byjili Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how byjili ("byjili", "we", "us", "our") collects, uses, stores, discloses, and otherwise processes personal information relating to users ("you", "Player", "User") of the online gaming platform accessible at byjili.cam (the "Platform").

byjili takes the privacy of its players seriously. We handle personal information in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission ("NPC"). We are likewise guided by internationally recognized data protection principles, including data minimization, purpose limitation, and storage limitation.

This Policy applies to all personal information collected through the Platform, our mobile applications, live chat support, email communications, and any other interaction you have with byjili. It should be read together with our Terms & Conditions, which are available at byjili.cam/terms-conditions.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is byjili, the operator of the Platform at byjili.cam. As data controller, byjili determines the purposes and means of processing your personal information and is accountable for the compliance obligations described in this Policy.

Questions, requests, or complaints relating to the handling of your personal information should be directed to our Data Protection Officer (DPO), whose contact details are provided in Section 15 of this Policy.

3. Personal Information We Collect

byjili collects personal information through multiple channels. The categories of information we collect, and the primary context in which each is collected, are set out in the table below:

3.1 Information We Do Not Collect

byjili does not collect full payment card numbers, card security codes (CVV), or online banking passwords. Payment credentials are processed directly by our certified payment service providers and are not stored on byjili's systems. We do not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or health records — unless you voluntarily provide such information in the context of a responsible gaming self-assessment or a dispute resolution process.

4. How We Use Your Personal Information

byjili processes your personal information for the following purposes:

• Account Creation and Management: To register your account, verify your identity, maintain your account, and administer your relationship with byjili.
• Service Delivery: To provide access to games, process deposits and withdrawals, apply bonus credits, and operate the Platform's features and functionality.
• Identity and Age Verification (KYC): To verify that you are at least 21 years of age and meet the eligibility requirements under applicable Philippine law and our Terms & Conditions.
• Financial Crime Prevention (AML): To comply with anti-money laundering obligations, including screening transactions, verifying source of funds, and reporting suspicious activity to relevant Philippine authorities where required by law.
• Customer Support: To respond to your inquiries, resolve disputes, process complaints, and provide technical assistance.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behavior, apply deposit and loss limits you have set, enforce self-exclusion requests, and provide targeted responsible gaming information.
• Fraud Prevention and Security: To detect, investigate, and prevent unauthorized account access, bonus abuse, collusion, and other fraudulent or prohibited activity.
• Marketing Communications: To send you promotional offers, bonus notifications, and product updates — subject to your communication preferences and your right to opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct internal research, and improve the performance, security, and user experience of the Platform.
• Legal and Regulatory Compliance: To comply with our obligations under Philippine law, including the Data Privacy Act, the Anti-Money Laundering Act, and PAGCOR licensing conditions.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, byjili relies on the following criteria to lawfully process your personal information:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and byjili (i.e., the Terms & Conditions), including account management, game operation, and payment processing.
• Legal Obligation: Processing is required for byjili to comply with a legal or regulatory obligation, including KYC/AML obligations, PAGCOR licensing requirements, and disclosures mandated by Philippine law.
• Legitimate Interest: Processing is necessary for the purposes of byjili's legitimate interests — including fraud prevention, security monitoring, and responsible gaming operations — provided that such interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and for certain non-essential processing activities, byjili relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.

6. Sharing Your Personal Information

byjili does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We share personal information only in the following circumstances and only to the extent necessary for each purpose:

6.1 Service Providers and Processors

We engage carefully selected third-party service providers who process personal information on our behalf and under our instructions. These include payment processors (for GCash, PayMaya, BPI, BDO, UnionBank, and other Philippine payment methods), identity verification providers, game software licensors, cloud hosting providers, and customer support platform operators. All third-party processors are bound by data processing agreements that require them to implement appropriate security measures and to process data only as instructed by byjili.

6.2 Regulatory and Law Enforcement Authorities

byjili may disclose personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), or other competent Philippine governmental authorities where disclosure is required by law, regulation, court order, or in response to a lawful request by a public authority.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or substantially all of byjili's assets, personal information held by byjili may be transferred to the acquiring entity, provided that the transferee agrees to handle such information in a manner consistent with this Policy. You will be notified of any such transfer where required by applicable law.

7. International Data Transfers

Some of byjili's third-party service providers — including game software licensors and certain cloud infrastructure providers — are located or operate servers in jurisdictions outside the Republic of the Philippines. Where personal information is transferred to a country that the NPC has not recognized as providing an adequate level of protection, byjili ensures that appropriate safeguards are in place, including contractual data transfer agreements based on standard contractual clauses approved by the NPC, binding corporate rules, or other recognized transfer mechanisms.

