Data Privacy & Security

MrJili Privacy Policy – How We Protect Your Personal Data

Your personal information matters. This Privacy Policy explains exactly what mrjili collects, why we collect it, how it's used, and the rights you have as a player. We've written it in plain language because privacy shouldn't require a law degree to understand.

Last updated: 1 June 2025 Compliant with Republic Act 10173 – Data Privacy Act of 2012
1

About This Policy

This Privacy Policy applies to all personal information processed by mrjili in connection with the operation of its online gaming platform at mrjili.app, including its website, mobile browser interface, games, cashier, and customer support channels.

MrJili operates in compliance with the Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations. We are registered with the National Privacy Commission (NPC) of the Philippines and take our obligations as a personal information controller seriously.

When we say "personal information" in this policy, we mean any information that identifies you or could reasonably be used to identify you — your name, mobile number, email address, transaction history, device identifiers, and similar data. When we say "processing," we mean anything we do with that information: collecting it, storing it, using it, sharing it, or deleting it.

By registering on mrjili and using the platform, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal information as described here. If you do not agree with any part of this policy, you should not use mrjili.

Plain-Language Summary

This policy tells you what data mrjili holds about you, why we hold it, and what you can do about it. We don't sell your personal information to advertisers. We don't share it with anyone who doesn't need it to make your mrjili experience work. That's the short version — the full details are below.

mrjili
2

Data We Collect

MrJili collects the minimum amount of personal information necessary to operate a safe, compliant, and functional online gaming platform. Below is a breakdown of the categories of data we process.

Category Specific Data Points Purpose
Identity Data Full legal name, date of birth, nationality, government-issued ID number and image Account verification (KYC), age verification, anti-money laundering compliance
Contact Data Mobile number, email address, residential address (if required for verification) Account communications, transaction notifications, support
Financial Data GCash number, Maya account, bank account details, card last four digits, transaction history Processing deposits and withdrawals, AML monitoring
Gaming Activity Bet history, game sessions, win/loss records, bonus usage, session duration Platform operation, responsible gaming monitoring, dispute resolution
Technical Data IP address, device type, browser, operating system, session timestamps Security, fraud prevention, platform optimisation
Communications Data Support chat logs, emails, complaint records Dispute resolution, service improvement, regulatory compliance

MrJili does not collect sensitive personal information beyond what is required for identity verification — specifically, government ID images and biometric data only where mandated by our licensing obligations. We do not collect racial or ethnic origin data, religious beliefs, health data, or sexual orientation data for any purpose.

3

How We Collect Your Data

MrJili collects personal information through the following channels:

  • Registration form — when you create your mrjili account, you provide your name, date of birth, mobile number, and email address.
  • KYC verification — when you submit a government-issued ID to verify your identity before your first withdrawal.
  • Payment transactions — when you deposit or withdraw, payment channel details are captured as part of the transaction record.
  • Platform usage — your gaming activity, session data, and technical device information are automatically recorded as you use mrjili.
  • Customer support interactions — when you contact mrjili support via live chat or email, the content of those communications is retained.
  • Cookies and tracking technologies — as described in Section 7 of this policy.

MrJili does not purchase personal data from third-party data brokers or marketing companies. All data we hold about you was either provided directly by you or generated through your use of the platform.

4

Why We Use Your Data

MrJili uses your personal information for the following purposes. We only use data for purposes that were disclosed at the time of collection or that are consistent with the reason the data was provided.

Account Management
Creating and maintaining your mrjili account, verifying your identity, resetting your password, and processing account changes.
Payment Processing
Processing your GCash, Maya, InstaPay, BDO, BPI, and card transactions — both deposits into and withdrawals from your mrjili wallet.
Legal & Regulatory Compliance
Meeting our obligations under Philippine gaming regulations, anti-money laundering law (AMLA), and the Data Privacy Act of 2012.
Platform Improvement
Understanding how players use mrjili so we can fix problems, improve performance, and add features that actually matter to Filipino players.
Responsible Gaming
Monitoring gaming patterns to identify signs of problem gambling and activating responsible gaming tools where indicated by mrjili's detection systems.
Promotions & Communications
Sending you mrjili bonus offers, platform updates, and account notifications via SMS or email, based on your communication preferences.

