Privacy Policy

01Introduction

xjili ("xjili," "we," "us," or "our") is committed to protecting the privacy and security of the personal information of all users who access or use the xjili platform at xjili.cam (the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, disclose, store, and protect your personal data when you register for or use our online gaming Services.

This Policy applies to all registered players, prospective users who visit the Platform, and any person who contacts xjili through our support channels. By accessing the Platform or creating a player account, you acknowledge that you have read, understood, and consent to the data practices described in this Policy.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated herein by reference. In the event of a conflict between this Policy and another document, this Policy shall govern with respect to privacy and data protection matters.

02Data Controller

xjili is the data controller responsible for the personal information collected through the Platform. As data controller, xjili determines the purposes for which and the means by which your personal data is processed.

For all privacy-related queries, data subject requests, or concerns regarding our data handling practices, please contact our dedicated Data Privacy Officer through the contact information set out in Section 15 of this Policy.

03Personal Data We Collect

xjili collects the following categories of personal data, depending on how you interact with the Platform:

We do not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, religious beliefs, or health data) unless you voluntarily provide such information, for example in the context of a responsible gaming self-declaration or self-exclusion request.

04How We Collect Your Data

We collect your personal data through the following channels:

• Direct Collection: Data you voluntarily provide during account registration, identity verification (KYC), support interactions, or when participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform through cookies, web beacons, log files, and similar tracking technologies (see Section 11).
• Third-Party Sources: Identity and fraud-check data received from our KYC verification partners and payment processors, and publicly available records where relevant for compliance purposes.

05Purposes of Processing

xjili processes your personal data for the following purposes:

1. Account Management: To create, manage, and maintain your xjili player account, including authentication and access control.
2. Identity Verification (KYC/AML): To verify your identity and age, comply with anti-money laundering obligations, and prevent fraud, match-fixing, or other illicit activity.
3. Payment Processing: To process deposits and withdrawals via your chosen payment method (GCash, Maya, BPI, BDO, Metrobank, Coins.ph, etc.) accurately and securely.
4. Service Delivery: To provide access to our games, features, bonuses, and promotional offers in accordance with our Terms & Conditions.
5. Customer Support: To respond to your enquiries, resolve disputes, and manage complaint processes.
6. Security and Fraud Prevention: To detect, investigate, and prevent fraudulent, abusive, or unlawful activity on the Platform.
7. Responsible Gaming: To monitor gameplay patterns and fulfil our obligations under responsible gaming frameworks, including implementing self-exclusion requests and deposit limits.
8. Legal and Regulatory Compliance: To comply with applicable laws, regulatory requirements, court orders, or requests from competent authorities.
9. Platform Improvement: To analyse usage patterns, troubleshoot technical issues, and improve the overall quality of the xjili experience.
10. Marketing (with consent): To send you promotional offers, newsletters, and personalised recommendations where you have consented to receive such communications. You may withdraw this consent at any time.

06Legal Bases for Processing

xjili processes your personal data on one or more of the following legal bases, consistent with the Data Privacy Act of 2012 and applicable data protection principles:

• Contractual Necessity: Processing required to fulfil our contract with you, including account creation, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with applicable law, including KYC/AML obligations, age verification, and regulatory reporting.
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your fundamental rights.
• Consent: Where we rely on your freely given, specific, and informed consent — primarily for marketing communications. You have the right to withdraw consent at any time without affecting the lawfulness of prior processing.

07Data Sharing and Disclosure

xjili does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual protections:

• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and other payment processors, to facilitate deposits and withdrawals.
• KYC and Identity Verification Partners: Third-party services engaged to perform identity and age verification, document authentication, and fraud screening.
• Technology and Infrastructure Providers: Cloud hosting, data storage, analytics, and platform technology providers who act as data processors under binding data processing agreements.
• Game Providers: Software providers whose games are integrated on the Platform may receive anonymised or pseudonymised gameplay data required for game operation and dispute resolution.
• Regulatory and Law Enforcement Authorities: Where required by law, court order, or a regulatory authority with jurisdiction over xjili's operations.
• Professional Advisers: Lawyers, accountants, and auditors under duties of confidentiality, where required for legal or business purposes.

