xgjili Casino — Privacy Policy

1. Introduction

xgjili Casino ("xgjili," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our platform at xgjili.live. This Privacy Policy ("Policy") describes how we collect, use, disclose, store, and protect your personal information when you access or use the xgjili platform, including our website, games, promotions, and customer support services (collectively, the "Platform").

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC") of the Philippines. It should be read together with our Terms and Conditions and Responsible Gaming Policy.

By registering an account or using the xgjili Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform and contact us to close your account.

2. Data Controller

xgjili Casino is the personal information controller ("PIC") responsible for your personal data collected through the Platform. As PIC, xgjili determines the purposes and means of processing your personal information and is accountable for ensuring that all processing activities comply with the DPA and its IRR.

xgjili has designated a Data Protection Officer ("DPO") who oversees compliance with this Policy and applicable data privacy laws. You may contact the DPO at any time using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

xgjili collects the following categories of personal data from players:

xgjili does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect information about your religious beliefs, political affiliations, or health status unless directly relevant to a responsible gaming assessment you have voluntarily initiated.

4. How We Collect Your Data

xgjili collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-party sources: Identity verification data from accredited KYC providers; fraud and risk signals from payment processors; publicly available information used to verify your identity or comply with legal obligations.
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies in connection with compliance obligations.

5. How We Use Your Personal Data

xgjili processes your personal data for the following purposes:

• To create, manage, and maintain your xgjili account.
• To verify your identity and age in compliance with PAGCOR regulations (21+ requirement).
• To process deposits, withdrawals, and other financial transactions in Philippine Peso (₱).
• To detect, investigate, and prevent fraud, money laundering, and other illegal activities.
• To comply with legal and regulatory obligations under Philippine law, including the DPA, AMLA, and PAGCOR licensing conditions.
• To provide customer support and resolve disputes.
• To send you transactional communications related to your account activity.
• To send promotional and marketing communications where you have opted in to receive them.
• To monitor your gaming activity for responsible gaming purposes and to enforce self-exclusion or deposit limit settings you have activated.
• To improve the Platform through analytics, user research, and performance monitoring.
• To personalize your experience on the Platform based on your preferences and usage patterns.

6. Legal Basis for Processing

xgjili processes your personal data on the following legal bases under the DPA:

• Consent: Where you have given explicit consent, such as for marketing communications or optional data collection features.
• Contractual necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including the DPA, AMLA, and PAGCOR regulatory requirements.
• Legitimate interests: Processing necessary for xgjili's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.

7. Data Sharing and Disclosure

xgjili does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, PayMaya/Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank , PNB, Security Bank) to process financial transactions.
• Identity verification providers: Accredited KYC and age verification partners who assist in confirming your identity and age in compliance with PAGCOR requirements.
• Technology service providers: Cloud hosting, cybersecurity, analytics, and customer support platform providers who process data on our behalf under strict confidentiality obligations.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law or court order.
• Responsible gaming partners: Organizations providing self-exclusion registries or problem gambling support services, where you have requested referral or where required by PAGCOR regulations.

Any third party receiving your personal data is contractually required to process it only for the specified purpose, maintain appropriate security measures, and comply with the DPA and applicable Philippine law.

8. Data Retention

xgjili retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act.
• Identity verification documents: Retained for the duration of your account and for five (5) years after closure, or longer if required by a regulatory investigation.
• Support communications: Retained for three (3) years from the date of the interaction, unless related to an ongoing dispute or legal proceeding.
• Marketing preferences: Retained until you withdraw consent or close your account, whichever is earlier.

Upon expiry of the applicable retention period, xgjili will securely delete or anonymize your personal data in accordance with NPC-prescribed disposal standards.

9. Data Security

xgjili implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the xgjili platform.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls ensuring that only authorized personnel can access personal data, and only to the extent required for their specific function.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent cybersecurity professionals.
• Multi-factor authentication (MFA) options for player accounts to prevent unauthorized access.
• Incident response procedures in place to detect, contain, and notify affected individuals and the NPC of any personal data breach within the timeframes prescribed by the DPA.

While xgjili takes all reasonable precautions to protect your data, no electronic system is entirely immune to risk. You are responsible for maintaining the confidentiality of your xgjili login credentials and for notifying us immediately if you suspect unauthorized access to your account.

10. Cookies and Tracking Technologies

xgjili uses cookies and similar technologies (such as web beacons and local storage) to enhance your experience on the Platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and game display options to personalize your experience.
• Analytics cookies: Collect anonymized data about how players use the Platform to help us improve performance and user experience. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of some Platform features. xgjili does not use third-party advertising cookies or cross-site tracking technologies.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by xgjili:

• Right to be informed: You have the right to know what personal data xgjili collects about you and how it is processed.
• Right of access: You may request a copy of the personal data xgjili holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data in your xgjili account.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: If you believe xgjili has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact xgjili's Data Protection Officer using the details in Section 15. We will respond to all verified requests within fifteen (15) business days, as required by the DPA.

12. Minors and Age Restriction

If xgjili discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data, and report the incident to PAGCOR as required. If you are a parent or guardian and believe your child has registered on xgjili, please contact us immediately at the details provided in Section 15.

13. Cross-Border Data Transfers

xgjili primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers located outside the Philippines — for example, where a technology service provider operates internationally.

Any cross-border transfer of personal data is conducted in compliance with Section 21 of the DPA and the NPC's guidelines on cross-border data flows. xgjili ensures that recipient countries or organizations provide an adequate level of data protection, and that appropriate contractual safeguards (such as standard contractual clauses) are in place before any transfer occurs.

14. Changes to This Privacy Policy

xgjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform, and update the "Last updated" date at the top of this page.

Your continued use of the xgjili Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how xgjili protects your personal data.

15. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by xgjili, please contact our Data Protection Officer:

For unresolved privacy complaints, you may also file a complaint directly with the National Privacy Commission (NPC) of the Philippines through their official channels.