-exclusion as requested or required; complying with PAGCOR responsible gaming obligations.
• Fraud prevention and security: Detecting unauthorized access, multi-accounting, bonus abuse, money laundering, and other prohibited conduct; investigating suspicious activity; protecting the integrity of the Platform.
• Legal and regulatory compliance: Fulfilling obligations under the Philippine AML Act (RA 9160), PAGCOR licensing conditions, NPC data protection requirements, and court orders or law enforcement requests.
• Customer support: Responding to inquiries, complaints, and dispute submissions; maintaining records of support interactions.
• Marketing communications (with consent): Sending promotional offers, bonus notifications, game release announcements, and event updates via SMS or email, where you have opted in to receive such communications. You may withdraw this consent at any time.
• Platform improvement: Analyzing anonymized or aggregated usage data to identify technical issues, improve navigation, optimize game performance, and develop new features.

Under the Data Privacy Act of the Philippines, Ji55 processes personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil the agreement between you and Ji55 when you register an account and use the Platform — including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, AML obligations under RA 9160, and NPC registration and reporting requirements.
• Legitimate interests: Processing for fraud detection, platform security, multi-account detection, and analytics, where Ji55's legitimate interest in operating a safe and compliant platform is not overridden by your data protection rights.
• Consent: Processing for marketing communications and optional personalization features, where your prior, freely given, specific, informed, and unambiguous consent has been obtained. You may withdraw consent at any time by contacting Ji55 support or updating your account preferences.

Ji55 does not sell, rent, or trade your personal data to any third party. We share personal data only in the limited circumstances described below.

6.1 Authorized Third-Party Service Providers

Ji55 engages licensed third-party processors to assist with delivering the Platform. These processors include: game software providers (including JILI Games, Pragmatic Play, PG Soft, and Evolution Gaming) who receive anonymized or pseudonymized player identifiers to deliver game sessions; payment processors (including the operators of GCash, Maya, BancNet, and participating Philippine banks) who receive the minimum transaction data required to execute deposits and withdrawals; and identity verification service providers used during KYC. All third-party processors are subject to written data processing agreements requiring them to process personal data only on Ji55's instructions and to maintain security standards consistent with applicable Philippine law.

6.2 Regulatory and Law Enforcement Disclosure

Ji55 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine government authorities where required by applicable law, regulatory obligation, court order, or lawful demand. Ji55 will disclose only the minimum data necessary to comply with the applicable requirement and will, where legally permissible, notify the affected player of the disclosure.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of Ji55's assets, personal data held by Ji55 may be transferred to the acquiring entity, subject to the acquiring entity assuming Ji55's obligations under this Privacy Policy and applicable Philippine data protection law. Affected players will be notified in advance of any such transfer and given the opportunity to request account closure.

Ji55 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you access the Platform.

7.1 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security tokens that prevent cross-site request forgery. These cannot be disabled without breaking Platform functionality.
• Functional cookies: Store your preferences such as language settings, game display options, and whether you have acknowledged the responsible gaming notice. Disabling these may affect your user experience.
• Analytics cookies: Collect anonymized data about how you navigate the Platform — which pages you visit, how long you spend on each, and which features you use. This data is used in aggregate to improve the Platform. Analytics cookies do not identify you personally.
• Security and fraud detection: Device fingerprinting identifiers used by Ji55's fraud detection systems to identify unusual login patterns and multi-account activity. These are a security necessity and cannot be opted out of.

7.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Note that blocking strictly necessary cookies will prevent you from logging in to the Platform. Ji55 does not use third-party advertising cookies or cross-site behavioral tracking for advertising purposes.

Ji55 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the minimum retention periods imposed by applicable Philippine law and PAGCOR regulations.

