jiboss Privacy Policy

This Privacy Policy ("Policy") is issued by jiboss ("jiboss," "we," "us," "our") and governs the collection, use, disclosure, and protection of personal data obtained from individuals ("you," "data subject," "player") who access or use the jiboss website at jiboss.club and all associated services, including but not limited to account registration, gaming services, promotions, customer support, and payment processing.

jiboss is committed to protecting the privacy and personal data of all players, in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and such other applicable data protection laws and regulations as may govern our operations.

This Policy applies to all personal data processed by jiboss in connection with the jiboss platform, regardless of the device or channel through which you access our services. It does not apply to third-party websites, payment processors, or game providers whose own privacy policies govern their respective data practices.

For the purposes of the Philippine Data Privacy Act, jiboss is the Personal Information Controller with respect to the personal data of registered players and platform users. jiboss determines the purposes and means of processing personal data collected through the jiboss platform.

Where jiboss engages third-party service providers — such as payment processors, game providers, identity verification services, or cloud infrastructure providers — those parties process personal data as Personal Information Processors on behalf of and under instruction from jiboss. jiboss remains accountable for ensuring that all processors implement appropriate data protection measures consistent with this Policy and applicable Philippine law.

For inquiries regarding data processing or to exercise your rights under this Policy, please contact the jiboss Data Privacy Officer through the contact details provided in Section 15 of this Policy.

jiboss collects the following categories of personal data, depending on how you interact with the platform:

jiboss collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal request, contact customer support, or respond to surveys or promotions.
• Automatically: Through cookies, web beacons, server logs, and similar technologies when you access the jiboss platform. This includes technical and usage data such as your IP address, session data, and device identifiers. See Section 8 (Cookies & Tracking) for details.
• From third parties: From payment service providers (e.g., GCash, Maya, BPI, BDO, Metrobank) in connection with deposit and withdrawal transactions; from identity verification service providers in connection with KYC checks; from fraud prevention and AML screening services where required by Philippine regulations.

Under the Philippine Data Privacy Act, jiboss processes your personal data on the following legal bases, depending on the specific processing activity:

• Contractual Necessity: Processing required to fulfil the jiboss Terms & Conditions you agreed to upon registration, including account management, game access, deposit and withdrawal processing, and customer support.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (AMLA), PAGCOR guidelines, the DPA itself, and lawful requests from government authorities.
• Consent: Where you have given your explicit consent, such as for the receipt of promotional communications. You may withdraw consent for marketing communications at any time by updating your notification preferences in your account settings.
• Legitimate Interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement activities, where such processing does not override your fundamental rights as a data subject.

jiboss uses your personal data for the following purposes:

• To create, maintain, and administer your jiboss account
• To process deposits and withdrawals through your nominated Philippine payment methods (GCash, Maya, BPI, BDO, Metrobank, etc.)
• To verify your identity and age (21+) in compliance with KYC and AML requirements
• To provide access to games, promotions, and all features of the jiboss platform
• To detect, investigate, and prevent fraud, money laundering, account takeovers, and other unauthorized activities
• To provide customer support and respond to your inquiries and complaints
• To send you transactional communications (account activity, deposit and withdrawal notifications, security alerts) which are necessary for the operation of your account
• To send you marketing and promotional communications, where you have consented to receiving them
• To monitor your gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling, in accordance with our Responsible Gaming Policy
• To comply with legal and regulatory obligations, including reporting requirements under Philippine AML law
• To analyze platform usage and improve the jiboss platform, products, and services

jiboss does not sell, rent, or trade your personal data. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, GrabPay, and other payment processors receive transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy obligations under Philippine law.
• Identity & KYC Verification Providers: Third-party identity verification services may process your identity documents and biometric data for the purpose of completing KYC verification, under strict confidentiality agreements.
• Game Providers: Game studios and platform providers (e.g., Evolution Gaming, Pragmatic Play, JILI Gaming) receive session data necessary to deliver game services. Game providers do not receive your financial or identity data.
• Fraud Prevention & AML Services: Third-party fraud screening and AML compliance services may receive account and transaction data for risk assessment purposes.
• Cloud Infrastructure & IT Providers: Our hosting, database, and IT security partners process technical data in the course of maintaining the jiboss platform infrastructure.
• Legal & Regulatory Authorities: jiboss will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), law enforcement agencies, courts, or other government bodies where required by Philippine law, a valid court order, or a lawful regulatory request.
• Business Transfers: In the event of a merger, acquisition, restructuring, or sale of jiboss or its assets, personal data may be transferred to the acquiring entity, subject to continued compliance with this Policy.

