abjili Privacy Policy

1 Introduction

abjili is an online gaming platform providing casino games, sports betting, and bingo services to eligible players in the Philippines. In the course of operating these services, abjili necessarily collects and processes personal data relating to registered players, prospective players, and visitors to our website.

abjili is committed to handling personal data in a manner that is lawful, transparent, and consistent with the rights of data subjects under Philippine law. This Policy sets out the full extent of our data collection and processing activities, the lawful bases on which we process your data, your rights as a data subject, and the mechanisms through which you may exercise those rights.

abjili's approach to privacy is shaped by the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. References to "personal data" throughout this Policy carry the meaning ascribed to that term under the Data Privacy Act.

2 Data Controller Information

For the purposes of the Data Privacy Act of 2012 and this Policy, abjili is the personal information controller in respect of the data collected and processed through the abjili platform.

Inquiries regarding this Policy, requests to exercise data subject rights, or formal data privacy complaints may be directed to abjili's Data Privacy Officer (DPO) via the contact information provided in Section 15 of this Policy.

3 Personal Data We Collect

abjili collects the following categories of personal data from players and visitors:

abjili does not knowingly collect special categories of sensitive personal data (such as health data, religious affiliation, or political views) except where explicitly required for compliance with responsible gaming obligations or applicable law.

4 How We Collect Your Data

abjili collects personal data through the following methods:

• Direct provision by you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact our support team, or update your Account settings;
• Automated collection — technical data including IP addresses, device identifiers, and browser information is collected automatically when you access the abjili platform, via cookies and server logs;
• Payment processors — transaction confirmation data is received from GCash, Maya, and banking partners when you complete a deposit or withdrawal;
• Third-party game providers — game session data, RNG audit logs, and platform activity records are transmitted to abjili by our integrated game studios for the purposes of game integrity and account management;
• Identity verification services — where abjili utilises third-party KYC verification services, those services may provide verification outcome data to abjili.

5 Purpose & Legal Basis for Processing

abjili processes your personal data only for specific, legitimate purposes. The table below identifies the primary processing activities and the legal basis for each:

6 Cookies & Tracking Technologies

abjili uses cookies and similar tracking technologies to enable essential platform functionality, maintain your login session, and analyse how players interact with the abjili website. The following categories of cookies are used:

• Strictly Necessary Cookies — Required for the abjili platform to function, including session management, login authentication, and security features. These cannot be disabled without impairing platform functionality;
• Functional Cookies — Store your preferences such as language settings and responsible gaming configuration within your abjili Account;
• Analytics Cookies — Collect anonymised information about how players navigate the abjili platform, which games are accessed most frequently, and how sessions are structured. This data is used to improve the platform experience;
• Session Cookies — Temporary cookies that are deleted when you close your browser, used to maintain your active session while you are logged in to abjili.

You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies will impair your ability to use core abjili platform features, including account login.

7 Data Sharing & Third Parties

abjili does not sell, lease, or trade your personal data to third parties. We share your personal data only in the following circumstances and only to the extent necessary:

• Payment processors (GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other partner payment providers) — to process your deposits and withdrawals;
• KYC and identity verification service providers — to perform identity and document verification as required before withdrawal;
• Game software providers (JILI Games, Pragmatic Play, PG Soft, and other integrated studios) — to the extent necessary for game delivery, fairness auditing, and session logging;
• IT and cloud service providers — for hosting, data storage, security monitoring, and platform infrastructure services, under contractual data processing agreements;
• Legal and regulatory authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where required by law or court order;
• Professional advisers — including lawyers and auditors, where necessary for legal proceedings, compliance audits, or corporate transactions, subject to professional confidentiality obligations.

All third parties with whom abjili shares personal data are required to process such data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data privacy law.

8 Data Security Measures

abjili implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and abjili servers;
• Encrypted storage of passwords using industry-standard hashing algorithms — abjili staff cannot read your password;
• Access controls limiting staff access to personal data on a strict need-to-know basis;
• Two-factor authentication (2FA) available for player accounts to protect against unauthorised login;
• Regular security assessments and penetration testing of the abjili platform infrastructure;
• Automated monitoring for suspicious login activity, unusual transaction patterns, and other indicators of security compromise;
• Data breach response procedures consistent with NPC Circular No. 16-03 on Security of Personal Data in Government Agencies and similar applicable guidance.

