ji33 Privacy Policy

This Privacy Policy ("Policy") describes how ji33 ("ji33," "we," "us," "our"), the operator of the online gaming platform accessible at ji33.asia, collects, uses, discloses, stores, and protects the personal data of its registered users ("you," "Player," "User") and visitors to the platform.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations ("IRR"), and applicable issuances of the National Privacy Commission ("NPC"). ji33 is committed to upholding the data privacy rights of all persons whose personal data it processes.

By creating a ji33 account, accessing ji33.asia, or otherwise providing personal information to ji33, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the ji33 platform. This Policy should be read alongside the ji33 Terms & Conditions.

For the purposes of the Philippine Data Privacy Act of 2012, the personal information controller responsible for your data is the operator of ji33.asia. All inquiries, requests to exercise data subject rights, and concerns relating to the processing of your personal data should be directed to the ji33 Data Protection Officer ("DPO") using the contact details provided in Section 15 of this Policy.

ji33 has designated a Data Protection Officer in accordance with the requirements of the DPA and NPC regulations. The DPO is responsible for ensuring that ji33's data processing activities comply with applicable privacy laws, handling data subject rights requests, and serving as the primary point of contact between ji33 and the National Privacy Commission.

ji33 collects the following categories of personal data from its users. Collection is limited to what is necessary for the specified purposes and what is required to fulfill ji33's legal and regulatory obligations.

ji33 does not collect special categories of personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data) unless specifically required by PAGCOR-mandated responsible gaming processes, in which case such processing will be disclosed to you at the point of collection.

ji33 collects personal data through the following means:

• Direct collection: Data you provide directly when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to promotions.
• Automated collection: Data collected automatically through your use of the platform, including server logs, game session records, cookies, and similar tracking technologies as described in Section 9.
• Third-party sources: Identity verification data from KYC/AML service providers; fraud detection data from anti-fraud and compliance service partners; payment verification data from GCash, PayMaya, BPI, BDO, and other payment processors; and geolocation data from IP resolution services used to verify compliance with geographic restrictions.
• Regulatory sources: In accordance with PAGCOR requirements, ji33 may receive data from PAGCOR's centralized responsible gaming systems, including self-exclusion register information.

ji33 processes your personal data for the following purposes, each of which has a defined legal basis under the Data Privacy Act of 2012:

• Account creation and management — to register, verify, and maintain your ji33 account. Legal basis: performance of a contract (the Terms & Conditions).
• Identity and age verification (KYC) — to verify that you are at least 21 years of age and to comply with PAGCOR's identity verification requirements. Legal basis: compliance with a legal obligation.
• Payment processing — to process deposits, withdrawals, and bonus transactions via GCash, PayMaya, bank transfer, USDT, and Bitcoin. Legal basis: performance of a contract.
• Fraud prevention and anti-money laundering (AML) — to detect, investigate, and prevent fraudulent activity and money laundering in compliance with the Anti-Money Laundering Act of the Philippines (AMLA) and PAGCOR AML requirements. Legal basis: compliance with a legal obligation; legitimate interests of ji33.
• Responsible gaming compliance — to enforce deposit limits, self-exclusion orders, cooling-off periods, and PAGCOR's responsible gaming framework requirements. Legal basis: compliance with a legal obligation.
• Customer support — to respond to your inquiries, resolve disputes, and improve service quality. Legal basis: performance of a contract; legitimate interests.
• Platform operation and security — to ensure technical integrity, detect security breaches, and protect players and the platform. Legal basis: legitimate interests of ji33; compliance with legal obligations.
• Marketing communications — to send you promotional materials, bonus offers, and platform updates where you have opted in to receive such communications. Legal basis: your consent. You may withdraw consent at any time via your account settings.
• Regulatory reporting — to fulfill mandatory reporting obligations to PAGCOR and other competent Philippine authorities. Legal basis: compliance with a legal obligation.

ji33 does not use your personal data for automated decision-making that produces significant legal effects without human review, except where explicitly required by regulatory compliance processes.

ji33 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. Personal data is disclosed to third parties only in the following circumstances and only to the extent necessary:

