Privacy Policy

1Introduction

40jili is committed to protecting the privacy and personal data of every player who uses our platform. We understand that trust is the foundation of any relationship between a player and an online gaming platform, and we take our data protection responsibilities seriously.

This Privacy Policy applies to all personal data collected by 40jili through the 40jili website, mobile browser experience, customer support channels, and any other touchpoint through which you interact with the 40jili platform. It is intended to be read alongside our Terms & Conditions and Responsible Gaming policy, both of which are incorporated by reference.

If you have any questions about how 40jili handles your personal data, please contact our Data Protection Officer using the details provided in Section 15 of this policy.

2Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, 40jili acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the operation of the 40jili platform.

As Personal Information Controller, 40jili determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data privacy laws and the regulations of the National Privacy Commission (NPC).

3Personal Data We Collect

40jili collects only the personal data that is necessary to provide our services, verify your identity, process financial transactions, and comply with our legal and regulatory obligations. The categories of personal data we collect are described below.

3.1 Registration and Account Data

When you create a 40jili account, we collect the following information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify that you meet the 21+ age requirement)
• Email address
• Philippine mobile number
• Username and encrypted password
• Residential address (province, city/municipality, barangay)

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and the Anti-Money Laundering Act (AMLA), we may collect:

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, PhilSys National ID, driver's license, Voter's ID, PRC ID)
• Proof of address documents (e.g., utility bills, bank statements, barangay certificates)
• Selfie photographs taken alongside your government-issued ID
• Proof of payment method ownership (e.g., GCash or Maya account screenshots showing your registered name)

3.3 Financial and Transaction Data

When you make deposits or request withdrawals, we collect:

• Payment method type (e.g., GCash, Maya, bank transfer, debit card)
• Transaction amounts in Philippine Peso (PHP)
• Transaction timestamps and reference numbers
• Bank account or e-wallet details (account name and number, as applicable)

3.4 Gaming Activity Data

We record data related to your use of 40jili games, including:

• Games played, bet amounts, and game outcomes
• Session duration and frequency of play
• Bonus and promotion usage history
• Responsible gaming tool settings and self-exclusion status

3.5 Technical and Device Data

When you access the 40jili platform, we automatically collect certain technical data:

• IP address and approximate geolocation (country and region level)
• Device type, operating system, and browser type and version
• Pages visited, time spent on pages, and navigation paths
• Referring URLs and search terms used to find 40jili

3.6 Communications Data

When you contact 40jili customer support or respond to surveys and promotions, we collect:

• The content of your messages, emails, and live chat transcripts
• Your preferred language and communication preferences
• Feedback, complaints, and dispute records

4How We Collect Your Data

40jili collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access and navigate the 40jili platform.
• From third-party service providers — including payment processors (e.g., GCash, Maya, banks), identity verification services, and fraud detection providers, who may share data with us as part of the service they provide to 40jili.
• From regulatory authorities — including PAGCOR and the Anti-Money Laundering Council (AMLC), where we are required by law to receive or share information.

5How We Use Your Personal Data

40jili uses the personal data we collect for the following purposes:

• Account creation and management — to register your account, verify your identity, and manage your player profile on the 40jili platform.
• Service delivery — to provide access to games, process deposits and withdrawals, and deliver the features and functionality of the 40jili platform.
• Regulatory compliance — to fulfill our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (Republic Act No. 9160, as amended), and the Data Privacy Act of 2012.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other illegal or prohibited conduct.
• Responsible gaming — to monitor gaming patterns, enforce deposit and session limits, process self-exclusion requests, and identify players who may be at risk of problem gambling.
• Customer support — to respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Marketing and promotions — to send you information about 40jili bonuses, promotions, and new games, where you have consented to receive such communications. You may opt out at any time.
• Platform improvement — to analyze usage patterns, conduct research, and improve the performance, security, and user experience of the 40jili platform.
• Legal proceedings — to establish, exercise, or defend legal claims involving 40jili.

