jolihot Privacy Policy

jolihot ("we," "us," "our," or "the Company") is an online gaming platform operating at jolihot.net and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). jolihot is the data controller responsible for the personal information of all registered users ("Players," "you," or "your") collected through the Platform.

This Privacy Policy is issued pursuant to Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC) of the Philippines. It describes how jolihot collects, processes, stores, shares, and protects your personal data, and explains the rights available to you as a data subject under Philippine law.

jolihot collects the following categories of personal data, depending on how you interact with the Platform:

We do not collect sensitive personal information (as defined under Section 3(l) of RA 10173) unless it is strictly necessary for identity verification or legal compliance, and only with your explicit consent or as required by applicable regulation.

jolihot collects your personal data through the following channels:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automatically — when you access or use the Platform, our servers automatically log technical data including your IP address, device identifiers, browser type, and session activity via cookies and similar technologies.
• From third-party payment providers — GCash, Maya, BPI, BDO, Metrobank, InstaPay, and other payment partners share transaction confirmation data with jolihot to facilitate deposit and withdrawal processing.
• From identity verification partners — where jolihot engages third-party KYC or fraud-screening services to validate identity documents and confirm age eligibility, those services may return identity confirmation data to jolihot.
• From PAGCOR and law enforcement — jolihot may receive data from PAGCOR or Philippine law enforcement agencies as part of regulatory oversight, investigation, or compliance requirements.

jolihot processes your personal data for the following purposes:

• Account creation and management — to register your player account, verify your identity, and maintain your profile on the Platform.
• KYC and age verification — to confirm that you meet the minimum age requirement of 21 years as required by PAGCOR, and to satisfy Anti-Money Laundering Council (AMLC) obligations under RA 9160.
• Payment processing — to facilitate deposits, withdrawals, and the crediting of winnings to your registered payment method in Philippine Peso (₱).
• Fraud prevention and security — to detect, investigate, and prevent unauthorised account access, duplicate accounts, chargebacks, money laundering, and other prohibited activities.
• Personalisation and platform improvement — to tailor game recommendations, promotions, and user interface preferences based on your activity on jolihot, where you have consented to such personalisation.
• Customer support — to respond to your queries, resolve disputes, and maintain records of communications related to your account.
• Responsible gaming — to monitor for signs of problem gambling, enforce deposit limits or self-exclusion requests, and fulfil our duty of care obligations under PAGCOR's responsible gaming framework.
• Legal and regulatory compliance — to comply with PAGCOR licensing conditions, AMLC reporting obligations, NPC data privacy requirements, and any lawful order from a Philippine government authority.
• Marketing communications — with your explicit consent, to send you information about jolihot promotions, new games, and platform updates via SMS or in-app notification. You may opt out at any time.

Under the Data Privacy Act of 2012, jolihot processes your personal data on the following lawful bases:

• Contractual necessity — processing is necessary to perform the player account agreement between you and jolihot, including the delivery of gaming services, payment processing, and account management.
• Legal obligation — processing is required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), Bureau of Internal Revenue (BIR) obligations, and NPC data privacy requirements.
• Legitimate interests — processing is necessary for jolihot's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests do not override your fundamental rights.
• Consent — for specific processing activities such as marketing communications and optional personalisation features, where jolihot has obtained your prior, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

jolihot does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers — GCash, Maya, BPI, BDO, Metrobank, InstaPay, QR Ph, and GrabPay, solely for the purpose of processing your financial transactions. These providers are bound by their own data privacy obligations and Philippine BSP regulations.
• KYC and identity verification partners — third-party services engaged by jolihot to verify government-issued IDs and confirm age eligibility as part of PAGCOR's KYC requirements.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and Philippine law enforcement agencies, where disclosure is required by law or lawful order.
• Technology service providers — cloud hosting, platform infrastructure, customer support software, and analytics vendors engaged by jolihot to operate and improve the Platform, all operating under data processing agreements that bind them to jolihot's data protection standards.
• Professional advisors — lawyers, auditors, and compliance consultants who are bound by professional secrecy obligations, where disclosure is necessary for legal or compliance purposes.