• Service providers and processors: ji33 engages third-party service providers to perform specific functions on its behalf, including KYC verification, payment processing, fraud detection, IT infrastructure, customer support technology, and data analytics. These providers process your data only on ji33's instruction and are bound by data processing agreements that require them to maintain appropriate security and confidentiality standards.
• Payment processors: GCash (Mynt/GXI), PayMaya (PayMongo/Voyager), BPI, BDO, Metrobank, and blockchain network operators receive financial transaction data necessary to process your deposits and withdrawals. Each processor operates under its own privacy policy.
• Game providers: ji33's game content providers (including Playtech and JILI) may receive anonymized or pseudonymized session data necessary for the operation of their games and the resolution of game-related disputes.
• Regulatory and law enforcement authorities: ji33 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities where required by law, court order, or lawful regulatory request.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of ji33's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer that materially affects your privacy rights.

ji33 retains personal data for the period necessary to fulfill the purpose for which it was collected and to comply with applicable legal and regulatory obligations. The following general retention periods apply:

• Account and KYC data: Retained for the duration of the active account relationship and for a minimum of five (5) years following account closure, in accordance with PAGCOR anti-money laundering record-keeping requirements and the AMLA.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by PAGCOR and AMLA regulations.
• Gaming session logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support communications: Retained for up to three (3) years following resolution of the relevant inquiry.
• Technical and device data: Retained for up to twelve (12) months for security monitoring and fraud detection purposes.
• Marketing consent records: Retained until you withdraw consent and for one (1) year thereafter to evidence prior consent.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized so that it can no longer be attributed to an identified individual. Where anonymization is not technically feasible, data is securely destroyed using industry-standard methods.

ji33 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include but are not limited to:

• Encryption in transit: All communications between your device and ji33's servers are encrypted using TLS 1.2 or higher (256-bit SSL). This prevents interception of your credentials, financial data, and personal information during transmission.
• Encryption at rest: Sensitive personal data including passwords (which are stored as salted cryptographic hashes, never in plain text), financial account details, and KYC documents are encrypted at rest using AES-256 encryption.
• Access controls: Access to personal data within ji33's systems is restricted on a strict need-to-know basis. Staff are granted only the minimum level of access required for their role. All access is logged and auditable.
• Two-factor authentication: ji33 offers SMS-based two-factor authentication for player accounts and requires multi-factor authentication for all staff accessing administrative systems.
• Infrastructure security: ji33's servers are hosted in ISO 27001-aligned data center environments with physical access controls, network firewalls, intrusion detection systems, and regular vulnerability assessments.
• Staff training: All ji33 staff who handle personal data receive regular data privacy and security training, including awareness of phishing, social engineering, and secure data handling procedures.

While ji33 implements industry-standard security practices, no transmission over the internet or electronic storage method is 100% secure. You are also responsible for protecting your account credentials as described in the Terms & Conditions.

ji33 uses cookies and similar technologies (including local storage and session identifiers) to operate the platform, maintain session continuity, and improve your experience. The following categories of cookies are used on ji33.asia:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in during your session and security cookies that protect against cross-site request forgery. These cookies cannot be disabled without rendering the platform unusable.
• Functional cookies: Store your preferences such as language settings and remembered device status to improve platform usability across sessions.
• Performance and analytics cookies: Collect anonymized information about how players use ji33.asia, including page load times, error rates, and navigation patterns. This data helps ji33 improve platform performance and user experience. No personally identifiable information is transmitted via these cookies.
• Fraud and security cookies: Used by ji33's fraud detection systems to identify unusual access patterns, multiple account attempts, and other security anomalies. These are essential to protecting your account and the platform's integrity.

ji33 does not use third-party advertising cookies or permit ad networks to place cookies on ji33.asia for the purpose of building advertising profiles or serving targeted advertisements to ji33 players on other websites.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent access to the ji33 platform. ji33 does not currently respond to browser "Do Not Track" signals, as there is no uniform industry standard for interpreting such signals.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ji33. You may exercise these rights by contacting ji33's Data Protection Officer using the details in Section 15.

ji33 will respond to all rights requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, ji33 may extend this period by a further thirty (30) days and will notify you accordingly. ji33 reserves the right to decline requests that are manifestly unfounded, repetitive, or that would conflict with ji33's legal or regulatory obligations. Where a request is declined, ji33 will provide written reasons.

