nojili Privacy Policy

1. Introduction

nojili Casino ("nojili," "we," "us," "our") is the data controller responsible for the personal information of players who register and use the nojili online gaming platform at nojili.club. nojili operates under a PAGCOR license and is subject to the laws of the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").

This Privacy Policy applies to all personal data collected through the nojili website, mobile-optimized browser interface, customer support channels, and any other means through which you interact with nojili. It should be read together with our Terms & Conditions and our Responsible Gaming Policy.

If you are accessing nojili from Metro Manila, Cebu, Davao, or anywhere else in the Philippines, this Privacy Policy governs how your data is handled. We take the trust Filipino players place in us seriously — your data is never sold, and it is only used in the ways described in this document.

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register an account, complete KYC verification, make deposits or withdrawals, or contact support, nojili collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and gender as stated on your Philippine government-issued ID;
• Contact Data: Philippine mobile number, email address, and residential address;
• Identity Document Data: Copies of government-issued identification such as PhilSys, LTO driver's license, or Philippine passport submitted for KYC;
• Financial Data: GCash account reference, PayMaya account reference, BPI/BDO/Metrobank account details used for deposit and withdrawal transactions in Philippine Peso (PHP). nojili does not store full bank account numbers beyond what is required by payment processing;
• Communications Data: Records of live chat, email, and support ticket interactions with nojili.

2.2 Data Collected Automatically

When you access the nojili Platform, our systems automatically collect the following technical data:

• IP address and approximate geographic location (region, city);
• Device type, operating system, and browser version;
• Session timestamps, login history, and duration of gaming sessions;
• Game activity logs, bet amounts, wagering history, and win/loss records;
• Cookies and similar tracking technologies (see Section 6).

2.3 Data from Third Parties

nojili may receive supplementary identity or fraud-screening data from third-party KYC verification service providers, payment processors, and fraud detection partners operating under data processing agreements consistent with Philippine law.

3. How We Use Your Personal Data

nojili uses your personal data for the following specific purposes:

1. Account Registration & Management: Creating and maintaining your nojili player account, verifying your identity, and enabling login;
2. KYC & Regulatory Compliance: Fulfilling PAGCOR licensing obligations and Anti-Money Laundering Act (AMLA) requirements — including identity verification before processing withdrawals and filing mandatory transaction reports;
3. Payment Processing: Processing PHP deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank;
4. Gaming Operations: Running game sessions, recording wager history, calculating outcomes, and resolving disputes;
5. Customer Support: Responding to your queries, complaints, and account requests through live chat and email;
6. Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering self-exclusion, deposit limit, and cool-off requests;
7. Fraud Prevention & Security: Detecting and preventing unauthorized access, fraud, money laundering, and abuse of promotional offers;
8. Marketing Communications: Sending promotional offers, bonus notifications, and platform updates — only with your explicit consent, which you may withdraw at any time;
9. Platform Improvement: Analyzing aggregated, anonymized usage data to improve game performance, website responsiveness, and user experience across Philippine mobile networks.

4. Legal Basis for Processing

nojili processes your personal data on the following legal grounds under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the nojili Terms & Conditions — account registration, gaming operations, payment processing;
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA reporting requirements, NPC issuances, and other applicable Philippine law;
• Legitimate Interests: Fraud detection, platform security, and responsible gaming monitoring — where your interests and rights are not overridden;
• Consent: Marketing communications and optional data uses — you may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

nojili may share your personal data with the following categories of recipients:

• PAGCOR and Philippine Regulatory Authorities: As required by our gaming license, AMLA obligations, and any lawful regulatory or law enforcement request;
• Payment Service Providers: GCash (Mynt), PayMaya (Voyager), and Philippine banking partners — solely to process your PHP transactions. These providers are bound by their own privacy policies and Philippine BSP regulations;
• KYC & Fraud Prevention Partners: Third-party identity verification and fraud screening providers engaged under data processing agreements;
• Game Software Providers: Licensed game developers whose titles are hosted on the nojili Platform may receive anonymized session data necessary to run their games;
• IT & Infrastructure Providers: Cloud hosting, cybersecurity, and platform maintenance partners operating under strict data processing agreements and bound by confidentiality obligations;
• Legal and Professional Advisers: Philippine lawyers, auditors, and accountants under professional confidentiality obligations, where required for legal proceedings or compliance purposes.

