phjilli Privacy Policy

phjilli collects personal information that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal information we collect include:

1.1 Information You Provide Directly

• Full legal name, date of birth, and gender;
• Residential address, city, province, and postal code (Philippines);
• Email address and mobile phone number;
• Username and encrypted password;
• Government-issued identification documents (e.g., PhilSys National ID, passport, driver's license, UMID card) submitted for KYC verification;
• Payment method details, including GCash mobile number, PayMaya account, or bank account information (BPI, BDO, Metrobank) — stored in tokenized form only;
• Communications you send to our support team via live chat or email.

1.2 Information Collected Automatically

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session data, including login timestamps, pages visited, and time spent on the Platform;
• Gaming activity, including games played, wagers placed, and transaction history;
• Cookie and similar tracking technology data (see Section 7).

1.3 Information from Third Parties

• Identity verification data from KYC service providers;
• Fraud detection signals from payment processors and anti-fraud services;
• Publicly available information used to verify your identity or comply with AML obligations.

phjilli uses your personal data for the following purposes:

• Account Management: To create, maintain, and secure your phjilli account;
• Identity Verification: To verify your age (21+) and identity in compliance with Philippine gaming regulations and KYC requirements;
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard;
• Platform Operation: To deliver games, process bets, calculate winnings, and maintain your transaction history;
• Customer Support: To respond to your inquiries, complaints, and support requests;
• Legal Compliance: To comply with Anti-Money Laundering (AML) obligations, tax reporting requirements, and orders from Philippine regulatory authorities including PAGCOR;
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, cheating, and abuse of the Platform;
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools such as deposit limits and self-exclusion;
• Platform Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the Platform;
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates) and, where you have opted in, promotional communications about phjilli offers.

phjilli processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you (the phjilli Terms & Conditions) — including account management, payment processing, and game delivery;
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, tax laws, and gaming regulatory requirements;
• Legitimate Interests: Processing is necessary for phjilli's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights;
• Consent: Where required by law, we will obtain your explicit consent before processing your data — for example, before sending you marketing communications. You may withdraw consent at any time by contacting our support team.

phjilli does not sell, rent, or trade your personal data to third-party marketers. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, for the purpose of processing your deposits and withdrawals;
• KYC and Identity Verification Providers: Third-party services that assist phjilli in verifying your identity and age in compliance with Philippine regulations;
• Fraud Prevention and AML Services: Providers that help phjilli detect and prevent fraudulent transactions and money laundering activity;
• Game Content Providers: Licensed game studios and live dealer operators whose games are available on the phjilli Platform, to the extent necessary to deliver gameplay;
• Regulatory Authorities: Philippine government agencies including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC), where required by law or regulatory order;
• IT and Hosting Providers: Cloud infrastructure and data hosting providers who process data on our behalf under strict data processing agreements;
• Professional Advisers: Legal, accounting, and auditing firms, subject to professional confidentiality obligations.

All third parties with whom phjilli shares personal data are required to handle that data in accordance with applicable privacy laws and are prohibited from using it for any purpose other than the specific service they provide to phjilli.

phjilli retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law. Specifically:

• Account and identity verification records are retained for a minimum of five (5) years following account closure, in compliance with AML regulations;
• Transaction records, including deposit and withdrawal history, are retained for a minimum of five (5) years;
• Customer support communications are retained for three (3) years;
• Marketing consent records are retained for as long as necessary to demonstrate compliance with consent requirements.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, phjilli will securely delete or anonymize that data.

phjilli implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including payment method tokens and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of the Platform;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures to detect, contain, and notify affected users of any personal data breach in accordance with the Data Privacy Act of 2012.

While phjilli takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your phjilli login credentials and for notifying us immediately if you suspect unauthorized access to your account.

phjilli uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings and display options to provide a more personalized experience;
• Analytics Cookies: Help us understand how players use the Platform — which pages are visited most, where users drop off, and how performance can be improved. Data collected is aggregated and anonymized;
• Fraud Prevention Cookies: Used to detect and prevent fraudulent activity and to identify unusual login patterns.

phjilli does not use third-party advertising or retargeting cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform.

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by phjilli:

• Right to be Informed: You have the right to know what personal data phjilli collects about you and how it is used — which is the purpose of this Policy;
• Right of Access: You may request a copy of the personal data phjilli holds about you at any time;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our support team. phjilli will respond to all data subject requests within fifteen (15) business days, in accordance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

The phjilli Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. phjilli does not knowingly collect, process, or store personal data from individuals under the age of 21.

Age verification is a mandatory step during the registration process. If phjilli discovers that personal data has been collected from a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any funds held in the account will be returned to the depositing payment method after verification.

If you are a parent or guardian and believe that your child has registered on phjilli, please contact our support team immediately so we can take appropriate action.

phjilli reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features of the Platform. When material changes are made, phjilli will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is indicated at the top of this document. Your continued use of the Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how phjilli protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by phjilli, please contact our Data Protection Officer and support team through the following channels:

• Email: support phjilli.org
• Live Chat: Available 24/7 via the Platform
• Response Time: Within 2 hours for general inquiries; within 15 business days for formal data subject requests

This Privacy Policy was last updated in May 2026 and supersedes all prior versions. For related legal documents, please refer to our Terms & Conditions and Responsible Gaming policy.