phljili Privacy Policy – How We Handle Your Personal Data

1 Who We Are

This Privacy Policy applies to phljili, the online gaming platform accessible at phljili.net, and all related services, features, games, and customer support channels operated under the phljili brand. References to "phljili," "we," "us," or "our" throughout this policy refer to the entity responsible for operating the phljili platform and for processing the personal data of registered players.

phljili is a licensed online gaming operator serving players in the Philippines. Our registered contact for data privacy matters is reachable at privacy@phljili.net. If you have any questions about this policy or how phljili handles your personal information, that is the right address to use.

2 Personal Data We Collect

phljili collects personal data across several stages of your relationship with us. Here is a breakdown of what we collect, at what point, and why:

When you create a phljili account, we collect your full legal name, date of birth, mobile phone number, and email address. This is the minimum information required to create a valid account and to verify that you meet our eligibility requirements.

As required by Philippine gaming regulations and our anti-money laundering obligations, phljili collects a copy of at least one government-issued Philippine ID. Acceptable documents include a PhilSys National ID, passport, driver's license, UMID, or voter's ID. In some cases we may request a selfie with your ID or a secondary document for additional verification.

When you make deposits or withdrawals, phljili records transaction amounts, dates, payment methods used, and the reference numbers provided by payment processors. We do not store your full GCash PIN, Maya password, or card CVV. Payment tokenisation is handled by the payment providers themselves, not stored directly by phljili.

phljili logs your gaming activity, including game sessions, bets placed, winnings, game type, and timestamps. This data is used for account management, dispute resolution, bonus tracking, and responsible gaming monitoring. It is not shared with advertisers.

When you access phljili, we automatically collect certain technical data including your IP address, device type, operating system, browser type, screen resolution, and session duration. This data helps us ensure platform security and optimise the experience for Filipino mobile users.

If you contact phljili's customer support team via email, live chat, or any other channel, we retain records of those communications to help resolve queries, train staff, and improve our service. These records are handled with the same security standards as all other personal data.

3 How phljili Uses Your Personal Data

phljili uses your personal data for specific, documented purposes. We do not use your data for anything that is not listed here, and we do not use it in ways that would be inconsistent with the expectations you would reasonably have when you created your account.

• Account Creation and Management: Your registration data is used to create and maintain your phljili account, verify your identity, and authenticate your logins.
• Age and Eligibility Verification: We use your date of birth and KYC documents to confirm that you meet the 21+ age requirement and are legally eligible to use phljili under Philippine law.
• Payment Processing: Financial data is used to process deposits and withdrawals, reconcile transactions, and comply with anti-money laundering requirements.
• Game Access and Account Features: Gaming activity data supports your access to all phljili games, maintains your account balance, tracks bonus progress, and powers VIP Club tier calculations.
• Responsible Gaming Monitoring: phljili analyses gaming activity patterns to identify potential signs of problem gambling and to enforce self-imposed limits set by players.
• Platform Security and Fraud Prevention: Device and IP data is used to detect suspicious login attempts, prevent account takeovers, and identify potential fraud or multi-accounting.
• Customer Support: Communications data is used to resolve queries, investigate complaints, and improve the quality of phljili's support services.
• Legal and Regulatory Compliance: phljili retains and, where required, discloses data to comply with Philippine gaming regulations, tax obligations, and law enforcement requests.
• Marketing Communications (opt-in only): If you have opted in to marketing, we may use your contact details to send promotions, bonus offers, and platform updates. You can opt out at any time.

4 Legal Basis for Processing Your Data

Under the Data Privacy Act of 2012, phljili must have a lawful basis for processing each type of personal data. The primary bases we rely on are:

• Contract Performance: Processing necessary to deliver the phljili service you registered for — including account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with Philippine gaming regulations, anti-money laundering laws, and any lawful regulatory request.
• Legitimate Interest: Processing for platform security, fraud detection, and responsible gaming monitoring, where phljili has a genuine operational or safety interest that does not override your privacy rights.
• Consent: For marketing communications only, where you have explicitly opted in. This consent can be withdrawn at any time without affecting your account access.

5 Who phljili Shares Your Data With

phljili does not sell, rent, or trade personal data. We share data only in the specific circumstances described below, with parties who are bound by appropriate confidentiality and data protection obligations:

To process your deposits and withdrawals, phljili shares necessary transaction data with payment processors including GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and Visa/Mastercard network providers. These processors are bound by their own privacy policies and applicable Philippine financial regulations.

phljili uses regulated third-party identity verification providers to assist with KYC compliance. These providers process your ID document and verification selfie solely for the purpose of confirming your identity and may not retain or use that data for any other purpose.

phljili is required by law to report to and cooperate with Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement agencies when lawfully required. Data disclosed under legal obligation is handled under the governing legal framework and is not shared beyond what is required.

phljili uses third-party technology providers for cloud hosting, email delivery, customer support tools, and analytics. These providers access only the data necessary to perform their contracted services and are prohibited from using phljili player data for any independent purpose.

In the event of a merger, acquisition, or sale of substantially all phljili's assets, player data may be transferred to the acquiring entity. phljili will notify affected players before any such transfer takes effect, and the acquiring entity would be required to honour the commitments made in this Privacy Policy or obtain fresh consent for any material changes.