All third-party data processors engaged by nojili are contractually required to process personal data only on nojili's documented instructions, implement appropriate technical and organizational security measures, and comply with the Philippine Data Privacy Act.

6. Cookies & Tracking Technologies

nojili uses cookies and similar browser-based technologies to operate the Platform, remember your preferences, maintain your login session, and analyze Platform usage. The following categories of cookies are used:

• Essential Cookies: Required for the Platform to function — login session management, security tokens, and game session continuity. These cannot be disabled without breaking core functionality;
• Analytics Cookies: Aggregated, anonymized data on how Filipino players navigate and use the Platform — used to identify and fix performance issues;
• Preference Cookies: Stores your language, display, and notification settings between sessions;
• Fraud Prevention Cookies: Technical identifiers used to detect and prevent fraudulent account activity and bot access.

You may manage non-essential cookie preferences through your browser settings. Note that disabling cookies may affect Platform functionality. nojili does not use third-party advertising or retargeting cookies.

7. Data Retention

nojili retains your personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. The following default retention periods apply:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and the AMLA;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming Session Logs: Retained for a minimum of three (3) years;
• Support Communications: Retained for two (2) years from the date of the interaction;
• Marketing Consent Records: Retained for the duration of your account and three (3) years thereafter as evidence of consent.

Following the expiry of retention periods, personal data is securely deleted or anonymized in a manner that prevents re-identification.

8. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nojili:

• Right to be Informed: The right to know what personal data nojili collects, processes, and retains about you;
• Right to Access: The right to request a copy of the personal data nojili holds about your account;
• Right to Rectification: The right to correct inaccurate or incomplete personal data;
• Right to Erasure or Blocking: The right to request deletion or suppression of your personal data where it is no longer necessary or where processing is unlawful — subject to nojili's legal retention obligations under PAGCOR and AMLA;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to Object: The right to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time via account settings or by contacting support. Withdrawal does not affect the lawfulness of prior processing.

To exercise any of these rights, contact nojili's Data Protection Officer at [email protected]. Requests will be acknowledged within 72 hours and resolved within 30 calendar days, or we will advise you of any extension permitted under applicable law. You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your rights have been violated.

9. Data Security

nojili implements technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, and disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the nojili Platform;
• Encryption of sensitive personal data at rest, including identity document copies and financial reference data;
• Multi-factor authentication for internal system access by nojili personnel;
• Regular penetration testing and security audits by qualified cybersecurity professionals;
• Strict role-based access controls — only personnel with a documented operational need may access player personal data;
• Formal incident response procedures compliant with the NPC's Personal Data Breach Notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nojili will notify the NPC within 72 hours of awareness and will notify affected players without undue delay as required by the Data Privacy Act.

10. Children's Privacy

11. Changes to This Privacy Policy

nojili may update this Privacy Policy from time to time to reflect changes in Philippine law, PAGCOR regulatory requirements, NPC guidance, or our data processing practices. The "Last Updated" date at the top of this page reflects the most recent revision. For material changes that affect how we process your personal data, nojili will notify active players via the Platform notification system or by email to your registered address. Continued use of the nojili Platform after publication of an updated Privacy Policy constitutes acceptance of the revised terms.

12. Contact & Data Protection Officer

For all data privacy inquiries, requests to exercise your rights under the Data Privacy Act, or concerns about nojili's data handling practices, please contact our Data Protection Officer:

If you are not satisfied with nojili's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).