Privacy Policy — 30jilli

1. Personal Data We Collect

1.1 Registration and Identity Data

When you create a 30jilli account, we collect the information you provide during registration, including your full legal name, date of birth, nationality, residential address, email address, and mobile phone number. This information is necessary to create and maintain your account and to verify your identity as required by PAGCOR regulations and the Anti-Money Laundering Act of the Philippines (RA 9160, as amended).

1.2 KYC Verification Data

As part of our mandatory Know Your Customer (KYC) obligations, 30jilli collects copies of government-issued identification documents (such as UMID, Passport, Driver's License, Voter's ID, SSS ID, or PhilHealth ID), proof of address documentation, and, in some cases, source of funds declarations. This data is processed solely for identity verification and regulatory compliance purposes.

1.3 Financial and Transaction Data

30jilli processes financial data related to your deposits, withdrawals, and in-platform transactions. This includes payment method identifiers (GCash numbers, bank account details, e-wallet references), transaction amounts, timestamps, and transaction reference numbers. We do not store full payment card numbers or passwords for any external payment service.

1.4 Gaming Activity Data

We collect records of your gaming activity on the 30jilli Platform, including game sessions, bet amounts, wager outcomes, bonus usage, and time spent on the Platform. This data is used for account management, regulatory reporting, responsible gaming monitoring, and improving our services.

1.5 Communications Data

If you contact 30jilli's customer support team via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any documents shared, for quality assurance, training, and dispute resolution purposes.

1.6 Technical and Device Data

When you access the 30jilli Platform, we automatically collect certain technical data, including your IP address, device type and model, operating system, browser type and version, session duration, pages viewed, and referring URL. This data is used for security monitoring, fraud prevention, and Platform optimization.

2. How We Collect Personal Data

30jilli collects your personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, claim bonuses, contact customer support, or otherwise interact with the 30jilli Platform;
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you access the Platform (see Section 9 for details);
• From third parties: From identity verification service providers, payment processors, and fraud prevention systems where necessary to verify your identity, process transactions, or detect fraud.

3. How We Use Your Personal Data

30jilli uses your personal data for the following specific purposes:

• Account Management: To create, maintain, and secure your 30jilli account; to authenticate you when you log in; to process your gaming activity; and to manage your account settings and preferences;
• Regulatory Compliance: To fulfill our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act, the Data Privacy Act, and any other applicable Philippine law or regulatory directive;
• Payment Processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, UnionBank, and other supported payment methods; to verify payment method ownership; and to investigate disputed transactions;
• Fraud Prevention and Security: To detect and prevent fraudulent activity, money laundering, account sharing, bonus abuse, and other prohibited conduct on the Platform;
• Responsible Gaming: To monitor gaming patterns for indicators of problem gambling; to enforce self-imposed limits and exclusions; and to provide support resources where appropriate;
• Customer Support: To respond to your inquiries, resolve complaints, and provide technical assistance;
• Communications: To send you transactional notifications (deposit confirmations, withdrawal updates, account security alerts), where you have consented, marketing communications about 30jilli promotions and offers;
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the user experience of the 30jilli Platform.

30jilli does not use your personal data for automated decision-making that produces significant legal effects without human review, except as required by our fraud prevention systems, which are subject to human oversight.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), 30jilli processes your personal data on the following legal bases:

• Performance of a Contract: Processing necessary to provide you with access to the 30jilli Platform, process your transactions, and fulfill our obligations under our Terms & Conditions;
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLC reporting requirements, NPC registration obligations, and other applicable Philippine law;
• Legitimate Interests: Processing for fraud prevention, security monitoring, and Platform optimization, where these interests are not overridden by your fundamental rights;
• Consent: Where we send marketing communications, we rely on your explicit consent, which you may withdraw at any time through your account notification preferences or by contacting our Data Protection Officer.

5. Data Sharing & Third-Party Processors

30jilli shares your personal data only in the following circumstances:

• Game Technology Providers: Game studios and platform providers whose games are offered on 30jilli receive the minimum data necessary to deliver the game session (typically a pseudonymous player ID and session token);
• Payment Processors: GCash (Mynt / G-Xchange, Inc.), PayMaya (Maya Bank), BancNet, Instapay operators, and other licensed payment service providers receive payment transaction data necessary to process your deposits and withdrawals;
• Identity Verification Services: Third-party KYC and document verification providers process your identification documents to confirm your identity and age under PAGCOR requirements;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and courts as required by applicable Philippine law;
• Cloud Infrastructure Providers: 30jilli uses cloud hosting services to operate the Platform. These providers process data on our behalf and are bound by data processing agreements requiring them to maintain appropriate security standards.

