1 Introduction
This Privacy Policy describes how xgjili ("xgjili," "we," "us," "our") collects, stores, uses, shares, and protects the personal information of players and visitors who access the xgjili platform at xgjili.best.
xgjili is committed to handling your personal data with care, transparency, and full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. We are registered with and operate under the oversight of the National Privacy Commission (NPC) of the Philippines.
By registering an account with xgjili, depositing funds, or simply browsing our platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the data practices described herein. If you do not agree, please refrain from using the platform.
2 Data Controller
The data controller responsible for your personal information is xgjili, operating the platform at xgjili.best. Our designated Data Protection Officer (DPO) can be reached at the contact details provided in Section 13 of this policy.
As the data controller, xgjili determines the purposes and means by which your personal data is processed. We are accountable for ensuring that all data processing activities comply with the requirements of R.A. 10173 and NPC regulations.
3 Data We Collect
xgjili collects personal data in three main ways: directly from you when you register and use the platform, automatically through your device and browser, and through third-party identity and payment verification services.
| Category | Specific Data Points | How Collected |
|---|---|---|
| Identity | Full name, date of birth, nationality, government-issued ID number | Registration form; KYC verification |
| Contact | Email address, mobile number, province/city of residence | Registration form |
| Financial | GCash/Maya number, bank account details (last 4 digits), transaction history | Payment processing; deposit/withdrawal records |
| Behavioural | Betting history, game sessions, login timestamps, feature usage | Platform activity logs |
| Technical | IP address, device type, browser type, OS version, session duration | Automatic collection via cookies/logs |
| Communications | Support chat transcripts, email correspondence | Customer support interactions |
Data We Do Not Collect
xgjili does not collect your full card number, CVV, or other sensitive financial credentials directly. Payment processing is handled by PCI-DSS compliant payment providers. We receive only the minimum reference data needed to reconcile transactions.
4 How We Use Your Data
xgjili uses your personal data only for the following defined purposes:
- Account management: Creating, maintaining, and securing your xgjili player account.
- Identity verification (KYC): Verifying your age, identity, and Philippine residency as required by gaming regulations.
- Transaction processing: Handling deposits, withdrawals, bonus credits, and refunds through your chosen payment method.
- Regulatory compliance: Meeting our obligations under Philippine gaming laws, anti-money laundering (AMLA) regulations, and the Data Privacy Act.
- Anti-fraud and security: Detecting and preventing fraudulent activity, account takeovers, and misuse of the platform.
- Customer support: Responding to your queries, resolving disputes, and providing assistance through live chat and email.
- Responsible gaming: Monitoring gaming behaviour to identify indicators of problem gambling and enabling access to self-management tools.
- Platform improvement: Using aggregated, anonymised analytics data to understand how the platform is used and improve the experience for all players.
- Communications: Sending account-related notifications such as deposit confirmations, withdrawal updates, security alerts, and policy change notices. Marketing communications are only sent with your separate consent.
5 Legal Basis for Processing
Under the Philippine Data Privacy Act, all processing of personal data must have a lawful basis. xgjili relies on the following legal bases for its data processing activities:
- Contractual necessity: Processing your registration data, payment information, and transaction history is necessary to provide the xgjili service you signed up for.
- Legal obligation: KYC verification, anti-money laundering reporting, and data retention requirements are mandated by Philippine law. xgjili must process this data regardless of consent.
- Legitimate interest: Fraud detection, platform security, and responsible gaming monitoring are carried out on the basis of xgjili's legitimate interest in maintaining a safe, compliant platform.
- Consent: Marketing communications and optional analytics participation are processed only on the basis of your explicit consent, which you may withdraw at any time.
6 Sharing Your Data
xgjili does not sell, rent, or trade your personal data to any third party for commercial purposes. We share data only in the following circumstances and only with the categories of parties listed below:
Regulated and Necessary Disclosures
- Philippine gaming regulators: As required by our gaming licence, xgjili may be required to submit player data and activity records to the relevant licensing authority upon request.
- Anti-money laundering authorities: Under the Anti-Money Laundering Act (AMLA), xgjili is required to report suspicious transactions to the Anti-Money Laundering Council (AMLC).
- Law enforcement: Where a valid legal order, warrant, or court directive requires disclosure, xgjili will comply and notify you where permitted to do so.
