jiaaa Privacy Policy

1 Who We Are

jiaaa ("jiaaa," "we," "us," or "the Platform") is an online casino and sports betting platform operating at jiaaa.net, serving Filipino players under the PAGCOR-regulated online gaming framework. jiaaa is the data controller responsible for the personal data collected through the jiaaa website and all associated services.

As the data controller, jiaaa determines the purposes and means of processing your personal data. We are committed to ensuring that all personal data is processed lawfully, fairly, and transparently in accordance with the Data Privacy Act of 2012 (RA 10173) and its implementing rules and regulations as overseen by the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all players who register for, access, or use the jiaaa platform, including through any desktop browser or mobile-optimized interface. It covers all personal data collected from the point of initial registration through the lifecycle of your jiaaa account.

2 Personal Data We Collect

jiaaa collects the following categories of personal data from players:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification document details (e.g., Philippine passport number, driver's license number, UMID, National ID).
• Contact Data: Registered email address, Philippine mobile phone number, and residential address (including city, province, and postal code).
• Financial Data: GCash-registered mobile number, Maya account details, bank account names and numbers (BPI, BDO, Metrobank) used for deposits and withdrawals. jiaaa does not store full payment card numbers.
• Account Data: Username, hashed password, account registration date, login history, device identifiers, and IP address logs.
• Transaction Data: Records of all deposits, withdrawals, bonus claims, wagering activity, game participation history, and bet settlement records.
• KYC Verification Data: Copies of government-issued identity documents, proof of payment method ownership, and any additional documents submitted to satisfy jiaaa's Know Your Customer (KYC) obligations.
• Technical Data: Device type, operating system, browser type and version, screen resolution, referring URL, and session duration data collected automatically when you access the jiaaa platform.
• Communication Data: Records of live chat transcripts, email correspondence, and support tickets submitted to jiaaa's customer service team.
• Responsible Gaming Data: Self-imposed deposit limits, loss limits, session time reminders, and any self-exclusion requests submitted through your jiaaa account settings.

jiaaa does not intentionally collect sensitive personal information — such as health data, biometric data, or political opinions — unless strictly required for identity verification or legal compliance purposes, in which case explicit consent will be sought.

3 How We Collect Your Data

jiaaa collects personal data through the following methods:

• Direct Submission: Data you provide when completing the jiaaa registration form, submitting KYC documents, making a deposit or withdrawal request, contacting jiaaa support, or participating in a jiaaa promotion.
• Automated Collection: Technical data collected automatically when you browse or interact with the jiaaa platform, including via cookies, session tokens, server logs, and analytics tools. See Section 7 for full details on cookies and tracking.
• Payment Providers: Transactional confirmation data received from GCash, Maya, BPI, BDO, and Metrobank when you initiate a deposit or withdrawal through the jiaaa cashier. jiaaa receives transaction reference numbers and status confirmations — not your full payment credentials.
• Identity Verification Services: Data received from third-party KYC and identity verification service providers engaged by jiaaa to cross-check the accuracy of identity documents submitted by players.
• Fraud and AML Screening: Data received from anti-fraud and anti-money laundering screening services used by jiaaa to comply with RA 9160 and related PAGCOR requirements.

4 Why We Use Your Personal Data

jiaaa uses the personal data it collects for the following specific purposes:

• Account Registration and Management: To create, maintain, and administer your jiaaa player account, including authentication, account recovery, and account closure.
• Identity Verification (KYC): To verify that you meet the 21+ age requirement and to confirm your identity as required by PAGCOR regulations and Philippine AML law before processing any withdrawal.
• Payment Processing: To process your deposits and withdrawals via GCash, Maya, and Philippine bank transfers, and to maintain accurate transaction records.
• Regulatory Compliance: To fulfill jiaaa's obligations under PAGCOR's online gaming framework, the Anti-Money Laundering Act (RA 9160), and any other applicable Philippine law or regulatory requirement, including the filing of mandatory reports to relevant government authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the jiaaa platform.
• Customer Support: To respond to your support requests, resolve disputes, and communicate important account-related information.
• Platform Improvement: To analyze aggregated and anonymized usage data to improve the performance, security, and user experience of the jiaaa platform for Filipino players.
• Responsible Gaming: To administer and enforce self-imposed responsible gaming tools, including deposit limits, loss limits, and self-exclusion requests, and to identify and reach out to players who may be exhibiting signs of problematic gambling behavior.
• Marketing Communications: To send you promotional offers, bonus notifications, and news about jiaaa — but only where you have given your consent or where jiaaa has a legitimate interest to do so. You may opt out of marketing communications at any time.

