HJILI Privacy Policy — How We Protect Your Data in the PH

HJILI (operating through hjili.best) is the data controller responsible for the personal information of registered players and site visitors based in the Philippines. We are committed to processing personal data lawfully, transparently, and only to the extent necessary for the purposes described in this policy.

Under the Philippine Data Privacy Act of 2012 (RA 10173), personal information may be processed only when at least one of the following legal bases applies. The legal bases HJILI relies on are:

• Contractual Necessity: Processing is necessary to provide the services you signed up for — including account management, game access, payment processing, and withdrawals.
• Legal Obligation: Processing is required to comply with Philippine laws, including anti-money laundering (AMLA) obligations, age verification requirements, and financial record-keeping mandates.
• Legitimate Interests: Processing is carried out for purposes such as fraud prevention, platform security, and improving HJILI's services — where these interests do not override your rights.
• Consent: For processing activities not covered by the above — such as marketing communications — HJILI will seek your explicit, informed consent and provide an easy way to withdraw it at any time.

HJILI does not use your data for any purpose beyond what is described in this policy. If our processing purposes change materially, we will update this policy and notify you through your registered contact details.

HJILI collects personal information in three ways: data you provide directly during registration and account use, data generated automatically by your device and activity on the platform, and data we receive from third parties such as payment processors for identity or payment verification purposes.

HJILI uses the personal data we collect only for legitimate, specified purposes directly related to the operation of the platform and our obligations to Filipino players. We do not monetise your personal data by selling it or renting it to third-party marketers.

The primary purposes for which HJILI processes personal data are:

• Account Creation and Management: Setting up and maintaining your HJILI account, verifying your identity at registration and during KYC reviews, and keeping your profile details current and accurate.
• Service Delivery: Giving you access to HJILI's games and betting products — including JILI Slots, Live Baccarat, Tongits, Bingo, MMA Betting, Esports Betting, and Virtual Sports — and ensuring these services function correctly for your account.
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, BDO, BPI, UnionBank, and other supported Philippine payment methods. Your payment details are passed to the relevant payment processor solely to complete the transaction.
• Customer Support: Handling your queries, complaints, and account issues through HJILI's live chat and email support channels — including recording communication history to allow consistent follow-up.
• Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, duplicate accounts, bonus abuse, and unauthorised account access — including through automated monitoring tools.
• Legal and Regulatory Compliance: Meeting HJILI's obligations under Philippine law, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act (RA 10173), and gaming regulations.
• Responsible Gaming: Using gaming activity data to identify patterns that may indicate problem gambling behaviour and proactively offering responsible gaming tools such as deposit limits and session timers.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, interface design, loading performance, and payment flow on HJILI.
• Marketing Communications: Sending promotional messages about HJILI bonuses, new game launches, and platform updates — only where you have given explicit consent and only via the channels you have selected. You may opt out at any time.

HJILI does not sell, trade, or rent your personal data. We share personal information only in the limited circumstances described below, and only to the extent necessary for the specified purpose.

• Payment Processors: When you deposit or withdraw on HJILI, your relevant payment details are shared with the payment processor handling that transaction (e.g. GCash, Maya, UnionBank) solely to complete the payment. These processors operate under their own privacy and security standards.
• Identity Verification Providers: HJILI may use a third-party KYC (Know Your Customer) provider to verify your identity during account registration or at the time of a withdrawal request. Only the information needed for verification is shared.
• Game Technology Providers: HJILI's game products (including JILI Slots) are delivered by licensed third-party game studios. These providers may receive anonymised session and technical data necessary to deliver the game correctly — they do not receive your full personal profile.
• Regulatory and Law Enforcement Authorities: HJILI is required by Philippine law to disclose account and transaction data to relevant authorities — including the Anti-Money Laundering Council (AMLC) and the National Privacy Commission (NPC) — where legally compelled to do so. HJILI will notify affected players of such disclosures where legally permitted.
• Professional Advisors: HJILI's legal counsel, auditors, and compliance advisors may access limited personal data under strict confidentiality obligations where necessary to fulfil their professional duties.

HJILI uses cookies and similar tracking technologies on hjili.best to make the platform function correctly, to remember your preferences, and to understand how players use the site so we can improve it. Here's what each category of cookie does on HJILI:

• Strictly Necessary Cookies: These are essential to the operation of HJILI. They manage your login session, maintain your account state while you're playing, and enable core security functions. These cookies cannot be switched off because the platform cannot function without them.
• Performance Cookies: These collect anonymised information about how players navigate HJILI — which pages are visited most, where players encounter errors, and how long pages take to load. HJILI uses this information solely to improve the platform. No personally identifying information is included in this data.
• Functional Cookies: These remember your HJILI preferences — such as your preferred language, last-used payment method, and game lobby filters — to save you time on repeat visits.
• Analytics Cookies: HJILI may use a privacy-respecting analytics tool to understand aggregate platform usage patterns. Data from analytics cookies is never shared with advertisers and is not linked to individual player identities.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent some or all HJILI platform functions from working correctly. HJILI does not currently use advertising or retargeting cookies from third-party ad networks.