MrJili does not use your personal data for purposes unrelated to the operation of the platform without your explicit consent. You may update your communication preferences at any time through Account Settings.

mrjili
5

Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, mrjili processes your personal information on the following legal grounds:

  • Contractual necessity — processing required to deliver the services you requested when registering on mrjili, including account creation, payment processing, game access, and support.
  • Legal obligation — processing required to comply with Philippine law, including gaming licence conditions, Anti-Money Laundering Act (AMLA) obligations, and KYC requirements mandated by our regulator.
  • Legitimate interests — processing necessary for mrjili's legitimate interests in operating a secure platform, preventing fraud, improving services, and protecting the rights of other players, where those interests are not overridden by your data rights.
  • Consent — for optional communications such as promotional emails and SMS, mrjili processes your data on the basis of your consent, which you may withdraw at any time through Account Settings without affecting your ability to use the platform.
6

Who We Share Your Data With

MrJili does not sell your personal information. We share data only with parties who genuinely need it to make the mrjili platform function, and only to the extent necessary for that purpose. These third parties are contractually bound to protect your data and may not use it for their own purposes.

Categories of Recipients
  • Payment processors — GCash, Maya, GrabPay, Coins.ph, InstaPay network banks, BDO, BPI, Visa, and Mastercard receive the minimum data required to process your transactions.
  • Identity verification providers — third-party KYC service providers who verify your government-issued ID against their document authentication systems. These providers are licensed and operate under strict data handling agreements with mrjili.
  • Game software providers — JILI Games, Pragmatic Play, PG Soft, and other game providers receive session and technical data necessary to deliver and audit their games on the mrjili platform.
  • Regulatory and law enforcement authorities — mrjili discloses data to Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement where legally required to do so.
  • Cloud infrastructure providers — mrjili uses reputable cloud hosting services to store and process data securely. These providers operate under data processing agreements and are prohibited from accessing your data except as instructed by mrjili.

Where mrjili shares data with parties outside the Philippines, we ensure that adequate data protection safeguards are in place, consistent with the requirements of the Data Privacy Act and NPC regulations.

7

Cookies & Tracking Technologies

MrJili uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and understand how the platform is used. Here is a plain breakdown of what those technologies do:

  • Essential cookies — required for basic platform functions such as keeping you logged in, remembering your session settings, and processing payments. These cannot be disabled without affecting your ability to use mrjili.
  • Analytics cookies — collect anonymised data about how pages are navigated, which games are played, and where errors occur. This information is used to improve the platform. MrJili uses aggregated analytics that do not identify individual users.
  • Security cookies — used to detect and prevent fraudulent activity, bot access, and account compromise attempts.
  • Preference cookies — remember your language and display preferences so you don't have to reset them each visit.

MrJili does not use third-party advertising cookies or share cookie data with ad networks. You can manage or clear cookies through your browser settings at any time. Disabling essential cookies will affect your ability to log in and use the platform normally.

8

Data Retention

MrJili retains your personal information for as long as necessary to fulfil the purposes described in this policy, and for as long as required by applicable Philippine law and our gaming licence conditions.

Retention Periods at a Glance
  • Active account data — retained for the lifetime of your account plus five years after closure, as required under Anti-Money Laundering regulations.
  • Transaction records — retained for a minimum of five years from the date of each transaction, in line with AMLA requirements.
  • KYC documents — retained for five years after your account is closed, or longer if required by a regulatory investigation.
  • Support communications — retained for two years from the date of the last interaction, or longer if related to an open dispute or investigation.
  • Analytics data — anonymised and aggregated after 12 months; individual-level analytics data is not retained beyond this period.

Once the relevant retention period expires and there is no ongoing legal obligation or legitimate interest requiring continued retention, mrjili will securely delete or anonymise your personal information.

mrjili
9

Security Measures

MrJili takes the security of your personal information seriously. We implement a combination of technical, organisational, and procedural safeguards to protect your data against unauthorised access, disclosure, alteration, and destruction.

TLS/SSL Encryption
All data in transit between your device and mrjili servers is encrypted using TLS 1.2 or higher. Payment data is encrypted end-to-end and never stored in unencrypted form.
Two-Factor Authentication
MrJili offers 2FA for account login and withdrawal authorisation. Enabling 2FA significantly reduces the risk of unauthorised access to your account.
Encrypted Data Storage
Sensitive data at rest is encrypted in our database systems. Access to production databases is limited to authorised personnel and is logged and audited.
Fraud Detection Systems
Real-time monitoring systems scan for unusual account activity, login anomalies, and suspicious transaction patterns to protect both mrjili and its players.

