ofjili Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how ofjili ("ofjili," "we," "us," or "our") collects, processes, stores, shares, and protects the personal information you provide when using the ofjili platform, including our website, mobile application, customer support channels, and any other ofjili-operated services (collectively, the "Platform").

This Policy applies to all users of the ofjili Platform, including registered account holders, visitors, and any individual who interacts with our services. By accessing or using the ofjili Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your data as described herein.

This Policy should be read in conjunction with the ofjili Terms & Conditions, which govern the use of our Platform. In the event of any conflict between this Policy and the Terms & Conditions, this Policy shall prevail with respect to data privacy matters.

2. Who We Are / Data Controller

ofjili operates as the data controller with respect to personal data collected and processed through the Platform. As data controller, ofjili determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

Our designated Data Protection Officer (DPO) oversees all data privacy matters and can be contacted through the details provided in Section 14 of this Policy.

3. What Personal Data We Collect

ofjili collects several categories of personal data from users, depending on how you interact with the Platform. The categories of data we collect include:

3.1 Identity and Registration Data

• Full legal name
• Date of birth (for age verification — must be 21 or older)
• Government-issued ID type and number (e.g., SSS, PhilSys ID, passport, driver's license)
• Nationality and country of residence
• Gender

3.2 Contact Information

• Email address
• Philippine mobile number
• Residential address (barangay, city/municipality, province)

3.3 Financial and Transaction Data

• GCash or Maya account number linked to your ofjili account
• Bank account details (BPI, BDO, Metrobank, UnionBank) for withdrawals
• Deposit and withdrawal history
• Transaction amounts, dates, and statuses
• Cryptocurrency wallet addresses (for USDT TRC20 transactions)

3.4 Gaming Activity Data

• Game sessions, bet amounts, wins, and losses
• Bonus and promotion usage history
• Responsible gaming settings and self-exclusion records
• Login history and session duration

3.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Cookies and session identifiers
• Referral source (e.g., how you found the ofjili Platform)

3.6 Communications Data

• Customer support chat transcripts and emails
• Survey and feedback responses
• Promotional opt-in preferences

4. How We Collect Your Data

ofjili collects personal data through the following means:

Collection Method	Examples
Direct submission	Registration form, KYC verification upload, withdrawal requests, customer support contact
Automated collection	Cookies, server logs, session tracking during Platform use
Payment processors	Transaction data shared by GCash, Maya, BPI, BDO, and other integrated payment providers
Identity verification services	Third-party KYC providers who verify government IDs on ofjili's behalf
Marketing partners	Referral data from affiliates who directed you to the ofjili Platform
Regulatory bodies	Compliance data shared with or received from PAGCOR or AMLC as required by law

5. How We Use Your Data

ofjili uses your personal data for the following purposes:

• Account Management: To create, verify, maintain, and secure your ofjili account throughout your relationship with us.
• Identity Verification and KYC: To confirm your identity, verify your age (21+ requirement), and comply with Know Your Customer regulations mandated by PAGCOR and AMLC guidelines.
• Transaction Processing: To facilitate deposits, withdrawals, bonus disbursements, and any financial transactions carried out on the Platform.
• Customer Support: To respond to inquiries, resolve disputes, investigate complaints, and provide assistance through our support channels.
• Platform Improvement: To analyze usage patterns, monitor performance, identify technical issues, and develop new features that improve the ofjili experience for Filipino players.
• Fraud Prevention and Security: To detect, prevent, and investigate fraudulent activity, account abuse, unauthorized access, and other security incidents.
• Regulatory Compliance: To fulfill our legal obligations under Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and RA 10173.
• Responsible Gaming: To enforce responsible gaming tools such as deposit limits, loss limits, and self-exclusion periods in accordance with your preferences and regulatory requirements.
• Marketing and Communications: To send you promotional offers, newsletters, or game announcements — only where you have opted in. You may opt out at any time.

6. Legal Bases for Processing

ofjili processes your personal data based on the following legal grounds under RA 10173:

• Consent: Where you have given explicit consent for specific processing activities, such as marketing communications or optional data collection.
• Contractual Necessity: Where processing is necessary to fulfill the contract between you and ofjili — including account registration, payment processing, and service delivery.
• Legal Obligation: Where processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements and AMLA obligations.
• Legitimate Interests: Where processing is necessary for ofjili's legitimate business interests, including fraud prevention, platform security, and improving our services, provided these interests do not override your rights and freedoms.

