Data Protection — Philippine Gaming Platform
ddjili Privacy
Policy
Your personal data matters to us. This Privacy Policy explains how ddjili collects, uses, stores, and protects your information in compliance with the Philippine Data Privacy Act of 2012 and PAGCOR regulations.
How ddjili Protects Your Data
We built our data practices around transparency, security, and full compliance with Philippine law — so you always know exactly where your information goes.
Encrypted Data Storage
All personal and financial data stored by ddjili is encrypted at rest using industry-standard AES-256 encryption. Your KYC documents, payment details, and account information are never stored in plaintext.
No Third-Party Data Sales
ddjili does not sell, rent, or trade your personal information to third-party marketers. Your data is used exclusively to operate your account, comply with Philippine regulations, and improve our service.
DPA 2012 Compliance
All data processing at ddjili follows the requirements of Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and is registered with the National Privacy Commission (NPC) of the Philippines.
Minimal Data Collection
ddjili follows the principle of data minimization — we only collect information that is strictly necessary for account registration, KYC verification, payment processing, and regulatory reporting.
Breach Notification
In the unlikely event of a data breach that affects your personal information, ddjili will notify affected players and the National Privacy Commission within 72 hours in accordance with NPC Circular 16-03.
Your Rights, Respected
As a ddjili player and a data subject under Philippine law, you have the right to access, correct, object to, and erase your personal data. We make exercising these rights straightforward and free of charge.
Table of Contents
01Introduction & Scope 02Data Controller Details 03Data We Collect 04How We Collect Data 05Purposes of Processing 06Legal Bases 07Data Sharing & Disclosure 08Cookies & Tracking 09Data Retention 10Data Security 11Your Rights 12Children & Minors 13Cross-Border Transfers 14Third-Party Links 15Policy Updates 16Contact & Complaints01Introduction & Scope
This Privacy Policy ("Policy") describes how ddjili ("ddjili," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "Player") who access or use the ddjili online gaming platform, including our website at ddjili.org, our mobile applications, and any related services (collectively, the "Platform").
ddjili is a PAGCOR-regulated online casino and sports betting platform serving Filipino players across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We are committed to protecting your personal data and handling it responsibly, transparently, and in full compliance with Philippine law.
Scope: This Policy applies to all personal data processed by ddjili in connection with your use of the Platform, including data collected during account registration, KYC verification, gameplay, deposits, withdrawals, customer support interactions, and marketing communications.
By registering for a ddjili account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must stop using the Platform and request account closure by contacting [email protected].
This Policy should be read together with ddjili's Terms and Conditions and Responsible Gaming Policy, both of which are available on this Platform and incorporated by reference.
02Data Controller Details
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), ddjili is the Personal Information Controller responsible for the personal data you provide through the Platform.
Our designated Data Protection Officer ("DPO") can be contacted for any data privacy concerns, requests to exercise your rights, or complaints relating to the handling of your personal information. All data privacy correspondence should be directed to:
- Email: [email protected] (subject line: "Data Privacy Request")
- Operating Platform: ddjili.org
- Regulatory Context: PAGCOR-licensed, Philippines
ddjili processes personal data only to the extent necessary to operate the Platform lawfully and in the legitimate interests of Filipino players. Our DPO is responsible for ensuring ongoing compliance with the Data Privacy Act and NPC regulations.
03Data We Collect
ddjili collects the following categories of personal data from players. We follow the principle of data minimization — we only collect what is genuinely necessary for the stated purposes.
| Data Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number | Registration & KYC verification |
| Contact Data | Email address, Philippine mobile number, residential address | Registration & account updates |
| Financial Data | GCash number, PayMaya account, bank account details (BPI, BDO, Metrobank), transaction history | Deposits, withdrawals & KYC |
| KYC Documents | Scanned/photo copies of government-issued ID, proof of address, selfie verification | Identity verification process |
| Gaming Activity Data | Game history, bet amounts, win/loss records, session durations, bonus usage | Continuous during Platform use |
| Technical Data | IP address, device type, browser type and version, operating system, login timestamps | Automatic upon Platform access |
| Communications Data | Live chat transcripts, support email exchanges, feedback submissions | Customer support interactions |
| Marketing Preferences | Communication opt-in/opt-out status, preferred language, promotional response data | Account settings & consent capture |
Sensitive Personal Information: ddjili does not intentionally collect sensitive personal information (as defined under Section 3(l) of the Data Privacy Act) beyond what is strictly required for KYC and regulatory compliance purposes. Where such data is collected (e.g., government ID numbers), it is subject to heightened security controls.
