163jili Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how 163jili ("163jili", "we", "us", "our") collects, uses, stores, shares, and protects personal data provided by or collected from users ("User", "Player", "you") of the 163jili website, mobile applications, and all related services (collectively, the "Platform").

This Policy applies to all individuals who access or use the 163jili Platform, including registered Players, visitors to the website, and persons who contact 163jili support. It covers all personal data processing activities conducted by 163jili as data controller in connection with the Platform's operation in the Philippines.

By registering on, accessing, or using the 163jili Platform, you acknowledge that you have read and understood this Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform.

2 Data Controller & Data Privacy Officer

163jili is the data controller responsible for your personal data processed in connection with the Platform. As data controller, 163jili determines the purposes and means of processing your personal information and is accountable for ensuring that processing is conducted lawfully, fairly, and transparently.

In accordance with Section 21 of the Data Privacy Act of 2012, 163jili has designated a Data Privacy Officer (DPO). The DPO is responsible for ensuring compliance with this Policy, the Data Privacy Act, and NPC regulations. The DPO serves as the primary point of contact for data subject inquiries, access requests, complaints, and breach notifications.

Contact the 163jili DPO: All privacy-related inquiries, including requests to exercise data subject rights, should be directed to: [email protected] with the subject line "Data Privacy Request". We aim to acknowledge all DPO inquiries within three (3) business days and to resolve substantive requests within the timeframes prescribed by Philippine law.

3 Personal Data We Collect

163jili collects personal data across the following categories, depending on how you interact with the Platform:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (used for mandatory age verification — 163jili is strictly for players 21 and above)
• Gender (optional, used for personalization)
• Philippine mobile phone number (used as primary Account identifier and OTP delivery channel)
• Email address (used for account communications and recovery)
• Username and encrypted password credentials

3.2 Identity Verification (KYC) Data

• Copies or images of government-issued Philippine identification documents (e.g., PhilSys National ID, passport, UMID, driver's license, PRC ID, voter's ID)
• Selfie or liveness check images submitted during KYC verification processes
• Proof of address documentation where required for enhanced due diligence

3.3 Financial & Transaction Data

• GCash mobile number and wallet reference details associated with deposits and withdrawals
• PayMaya account reference details where applicable
• Bank account numbers, bank names (BPI, BDO, Metrobank, UnionBank) for bank transfer transactions
• Deposit and withdrawal history, amounts, timestamps, and transaction reference numbers
• Account balance information and bonus credit records

3.4 Gaming Activity Data

• Complete game play history including games played, bet amounts, win/loss outcomes, and session durations
• Sports bet history including markets wagered, odds accepted, and settlement outcomes
• Responsible gaming settings you have applied (deposit limits, session timers, cooling-off periods, self-exclusion records)
• Bonus and promotional offer participation records
• VIP tier status and loyalty point accumulation history

3.5 Technical & Device Data

• IP address at the time of each login and transaction
• Device type, operating system, and browser information
• Mobile device identifiers where applicable (IMEI, advertising ID)
• Platform access timestamps and session duration records
• Geolocation data (city/region level) derived from IP address for fraud prevention

3.6 Communications Data

• Records of support interactions via live chat, email, Facebook Messenger, and Viber
• Customer feedback and survey responses
• Marketing preference settings and opt-in/opt-out records

4 How We Collect Your Data

163jili collects personal data through the following channels and mechanisms:

• Direct submission: Data you provide when registering, completing KYC, updating your profile, making deposits or withdrawals, or contacting support
• Platform activity: Data generated automatically as you use 163jili — game sessions, bet placements, and navigation activity
• Cookies and tracking technologies: Data collected by cookies, web beacons, and similar technologies as described in Section 11
• Payment processors: Transaction confirmation and reference data received from GCash, PayMaya, and banking partners in connection with your financial transactions
• Identity verification services: Data received from third-party KYC and age verification providers engaged by 163jili
• Fraud and AML screening: Data received from screening services used to comply with Republic Act No. 9160 (Anti-Money Laundering Act)
• Publicly available sources: Where necessary for compliance or security purposes, 163jili may supplement collected data with publicly available information

5 Purposes of Data Processing

163jili processes personal data for the following specified, explicit, and legitimate purposes:

