Privacy Policy

xgjili is an online gaming platform serving Filipino players across the Philippines. As part of delivering our services — which include online casino games, live dealer tables, bingo, slots, and related financial transactions — we necessarily collect and process certain personal information about our registered players and website visitors.

We take our obligations under the Data Privacy Act of 2012 (RA 10173) and the regulations of the National Privacy Commission (NPC) of the Philippines seriously. This Policy is designed to be transparent, plain-language, and genuinely useful — not just a legal formality. We want every xgjili player in Manila, Cebu, Davao, Quezon City, and across the archipelago to understand exactly how their data is handled.

This Policy applies to all personal data collected through the xgjili website, mobile platform, customer support channels, and any other touchpoint where you interact with xgjili. It does not apply to third-party websites or services that may be linked from our platform, as those are governed by their own privacy policies.

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, the data controller responsible for your personal information is:

As data controller, xgjili determines the purposes and means of processing your personal data. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are bound by contractual obligations consistent with this Policy and applicable law.

xgjili collects the following categories of personal data, depending on how you interact with our platform:

xgjili collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account profile.
• Automated technologies: Technical and usage data collected automatically when you visit xgjili.one, including through cookies, web beacons, server logs, and similar tracking technologies. See Section 10 for full details on our cookie practices.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; geolocation data from IP intelligence services used to verify your location for regulatory compliance.
• Payment providers: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay when you conduct financial transactions on the platform.

We do not purchase personal data lists from third-party data brokers, and we do not collect data from your social media profiles without your explicit consent.

xgjili processes your personal data for the following specific, legitimate purposes:

1. Account management: Creating, maintaining, and securing your xgjili player account, including authentication and password recovery.
2. Identity verification (KYC): Verifying your identity and age (21+) in compliance with PAGCOR regulations and anti-money laundering requirements under RA 9160 (Anti-Money Laundering Act) and its amendments.
3. Transaction processing: Processing deposits and withdrawals via GCash, PayMaya, and Philippine bank channels; maintaining accurate financial records.
4. Game delivery: Providing access to casino games, live dealer tables, bingo, and slot games; recording game outcomes and maintaining fair play integrity.
5. Fraud prevention and security: Detecting and preventing fraudulent activity, money laundering, bonus abuse, multi-accounting, and other prohibited conduct.
6. Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, RA 10173, RA 9160, and other applicable Philippine laws and regulations.
7. Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance.
8. Responsible gaming: Administering self-exclusion requests, deposit limits, cooling-off periods, and other responsible gaming tools; monitoring for signs of problem gambling.
9. Marketing communications: Sending promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.
10. Platform improvement: Analysing usage patterns and player behaviour (in aggregated, anonymised form where possible) to improve the xgjili platform, fix bugs, and develop new features.

Under the Data Privacy Act of 2012, xgjili processes your personal data on the following legal bases:

• Consent (Section 12(a), RA 10173): For marketing communications and optional data uses where you have given us your explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Contractual necessity (Section 12(b), RA 10173): Processing necessary to perform our contract with you — i.e., to operate your account, process transactions, and deliver gaming services.
• Legal obligation (Section 12(c), RA 10173): Processing required to comply with our legal obligations under PAGCOR regulations, AML laws, tax laws, and NPC requirements.
• Legitimate interests (Section 12(f), RA 10173): Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights and freedoms.

xgjili shares your personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and InstaPay receive transaction data necessary to process your deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• KYC and identity verification providers: Third-party identity verification services that assist us in confirming your identity and age in compliance with PAGCOR and AML requirements.
• Game software providers: Game studios and live dealer platform providers receive your player ID and gaming session data to deliver game content. They do not receive your full identity or financial data.
• Fraud detection and security services: Specialised providers that help us detect and prevent fraudulent activity, multi-accounting, and bonus abuse.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where we are legally required to disclose information.
• Legal and professional advisers: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of xgjili's business, your data may be transferred to the acquiring entity, subject to equivalent privacy protections.

xgjili retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

xgjili implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and xgjili servers is encrypted using TLS 1.2 or higher (HTTPS). This protects your login credentials, financial data, and personal information from interception.
• Encryption at rest: Sensitive personal data stored on our servers, including identity documents and financial records, is encrypted using AES-256 encryption.
• Access controls: Access to personal data is restricted to xgjili personnel and authorised third parties on a strict need-to-know basis. All access is logged and audited.
• Password security: Account passwords are stored as salted cryptographic hashes. xgjili staff cannot view your password in plain text.
• Two-factor authentication (2FA): xgjili supports 2FA for player accounts to provide an additional layer of login security.
• Regular security assessments: We conduct periodic vulnerability assessments and penetration testing of our platform infrastructure.
• Incident response: In the event of a personal data breach that poses a risk to your rights and freedoms, xgjili will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular 16-03.

xgjili uses cookies and similar tracking technologies on our website to enhance your experience, maintain your session, and analyse platform usage. A cookie is a small text file placed on your device when you visit a website.

We use the following categories of cookies:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery (CSRF). These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings, game display options, and responsible gaming tool configurations.
• Analytics cookies: Help us understand how players use the platform — which pages are visited most, where players encounter issues, and how navigation flows work. Data collected is aggregated and anonymised where possible.
• Marketing cookies: Used only where you have consented, to track the effectiveness of our promotional campaigns and deliver relevant offers.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the xgjili platform. Most modern browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by xgjili. You may exercise any of these rights by contacting our Data Protection Officer (see Section 15):

xgjili will respond to all verified data subject requests within fifteen (15) business days of receipt. We may request proof of identity before processing your request to protect against unauthorised access to your data.

The xgjili platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online gaming. xgjili does not knowingly collect personal data from individuals under the age of 21.

As part of our registration and KYC process, xgjili verifies the age of all players before granting access to real-money gaming. If we discover that personal data has been collected from a person under 21 years of age, we will:

• Immediately suspend and close the associated account
• Delete all personal data collected from the minor as promptly as possible
• Refund any deposits made, at our discretion, after investigation
• Report the incident to the relevant authorities where required by law

Parents and guardians who believe their child may have accessed the xgjili platform are encouraged to contact our support team immediately at [email protected].

Some of xgjili's service providers and game software partners may be located outside the Philippines. Where your personal data is transferred to a country outside the Philippines, xgjili ensures that appropriate safeguards are in place to protect your data, in accordance with Section 21 of RA 10173 and NPC guidelines on cross-border data transfers.

These safeguards may include:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law
• Transfers to countries that the NPC has determined provide an adequate level of data protection
• Your explicit consent to the transfer, where required

You may request information about the specific safeguards applicable to any cross-border transfer of your personal data by contacting our Data Protection Officer.

xgjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email and/or by posting a prominent notice on the xgjili platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how xgjili protects your personal data.

Your continued use of the xgjili platform after any amendments have been posted constitutes your acknowledgement of the updated Policy. If you do not agree with the revised Policy, you should cease using the platform and may request account closure.

xgjili has appointed a Data Protection Officer (DPO) in accordance with Section 21(c) of RA 10173 and NPC Circular 17-01. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that xgjili has not handled your personal data in accordance with RA 10173. The NPC can be reached through their official government channels.