5 Legal Basis for Processing

jiaaa processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 (RA 10173):

• Contractual Necessity: Processing that is necessary to perform jiaaa's obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with jiaaa's obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself — such as KYC identity verification and AML transaction monitoring.
• Legitimate Interests: Processing for purposes such as fraud prevention, platform security, and platform improvement, where jiaaa's legitimate business interests are not overridden by your privacy rights and interests.
• Consent: Processing for optional purposes, such as marketing communications and non-essential cookies, for which jiaaa will seek your explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

jiaaa does not sell your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality and data processing agreements:

• Payment Service Providers: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, and Metrobank — to process your deposits and withdrawals. These providers act as independent data controllers for transactions processed through their own systems.
• Game and Software Providers: Licensed game studios and platform software providers that supply the games and technology infrastructure powering the jiaaa platform. Data shared is limited to what is necessary for game provision and fairness auditing.
• KYC and Identity Verification Providers: Third-party identity verification services engaged by jiaaa to confirm player identity documents as part of the KYC process.
• Fraud Prevention and AML Service Providers: Third-party screening services used to detect and prevent fraud, money laundering, and other prohibited activity on the jiaaa platform.
• Philippine Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulation.
• Legal and Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by jiaaa, under strict confidentiality obligations.

All third-party service providers engaged by jiaaa are required to process personal data only in accordance with jiaaa's instructions and in compliance with applicable Philippine data protection law. jiaaa remains responsible for the security of your data when shared with these service partners.

7 Cookies & Tracking Technologies

jiaaa uses cookies and similar tracking technologies on its platform to deliver a secure and personalized experience for Filipino players. The types of cookies used by jiaaa include:

• Strictly Necessary Cookies: Essential session and authentication cookies that enable core platform functionality — such as maintaining your logged-in session, remembering your preferred language, and securing your account. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Cookies that collect aggregated, anonymized data about how players interact with the jiaaa platform — such as which pages are visited most frequently and how long sessions last. This data is used solely to improve the platform experience and is not used to identify individual players.
• Functional Cookies: Cookies that remember your preferences and settings — such as your chosen game category, display settings, and responsible gaming tool configurations — so that you do not need to reconfigure them on every visit.
• Marketing and Targeting Cookies: Cookies used to deliver relevant jiaaa promotional content. These cookies are only placed with your explicit consent. You may withdraw consent and disable marketing cookies at any time through your browser settings.

You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may prevent you from accessing certain features of the jiaaa platform. jiaaa does not use cookies to collect personal data beyond what is described in this section.

8 Data Security

jiaaa implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the jiaaa platform.
• Hashing of all account passwords using industry-standard cryptographic algorithms. jiaaa never stores passwords in plaintext.
• OTP (one-time password) and multi-factor authentication for account login and sensitive account changes.
• Role-based access controls ensuring that jiaaa staff can only access player data to the extent necessary for their specific job function.
• Regular security audits, penetration testing, and vulnerability assessments of the jiaaa platform infrastructure.
• Encrypted storage of all KYC documents and financial data at rest.
• Incident response procedures to detect, contain, and report personal data breaches to the National Privacy Commission within the required timeframe, and to notify affected players where required by law.

While jiaaa takes all reasonable precautions to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own jiaaa login credentials and for notifying jiaaa immediately if you suspect unauthorized access to your account.

