dmjili Privacy Policy

1. Who We Are

This Privacy Policy is issued by dmjili (hereinafter referred to as "dmjili," "we," "us," or "our"), the operator of the online gaming platform accessible at https://dmjili.app (the "Platform"). dmjili is the data controller responsible for the personal data of players and visitors who access or use the Platform.

dmjili is committed to protecting the privacy and personal data of all users in accordance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines (the "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected through the Platform, including data collected via account registration, gameplay, financial transactions, customer support interactions, and any other means by which you interact with dmjili. By using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

2. Data We Collect

dmjili collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected and processed. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification document.
• Date of birth (used to verify that you meet the minimum age requirement of 21 years).
• Residential address, including barangay, city or municipality, province, and postal code.
• Email address and mobile phone number.
• Username and encrypted password.
• Government-issued ID type and number (e.g., Philippine passport, SSS ID, GSIS ID, PhilHealth ID, Driver's License, Voter's ID, PRC ID, Postal ID) — collected during KYC verification.

2.2 Financial & Transaction Data

• Payment method details, including GCash mobile number, PayMaya account reference, or bank account details for BPI, BDO, Metrobank, or UnionBank.
• Deposit and withdrawal transaction history, including amounts in Philippine Peso (PHP / ₱), timestamps, and transaction reference numbers.
• Bonus and promotional activity records.

2.3 Gaming & Behavioral Data

• Game session logs, including games played, bet amounts, win/loss records, and session duration.
• Responsible gaming tool usage, including deposit limits set, self-exclusion requests, and session time reminders.
• Bonus wagering activity and promotion participation history.

2.4 Technical & Device Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Unique device identifiers and session tokens.
• Log data including pages visited, time spent, and clickstream data.

2.5 Communications Data

• Records of your communications with dmjili customer support via live chat or email, including the content of those communications.
• Survey responses and feedback submitted through the Platform.

3. How We Use Your Data

dmjili uses the personal data we collect for the following specific, legitimate purposes:

dmjili does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review, except where required by applicable law or regulatory directive.

Where dmjili wishes to use your personal data for a purpose not listed above, we will notify you and, where required by the DPA, obtain your prior consent before proceeding.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, dmjili processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and dmjili — specifically, to operate your player account, process your transactions, and deliver the gaming services you have requested.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, gaming regulatory requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for the legitimate interests of dmjili, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided that such interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending you promotional communications about bonuses, new games, and special offers — dmjili relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5. Data Sharing & Disclosure

dmjili does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other payment processors — solely to facilitate deposits and withdrawals on your behalf.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged to assist with age and identity verification in compliance with regulatory requirements.
• Fraud Prevention & Security Providers: Service providers that assist dmjili in detecting and preventing fraud, money laundering, and other illegal activity on the Platform.
• Technology & Infrastructure Providers: Cloud hosting, data storage, and platform infrastructure providers who process data on dmjili's behalf under strict data processing agreements.
• Regulatory Authorities: Philippine government agencies, including but not limited to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and the Bureau of Internal Revenue (BIR), where disclosure is required by law or regulatory directive.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by dmjili, subject to professional confidentiality obligations.

All third-party service providers engaged by dmjili are required to process your personal data only in accordance with dmjili's instructions and applicable data protection law. They are prohibited from using your data for their own purposes.

6. Cookies & Tracking Technologies

dmjili uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and improve your overall experience. A cookie is a small text file placed on your device when you visit the Platform.

The following categories of cookies are used on the dmjili Platform:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without impairing Platform functionality.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language, display settings, and responsible gaming tool configurations — to provide a more personalized experience.
• Analytics Cookies: These cookies collect aggregated, anonymized information about how visitors use the Platform, including which pages are visited most frequently and how users navigate between pages. This data helps dmjili improve the Platform's design and content.
• Security Cookies: These cookies assist in detecting and preventing fraudulent activity, unauthorized access, and other security threats on the Platform.

You may control non-essential cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or be notified when a cookie is set. Please note that disabling certain cookies may affect the functionality of the dmjili Platform.

