ajjjili Privacy Policy

Introduction

ajjjili ("we", "us", "the Platform", "the Company") is committed to protecting the privacy and personal data of all users ("you", "the User", "the Player") who access or use the ajjjili online casino and sports betting platform at ajjjili.net and any related mobile or web-based applications.

This Privacy Policy describes: what personal information we collect from you; why we collect it; how we use, store, and protect it; with whom we may share it; how long we keep it; and what rights you have over your own data. This Policy applies to all ajjjili services and should be read together with our Terms & Conditions and our Responsible Gaming policy, both of which form part of your agreement with ajjjili.

By registering an account on ajjjili, accessing the platform, or otherwise providing your personal data to us, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with this Policy, you must not create an account or use the ajjjili platform.

This Policy is written in English, which is the governing language for all legal purposes in your relationship with ajjjili. It is intended to be clear and accessible to Filipino players across Metro Manila, Cebu, Davao, Iloilo, and all regions of the Philippines.

Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, ajjjili is the personal information controller responsible for your data collected through the ajjjili.net platform.

As personal information controller, ajjjili determines the purposes and means of processing your personal data. We are accountable for ensuring that all personal data we hold is processed in a manner consistent with the Data Privacy Act and the regulations issued by the National Privacy Commission (NPC) of the Philippines.

ajjjili has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact the DPO at any time using the contact details in Section 15 of this Policy.

Data We Collect

ajjjili collects personal data that is necessary, adequate, relevant, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include:

Account Registration Data

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification — you must be 21 years of age or older to use ajjjili);
• Residential address in the Philippines (barangay, city/municipality, province);
• Email address registered in your name;
• Mobile number registered to your name with a Philippine telecommunications provider;
• Username and encrypted password (we never store passwords in plain text).

Identity Verification (KYC) Data

• Scanned copy or photograph of a valid government-issued photo ID (PhilSys National ID, passport, driver's license, UMID card, SSS ID, or Voter's ID);
• Selfie photograph for facial comparison purposes where required;
• Proof of registered payment method (e.g., screenshot of GCash or Maya account showing your name and mobile number);
• Source of funds declaration for accounts exceeding prescribed transaction thresholds under AMLC regulations.

Financial Transaction Data

• Deposit and withdrawal amounts, dates, times, and payment method references;
• GCash, Maya, GrabPay, BPI, BDO, Metrobank, QR Ph, and InstaPay transaction reference numbers;
• Account wallet balance history and bonus credit history;
• Wagering and gameplay transaction records required for audit and regulatory compliance.

Gameplay and Behavioral Data

• Game session logs including game titles played, bet amounts, win/loss outcomes, and session durations;
• Responsible gaming settings you have configured (deposit limits, session reminders, self-exclusion status);
• Bonus claims, promotional participation, and wagering requirement progress.

Technical and Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, browser type and version;
• Cookies and session identifiers (see Section 10);
• Log files recording access times, pages visited, errors encountered, and other platform interaction data.

Communications Data

• Records of live chat conversations with ajjjili support staff;
• Email correspondence sent to or received from ajjjili;
• Feedback, survey responses, and complaint records where submitted voluntarily.

How We Collect Data

ajjjili collects your personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, participate in a promotion, or voluntarily submit information through any ajjjili interface;
• Automatically through technology — when you access the platform, our servers automatically record technical data including your IP address, device identifiers, browser data, and interaction logs through cookies and similar tracking technologies;
• From payment providers — when you deposit or withdraw funds, your payment provider (GCash, Maya, BPI, BDO, etc.) transmits transaction confirmation data to ajjjili, which we use to credit or debit your account;
• From identity verification services — ajjjili may use third-party KYC and identity verification partners to assist in validating government-issued ID documents. These partners process your data only on our behalf and under strict data processing agreements;
• From fraud detection services — ajjjili uses automated systems and third-party fraud prevention tools that analyze account and transaction patterns. These systems may receive limited personal data to perform their functions;
• From regulatory and law enforcement authorities — in certain circumstances required by law, we may receive data about you from PAGCOR, the AMLC, or law enforcement agencies in the Philippines.

How We Use Your Data

ajjjili processes your personal data only for the specific, legitimate purposes described below. We do not use your data for any purpose that is incompatible with the reasons it was originally collected.

ajjjili will never use your personal data to make fully automated decisions that produce legal or similarly significant effects without your knowledge. Where automated profiling is used (for example, in fraud detection), a human review is available upon request.

Legal Basis for Processing

Under the Data Privacy Act of 2012, ajjjili processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and ajjjili — i.e., to operate your account, deliver gaming services, and process financial transactions;
• Legal obligation: Processing is required for ajjjili to comply with its obligations under Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160), and the Data Privacy Act itself;
• Legitimate interest: Processing is necessary for the legitimate interests of ajjjili — such as fraud prevention, platform security, and business analytics — provided such interests do not override your fundamental rights and freedoms;
• Consent: For certain types of processing — particularly the sending of promotional emails and SMS communications — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

Where ajjjili relies on legitimate interest as the legal basis for processing, we have conducted a legitimate interest assessment (LIA) to confirm that the processing is necessary, proportionate, and that your interests do not override ours in the specific context.

