pjli Privacy
Policy

This Privacy Policy applies to all personal data collected and processed by pjli (hereinafter "pjli," "we," "us," or "our") in connection with the operation of the pjli online gaming platform accessible at pjli.cam, including all sub-domains, mobile-optimised versions, and associated services.

For the purposes of the Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, pjli acts as the Personal Information Controller (PIC) in respect of the personal data of its registered players and platform visitors located in the Philippines.

This Policy should be read together with pjli's Terms & Conditions and Responsible Gaming Policy, both of which are incorporated herein by reference. By accessing the pjli platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

pjli collects personal data that falls into the following categories, depending on your interaction with the platform:

pjli does not collect sensitive personal information as defined under the Data Privacy Act (e.g., health records, racial or ethnic origin, political opinions, religious beliefs) unless specifically required by law or PAGCOR regulations in connection with responsible gaming or anti-money laundering obligations.

pjli collects personal data through the following primary channels:

Information you provide to us directly when you: register an account on pjli; complete the KYC identity verification process; make a deposit or request a withdrawal; contact pjli support via live chat or email; participate in promotions, surveys, or feedback programmes; or update your account profile settings.

Technical and usage data is collected automatically when you visit or interact with the pjli platform, primarily through cookies, web beacons, server logs, and similar tracking technologies. This data helps pjli detect fraud, maintain platform security, improve user experience, and comply with PAGCOR audit obligations. See Section 6 for details on our cookie practices.

pjli may receive personal data about you from third-party service providers in limited circumstances, including:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank may confirm transaction status and account validity;
• Identity Verification Providers: Third-party KYC and liveness verification services used to confirm the authenticity of government-issued IDs;
• Fraud Prevention Services: Risk assessment providers that help identify suspicious account behaviour or potential money laundering activity;
• PAGCOR: As a licensed platform, pjli may be required to receive and process player-related information shared by PAGCOR in connection with regulatory compliance activities.

pjli processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The following table outlines our primary processing purposes and the corresponding legal basis for each:

pjli does not sell, rent, or otherwise commercially transfer your personal data to third parties. However, in order to operate the platform and comply with applicable law, pjli shares personal data with the following categories of recipients on a strictly need-to-know basis:

pjli engages third-party service providers who process personal data solely on pjli's behalf and under pjli's documented instructions, including: payment processing providers (GCash, PayMaya, BPI, BDO, Metrobank); KYC and identity verification platforms; fraud and risk assessment services; IT infrastructure and cloud hosting providers; customer support platform providers; and email and SMS communication delivery services. All third-party processors are contractually bound to handle personal data securely, use it only for the purposes specified, and comply with applicable Philippine data privacy law.

pjli is legally obligated to disclose personal data to the following authorities where required under Philippine law:

• PAGCOR — pursuant to our operating licence and PAGCOR's audit and reporting requirements;
• Anti-Money Laundering Council (AMLC) — in connection with covered transaction reports and suspicious transaction reports under Republic Act 9160, as amended;
• National Privacy Commission (NPC) — in the event of a personal data breach reportable under the Data Privacy Act;
• Philippine law enforcement agencies — where required by a valid court order, subpoena, or lawful request issued under Philippine law.

In the event that pjli undergoes a merger, acquisition, restructuring, or sale of all or part of its business assets, personal data may be transferred to the successor entity. Players will be notified of any such transfer via their registered email address prior to the transfer taking effect, and will be informed of any changes to the applicable privacy policy.

pjli uses cookies and similar tracking technologies on its platform. Cookies are small text files stored on your device that help us recognise you across sessions, maintain your login state, remember your preferences, and analyse how the platform is used.

pjli uses the following categories of cookies:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without disrupting platform functionality.
• Functional Cookies: Used to remember your preferences such as language settings, game lobby filters, and display options. These enhance your experience but are not essential to platform operation.
• Analytics Cookies: Used to collect anonymised information about how players interact with the pjli platform — pages visited, session duration, features used. This data helps pjli improve the platform experience. Analytics data is aggregated and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, identify bot behaviour, and support IP-based geolocation verification to ensure platform access complies with applicable jurisdictional restrictions.

