aajili Privacy Policy

1. Overview

aajili ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online casino platform. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with the aajili website located at aajili.one and any related mobile applications or services (collectively, the "Platform").

This Policy is drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). We take our obligations under Philippine data privacy law seriously and have implemented appropriate technical and organizational measures to safeguard your information.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with aajili.

2. Personal Data We Collect

aajili collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

Identity & Contact Information

• Full legal name as it appears on a government-issued ID
• Date of birth (to verify you are 21 years of age or older)
• Nationality and country of residence
• Registered email address
• Philippine mobile number
• Residential address (barangay, city/municipality, province)

Identity Verification Documents

• Government-issued photo ID (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's license, UMID)
• Proof of address (e.g., utility bill, bank statement issued within the last three months)
• Source-of-funds documentation where required by anti-money laundering regulations

Financial Information

• GCash or PayMaya (Maya) account reference numbers
• Philippine bank account details (bank name, account name) for withdrawal processing
• Transaction history including deposits, withdrawals, and wager records

Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the Platform
• Login timestamps and access logs

Communications Data

• Records of live chat, email, and support ticket interactions with aajili
• Responses to surveys or promotional communications where you have opted in

3. How We Collect Your Data

aajili collects personal data through the following means:

• Direct submission: Information you provide when registering an account, completing identity verification (KYC), making deposits or withdrawal requests, or contacting our support team.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from licensed KYC service providers; fraud prevention data from anti-fraud partners; payment confirmation data from GCash, Maya, and Philippine banking partners.
• Regulatory sources: Information shared with us by PAGCOR or other Philippine regulatory bodies in connection with our compliance obligations.

4. How We Use Your Personal Data

aajili uses your personal data for the following purposes:

5. Legal Basis for Processing

aajili processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management and payment processing.
• Legal obligation: Processing required to comply with Philippine laws, including AML regulations, PAGCOR licensing conditions, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have provided explicit, freely given, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

aajili does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya (Maya), and Philippine banking partners, solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Licensed KYC and AML compliance service providers engaged to verify your identity and screen against sanctions lists.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law or regulatory order.
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on our behalf under strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and accountants where necessary for the conduct of aajili's business.

All third-party service providers engaged by aajili are contractually required to process your personal data only in accordance with our instructions and applicable Philippine data privacy law.

7. Data Retention

aajili retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

Specifically:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship.
• Support communications: Retained for three (3) years from the date of the interaction.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with aajili's data disposal procedures.

8. Data Security

aajili implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the aajili Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform.
• Multi-factor authentication (MFA) for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While aajili takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your aajili account credentials. If you suspect unauthorized access to your account, contact our support team immediately.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by aajili:

• Right to be informed: The right to know what personal data aajili collects about you and how it is used — which this Policy fulfills.
• Right of access: The right to request a copy of the personal data aajili holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at the details provided in Section 13 of this Policy. We will respond to all verified requests within thirty (30) days.

10. Cookies and Tracking Technologies

aajili uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support our security and fraud prevention measures . The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to personalize your experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and content.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the aajili Platform. Strictly necessary and security cookies cannot be disabled as they are required for the Platform to operate safely.

11. Minors and Age Restriction

The aajili Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming law. aajili does not knowingly collect personal data from persons under 21 years of age.

If we become aware that personal data has been collected from a person under 21 without verifiable parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on the aajili Platform, please contact our support team immediately.

12. Changes to This Privacy Policy

aajili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players via their registered email address and post a prominent notice on the Platform.

The updated Policy will be effective from the date indicated at the top of the page. Your continued use of the aajili Platform following notification of changes constitutes your acceptance of the revised Policy. We encourage you to review this page periodically.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by aajili, please contact our designated Data Protection Officer (DPO):

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the aajili Platform
• Response Time: We aim to respond to all data privacy requests within 30 calendar days.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been adequately addressed by aajili.