09 jili Privacy Policy

1Introduction

09 jili ("we", "us", "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the 09 jili platform at 09jili.org ("the Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data in connection with your use of the Platform.

This Privacy Policy applies to all Players, registered account holders, and visitors to the 09 jili Platform. It should be read together with the 09 jili Terms & Conditions, which govern your use of the Platform generally.

2Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, 09 jili is the personal information controller responsible for the personal data collected through the Platform.

If you have any questions about how 09 jili handles your personal data, or if you wish to exercise any of your data subject rights, please contact us using the details provided in Section 15 of this Privacy Policy.

3Personal Data We Collect

09 jili collects the following categories of personal data, depending on how you interact with the Platform:

09 jili does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by applicable law (for example, for responsible gaming self-exclusion compliance).

4How We Collect Your Data

09 jili collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or use any interactive feature of the Platform.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access or browse the Platform. See Section 9 for full details on our cookie practices.
• From third parties — including identity verification service providers, payment processors (such as GCash and PayMaya), fraud prevention agencies, and regulatory authorities, where we are legally permitted to receive such data.

5How We Use Your Personal Data

09 jili uses the personal data we collect for the following purposes:

• To create, verify, and manage your 09 jili account.
• To process deposits and withdrawals and maintain accurate financial records.
• To verify your identity and age (you must be 21 years or older) in compliance with applicable Philippine law and regulatory requirements.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To personalise your experience on the Platform, including game recommendations and promotional offers where you have consented to receive them.
• To provide customer support and respond to your enquiries and complaints.
• To operate and enforce our responsible gaming tools, including deposit limits, session limits, and self-exclusion.
• To send you transactional communications, such as account confirmations, deposit receipts, and security alerts.
• To send you marketing communications about 09 jili promotions and new features, where you have given your consent or where we have a legitimate interest in doing so.
• To comply with our legal and regulatory obligations under Philippine law, including obligations to PAGCOR and other relevant authorities.
• To analyse Platform usage and improve our services, games, and user experience.

6Legal Basis for Processing

09 jili processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing is necessary to perform our contract with you (the Terms & Conditions), including account management, payment processing, and game provision.
• Legal obligation — processing is necessary to comply with applicable Philippine laws and regulations, including anti-money laundering requirements, age verification obligations, and PAGCOR regulatory requirements.
• Legitimate interests — processing is necessary for our legitimate interests in operating a safe, fair, and commercially viable gaming platform, including fraud prevention, security monitoring, and service improvement, provided these interests are not overridden by your rights and interests.
• Consent — where we rely on your consent as the legal basis for processing (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7Data Sharing & Disclosure

09 jili does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors — GCash, PayMaya / Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions.
• Identity verification providers — third-party KYC and age verification service providers to confirm your identity and eligibility.
• Fraud prevention and security providers — to detect and prevent fraudulent activity, money laundering, and other prohibited conduct.
• Technology and infrastructure providers — cloud hosting, data storage, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities — including PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and law enforcement agencies, where we are legally required or permitted to disclose your data.
• Professional advisers — lawyers, auditors, and accountants, where necessary for the conduct of our business and subject to professional confidentiality obligations.

8Data Retention

09 jili retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Account data and transaction records are retained for a minimum of five (5) years following account closure, in accordance with Philippine anti-money laundering regulations.
• Identity verification documents are retained for the period required by applicable KYC regulations.
• Customer support communications are retained for three (3) years from the date of the communication.
• Technical and usage data collected via cookies and server logs is retained for up to twelve (12) months.
• Responsible gaming records, including self-exclusion data, are retained for the duration of the exclusion period and for five (5) years thereafter.

When personal data is no longer required, 09 jili will securely delete or anonymise it in accordance with our data retention and disposal procedures.

9Cookies & Tracking Technologies

09 jili uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you visit the Platform. We use the following types of cookies:

• Strictly necessary cookies — essential for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled.
• Functional cookies — remember your preferences and settings (such as language and display preferences) to improve your experience.
• Analytics cookies — collect anonymised data about how visitors use the Platform, helping us understand usage patterns and improve our services.
• Marketing cookies — used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns, where you have consented to receive marketing communications.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information, refer to the help documentation of your browser.

10Data Security

09 jili implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 09 jili Platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures to detect, contain, and notify affected individuals of any personal data breach in accordance with the requirements of the Data Privacy Act of 2012.

11Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 09 jili:

• Right to be informed — the right to be informed about how your personal data is collected and processed, as set out in this Privacy Policy.
• Right of access — the right to request a copy of the personal data 09 jili holds about you.
• Right to rectification — the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object — the right to object to the processing of your personal data where we rely on legitimate interests as the legal basis, or where we process your data for direct marketing purposes.
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to withdraw consent — where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us using the details in Section 15. We will respond to all verified requests within thirty (30) days of receipt.

12Children's Privacy

The 09 jili Platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on the 09 jili Platform, please contact us immediately at the details provided in Section 15.

13Third-Party Links

The 09 jili Platform may contain references to third-party services, such as payment providers. 09 jili is not responsible for the privacy practices of any third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with the Platform.

14Updates to This Privacy Policy

09 jili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, we will notify registered Players via email or a prominent notice on the Platform prior to the changes taking effect.

The effective date at the top of this Privacy Policy indicates when it was last updated. We recommend reviewing this page periodically. Continued use of the Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

15Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint about how 09 jili has handled your personal data, please contact our Data Protection Officer:

Email: [email protected]

Email addresses on this site are displayed as plain text for informational purposes only and are not clickable links.

We will acknowledge your request within five (5) business days and aim to resolve all data privacy concerns within thirty (30) days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.