• Account registration and management: To create, maintain, and administer your 163jili Account and verify your identity and eligibility
• Age and identity verification: To comply with the mandatory 21+ age restriction requirement under Philippine gaming law and PAGCOR regulations
• Payment processing: To process deposits, withdrawals, and refunds via GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank
• Game provision and platform operation: To deliver casino games, sports betting, bingo, and all other Platform features to you
• Fraud prevention and security: To detect and prevent unauthorized access, fraudulent transactions, multi-accounting, and other prohibited conduct
• Anti-money laundering compliance: To fulfil 163jili's obligations under the Anti-Money Laundering Act and related AMLC reporting requirements
• Responsible gaming: To monitor gaming patterns, enforce player-set limits, support self-exclusion, and identify indicators of problem gambling behavior
• Customer support: To respond to inquiries, complaints, account recovery requests, and technical issues via live chat, email, Messenger, and Viber
• Marketing communications: To send promotional offers, bonus notifications, and platform updates — subject to your marketing preferences and applicable opt-in/opt-out rights
• Legal compliance: To comply with applicable Philippine laws, PAGCOR regulatory requirements, NPC directives, and court orders
• Platform improvement: To analyze usage patterns, improve the Platform experience, and develop new features — using aggregated and, where possible, anonymized data

6 Legal Bases for Processing

Under the Data Privacy Act of 2012, 163jili relies on the following lawful criteria for processing personal data:

• Consent: Where you have provided explicit, informed consent — for example, for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing conducted prior to withdrawal.
• Contractual necessity: Processing necessary for the performance of the 163jili Terms & Conditions to which you are a party — including Account administration, game provision, and payment processing.
• Legal obligation: Processing required to comply with 163jili's obligations under Philippine law, including the Data Privacy Act, Anti-Money Laundering Act, PAGCOR regulations, and AMLC reporting requirements.
• Legitimate interests: Processing necessary for 163jili's legitimate business interests, including fraud prevention, platform security, and responsible gaming enforcement, where these interests are not overridden by your data protection rights.

7 Sharing Your Personal Data

163jili does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your data is shared only in the following circumstances and only to the extent necessary:

• Payment processors: GCash (G-Xchange Inc.), PayMaya (PayMaya Philippines Inc.), BPI, BDO, Metrobank, and UnionBank receive transaction data necessary to process your deposits and withdrawals. These institutions are subject to Bangko Sentral ng Pilipinas (BSP) regulations and their own privacy policies.
• Game providers: Third-party game developers and providers whose games are available on the 163jili Platform receive anonymized or pseudonymized player identifiers and game activity data necessary for game delivery, integrity monitoring, and RTP reporting. Game providers do not receive your full name, ID documents, or financial account details.
• KYC and identity verification providers: Identity verification service providers engaged by 163jili receive your KYC documents and biometric data solely for the purpose of verifying your identity and age under strict data processing agreements.
• Fraud prevention and AML services: Anti-fraud screening and AML compliance service providers may process your identity and transaction data as part of 163jili's compliance with Republic Act No. 9160.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive data as required by law, regulatory directive, or valid legal process.
• Technology service providers: Cloud hosting, data analytics, and customer support technology providers engaged by 163jili may process personal data as data processors under written data processing agreements that impose obligations consistent with this Policy.

8 Data Retention

163jili retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention schedules apply:

• Active Account data: Retained for the duration of your Account's existence on the Platform plus a minimum of five (5) years following Account closure, in compliance with PAGCOR record-keeping requirements and AML obligations under Republic Act No. 9160.
• KYC and identity verification documents: Retained for a minimum of five (5) years from the date of verification or from Account closure, whichever is later, in compliance with AML/CFT regulations.
• Financial transaction records: Retained for a minimum of five (5) years from transaction date in compliance with AMLC record-keeping requirements.
• Game activity logs: Retained for a minimum of two (2) years, subject to regulatory requirements and dispute resolution needs.
• Customer support records: Retained for a minimum of two (2) years from the date of last interaction.
• Marketing preference records: Retained for as long as your Account is active or until you withdraw consent, whichever is earlier.
• Closed Account data: Following Account closure and the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with NPC guidelines on data disposal.

Where data is retained beyond the period strictly necessary for its original purpose, it will be stored in a manner that limits access to authorized personnel only and will be used solely for compliance, audit, or dispute resolution purposes.