7. Data Retention

dmjili retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements under Republic Act No. 9160 (Anti-Money Laundering Act) and its amendments.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by applicable financial regulations and tax laws.
• KYC & Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Communications: Retained for two (2) years from the date of the last communication, unless a longer retention period is required in connection with an ongoing dispute or legal proceeding.
• Gaming & Behavioral Data: Retained for two (2) years from the date of generation, after which it is aggregated and anonymized for analytical purposes.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with dmjili's data disposal procedures. Anonymized data may be retained indefinitely for statistical and analytical purposes.

8. Data Security

dmjili implements a comprehensive set of technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• Transport Layer Security (TLS): All data transmitted between your device and the dmjili Platform is encrypted using TLS 1.2 or higher, ensuring that your data cannot be intercepted in transit.
• Encryption at Rest: Sensitive personal data stored on dmjili's servers — including financial data and government ID information — is encrypted using AES-256 or equivalent industry-standard encryption.
• Access Controls: Access to personal data is restricted to authorized dmjili personnel and service providers on a strict need-to-know basis. All access is logged and subject to regular audit.
• Password Security: Player passwords are stored as salted cryptographic hashes. dmjili staff cannot view your password in plain text.
• Fraud Detection Systems: dmjili employs real-time fraud detection and anomaly detection systems that monitor Platform activity for signs of unauthorized access or suspicious behavior.
• Regular Security Assessments: dmjili conducts periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential security weaknesses.

While dmjili takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are also responsible for maintaining the security of your own account credentials and for notifying dmjili immediately if you suspect unauthorized access to your account.

9. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by dmjili:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, stored, and disclosed. This Privacy Policy fulfills dmjili's obligation to inform you.
• Right of Access: You have the right to request a copy of the personal data that dmjili holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that dmjili holds about you. You may update certain account information directly through your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to dmjili's legal retention obligations.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to dmjili's overriding legitimate grounds.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that dmjili has violated your rights under the DPA.

To exercise any of the above rights, please contact our Data Protection Officer (DPO) using the contact details provided in Section 13 of this Privacy Policy. dmjili will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10. Children & Minors

The dmjili Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. dmjili does not knowingly collect, process, or store personal data from individuals under the age of 21.

If dmjili becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data, close the associated account, and return any deposited funds at our discretion after deducting applicable administrative costs, in accordance with our Terms and Conditions.

Parents and guardians who believe that their child may have registered an account on dmjili are encouraged to contact our customer support team immediately via live chat so that the matter can be investigated and resolved promptly.

11. International Data Transfers

dmjili primarily processes and stores personal data within the Philippines. However, in certain circumstances — such as the use of cloud infrastructure or third-party service providers whose servers are located outside the Philippines — your personal data may be transferred to and processed in other countries.

Where such international transfers occur, dmjili ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as determined by the NPC.
• Implementing contractual clauses in agreements with international service providers that require them to protect your data to standards equivalent to those required under the DPA.
• Conducting due diligence on all international service providers to verify their data protection practices before engaging their services.

dmjili will not transfer your personal data to any country or organization that does not provide adequate data protection safeguards without your explicit consent, except where required by applicable law.

12. Changes to This Privacy Policy

dmjili reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, dmjili will notify registered players by posting a prominent notice on the Platform and, where appropriate, by sending an email notification to the address registered on your account.

The "Last Updated" date at the top of this page will be revised whenever changes are made. Your continued use of the dmjili Platform following the posting of any amendments constitutes your acceptance of the revised Privacy Policy.

If you do not agree to the amended Privacy Policy, you must cease using the Platform and may request closure of your account by contacting our customer support team. We recommend that you review this Privacy Policy periodically to stay informed about how dmjili protects your personal data.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by dmjili, you may contact our Data Protection Officer (DPO) using the following details:

• Data Protection Officer: dmjili Privacy & Compliance Team
• Email: [email protected]
• Platform: https://dmjili.app
• Response Time: Within fifteen (15) business days of receipt of a verified request.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe that your data privacy rights have been violated. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.