HJILI takes the security of your personal data seriously. The following technical and organisational measures are in place to protect your information from unauthorised access, loss, disclosure, or misuse:

• Encryption in Transit: All data transmitted between your device and HJILI's servers is encrypted using Transport Layer Security (TLS). This applies to login sessions, payment transactions, and all API calls.
• Encrypted Storage: Sensitive data — including identity verification documents and payment account references — is stored using encryption at rest on HJILI's servers.
• Access Controls: Access to personal data within HJILI's systems is restricted on a need-to-know basis. Team members only access the data necessary for their specific role, and all access is logged and audited.
• Two-Factor Authentication (2FA): HJILI supports 2FA for player accounts where available, and requires it for all internal administrative access to player data systems.
• Regular Security Audits: HJILI's platform and data infrastructure undergo periodic security assessments, including penetration testing, to identify and address vulnerabilities before they can be exploited.
• Incident Response Plan: In the event of a personal data breach, HJILI has a documented response procedure that includes assessing the scope, containing the breach, notifying affected players, and reporting to the National Privacy Commission (NPC) within 72 hours where required by law.

HJILI retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your active HJILI account relationship, and for a reasonable period thereafter to allow for dispute resolution and account reinstatement requests.
• Transaction and Financial Records: Retained for a minimum of five (5) years following the transaction date, as required under the Philippine Anti-Money Laundering Act and financial record-keeping regulations.
• Identity Verification Documents: Retained for a minimum of five years from the date of verification or account closure, whichever is later, for AML compliance purposes.
• Customer Support Communications: Retained for three years from the date of the interaction to allow consistent follow-up and dispute resolution.
• Marketing Consent Records: Retained for the duration of your consent and for a reasonable period after withdrawal to demonstrate compliance.
• Technical and Device Data: Retained for up to 12 months for security, fraud detection, and platform performance purposes.

When data is no longer needed and no legal obligation requires its retention, HJILI securely deletes or anonymises it.

As a Filipino data subject, you have specific rights over your personal information under the Data Privacy Act of 2012. HJILI respects and supports the exercise of these rights. Below is a summary of each right and how to exercise it with HJILI.

HJILI's services are intended exclusively for adults aged 18 and above. HJILI does not knowingly collect personal data from individuals under the age of 18. During registration, HJILI requires users to confirm they are 18 or older, and age verification may be required via Philippine government-issued ID at any point before a withdrawal is processed.

If HJILI discovers that a minor has registered or that a registered account is being used by a person under 18, the account will be closed immediately, all gaming activity will be voided, any deposited funds will be returned to the registered payment method, and the matter will be reported where legally required. Parents and guardians are strongly encouraged to implement parental controls on devices used by minors to prevent accidental access to HJILI or similar platforms.

HJILI operates in compliance with the Republic Act No. 9160 (Anti-Money Laundering Act of 2001) and its amendments. As a covered entity under Philippine AML regulations, HJILI is required to:

• Verify the identity of account holders through Know Your Customer (KYC) procedures before processing significant transactions.
• Monitor and report suspicious transactions to the Anti-Money Laundering Council (AMLC) where legally required — including transactions that appear inconsistent with a player's stated profile or gaming behaviour.
• Retain transaction records and identity verification documentation for a minimum of five years.
• Implement transaction monitoring systems that flag patterns associated with potential money laundering activity.

These obligations may result in HJILI requesting additional documentation from you before processing a withdrawal, temporarily delaying a transaction pending review, or — in cases where HJILI's AML obligations require it — disclosing account information to Philippine authorities without prior notice to the account holder.

HJILI may revise this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or the services HJILI offers. When material changes are made, HJILI will:

• Update the "Last Updated" date at the top of this page.
• Post a notice on the HJILI platform for a reasonable period following the update.
• Where the changes are significant, send a notification to your registered mobile number or email address.

Your continued use of HJILI after any Privacy Policy update constitutes your acceptance of the revised policy. HJILI recommends reviewing this page periodically. If you object to any changes, you should discontinue use of the platform and contact HJILI support to discuss your options.

For any questions, concerns, or requests related to this Privacy Policy or your personal data rights under RA 10173, please reach out through the following channels:

• Live Chat Support: Available 24/7 directly on hjili.best. Filipino-speaking agents are on hand at all hours for account-related and general privacy questions.
• Email (General Support): support@hjili.best — for general queries, expect a response within 24 hours.
• Data Protection Officer: For formal data subject rights requests — including access, correction, erasure, and portability requests — please email support@hjili.best with the subject line "DPO Request" and a description of your request. HJILI will acknowledge receipt within 72 hours and respond within 30 days in accordance with RA 10173.