Data Sharing & Disclosure

ajjjili does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the limited circumstances described below, and only to the extent strictly necessary for the relevant purpose.

Service Providers and Processors

ajjjili engages third-party service providers who process personal data on our behalf and under our instructions. These include payment processing partners (GCash, Maya, BPI, BDO, Metrobank, and related payment infrastructure providers), identity verification and KYC service providers, game content providers and platform technology vendors, cloud hosting and infrastructure providers, and fraud detection and cybersecurity service partners. All such processors are bound by data processing agreements that require them to process your data only as instructed, maintain appropriate security measures, and not use your data for their own purposes.

Regulatory and Law Enforcement Authorities

ajjjili is required by Philippine law to disclose certain personal and financial data to regulatory and law enforcement authorities in specific circumstances. This includes mandatory reporting to the Anti-Money Laundering Council (AMLC) for covered and suspicious transactions under RA 9160; disclosure to PAGCOR in the exercise of its regulatory oversight and audit functions; and disclosure to the National Privacy Commission (NPC) in the event of a personal data breach, as required by NPC Circular 16-03.

ajjjili will also disclose personal data to Philippine courts or law enforcement agencies where required by a valid court order, subpoena, or other lawful legal process.

Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of the assets of ajjjili, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the Privacy Policy of the acquiring entity before your data is transferred and becomes subject to a different privacy policy.

With Your Consent

ajjjili may share your data with third parties for purposes not listed above where we have obtained your prior, freely given, and informed consent to do so. You may withdraw such consent at any time.

Data Retention

ajjjili retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply as a general guide:

• Account and KYC data: Retained for the duration of your account relationship with ajjjili, plus a minimum of five (5) years after account closure — consistent with PAGCOR licensing requirements and the Anti-Money Laundering Act's record-keeping obligations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with RA 9160 (as amended by RA 10365);
• Support and communications records: Retained for three (3) years from the date of the communication, or longer where relevant to an ongoing dispute or regulatory investigation;
• Gameplay and session logs: Retained for two (2) years from the date of the session for operational purposes, and for up to five (5) years where required for regulatory audit or dispute resolution;
• Marketing consent records: Retained for as long as your consent remains active, plus three (3) years following withdrawal of consent to demonstrate compliance.

When personal data is no longer required for any of the purposes described in this Policy and no legal retention obligation applies, ajjjili will securely delete or anonymize the data in accordance with its data lifecycle management procedures.

Data Security

ajjjili implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• 256-bit SSL/TLS encryption on all data transmitted between your device and the ajjjili platform — indicated by the HTTPS padlock in your browser;
• Encryption at rest for sensitive stored data including government ID documents and financial records, using industry-standard AES-256 encryption;
• Password hashing using bcrypt with individual salts — your password is never stored in a form that can be reversed;
• Two-factor authentication (2FA) available to all accounts for login security, requiring a one-time code in addition to your password;
• Access controls and role-based permissions that limit ajjjili staff access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity professionals;
• Audit logging of all administrative access to personal data systems, with automatic alerts for anomalous access patterns;
• Secure data center infrastructure hosted in facilities with physical security controls, redundant systems, and disaster recovery capabilities.

While ajjjili takes every reasonable precaution to protect your data, no online platform can guarantee absolute security against all possible threats. You are also responsible for maintaining the security of your own account credentials and ensuring your device is free from malware. If you suspect unauthorized access to your account, contact ajjjili support immediately via live chat or at [email protected].

Personal Data Breach Protocol

In the event of a personal data breach that is likely to result in a real risk of serious harm to affected individuals, ajjjili will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by NPC Circular 16-03. Affected users will be notified without undue delay where the breach is likely to result in high risk to their rights and freedoms.

Cookies & Tracking Technologies

ajjjili uses cookies and similar technologies to operate the platform, remember your preferences, analyze platform usage, and deliver relevant content. A cookie is a small text file stored on your device by your web browser when you visit a website.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the platform to function. These include session authentication cookies that keep you logged in, security cookies that protect against cross-site request forgery (CSRF), and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and responsible gaming settings you have configured. Disabling these cookies may reduce your platform experience.
• Analytics Cookies: Collect anonymized and aggregated data about how users interact with the ajjjili platform — such as which game categories are most visited and where users encounter errors. This data helps us improve the platform. No individual user is identified in our analytics reports.
• Security and Fraud Prevention Cookies: Used by our fraud detection systems to identify unusual patterns of behavior that may indicate account compromise, bot activity, or bonus abuse. These cookies are necessary for the security of your account and the integrity of the platform.

Managing Your Cookie Preferences

You can manage or disable non-essential cookies at any time through your browser settings. Please note that disabling certain cookies may affect the functionality of the ajjjili platform. Instructions for managing cookies in the most common browsers are available from the browser developers' support pages. ajjjili does not currently respond to "Do Not Track" signals from browsers, as there is no industry-wide standard for interpreting these signals.

Your Privacy Rights

Under the Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by ajjjili. These rights may be subject to certain conditions and limitations under applicable law.