6 Cookies and Tracking Technologies

phljili uses cookies and similar technologies — including local storage and session identifiers — to make the platform function correctly and to improve the user experience for Filipino players.

These are strictly necessary for the phljili platform to operate. They maintain your login session, remember your language preferences, and ensure the platform functions correctly across pages. Essential cookies cannot be disabled without breaking the platform's core functionality.

phljili uses session tokens and device fingerprinting techniques to detect unusual access patterns and protect your account from unauthorised access. These are operational security tools, not tracking technologies.

phljili uses analytics tools to understand how players navigate the platform, which features are used most frequently, and where technical issues occur. Analytics data is aggregated and does not identify individual players. You may disable analytics cookies through your browser settings without affecting your ability to use phljili.

Only with your consent, phljili may set marketing cookies to personalise promotional offers displayed within the platform. These cookies do not track your activity on websites outside of phljili. You can manage your marketing cookie preferences through your account settings.

7 How Long phljili Keeps Your Data

phljili retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by Philippine law. The following general retention periods apply:

• Account and registration data — retained for the lifetime of your account, plus five years following account closure. This is required to comply with regulatory record-keeping obligations.
• KYC and identity documents — retained for the duration of your account and for five years after closure, in line with anti-money laundering requirements under Philippine law.
• Financial transaction records — retained for a minimum of five years in compliance with the Anti-Money Laundering Act and BIR record-keeping requirements.
• Gaming activity logs — retained for three years after the relevant session date, or longer if required in connection with an active dispute or investigation.
• Customer support communications — retained for three years after the conversation is closed, or longer if related to an ongoing complaint or legal matter.
• Marketing preferences and consent records — retained for the duration of your account or until you withdraw consent, plus one year after withdrawal as a record of your preferences.

When data is no longer required for any lawful purpose, phljili securely deletes or anonymises it. Anonymised data — where it is no longer possible to identify an individual — may be retained for statistical and research purposes without time limit.

8 Your Privacy Rights as a phljili Player

Under the Data Privacy Act of 2012, every phljili player registered in the Philippines has specific rights over their personal data. Here is what you are entitled to and how to exercise each right:

To exercise any of these rights, contact phljili's Data Privacy Officer at privacy@phljili.net. Please include your registered mobile number or account email and a clear description of your request. phljili will acknowledge all data rights requests within five business days and respond fully within 15 working days.

Requests will require identity verification before phljili can action them — this is to protect your privacy, not to obstruct you. We will never charge a fee for a standard data access or correction request.

9 How phljili Secures Your Personal Data

phljili takes the security of your personal data seriously and has implemented a range of technical and organisational measures to protect it from unauthorised access, disclosure, alteration, or destruction. These measures include:

• TLS Encryption: All data transmitted between your device and phljili's servers is encrypted using current Transport Layer Security (TLS) protocols. This protects your login credentials, payment data, and personal information in transit.
• Access Controls: Personal data is accessible only to phljili staff who have a genuine operational need for it. Access is role-based, logged, and regularly reviewed. No staff member has unrestricted access to all player data.
• Secure Data Storage: Player data is stored on servers hosted in secure, access-controlled data centres. Storage systems are segregated from public-facing infrastructure.
• Regular Security Audits: phljili conducts periodic security assessments of its platform, including penetration testing and vulnerability scanning, to identify and address security weaknesses before they can be exploited.
• Incident Response: phljili has a documented data breach response procedure. In the event of a data breach that affects player data, phljili will notify affected players and the National Privacy Commission within the timeframes required by Philippine law.
• Staff Training: phljili staff who handle personal data receive regular privacy and security training. Data protection responsibilities are part of every relevant employee's role.

10 Children's Privacy

phljili is strictly an adult platform. We do not knowingly collect, process, or retain personal data from individuals under the age of 21. The age verification process at registration is designed to prevent underage players from accessing the platform.

If phljili becomes aware that a registered account belongs to a person under 21, the account will be closed immediately, any deposited funds will be returned through the original payment method (less any amounts already wagered), and all associated personal data will be deleted from our active systems as soon as legally permissible.

If you believe that a minor has created an account on phljili, please contact us at privacy@phljili.net with as much detail as you can provide. We will investigate and act promptly.

11 Changes to This Privacy Policy

phljili may update this Privacy Policy from time to time as our data practices evolve, as regulatory requirements change, or as we add new features to the platform. The date of the most recent update is always shown at the top of this page.

When we make material changes to this policy — changes that significantly affect how we collect, use, or share your personal data — we will notify you by email to your registered address and through a notice on the phljili platform. We will give you at least seven days' notice before material changes take effect.

Continued use of phljili after an updated Privacy Policy has been notified constitutes your acknowledgment of the updated terms. If you do not agree with a material change, you should contact us to discuss your concerns or close your account before the change takes effect.

12 Contact Us and How to Complain

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how phljili has handled your personal information, here is how to reach us:

• Data Privacy Officer Email: privacy@phljili.net
• General Support: support@phljili.net
• Live Chat: Available in your phljili account dashboard, 24 hours a day, every day

phljili aims to resolve all privacy-related queries and complaints fairly and promptly. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for enforcing the Data Privacy Act and can be reached through their official government website.