All third parties with whom jolihot shares personal data are contractually required to maintain its confidentiality and security and to process it only for the purposes for which it was shared.

jolihot uses cookies and similar tracking technologies to operate the Platform effectively and to improve your experience. The types of cookies we use are:

• Strictly necessary cookies — essential for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled without breaking core platform functionality.
• Functional cookies — used to remember your preferences such as language settings, preferred games, and display options across sessions.
• Analytics cookies — used by jolihot's internal analytics tools to understand aggregate usage patterns, page performance, and player engagement. These cookies do not identify you personally; all data is processed in aggregate form.
• Security cookies — used to detect and prevent fraudulent activity, duplicate logins, and unauthorised access attempts.

jolihot does not use third-party advertising cookies or behavioural tracking cookies that share your activity with external advertising networks.

You may configure your browser to reject or delete cookies, but please note that disabling strictly necessary cookies will prevent you from logging in to or using the jolihot Platform. Most mobile browsers also offer cookie management settings under privacy or security options.

jolihot retains your personal data for as long as your account is active and for a period after closure as required by law. Specific retention periods are as follows:

Upon expiry of the applicable retention period, jolihot will securely delete or irreversibly anonymise your personal data in accordance with our internal data lifecycle procedures, unless continued retention is required by a specific legal obligation or ongoing regulatory investigation.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by jolihot:

To exercise any of the above rights, please contact jolihot's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond within fifteen (15) business days from receipt of your request, as required under RA 10173.

jolihot implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data in transit is encrypted using TLS 1.2 or higher (256-bit). Sensitive data at rest (including identity documents and financial records) is encrypted using AES-256.
• Access controls: Access to personal data within jolihot is restricted to staff members on a strict need-to-know basis, with role-based access controls and full audit logging of all data access events.
• Multi-factor authentication (MFA): All jolihot internal systems that process personal data require MFA for staff access. Players are encouraged to enable MFA on their own accounts.
• Regular security assessments: jolihot conducts periodic vulnerability assessments and penetration tests to identify and remediate security weaknesses in the Platform.
• Data breach response: In the event of a personal data breach that poses a real risk to your rights and freedoms, jolihot will notify the NPC within 72 hours of becoming aware of the breach, and will notify affected players within 24 hours where the breach is likely to cause harm.

jolihot is strictly an adults-only platform. In accordance with PAGCOR regulations and Philippine law, the minimum age to register and play on jolihot is 21 years. jolihot does not knowingly collect personal data from individuals below the age of 21.

If jolihot discovers or has reasonable grounds to believe that a registered account belongs to a person under 21 years of age, we will:

• Immediately suspend the account and cease processing of any associated personal data for gaming purposes.
• Retain only the data strictly required to comply with our legal obligations, including AMLC reporting and PAGCOR notification requirements.
• Securely delete all remaining personal data associated with the underage account once the mandatory retention period has expired.

If you are a parent or guardian and believe your child has registered on jolihot, please contact us immediately at [email protected]. We will investigate and take appropriate action without delay.

jolihot reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR regulatory requirements, or our data processing practices. When we make material changes to this Policy, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date.
• Notify registered players via an in-platform notification or SMS to the mobile number on file.
• Where required by RA 10173, obtain fresh consent for any materially new processing activities that affect your personal data.

Your continued use of the jolihot Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this page periodically to stay informed of how jolihot protects your data.

For any questions, concerns, or requests regarding this Privacy Policy or the personal data jolihot holds about you, please contact our Data Protection Officer:

We aim to acknowledge all data privacy requests within two (2) business days and to resolve them fully within fifteen (15) business days. For urgent security concerns such as suspected unauthorised account access, please use the in-platform live chat for the fastest response. This Privacy Policy was last reviewed and approved on 1 January 2026.