All third parties who receive personal data from jiboss are required to maintain appropriate data security measures and use the data solely for the specified purpose. jiboss does not permit third-party processors to use your personal data for their own marketing purposes.

jiboss uses cookies and similar tracking technologies — including web beacons, pixel tags, and local storage objects — to operate and improve the platform. Cookies are small data files stored on your device when you visit jiboss.club.

jiboss uses the following types of cookies:

• Strictly Necessary Cookies: Required for the operation of the jiboss platform, including maintaining your login session, remembering your account preferences, and enabling core security functions. These cookies cannot be disabled without impairing platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized data about how players use the jiboss platform — including which pages are visited, how long sessions last, and where technical errors occur — for the purpose of improving platform performance and user experience.
• Functionality Cookies: Used to remember your preferences such as language settings, responsible gaming limit configurations, and display preferences, to provide a more personalized experience.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized account access, and other security threats, including identifying unusual login patterns and session anomalies.

You may configure your browser to refuse or delete non-essential cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging in to your jiboss account and using core platform features.

jiboss retains your personal data only for as long as necessary to fulfil the purposes described in this Policy or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, jiboss will securely delete or anonymize your personal data in a manner that renders it non-attributable to you. Where anonymization is used, the resulting data may be retained for statistical analysis purposes indefinitely.

jiboss implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data in transit between your device and jiboss servers is encrypted using 256-bit Transport Layer Security (TLS). Sensitive data at rest — including KYC documents and financial records — is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to jiboss personnel and contractors who require it to perform their job functions. Access is governed by the principle of least privilege and is subject to audit logging.
• Two-Factor Authentication: jiboss supports and strongly recommends two-factor authentication (2FA) for all player accounts to reduce the risk of unauthorized access resulting from compromised credentials.
• Security Monitoring: jiboss employs continuous security monitoring, intrusion detection systems, and periodic security assessments to identify and remediate potential vulnerabilities.
• Breach Response: In the event of a personal data breach that poses a real risk of harm to data subjects, jiboss will notify the National Privacy Commission (NPC) within 72 hours of discovery and will notify affected individuals without undue delay, in accordance with NPC Circular No. 16-03 and related regulations.

Under the Philippine Data Privacy Act and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by jiboss:

To exercise any of your rights under this Policy, please submit a written request to the jiboss Data Privacy Officer using the contact details in Section 15. jiboss may require identity verification before processing your request to ensure the security of your personal data.

The jiboss platform is strictly for persons who are 21 years of age or older, as required by Philippine gaming regulations. jiboss does not knowingly collect personal data from persons under the age of 21. Age verification is a mandatory component of the jiboss KYC process, and accounts belonging to minors will be suspended immediately upon discovery.

In connection with the operation of the jiboss platform, some personal data may be processed by third-party service providers located outside the Philippines — including cloud infrastructure providers, game studios, and technical service partners operating internationally.

Where personal data is transferred outside the Philippines, jiboss ensures that appropriate safeguards are in place to protect your data in accordance with the requirements of the Philippine Data Privacy Act. Such safeguards may include contractual data processing agreements incorporating standard data protection clauses, or reliance on the recipient country's adequacy for data protection as determined by the NPC.

jiboss does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual or technical safeguards. If you have questions about the specific safeguards applicable to cross-border transfers involving your personal data, please contact the jiboss Data Privacy Officer.

jiboss reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

For material changes to this Policy — particularly those that affect how your personal data is used or shared — jiboss will provide advance notice via email to your registered address or via a prominent notice on the jiboss platform, at least fourteen (14) calendar days before the changes take effect. For non-material or administrative updates, jiboss may update this Policy without prior notice, and the updated version will take effect upon publication.

Your continued use of the jiboss platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you should close your account and cease using the platform before the revised Policy takes effect.

jiboss has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have questions about how jiboss processes your personal data, wish to exercise your data subject rights, or wish to submit a privacy complaint, please contact us as follows:

Data Privacy Officer — jiboss

Email: [email protected] (plain text — not a clickable link)

Live Chat: Available 24/7 via the jiboss platform — ask to be connected to the Data Privacy Officer for privacy-related matters

When submitting a privacy request or complaint, please include: your full registered name, your jiboss account username, a description of your request or the nature of your complaint, and, where applicable, the specific personal data concerned and the right you wish to exercise.

jiboss will acknowledge all privacy requests within five (5) business days and will endeavor to resolve all requests within thirty (30) calendar days. Complex requests may require additional time, in which case jiboss will notify you of the expected resolution timeline.