jollybet Privacy Policy

1. Introduction

jollybet ("we", "us", "our", or the "Company") is committed to protecting the privacy and personal data of every person who accesses or uses the jollybet Platform at jollybet.asia (the "Platform"). This Privacy Policy has been prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission of the Philippines ("NPC").

This Policy applies to all personal data collected through the Platform, whether submitted during account registration, deposited through payment channels, generated through gameplay, or collected passively through cookies and device identifiers. By registering on the jollybet Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside the jollybet Terms & Conditions and Responsible Gaming policy.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, jollybet is the Personal Information Controller in respect of the personal data it collects and processes about you. jollybet is licensed and regulated by the Philippine Amusement and Gaming Corporation ("PAGCOR") and operates under the oversight of Philippine regulatory authorities.

Where jollybet engages third-party service providers to process data on its behalf — including payment processors, KYC verification providers, and cloud infrastructure providers — those parties act as Personal Information Processors bound by contractual data processing agreements that impose obligations consistent with the DPA.

3. Personal Data We Collect

jollybet collects the following categories of personal data:

3.1 Identity & Registration Data

• Full legal name as it appears on a government-issued Philippine identification document;
• Date of birth (for mandatory age verification — players must be 21 years or older);
• Registered email address and account username;
• Mobile phone number;
• Nationality and country of residence;
• Government-issued ID number and type (e.g., PhilSys ID, passport, driver's licence, UMID, SSS/GSIS).

3.2 Financial Data

• GCash or PayMaya mobile wallet identifiers (masked);
• Bank account details where applicable (BPI, BDO, Metrobank, UnionBank) — stored in tokenised form only;
• Transaction history including deposits, withdrawals, and bonus activity;
• Source of funds declarations where required by PAGCOR AML compliance obligations.

3.3 Gameplay & Behavioural Data

• Game session data including games played, bets placed, outcomes, and session duration;
• Bonus and promotion usage and wagering data;
• Responsible gaming tool usage and limit settings.

3.4 Technical & Device Data

• IP address and geolocation data (country and city level);
• Device type, operating system, and browser version;
• Cookies, session identifiers, and similar tracking technologies (see Section 10);
• Login timestamps and session activity logs.

3.5 Communications Data

• Records of communications with jollybet Customer Support via Live Chat or email;
• Survey responses, feedback submissions, and complaint records.

Category	Examples	Sensitivity
Identity	Full name, DOB, government ID	High
Financial	GCash/PayMaya ID, bank account (tokenised)	High
Gameplay	Bet history, game logs, session data	Medium
Technical	IP address, device type, cookies	Low–Medium
Communications	Support chat logs, complaint records	Medium

4. How We Collect Personal Data

jollybet collects personal data through the following means:

• Direct submission: Data you provide during account registration, KYC verification, deposit or withdrawal requests, and support interactions;
• Automated collection: Technical data collected passively as you use the Platform, including via cookies, server logs, and device fingerprinting technologies;
• Third-party sources: Identity verification agencies, payment processors, and fraud prevention providers may share data with jollybet as part of verification workflows required by PAGCOR;
• PAGCOR and regulatory bodies: Where regulatory compliance requires, jollybet may receive or transmit data to or from PAGCOR as the competent licensing authority.

5. Legal Basis for Processing

jollybet processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Performance of a contract: Processing necessary to operate your jollybet Account, process deposits and withdrawals, and provide gaming services;
• Compliance with a legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and NPC requirements;
• Consent: Processing based on your freely given, specific, and informed consent at the time of registration, particularly in relation to marketing communications and optional data collections;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests do not override your fundamental rights.

6. How We Use Your Personal Data

jollybet uses collected personal data for the following purposes:

• Account creation, identity verification, and ongoing KYC compliance;
• Processing deposits and withdrawals via GCash, PayMaya, and Philippine banking channels;
• Operating and providing all gaming services on the Platform;
• Administering bonuses, promotions, and responsible gaming tools;
• Detecting, investigating, and preventing fraud, collusion, and money laundering in compliance with AMLA obligations;
• Complying with PAGCOR reporting requirements and responding to lawful regulatory requests;
• Sending account-related communications including transaction confirmations, security alerts, and verification requests;
• Sending marketing communications where you have provided explicit consent (withdrawable at any time);
• Improving Platform performance through anonymised analytics and usage data;
• Handling customer support enquiries and resolving complaints.

