jelly77 Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how jelly77 ("jelly77", "the Platform", "we", "us", "our") collects, uses, stores, shares, and protects personal information provided by or collected from users ("Player", "you", "your") of the jelly77 online casino and sports betting platform accessible at jelly77.app.

jelly77 is committed to protecting the privacy and personal data of all Filipino players who use the Platform. This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected through the jelly77 website, mobile application, customer support channels, and any other service or touchpoint operated by jelly77. It should be read alongside the jelly77 Terms and Conditions, which are incorporated herein by reference.

2 Data Controller

jelly77 acts as the personal information controller ("PIC") in respect of personal data collected from players and visitors to the Platform. As the PIC, jelly77 determines the purposes and means by which your personal data is processed and bears primary responsibility for ensuring that processing is conducted lawfully and in accordance with this Policy.

jelly77 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Policy. Players may contact the DPO directly with any data privacy concern or request by writing to the contact address provided in Section 15 of this Policy.

3 Data We Collect

jelly77 collects the following categories of personal data from players and Platform visitors:

jelly77 does not collect sensitive personal information beyond what is required for identity verification purposes (such as government ID data required for KYC). We do not collect information relating to health, racial or ethnic origin, political opinions, or religious beliefs unless strictly required by law.

4 How We Collect Your Data

jelly77 collects personal data through the following channels and means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to a survey.
• Automated technologies: Technical data collected automatically when you access the Platform, including cookies, web beacons, session logs, and similar tracking technologies (see Section 10 for details).
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BDO, BPI, Metrobank, and other payment partners when you conduct financial transactions on the Platform.
• Identity verification providers: Results of identity and age verification checks conducted by third-party KYC service providers acting as personal information processors under jelly77's instruction.
• Regulatory sources: Information received from PAGCOR or other Philippine government authorities in connection with regulatory compliance, responsible gaming programmes, or self-exclusion registries.

5 Legal Basis for Processing

jelly77 processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and jelly77 — specifically, to operate your account, process deposits and withdrawals, deliver gameplay, and provide customer support.
• Legal obligation: Processing required to comply with applicable Philippine law, including anti-money laundering (AML) obligations under Republic Act No. 9160, PAGCOR regulatory requirements, age verification mandates, and tax reporting obligations.
• Legitimate interests: Processing conducted for jelly77's legitimate business interests where these are not overridden by your privacy rights, including fraud prevention, Platform security, and service improvement analytics.
• Consent: Processing based on your freely given, specific, and informed consent — primarily in the context of marketing communications. You may withdraw consent at any time by contacting jelly77 support or updating your communication preferences in your account settings.

6 How We Use Your Data

jelly77 uses collected personal data for the following specific purposes:

• To create, verify, and manage your jelly77 player account.
• To verify your identity and age (21+) in compliance with PAGCOR requirements and Philippine law.
• To process deposits, withdrawals, and all financial transactions in Philippine Peso via GCash, PayMaya, BDO, BPI, and Metrobank.
• To deliver gameplay, personalise your gaming experience, and track your gaming activity for responsible gaming monitoring purposes.
• To detect, investigate, and prevent fraudulent transactions, bonus abuse, money laundering, and other prohibited activities.
• To communicate with you regarding your account, transactions, security alerts, and changes to jelly77 policies.
• To send you promotional offers, bonuses, and personalised recommendations — only where you have provided consent for marketing communications.
• To comply with mandatory reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory bodies.
• To respond to your customer support enquiries and resolve complaints.
• To improve the Platform, analyse usage patterns, and develop new features and services.

7 Data Sharing & Disclosure

jelly77 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• PAGCOR and Philippine regulatory authorities: jelly77 is required to submit player data, transaction records, and gaming activity reports to PAGCOR and other authorities as mandated by Philippine gaming regulations and AML law.
• Payment processors: Financial data is shared with GCash, PayMaya, BDO, BPI, Metrobank, and other payment partners solely to process your deposit and withdrawal transactions.
• KYC and identity verification providers: Identity documents and verification data are shared with licensed third-party KYC providers acting under strict data processing agreements to verify your identity and age.
• Technology and platform service providers: jelly77 engages technology vendors (e.g., cloud hosting, cybersecurity, analytics) who may process personal data on our behalf as personal information processors under binding contractual data protection terms.
• Law enforcement and courts: jelly77 may disclose personal data to law enforcement agencies, courts, or other government bodies where required by a lawful order, warrant, or legal obligation under Philippine law.
• Professional advisers: Lawyers, auditors, and compliance advisers may access personal data on a need-to-know basis under professional confidentiality obligations.

All third parties with whom jelly77 shares personal data are required to handle that data in compliance with the Philippine Data Privacy Act and in accordance with jelly77's data processing agreements.