Service Providers
xgjili works with licensed third-party service providers who process data on our behalf under strict data processing agreements. These include:
- Payment processors (GCash, Maya, BancNet, and bank partners) – solely to process your deposits and withdrawals.
- Identity verification providers – to confirm your age and identity during KYC checks.
- Cloud hosting and infrastructure providers – to store and serve platform data securely.
- Customer support software – to manage and respond to your support requests.
7 Data Retention
xgjili keeps your personal data only for as long as it is necessary for the purpose for which it was collected, or as required by Philippine law. The following retention periods apply:
- Account and identity data: Retained for the duration of your active account plus five years after account closure, as required by AMLA and gaming regulations.
- Transaction records: Retained for a minimum of five years from the date of each transaction.
- Support communications: Retained for two years from the date of the interaction.
- Technical logs (IP addresses, session data): Retained for 90 days for security and fraud detection purposes, then deleted unless needed for an active investigation.
- Marketing consent records: Retained until you withdraw consent plus one year thereafter.
When data is no longer required, xgjili securely deletes or anonymises it in a manner that prevents reconstruction or re-identification.
8 Security Measures
xgjili implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or alteration. These include:
- TLS/SSL encryption for all data transmitted between your device and the xgjili platform.
- AES-256 encryption for sensitive data stored in our databases.
- Role-based access controls – only staff who need access to specific data categories can access them.
- Two-factor authentication (2FA) available for player accounts and mandatory for staff systems.
- Regular security audits and penetration testing by independent third-party security firms.
- Incident response procedures to identify, contain, and notify affected players in the event of a data breach, within the 72-hour timeframe required by NPC regulations.
No system is completely impenetrable, and xgjili cannot guarantee absolute security. However, we take every reasonable step to protect your data and respond rapidly to any security incident that occurs.
9 Cookies and Tracking
xgjili uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is being used. We do not use third-party advertising cookies or tracking pixels that share your data with external ad networks.
Types of Cookies Used
- Essential cookies: Required for the platform to function. These cannot be disabled. They manage your login session, security tokens, and CSRF protection.
- Preference cookies: Remember your language, odds display format, and other settings between sessions. Can be disabled without affecting core functionality.
- Analytics cookies: Collect anonymised data about which pages you visit and how you interact with the platform. Used only to improve the player experience. These are disabled by default until you consent.
You can manage cookie preferences through your browser settings. Disabling essential cookies will prevent you from logging in to xgjili.
10 Your Privacy Rights
Under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by xgjili. You can exercise these rights by contacting our Data Protection Officer at the details in Section 13.
Right to Access
Request a copy of all personal data xgjili holds about you. We will provide this within 15 business days.
Right to Correction
Request that inaccurate or outdated personal data be corrected. Most fields can be updated directly in your account settings.
Right to Erasure
Request deletion of your personal data. Subject to legal retention requirements, xgjili will erase your data upon account closure.
Right to Object
Object to specific types of data processing, including direct marketing. Objections to marketing are actioned immediately.
Right to Portability
Request your data in a machine-readable format (CSV or JSON). Useful if you want to move to another platform.
Right to Lodge a Complaint
If you believe xgjili has violated your data rights, you may file a complaint with the National Privacy Commission of the Philippines.
11 Minors
xgjili is strictly for players aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that a minor has provided us with personal data, we will immediately close the account, refund any balance pending identity verification, and delete all personal data associated with that account.
If you are a parent or guardian and believe your child has registered on xgjili, please contact us immediately at the details in Section 13 so we can take action promptly.
12 Changes to This Policy
xgjili may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Send a notification to your registered email address at least 7 days before the changes take effect.
- Display a notice on the xgjili platform for at least 14 days after the change becomes effective.
Continued use of xgjili after a policy update takes effect constitutes acceptance of the revised Privacy Policy. We recommend reviewing this page periodically to stay informed about how we handle your data.
13 Contact and Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the personal data xgjili holds about you, please contact our Data Protection Officer:
- Email: privacy@xgjili.best
- General Support: support@xgjili.best
- Response Time: Within 5 business days for privacy requests; within 15 business days for data access requests
- NPC Complaints: If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph
This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including R.A. 10173 and its Implementing Rules and Regulations.