Despite these measures, no internet-based platform can guarantee absolute security. You can help protect your own account by using a strong, unique password, enabling 2FA, and not sharing your login credentials with anyone. If you suspect that your mrjili account has been compromised, contact support immediately.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mrjili will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

10

Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by mrjili. You may exercise any of these rights by contacting our Data Protection Officer (DPO) as described in Section 13.

📋
Right to Be Informed
The right to know what personal information mrjili collects and how it is used — which is exactly what this policy provides.
🔍
Right of Access
The right to request a copy of the personal information mrjili holds about you and a description of how it is being processed.
✏️
Right to Rectification
The right to request correction of inaccurate or incomplete personal information held by mrjili. Basic account details can be updated directly in Account Settings.
🗑️
Right to Erasure
The right to request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to mrjili's legal retention obligations.
🚫
Right to Object
The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests. You can opt out of marketing communications at any time.
⚖️
Right to Complain
If you believe mrjili has not handled your personal information correctly, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

MrJili will respond to valid data rights requests within 15 working days of receipt. Some requests may take longer where verification of identity is required or where the request is complex. We will keep you updated on the progress of your request throughout.

Please note that certain rights are subject to limitations — for example, mrjili cannot delete data it is legally required to retain for AML compliance or regulatory purposes. Where a right cannot be exercised in full, mrjili will explain the reason and what partial action can be taken.

11

Children's Privacy

MrJili is strictly an adult platform. The minimum age to register and play is 21 years old, in line with the Philippine legal gambling age. MrJili does not knowingly collect personal information from any individual under 21 years of age.

Age verification is performed as part of the KYC process required before any withdrawal is processed. Where mrjili discovers that a registered account belongs to a person under 21 years of age, that account will be immediately suspended, all funds returned, and the personal data associated with the account deleted unless retention is required for compliance purposes.

If you have reason to believe that a minor has registered on mrjili or is using an existing account without authorisation, contact our support team immediately at support@mrjili.app. MrJili will investigate and act within 24 hours of receiving such a report.

12

Updates to This Privacy Policy

MrJili reviews this Privacy Policy at least annually and whenever there is a material change to how we process personal data. The "Last updated" date at the top of this page reflects the most recent revision.

For significant changes — particularly those that affect your rights or the types of data we collect — mrjili will provide advance notice via email to your registered address or via an in-app notification before the change takes effect. For minor updates (such as clarifications of existing practices), the revised policy will be posted here without separate notice.

Continued use of mrjili after a policy update constitutes your acknowledgement of the revised policy. If you do not accept the updated terms, you may request account closure as described in the Terms and Conditions.

13

Contact Our Data Protection Officer

MrJili has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a data privacy concern, you can reach our DPO through the following channels:

Email the DPO
privacy@mrjili.app — responses within 5 business days for data rights requests.
Live Chat
Available 24/7 from your mrjili account. Urgent privacy concerns are escalated to the DPO immediately.
National Privacy Commission (NPC)

If you are not satisfied with mrjili's response to a privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint is available at the NPC's official website. MrJili cooperates fully with all NPC investigations.

Our Privacy Commitments

Six Ways MrJili Protects Your Data

The practical measures behind every section of this policy.

We Never Sell Your Data

MrJili does not sell, rent, or trade your personal information to advertisers, data brokers, or any third party for commercial purposes. Your data exists on mrjili to make mrjili work for you — nothing else.

DPA 2012 Compliant

MrJili is registered with the National Privacy Commission and processes personal data in full compliance with Republic Act 10173. Filipino players have clear, exercisable rights over their data held by mrjili.

Minimal Data Collection

MrJili collects only the data that is genuinely necessary to operate the platform and meet regulatory obligations. We don't collect data "just in case" — every data point has a specific, documented purpose.

Encrypted End-to-End

All data in transit between your device and mrjili is TLS-encrypted. Payment information is encrypted in our database. No sensitive data is stored or transmitted in plain text anywhere in the mrjili system.

Dedicated Data Protection Officer

MrJili has a named DPO registered with the NPC. This isn't a formality — the DPO reviews every data rights request personally and responds within five business days.

72-Hour Breach Notification

In the event of a data breach affecting your personal information, mrjili will notify you and the NPC within 72 hours — well within the regulatory requirement — so you can take protective action promptly.

Your Data is Safe at MrJili

We built mrjili's privacy framework around Philippine law and Filipino players' expectations — because your trust is the foundation everything else is built on. Register free and play with confidence.