jittt Privacy Policy

This Privacy Policy ("Policy") describes how jittt ("Company," "we," "us," or "our"), operator of the online gaming platform accessible at jittt.org, collects, processes, stores, shares, and protects the personal data of individuals ("you," "Player," or "User") who register for or access any part of the jittt platform, including its website, mobile interface, games, promotions, and customer support channels.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines. It should be read alongside our Terms & Conditions, which govern your overall use of the jittt platform.

This Policy applies to all personal data processed by jittt regardless of the medium through which it was collected — whether via web browser, mobile app, live chat, email, SMS, or telephone interaction with our support team.

jittt collects personal data across several categories depending on the nature of your interaction with the platform. The table below provides a structured overview:

We do not intentionally collect sensitive personal information (as defined under the DPA, such as health data, religious beliefs, or political affiliations) unless you voluntarily provide it in the course of a support interaction, in which case it will be used solely to address your specific concern.

jittt collects personal data through the following means:

3.1 Direct Collection

You provide data directly to jittt when you: complete the registration form on the platform; upload KYC documents; make a deposit or request a withdrawal; contact our support team via live chat, email, or phone; complete a responsible gaming tool request (e.g., self-exclusion, deposit limit change); or respond to a survey or promotion.

3.2 Automated Collection

When you access the jittt platform, our systems automatically collect technical and behavioural data through server logs, session tracking technologies, and first-party cookies. This includes your IP address, geolocation data (to confirm you are accessing the platform from within the Philippines), device fingerprint, and browsing behaviour within the platform. See Section 7 for full details on our cookie usage.

3.3 Third-Party Sources

In limited circumstances, jittt may receive data about you from third parties, including: payment processors (GCash, Maya, BPI, BDO, Metrobank) who confirm the status and ownership of payment accounts; identity verification service providers who assist with KYC document authentication; and fraud prevention and AML screening databases. All third-party data sources used by jittt are bound by contractual data processing agreements consistent with the DPA.

Under the Data Privacy Act of 2012, jittt must have a valid legal basis for each category of personal data processing it undertakes. The following legal bases apply:

• Contractual Necessity: Processing required to fulfil our obligations to you under the jittt Terms & Conditions — including account creation, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA) as amended, the Data Privacy Act, and other applicable Philippine law.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of our services — where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications (e.g., promotional SMS, email newsletters) is based on your explicit, freely given consent, which you may withdraw at any time by contacting [email protected].

jittt uses personal data collected from players for the following purposes:

5.1 Account Management

To create, verify, maintain, and close your jittt account; to process deposits and withdrawals via your nominated Philippine payment methods; to deliver one-time PINs (OTPs) and account notifications to your registered mobile number; and to manage password reset and account recovery requests.

5.2 Regulatory & Legal Compliance

To fulfil jittt's obligations under PAGCOR's licensing framework; to conduct Know Your Customer (KYC) and Enhanced Due Diligence (EDD) checks as required by the Anti-Money Laundering Council (AMLC); to detect and report suspicious transactions where mandated by the AMLA; and to maintain records as required by Philippine gaming and financial regulations.

5.3 Responsible Gaming

To monitor player behaviour for signs of problem gambling; to administer deposit limits, cooling-off periods, session time reminders, and self-exclusion requests; to fulfil our obligations under PAGCOR's Responsible Gaming Framework; and to identify players who may benefit from responsible gaming support resources.

5.4 Platform Security & Fraud Prevention

To detect and prevent fraud, collusion, bonus abuse, money laundering, and other prohibited activities; to verify that you are accessing the platform from within the Philippines; to enforce the single-account policy; and to investigate and resolve disputes regarding game outcomes or financial transactions.

5.5 Service Improvement & Personalisation

To analyse aggregated usage data to improve game offerings, platform performance, and user experience; to personalise the content and promotions displayed to you based on your gaming preferences and activity on the jittt platform (not based on profiling outside the platform); and to troubleshoot technical issues.

5.6 Marketing Communications

With your consent, to send you promotional offers, bonus notifications, tournament announcements, and news about new games and features via SMS or email. You may opt out of all marketing communications at any time by following the unsubscribe link in any marketing email or by contacting [email protected].

jittt does not sell, rent, or trade your personal data to any third party for their own commercial purposes. We share personal data only in the following circumstances:

6.1 Service Providers

We engage trusted third-party service providers who process personal data on our behalf and under our instruction, including: payment processors (GCash/Maya/banks); KYC and identity verification providers; cloud hosting and data storage providers operating data centres in compliance with the DPA; customer support platform providers; and SMS/email delivery services. All such providers are bound by written data processing agreements that prohibit them from using your data for any purpose other than delivering the contracted service to jittt.

6.2 Regulatory & Law Enforcement Authorities

We are legally obliged to disclose personal data to: PAGCOR (Philippine Amusement and Gaming Corporation) in the course of regulatory audits and licensing compliance; the Anti-Money Laundering Council (AMLC) when suspicious transaction reports (STRs) or covered transaction reports (CTRs) are filed; the National Privacy Commission (NPC) in the event of a data breach or regulatory inquiry; and any Philippine court, law enforcement agency, or government body where legally compelled by valid order, subpoena, or warrant.

