imjili Privacy Policy

imjili ("we," "us," "our," "the Platform") operates imjili.cam, a PAGCOR-licensed online gaming platform serving Filipino players across the Philippines. As a personal information controller registered with the National Privacy Commission (NPC) of the Philippines, imjili is legally responsible for the personal data it collects, processes, and stores in connection with the provision of its services.

This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations. It describes our practices with respect to the collection, use, storage, disclosure, and protection of personal information provided by users of the imjili Platform.

imjili also processes personal data in connection with its obligations under PAGCOR's licensing requirements, including but not limited to Know Your Customer (KYC) verification and Anti-Money Laundering (AML) compliance under Republic Act No. 9160 as amended. Processing for these regulatory purposes is mandatory and cannot be opted out of while holding an active imjili account.

The personal information controller responsible for your personal data is imjili, operating the Platform at imjili.cam under a valid PAGCOR operating license. imjili has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act. The DPO is responsible for overseeing imjili's data protection compliance and serves as the primary point of contact for data subject rights requests.

Contact details for the imjili Data Protection Officer are provided in Section 15 of this Privacy Policy. All data subject rights requests, privacy concerns, and complaints regarding imjili's data processing activities should be directed to the DPO in the first instance.

imjili collects the following categories of personal information in connection with your use of the Platform. The specific data collected depends on your level of engagement — some data is collected during registration, additional data is collected during KYC verification, and further data is generated automatically through your use of the Platform.

imjili does not collect sensitive personal information — such as health or medical data, political affiliations, or biometric data — except where a government-issued ID submitted for KYC purposes incidentally contains such information, in which case that information is processed solely for identity verification purposes and is not retained separately.

imjili collects personal data through the following means:

• Directly from you when you complete the imjili registration form, submit KYC documents, make a deposit or withdrawal request, contact imjili's support team, or update your account profile.
• Automatically through your use of imjili.cam via cookies, server logs, session tracking technologies, and device fingerprinting. See Section 8 for full details on imjili's cookie practices.
• From third-party payment processors — GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, and other payment providers — who share transaction confirmation data with imjili to facilitate deposits and withdrawals.
• From identity verification service providers engaged by imjili to perform document authentication and facial recognition matching as part of the KYC process, in compliance with PAGCOR requirements.
• From PAGCOR and law enforcement where imjili is required by law or regulatory direction to receive or act on information about a specific account holder.

Under the Data Privacy Act of 2012, imjili processes your personal data on one or more of the following legal bases:

• Performance of a contract: Processing necessary to provide you with the imjili gaming services you have registered for, including account management, game delivery, and payment processing.
• Compliance with a legal obligation: Processing required by PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws and regulations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improvement of imjili's services, where those interests are not overridden by your rights and freedoms.
• Consent: Processing for direct marketing communications, where imjili has obtained your explicit consent. You may withdraw this consent at any time by contacting imjili support or updating your account communication preferences.

imjili uses the personal data it collects for the following specific purposes:

• Creating and managing your imjili account, including identity verification and KYC compliance.
• Processing deposits and withdrawals through your chosen Philippine payment methods (GCash, PayMaya, BDO, BPI, Metrobank, etc.).
• Delivering gaming services — including slots, live casino, bingo, mines, and volleyball betting — to your account.
• Administering bonuses, promotional credits, and loyalty program benefits in accordance with applicable promotion terms.
• Detecting, investigating, and preventing fraud, money laundering, account takeover, and other prohibited activities on the Platform.
• Monitoring gaming activity for responsible gaming purposes, including identifying patterns that may indicate problem gambling behaviour, and applying self-imposed account restrictions where requested.
• Communicating with you about your account, including transaction notifications, security alerts, and responses to support queries.
• Sending marketing and promotional communications where you have provided consent, including information about new games, promotions, and imjili features.
• Complying with imjili's obligations to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other applicable Philippine regulatory bodies.
• Improving the imjili Platform through analysis of aggregated, anonymised usage data — no individual player is identifiable in this analytics processing.

imjili does not sell your personal data to any third party. imjili shares personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, and other payment providers receive the minimum transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Contracted third-party verification services receive identity document images and photographs for the purpose of PAGCOR-mandated identity verification. These providers are bound by strict data processing agreements.
• PAGCOR: imjili is required to provide PAGCOR with player data and gaming activity records as part of its licensing obligations and in response to regulatory inquiries.
• Anti-Money Laundering Council (AMLC): imjili is required by Republic Act No. 9160 to report certain transactions and to provide account information to the AMLC upon lawful request.
• Law enforcement and courts: imjili will disclose personal data to Philippine law enforcement authorities, courts, or other government bodies where required to do so by valid legal process, court order, or applicable law.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on behalf of imjili under data processing agreements that require them to maintain confidentiality and security standards equivalent to or exceeding those of imjili.

imjili uses cookies and similar tracking technologies on imjili.cam. Cookies are small text files stored on your device that help imjili deliver a functional, personalised, and secure gaming experience. The following categories of cookies are used on the imjili Platform:

• Strictly necessary cookies: Required for the Platform to function — including session management, authentication tokens, and security features. These cannot be disabled without breaking core Platform functionality.
• Performance cookies: Collect anonymised, aggregated data about how players navigate imjili.cam — which pages are visited most, how long sessions last, and where players encounter errors. This data is used solely to improve the Platform.
• Functional cookies: Remember your preferences — such as language settings, display preferences, and previously entered (non-sensitive) form data — to provide a smoother experience on return visits.
• Marketing cookies: Used only where you have provided explicit consent, to track interactions with imjili promotional content and to deliver relevant offers. These can be disabled through the imjili cookie preference centre or your browser settings.