6Legal Basis for Processing

Under the Data Privacy Act of 2012, 40jili processes your personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between you and 40jili (i.e., the Terms & Conditions you agreed to upon registration), including account management, game access, and payment processing.
• Legal obligation — processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC directives.
• Legitimate interests — processing is necessary for 40jili's legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent — for certain processing activities, such as sending marketing communications, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7Data Sharing and Disclosure

40jili does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

7.1 Service Providers

We share data with trusted third-party service providers who assist us in operating the 40jili platform, including payment processors (GCash, Maya, banks), identity verification providers, cloud hosting and infrastructure providers, customer support software providers, and analytics platforms. All service providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

7.2 Regulatory and Law Enforcement Authorities

We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts of competent jurisdiction where we are required to do so by law, court order, or regulatory directive.

7.3 Game Content Providers

Certain game providers whose titles are available on 40jili may receive limited technical data (such as player session identifiers) necessary to deliver their games. These providers do not receive your full personal profile and are bound by data processing agreements with 40jili.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of 40jili's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

8Cookies and Tracking Technologies

40jili uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and support security and fraud prevention functions. A cookie is a small text file placed on your device when you visit a website.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies — essential for the platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without affecting core platform functionality.
• Functional Cookies — remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations.
• Analytics Cookies — help us understand how players use the 40jili platform, which pages are most visited, and where users encounter difficulties. This data is aggregated and anonymized.
• Security Cookies — used to detect and prevent fraudulent activity, bot traffic, and unauthorized account access attempts.

8.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the 40jili platform, including logging in and accessing games.

9Data Retention

40jili retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, to comply with our legal and regulatory obligations, and to resolve any disputes or enforce our agreements. The following general retention periods apply:

Upon expiry of the applicable retention period, 40jili will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

10Data Security

40jili implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption at rest for sensitive data stored in our databases, including passwords (stored as salted hashes) and financial information
• Multi-factor authentication (MFA) options for player accounts to prevent unauthorized access
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis
• Regular security audits and penetration testing conducted by qualified third-party security professionals
• Intrusion detection and prevention systems monitoring for suspicious activity in real time
• Staff training on data protection obligations and secure data handling practices

While 40jili takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for keeping your 40jili login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

11Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by 40jili:

• Right to be Informed — you have the right to be informed about how your personal data is collected, used, and processed, as described in this Privacy Policy.
• Right to Access — you may request a copy of the personal data 40jili holds about you, along with information about how it is being processed.
• Right to Rectification — if any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected or updated.
• Right to Erasure — you may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object — you have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Block — you may request that 40jili suspend the processing of your personal data in certain circumstances, such as while a rectification request is being assessed.
• Right to Data Portability — you may request that 40jili provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Complain — if you believe that 40jili has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

12Children's Privacy and Age Restriction

The 40jili platform is strictly intended for adults who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing online gaming. 40jili does not knowingly collect, process, or store personal data from individuals under the age of 21.

If 40jili becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any funds deposited by an underage user will be returned to the source payment method after deducting any amounts wagered, and the matter may be referred to the appropriate authorities.

13Third-Party Links and Services

The 40jili platform may contain references to third-party game providers and payment services. While 40jili takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party services. Each third-party service provider operates under its own privacy policy, and we encourage you to review those policies before providing any personal data directly to a third party.

40jili does not control the content, privacy practices, or data handling of any third-party service, and our Privacy Policy does not apply to any data collected directly by third parties through their own platforms or interfaces.

14Changes to This Privacy Policy

40jili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable laws, or regulatory requirements. When material changes are made, we will notify registered players by email or through a prominent notice on the 40jili platform prior to the changes taking effect. The date of the most recent revision is displayed at the top of this page.

Your continued use of the 40jili platform after any amendments have been posted constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with the updated policy, you should cease using the platform and may request account closure in accordance with our Terms & Conditions.

15Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 40jili handles your personal data, please contact our Data Protection Officer using the details below:

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

For more information about your rights as a data subject or to file a complaint with the NPC, you may visit the NPC's official website or contact them directly through their published channels. 40jili fully cooperates with NPC investigations and inquiries.