xojili Privacy Policy – Your Data, Your Rights

When you register and use xojili, we collect personal information that is necessary to operate your account and deliver our gaming services to you as a Filipino player. This includes your full name, date of birth, email address, mobile number, and the payment details you provide when making deposits or withdrawals in Philippine pesos. We also collect technical data such as your IP address, device type, browser version, and session activity logs to help us maintain platform security and improve your experience. Identity verification documents — such as a government-issued ID — may be requested to comply with our legal obligations under applicable Philippine regulations. We collect only theminimum data required for each purpose, and we do not collect sensitive personal information beyond what is strictly necessary for account verification and regulatory compliance. All data collection practices are governed by the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

The personal data we collect is used exclusively to provide, maintain, and improve the xojili platform for registered Filipino players. Your account information is used to verify your identity, process deposits and withdrawals in PHP, and ensure that only eligible players aged 21 and above can access our gaming services. We use technical and behavioural data to detect and prevent fraud, protect against unauthorised account access, and ensure the integrity of all transactions on the platform. From time to time, we may use your contact details to send you important account notifications, security alerts, or updates about changes to our terms and policies — these communications are not optional as they are necessary for the operation of your account. If you have opted in to receive promotional communications, we may also send you information about new games, special offers, or platform updates; you can withdraw this consent at any time by contacting [email protected]. We do not use your personal data for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent.

xojili does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. We share your data only where it is strictly necessary to deliver our services or to comply with our legal obligations. This includes sharing relevant payment details with our licensed payment processing partners in order to complete your PHP deposits and withdrawals securely and efficiently. We may also share information with identity verification providers who assist us in confirming the identity of new registrants in accordance with Philippine anti-money laundering regulations. In cases where we are required by law, court order, or regulatory authority to disclose your information, we will comply with such requirements and, where legally permitted, will notify you of the disclosure. All third-party service providers who handle your data on our behalf are contractually required to process it only for the specified purpose and to maintain appropriate security standards. We conduct regular reviews of our data-sharing arrangements to ensure ongoing compliance with the Philippine Data Privacy Act.

We implement industry-standard technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and the xojili platform is protected using SSL/TLS encryption, ensuring that your login credentials, payment details, and personal information cannot be intercepted during transmission. Access to personal data within our organisation is strictly limited to staff members who require it to perform their job functions, and all such staff are bound by confidentiality obligations. We store your data on secure servers and apply access controls, audit logging, and regular security assessments to maintain the integrity of our systems. In the event of a data breach that is likely to result in a risk to your rights and freedoms, we will notify the National Privacy Commission and affected users in accordance with the timelines prescribed by Philippine law. We encourage you to use a strong, unique password for your xojili account and to enable any additional security features available to you, such as two-factor authentication where offered.

As a registered player and data subject under the Philippine Data Privacy Act, you have a number of rights with respect to the personal information we hold about you. You have the right to be informed about how your data is collected and used, which is the primary purpose of this Privacy Policy. You also have the right to access a copy of the personal data we hold about you, to request corrections if any information is inaccurate or incomplete, and to request the deletion of your data where it is no longer necessary for the purposes for which it was collected. If you believe that your data is being processed unlawfully or that your privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. You may also object to certain types of processing, including direct marketing communications, and withdraw any consent you have previously given at any time without affecting the lawfulness of processing carried out before the withdrawal. To exercise any of these rights, please contact our Data Protection Officer at [email protected] with your registered email address and a clear description of your request.

We retain your personal data for as long as your account remains active and for a reasonable period thereafter as required by our legal and regulatory obligations under Philippine law, including anti-money laundering record-keeping requirements. When your data is no longer required, we securely delete or anonymise it in accordance with our internal data retention schedule. Cookies and session data are retained only for the duration necessary to maintain your session or to fulfil the analytics purpose for which they were collected, and you can manage cookie preferences through your browser settings at any time. This Privacy Policy may be updated periodically to reflect changes in our data practices, applicable law, or the services we offer. When we make material changes to this policy, we will notify registered users via email or a prominent notice on the platform, and the updated policy will take effect from the date it is published. We recommend reviewing this page regularly to stay informed about how xojili protects your personal information.