9 Data Retention

abjili retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and identity data — retained for the duration of your active Account plus a minimum of five (5) years following Account closure, to comply with anti-money laundering record-keeping requirements under Philippine law;
• KYC documents — retained for a minimum of five (5) years from the date of submission, consistent with AMLC and PAGCOR record-keeping requirements;
• Transaction and gaming history — retained for a minimum of five (5) years from the date of each transaction or gaming session;
• Communications data (support transcripts, emails) — retained for three (3) years from the date of the communication;
• Technical and analytics data — typically retained for twelve (12) months in identifiable form, after which it may be anonymised for aggregate analysis;
• Marketing preferences — retained until you withdraw consent or close your Account, plus a reasonable period for compliance documentation purposes.

On expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with abjili's data disposal procedures.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by abjili:

• Right to be Informed — the right to be notified of the purposes, scope, and manner of processing of your personal data before or at the time of collection;
• Right of Access — the right to request a copy of the personal data abjili holds about you, along with information about how it is used;
• Right to Rectification — the right to request correction of inaccurate or incomplete personal data abjili holds about you;
• Right to Erasure or Blocking — the right to request deletion or blocking of your personal data where processing is no longer necessary, unlawful, or where consent has been withdrawn, subject to our legal retention obligations;
• Right to Data Portability — the right to receive a structured, machine-readable copy of personal data you have provided to abjili, where processing is based on your consent or the performance of a contract;
• Right to Object — the right to object to the processing of your personal data for purposes of direct marketing, profiling, or where processing is based on legitimate interests;
• Right to Damages — the right to be indemnified for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.

To exercise any of these rights, contact abjili's Data Privacy Officer using the details set out in Section 15. abjili will respond to all valid data subject rights requests within thirty (30) days of receipt, subject to identity verification requirements.

11 Marketing Communications

abjili may send you promotional communications including information about new games, bonus offers, tournament invitations, and abjili platform updates. Such communications are sent only where you have provided your explicit consent during registration or at a later time through your Account settings.

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your abjili Account settings;
• Clicking the unsubscribe link contained in any abjili marketing email;
• Contacting abjili support at [email protected] with a written request to opt out.

Withdrawal of marketing consent does not affect the lawfulness of processing carried out prior to withdrawal. You will continue to receive transactional and account-related communications (such as deposit confirmations, withdrawal notifications, and security alerts) regardless of your marketing preferences, as these are necessary for the operation of your abjili Account.

12 Protection of Minors

If you believe that a minor has registered an Account or provided personal data to abjili, please notify our Data Privacy Officer immediately at the contact details in Section 15. abjili takes the protection of minors extremely seriously and will take prompt action on any such notification.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms, including abjili. More information about responsible gaming and age verification is available on the Responsible Gaming page.

13 Cross-Border Data Transfers

Some of abjili's service providers — including game studios and cloud infrastructure partners — may process personal data outside of the Philippines. Where such cross-border data transfers occur, abjili ensures that:

• The recipient country provides an adequate level of protection for personal data consistent with the standards required by the Data Privacy Act of 2012 and NPC regulations;
• Contractual data transfer agreements incorporating appropriate safeguards are in place between abjili and the recipient service provider;
• Personal data transferred cross-border is limited to the minimum necessary for the specific processing purpose.

Cross-border transfers of abjili player data occur solely in connection with the delivery of gaming services, payment processing, and platform infrastructure — not for independent marketing or data monetisation purposes.

14 Changes to This Privacy Policy

abjili may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered players by email to their registered address and/or by a prominent notice on the abjili platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how abjili handles your personal data.

Your continued use of the abjili platform following notification of an updated Policy constitutes your acknowledgement of the changes. If you do not agree with a material change to this Policy, you may close your Account by contacting abjili support.

15 Contact, DPO & Complaints

For all data privacy enquiries, rights requests, or complaints regarding abjili's handling of your personal data, please contact our Data Privacy Officer:

If your concern relates to a data breach that may have affected your personal data, please mark your communication as urgent. abjili will prioritise breach-related notifications and respond within the timeframes required by the NPC's data breach notification rules.

For complaints that abjili has been unable to resolve to your satisfaction, you may escalate the matter to the National Privacy Commission (NPC) of the Philippines, whose contact details are available through the NPC's official government channels.