joliok Privacy Policy

1. Introduction

joliok ("joliok," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy ("Policy") describes how joliok collects, uses, stores, shares, and protects personal information in connection with your use of the joliok website, mobile platform, games, and all related services (collectively, the "Platform").

This Policy applies to all users of the joliok Platform, including registered players, visitors who browse without registering, and individuals who contact joliok's support team. It should be read together with joliok's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference.

joliok operates in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations. By using the joliok Platform, you consent to the collection and processing of your personal data as described in this Policy.

2. Personal Data We Collect

joliok collects the following categories of personal data from players and Platform visitors:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, province, postal code)
• Nationality and country of residence

2.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or facial image submitted for identity verification purposes
• Source of funds documentation where required by applicable regulations

2.3 Financial & Transaction Data

• Payment method details (GCash account reference, PayMaya account reference, bank account name and last four digits, card type and last four digits)
• Deposit and withdrawal transaction history
• Account balance history
• Bonus and promotion redemption records

2.4 Gaming Activity Data

• Game session logs including game type, wager amounts, outcomes, and timestamps
• Betting history across all joliok game categories
• Responsible gaming tool usage (deposit limits set, session reminders activated, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser type
• Mobile network operator (e.g., Globe, Smart, DITO)
• Session duration and login timestamps
• Cookie identifiers and similar tracking technologies (see Section 9)

2.6 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with joliok's support team
• Feedback and survey responses submitted voluntarily

3. How We Collect Your Data

joliok collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions.
• Automated collection: Technical and device data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; geolocation data from IP intelligence services used to enforce jurisdictional restrictions.
• Payment processors: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard payment networks, limited to what is necessary to process and reconcile transactions.

4. Purpose of Processing

joliok processes your personal data for the following specific purposes:

joliok does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by applicable law or regulation.

5. Legal Basis for Processing

joliok processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its implementing rules:

• Contractual necessity: Processing required to perform the contract between you and joliok — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, age verification requirements, and gaming regulatory obligations.
• Legitimate interests: Processing necessary for joliok's legitimate interests in fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing for optional purposes such as promotional communications, where you have given explicit, informed, and freely withdrawable consent. You may withdraw consent at any time by contacting [email protected].

6. Sharing Your Personal Data

joliok does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. joliok may share your personal data only in the following limited circumstances:

6.1 Service Providers

joliok engages trusted third-party service providers who process personal data on joliok's behalf under strict data processing agreements. These include KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard networks), fraud detection services, cloud hosting providers, and customer support platform operators. All service providers are contractually bound to process data only as instructed by joliok and to maintain appropriate security standards.

6.2 Regulatory and Law Enforcement Authorities

joliok may disclose personal data to Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts where required by applicable law, regulation, or valid legal process.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of joliok's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy . joliok will notify registered players via email prior to any such transfer taking effect.

6.4 Cross-Border Transfers

Some of joliok's service providers may be located outside the Philippines. Where personal data is transferred internationally, joliok ensures that appropriate safeguards are in place — including contractual clauses that meet the standards required by the Data Privacy Act of 2012 — to protect your data to the same standard as within the Philippines.

7. Data Retention

joliok retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in accordance with Philippine anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming activity logs: Retained for three (3) years from the date of each session, or longer if required for dispute resolution or regulatory purposes.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Cookie and technical data: Retained in accordance with the cookie lifespans described in Section 9, and server logs for up to twelve (12) months.

Upon expiry of the applicable retention period, joliok will securely delete or anonymise your personal data in a manner that prevents reconstruction or identification.

8. Data Security

joliok implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the joliok Platform.
• Encryption of sensitive data fields at rest, including payment method references and identity document data.
• Role-based access controls ensuring that joliok staff can only access personal data necessary for their specific job function.
• Multi-factor authentication requirements for all joliok administrative systems.
• Regular security assessments, penetration testing, and vulnerability scanning of the Platform infrastructure.
• Incident response procedures designed to detect, contain, and notify affected players of any personal data breach within the timeframes required by the National Privacy Commission.

9. Cookies & Tracking Technologies

joliok uses cookies and similar tracking technologies to operate the Platform, remember your preferences, detect fraud, and understand how players use our services. The following categories of cookies are used:

9.1 Strictly Necessary Cookies

These cookies are essential for the Platform to function. They enable core features such as session management, login authentication, and security token validation. These cookies cannot be disabled without breaking core Platform functionality.

9.2 Functional Cookies

These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming limits — so you do not need to re-enter them on each visit. They are set only with your consent.

9.3 Analytics Cookies

joliok uses anonymised analytics data to understand how players navigate the Platform, which games are most popular, and where technical issues occur. This data is aggregated and does not identify individual players. Analytics cookies are set only with your consent.

9.4 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the joliok Platform. For full details on the specific cookies joliok uses and their individual lifespans, please refer to the cookie consent banner displayed on your first visit to the Platform.

10. Your Data Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by joliok. To exercise any of these rights, contact our Data Protection Officer at [email protected] with the subject line "Data Rights Request." joliok will respond within thirty (30) days of receiving a verified request.

11. Minors & Age Restriction

The joliok Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. joliok does not knowingly collect personal data from individuals under the age of 21.

If joliok discovers or has reasonable grounds to believe that personal data has been collected from a person under 21 years of age, joliok will immediately close the relevant account, delete the associated personal data, and return any deposited funds to the payment source used, in accordance with joliok's Terms & Conditions.

12. Changes to This Privacy Policy

joliok reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, joliok will notify registered players via email and/or a prominent notice on the Platform at least seven (7) days before the changes take effect, where reasonably practicable.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the joliok Platform after the effective date of any revised Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how joliok protects your data.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or joliok's handling of your personal data, please contact our Data Protection Officer (DPO):

• Email: [email protected] (subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 via the chat icon on any joliok page
• Response Time: Within 30 days for formal data rights requests; under 2 minutes average for live chat queries
• Support Language: English only, aligned to Philippine Standard Time (PST, UTC+8)

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data rights have been violated.