04How We Collect Data
ddjili collects your personal data through the following means:
- Directly from you: When you register a ddjili account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
- Automatically: When you access and use the Platform, our systems automatically collect technical data including your IP address, device identifiers, browser information, and session activity data through cookies, web beacons, and similar tracking technologies.
- From third-party payment processors: When you transact via GCash, PayMaya, BPI, BDO, Metrobank, Visa, or Mastercard, our payment processing partners may share transaction confirmation data with ddjili for financial reconciliation and fraud prevention purposes.
- From identity verification providers: ddjili may use accredited third-party KYC verification services to assist with the authentication of identity documents submitted by players. These providers share only the verification result and relevant identity data with ddjili.
- From regulatory authorities: In certain circumstances, PAGCOR or other Philippine regulatory bodies may share information with ddjili relevant to our compliance obligations or investigations.
You are responsible for ensuring that any personal data you provide to ddjili is accurate, current, and complete. Providing false or misleading information is a breach of ddjili's Terms and Conditions and may result in account suspension.
05Purposes of Processing
ddjili processes your personal data for the following specific, legitimate purposes:
- Account Registration & Management: To create, maintain, and administer your ddjili player account, including authentication, password recovery, and account settings management.
- KYC & Age Verification: To verify your identity and confirm that you are at least 21 years of age, as required under PAGCOR regulations and Philippine law. Age verification is mandatory — ddjili does not permit any person under 21 to use the Platform.
- Payment Processing: To process deposits and withdrawals via your selected payment method (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard), reconcile financial transactions, and maintain accurate account balances.
- Regulatory Compliance: To fulfill ddjili's legal and regulatory obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA, RA 9160 as amended), and the Data Privacy Act (RA 10173), including filing required reports with PAGCOR and the Anti-Money Laundering Council (AMLC).
- Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, bot activity, and other prohibited conduct on the Platform.
- Customer Support: To respond to your inquiries, resolve complaints, process disputes, and provide technical assistance through our 24/7 support channels.
- Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior and, where applicable, enforce self-exclusion requests, cooling-off periods, or deposit limits set by you or ordered by regulators.
- Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given explicit consent to receive such communications. You may withdraw consent at any time.
- Platform Improvement: To analyze aggregated, anonymized usage data to improve the functionality, performance, and user experience of the ddjili Platform.
No Secondary Use: ddjili does not process your personal data for purposes beyond those listed above without first obtaining your explicit consent or having a lawful basis to do so under the Data Privacy Act of 2012.
06Legal Bases for Processing
Under the Philippine Data Privacy Act of 2012, ddjili relies on the following legal bases for processing your personal data:
- Contractual Necessity: Processing is necessary to perform the contract between you and ddjili (i.e., the Terms and Conditions you agreed to upon registration). This covers account management, payment processing, and customer support.
- Legal Obligation: Processing is required to comply with ddjili's legal and regulatory obligations, including PAGCOR licensing requirements, AMLA reporting obligations, and NPC data governance requirements.
- Legitimate Interests: Processing is necessary for ddjili's legitimate business interests, including fraud prevention, platform security, and service improvement — provided these interests are not overridden by your fundamental rights and freedoms.
- Consent: For marketing communications, non-essential cookies, and any processing not covered by the above bases, ddjili relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Where processing is based on consent, you have the right to withdraw that consent at any time by updating your communication preferences in your account settings or by contacting [email protected].
07Data Sharing & Disclosure
ddjili does not sell or rent your personal data to any third party. We may share your information only in the following circumstances and only to the extent necessary for the stated purpose:
- PAGCOR and Philippine Regulatory Authorities: As a PAGCOR-licensed operator, ddjili is required to submit player data, transaction reports, and suspicious activity reports to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC), in accordance with our licensing conditions and Philippine law.
- Payment Service Providers: We share the minimum necessary financial data with our payment processing partners (including GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard) to facilitate deposits and withdrawals on your behalf.
- KYC & Identity Verification Providers: ddjili uses accredited third-party identity verification services to assist with KYC processes. These providers act as personal information processors under ddjili's instructions and are bound by strict data processing agreements.
- Game Software Providers: JILI and other game providers integrated into the ddjili Platform may receive pseudonymized player session data for the purpose of game performance monitoring and technical support. No personally identifiable information is shared with game providers beyond what is required for gameplay.
- Law Enforcement and Courts: Where ddjili is compelled by a lawful court order, subpoena, or directive from Philippine law enforcement or a regulatory authority, we will disclose the requested personal data in compliance with applicable legal process.
