Privacy Policy

1. Introduction

OKJili ("we," "us," "our," "the Company") is committed to protecting the privacy and personal data of all users of the OKJili platform ("you," "your," "the Player"). This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of the OKJili website and mobile application (collectively, the "Platform").

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated by reference. Together, these documents form the complete agreement governing your relationship with OKJili.

We take our data protection obligations seriously. OKJili processes personal data only for legitimate, specified purposes and retains it only for as long as necessary to fulfill those purposes or comply with applicable legal requirements.

2. Data Controller

OKJili acts as the data controller in respect of personal data collected through the Platform. As data controller, OKJili determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws, including those applicable in the Republic of the Philippines.

If you have any questions about how OKJili processes your personal data, or if you wish to exercise any of your data rights, please contact our Data Protection team using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

OKJili collects the following categories of personal data from players and platform users:

3.1 Identity Data

• Full legal name
• Date of birth
• Government-issued identification number (e.g., Philippine National ID, passport, driver's license)
• Photograph or selfie (for identity verification purposes)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (city, province, postal code)

3.3 Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details (BPI, BDO, Metrobank, or other supported banks)
• Transaction history, including deposits, withdrawals, and bonus credits

3.4 Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration and login timestamps
• Cookies and similar tracking technologies (see Section 11)

3.5 Gaming Data

• Game history, bet amounts, and outcomes
• Bonus usage and wagering activity
• VIP Club tier and loyalty points balance
• Responsible gaming settings and self-exclusion history

3.6 Communications Data

• Records of your communications with OKJili customer support
• Survey responses and feedback submissions
• Marketing preferences and opt-in/opt-out records

4. How We Collect Your Data

OKJili collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from security partners; payment confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with compliance obligations, including self-exclusion registers.

5. How We Use Your Personal Data

OKJili uses your personal data for the following purposes:

OKJili will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

6. Legal Basis for Processing

OKJili processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and delivery of gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC verification, AML reporting, age verification, and PAGCOR regulatory requirements.
• Legitimate interests: Processing necessary for OKJili's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw your consent at any time by contacting our support team or updating your account preferences.

7. Sharing Your Personal Data

OKJili does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers engaged to assist with regulatory compliance.
• Fraud and security providers: Specialist security firms engaged to detect and prevent fraud, money laundering, and other prohibited activities on the Platform.
• Regulatory authorities: PAGCOR and other competent regulatory or law enforcement authorities, where disclosure is required by law or regulatory obligation.
• IT and infrastructure providers: Cloud hosting, data storage, and platform infrastructure providers who process data on OKJili's behalf under strict data processing agreements.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by OKJili, subject to professional confidentiality obligations.

All third parties with whom OKJili shares personal data are required to handle that data in accordance with applicable data protection laws and OKJili's data protection standards. OKJili remains responsible for ensuring that such third parties provide adequate protections for your data.

8. Data Retention

OKJili retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by law.
• Customer support records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing preferences: Retained until you withdraw your consent or request deletion, subject to any overriding legal retention obligations.
• Technical and log data: Generally retained for twelve (12) months, unless required for longer periods for security or fraud investigation purposes.

When personal data is no longer required, OKJili will securely delete or anonymize it in accordance with our data disposal procedures.

9. Data Security

OKJili implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the OKJili Platform
• Encryption of sensitive data at rest, including financial information and identity documents
• Role-based access controls limiting data access to authorized personnel only
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication for administrative access to systems containing personal data
• Continuous monitoring for suspicious activity and potential security incidents
• Staff training on data protection and information security best practices

While OKJili takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, OKJili will notify you and relevant authorities as required by applicable law.

10. Your Data Rights

Subject to applicable law, you have the following rights in relation to your personal data held by OKJili:

• Right of access: You have the right to request a copy of the personal data OKJili holds about you, along with information about how it is being used.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to OKJili's legal retention obligations.
• Right to restrict processing: You may request that OKJili restricts the processing of your personal data in certain circumstances, such as while the accuracy of the data is being contested.
• Right to data portability: Where processing is based on your consent or contractual necessity, you may request that OKJili provides your personal data in a structured, commonly used, machine-readable format.
• Right to object: You have the right to object to processing of your personal data based on OKJili's legitimate interests, including profiling for direct marketing purposes.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

To exercise any of these rights, please contact OKJili's support team with your request. We will respond within the timeframes required by applicable law. We may need to verify your identity before processing your request.

11. Cookies and Tracking Technologies

OKJili uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

11.1 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Help us understand how players use the Platform, which pages are most visited, and where improvements can be made. Data collected is aggregated and anonymized.
• Marketing cookies: Used to deliver relevant promotional content within the OKJili Platform based on your gaming activity and preferences. OKJili does not use third-party advertising cookies.

11.2 Managing Cookies

You can control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a new cookie is set. Please note that disabling certain cookies may affect the functionality of the OKJili Platform, including your ability to log in or access certain features.

12. Minors and Age Restriction

The OKJili Platform is strictly intended for users who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. OKJili does not knowingly collect personal data from individuals under the age of 21.

If OKJili becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the OKJili Platform, please contact our support team immediately.

Parents and guardians are encouraged to use parental control tools and to monitor their children's online activity to prevent access to age-restricted platforms such as OKJili.

13. International Data Transfers

OKJili primarily stores and processes personal data within the Philippines. In some cases, personal data may be transferred to and processed in other countries, for example where OKJili uses cloud infrastructure or third-party service providers located outside the Philippines.

Where personal data is transferred internationally, OKJili ensures that appropriate safeguards are in place to protect your data, including contractual protections with data processors and, where applicable, reliance on adequacy decisions or other recognized transfer mechanisms.

By using the OKJili Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described in this Policy.

14. Changes to This Privacy Policy

OKJili reserves the right to update or amend this Privacy Policy at any time. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect. The updated Policy will display the revised effective date at the top of the document.

We encourage you to review this Privacy Policy periodically to stay informed about how OKJili protects your personal data. Your continued use of the Platform following the publication of any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or OKJili's data protection practices, please contact our Data Protection team. We are committed to addressing all privacy-related inquiries promptly and transparently.

When contacting us about a data rights request, please include your registered email address and a clear description of your request so we can process it efficiently. We may need to verify your identity before fulfilling any data access, correction, or deletion request.

For concerns related to responsible gaming, account self-exclusion, or KYC verification, please indicate the nature of your inquiry clearly so we can route it to the appropriate team without delay.