By using the Platform, you acknowledge that your personal information may be processed in jurisdictions outside the Philippines. byjili takes all reasonable steps to ensure that any such transfers comply with the Data Privacy Act of 2012 and that your personal information receives an equivalent level of protection regardless of where it is processed.

8. Data Retention

byjili retains your personal information only for as long as is necessary to fulfill the purposes for which it was collected or as required by applicable law. Our general retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account relationship with byjili and for a minimum of five (5) years after account closure, in accordance with AML recordkeeping requirements under Philippine law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by anti-money laundering legislation.
• Gaming Activity Data: Retained for three (3) years from the date of activity for responsible gaming monitoring purposes.
• Communications and Support Records: Retained for two (2) years from the date of each interaction, or longer if the interaction relates to a dispute or legal claim that remains unresolved.
• Marketing Preferences: Retained until you withdraw consent or for three (3) years following your last interaction with byjili's marketing communications, whichever is earlier.

Upon the expiration of applicable retention periods, personal information will be securely deleted, anonymized, or pseudonymized so that it can no longer be associated with an identified or identifiable individual.

9. Security Measures

byjili implements appropriate technical and organizational security measures designed to protect your personal information against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include, without limitation:

• 256-bit Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and byjili's servers;
• Encryption of sensitive data fields at rest within our databases;
• Role-based access controls ensuring that byjili personnel access personal information only to the extent required by their job function;
• Two-factor authentication (2FA) for Platform accounts and for internal administrative systems;
• Regular penetration testing and vulnerability assessments conducted by independent security professionals;
• Comprehensive incident response procedures, including breach notification protocols aligned with NPC requirements.

While byjili takes all reasonable steps to protect your personal information, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your own account credentials. byjili strongly recommends enabling two-factor authentication on your byjili account.

10. Cookies & Tracking Technologies

byjili uses cookies and similar tracking technologies on the Platform to provide functionality, improve performance, analyze usage patterns, and deliver relevant content. A "cookie" is a small text file placed on your device by a website you visit.

10.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that prevent cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings and game lobby filters) to improve your experience across sessions.
• Performance and Analytics Cookies: Collect anonymized or aggregated data about how players use the Platform to help us improve navigation, content, and features.
• Responsible Gaming Cookies: Support the operation of session time alerts, reality check prompts, and other responsible gaming tools you have activated on your account.

10.2 Managing Cookies

You may control non-essential cookies through the cookie preference settings accessible via the Platform. You may also configure your browser to refuse or delete cookies, though disabling strictly necessary cookies will affect your ability to use certain Platform features, including the ability to remain logged in during a session.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012, registered players whose personal information is held by byjili have the following rights. These rights are subject to certain conditions and exceptions as provided under applicable Philippine law:

To exercise any of the above rights, please submit a written request to our Data Protection Officer at the contact details in Section 15. byjili will respond to all legitimate rights requests within fifteen (15) business days of receipt, subject to identity verification. Certain rights may be limited where their exercise conflicts with byjili's legal obligations — for example, we cannot delete transaction records that we are legally required to retain under AML law.

12. Minors and Age Restriction

byjili implements age verification controls as part of the account registration process. If we become aware that personal information has been collected from a person under the age of 21, we will take immediate steps to delete that information and close the associated account. If you have reason to believe that a minor has registered an account on the Platform, please contact us immediately using the details in Section 15.

13. Third-Party Links and Services

The Platform may contain references to third-party payment providers and game software licensors whose services are integrated within the byjili environment. When you interact with third-party payment gateways — such as GCash or PayMaya — for the purpose of completing a deposit or withdrawal, you are subject to the privacy policies and terms of those third-party providers, which are separate from this Policy. byjili does not control and accepts no responsibility for the privacy practices of third-party service providers.

byjili does not include external hyperlinks to third-party websites within the Platform's content pages. If you navigate to any third-party website independently, this Policy does not apply to information collected by that website.

14. Changes to This Privacy Policy

byjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered players via in-platform notification or to your registered Philippine mobile number or email address at least seven (7) days before the revised Policy takes effect, except where immediate changes are required by law.

The effective date at the top of this Policy reflects the date of the most recent revision. We encourage you to review this Policy periodically. Your continued use of the Platform following any amendment constitutes your acknowledgment of the revised Policy. If you disagree with any material change, you must cease use of the Platform and contact our DPO to arrange account closure and data deletion where applicable.

15. Contact & Data Protection Officer

For all questions, requests, or complaints relating to the processing of your personal information under this Privacy Policy, please contact byjili's Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 through the Platform interface at byjili.cam
• Subject Line: Please use "Privacy / DPO Request" in the subject line of written communications

byjili will acknowledge receipt of all privacy-related requests within three (3) business days and will provide a substantive response within fifteen (15) business days, subject to complexity and any identity verification requirements.

If you are not satisfied with byjili's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC's complaint process is available through the NPC's official channels.