gjili Privacy Policy

gjili ("gjili," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who access our online casino platform at gjili.net. This Privacy Policy ("Policy") describes how gjili collects, processes, stores, shares, and protects personal data in connection with the use of our website, mobile platform, and related services.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. It also reflects gjili's obligations under PAGCOR's regulatory framework with respect to player data handling and record-keeping requirements.

By registering an account on gjili, making a deposit, or otherwise using our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the gjili platform.

gjili collects personal data in the following categories, depending on the nature of your interaction with the platform:

gjili does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where health-related information is voluntarily provided in the context of a responsible gaming self-exclusion request.

gjili processes your personal data for the following specific purposes:

• Account creation and management: To register your account, verify your identity, and maintain your player profile on the gjili platform.
• KYC and age verification: To confirm that you meet the minimum age requirement of 21 years and to fulfil our identity verification obligations under PAGCOR regulations and Philippine AML law.
• Payment processing: To process deposits via GCash, Maya, BPI, BDO, and Metrobank, and to fulfil withdrawal requests to your registered payment method.
• Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity as required under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments.
• Game delivery and personalisation: To provide access to gjili's casino games, remember your in-game preferences, and deliver a seamless gaming experience across devices.
• Responsible gaming: To monitor gaming behaviour, enforce player-set limits, process cooling-off and self-exclusion requests, and identify players who may be at risk of problem gambling.
• Fraud detection and security: To detect, investigate, and prevent fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct.
• Customer support: To respond to your enquiries, resolve disputes, and maintain records of support interactions.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have provided your consent to receive such communications. You may withdraw consent at any time via your account settings.
• Legal and regulatory compliance: To meet gjili's obligations under Philippine law, PAGCOR regulations, NPC directives, and any applicable court orders.

Under the Philippine Data Privacy Act of 2012, gjili processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil gjili's obligations under the player agreement, including account management, game delivery, and payment processing.
• Legal obligation: Processing required to comply with PAGCOR regulations, Philippine AML law, NPC directives, tax obligations, and other applicable laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where such interests do not override your fundamental privacy rights.
• Consent: Processing for direct marketing communications and optional personalisation features, where you have provided explicit, informed, and freely given consent. Consent may be withdrawn at any time without affecting the lawfulness of processing that occurred before withdrawal.

gjili may share your personal data with the following categories of recipients, strictly on a need-to-know basis and only to the extent necessary for the stated purpose:

• Payment service providers: GCash, Maya, BPI, BDO, and Metrobank, for the purpose of processing your deposit and withdrawal transactions. These providers operate under their own privacy policies and Philippine BSP regulations.
• KYC and identity verification providers: Third-party identity verification services contracted by gjili to assist in document verification and age confirmation during the KYC process.
• Game software providers: Licensed game developers whose software is integrated into the gjili platform. These providers may receive anonymised session data necessary to deliver their game services.
• IT infrastructure and cloud service providers: Server hosting, data storage, and cybersecurity service providers who process data on gjili's behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where disclosure is required by law or regulatory directive.
• Law enforcement: Philippine law enforcement authorities, courts, or other public bodies where gjili is legally compelled to disclose data in connection with a criminal investigation or judicial proceeding.
• Professional advisors: Legal counsel, auditors, and accountants engaged by gjili, subject to professional confidentiality obligations.

gjili uses cookies and similar tracking technologies on its website and platform to enhance your experience, maintain session security, and gather anonymised usage statistics. The categories of cookies used are as follows:

• Essential cookies: Strictly necessary for the platform to function, including session authentication, security tokens, and load balancing. These cannot be disabled without impairing core functionality.
• Functional cookies: Remember your preferences such as language settings, game filters, and display options to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players navigate the platform, which pages are visited most frequently, and where users drop off. This data is used internally to improve the gjili experience.
• Security cookies: Detect and prevent fraudulent activity, identify suspicious login attempts, and protect your account from unauthorised access.