7. Data Sharing & Disclosure

[7.1] jollybet does not sell, rent, or trade your personal data to any third party for their own commercial purposes.

[7.2] jollybet may share personal data with the following categories of recipients, strictly for the purposes described in Section 6:

• PAGCOR and Philippine regulatory authorities: As required under our gaming licence and applicable law;
• Payment processors: GCash, PayMaya, and Philippine bank payment gateways, for the purpose of processing transactions;
• KYC and identity verification providers: For mandatory age and identity verification;
• Fraud and AML screening providers: To screen against sanctions lists and detect suspicious activity as required by the Anti-Money Laundering Council (AMLC);
• Cloud and hosting infrastructure providers: Who provide the technical infrastructure on which the Platform operates, under binding data processing agreements;
• Legal and professional advisers: Where necessary for legal proceedings, compliance, or regulatory investigations.

[7.3] All third-party processors engaged by jollybet are contractually required to implement data protection measures consistent with the DPA and to process personal data only on jollybet's documented instructions.

8. Data Retention

jollybet retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods imposed by Philippine law and PAGCOR requirements:

• Account and identity data: Retained for a minimum of five (5) years following account closure, as required under AMLA regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gameplay and session logs: Retained for a minimum of twelve (12) months from the session date for dispute resolution purposes, and thereafter in anonymised aggregate form;
• Support communications: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until withdrawal of consent plus three (3) years.

Upon expiry of the applicable retention period, personal data will be securely destroyed or irreversibly anonymised.

9. Security Measures

jollybet implements technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial credentials and identity document data;
• Access controls limiting data access to authorised personnel on a need-to-know basis;
• Regular security assessments and penetration testing;
• Multi-factor authentication for administrative system access;
• Anomaly detection and real-time monitoring for suspicious login activity on Player accounts.

Notwithstanding these measures, no internet-based platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to contact jollybet immediately if they suspect their account has been compromised.

10. Cookies & Tracking Technologies

jollybet uses cookies and similar technologies (including local storage and session identifiers) to operate the Platform, authenticate users, maintain session state, and collect anonymised analytics data. Cookies used by jollybet fall into the following categories:

• Strictly necessary cookies: Essential to the operation of the Platform, including session authentication and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Store your preferences such as language settings and responsible gaming tool configurations.
• Analytics cookies: Collect anonymised data on how Players use the Platform to help us improve performance and usability. No personally identifiable data is included in analytics payloads.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in to your jollybet account.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jollybet:

• Right to be informed: The right to know what personal data jollybet holds about you and how it is used — as described in this Policy;
• Right of access: The right to request a copy of the personal data jollybet holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure (right to be forgotten): The right to request deletion of your personal data, subject to retention obligations under PAGCOR and AMLA requirements;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to object: The right to object to processing based on legitimate interests, including direct marketing;
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact jollybet's Customer Support via the 24/7 Live Chat facility. jollybet will respond to data subject requests within thirty (30) days. Where requests are complex or numerous, this period may be extended by a further sixty (60) days with notice provided to you.

12. Children's Privacy

The jollybet Platform is strictly for persons aged 21 years or older. jollybet does not knowingly collect personal data from minors. Any account found to have been created by or on behalf of a person under 21 will be immediately closed and all associated data deleted or returned to the verified payment source, as required by PAGCOR regulations. If you believe a minor has registered on the Platform, please contact jollybet's Customer Support immediately.

13. Changes to This Privacy Policy

jollybet reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, PAGCOR requirements, or our data processing practices. Material changes will be communicated to registered Players via email or Platform notification prior to the effective date of the change. Continued use of the Platform following notification constitutes acceptance of the updated Policy. The version number and effective date at the top of this Policy will be updated accordingly.

14. Contact & Complaints

For questions about this Privacy Policy or to exercise your data subject rights, contact jollybet Customer Support via the 24/7 Live Chat available on the Platform. Written enquiries may be submitted to the support email address displayed in the site footer — please include your account username and the subject matter of your request.

If you believe jollybet has failed to comply with its obligations under the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Complaints to the NPC may be filed through the official NPC website or by mail to the NPC's offices in Quezon City.