30jilli does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes.

6. Data Retention Periods

30jilli retains your personal data for the following periods, after which it is securely deleted or irreversibly anonymized:

• Account and Identity Data: Retained for the duration of your active account plus five (5) years following account closure, as required by Philippine AMLC regulations;
• Transaction Records: Retained for five (5) years from the date of each transaction in compliance with RA 9160 (Anti-Money Laundering Act) requirements;
• KYC Documents: Retained for five (5) years after account closure or the completion of any pending regulatory investigation, whichever is later;
• Customer Support Records: Retained for three (3) years from the date of the interaction;
• Technical and Device Data: Retained for twelve (12) months from collection, unless specific data must be retained longer for security investigation purposes;
• Marketing Consent Records: Retained for the duration of your account plus one (1) year after consent withdrawal or account closure.

7. Security Measures

30jilli implements the following technical and organizational measures to protect your personal data:

• TLS 1.2 or higher encryption for all data transmitted between your device and 30jilli's servers;
• AES-256 encryption for personal data stored at rest in 30jilli's databases;
• Role-based access controls ensuring that 30jilli employees can only access personal data necessary for their specific job functions;
• Multi-factor authentication requirements for all 30jilli staff with access to personal data systems;
• Regular third-party security audits and penetration testing;
• Incident response procedures, including notification to the National Privacy Commission within 72 hours of discovering a personal data breach, as required by NPC Circular 16-03.

While 30jilli takes all reasonable steps to protect your personal data, no electronic transmission or storage system is completely secure. You are responsible for maintaining the security of your 30jilli account credentials and for notifying us immediately of any suspected unauthorized access.

8. Your Rights as a Data Subject

Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data processed by 30jilli:

To exercise any of these rights, please contact 30jilli's Data Protection Officer at the details provided in Section 12. 30jilli will respond to all data subject requests within fifteen (15) business days. If you believe your rights have been violated, you may lodge a complaint with the National Privacy Commission at privacy.gov.ph (do not click — reference only).

9. Cookies & Tracking Technologies

30jilli uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device that help us recognize you, maintain your session, and understand how you use the Platform.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the Platform to function correctly — including session management, authentication, and security tokens. These cannot be disabled without breaking core Platform functionality;
• Functional Cookies: Remember your preferences such as language settings, last viewed games, and lobby layout;
• Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform to help us identify and fix issues and improve the user experience;
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content about 30jilli products and offers. These can be disabled via your account cookie preferences.

You can manage cookie preferences through your browser settings or through the 30jilli cookie preference center, accessible from the Platform footer. Note that disabling certain cookies may affect the functionality of the Platform.

10. Processing of Minors' Data

30jilli does not knowingly collect or process personal data from individuals under the age of twenty-one (21). The 30jilli Platform is strictly for use by adults aged 21 and above, consistent with Philippine gaming law requirements enforced by PAGCOR.

If 30jilli becomes aware that personal data has been collected from a person under the age of 21, we will immediately close the account, retain only the data required for regulatory reporting, and delete all other data collected from that individual as quickly as legally permitted. If you believe we may have inadvertently collected data from a minor, please contact our Data Protection Officer immediately.

11. Changes to This Privacy Policy

30jilli may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or regulatory guidance. Where changes are material, we will notify registered users by email or by displaying a prominent notice on the Platform at least seven (7) calendar days before the changes take effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the 30jilli Platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated policy. We encourage you to review this page periodically.

12. Contact & Data Protection Officer

30jilli has designated a Data Protection Officer (DPO) in compliance with Section 21 of the Implementing Rules and Regulations of RA 10173. For any privacy-related inquiries, data subject rights requests, or complaints, please contact the 30jilli DPO through the following channels:

• Email: [email protected] — include "Privacy / DPO Request" in your subject line;
• Live Chat: Available 24/7 on the Platform — select "Privacy & Data" as your inquiry category;
• Response Time: 30jilli will acknowledge receipt of your request within three (3) business days and provide a substantive response within fifteen (15) business days.

If you are not satisfied with 30jilli's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Contact details for the NPC are available at their official website (reference: privacy.gov.ph — not a clickable link).