You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies may prevent you from accessing certain parts of the gjili platform. gjili does not use third-party advertising or behavioural tracking cookies from external ad networks.

gjili retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years following account closure, as required under PAGCOR and AML record-keeping obligations.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, in line with AMLC reporting requirements.
• KYC and identity documents: Retained for a minimum of five (5) years following the conclusion of the business relationship.
• Customer support records: Retained for three (3) years following the resolution of each support interaction, unless the matter relates to an active legal dispute.
• Marketing consent records: Retained for the period during which consent is active, plus three (3) years following withdrawal of consent as evidence of lawful processing.
• Server and access logs: Retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in a manner that prevents reconstruction of the original data.

gjili implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and gjili's servers.
• Encryption at rest for sensitive data stored on gjili's infrastructure, including financial data and identity documents.
• Access controls: Role-based access restrictions ensuring that only authorised gjili personnel with a legitimate need can access personal data.
• Two-factor authentication (2FA) available for player accounts and mandatory for all gjili administrative systems.
• Regular penetration testing and independent security audits conducted on gjili's platform and infrastructure.
• Incident response procedures: gjili maintains a documented data breach response plan and will notify the NPC and affected players within the timeframes required by the Data Privacy Act in the event of a qualifying breach.

While gjili takes all reasonable precautions, no internet-based system can guarantee absolute security. You are encouraged to use a strong, unique password for your gjili account and to enable two-factor authentication via your account settings.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gjili. You may exercise any of these rights by contacting gjili's Data Protection Officer as described in Section 13.

gjili will respond to verifiable data subject requests within thirty (30) days of receipt. Identity verification may be required before processing any request. Requests that are manifestly unfounded or excessive may be subject to a reasonable fee or may be refused, with written reasons provided.

gjili's platform is strictly intended for adults aged 21 years and above, as required by PAGCOR regulations governing online casino gambling in the Philippines. gjili does not knowingly collect personal data from any individual under the age of 21.

Age verification is a mandatory step in the gjili account registration and KYC process. If gjili discovers that personal data has been collected from a person below the minimum age, it will immediately suspend the account, delete or anonymise all associated personal data, and refund any deposits made, subject to identity confirmation.

Parents and guardians who believe their child may have accessed gjili without authorisation are encouraged to contact the gjili support team immediately so that appropriate action can be taken promptly.

gjili primarily stores and processes player data on servers located within or accessible from the Philippines. However, certain third-party service providers — including cloud infrastructure providers and game software developers — may be based outside the Philippines and may process personal data in other jurisdictions.

Where personal data is transferred outside the Philippines, gjili ensures that such transfers comply with the requirements of the Data Privacy Act and NPC issuances on cross-border data flows, including:

• Implementing standard contractual clauses or data processing agreements with recipient organisations.
• Transferring data only to organisations in countries that provide an adequate level of data protection as recognised by the NPC.
• Ensuring that recipient processors are bound by obligations equivalent to those imposed on gjili under Philippine privacy law.

gjili may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, gjili will notify registered players by email to the address associated with their account and will update the "Last Updated" date at the top of this page.

Your continued use of the gjili platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the revised terms. If you object to any material change, you may close your account as described in the Terms & Conditions.

gjili recommends reviewing this Policy periodically. Previous versions of this Policy are available on request from gjili's Data Protection Officer.

gjili has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you wish to exercise any of your data subject rights, have questions about this Privacy Policy, or wish to raise a data privacy concern, please contact the gjili DPO through the following channels:

• Email: [email protected] (Subject line: "Data Privacy Request") — plain text only, not a clickable link
• Live Chat: Available 24/7 via the in-platform chat widget on gjili.net
• Response Time: gjili targets a response within five (5) business days for initial acknowledgment, and full resolution within thirty (30) days

If you believe your privacy rights have not been adequately addressed by gjili, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC complaint process is available on the NPC's official government website.

For general account support, bonus queries, or responsible gaming assistance, you may also visit our About Us page or our FAQ page for additional guidance.