Privacy Policy

1 Introduction

aajjili is an online gaming platform built specifically for Filipino players, offering slots, live casino, sports betting, bingo, and a wide range of other games — all transacted in Philippine Peso (₱). We understand that when you share your personal information with us, you are placing a meaningful level of trust in aajjili. We take that responsibility seriously.

This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC). Where applicable, this policy also reflects internationally recognised best practices in data protection.

This policy applies to all personal data collected through the aajjili website at aajjili.net, through aajjili mobile applications (if any), and through any communication between you and the aajjili support team, including live chat, email, and social messaging channels.

If you have any questions about this policy or wish to exercise your data rights, please contact our Data Protection Officer (DPO) as described in Section 13 of this document.

2 Data We Collect

aajjili collects personal data from you in several ways — directly when you provide it to us, automatically when you use the platform, and occasionally from third-party sources as part of identity verification. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Residential address (including province, city, barangay, and ZIP code)
• Email address
• Mobile number
• Username and encrypted password
• Government-issued ID details (SSS, PhilSys, passport, driver's license) — collected during KYC verification

2.2 Financial & Transaction Data

• GCash or PayMaya account reference numbers
• Bank account details (BPI, BDO, Metrobank) — account name and number only, no full account credentials
• Visa or Mastercard details (card type and last four digits only — full card numbers are never stored by aajjili)
• USDT wallet addresses
• Deposit and withdrawal transaction history
• Bet history and game records
• Bonus and promotional activity records

2.3 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session duration and login timestamps
• Pages visited and features used on the platform
• Referral source (how you arrived at aajjili.net)
• Cookie identifiers and similar tracking data (see Section 7)

2.4 Communications Data

• Live chat transcripts with aajjili support agents
• Email correspondence with the aajjili team
• Feedback, survey responses, and complaint records

3 How We Use Your Data

aajjili uses your personal data for the following purposes:

aajjili will never use your personal data for a purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate lawful basis for the new use.

4 Legal Basis for Processing

Under the Data Privacy Act of 2012, aajjili must have a lawful basis for processing your personal data. Depending on the type of data and the purpose of processing, aajjili relies on one or more of the following legal bases:

• Contractual necessity: Processing your registration data, financial data, and transaction records is necessary to provide you with the aajjili gaming service and fulfil our contractual obligations to you as a member.
• Legal obligation: Processing identity data for KYC verification and reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) is required by Philippine law, including the Anti-Money Laundering Act (AMLA) and its implementing regulations.
• Legitimate interests: Processing technical and usage data for fraud detection, platform security, and service improvement reflects aajjili's legitimate operational interests, provided those interests do not override your privacy rights.
• Consent: Sending marketing communications via email, SMS, or push notification is based on your explicit, freely given, and informed consent at the time of registration or through a subsequent preference update. You may withdraw this consent at any time.

5 Sharing Your Data

aajjili does not sell your personal data to any third party. We share personal data only in the following limited and controlled circumstances:

5.1 Service Providers

aajjili works with trusted third-party service providers who process data on our behalf under strict data processing agreements. These include payment processors (GCash, PayMaya, Dragonpay, card payment gateways), identity verification providers, cloud hosting and infrastructure providers, and customer support platform operators. These providers are contractually prohibited from using your data for any purpose other than providing the specific service to aajjili.

5.2 Game Content Providers

Some games on the aajjili platform are powered by licensed third-party game studios. These studios may receive session identifiers and game-specific data necessary to operate the game. They do not receive your full registration details. All third-party studios used by aajjili are vetted for compliance with data protection standards.

5.3 Regulatory and Legal Authorities

aajjili is required by Philippine law to share certain data with regulatory bodies including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) upon lawful request. We may also disclose personal data to law enforcement agencies where required by a court order or other binding legal process.

5.4 Business Transfers

In the event that aajjili undergoes a merger, acquisition, or sale of all or part of its business assets, your personal data may be transferred to the acquiring entity. In such cases, aajjili will notify affected members before their data is transferred and becomes subject to a different privacy policy.

6 Data Retention

aajjili retains your personal data for as long as your account remains active and for a period after account closure as required by law or legitimate operational need. Specific retention periods are as follows:

• Account and identity data: Retained for the lifetime of your account and for a minimum of five (5) years after account closure, in compliance with AMLA record-keeping obligations.
• Transaction records (deposits, withdrawals, bets): Retained for a minimum of five (5) years after the date of each transaction.
• KYC verification documents: Retained for the period required by applicable AML regulations, typically five years from the end of the business relationship.
• Support communications: Live chat transcripts and email correspondence are retained for two (2) years after the ticket is closed, unless the communication is relevant to an ongoing dispute.
• Marketing consent records: Retained for as long as you remain subscribed and for one (1) year after you unsubscribe, to demonstrate compliance with your consent preferences.
• Technical/usage logs: Retained for a rolling period of twelve (12) months for security monitoring purposes, after which they are anonymised or deleted.

When data is no longer required for the purposes for which it was collected and has passed its minimum retention period, aajjili will securely delete or anonymise it so that it can no longer be linked to you as an individual.