- Business Transfers: In the event of a merger, acquisition, or sale of ddjili's business or assets, personal data held by ddjili may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. Affected players will be notified in advance.
All third parties with whom ddjili shares personal data are required to process that data in accordance with applicable Philippine data protection law and are bound by contractual data processing agreements that prohibit secondary use of your information.
08Cookies & Tracking Technologies
ddjili uses cookies and similar tracking technologies on the Platform to ensure functionality, improve your experience, and support our security and analytics operations. The following types of cookies are used:
| Cookie Type | Purpose | Consent Required? |
|---|---|---|
| Essential Cookies | Required for core Platform functionality — session management, login authentication, security tokens | No (strictly necessary) |
| Functional Cookies | Remember your preferences such as language settings and responsible gaming tool configurations | No (service delivery) |
| Analytics Cookies | Collect anonymized data on how players use the Platform to help us improve features and performance | Yes (consent-based) |
| Marketing Cookies | Track Platform visits to enable relevant promotional content delivery to opted-in players | Yes (consent-based) |
You can manage your cookie preferences at any time through the cookie settings panel available on the ddjili Platform. Please note that disabling essential cookies may affect the functionality of your account. Most browsers also allow you to control cookies through your browser settings.
ddjili does not use third-party advertising networks or social media tracking pixels that share your data with external platforms for targeted advertising purposes.
09Data Retention
ddjili retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:
- Account & KYC Data: Retained for a minimum of five (5) years from the date of account closure, as required under the Anti-Money Laundering Act and PAGCOR licensing conditions.
- Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA reporting requirements and Bureau of Internal Revenue (BIR) record-keeping obligations.
- Gaming Activity Logs: Retained for three (3) years from the date of each session, for regulatory audit purposes and responsible gaming monitoring.
- Customer Support Communications: Retained for two (2) years from the date of each interaction, for quality assurance and dispute resolution purposes.
- Marketing Data: Retained until you withdraw consent or close your account, whichever comes first.
- Technical Logs (IP, device data): Retained for twelve (12) months for security monitoring and fraud investigation purposes.
Upon expiry of the applicable retention period, ddjili will securely delete or anonymize your personal data so that it can no longer be linked to you as an individual. Anonymized, aggregated data may be retained indefinitely for statistical and analytical purposes.
10Data Security
ddjili implements a comprehensive set of technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
- Encryption: All data transmitted between your device and the ddjili Platform is protected by TLS 1.3 encryption. Data stored on ddjili's servers is encrypted at rest using AES-256 encryption.
- Access Controls: Personal data is accessible only to ddjili personnel who need it to perform their specific job functions. Access is controlled through role-based permission systems, multi-factor authentication, and regular access reviews.
- Infrastructure Security: ddjili's servers are hosted in accredited data centers with 24/7 physical security, environmental controls, and redundant systems. Regular penetration testing and vulnerability assessments are conducted by independent security specialists.
- Fraud Monitoring: Automated fraud detection systems continuously monitor account activity and transactions for suspicious patterns, including unauthorized login attempts, unusual financial behavior, and signs of account takeover.
- Staff Training: All ddjili employees who handle personal data receive regular data protection training and are bound by strict confidentiality obligations.
Your Responsibility: While ddjili takes every reasonable precaution to secure your data, you are responsible for maintaining the confidentiality of your ddjili account credentials. Never share your password with anyone. ddjili staff will never ask for your password via any communication channel.
If you suspect that your account has been compromised or that your personal data has been accessed without authorization, please contact our support team immediately at [email protected] so we can take prompt action to secure your account.
11Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ddjili. These rights can be exercised free of charge by contacting our Data Protection Officer at [email protected] with the subject line "Data Privacy Request."
Right to Access
You have the right to request a copy of the personal data ddjili holds about you, along with information about how it is being used and with whom it has been shared.
Right to Correction
You have the right to request that ddjili correct any inaccurate, incomplete, or outdated personal data we hold about you without undue delay.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to ddjili's legal retention obligations under PAGCOR and AMLA requirements.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests on grounds relating to your particular situation.
Right to Block or Restrict
You may request that ddjili restrict or suspend the processing of your personal data while a correction or objection request is being resolved, or where processing is unlawful but you do not wish for the data to be deleted.
Right to Data Portability
You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.
Right to Damages
If you suffer damages as a result of inaccurate, incomplete, false, unlawfully obtained, or unauthorized use of your personal data, you have the right to seek indemnification from ddjili in accordance with the Data Privacy Act.
