ssjili Privacy Policy

This Privacy Policy is published by ssjili ("ssjili", "we", "us", "our"), the operator of the online gaming platform accessible at ssjili.net. This policy applies to all players, registered account holders, and visitors who interact with the ssjili Platform in any capacity.

This Privacy Policy should be read in conjunction with the ssjili Terms & Conditions, which are incorporated herein by reference. Defined terms used in the Terms & Conditions carry the same meaning in this Privacy Policy unless stated otherwise.

By registering an Account on ssjili, making a deposit, or accessing any portion of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal information as described herein.

ssjili collects personal data in the categories set out below. We collect only the information that is necessary and proportionate to the purposes described in Section 4 of this Policy.

ssjili does not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or health data — except to the extent that health information is voluntarily disclosed in the context of a responsible gaming self-exclusion request.

ssjili collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make a deposit or withdrawal, contact support, or interact with any part of the Platform that requires input;
• Automatically — when you access the Platform, our servers automatically record technical data including your IP address, browser session information, and interaction logs;
• Through cookies and similar technologies — as described in Section 8 of this Policy;
• From payment providers — when you deposit or withdraw via GCash, PayMaya, BPI, BDO, Metrobank, or USDT, the relevant payment processor may share transaction confirmation data with ssjili for reconciliation purposes;
• From identity verification services — where ssjili uses a third-party KYC technology provider to assist in verifying documents, that provider may share verification outcomes with ssjili;
• From fraud prevention and AML monitoring systems — automated systems may flag transactions or behaviour patterns for manual review in accordance with ssjili's anti-money-laundering obligations.

ssjili processes your personal data only where there is a lawful basis for doing so. The following table describes the primary purposes for which we process your data and the corresponding legal basis under the Data Privacy Act of 2012:

ssjili does not sell your personal information to any third party. We may share your personal data with third parties only in the circumstances described below, and only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya (PayMaya), BPI, BDO, Metrobank, and USDT network infrastructure providers receive the minimum transaction data necessary to process your deposits and withdrawals. Each payment processor operates under its own privacy policy.
• KYC and identity verification providers: ssjili may engage third-party verification technology providers to assist in processing identity documents. These providers are bound by data processing agreements and are not permitted to use your data for any purpose other than verification.
• Game providers: JILI Games, PG Soft, Pragmatic Play, and other certified game providers may receive session data necessary for game delivery and RNG certification audits. Game providers do not receive your full identity data.
• Regulatory and law enforcement authorities: ssjili is required by Philippine law — including AML legislation and PAGCOR regulatory requirements — to disclose specified transaction and identity data to competent authorities upon lawful demand. ssjili will comply with all such legally compelled disclosures.
• Fraud prevention and security services: ssjili may share technical data and transaction patterns with fraud prevention service providers to protect the integrity of the Platform and the security of all players.
• Professional advisors: ssjili's legal counsel, auditors, and compliance advisors may access personal data to the limited extent necessary for the provision of their professional services, subject to professional confidentiality obligations.

All third parties with whom ssjili shares personal data are required to maintain appropriate technical and organisational security measures and to use the data only for the stated purpose.

ssjili retains personal data for the minimum period necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law. The following general retention principles apply:

• Account data and gaming history are retained for the duration of your Account and for a period of five (5) years following Account closure, in accordance with standard record-keeping obligations under Philippine law.
• KYC documents are retained for the period required by applicable Philippine anti-money-laundering regulations, which currently mandates a minimum of five (5) years from the date of the relevant transaction or the closure of the Account, whichever is later.
• Transaction records (deposit and withdrawal history) are retained for five (5) years as required by AML compliance obligations.
• Technical data and access logs are retained for up to twelve (12) months for security and fraud investigation purposes.
• Support correspondence is retained for three (3) years from the date of the last interaction for quality assurance and dispute resolution purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised so that it can no longer be attributed to an identifiable individual.

ssjili implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, loss, or destruction. Our current security measures include but are not limited to:

• 256-bit SSL/TLS encryption for all data in transit between your device and the ssjili Platform;
• Encryption at rest for stored personal data, including KYC documents and financial records;
• Password hashing — your Account password is stored only as a cryptographic hash; ssjili staff cannot read your password in plain text;
• OTP two-factor authentication for login from new devices, adding a second verification layer beyond your password;
• Strict access controls — ssjili staff access to player data is limited to personnel whose job function requires it, and all access is logged and auditable;
• Regular security assessments and penetration testing to identify and remediate vulnerabilities;
• Incident response procedures that meet the NPC notification requirements under the Data Privacy Act of 2012.

ssjili uses cookies and similar tracking technologies on the Platform to deliver, operate, and improve the service. A cookie is a small text file placed on your device by your browser when you access a website. ssjili uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during your visit. These cookies cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences, such as your preferred language and display settings, to provide a more personalised experience across sessions.
• Performance and analytics cookies: Collect aggregated, anonymised data about how players use the Platform — which pages are visited, how long sessions last, and where technical errors occur. This data helps ssjili improve the Platform experience.
• Security cookies: Help detect fraudulent activity and protect the integrity of sessions and account access.

ssjili does not use third-party advertising or retargeting cookies that would track your browsing activity across other websites. You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the ssjili Platform.

ssjili processes payment data in accordance with the applicable requirements of each payment method and the relevant Philippine financial regulations.

GCash and PayMaya: When you deposit or withdraw via GCash or PayMaya, ssjili receives confirmation of the transaction from the respective provider. ssjili stores your partial mobile number and transaction reference for reconciliation and AML compliance. ssjili does not store your full GCash or Maya account PIN or password.

Bank transfers (BPI, BDO, Metrobank): Bank transfer deposits generate a transaction reference and partial account identifier that ssjili retains for reconciliation. Full bank account numbers are not stored on ssjili systems beyond the immediate transaction processing window.

Under the Data Privacy Act of 2012, as a data subject you have the following rights in relation to your personal information held by ssjili. ssjili is committed to honouring these rights within the timeframes required by the NPC:

To exercise any of these rights, contact ssjili's support team via the Platform live chat or at the email address provided in Section 14. ssjili will respond within thirty (30) days of receiving a verifiable request. We may require proof of your identity before processing any data subject request.

Please note that certain rights are subject to limitations. For example, the right to erasure does not apply to data that ssjili is legally required to retain under Philippine AML law or PAGCOR regulations.

If you are a parent or guardian and believe that a person under 21 in your care has created an account or provided personal information to ssjili, please contact ssjili's support team immediately via the Platform live chat so that the matter can be addressed without delay.

The ssjili Platform may contain references to third-party services such as payment providers (GCash, Maya, BPI, BDO, Metrobank). When you access any third-party service — including by completing a GCash payment through that provider's own interface — you leave the ssjili Platform environment and are subject to the privacy policy of that third party.

ssjili is not responsible for the privacy practices, data handling, or content of any third-party service. We encourage you to review the privacy policies of all third-party services you use in connection with your ssjili account. ssjili does not control third-party data collection or processing that occurs outside the ssjili Platform.

ssjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance from the National Privacy Commission. The effective date displayed at the top of this Policy will be updated to reflect the date on which the most recent version came into force.

Where a material change is made — meaning a change that significantly affects how your personal data is collected or used — ssjili will make reasonable efforts to inform registered Account holders via the Platform or by email to your registered address before the change takes effect.

Your continued use of the ssjili Platform after the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not accept the revised Policy, you should cease using the Platform and may request Account closure in accordance with the Terms & Conditions.

ssjili has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. The DPO is responsible for overseeing ssjili's compliance with the DPA and serves as the point of contact for data subject rights requests and privacy-related inquiries.

If you have any questions, concerns, or requests regarding this Privacy Policy or ssjili's handling of your personal data, please contact us through the following channels:

• Live chat support: Available 24/7 directly through the ssjili Platform — the fastest channel for account-specific queries;
• Email: [email protected] — for general privacy inquiries, data subject access requests, and DPO correspondence;

ssjili will acknowledge your inquiry within five (5) business days and will provide a substantive response within thirty (30) days. For complex requests, ssjili may extend this period by up to an additional thirty (30) days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with ssjili's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (privacy.gov.ph).