Privacy Policy

This Privacy Policy ("Policy") describes how joyjil ("joyjil", "we", "our", "us") collects, uses, stores, discloses, and otherwise processes the personal data of individuals ("you", "Player", "User") who access or use the joyjil online casino and sports betting platform, including the website at joyjil.cam, all associated subdomains, mobile browser interfaces, and all related services (collectively, the "Platform").

joyjil takes its obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations seriously. This Policy is intended to be transparent, plain, and genuinely useful — not a document written to obscure what we do with your data.

This Policy should be read together with joyjil's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection law, joyjil is the personal information controller in respect of all personal data collected through the Platform. joyjil has appointed a Data Protection Officer (DPO) whose contact details are provided in Section 14 of this Policy.

As personal information controller, joyjil determines the purposes and means of processing your personal data and is responsible for ensuring that all processing is carried out lawfully, fairly, and transparently, with appropriate technical and organizational safeguards in place.

joyjil collects personal data from you through different means and at different stages of your relationship with the Platform. The categories of data we collect are set out below:

When you create a joyjil account, we collect: full legal name, date of birth, gender, current Philippine residential address, email address, Philippine mobile number, and a username and password chosen by you.

To comply with anti-money laundering (AML) regulations and to verify your age eligibility (21+), we may collect copies of: government-issued identification (passport, UMID, driver's license, PhilSys national ID, SSS ID, PRC ID, or equivalent), proof of address documents (utility bill, bank statement), and proof of payment method ownership (e.g., GCash account screenshot under your name).

When you make deposits, place wagers, or request withdrawals, we collect: payment method type (GCash, Maya, BPI, BDO, etc.), transaction amounts, timestamps, reference numbers, and the associated account or wallet details as needed to process and record the transaction.

joyjil records all gameplay and betting activity on the Platform, including game sessions, wager amounts, outcomes, bonus usage, and betting history. This data is necessary for dispute resolution, regulatory reporting, and responsible gaming monitoring.

We automatically collect certain technical data when you access the Platform, including: IP address, device type and model, operating system and version, browser type and version, session timestamps, pages visited, and approximate geographic location derived from IP address. This data is used for security, fraud detection, and Platform performance monitoring.

When you contact joyjil support via live chat, email, or any other channel, we retain records of those communications, including the content of your messages, for quality assurance, dispute resolution, and regulatory compliance purposes.

Where you have consented, we record your marketing communication preferences, including whether you have opted in to receive promotional emails, SMS notifications, or push notifications from joyjil.

joyjil uses the personal data we collect for the following purposes:

joyjil does not use your personal data for any purpose other than those listed above without first obtaining your explicit consent or establishing a new legal basis for the processing.

Under the Philippine Data Privacy Act of 2012, joyjil processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between you and joyjil — including account management, game provision, and transaction processing.
• Legal obligation: Processing required to comply with applicable Philippine law, including AML obligations, gaming regulatory requirements, and tax reporting.
• Legitimate interests: Processing carried out for joyjil's legitimate interests where those interests are not overridden by your rights — including fraud prevention, Platform security, and responsible gaming monitoring.
• Consent: Processing for which you have given clear, freely given, and informed consent — including the receipt of marketing communications. You may withdraw this consent at any time by updating your account preferences or contacting support.

joyjil does not sell your personal data. We share your data only in the following circumstances and only to the extent strictly necessary:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other payment partners receive the minimum data necessary to process your transactions (e.g., transaction amount, wallet reference, account holder name for verification).
• Game providers: Certified game studios and live dealer operators receive only a session token and the data necessary to render the game — they do not receive your full personal profile.
• Identity verification services: Third-party KYC and AML screening providers may process your identity documents for verification purposes under strict confidentiality obligations.
• Regulatory and law enforcement authorities: joyjil will disclose personal data to Philippine regulatory bodies, the National Privacy Commission, or law enforcement agencies where required to do so by law, court order, or applicable regulatory directive — without prior notice to you where the law prohibits such notice.
• Professional advisers: joyjil's lawyers, auditors, and accountants may access personal data under professional confidentiality obligations as necessary to provide their services.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of joyjil's assets, personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

All third parties with whom joyjil shares personal data are required to process that data only for the specified purpose and in accordance with applicable data protection law.

joyjil uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device when you visit the joyjil website. They help us operate the Platform correctly, remember your preferences, analyze usage patterns, and — where you have consented — deliver relevant promotional content.