7 Cookies & Tracking Technologies

aajjili uses cookies — small text files placed on your device — along with similar tracking technologies such as web beacons and local storage objects, to operate and improve the platform. The types of cookies we use are:

• Strictly necessary cookies: These are essential for the platform to function. They maintain your login session, remember your language preference, and keep you securely authenticated. These cookies cannot be disabled while you are using aajjili.
• Performance and analytics cookies: These collect anonymised data about how visitors use aajjili.net — such as which pages are visited most frequently and whether users encounter errors. This data helps us improve the platform. We use analytics tools that process data in aggregate form only.
• Functional cookies: These allow the platform to remember choices you make — such as your preferred game category or notification settings — to provide a more personalised experience.
• Marketing cookies: With your consent, we may use cookies to track whether promotional content shown to you on aajjili.net has influenced your navigation or gaming behaviour. We do not use third-party advertising network cookies that track you across external websites.

You can manage or delete cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of the aajjili platform. For full details on managing cookies in your specific browser, refer to your browser's official help documentation.

8 Security Measures

aajjili implements a layered set of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and aajjili's servers.
• Encrypted password storage — your aajjili password is hashed using a modern cryptographic algorithm and is never stored in plain text. Even aajjili employees cannot see your password.
• Two-factor authentication (2FA) — available and strongly recommended for all member accounts.
• Role-based access controls — aajjili staff can only access personal data relevant to their specific operational role. Access is logged and audited.
• Regular security assessments — aajjili conducts periodic vulnerability assessments and penetration tests on its platform infrastructure.
• Fraud detection systems — automated monitoring scans account activity for patterns indicative of unauthorised access, account takeover attempts, or fraudulent transactions.

9 Your Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by aajjili:

• Right to be informed: You have the right to know that aajjili is collecting your personal data, the purposes for which it is being collected, and how it will be used — which is the primary purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data aajjili holds about you at any time. We will provide this within 15 business days of verifying your identity.
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account information directly from your aajjili account dashboard.
• Right to erasure: You may request that aajjili delete your personal data. This right is subject to our legal obligations — data that must be retained under AMLA or other Philippine laws cannot be deleted until the applicable retention period has expired.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time, and this objection must be respected immediately. You may also object to other types of processing based on legitimate interests.
• Right to data portability: You may request that aajjili provide your personal data to you in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to file a complaint: If you believe aajjili has mishandled your personal data, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the rights listed above, contact aajjili's Data Protection Officer via live chat or at the email address listed in Section 13. All requests will be acknowledged within three (3) business days and resolved within fifteen (15) business days, or within such extended period as the law permits for complex requests.

10 Minors & Age Policy

The aajjili platform is strictly for persons aged 21 years and above, in line with the minimum age requirement for casino-style online gaming in the Philippines as recognised under the PAGCOR regulatory framework.

aajjili does not knowingly collect or process personal data from individuals under the age of 21. Age verification is a mandatory step in the aajjili KYC process, and registration cannot be completed without confirming that you meet the minimum age requirement.

If aajjili discovers or is notified that a member has provided false age information during registration and is in fact under 21 years of age, aajjili will immediately:

• Close the underage member's account.
• Cancel all pending withdrawal requests.
• Forfeit any remaining account balance in line with our Terms & Conditions.
• Delete all personal data associated with the underage account, except for records that must be retained for regulatory reporting purposes.

Parents and guardians who believe a minor may have registered with aajjili using false information should contact aajjili support immediately via live chat or email. We will act promptly on all such reports.

11 International Data Transfers

aajjili's primary data processing infrastructure is located within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers and game studio partners — may process or store data outside of the Philippines.

Where personal data is transferred to a country outside the Philippines, aajjili ensures that appropriate safeguards are in place to protect that data to a standard consistent with the Data Privacy Act of 2012. These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission.
• Transfers only to countries or organisations that the NPC has determined provide an adequate level of data protection.
• Binding corporate rules applicable to the service provider's group of companies.

You may request further information about the specific safeguards in place for any particular international data transfer by contacting our Data Protection Officer.

12 Changes to This Privacy Policy

aajjili reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or regulatory guidance from the National Privacy Commission. The most current version of this policy will always be available at aajjili.net/privacy-policy.

When we make material changes — meaning changes that significantly affect how we collect, use, or share your personal data — we will notify all registered members via email or through a prominent in-platform notification at least 14 days before the updated policy takes effect. Minor clarifications or formatting corrections may take effect immediately upon publication.

The "Effective Date" displayed at the top of this policy indicates when the current version came into force. We recommend reviewing this page periodically. Your continued use of the aajjili platform after a material update has taken effect constitutes your acceptance of the revised Privacy Policy.

13 Contact & Data Protection Officer

aajjili has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, please contact our DPO using the details below:

• Data Protection Officer: aajjili Privacy Team
• Email: [email protected] (subject line: "Data Privacy Request")
• Live Chat: Available 24/7 at aajjili.net — ask to be connected to the Privacy Team

All privacy-related inquiries will receive an acknowledgement within three (3) business days. We aim to resolve all requests within fifteen (15) business days, although complex requests may require up to thirty (30) days, in which case we will inform you of the extended timeline.

If you are not satisfied with aajjili's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC), the independent authority responsible for enforcing the Data Privacy Act of 2012.