08International Data Transfers

Some of our service providers and technology partners may be located outside the Philippines. Where we transfer your personal data internationally, we take appropriate safeguards to ensure that your data receives a level of protection consistent with this Policy and applicable Philippine data privacy law, including the use of standard contractual clauses or equivalent contractual safeguards with all overseas recipients.

By using the xjili Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where such transfers are necessary for the provision of our Services, subject to the safeguards described above.

09Data Retention

xjili retains your personal data for as long as your player account remains active. Upon account closure, we retain your data for a minimum of five (5) years from the date of closure, in order to comply with:

• Anti-money laundering and counter-terrorism financing record-keeping requirements.
• Tax and financial reporting obligations under Philippine law.
• Potential legal proceedings or regulatory investigations.
• Dispute resolution obligations under our Terms & Conditions.

After the applicable retention period expires, we will securely delete or anonymise your personal data in accordance with our internal data destruction procedures. Anonymised data that can no longer identify you may be retained indefinitely for statistical, analytical, or research purposes.

10Security Measures

xjili implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including financial and identity information.
• Role-based access controls ensuring that only authorised personnel can access personal data, limited to what is necessary for their function.
• Regular penetration testing, vulnerability assessments, and security audits conducted by internal and independent third-party experts.
• Multi-factor authentication options for player accounts.
• Continuous monitoring of platform activity for anomalies, suspicious behaviour, and potential security incidents.

Despite these safeguards, no method of data transmission or storage is completely secure. xjili cannot guarantee absolute security, and you should take reasonable precautions to protect your own account credentials.

11Cookies and Tracking Technologies

xjili uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit a website. We use the following types of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled. They include session management, authentication, and security tokens.
• Functional Cookies: Remember your preferences such as language settings, display preferences, and logged-in state.
• Analytics Cookies: Help us understand how players interact with the Platform — which pages are visited most, where errors occur, and how we can improve the overall experience. Data collected is aggregated and anonymised where possible.
• Performance Cookies: Monitor load times and platform performance to ensure a smooth gaming experience across all device types.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. xjili does not use cookies to serve third-party advertising or to track your behaviour on other websites.

12Your Data Privacy Rights

Under the Data Privacy Act of 2012 and applicable data protection principles, you have the following rights in relation to your personal data held by xjili:

1. Right to Be Informed: The right to be informed of what personal data we collect and how it is used, which this Policy provides.
2. Right to Access: The right to obtain a copy of the personal data we hold about you and information about how it is being processed.
3. Right to Correction: The right to request correction of inaccurate or incomplete personal data.
4. Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations set out in Section 9.
5. Right to Object: The right to object to processing based on legitimate interests or for direct marketing purposes.
6. Right to Data Portability: The right to receive a copy of your data in a structured, commonly used, and machine-readable format.
7. Right to Withdraw Consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
8. Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Privacy Officer via the details in Section 15. We will respond to all verified requests within thirty (30) days. In complex cases, we may require up to sixty (60) days and will notify you of any extension.

13Minors and Age Restrictions

xjili strictly enforces a minimum age requirement of 21 years old for all players, in compliance with Philippine gaming regulations. We do not knowingly collect personal data from any person under 21 years of age.

If we discover that we have inadvertently collected personal data from a person under 21, we will take immediate steps to delete that data and close the associated account. If you have reason to believe that a minor has registered on the Platform using false information, please contact us immediately via live chat or the email address in Section 15.

14Changes to This Privacy Policy

xjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the Services we offer. When material changes are made, we will post a prominent notice on the Platform and update the "Last Updated" date at the top of this Policy. Where required by law, we will seek your renewed consent.

We encourage you to review this Policy periodically. Your continued use of the Platform following the effective date of any changes constitutes your acceptance of the revised Policy. If you do not agree with any changes, you should cease using the Platform and close your account.

15Contact Our Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, you may contact our Data Privacy Officer through the following channels:

Live Chat: Available 24/7 directly on the xjili Platform — the fastest way to reach us.
Email: [email protected]

Please clearly indicate in your message that you are submitting a data privacy request or complaint. We will acknowledge receipt of your request and respond within the timeframes described in Section 12.

You also have the right to submit a complaint directly to the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have not been adequately addressed by xjili.