6.3 Business Transfers

In the event that jittt's business or assets are acquired, merged, or restructured, personal data held by the Company may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the identity of the new data controller via your registered email address at least thirty (30) days prior to the transfer taking effect.

jittt uses first-party cookies and similar tracking technologies on its web platform. We do not use third-party advertising cookies or cross-site tracking technologies.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the platform to function, including session management, authentication tokens, and security cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, preferred game lobby view, and responsible gaming tool settings. These persist across sessions to improve your experience.
• Analytics Cookies: First-party cookies that help jittt understand how players navigate the platform — which games are most visited, where sessions typically start and end, and which features generate the most engagement. This data is aggregated and does not identify you individually.
• Security & Fraud Detection Cookies: Used to identify anomalous access patterns, detect account takeover attempts, and enforce geolocation restrictions.

7.2 Managing Cookies

You may configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies will prevent you from logging into your jittt account. Instructions for managing cookies in common browsers (Chrome, Firefox, Safari, Edge) are available from each browser's official help documentation.

jittt retains personal data only for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, as required under AMLA and PAGCOR regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC reporting obligations.
• KYC Documents: Retained for the duration of the account plus five (5) years post-closure. Original document images are stored in encrypted form and accessible only to authorised compliance personnel.
• Gaming Logs: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Support Communications: Retained for two (2) years from the date of the last interaction, unless the matter is subject to ongoing legal proceedings.
• Marketing Consent Records: Retained for the duration of your consent plus one (1) year following withdrawal of consent, as evidence of the original consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with any individual player.

jittt implements a comprehensive suite of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS 1.2 or higher) for all data in transit between your device and jittt servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents and financial records;
• Multi-factor authentication (MFA) for administrative access to systems holding personal data;
• Role-based access controls ensuring that staff can only access the categories of personal data necessary for their specific function;
• Regular penetration testing and vulnerability scanning of the platform by qualified third-party security firms;
• 24/7 intrusion detection and monitoring of platform infrastructure;
• Annual data protection training for all staff with access to player personal data;
• A documented Data Breach Response Plan that includes NPC notification procedures within the 72-hour window required under NPC Circular 16-03.

While jittt takes all reasonable measures to protect your data, no internet-based platform can guarantee absolute security. You are responsible for maintaining the security of your account credentials and for notifying jittt immediately if you suspect any unauthorised access to your account.

As a data subject under Republic Act No. 10173, you are entitled to exercise the following rights with respect to your personal data held by jittt:

• Right to Be Informed: The right to know what personal data jittt holds about you, how it is collected, the purposes for which it is processed, and with whom it is shared. This Privacy Policy fulfils that right.
• Right to Access: The right to obtain a copy of the personal data jittt holds about you in a readable format, subject to identity verification and within thirty (30) days of a valid request.
• Right to Rectification: The right to request correction of inaccurate, outdated, or incomplete personal data held in your jittt account. Some corrections may require supporting documentation.
• Right to Erasure / Blocking: The right to request deletion or blocking of personal data that is no longer necessary for its original purpose, or where processing was based solely on consent which you have since withdrawn — subject to legal retention obligations under AMLA and PAGCOR regulations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or profiling. Objections to processing for other purposes will be considered against the applicable legal basis.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format where technically feasible, to facilitate transfer to another data controller.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe that jittt has violated your rights under the DPA. The NPC can be reached via its official website at privacy.gov.ph.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Privacy Request," including your full name, registered email address, and a description of the right you wish to exercise. jittt will acknowledge your request within five (5) business days and respond substantively within thirty (30) calendar days.

jittt does not knowingly collect, process, or store the personal data of individuals under the age of 21 years, consistent with Philippine gaming law requirements for casino-style gambling and sports wagering. The platform is strictly intended for adults aged 21 and above.

If jittt becomes aware that personal data has been submitted by or on behalf of a person under the age of 21, we will immediately close the associated account, delete the personal data as soon as legally permissible, and return any deposited funds (net of amounts already wagered) in accordance with our Terms & Conditions.

jittt reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, changes in our data processing practices, or improvements to our platform. All updates will be reflected in the "Last Updated" date at the top of this page.

Where changes are material — meaning they significantly affect how your personal data is used or your rights as a data subject — jittt will notify you via your registered email address or via an in-platform notification at least fourteen (14) calendar days before the changes take effect. Your continued use of the jittt platform following the effective date of any amended Privacy Policy constitutes your acceptance of the updated Policy.

We recommend that you review this Privacy Policy periodically. The most current version will always be available at jittt.org/privacy-policy.

jittt has designated a Data Protection Officer (DPO) in compliance with Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing the Company's data protection strategy, ensuring compliance with the DPA and NPC issuances, and serving as the primary point of contact for data subjects and the National Privacy Commission.

If you have any questions, concerns, or requests regarding this Privacy Policy or jittt's personal data practices, please contact our Data Protection Officer through the following channel:

Email: [email protected]
Subject Line: Data Privacy Inquiry / DPO Request
Response Time: Within five (5) business days for acknowledgement; within thirty (30) calendar days for substantive response

Support Hours: 8:00 AM – 12:00 AM PHT, daily