8 Data Retention

jelly77 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and Philippine AML law.
• Financial transaction records: Retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act (RA 9160) and PAGCOR record-keeping requirements.
• Gaming activity data: Retained for the duration of your account and for up to five (5) years thereafter for regulatory and responsible gaming compliance purposes.
• Customer support communications: Retained for up to three (3) years from the date of the interaction for quality assurance and dispute resolution purposes.
• Marketing preferences and consent records: Retained for the duration of your account plus three (3) years to maintain a record of consent given or withdrawn.
• Technical and log data: Retained for up to twelve (12) months for security and fraud monitoring purposes.

Upon expiry of the applicable retention period, jelly77 will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

9 Data Security

jelly77 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption: All data transmitted between your device and the jelly77 Platform is protected using 256-bit SSL/TLS encryption. Sensitive data stored at rest is encrypted using industry-standard algorithms.
• Access controls: Access to personal data within jelly77's systems is restricted to authorised personnel on a strict need-to-know basis. All staff with access to personal data receive data privacy training.
• Two-factor authentication (2FA): jelly77 offers 2FA for player accounts to provide an additional layer of security against unauthorised account access.
• Penetration testing and security audits: jelly77's Platform and infrastructure are subject to regular security assessments, vulnerability scanning, and penetration testing by qualified cybersecurity professionals.
• Incident response: jelly77 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in risk to affected players, jelly77 will notify the National Privacy Commission (NPC) within 72 hours of discovery and will inform affected players without undue delay, as required by the Data Privacy Act.

10 Cookies & Tracking Technologies

jelly77 uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain your session, and collect technical data for analytics and security purposes. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled.
• Functional cookies: Remember your preferences, such as your selected language, game lobby view, and notification settings, to personalise your experience across sessions.
• Analytics cookies: Collect anonymised information about how players interact with the Platform — such as pages visited, session duration, and features used — to help jelly77 improve its services.
• Security and fraud prevention cookies: Help jelly77 identify unusual patterns of activity, detect fraudulent behaviour, and enforce geographic access controls as required by PAGCOR.

You can control non-essential cookies through your browser settings or through jelly77's cookie preference centre, accessible via the cookie banner displayed on your first visit to the Platform. Please note that disabling certain cookies may affect Platform functionality.

11 Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by jelly77. You may exercise any of these rights by contacting jelly77's Data Protection Officer (see Section 15):

• Right to be informed: You have the right to be informed of how your personal data is collected, used, and processed, as set out in this Policy.
• Right of access: You have the right to obtain confirmation of whether jelly77 holds personal data about you and to receive a copy of that data.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data held by jelly77. You may update basic account information directly in your account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to jelly77's legal retention obligations under Philippine law.
• Right to object: You have the right to object to the processing of your personal data based on legitimate interests or for direct marketing purposes at any time.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: If you believe jelly77 has processed your personal data in violation of the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

jelly77 will respond to all data subject requests within ten (10) business days of receipt. In complex cases, this period may be extended by a further fifteen (15) business days, and you will be informed accordingly.

12 Children's Privacy

The jelly77 Platform is strictly intended for adults aged 21 years and above, as required by PAGCOR regulations governing online gaming in the Philippines. jelly77 does not knowingly collect personal data from individuals under the age of 21.

If jelly77 becomes aware that personal data has been collected from an individual who is under 21 years of age, the account will be immediately suspended, all personal data associated with the underage account will be deleted, and the matter will be reported to PAGCOR as required by applicable regulations.

13 Cross-Border Data Transfers

In some cases, jelly77 may transfer personal data to service providers or technology partners located outside the Philippines — for example, cloud infrastructure providers or cybersecurity vendors operating data centres in other countries. Any such cross-border transfer of personal data is conducted in compliance with the Philippine Data Privacy Act and its requirements for international data transfers.

jelly77 ensures that all cross-border data transfers are subject to appropriate safeguards, including contractual data processing agreements that require the recipient to apply a standard of data protection equivalent to or greater than that required under Philippine law. jelly77 will not transfer your personal data to countries or organisations that do not provide adequate data protection standards.

14 Policy Updates

jelly77 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, regulatory requirements, or Platform features. The "Last updated" date at the top of this Policy will be revised whenever a material change is made.

Where changes to this Policy are material — meaning they significantly affect how we collect or use your personal data or affect your privacy rights — jelly77 will notify registered players by email and by posting a prominent notice on the Platform at least seven (7) days before the revised Policy takes effect.

Your continued use of the jelly77 Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the changes and, where applicable, your consent to the updated processing practices described therein.

15 Contact Our DPO

If you have any questions, concerns, or requests relating to this Privacy Policy or the way jelly77 processes your personal data, please contact jelly77's Data Protection Officer through the following channel:

For complaints that cannot be resolved directly with jelly77, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing the Data Privacy Act.

For general account support, responsible gaming assistance, or other enquiries, please contact jelly77 customer support via live chat, available 24 hours a day, 7 days a week directly on the Platform.