• Strictly necessary cookies: Required for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as language, last game played, and display settings to improve your experience on return visits.
• Analytics cookies: Collect aggregated, anonymized data about how players navigate the Platform to help us identify areas for improvement. joyjil uses first-party analytics tools for this purpose.
• Marketing cookies (consent-based): Used only where you have given consent. These help us understand which promotions are most relevant to you and measure campaign effectiveness.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using core joyjil Platform features. Please note that clearing cookies will log you out of your current joyjil session.

joyjil retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in compliance with AML record-keeping requirements under Philippine law.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, or longer if required by a specific regulatory obligation or active legal proceeding.
• Gameplay records: Retained for a minimum of two (2) years for dispute resolution purposes and regulatory reporting.
• Communications data: Retained for up to two (2) years from the date of the communication for quality assurance and dispute resolution.
• Marketing preference records: Retained until you withdraw consent or request deletion, subject to any applicable legal minimum retention period.

Upon expiry of the applicable retention period, joyjil will securely delete or anonymize your personal data. Anonymized and aggregated data that cannot identify you may be retained indefinitely for statistical and analytical purposes.

joyjil implements and maintains a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and joyjil's servers.
• Encryption of sensitive data at rest, including KYC documents and payment instrument details.
• Access controls limiting joyjil employee access to personal data on a strict need-to-know basis, with role-based permissions and multi-factor authentication for administrative systems.
• Regular security assessments and penetration testing of joyjil's infrastructure.
• Automated anomaly detection and fraud monitoring on all account and transaction activity.
• Secure data disposal procedures for physical and digital storage media containing personal data.

While joyjil takes all reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is 100% secure. You are responsible for maintaining the security of your joyjil account credentials and for notifying joyjil support immediately if you suspect unauthorized access to your account.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by joyjil. All rights requests can be submitted by contacting joyjil's Data Protection Officer at the details in Section 14.

joyjil will respond to all verified rights requests within 15 business days. We may request proof of identity before processing a request to ensure we are disclosing or modifying data only to the account owner.

The joyjil Platform is strictly restricted to individuals aged 21 and above. joyjil does not knowingly collect or process personal data from persons under the age of 21. If joyjil becomes aware that a person under 21 has registered an account or provided personal data, that account will be immediately closed, all associated data will be deleted or anonymized, and any deposits or winnings associated with the account will be forfeited.

If you are a parent or guardian and believe your child has registered a joyjil account or provided personal data to joyjil, please contact joyjil's Data Protection Officer immediately using the contact details in Section 14. We will investigate and take appropriate action without delay.

Some of joyjil's third-party service providers — including certain game studios, technology infrastructure providers, and KYC verification services — may be located outside the Philippines. Where personal data is transferred outside the Philippines to such providers, joyjil ensures that:

• The recipient country or organization provides an adequate level of data protection as assessed by joyjil and, where applicable, recognized by the National Privacy Commission of the Philippines.
• Appropriate contractual safeguards (such as data processing agreements with standard contractual clauses) are in place between joyjil and the recipient.
• The transfer is limited to the minimum personal data necessary for the third party to perform its specific function.

By using the joyjil Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines under the safeguards described above.

joyjil reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or business operations. The "Last Updated" date at the top of this page will always reflect the date of the most recent version.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — joyjil will notify you by email to your registered address and by posting a prominent notice on the Platform at least fourteen (14) days before the changes take effect. Your continued use of the joyjil Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

We encourage you to review this Privacy Policy periodically. Older versions of this Policy are available on request from joyjil's Data Protection Officer.

If you have any questions about this Privacy Policy, wish to exercise any of your data rights, have a concern about how joyjil handles your personal data, or need to report a suspected data breach, please contact joyjil's Data Protection Officer using the following details:

Data Protection Officer — joyjil
Email: [email protected]
Subject line: Data Privacy Request — [your concern]
Response time: Acknowledged within 2 business days; substantive response within 15 business days.

If you are not satisfied with joyjil's response to your data rights request or privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the Philippine government authority responsible for administering and enforcing the Data Privacy Act of 2012.