9ajili Privacy Policy

1. Data Controller

9ajili acts as the Data Controller in respect of the personal information you provide when using the platform. As Data Controller, 9ajili determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

9ajili has appointed a Data Protection Officer (DPO) who is responsible for overseeing this Privacy Policy and ensuring compliance with all applicable data protection laws. The DPO may be contacted through the channels described in Section 13 of this Policy.

2. Categories of Personal Data We Collect

9ajili collects the following categories of personal information from players and site visitors. We collect only the data that is necessary to provide our services, meet our legal obligations, and fulfill the purposes described in this Policy.

Category	Specific Data Elements	Required / Optional
Identity Data	Full legal name, date of birth, gender, government-issued ID number (e.g., Philippine national ID, passport, driver's license)	Required
Contact Data	Mobile phone number (Philippine), email address, residential address (city, province, zip code)	Required
Account Data	Username, hashed password, account preferences, communication preferences, security settings	Required
Financial Data	GCash account number, PayMaya account number, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records	Required for transactions
Gaming Activity Data	Game session history, bet records, win/loss records, game preferences, bonus utilization history	Automatically collected
Technical Data	IP address, device type and identifier, browser type and version, operating system, session timestamps, geolocation data	Automatically collected
Communications Data	Records of live chat conversations, support tickets, email correspondence, survey responses	When you contact us
Verification Documents	Copies of government-issued ID, selfie photographs for liveness verification, proof of address documents, payment method ownership documentation	Required for KYC compliance

9ajili does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect information about racial or ethnic origin, religious beliefs, political opinions, health data, or biometric information, except where legally mandated for anti-money laundering compliance.

3. How We Collect Your Personal Data

9ajili collects your personal data through the following methods:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or responding to surveys and promotions.
• Automated Collection: Technical data collected automatically through cookies, web beacons, log files, and similar technologies when you access and navigate the 9ajili website.
• Third-Party Sources: Identity verification data from third-party KYC providers; fraud detection data from anti-fraud services; payment verification data from GCash, PayMaya, and banking partners.
• Regulatory Sources: In limited circumstances, information may be obtained from PAGCOR, the Anti-Money Laundering Council (AMLC), or law enforcement authorities as required by Philippine law.

4. Purposes of Processing Your Personal Data

9ajili processes your personal data for the following purposes:

4.1 Account Management and Service Delivery

To create and manage your 9ajili account, verify your identity and eligibility, process deposits and withdrawals, provide access to games and betting services, and deliver customer support. This processing is fundamental to the provision of the 9ajili gaming service and cannot be opted out of while you remain a registered player.

4.2 Legal and Regulatory Compliance

To comply with the requirements of PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, and all other applicable Philippine regulatory bodies. This includes conducting Know Your Customer (KYC) checks, monitoring transactions for suspicious activity, maintaining records as required by law, and reporting to authorities where required.

4.3 Fraud Prevention and Security

To detect, investigate, and prevent fraud, money laundering, account takeovers, bonus abuse, and other prohibited activities. To verify the identity of account holders prior to processing financial transactions. To protect the security and integrity of the 9ajili platform and its players.

4.4 Responsible Gaming

To monitor player activity for indicators of problem gambling behavior, to enforce responsible gaming tools such as deposit limits and self-exclusion, and to provide appropriate support and referrals to players displaying signs of gambling harm. This processing is conducted in the interest of player welfare and may not be disabled.

4.5 Marketing and Promotions

Where you have provided explicit consent, to send you information about 9ajili promotions, bonuses, new games, and other offers that may be of interest to you. You may withdraw your consent to marketing communications at any time by adjusting your communication preferences in your account settings or by contacting customer support.

4.6 Platform Improvement

To analyze gaming activity data, player feedback, and technical data to improve the performance, features, and user experience of the 9ajili platform. This analysis is conducted using aggregated and, where possible, anonymized data.

5. Legal Bases for Processing

Under the Data Privacy Act of 2012, 9ajili relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you entered into with 9ajili upon registration, including account management, payment processing, and service delivery.
• Legal Obligation: Processing required to comply with PAGCOR regulations, anti-money laundering laws, tax requirements, and other statutory obligations applicable to licensed online gaming operators in the Philippines.
• Legitimate Interest: Processing conducted for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and interests.
• Consent: Processing for direct marketing communications, where you have provided explicit, freely given, specific, and informed consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

6. Sharing and Disclosure of Personal Data

9ajili does not sell, rent, or trade your personal information to third parties for commercial purposes. We share personal data only in the following circumstances:

6.1 Service Providers and Data Processors

9ajili engages third-party service providers who process personal data on our behalf and under our instructions, including:

• Payment processors and e-wallet providers (GCash, PayMaya, BPI, BDO, Metrobank) for the processing of deposits and withdrawals;
• KYC and identity verification providers for age and identity confirmation;
• Anti-fraud and security technology providers;
• Cloud infrastructure and hosting providers;
• Customer support platform providers; and
• Game software providers and studios who may require session data for game functionality.

All third-party data processors are required to implement appropriate technical and organizational security measures and to process personal data solely in accordance with 9ajili's written instructions. Data processing agreements are in place with all material service providers.