• Active account data: Retained for the duration of the account and for five (5) years following account closure, to comply with PAGCOR recordkeeping requirements.
• KYC documents (ID copies, selfies, proof of address): Retained for a minimum of five (5) years following account closure, and up to ten (10) years where required by AMLC or PAGCOR regulations applicable to the specific account.
• Financial and transaction records: Retained for ten (10) years following each transaction, consistent with Philippine AML Act obligations (RA 9160 as amended by RA 10365).
• Customer support records: Retained for five (5) years following the resolution of the relevant support matter.
• Marketing consent records: Retained until consent is withdrawn and for twelve (12) months thereafter for compliance auditing purposes.
• Analytics data: Retained in anonymized or aggregated form indefinitely for platform improvement purposes. Raw usage logs are deleted after twenty-four (24) months.

Under the Data Privacy Act of the Philippines (RA 10173), you have the following rights in relation to your personal data held by Ji55. You may exercise any of these rights by contacting Ji55's Data Protection Officer using the details in Section 14.

To exercise any of the above rights, please submit a written request to Ji55's Data Protection Officer using the contact details in Section 14. Ji55 will verify your identity before processing any data subject request to protect against unauthorized access to third-party data. Ji55 will respond to all valid requests within fifteen (15) business days. Complex or high-volume requests may require an extension of up to an additional fifteen (15) business days, with prior notice to the requestor.

Ji55 implements technical and organizational security measures designed to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures are reviewed and updated regularly in light of evolving security standards and threats.

10.1 Technical Measures

• All data transmitted between your device and Ji55 servers is encrypted using TLS 1.3 with 256-bit encryption.
• Personal data and KYC documents stored at rest are encrypted using AES-256.
• Database access requires multi-factor authentication and is restricted to authorized Ji55 engineering and compliance personnel.
• Login activity and data access events are logged in an immutable audit trail reviewed by the security team on a rolling basis.
• Payment card data is not stored by Ji55 — payment processing is handled by PCI-DSS compliant third-party processors.

10.2 Organizational Measures

• Access to personal data is governed by a strict role-based access control policy — employees only access the data they need to perform their specific job function.
• All Ji55 personnel with access to personal data undergo mandatory data privacy and security training at onboarding and annually thereafter.
• Ji55 conducts regular internal audits of data processing activities and security controls.
• Third-party processors are subject to security assessments before engagement and periodic reviews thereafter.

10.3 Data Breach Notification

In the event of a personal data breach that poses a real risk of harm to affected individuals, Ji55 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03. Ji55 will also notify affected players as required by NPC guidelines without undue delay. Notifications will describe the nature of the breach, the data involved, the likely consequences, and the measures Ji55 is taking in response.

If you are a parent or guardian and believe that a person under 21 has submitted personal data to Ji55 without your authorization, please contact Ji55's Data Protection Officer immediately using the details in Section 14. Ji55 will investigate and take appropriate action within two (2) business days of receiving your notification.

Some of Ji55's third-party game providers and technical service providers are based outside the Philippines and may process personal data in servers located in other jurisdictions, including Singapore, Malta, Gibraltar, and other territories where licensed online gaming operators commonly base their infrastructure.

Where personal data is transferred outside the Philippines, Ji55 ensures that such transfers comply with the requirements of the Data Privacy Act, including by entering into appropriate data transfer agreements with the relevant third parties and satisfying itself that recipient jurisdictions or entities provide an adequate level of data protection. Ji55 maintains a register of all international data transfers, which is subject to review by the Data Protection Officer.

Ji55 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or Platform features. The date of the most recent update is displayed at the top of this Policy.

Where changes are material — meaning they substantively affect your rights or how your personal data is processed — Ji55 will notify registered players via email or through a prominent notice on the Platform at least seven (7) days before the changes take effect. Non-material changes (such as typographical corrections or rewording that does not alter the substance of the Policy) may be published without advance notice.

For questions about this Privacy Policy, to exercise your data subject rights, or to report a data privacy concern, please contact Ji55 through the following channels. All data privacy requests are handled by or under the supervision of Ji55's Data Protection Officer.

This Privacy Policy was last reviewed and updated on 1 January 2026 and is currently in force. The version published at ji55.app/privacy-policy at any given time is the operative version. Previous versions are available from Ji55's Data Protection Officer on request.