9 Security Measures

163jili implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and 163jili servers is encrypted using TLS 1.2/1.3 protocols (256-bit SSL encryption)
• Encryption at rest: Sensitive personal data and financial information stored on 163jili servers is encrypted using AES-256 or equivalent standards
• Password hashing: Account passwords are stored as salted cryptographic hashes — they are never stored in plaintext and cannot be retrieved by 163jili staff
• Two-factor authentication: OTP-based two-factor authentication is available and encouraged for all Player accounts
• Access controls: Access to personal data systems is restricted to authorized 163jili personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication for staff
• Network security: 163jili employs firewalls, intrusion detection systems, and regular penetration testing to protect Platform infrastructure
• Vendor security requirements: Third-party data processors engaged by 163jili are required to maintain security standards consistent with this Policy under contractual data processing agreements

10 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by 163jili. To exercise any of these rights, please contact the 163jili Data Privacy Officer at [email protected] with the subject line "Data Privacy Request".

163jili will respond to data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. Where requests are complex or numerous, the response period may be extended with notice provided to you.

If you believe that 163jili has not adequately addressed your data privacy concerns, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) through its official channels.

11 Cookies & Tracking Technologies

163jili uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: Essential to the operation of the Platform — including session authentication, fraud prevention tokens, and load balancing. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display configurations to personalize your 163jili experience.
• Analytics cookies: Collect aggregated information about how users interact with the Platform to help 163jili improve performance and user experience. Where possible, analytics data is anonymized before processing.
• Marketing cookies: Used to deliver relevant promotional content from 163jili based on your activity on the Platform. These are only used where you have provided consent.

You may manage your cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to use Platform features including login and financial transactions. 163jili does not use cookies to deliver third-party advertising from other businesses.

12 Children's Privacy

13 Cross-Border Data Transfers

163jili's primary data processing infrastructure is located in the Philippines and in data centers operating under Philippine-compliant security standards. Where personal data is transferred to or processed by service providers operating outside the Philippines — for example, internationally hosted cloud infrastructure or game providers — such transfers are conducted subject to:

• Written data processing agreements requiring the recipient to maintain security and privacy standards consistent with the Data Privacy Act of 2012
• Assessment that the destination jurisdiction provides adequate levels of personal data protection, or that appropriate contractual safeguards are in place
• NPC notification where required under applicable regulations

163jili does not transfer personal data internationally to jurisdictions that are known to lack adequate data protection frameworks without first implementing appropriate contractual safeguards and, where required, obtaining your explicit consent.

14 Personal Data Breach Notification

In the event of a personal data breach that is reasonably likely to result in harm to affected data subjects, 163jili will comply with its breach notification obligations under the Data Privacy Act of 2012 and NPC Circular 16-03 (Personal Data Breach Management), including:

• Notifying the National Privacy Commission within seventy-two (72) hours of becoming aware of a qualifying breach
• Notifying affected data subjects without undue delay where the breach is likely to adversely affect their rights and freedoms
• Maintaining internal breach records and conducting post-incident reviews to prevent recurrence

Breach notifications to affected Players will be communicated via the registered email address or Philippine mobile number associated with their 163jili Account. If you become aware of any actual or potential security incident involving your 163jili Account, please contact our DPO and support team immediately.

15 Updates to This Privacy Policy

163jili reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material updates will be communicated to registered Players via email or in-platform notification at least seven (7) days before the revised Policy takes effect.

Minor updates that do not materially affect your rights or 163jili's processing practices (such as clarifications or typographic corrections) may be made without advance notice, although the "Last Updated" date on this page will always reflect the current version.

Your continued use of the 163jili Platform following the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not agree to the updated Policy, you should discontinue use of the Platform and may close your Account in accordance with the procedure described in the 163jili Terms & Conditions.

16 Contact & Data Privacy Officer

For any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact the 163jili Data Privacy Officer through any of the following channels:

For complaints that 163jili has been unable to resolve to your satisfaction, you may file a formal complaint with the National Privacy Commission of the Philippines (NPC) through their official government channels. 163jili cooperates fully with NPC investigations and inquiries.

This Privacy Policy is effective as of January 1, 2026 and supersedes all prior versions. For related legal documents, please refer to the 163jili Terms & Conditions.