xbjilli Privacy Policy

xbjilli is committed to protecting the privacy and personal data of every individual who accesses, registers on, or uses the xbjilli online casino and sports betting platform. This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and relevant guidelines issued by the National Privacy Commission (NPC) of the Philippines.

This policy applies to all personal information collected by xbjilli through the following channels:

• Account registration and identity verification (KYC) processes
• Use of the xbjilli website, mobile web platform, and any future xbjilli applications
• Payment and financial transactions conducted through integrated payment partners
• Customer support interactions via live chat, email, or any other communication channel
• Participation in promotions, tournaments, or bonuses offered by xbjilli
• Cookies, analytics tools, and other passive data collection methods described in Section 7

This policy does not apply to third-party websites or services linked from the xbjilli platform. xbjilli is not responsible for the privacy practices of external parties.

For the purposes of the Philippine Data Privacy Act of 2012, xbjilli acts as the personal information controller in respect of the personal data it collects and processes from users of the xbjilli platform.

xbjilli operates under regulatory oversight by the Philippine Amusement and Gaming Corporation (PAGCOR). As a PAGCOR-regulated operator, xbjilli is subject to applicable data governance standards required of licensed gaming entities in the Philippines.

xbjilli collects personal information through both active and passive means. The categories of data collected are outlined below.

3.1 Registration & Identity Data

When you create an xbjilli account, we collect:

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement under PAGCOR regulations)
• Nationality and country of residence
• Valid email address and mobile number
• Username and encrypted password
• Permanent or current address in the Philippines (e.g., Metro Manila, Cebu, Davao, Quezon City, or other provinces)

3.2 Identity Verification (KYC) Documents

As required by PAGCOR and Philippine AML regulations, xbjilli collects the following during identity verification:

• Government-issued photo identification (e.g., Philippine Passport, SSS ID, PhilSys National ID, UMID, Driver's License, PRC ID, Voter's ID)
• Proof of address documentation (e.g., utility bill, bank statement)
• Source of funds documentation where required for high-value transactions
• Selfie or facial verification image for biometric matching where applicable

3.3 Financial & Payment Data

To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, xbjilli collects:

• Payment method type and associated account number or mobile number
• Transaction amounts in Philippine Peso (₱), timestamps, and transaction references
• Deposit and withdrawal history linked to your xbjilli account

Full card numbers and banking credentials are never stored on xbjilli servers. Payment data is processed through secure, PCI-compliant third-party payment gateways.

3.4 Usage & Activity Data

During your use of the xbjilli platform, we automatically collect:

• IP address and approximate geolocation at the time of login
• Device type, operating system, and browser version
• Pages visited, features accessed, session duration, and click-stream data
• Game rounds played, wager amounts, game results, and bonus activity
• Responsible gaming tool settings and self-exclusion records

3.5 Communications Data

When you contact xbjilli via live chat, email, or any other support channel, we retain records of those communications including message content, timestamps, and any attachments submitted, for quality assurance, dispute resolution, and regulatory compliance purposes.

xbjilli uses your personal data strictly for the purposes described below. We do not use your data for any purpose beyond what is outlined in this Privacy Policy without first obtaining your consent or as otherwise permitted by law.

4.1 Account Operations

Your registration data, KYC documents, and usage data are used to create and maintain your xbjilli account, verify your identity and age (21+), authenticate your login sessions, and enforce the one-account-per-person rule required under our Terms and Conditions.

4.2 Payment Processing

Financial data is used to process deposits, verify withdrawal eligibility, match transactions to your account, and maintain accurate financial records in line with Philippine AML and PAGCOR reporting obligations. All amounts are processed in Philippine Peso (₱).

4.3 Fraud Prevention & AML Compliance

xbjilli analyzes usage patterns, transaction data, device fingerprints, and IP information to detect and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct. This processing is a legal obligation under Philippine AML law and PAGCOR licensing requirements.

4.4 Responsible Gaming

Your gameplay history, deposit patterns, and session data are used to monitor for signs of problem gambling and to enforce responsible gaming tools you have activated — including deposit limits, loss limits, session time reminders, and self-exclusion periods.

4.5 Customer Support

Communications data and account history are used by xbjilli's support team to resolve queries, investigate disputes, and respond to formal complaints efficiently and accurately.

4.6 Legal & Regulatory Obligations

Certain personal data is retained and processed to meet xbjilli's obligations under Philippine law, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and conditions imposed by PAGCOR as part of xbjilli's operating authorization.

4.7 Platform Improvement & Analytics

Aggregated, anonymized usage data is analyzed to understand how players interact with the xbjilli platform, identify technical issues, improve game offerings, and optimize the user experience for Filipino players across Metro Manila, Cebu, Davao, Quezon City, and beyond.

4.8 Promotional Communications

With your consent, xbjilli may send you promotional emails or in-platform notifications about new games, bonus offers, and tournaments. You may withdraw your marketing consent at any time by contacting support or updating your notification preferences in your account settings. Withdrawing marketing consent does not affect other processing activities.

Under the Philippine Data Privacy Act of 2012, xbjilli processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill the service agreement between you and xbjilli — including account creation, identity verification, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, tax obligations, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for fraud detection, platform security, responsible gaming monitoring, and analytics — where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your freely given, specific, and informed consent has been obtained. You may withdraw consent at any time.

xbjilli does not sell, rent, or trade your personal data to third parties. Data is shared only in the limited circumstances described below, and always subject to appropriate contractual safeguards or legal requirements.

6.1 Payment Service Providers

Transaction data is shared with our payment partners — GCash, PayMaya, BPI, BDO, and Metrobank — as necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by Philippine financial regulations.

6.2 Regulatory Authorities

xbjilli is legally required to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies upon lawful request or as mandated by our operating license conditions.

