sjili Privacy Policy

This Policy applies to all personal data collected by sjili in connection with the operation of the sjili Platform, including: Account registration, identity verification (KYC), financial transactions, customer support interactions, and usage of all sjili game products (live casino, slots, bingo, fishing games, and sports betting).

This Policy applies to all Players and visitors of sjili.org, regardless of location, though sjili's services are primarily designed for and directed at users located in the Philippines. Where players from outside the Philippines access sjili, Philippine data privacy law shall govern the processing of their personal data.

This Policy should be read together with the sjili Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and sjili.

For the purposes of the Data Privacy Act of 2012, sjili is the Personal Information Controller (PIC) in respect of all personal data collected and processed through the sjili Platform.

sjili collects the following categories of personal data from Players and visitors. We collect only what is necessary and proportionate to the specific purpose for which it is required.

sjili collects personal data through the following means:

• Directly from you: When you register an Account, complete KYC verification, make a deposit or withdrawal, contact customer support, or update your Account settings.
• Automatically through the Platform: Technical data such as IP address, device information, session data, and geolocation are collected automatically through server logs and analytics tools when you access sjili.org.
• Through cookies and similar technologies: sjili uses cookies and similar tracking technologies to improve Platform performance and user experience. See Section 6 for full details.
• From payment processors: When you make a deposit or withdrawal via GCash, Maya, or a bank transfer, sjili receives transaction confirmation data from the relevant payment processor. sjili does not receive or store your full payment credentials.
• From identity verification providers: For KYC purposes, sjili may use third-party identity verification service providers to validate government-issued Philippine IDs.

sjili processes personal data only where there is a lawful basis for doing so under the Data Privacy Act of 2012. The following table sets out the purposes for which sjili processes personal data and the legal basis relied upon in each case.

sjili uses cookies and similar tracking technologies on sjili.org to operate certain Platform functions, analyze usage, and enhance the player experience. A cookie is a small text file placed on your device when you visit a website.

sjili uses the following types of cookies:

• Strictly Necessary Cookies: Essential to the operation of the sjili Platform, including maintaining your login session, security cookies, and load-balancing cookies. These cannot be disabled.
• Performance/Analytics Cookies: Collect anonymized data about how players use sjili.org, which pages are visited most frequently, and where errors occur. This helps sjili improve Platform performance. These cookies do not identify you personally.
• Functionality Cookies: Remember your preferences, such as language settings and responsible gaming configurations, to improve your experience on sjili.
• Marketing Cookies: Used only where you have provided consent, to deliver relevant promotional content. You may withdraw consent at any time from your sjili Account settings.

You may control non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the sjili Platform.

sjili does not sell, rent, or trade your personal data to any third party for their own commercial purposes. sjili shares personal data only in the following limited circumstances:

• Service Providers and Data Processors: sjili engages trusted third-party service providers who process personal data on sjili's behalf, including KYC verification providers, payment processing partners, cloud hosting providers, and IT security service providers. All such providers are bound by data processing agreements and are prohibited from using your data for any purpose other than providing the contracted service to sjili.
• Regulatory and Law Enforcement Authorities: sjili may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required to do so by law, court order, or regulatory obligation. sjili will notify affected Players of such disclosures where legally permitted to do so.
• Corporate Transactions: In the event of a merger, acquisition, or sale of all or substantially all of sjili's assets, personal data held by sjili may be transferred to the successor entity, subject to the same privacy protections described in this Policy. Affected Players will be notified of any such transfer.
• With Your Consent: sjili may share your personal data with third parties where you have provided explicit, informed consent for a specific sharing purpose.

sjili retains personal data only for as long as is necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention periods apply:

• Account Data & Gaming Records: Retained for the duration of your active sjili Account, plus a minimum of five (5) years following Account closure — as required for regulatory compliance and AML record-keeping obligations under Philippine law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act of 2001 (RA 9160, as amended).
• KYC Documents: Retained for the period of Account activity plus a minimum of five (5) years following Account closure.
• Customer Support Communications: Retained for three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of your Account plus three (3) years, to evidence consent in the event of any regulatory inquiry.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to any identified or identifiable individual.