If you believe your data rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through its official channels.

The ji33 platform is strictly for use by persons aged 21 years and older. ji33 does not knowingly collect personal data from individuals under the age of 21. Access to real-money gaming on ji33 is prohibited for all persons below this age threshold, as required by Philippine law and PAGCOR regulations.

ji33 employs age verification processes during account registration and KYC review to enforce this restriction. If ji33 becomes aware that it has inadvertently collected personal data from a person under 21, it will immediately suspend the associated account, delete the data subject's personal data to the extent permitted by law, and take appropriate steps to prevent further access.

If you have reason to believe that a minor has created a ji33 account or is accessing the platform, please contact ji33's support team or Data Protection Officer immediately using the details in Section 15.

ji33's primary operations are based in the Philippines and personal data is processed within the Philippines where possible. However, certain service providers engaged by ji33 (such as cloud infrastructure providers, KYC platforms, and game provider technology stacks) may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, ji33 ensures that appropriate safeguards are in place to protect the data to a standard equivalent to that required by the Philippine Data Privacy Act. Such safeguards may include: contractual data transfer agreements incorporating the NPC's standard contractual clauses; transfer to jurisdictions that the NPC has recognized as providing adequate data protection; or other transfer mechanisms recognized under the DPA's IRR.

You may request information about the specific safeguards applicable to international transfers of your personal data by contacting the ji33 Data Protection Officer.

In the event of a personal data breach that is likely to result in a risk to the rights and freedoms of affected individuals, ji33 will act in accordance with its obligations under the Data Privacy Act of 2012 and NPC Circular No. 16-03 (Personal Data Breach Management). Specifically:

• ji33 will notify the National Privacy Commission (NPC) of any reportable personal data breach within seventy-two (72) hours of becoming aware of it, where feasible.
• Where a breach is likely to result in a high risk to affected individuals, ji33 will notify those individuals without undue delay, providing a description of the breach, the categories and approximate number of data subjects affected, likely consequences, and measures taken or proposed to address the breach.
• Notification to affected individuals will be made via the registered email address or mobile number on their ji33 account.

ji33 maintains a formal Data Breach Response Plan and conducts regular security drills to ensure that the response team is prepared to manage breach incidents effectively. All potential breach incidents are logged and investigated regardless of severity.

ji33 may update this Privacy Policy from time to time to reflect changes in its data processing practices, legal requirements, or regulatory guidance from the NPC or PAGCOR. The revised Policy will be published on ji33.asia with an updated effective date at the top of the document.

Where changes to this Policy are material — meaning they significantly affect your rights or the way ji33 processes your personal data — ji33 will provide advance notice via email to your registered address and/or a prominent notice on the platform before the changes take effect. Minor clarifications and non-material updates may be made without advance notice.

Your continued use of the ji33 platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any material changes, you should cease using the platform and may request account closure as described in the ji33 Terms & Conditions.

For all questions, requests to exercise data subject rights, privacy complaints, or concerns regarding ji33's data processing practices, please contact the ji33 Data Protection Officer using the details below. All communications should clearly identify your name, registered email address, and the nature of your inquiry to allow efficient processing.

• Support Email: [email protected] (plain text — not a clickable link)
• Subject line for DPO enquiries: "Data Privacy — [nature of request]" (e.g., "Data Privacy — Right of Access Request")
• Live Chat: Available 24/7 through the ji33 platform for initial privacy enquiries
• Response time: ji33 commits to acknowledging all privacy-related communications within five (5) business days and providing a substantive response within thirty (30) days.

If you are not satisfied with ji33's handling of your privacy complaint, you have the right to file a complaint with the National Privacy Commission of the Philippines. This Policy was last reviewed and is effective as of 1 January 2026.