You may configure your browser to refuse cookies or alert you when cookies are being sent. Please note that disabling strictly necessary cookies may impair your ability to log in or use certain pjli features. Functional and analytics cookies may be declined without affecting core platform functionality.

pjli retains personal data for as long as is necessary to fulfil the purposes for which it was collected, comply with legal and regulatory obligations, and resolve any disputes that may arise. The following general retention periods apply:

• Account and KYC Data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in accordance with PAGCOR requirements and the Anti-Money Laundering Act;
• Transaction Records: Retained for a minimum of five (5) years following the transaction date, as required by the AMLC;
• Gaming and Betting History: Retained for a minimum of three (3) years following the relevant session or bet, for regulatory audit purposes;
• Support Communications: Retained for two (2) years following the closure of the relevant support case;
• Marketing Consent Records: Retained for the duration of your consent and for a period of three (3) years following its withdrawal, to evidence compliance with consent obligations.

Upon expiry of the applicable retention period, personal data will be securely destroyed, deleted, or permanently anonymised in accordance with pjli's data disposal procedures.

pjli implements comprehensive technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Key security measures include:

• 256-bit TLS/SSL encryption for all data in transit between your browser and pjli servers;
• AES-256 encryption for sensitive data fields stored in pjli databases, including payment credentials and ID document data;
• Password hashing using bcrypt with salt — pjli never stores passwords in plaintext and pjli staff cannot access your account password;
• Role-based access controls limiting internal access to personal data to authorised pjli personnel on a need-to-know basis;
• Multi-factor authentication required for all pjli administrative system access;
• Penetration testing and vulnerability assessments conducted periodically by independent third-party security specialists;
• 24/7 automated monitoring for anomalous account behaviour, login anomalies, and potential data breach indicators;
• Segregated player funds — your wallet balance is held in accounts separate from pjli's operational funds.

Under the Data Privacy Act of 2012 and NPC issuances, pjli players have the following rights in relation to their personal data. To exercise any of these rights, please contact our Data Protection Officer through the channels listed in Section 13.

The pjli platform is strictly restricted to individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. pjli does not knowingly collect personal data from individuals under the age of 21.

Where pjli discovers or has reasonable grounds to suspect that a registered account holder is under 21 years of age, it will: immediately suspend the account; initiate a KYC age verification review; withhold any funds pending the outcome of the review; and, if the age restriction is confirmed to have been violated, permanently close the account and report the matter to PAGCOR as required.

If you are a parent or guardian and believe that a minor may have accessed or registered on the pjli platform, please contact our support team via 24/7 live chat immediately so we can take prompt action.

pjli processes certain categories of your gaming and financial data specifically to support responsible gaming obligations. This includes monitoring of betting patterns, session duration, deposit frequency, and loss trajectory to identify players who may be at risk of developing a gambling problem. This processing is carried out on the basis of both legal obligation (PAGCOR responsible gaming requirements) and pjli's legitimate interests in player welfare.

Where responsible gaming monitoring identifies indicators of potential harm, pjli may: send you a responsible gaming message or cooling-off suggestion; contact you via your registered email or mobile number to discuss support options; or, in severe cases, proactively apply a temporary restriction to your account pending a welfare check — particularly where a self-exclusion has been requested or where PAGCOR has directed such action.

Data related to your responsible gaming settings — including deposit limits, self-exclusion periods, and cooling-off preferences — is processed and retained in accordance with PAGCOR's responsible gaming framework. If you have self-excluded from pjli, your exclusion data will be retained for the full duration of the exclusion period to ensure it is enforced effectively.

For more information about the responsible gaming tools available on pjli, please visit our Responsible Gaming page.

pjli reserves the right to update or amend this Privacy Policy at any time in response to changes in applicable law, PAGCOR regulations, NPC guidance, or pjli's data processing practices. The date of the most recent update is noted at the top of this page.

Where a material change is made to this Privacy Policy — for example, a new category of data being collected, a new third-party processor being engaged, or a significant change to data retention periods — pjli will notify registered players via their registered email address at least seven (7) days before the change takes effect.

Your continued use of the pjli platform after the effective date of any amendment to this Privacy Policy constitutes your acknowledgment of the updated policy. We encourage you to review this page periodically.

If you have questions, concerns, or requests relating to this Privacy Policy or pjli's data processing activities, you may contact us through the following channels:

• 24/7 Live Chat: Available directly within the pjli platform — the fastest and most efficient way to raise a privacy query with our team.
• Email (plain text — not a link): [email protected] — for written privacy requests, data subject access requests, and DPO correspondence. Please include "Privacy Request" in your subject line.

pjli's Data Protection Officer (DPO) is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. All formal data subject requests, including access, rectification, erasure, and objection requests, should be directed to the DPO at the email address above. pjli will acknowledge your request within five (5) business days and provide a substantive response within fifteen (15) business days.

If you are unsatisfied with pjli's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.