You can manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from using the imjili Platform, though some personalisation features may be reduced. imjili does not use third-party advertising network cookies or cross-site tracking technologies.

imjili retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to mandatory retention periods required by Philippine law and PAGCOR regulations. The following general retention periods apply:

Upon expiry of the applicable retention period, imjili will securely delete or irreversibly anonymise your personal data. Anonymised data — from which you cannot be identified — may be retained indefinitely for aggregate analytics purposes.

imjili implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to:

• 256-bit SSL/TLS encryption applied to all data in transit between your device and imjili's servers.
• AES-256 encryption for sensitive data stored at rest, including KYC document images and financial account identifiers.
• Password hashing using industry-standard cryptographic algorithms — imjili never stores plain-text passwords.
• Two-factor authentication (2FA) available to all account holders, and mandatory for high-value withdrawal requests.
• Role-based access controls ensuring that imjili staff can only access personal data strictly necessary for their job function.
• Regular penetration testing and vulnerability assessments of Platform infrastructure by qualified third-party security firms.
• 24/7 automated monitoring and alerting for anomalous access patterns, potential intrusions, and data exfiltration attempts.
• Formal incident response procedures aligned with the Data Privacy Act's 72-hour breach notification requirement to the National Privacy Commission.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by imjili. These rights may be exercised by contacting the imjili Data Protection Officer as described in Section 15:

• Right to be Informed: You have the right to know that imjili is collecting your personal data, the purpose of collection, and the identity of any third parties to whom it may be disclosed — all of which is described in this Privacy Policy.
• Right to Access: You have the right to obtain a copy of the personal data imjili holds about you and information about how that data is being processed. Access requests will be fulfilled within 15 Philippine business days.
• Right to Rectification: You have the right to request correction of any inaccurate, incomplete, or outdated personal data held by imjili. Basic profile information can be updated directly through your account settings; other corrections should be requested through imjili support.
• Right to Erasure / Right to be Forgotten: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to imjili's legal obligations under PAGCOR regulations and the AML Act to retain certain data for mandatory periods.
• Right to Object: You have the right to object to processing based on legitimate interests or to withdraw consent for marketing communications at any time, without affecting the lawfulness of prior processing.
• Right to Data Portability: You have the right to receive a copy of personal data you have provided to imjili in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint about imjili's data processing activities with the National Privacy Commission of the Philippines at privacy.gov.ph.
• Right to Damages: You have the right to claim compensation for any actual damages suffered as a direct result of imjili's violation of the Data Privacy Act.

Parents and guardians who believe their child may have accessed imjili should contact imjili support immediately via Live Chat at imjili.cam or by emailing [email protected]. imjili takes underage access violations extremely seriously and will act on all such reports with priority.

imjili's primary data processing infrastructure is located in the Philippines. However, the nature of cloud-based gaming platforms means that certain processing — such as game delivery from certified third-party game providers — may involve servers located outside the Philippines, including in other Southeast Asian jurisdictions.

Where personal data is transferred outside the Philippines, imjili ensures that such transfers are made only to jurisdictions or organisations that provide a comparable level of protection to that required under the Data Privacy Act, or that are subject to binding contractual safeguards (data processing agreements) that meet NPC requirements. imjili will not transfer personal data to jurisdictions that the NPC has determined provide inadequate data protection without your explicit consent.

imjili reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, new regulatory requirements, or Platform developments. The effective date at the top of the document indicates when the current version came into force.

Material changes to this Privacy Policy — those that significantly affect how we collect or use your personal data, or that affect your rights — will be communicated to registered imjili players via the mobile number or email address on file at least seven (7) days before taking effect. For minor or administrative changes, updating the effective date on this page constitutes sufficient notice.

Your continued use of the imjili Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree with changes to this Privacy Policy, you may request account closure as described in the imjili Terms & Conditions.

For all privacy-related inquiries, data subject rights requests, or concerns about imjili's data processing practices, please contact imjili's designated Data Protection Officer through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week through imjili.cam — select "Privacy / Data Request" from the support menu for priority routing to the DPO team.
• Email: [email protected] — include "Privacy Policy / Data Request" in the subject line.
• Response times: Data subject rights requests will receive an acknowledgement within 2 Philippine business days and a substantive response within 15 Philippine business days of receipt.

If you are not satisfied with imjili's response to a privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines. The NPC accepts complaints through its official channels at privacy.gov.ph — this is an external government body and its contact details are outside the scope of this document.