6.3 Technology & Service Providers

xbjilli engages vetted third-party service providers for functions including KYC verification, game software delivery, cloud hosting, fraud analytics, and customer support technology. These providers access only the minimum data necessary to perform their function and are bound by confidentiality agreements and data processing agreements consistent with Philippine privacy law.

6.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of xbjilli's business assets, personal data held by xbjilli may be transferred to the acquiring entity. You will be notified of any such transfer and of any changes to this Privacy Policy that result from it.

6.5 Law Enforcement

xbjilli may disclose personal data to law enforcement authorities or other agencies where required by Philippine law, court order, or where xbjilli reasonably believes disclosure is necessary to prevent fraud, protect safety, or respond to an imminent threat.

xbjilli uses cookies and similar tracking technologies on the xbjilli website to provide a functional, secure, and personalized experience. A cookie is a small text file placed on your device by your browser when you visit a website.

7.1 Types of Cookies Used

7.2 Managing Cookies

You can manage or delete cookies through your browser settings at any time. Please note that disabling strictly necessary or security cookies may prevent you from accessing core xbjilli features, including logging in and placing bets. Clearing session cookies will log you out of your account.

7.3 Do Not Track

xbjilli acknowledges Do Not Track (DNT) signals sent by browsers for analytics cookies. However, strictly necessary and security cookies will continue to operate regardless of DNT signals as they are required by law and for platform security.

xbjilli retains personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal and regulatory obligations. The following retention periods apply:

• Active account data: Retained for the duration of your account's existence on the xbjilli platform.
• KYC and identity documents: Retained for a minimum of five (5) years from account closure, as required by Philippine AML regulations and PAGCOR licensing conditions.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA reporting requirements.
• Customer support communications: Retained for three (3) years from the date of the interaction for dispute resolution and quality assurance purposes.
• Responsible gaming records: Self-exclusion records and responsible gaming tool configurations are retained for the full duration of any exclusion period plus three (3) years thereafter.
• Marketing consent records: Retained until you withdraw consent, plus one (1) year, to document that processing was lawfully authorized.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with xbjilli's data destruction procedures.

xbjilli implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or unlawful disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the xbjilli servers
• AES-256 encryption at rest for sensitive data including KYC documents and financial records stored in our secure data infrastructure
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals
• Multi-factor authentication (MFA) options available for player accounts to enhance login security
• 24/7 security monitoring of xbjilli's platform infrastructure for anomalous activity

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in harm to affected individuals, xbjilli will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected users without undue delay, as required by the Data Privacy Act of 2012.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by xbjilli:

• Right to be Informed: You have the right to know what personal data xbjilli collects about you, why it is collected, and how it is used — as set out in this Privacy Policy.
• Right to Access: You may request a copy of the personal data xbjilli holds about you, including details of processing activities and data sharing arrangements.
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected or updated. You can update most of your profile information directly within your xbjilli account settings.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to xbjilli's legal retention obligations under PAGCOR and AMLA regulations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances warrant it.
• Right to Data Portability: You may request a copy of personal data you have provided to xbjilli in a structured, commonly used, machine-readable format.
• Right to File a Complaint: If you believe xbjilli has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, submit a written request to xbjilli's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." xbjilli will respond within thirty (30) days of receiving your request, as required under R.A. 10173. We may need to verify your identity before processing your request.

xbjilli is strictly an adult platform. In accordance with PAGCOR regulations and Philippine law governing online gambling, all users must be at least 21 years of age to register and participate on the xbjilli platform. This age restriction applies to all players across the Philippines, including those in Metro Manila, Cebu, Davao, Quezon City, Makati, and all other provinces and regions.

xbjilli does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the KYC process as a mandatory step before any account is fully activated. If xbjilli discovers that a minor has submitted registration information, the account will be immediately suspended, all funds returned where applicable, and all associated personal data deleted from xbjilli's systems without delay.

If you have reason to believe that a person under 21 has registered on the xbjilli platform, please notify us immediately at [email protected].

xbjilli primarily stores and processes personal data within secure infrastructure that serves the Philippine market. In limited circumstances, certain personal data may be transferred to and processed in jurisdictions outside the Philippines — for example, where xbjilli engages international technology service providers for game software delivery, cloud infrastructure, or fraud analytics services.

Where such cross-border transfers occur, xbjilli ensures that:

• The recipient country provides a comparable level of data protection to that afforded under Philippine law, or
• Appropriate contractual safeguards are in place, such as standard data processing agreements binding the recipient to obligations equivalent to those under R.A. 10173, and
• The transfer has been authorized or is otherwise permitted under the guidelines of the National Privacy Commission of the Philippines.

xbjilli does not transfer personal data internationally for marketing or commercial purposes beyond what is described in this policy.

xbjilli reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or xbjilli platform features. When material changes are made, xbjilli will:

• Update the "Last Updated" date at the top of this Privacy Policy
• Post a prominent notice on the xbjilli platform for a reasonable period after the change takes effect
• Where required by law or where the change materially affects how we process your data, notify you directly via email or in-platform notification

Your continued use of the xbjilli platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. We encourage you to review this page periodically to stay informed of how xbjilli protects your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or xbjilli's data processing practices, please contact our Data Protection Officer:

If you are not satisfied with xbjilli's response, or if you believe that xbjilli is processing your personal data in violation of the Philippine Data Privacy Act of 2012, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government body responsible for administering and implementing R.A. 10173 and its Implementing Rules and Regulations.

xbjilli takes all data privacy complaints seriously and will work in good faith to resolve any concern you raise regarding your personal information. We value the trust placed in us by over 500,000 players across the Philippines and are committed to maintaining the highest standards of data protection and privacy.