JILIAPPLUCK Sign-Up Security Guide: Settings to Lock Down a New Account

Pre-registration checks on the site and your details

• Age 21 or over, with a valid government ID in hand
• The operator's name appears on PAGCOR's official list of licensees
• The address bar shows the exact domain over HTTPS, not a lookalike reached from an ad or chat link
• The email you register with has its own strong password and two-factor login
• Your GCash or Maya account is in the same legal name you will give the operator

A name mismatch between the casino account and the e-wallet is one of the most common reasons a withdrawal gets held for review.

Password maths: why length beats cleverness

Guessing difficulty grows with the number of possible characters raised to the power of the password's length. Rounded figures:

Those counts only protect you if the password is random and unique. A password reused from a site that was breached falls on the first attempt regardless of length, so let a password manager generate and store it.

Settings to switch on straight after sign-up

• Two-factor authentication through an authenticator app, if offered, since app codes are harder to intercept than SMS
• Login alerts by email or SMS whenever a new device signs in
• A withdrawal PIN or second password where the cashier supports one
• Automatic session timeout, especially on shared or work devices
• Deposit, loss and session limits in the responsible gaming settings
• A saved withdrawal account locked to your verified name
• A recovery email or phone number you still control, rechecked after any SIM change

A random guess at a 6-digit one-time code succeeds 1 time in 1,000,000, and the code expires within minutes. That is why attackers try to trick you into reading it out rather than guessing it.

Verifying your identity without oversharing

Licensed operators must confirm identity before paying out. Complete it inside your account, never through a chat app.

1. Open the verification section from your account menu, not from a link in a message.
2. Upload a clear photo of an accepted government ID through that upload screen only.
3. Take the selfie or liveness check in good light so it passes on the first try.
4. Wait for confirmation inside your account; approval times vary by operator.

• Never email ID photos to an address that is not listed on the operator's official site
• Never send ID or selfies to a 'verification agent' on Facebook, Telegram or Viber
• Delete stray ID photos from shared phones or chat threads after the upload

Pitfalls that weaken a brand-new account

• Reusing your GCash MPIN or email password as the casino password
• Signing up through an agent who then 'manages' the login for you
• Keeping the password in a notes app on a shared phone
• Skipping two-factor because the operator made it optional
• Registering under a nickname, then failing name checks at withdrawal
• Staying logged in on a borrowed device after a session
• Clicking password-reset emails you never requested

Each shortcut saves a few seconds at sign-up and can cost the whole balance later. If an operator lacks a setting you care about, such as two-factor login, weigh that before choosing where to register.

Next: funding the account safely

Once the account is verified and locked down, compare deposit methods and their limits on our payments page, and read the GCash scam warning signs guide before sending your first peso. Keep a private note of the sign-up date, the email used and your verified name, which speeds up any support request if you are ever locked out.