jollywin Privacy
Policy

1. Introduction

jollywin ("jollywin," "we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who use the jollywin online gaming platform at jollywin.one (the "Platform"). This Privacy Policy describes how we collect, use, store, share, and protect your personal information, and explains the rights available to you under applicable Philippine law.

This Privacy Policy is incorporated into and forms part of jollywin's Terms & Conditions. By registering an account or using the jollywin Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Personal Data We Collect

2.1 Registration Data

When you create a jollywin account, we collect the following information:

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Email address and mobile number
• Residential address (city, province, postal code)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with Philippine anti-money laundering laws and PAGCOR regulations, we may collect:

• Copies of government-issued identification (Philippine passport, driver's license, SSS/GSIS ID, PhilSys national ID, or PRC ID)
• Proof of address documents (utility bills, bank statements dated within 90 days)
• Selfie photographs for identity verification purposes
• Source of funds declarations where required by regulation

2.3 Financial Data

When you make deposits or request withdrawals, we collect:

• GCash or Maya mobile wallet number (masked after verification)
• Philippine bank account details (bank name, account number — stored in encrypted form)
• Transaction history, deposit amounts, and withdrawal records

2.4 Usage and Technical Data

We automatically collect certain technical data when you use the Platform:

• IP address and approximate geolocation (country/city level)
• Device type, operating system, and browser information
• Session duration, pages visited, and game activity logs
• Login timestamps and access logs

2.5 Communications Data

If you contact jollywin's support team, we retain records of your communications, including chat transcripts, email correspondence, and support ticket history, for quality assurance and dispute resolution purposes.

3. How We Use Your Personal Data

jollywin uses your personal data for the following purposes:

• Account Management: To create, maintain, and secure your jollywin account, and to verify your identity and age eligibility.
• Service Delivery: To process deposits and withdrawals, provide access to games, and deliver customer support.
• Regulatory Compliance: To fulfill our obligations under PAGCOR regulations, Philippine anti-money laundering laws (AMLA), and the Data Privacy Act of 2012.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, and unauthorized account access.
• Responsible Gaming: To monitor gaming activity and enforce responsible gaming tools such as deposit limits and self-exclusion requests.
• Platform Improvement: To analyze usage patterns and improve the jollywin Platform's performance, features, and user experience.
• Communications: To send you account notifications, security alerts, and — where you have opted in — promotional communications about jollywin offers.

jollywin does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review.

4. Legal Basis for Processing

jollywin processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have given explicit consent, such as for marketing communications or optional data collection.
• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, NPC requirements, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.

5. Data Sharing and Disclosure

jollywin does not sell your personal data. We may share your data with the following categories of recipients only as necessary and as permitted by law:

5.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, Maya, Philippine banks), KYC verification providers, cloud hosting providers, and customer support platforms. All service providers are contractually bound to process your data only on jollywin's instructions and in compliance with the Data Privacy Act.

5.2 Regulatory Authorities

jollywin may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government authorities where required by law, court order, or regulatory directive.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of jollywin's business assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

6. Data Retention

jollywin retains your personal data for as long as your account is active and for a period thereafter as required by applicable law. Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, as required by PAGCOR regulations and Philippine AMLA obligations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for two (2) years from the date of the last interaction.
• Technical and usage logs: Retained for twelve (12) months on a rolling basis.

Upon expiry of the applicable retention period, jollywin will securely delete or anonymize your personal data in accordance with NPC guidelines.

7. Cookies and Tracking Technologies

jollywin uses cookies and similar technologies to operate and improve the Platform. The types of cookies we use are:

• Essential Cookies: Required for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Analytics Cookies: Used to understand how players interact with the Platform, which pages are most visited, and where technical errors occur. Data collected is aggregated and anonymized.
• Preference Cookies: Used to remember your language, display, and notification preferences across sessions.

jollywin does not use third-party advertising cookies, cross-site tracking pixels, or behavioral profiling technologies. You may manage cookie preferences through your browser settings; however, disabling essential cookies may impair Platform functionality.

8. Data Security

jollywin implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data in transit between your device and jollywin's servers
• AES-256 encryption for sensitive data stored at rest, including financial account details
• Multi-factor authentication options for player accounts
• Regular security audits and penetration testing by independent security professionals
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Incident response procedures compliant with NPC breach notification requirements

In the event of a personal data breach that is likely to result in harm to affected players, jollywin will notify the NPC within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by jollywin:

• Right to be Informed: The right to know what personal data jollywin collects and how it is used — as described in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data jollywin holds about you.
• Right to Rectification: The right to request correction of in accurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jollywin's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe jollywin has violated your data privacy rights.

To exercise any of these rights, please contact jollywin's Data Protection Officer using the contact details in Section 13. We will respond to all verified data rights requests within thirty (30) days of receipt.

10. Children's Privacy

The jollywin Platform is strictly intended for persons aged 21 years and above, in compliance with Philippine gaming law. jollywin does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, delete the data, and report the matter to the relevant authorities as required by law.

If you are a parent or guardian and believe that a minor has registered on the jollywin Platform, please contact our support team immediately so we can take appropriate action.

11. International Data Transfers

jollywin's primary data processing infrastructure is located within the Philippines. Where it is necessary to transfer your personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting or KYC verification services — jollywin ensures that such transfers are subject to appropriate safeguards, including:

• Contractual data processing agreements incorporating NPC-approved standard contractual clauses
• Transfers only to jurisdictions that provide an adequate level of data protection as recognized by the NPC
• Technical and organizational measures equivalent to those applied within the Philippines

jollywin will not transfer your personal data internationally in a manner that reduces the protections afforded to you under the Data Privacy Act of 2012.

12. Changes to This Privacy Policy

jollywin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. Where changes are material, we will notify registered players via email or a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

Your continued use of the jollywin Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically. The most current version will always be available at jollywin.one/privacy-policy.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or jollywin's data processing practices, please contact our designated Data Protection Officer (DPO):

If you are not satisfied with jollywin's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official channels.