xojili Casino Privacy Policy

1 About This Privacy Policy

This Privacy Policy describes how xojili Casino collects, uses, discloses, stores, and protects personal information obtained from users ("you," "Player," or "Data Subject") of the xojili platform, including the website at xojili.live and all associated services, features, and content (collectively, the "Platform").

By registering an account, accessing, or using the xojili Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the xojili Platform.

This Privacy Policy should be read together with xojili's Terms & Conditions, which govern your use of the Platform. Defined terms used but not defined in this Privacy Policy have the meanings given to them in the Terms & Conditions.

2 Personal Data We Collect

xojili collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

xojili does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. We do not collect biometric data, health information, or political opinions.

3 How We Use Your Personal Data

xojili uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your xojili Casino account, including verifying your identity and age (21+ requirement) in compliance with PAGCOR regulations;
• Service Delivery: To provide you with access to games, process deposits and withdrawals in Philippine Peso (₱), and deliver the full range of xojili Platform features;
• Regulatory Compliance: To comply with our obligations under Philippine law, including the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and PAGCOR licensing requirements, including KYC and transaction monitoring;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal activities on the xojili Platform;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through xojili's 24/7 support channels;
• Responsible Gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion requests, and identify players who may need responsible gaming support;
• Platform Improvement: To analyze usage patterns, conduct research, and improve the performance, security, and user experience of the xojili Platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and updates about xojili Casino — only where you have provided consent or where permitted by applicable law. You may opt out at any time.

4 Legal Basis for Processing

xojili processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:

• Consent: Where you have given explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications;
• Contractual Necessity: Where processing is necessary to perform our contract with you — i.e., to provide the xojili Casino services you have registered for;
• Legal Obligation: Where processing is required to comply with a legal obligation, including PAGCOR licensing requirements, AMLA obligations, and tax reporting;
• Legitimate Interests: Where processing is necessary for xojili's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms.

5 Sharing Your Personal Data

xojili may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government authorities, where required by law or regulatory obligation;
• Payment Processors: GCash, PayMaya / Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals in PHP;
• Identity Verification Providers: Third-party KYC and age verification service providers engaged by xojili to verify player identity and age in compliance with PAGCOR requirements;
• Technology & Infrastructure Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on xojili's behalf under strict data processing agreements;
• Game Providers: Licensed game software providers whose titles are available on the xojili Platform, to the extent necessary for game delivery and RNG certification;
• Professional Advisers: Legal, accounting, and auditing firms engaged by xojili, subject to professional confidentiality obligations.

All third parties with whom xojili shares personal data are required to maintain appropriate technical and organizational security measures and to process data only in accordance with xojili's instructions and applicable law.

6 Cookies & Tracking Technologies

xojili uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and analyze usage patterns. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly, including maintaining your xojili Login session and security tokens. These cannot be disabled without affecting Platform functionality;
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the xojili Platform, helping us identify areas for improvement;
• Preference Cookies: Used to remember your settings and preferences, such as language and display options;
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access attempts, and bot traffic on the xojili Platform.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the xojili Platform. xojili does not use cookies to serve third-party advertising.

7 Data Retention

xojili retains your personal data for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account Data: Retained for the duration of your active xojili account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of the Philippines;
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction;
• Support Communications: Retained for up to three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes;
• Technical & Usage Data: Retained for up to two (2) years, after which it is anonymized or deleted;
• Marketing Consent Records: Retained for as long as you remain subscribed to xojili marketing communications, plus one (1) year following opt-out.

Upon expiry of the applicable retention period, xojili will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

8 Security Measures

xojili takes the security of your personal data seriously. We implement a comprehensive set of technical and organizational security measures to protect your data against unauthorized access, disclosure, alteration, or destruction, including:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the xojili Platform is encrypted using industry-standard SSL/TLS protocols;
• Data Encryption at Rest: Sensitive personal and financial data stored on xojili's servers is encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data is restricted to authorized xojili personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Fraud Detection Systems: xojili employs real-time fraud detection and anomaly monitoring systems to identify and respond to suspicious activity on the Platform;
• Regular Security Audits: xojili conducts regular internal and third-party security audits and penetration testing to identify and remediate vulnerabilities;
• Incident Response: xojili maintains a data breach response plan and will notify affected players and the National Privacy Commission (NPC) in accordance with the Data Privacy Act of 2012 in the event of a reportable data breach.

9 Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by xojili:

To exercise any of these rights, please contact xojili's Data Protection Officer (DPO) using the contact details in Section 14. xojili will respond to all verified data subject requests within thirty (30) days, as required by the Data Privacy Act of 2012. We may need to verify your identity before processing your request.

10 Children & Minors

The xojili Platform is strictly intended for adults aged twenty-one (21) years and older, in accordance with PAGCOR regulations governing online gambling in the Philippines. xojili does not knowingly collect personal data from individuals under the age of 21.

If xojili becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe your child has registered on the xojili Platform, please contact our support team immediately so we can take appropriate action.

11 International Data Transfers

xojili primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines — for example, where xojili uses cloud infrastructure or technology service providers with servers located abroad.

Where such international transfers occur, xojili ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under the Data Privacy Act of 2012. xojili will not transfer your personal data to a country that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate safeguards.

12 Third-Party Links

The xojili Platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to the xojili Platform and does not cover the privacy practices of any third-party websites. xojili is not responsible for the content, privacy policies, or data practices of any third-party sites. We encourage you to review the privacy policy of any third-party site you visit.

13 Changes to This Privacy Policy

xojili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. When material changes are made, xojili will notify registered players via email or a prominent notice on the Platform. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

Your continued use of the xojili Platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how xojili protects your personal data.

14 Contact & Data Protection Officer

xojili has appointed a Data Protection Officer (DPO) in accordance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact us:

• Data Protection Officer: xojili Casino DPO
• Email: privacy@xojili.live
• General Support: support@xojili.live
• Live Chat: Available 24/7 via the xojili Platform
• Response Time: Within 30 days of receiving your verified request, as required by Philippine law

For responsible gaming concerns, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gaming page or contact our support team directly.