Legal Document · Effective 2026

18jilli Privacy Policy

Your privacy matters to us. This Privacy Policy explains exactly how 18jilli collects, uses, stores, and protects your personal information — in plain language, with no fine print designed to confuse.

Last Updated: January 1, 2026  |  Effective Date: January 1, 2026

How 18jilli Protects Your Privacy

These six principles guide every decision 18jilli makes about your personal data. They are not aspirational — they are operational commitments built into how the platform works.

Data Security by Default

All personal data stored by 18jilli is protected using industry-standard SSL/TLS encryption, both in transit and at rest. Access to player data is restricted to authorized personnel only, on a strict need-to-know basis.

No Data Selling

18jilli does not sell, rent, or trade your personal information to third-party marketers or data brokers — ever. Your data is used solely to operate the platform, comply with legal obligations, and improve your experience.

Your Rights Are Real

Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, and request deletion of your personal data. 18jilli has clear processes in place to honor these rights promptly and without unnecessary friction.

Minimal Data Collection

18jilli collects only the personal data that is genuinely necessary to provide our services, comply with regulatory requirements, and keep your account secure. We do not collect data speculatively or beyond what is needed.

Full Transparency

This Privacy Policy is written in clear, accessible English — not buried in legal jargon. We tell you exactly what data we collect, why we collect it, who we share it with, and how long we keep it. No hidden clauses.

Regulatory Compliance

18jilli's data practices comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations issued by the National Privacy Commission (NPC). We take our legal obligations seriously.

Summary: This Privacy Policy describes how 18jilli ("we," "us," or "our") collects, uses, discloses, and safeguards the personal information of players and visitors ("you") who access the 18jilli platform at 18jilli.org. This policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By using 18jilli, you consent to the data practices described in this policy.
1

Introduction

18jilli is the Philippines' trusted online casino and sports betting platform, serving millions of Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and beyond. As a platform that handles real-money transactions and sensitive personal information, we understand that privacy is not just a legal obligation — it is a fundamental part of the trust our players place in us.

This Privacy Policy applies to all personal data collected through the 18jilli website, mobile platform, customer support channels, and any other touchpoints through which you interact with 18jilli. It covers data collected from registered players, prospective players who browse the platform, and individuals who contact our support team.

This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and 18jilli.

If you have questions about this policy or how your data is handled, please refer to Section 14 for contact details, including how to reach our designated Data Protection Officer (DPO).

2

Personal Data We Collect

18jilli collects personal data that is necessary to provide our services, comply with regulatory requirements, and maintain the security and integrity of the platform. The categories of personal data we collect include:

2.1 Identity & Contact Information

  • Full legal name as it appears on your government-issued ID
  • Date of birth (used to verify the 21+ age requirement)
  • Residential address, including barangay, city, and province
  • Email address and mobile number
  • Government-issued ID details (e.g., Philippine Passport, UMID, Driver's License, PhilSys ID)

2.2 Financial Information

  • Payment method details (e.g., GCash account reference, PayMaya account reference, bank account details for BPI, BDO, or Metrobank)
  • Transaction history, including deposits, withdrawals, and wager records
  • Source of funds documentation where required for KYC compliance

2.3 Account & Gaming Activity Data

  • Username and account credentials (passwords are stored in hashed, non-reversible form)
  • Gaming history, including games played, bet amounts, wins, and losses
  • Bonus and promotion usage records
  • Responsible gaming settings and self-exclusion status

2.4 Technical & Usage Data

  • IP address and approximate geolocation
  • Device type, operating system, and browser information
  • Session duration, pages visited, and features used
  • Cookies and similar tracking technologies (see Section 7)

2.5 Communications Data

  • Records of communications with 18jilli customer support, including live chat transcripts and email correspondence
  • Feedback, complaints, and dispute records
Sensitive Personal Information: Where 18jilli collects sensitive personal information — such as government ID numbers or financial account details — this data is handled with heightened security measures and is processed only to the extent strictly necessary for identity verification, fraud prevention, and regulatory compliance.
3

How We Collect Your Data

18jilli collects personal data through the following means:

3.1 Directly From You

The majority of personal data we hold is provided directly by you when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion. You are in control of what you share with us at these touchpoints.

3.2 Automatically During Platform Use

When you access and use the 18jilli platform, certain technical data is collected automatically through cookies, server logs, and similar technologies. This includes your IP address, device information, and browsing behavior on the platform. This data helps us maintain platform security, detect fraud, and improve the user experience.

3.3 From Third Parties

In certain circumstances, 18jilli may receive personal data about you from third parties, including:

  • Identity verification providers who assist with KYC checks and document authentication.
  • Payment processors who confirm the status and ownership of payment accounts.
  • Fraud prevention and anti-money laundering screening services that flag high-risk transactions or accounts.
  • Regulatory authorities such as PAGCOR, where information sharing is required by law.
4

How We Use Your Personal Data

18jilli uses the personal data we collect for the following purposes:

Purpose Data Used
Account registration and management Identity, contact, and credential data
Age and identity verification (KYC) Government ID, date of birth, address
Processing deposits and withdrawals Financial and payment method data
Providing gaming services and calculating outcomes Account and gaming activity data
Fraud detection and prevention Technical, financial, and identity data
Anti-money laundering compliance Financial, identity, and transaction data
Customer support and dispute resolution Communications and account data
Responsible gaming monitoring Gaming activity and account data
Platform improvement and analytics Technical and usage data (aggregated)
Marketing communications (where consented) Contact and preference data
Regulatory reporting and legal compliance Identity, financial, and activity data

18jilli does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by law or where you have provided explicit consent.