9 Data Retention

jiaaa retains your personal data for as long as is necessary to fulfill the specific purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory requirements. The following general retention periods apply:

• Account Data: Retained for the duration of your active jiaaa account, and for a period of at least five (5) years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of submission or from the date of account closure, whichever is later, in compliance with AML regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with PAGCOR and AMLC requirements.
• Support and Communication Records: Retained for three (3) years from the date of the last communication, or longer where required in connection with an unresolved dispute or investigation.
• Marketing Consent Records: Retained for the duration of your account and for three (3) years following withdrawal of consent, to maintain an auditable record of consent history.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be associated with an identifiable individual. Where deletion is requested by a player prior to the expiry of a mandatory retention period, jiaaa will restrict access to the data rather than delete it until the retention obligation has been fulfilled.

10 Children & Minors

The jiaaa platform is strictly intended for persons who are at least 21 years of age in accordance with Philippine gambling law. jiaaa does not knowingly collect personal data from individuals under the age of 21. If jiaaa discovers that personal data has been submitted by a person under the age of 21, the account will be immediately suspended, the data will be deleted (except to the extent required for regulatory reporting), and any deposits will be returned in accordance with jiaaa's Terms & Conditions.

If you are a parent or guardian and you believe that a minor under your care has registered on the jiaaa platform or submitted personal data to jiaaa, please contact jiaaa support immediately using the contact details in Section 14. jiaaa takes the protection of minors from gambling harm extremely seriously and will act promptly on any such report.

11 Cross-Border Data Transfers

jiaaa's primary operations and data processing activities are based in the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers or game studios located outside the Philippines — for example, game software providers whose servers are based in other jurisdictions.

Where such cross-border data transfers occur, jiaaa ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to the protections required under the Philippine Data Privacy Act of 2012. These safeguards may include binding contractual clauses, data processing agreements, and transfers to jurisdictions recognized by the NPC as providing an adequate level of data protection.

jiaaa will not transfer your personal data to any jurisdiction or service provider that does not offer adequate data protection safeguards without your prior explicit consent, unless the transfer is required by Philippine law or PAGCOR regulation.

12 How to Exercise Your Data Rights

To exercise any of your data subject rights described in the summary section above — including the right to access, correct, erase, object to, or port your personal data — please contact jiaaa's Data Protection Officer (DPO) using the contact details provided in Section 14 of this Policy.

When submitting a data rights request, please include:

• Your full name and registered jiaaa username or email address.
• A clear description of the right you wish to exercise and the specific data concerned.
• A copy of a valid Philippine government-issued ID for identity verification purposes.

jiaaa will acknowledge your request within five (5) business days and will respond fully within thirty (30) calendar days of receiving a complete and verifiable request. In complex cases, this period may be extended by an additional thirty (30) days, of which you will be notified. jiaaa will not charge a fee for standard data rights requests unless a request is manifestly unfounded, repetitive, or excessive.

If you believe that jiaaa has not adequately addressed your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.

13 Changes to This Privacy Policy

jiaaa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or the services offered on the jiaaa platform. When material changes are made, jiaaa will notify registered players via a prominent notice on the platform or by email to the registered account address, at least seven (7) days before the changes take effect.

The Effective Date at the top of this Policy indicates when the current version was last updated. Your continued use of the jiaaa platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should cease using the jiaaa platform and request account closure.

All previous versions of this Privacy Policy are superseded by the current version. jiaaa maintains an archive of previous Privacy Policy versions, which is available upon request by contacting jiaaa's Data Protection Officer.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or jiaaa's personal data processing practices, please contact jiaaa's designated Data Protection Officer (DPO) using the following details:

• Live Chat: Available 24 hours a day, 7 days a week via the jiaaa platform — the fastest way to reach jiaaa support for urgent account or data concerns.
• Support & DPO Email: [email protected] — mark your subject line as "Data Privacy Request" for prioritized routing to the DPO team.
• Response Time: Within 2 hours for standard support queries; within 5 business days for formal data subject rights requests.
• Languages: English and Tagalog