sjili implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and sjili servers is encrypted using TLS 1.3 (Transport Layer Security) protocol. A valid SSL certificate is maintained at all times on sjili.org.
• Encryption at Rest: Sensitive personal data, including KYC documents and financial data, is encrypted at rest on sjili's servers using AES-256 encryption.
• Password Security: Player passwords are stored only in hashed, salted form using industry-standard cryptographic hashing algorithms. sjili staff cannot access your password in plain text.
• Access Controls: Access to personal data within sjili is restricted to authorized personnel who require access for their specific job function. Access logs are maintained and reviewed regularly.
• Two-Factor Authentication (2FA): sjili offers optional 2FA for Player Accounts using OTP verification to the registered mobile number. sjili strongly recommends all Players enable 2FA.
• Security Monitoring: sjili operates continuous security monitoring for unauthorized access attempts, anomalous login behavior, and potential data breaches.
• Data Breach Response: In the event of a personal data breach, sjili will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals where the breach is likely to result in a risk to their rights and freedoms, as required under RA 10173.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by sjili. You may exercise any of these rights by contacting sjili at [email protected]. sjili will respond to all rights requests within fifteen (15) business days of receipt.

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Privacy Request" and include your full name, registered sjili Account email address, and a description of your request. sjili may require you to verify your identity before processing certain requests.

If you believe that sjili has inadvertently collected personal data from a person under the age of 21, please contact us immediately at [email protected]. sjili will take prompt action to delete such data and close the associated Account upon verification of the report.

sjili may send you promotional communications, bonus offers, and platform updates by SMS, email, or in-platform notification, but only where you have expressly opted in to receive such communications. Transactional communications relating to your Account — such as deposit confirmations, withdrawal notifications, and security alerts — are sent regardless of marketing preferences, as they are necessary for Account administration.

• Opt-In: Marketing communications are sent only to Players who have actively opted in. You may opt in or update your marketing preferences from your sjili Account settings at any time.
• Opt-Out: You may unsubscribe from marketing communications at any time by updating your preferences in Account settings, clicking the unsubscribe link in any marketing email, or contacting sjili support. Opt-out requests will be processed within 5 business days.

The sjili Platform may include links to third-party content or services. This Privacy Policy applies solely to data collected by sjili through the sjili Platform. sjili is not responsible for the privacy practices of third-party payment providers (GCash, Maya, BPI, BDO, etc.), game providers, or any other external services you may access in connection with using sjili.

When you make a deposit or withdrawal via GCash or Maya, you are also subject to GCash's and Maya's respective privacy policies, which are independent of sjili. sjili recommends reviewing the privacy practices of any third-party service you use in conjunction with your sjili Account.

sjili primarily processes personal data within the Philippines. However, certain service providers engaged by sjili — including cloud hosting infrastructure providers and international game content providers — may process data in server locations outside the Philippines.

Where personal data is transferred outside the Philippines, sjili ensures that appropriate safeguards are in place to protect your data in a manner consistent with Philippine data privacy law and this Policy. Safeguards include: data processing agreements incorporating standard contractual clauses, transfers to jurisdictions with recognized adequate data protection standards, and binding corporate rules where applicable.

sjili reviews and updates this Privacy Policy periodically to reflect changes in legal requirements, regulatory guidance, our data practices, or the services we offer. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.

Where a material change is made to this Policy — such as a new category of data being collected, a new processing purpose, or a change in how data is shared — sjili will notify registered Players via email or on-Platform notification before the change takes effect. For non-material updates, sjili will update the Policy on this page without separate notification.

Your continued use of the sjili Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms.

For any questions, concerns, or requests relating to this Privacy Policy or the way sjili handles your personal data, please contact our Data Privacy team:

If you are not satisfied with sjili's response to a data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. Information about filing an NPC complaint can be obtained from the NPC's official website.