5

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 18jilli processes your personal data on the following legal bases:

  • Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions, including account management, payment processing, and game provision.
  • Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML requirements, PAGCOR regulatory obligations, and tax reporting duties.
  • Legitimate interests: Processing necessary for 18jilli's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
  • Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time by contacting our support team.
6

Data Sharing & Disclosure

18jilli does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Service Providers

Third-party vendors who provide services on our behalf, including identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard networks), IT infrastructure providers, and customer support platforms. These providers are contractually bound to process your data only as instructed by 18jilli and in accordance with applicable data privacy laws.

6.2 Regulatory and Law Enforcement Authorities

Where required by law, court order, or regulatory directive, 18jilli may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities. 18jilli will notify affected players of such disclosures where legally permitted to do so.

6.3 Fraud Prevention and Security Partners

18jilli may share data with fraud prevention agencies and security partners to detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the platform.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 18jilli's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is processed.

Our Commitment: In all cases of data sharing, 18jilli ensures that appropriate contractual, technical, and organizational safeguards are in place to protect your personal data. We do not share data with third parties for their own marketing purposes.
7

Cookies & Tracking Technologies

18jilli uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytics data. The types of cookies we use include:

  • Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
  • Functional Cookies: Remember your preferences, such as language settings and responsible gaming limits you have set, so you do not need to re-enter them on each visit.
  • Analytics Cookies: Collect aggregated, anonymized data about how players use the platform — which pages are visited most, where users encounter difficulties, and how features are used. This data helps us improve the platform.
  • Security and Fraud Prevention Cookies: Help 18jilli detect and prevent fraudulent activity, unauthorized account access, and bot traffic.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 18jilli platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate.

8

Data Retention

18jilli retains personal data for as long as is necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. The following general retention periods apply:

Data Category Retention Period
Account and identity data Duration of account plus 5 years after closure
Financial and transaction records 10 years (AML regulatory requirement)
KYC verification documents 5 years after account closure
Customer support communications 3 years from date of communication
Gaming activity logs 5 years from date of activity
Technical and usage data 13 months on a rolling basis
Marketing consent records Until consent is withdrawn, plus 1 year

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 18jilli's data disposal procedures. Where data must be retained beyond these periods due to an ongoing legal dispute or regulatory investigation, it will be retained until the matter is resolved.

9

Data Security

18jilli implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

  • SSL/TLS Encryption: All data transmitted between your device and the 18jilli platform is encrypted using industry-standard SSL/TLS protocols.
  • Encryption at Rest: Sensitive personal data stored in 18jilli's systems is encrypted at rest using strong encryption algorithms.
  • Access Controls: Access to personal data is restricted to authorized 18jilli personnel and service providers on a strict need-to-know basis. All access is logged and audited.
  • Password Security: Player passwords are stored using one-way cryptographic hashing. 18jilli staff cannot view your password in plain text.
  • Regular Security Audits: 18jilli conducts regular security assessments and penetration testing to identify and remediate vulnerabilities.
  • Incident Response: 18jilli maintains a data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission (NPC) in accordance with applicable legal requirements.
Your Responsibility: While 18jilli takes extensive measures to protect your data, you also play a role in keeping your account secure. Never share your password with anyone, use a strong and unique password for your 18jilli account, and contact our support team immediately if you suspect unauthorized access to your account.
10

Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 18jilli. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

Right to Access

Request a copy of the personal data 18jilli holds about you, along with information about how it is used and shared.

Right to Rectification

Request correction of inaccurate or incomplete personal data held about you. Some corrections may require identity re-verification.

Right to Erasure

Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.

Right to Object

Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.

Right to Data Portability

Request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.

Right to Withdraw Consent

Where processing is based on your consent (e.g., marketing communications), you may withdraw that consent at any time without affecting prior processing.

18jilli will respond to all data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you. There is no charge for exercising your data rights, unless requests are manifestly unfounded or excessive.

11

Children's Privacy

The 18jilli platform is strictly intended for adults aged 21 years and above. 18jilli does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on 18jilli or provided personal data to us, please contact our Data Protection Officer immediately using the contact details in Section 14. We will investigate and take appropriate action without delay.

18jilli employs age verification procedures during registration and KYC to prevent underage access. These procedures include verification of government-issued identification documents confirming date of birth.

12

Third-Party Links

The 18jilli platform may contain references to third-party services, such as payment providers or game developers. While 18jilli takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party websites or services. This Privacy Policy applies solely to data collected and processed by 18jilli.

We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of 18jilli, particularly your chosen payment provider (e.g., GCash, PayMaya, BPI, BDO, Metrobank).

13

Updates to This Privacy Policy

18jilli reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via email or in-platform notification.

Your continued use of the 18jilli platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically to stay informed about how we protect your personal data.

If you disagree with any changes to this Privacy Policy, you should discontinue use of the platform and may request account closure by contacting our customer support team.

14

Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 18jilli handles your personal data, please contact our Data Protection Officer (DPO). The DPO is responsible for overseeing 18jilli's compliance with the Philippine Data Privacy Act of 2012 and is your primary point of contact for all data privacy matters.

Data Protection Officer — 18jilli [email protected] Please include "Privacy Request" in the subject line of your email, along with your registered username and a clear description of your query or request. We aim to acknowledge all privacy-related inquiries within 5 business days and to resolve them within 30 days.

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 18jilli has not handled your personal data in accordance with the Data Privacy Act of 2012. Information about the NPC and how to file a complaint is available through official Philippine government channels.

Play on 18jilli With Confidence

Now that you understand how 18jilli protects your privacy, explore everything the platform has to offer — from live casino games and slots to sports betting and bingo, all in Philippine Peso and with 24/7 Filipino support.

18jilli is strictly for players aged 21 and above. Please gamble responsibly.