6.2 Regulatory and Law Enforcement Authorities

9ajili may disclose personal data to PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, the Philippine National Police, or other authorized government bodies where required by law, court order, or formal regulatory request. Such disclosures will be documented and, where legally permissible, you will be notified.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving 9ajili, personal data held by the platform may be transferred to the successor entity, subject to the same or equivalent privacy protections as described in this Policy. You will be notified in advance of any such transfer where practically feasible.

7. Data Retention

9ajili retains your personal data for as long as is necessary to fulfill the purposes described in this Policy, comply with legal and regulatory obligations, and resolve any disputes or claims. Specific retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account relationship with 9ajili, plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and anti-money laundering regulations.
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of the relevant transaction, as required by Philippine tax and anti-money laundering laws.
• KYC Documents: Retained for a minimum of five (5) years following the termination of the customer relationship, or longer if required by law or regulatory guidance.
• Marketing Data: Retained until you withdraw consent or request deletion, subject to any retention obligations imposed by law.
• Technical and Log Data: Retained for a period of up to twelve (12) months for security and fraud detection purposes, after which it is deleted or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

8. Data Security Measures

9ajili employs a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: All data transmitted between your device and 9ajili servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest, including payment credentials and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized 9ajili personnel who require it to perform their job functions. Role-based access controls and multi-factor authentication are enforced for all internal system access.
• Password Security: Player passwords are stored using one-way cryptographic hashing algorithms. 9ajili does not store passwords in plain text.
• Security Monitoring: 9ajili employs continuous monitoring of its systems for security threats, intrusion attempts, and anomalous activity. Security incidents are responded to in accordance with our Incident Response Policy.
• Third-Party Audits: 9ajili's security infrastructure and data handling practices are subject to periodic third-party security assessments and audits.
• Staff Training: All 9ajili employees who handle personal data receive regular data privacy and security training.

9. Cookies and Tracking Technologies

9ajili uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. Cookies are small text files stored on your device when you visit our website.

Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the 9ajili website, including authentication, session management, and security. These cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymized data about how players navigate and use the platform. This data is used to improve site performance and user experience.
• Functional Cookies: Used to remember your preferences, such as language settings, game history, and preferred payment methods, to provide a more personalized experience.
• Security Cookies: Used for fraud detection, device fingerprinting, and security monitoring to protect the integrity of the platform and player accounts.

You may manage your cookie preferences through your browser settings. However, disabling strictly necessary cookies may prevent certain features of the 9ajili platform from functioning correctly. Detailed information about the specific cookies used by 9ajili is available in our Cookie Policy, which forms part of this Privacy Policy.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, as a data subject, you are entitled to the following rights with respect to your personal information held by 9ajili:

• Right to Be Informed: The right to be informed about the collection and processing of your personal data, as provided in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data 9ajili holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update certain account information directly through your account settings.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 9ajili's legal retention obligations.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may exercise this right by adjusting your communication preferences or contacting support.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that your data protection rights have been violated.

To exercise any of the above rights, please submit a formal request to the 9ajili Data Protection Officer using the contact details provided in Section 13. 9ajili will respond to all verifiable data subject requests within thirty (30) calendar days of receipt. In certain circumstances, this period may be extended by an additional thirty (30) days, in which case you will be notified of the extension and the reason for the delay.

Please note that certain rights may be limited or overridden by legal obligations. For example, 9ajili cannot delete transaction data that must be retained under anti-money laundering regulations, even if you request erasure.

11. Minors and Age Restriction

9ajili does not knowingly collect personal information from individuals under the age of twenty-one (21). Our platform is intended exclusively for adult players aged 21 and above in compliance with PAGCOR regulations applicable to casino-style online gaming in the Philippines.

Where 9ajili discovers or is notified that personal data has been collected from a person under 21 years of age, we will take immediate steps to permanently delete such data, close the associated account, and take any other measures required by applicable law. If you are a parent or guardian and believe that your child under 21 has accessed or registered on the 9ajili platform, please contact us immediately using the details in Section 13.

12. Changes to This Privacy Policy

9ajili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will notify you by posting a prominent notice on the 9ajili website or by sending a notification to your registered email address at least fourteen (14) days before the changes take effect, where practicable.

The "Last Revised" date at the top of this Policy will be updated to reflect the date of the most recent amendments. Your continued use of the 9ajili platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you must discontinue use of the platform and may request account closure.

We encourage you to review this Privacy Policy periodically to stay informed about how 9ajili is protecting your personal information. The current version of this Policy is always accessible at https://9ajili.cam/privacy-policy.

13. Contact Us and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 9ajili, you may contact our Data Protection Officer through the following channel:

• Email: [email protected]
• Live Chat: Available 24 hours a day, 7 days a week via the 9ajili website
• Support Hours: Philippine Standard Time (PST), 24/7

When submitting a formal data subject request or privacy complaint, please include your full name as registered on your 9ajili account, a description of your request or concern, and any relevant supporting information. 9ajili will acknowledge all privacy inquiries within forty-eight (48) hours and will endeavor to resolve matters within thirty (30) days.

If you are not satisfied with 9ajili's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.