Right to File a Complaint
If you believe ddjili has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines via the NPC's official channels.
Response Timeline: ddjili will acknowledge all data subject requests within five (5) business days and will endeavor to fulfill or respond to each request within thirty (30) calendar days. Complex requests involving large volumes of data or requiring regulatory consultation may take longer, in which case we will notify you of the expected timeline.
12Children & Minors
ddjili's Platform is strictly intended for players who are at least 21 years of age, in accordance with PAGCOR regulations governing online casino and sports betting services in the Philippines. ddjili does not knowingly collect, process, or retain the personal data of any person under the age of 21.
During the registration process, all applicants are required to confirm that they are 21 years of age or older. KYC verification, which includes submission of a valid government-issued ID confirming date of birth, is mandatory before any real-money gameplay or withdrawals are permitted on the Platform.
If we discover that a minor has accessed the Platform: ddjili will immediately suspend the relevant account, initiate a full KYC review, return any deposits made (where legally permissible), and delete all personal data associated with the minor's account in accordance with applicable law. Any person found to have assisted a minor in accessing the Platform will have their own account permanently closed.
Parents and guardians are encouraged to use parental control tools to prevent minors from accessing online gambling platforms. If you believe a minor may have accessed ddjili's Platform using false information, please notify us immediately at [email protected].
13Cross-Border Data Transfers
ddjili primarily processes your personal data within the Philippines. However, in certain circumstances — for example, where ddjili uses internationally based game software providers, payment processing infrastructure, or cloud hosting services — your personal data may be transferred to, stored in, or processed in countries outside the Philippines.
Where such cross-border transfers occur, ddjili ensures that adequate safeguards are in place to protect your personal data, including:
- Entering into data processing agreements with all third-party processors that incorporate standard data protection clauses aligned with the requirements of the Philippine Data Privacy Act and NPC guidelines on cross-border data transfers.
- Transferring data only to countries or organizations that have been assessed as providing an adequate level of data protection comparable to Philippine standards.
- Implementing additional technical and organizational measures where the destination country's data protection standards are assessed as requiring supplementary safeguards.
You may request details of the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Protection Officer at [email protected].
14Third-Party Links
The ddjili Platform may contain references to third-party services — such as payment providers like GCash and PayMaya — which operate their own independent websites and privacy policies. When you are redirected to a third-party platform to complete a payment or identity verification, that third party's own privacy policy will govern the collection and processing of your data during that interaction.
ddjili is not responsible for the privacy practices or content of any third-party platform. We encourage you to review the privacy policy of any third-party service you use in connection with your ddjili account before providing your personal data to that service.
ddjili does not control and cannot accept responsibility for the privacy practices of third-party sites or services linked to or from the Platform. This Policy applies only to personal data collected and processed directly by ddjili through the ddjili Platform.
15Policy Updates
ddjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. All updates will be effective from the date posted on this page.
Where changes to this Policy are material — for example, where we introduce a new purpose for processing your personal data or change the categories of third parties with whom we share your information — ddjili will provide you with prominent notice of the change through the Platform and, where appropriate, via email to the address registered on your account.
Your continued use of the ddjili Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes to this Policy, you must stop using the Platform and contact [email protected] to request account closure.
Version History: The current version of this Privacy Policy is effective as of January 1, 2026. It supersedes all prior versions of ddjili's privacy policy or data protection notices previously published on the Platform.
16Contact & Complaints
If you have any questions, concerns, or requests relating to this Privacy Policy or ddjili's handling of your personal data, please contact our Data Protection Officer through the following channels:
- Email: [email protected] (subject line: "Data Privacy Request")
- Response Time: We acknowledge all privacy-related inquiries within five (5) business days.
- Languages: English and Filipino (Tagalog) support available.
If you are not satisfied with ddjili's response to your privacy concern or if you believe that ddjili is processing your personal data in violation of the Data Privacy Act of 2012, you have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint mechanism.
Our commitment: ddjili takes every data privacy concern seriously. Whether you're a player in Manila, Cebu, Davao, or anywhere across the Philippines, your right to privacy is something we protect with the same rigor we apply to platform security and regulatory compliance. Reach out — we're here to help.
Play with Confidence at ddjili
Your data is protected, your identity is verified, and your experience is backed by a PAGCOR-regulated platform built specifically for Filipino players. Explore everything ddjili has to offer.
PAGCOR-regulated | 21+ only | Data protected under RA 10173