jiph Privacy Policy

1. Identity of the Data Controller

jiph ("we," "us," "our") is the personal information controller responsible for your personal data collected through the jiph Platform at jiph.one. jiph operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

jiph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and handling data subject requests. The DPO can be contacted at [email protected].

2. Personal Data We Collect

2.1 Data Provided Directly by You

When you register for and use a jiph Account, we collect the following categories of personal data that you provide to us:

• Identity Data: Full legal name, date of birth, gender, government-issued identification number (e.g., PhilSys ID, passport, driver's license, SSS/GSIS number);
• Contact Data: Philippine mobile number, email address, residential address (city, province, postal code);
• Financial Data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records;
• KYC Documentation: Photographs of government-issued IDs, selfie photographs for identity verification, proof of address documents;
• Account Credentials: Username and hashed password (we never store your plain-text password);
• Communications: Records of your interactions with jiph customer support, including chat transcripts and email correspondence.

2.2 Data Collected Automatically

When you access the jiph Platform, we automatically collect certain technical data:

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution;
• Usage Data: Pages visited, games played, bet amounts, session duration, login timestamps, and navigation patterns;
• Location Data: General geographic location inferred from your IP address (country and region level only — jiph does not collect precise GPS location);
• Cookie Data: Information collected through cookies and similar tracking technologies as described in Section 6.

3. How jiph Uses Your Personal Data

jiph uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your jiph Account; authenticating your identity at login; processing password resets;
• Service Delivery: Enabling you to deposit funds, play games, place bets, and withdraw winnings; processing GCash, PayMaya, and bank transactions;
• Legal and Regulatory Compliance: Fulfilling PAGCOR licensing obligations; complying with the Anti-Money Laundering Act (AMLA) including customer due diligence and suspicious transaction reporting to the AMLC; complying with the Data Privacy Act;
• Identity Verification (KYC): Verifying that you are at least 21 years of age; confirming the authenticity of your identity documents; preventing identity fraud;
• Responsible Gaming: Monitoring for indicators of problem gambling; applying player-requested restrictions (deposit limits, self-exclusion); complying with PAGCOR responsible gaming requirements;
• Fraud Prevention and Security: Detecting and preventing fraudulent transactions, bonus abuse, money laundering, and unauthorized access to Accounts;
• Customer Support: Responding to your queries, complaints, and requests; maintaining records of support interactions;
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates, where you have provided consent or where permitted by applicable law. You may opt out at any time;
• Platform Improvement: Analyzing aggregated usage data to improve the jiph Platform, game lobby, and user experience.

4. Legal Basis for Processing

jiph processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary to perform the jiph Account agreement with you (account management, game access, payments);
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws;
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your privacy rights;
• Consent: Processing for direct marketing communications and optional data collection, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

jiph does not sell your personal data. We may share your personal data with the following categories of recipients:

• PAGCOR: As required by our gaming license, jiph may be required to provide player data to PAGCOR for regulatory reporting, audit, or investigation purposes;
• Anti-Money Laundering Council (AMLC): jiph is legally required to report covered and suspicious transactions to the AMLC under the Anti-Money Laundering Act;
• Payment Processors: GCash (G-Xchange, Inc.), PayMaya (Maya Bank), and partner banks receive the financial data necessary to process your deposits and withdrawals;
• KYC and Identity Verification Partners: Third-party service providers who assist jiph in verifying the authenticity of identity documents and detecting fraud;
• Game Content Providers: Licensed game providers (such as Pragmatic Play, PG Soft, Evolution Gaming) receive pseudonymized player session data necessary to operate their games and ensure fair play;
• IT and Cloud Service Providers: Infrastructure providers who host jiph's systems, subject to data processing agreements that bind them to equivalent data protection standards;
• Law Enforcement and Courts: Where jiph is legally compelled to disclose data by Philippine law enforcement agencies, courts, or other government authorities with proper legal authority.

All third parties with whom jiph shares personal data are required to process such data only for the specified purpose and in accordance with jiph's instructions and applicable law.

6. Cookies and Tracking Technologies

jiph uses cookies and similar technologies (local storage, session tokens) to operate the Platform. The types of cookies used include:

• Strictly Necessary Cookies: Required for the Platform to function, including session authentication tokens that keep you logged in to your jiph Account. These cannot be disabled without impairing Platform functionality;
• Performance and Analytics Cookies: Collect aggregated, anonymized data about how players use the jiph Platform, which helps jiph improve game performance and navigation;
• Functional Cookies: Remember your preferences (language settings, responsible gaming tool configurations) to personalize your experience;
• Security Cookies: Assist in detecting fraudulent activity, bot traffic, and unauthorized access attempts.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the jiph Platform.

7. Data Retention

jiph retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC Data: Retained for a minimum of 5 years from the date of Account closure, as required by PAGCOR regulations and Philippine anti-money laundering laws;
• Transaction Records: Retained for a minimum of 10 years from the date of the transaction, in compliance with AMLA requirements;
• Support Communications: Retained for 3 years from the date of the interaction;
• Marketing Consent Records: Retained for 3 years from the date consent was given or withdrawn.

Upon expiry of the applicable retention period, jiph will securely destroy or anonymize personal data in accordance with its data disposal procedures.

8. Data Security

jiph implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. Security measures include:

• SSL/TLS encryption for all data transmitted between your device and jiph's servers;
• Encryption at rest for sensitive personal data stored in jiph's databases;
• Password hashing using industry-standard algorithms (plain-text passwords are never stored);
• Access controls limiting employee access to personal data to those with a legitimate business need;
• Regular security audits and penetration testing of the jiph Platform;
• Incident response procedures for detecting, reporting, and responding to personal data breaches.

9. Children's Privacy and Age Restriction

The jiph Platform is strictly prohibited to persons under 21 years of age, as required by PAGCOR regulations. jiph does not knowingly collect personal data from persons under 21. If jiph discovers that personal data has been collected from a person under 21, it will immediately close the associated Account, return any deposited funds to their source, and delete the collected data. If you believe that a person under 21 has registered with jiph, please contact [email protected] immediately.

10. Cross-Border Data Transfers

jiph's primary data processing infrastructure is located within the Philippines. Where data is processed or stored outside the Philippines (for example, through cloud service providers with data centers in other jurisdictions), jiph ensures that such transfers comply with the Data Privacy Act, including by entering into appropriate data processing agreements that impose equivalent data protection obligations on the recipient.

11. Exercising Your Data Subject Rights

To exercise any of the rights described in the "Your Data Subject Rights" section above, please submit a written request to jiph's Data Protection Officer:

If you are dissatisfied with jiph's response to your data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at its official channels as published on the NPC's website.

12. Changes to This Privacy Policy

jiph reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, jiph's data practices, or PAGCOR regulatory requirements. Material changes will be communicated to registered Players via email or prominent notice on the Platform at least 7 days before taking effect, except where immediate amendment is required by law. The "Last Updated" date at the top of this page indicates when the most recent version was published. Your continued use of the jiph Platform following publication of an amended Privacy Policy constitutes your acceptance of the updated terms.

13. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or jiph's data practices, please contact: