joliok Privacy Policy

1 About This Privacy Policy

This Privacy Policy ("Policy") describes the privacy practices of joliok ("joliok," "we," "us," "our") in connection with the website joliok.vip, the joliok mobile application, and all associated services (collectively, the "Platform"). The Policy applies to all individuals who register an account, visit the Platform as a guest, or otherwise interact with joliok's services from the Philippines or any other accessible jurisdiction.

joliok acts as the Personal Information Controller (PIC) under Republic Act No. 10173, the Data Privacy Act of 2012, with respect to the personal data you provide or that joliok collects in connection with your use of the Platform.

By creating a joliok account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you must discontinue use of the Platform immediately.

2 Personal Data We Collect

joliok collects personal data through different channels depending on how you interact with the Platform. The categories of personal data collected include:

2.1 Registration & Account Data. When you create a joliok account, we collect your full legal name, date of birth, residential address (Philippines), registered mobile number, and email address. This data is required to establish and maintain your account.

2.2 Identity Verification (KYC) Data. To comply with Philippine anti-money-laundering regulations and PAGCOR gaming requirements, joliok may collect copies of government-issued identification documents (e.g., PhilSys National ID, UMID, Passport, Driver's License, Voter's ID), selfie photographs for liveness verification, and proof of address documentation.

2.3 Financial Data. joliok collects payment method details necessary to process deposits and withdrawals, including GCash account references, PayMaya account references, and bank account details (BDO, BPI, Metrobank, or other Philippine banks). joliok does not store full card numbers or complete banking credentials.

2.4 Transaction & Gaming Data. joliok automatically records all deposit, withdrawal, and gaming transactions associated with your account, including bet amounts, game outcomes, bonus usage, and session timestamps.

2.5 Technical & Device Data. When you access joliok, we automatically collect your IP address, device type, operating system, browser type and version, geographic location (at city level), and session logs. This data is used for security monitoring, fraud detection, and platform performance optimization.

2.6 Communications Data. If you contact joliok support via live chat, email, or other channels, we retain records of those communications to enable consistent support and resolve disputes.

2.7 Responsible Gaming Data. If you use joliok's responsible gaming tools — including deposit limits, self-exclusion requests, or cooling-off periods — we record these settings as part of your account profile to enforce your choices and comply with regulatory obligations.

3 How We Use Your Personal Data

joliok processes personal data for the following purposes:

• Account creation and management — to establish, maintain, and administer your joliok player account.
• Identity and age verification — to confirm that all registered players are at least 21 years of age and are who they claim to be, as required by Philippine gaming regulations.
• Payment processing — to process deposits, withdrawals, and refunds in Philippine Peso via your chosen payment method.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, unauthorized access, and other security threats.
• Legal and regulatory compliance — to meet joliok's obligations under Philippine law, including anti-money-laundering (AML) laws and PAGCOR gaming regulations.
• Customer support — to respond to your inquiries, resolve disputes, and process complaints.
• Platform improvement — to analyze aggregated usage data and improve the joliok platform, game selection, and user experience for Filipino players.
• Responsible gaming enforcement — to apply and monitor deposit limits, self-exclusion periods, and other responsible gaming settings you have activated.
• Promotional communications — to send you information about joliok promotions, bonuses, and offers, subject to your communication preferences. You may opt out of marketing communications at any time from your account settings.

4 Legal Basis for Processing

joliok processes your personal data on the following legal grounds under RA 10173:

• Consent: Where you have provided express consent, such as when registering your account or subscribing to marketing communications.
• Contractual necessity: Processing required to perform the contract between you and joliok, including account management, payment processing, and game access.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR requirements, and tax reporting obligations.
• Legitimate interests: Processing necessary for joliok's legitimate interests, including fraud detection, security monitoring, and platform improvement, where those interests are not overridden by your privacy rights.

5 Data Sharing & Third-Party Disclosure

joliok does not sell your personal data to third parties. joliok may share your personal data with the following categories of recipients strictly for the purposes described in this Policy:

• Payment service providers (e.g., GCash, PayMaya, Philippine banks) — to process financial transactions on your behalf.
• Game content providers — limited technical identifiers may be shared with licensed game studios to deliver game content and resolve game disputes.
• Identity verification providers — third-party KYC service providers who assist joliok in verifying player identity and age.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or a lawful order.
• IT and security service providers — cloud hosting, cybersecurity, and fraud detection vendors who process data on joliok's behalf under strict data processing agreements.

All third parties who receive joliok player data are bound by contractual data protection obligations and are prohibited from using the data for any purpose other than the specific service they provide to joliok.

6 Cookies & Tracking Technologies

joliok uses cookies and similar tracking technologies on joliok.vip to enhance platform functionality, maintain login sessions, and analyze usage patterns. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies and security tokens. You cannot opt out of these without disabling your browser's ability to use the site.
• Functional cookies: Remember your preferences (e.g., language settings, remembered username) to improve your experience.
• Analytics cookies: Collect anonymized usage data to help joliok understand how Filipino players interact with the Platform and identify areas for improvement.

You can manage cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using joliok but may affect certain convenience features.

7 Data Retention

joliok retains personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years in compliance with PAGCOR regulations and BIR requirements.
• Support communications: Retained for two (2) years following resolution of the relevant inquiry or dispute.
• Technical and device logs: Retained for up to twelve (12) months for security monitoring purposes.

Upon expiry of the applicable retention period, joliok will securely delete or anonymize your personal data unless retention is required by applicable law or a lawful regulatory order.

8 Security Measures

joliok implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction:

• TLS/SSL encryption for all data in transit between your device and joliok servers.
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial data.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Two-factor authentication (2FA) options for player accounts and mandatory 2FA for joliok staff accessing internal systems.
• Regular third-party security audits and penetration testing of joliok's infrastructure.
• Real-time fraud detection and anomaly monitoring systems covering all financial transactions.

9 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012 (RA 10173) and NPC regulations, you have the following rights with respect to your personal data held by joliok:

To exercise any of these rights, contact joliok's Data Protection Officer using the details in Section 12. joliok will respond to data subject requests within fifteen (15) calendar days, unless the complexity of the request requires an extension, in which case you will be notified.

10 Children & Minors

joliok's Platform is strictly intended for adults aged 21 years and older. joliok does not knowingly collect personal data from any individual under the age of 21. If joliok discovers or reasonably suspects that an account holder is under the age of 21, the account will be immediately suspended, and any personal data associated with that account will be deleted after fulfilling mandatory regulatory reporting obligations.

Parents and guardians who believe that a minor under their care has registered a joliok account should contact joliok support immediately at [email protected] so that the account can be closed and data handled appropriately.

11 Changes to This Privacy Policy

joliok reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or joliok's data processing practices. When material changes are made, joliok will notify registered players via their registered email address or via an in-platform notification displayed upon next login.

The updated Policy will be posted at joliok.vip/privacy-policy with a revised "Last updated" date. Your continued use of the Platform following notification of changes constitutes your acceptance of the updated Policy. If you do not agree to the changes, you must close your joliok account.

12 Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or your personal data held by joliok, please contact our Data Protection Officer (DPO):

If you are not satisfied with joliok's response to your privacy concern, you may lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) through their official channels.