Privacy Policy

01 Introduction

20jili ("the Platform," "we," "us," or "our") operates the online gaming platform accessible at https://20jili.net. In the course of providing our services to players across the Philippines — from Manila and Makati to Cebu, Davao, and Quezon City — we collect and process personal information about our users.

We take your privacy seriously. This Privacy Policy describes in clear terms what personal data we collect from you, the purposes for which we process it, the legal bases that justify that processing, how long we retain it, and the rights you have over your own data under Philippine law.

This Policy applies to all personal data collected through the 20jili website, mobile applications, customer support channels, and any other touchpoints through which you interact with the 20jili Platform. It applies to registered players, prospective players who browse the Platform, and individuals who contact our support team.

02 Personal Data We Collect

We collect personal data from you through several means: directly when you register or interact with the Platform, automatically through your use of the Platform, and from third parties where permitted by law. The categories of personal data we collect include:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (for age verification — 21+ requirement)
• Residential address (barangay, city/municipality, province)
• Email address and mobile number
• Username and encrypted password
• Nationality and citizenship

2.2 KYC & Verification Documents

• Copies of government-issued identification (PhilSys, passport, UMID, LTO driver's license, PRC ID, COMELEC voter's ID)
• Proof of address documents where required
• Source of funds documentation for high-value accounts as required under AMLA
• Selfie or liveness verification images where required

2.3 Financial & Transaction Data

• GCash or PayMaya account reference numbers
• Philippine bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for withdrawal processing
• Debit card details (card number masked, expiry, billing address)
• Deposit and withdrawal history, transaction amounts in PHP
• Bonus and promotional activity records

2.4 Gaming Activity Data

• Game session logs, wager amounts, win/loss records
• Game preferences and play history
• Responsible gaming tool usage (deposit limits, session timers, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform access timestamps and navigation logs

2.6 Communications Data

• Live chat transcripts and support ticket records
• Email correspondence with 20jili
• Survey responses and feedback submissions

03 How We Use Your Personal Data

20jili processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your 20jili account; verifying your identity and age (21+ requirement); processing login and authentication.
• Service Delivery: Enabling you to access and play games on the Platform; processing deposits and withdrawals in PHP; crediting bonuses and promotional rewards.
• Regulatory Compliance: Fulfilling our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012; conducting KYC verification; reporting to the Anti-Money Laundering Council (AMLC) where required.
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, multi-accounting, and other prohibited conduct; monitoring for suspicious transactions.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior; administering deposit limits, session timers, cooling-off periods, and self-exclusion requests.
• Customer Support: Responding to your inquiries, complaints, and support requests via live chat and email.
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out mechanism.
• Platform Improvement: Analyzing aggregated usage data to improve the Platform's features, performance, and user experience.

04 Legal Basis for Processing

Under the Data Privacy Act of 2012, 20jili processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to provide the gaming services you have registered for, process your transactions, and manage your account.
• Legal Obligation: Processing required to comply with our legal obligations under PAGCOR regulations, AMLA, the Data Privacy Act, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, security monitoring, and platform improvement, where our legitimate interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Disclosure

20jili does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary:

5.1 Regulatory Authorities

We are required by law to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies when required by applicable regulations or court order.

5.2 Payment Processors

We share necessary financial data with our payment processing partners (GCash, PayMaya/Maya, and Philippine banks) solely for the purpose of processing your deposits and withdrawals.

5.3 KYC & Identity Verification Providers

We engage accredited third-party identity verification providers to assist with KYC processing. These providers are bound by data processing agreements and may only use your data for the specific verification purpose.

5.4 Technology & Infrastructure Providers

We use cloud hosting, security, and analytics service providers who process data on our behalf under strict data processing agreements. These providers are prohibited from using your data for their own purposes.

5.5 Game Providers

Certain game providers may receive limited technical data (such as session tokens) necessary to deliver their games on the 20jili Platform. No personally identifiable information beyond what is technically necessary is shared with game providers.

06 Cookies & Tracking Technologies

20jili uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function — session management, authentication, security. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming tool configurations.
• Analytics Cookies: Collect aggregated, anonymized data about how users interact with the Platform to help us improve it. Used only with your consent.
• Marketing Cookies: Used to deliver relevant promotional content. Used only with your explicit consent.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect the Platform's functionality.

07 Data Retention

20jili retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods mandated by Philippine law:

• Account & KYC Records: Retained for a minimum of five (5) years from account closure, as required by AMLA regulations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLA and PAGCOR regulations.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of the activity.
• Support Communications: Retained for two (2) years from the date of the last interaction.
• Marketing Consent Records: Retained for the duration of your account plus two (2) years following account closure.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures. Where data is anonymized rather than deleted, the anonymized data may be retained indefinitely for statistical and analytical purposes.

08 Data Security

20jili implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and the 20jili Platform is encrypted using TLS 1.3 / 256-bit SSL. Sensitive data at rest, including KYC documents and financial records, is encrypted using AES-256.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo background checks and regular data privacy training.
• Two-Factor Authentication: 20jili supports and encourages the use of two-factor authentication (2FA) on all player accounts to prevent unauthorized access.
• Penetration Testing: The Platform undergoes regular third-party security audits and penetration testing to identify and remediate vulnerabilities.
• Incident Response: In the event of a personal data breach, 20jili will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay, as required by the Data Privacy Act.

09 Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 20jili:

• Right to Be Informed: You have the right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under AMLA and PAGCOR regulations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified requests within fifteen (15) business days. We may require you to verify your identity before processing your request.

10 Children's Privacy & Age Restriction

The 20jili Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in compliance with PAGCOR regulations governing online casino gaming in the Philippines. We do not knowingly collect personal data from individuals under the age of 21.

During the registration process, all users are required to confirm that they are at least 21 years of age. KYC verification, which includes submission of a government-issued ID showing date of birth, is conducted to enforce this requirement.

If we become aware that we have inadvertently collected personal data from an individual under the age of 21, we will immediately close the associated account, delete the personal data, and return any deposited funds to the verified payment source.

11 Cross-Border Data Transfers

In the course of providing our services, your personal data may be transferred to and processed in countries outside the Philippines — for example, where our cloud infrastructure providers or game providers are located. When such transfers occur, 20jili ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by the Data Privacy Act of 2012.

These safeguards may include:

• Standard contractual clauses approved by the National Privacy Commission
• Data processing agreements requiring the recipient to maintain equivalent data protection standards
• Transfers to countries recognized by the NPC as providing adequate data protection

By using the 20jili Platform, you acknowledge and consent to the transfer of your personal data outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

12 Changes to This Privacy Policy

20jili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered users via email and/or a prominent notice on the Platform prior to the changes taking effect.

The "Effective Date" at the top of this Policy indicates when the current version came into force. We encourage you to review this Policy periodically. Your continued use of the 20jili Platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes.

If any update to this Policy materially affects your rights or the way we process your data in a manner that requires your consent, we will seek that consent before the updated processing begins.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 20jili, please contact our Data Protection Officer (DPO):

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. Information about the NPC and its complaint procedures is available through official Philippine government channels.