7. Data Sharing and Disclosure

7.1 Service Providers

ofjili engages trusted third-party service providers who process data on our behalf under strict data processing agreements. These providers include identity verification services, payment processors (such as GCash and Maya infrastructure providers), cloud hosting services, customer support software providers, and analytics platforms. All service providers are contractually required to handle your data securely and in accordance with this Privacy Policy.

7.2 Regulatory and Law Enforcement Authorities

ofjili may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent government authorities when required by law, court order, or regulatory obligation. Such disclosures are made only to the extent required and with appropriate safeguards where permitted.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of ofjili's business assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and given the opportunity to exercise your data rights prior to the transfer becoming effective.

7.4 No Sale of Personal Data

ofjili does not sell, rent, lease, or trade your personal information to any third party for commercial or marketing purposes. Period.

8. Cookies and Tracking Technologies

8.1 Types of Cookies Used

ofjili uses the following types of cookies and similar tracking technologies on the Platform:

• Essential Cookies: Required for basic Platform functionality, including login sessions, security tokens, and page navigation. These cannot be disabled without affecting Platform usability.
• Analytics Cookies: Used to collect anonymized data about how users interact with the Platform, helping us identify popular games, traffic patterns, and areas for improvement.
• Preference Cookies: Store your settings and preferences, such as language selection and responsible gaming limit settings, so you do not need to reconfigure them on each visit.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of ofjili marketing campaigns. These are only activated with your consent.

8.2 Managing Cookies

You can manage, restrict, or delete cookies at any time through your browser settings. Note that disabling essential cookies may impair the functionality of the ofjili Platform. For more detailed instructions on managing cookies in popular browsers, please refer to your browser's help documentation.

9. Data Retention

ofjili retains personal data for as long as necessary to fulfill the purposes outlined in this Policy, or as required by law. Specific retention periods include:

• Active account data: Retained for the duration of your account with ofjili.
• Transaction and financial records: Retained for a minimum of 5 years following the relevant transaction, as required by AMLA and PAGCOR regulations.
• KYC and identity verification records: Retained for a minimum of 5 years from account closure or the last transaction, whichever is later.
• Customer support records: Retained for up to 3 years from the date of resolution.
• Marketing opt-in records: Retained until you withdraw consent or request deletion.

After the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be attributed to an identifiable individual.

10. Data Security

ofjili implements technical and organizational security measures appropriate to the sensitivity of your personal data. Our security framework includes:

• Encryption of data in transit (TLS/SSL) and at rest using AES-256 or equivalent standards
• Role-based access controls limiting data access to authorized personnel only
• Regular security audits and vulnerability assessments
• Multi-factor authentication requirements for administrative access
• Incident response protocols and breach notification procedures
• Staff training on data protection and information security practices

While ofjili takes all reasonable steps to protect your data, no digital system is entirely immune to breaches. In the event of a data breach that poses a risk to your rights and freedoms, ofjili will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC requirements.

11. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by ofjili:

• Right to be Informed: The right to know what personal data ofjili collects about you and how it is processed, as described in this Policy.
• Right to Access: The right to request a copy of the personal data ofjili holds about you, including information about how it is used and with whom it is shared.
• Right to Rectification: The right to correct any inaccurate or incomplete personal data in your ofjili account, either through Account Settings or by contacting our DPO.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact information in Section 14. ofjili will respond to all verifiable data rights requests within 15 business days.

12. Children's Privacy

The ofjili Platform is strictly intended for individuals aged 21 years and above in accordance with Philippine law. ofjili does not knowingly collect personal data from individuals under the age of 21. If we discover that personal data has been collected from an individual who is underage, we will take immediate steps to delete that data and close the associated account.

Parents and guardians are encouraged to monitor minors' internet activity and use parental control tools to prevent access to online gaming platforms. If you believe a minor has registered on ofjili, please contact us immediately at [email protected] so we can investigate and act accordingly.

13. Changes to This Policy

ofjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our practices, legal obligations, or regulatory requirements. When material changes are made, we will publish the updated Policy on this page with a revised "Last Updated" date and notify registered users via email or in-platform notification at least 7 days in advance.

Your continued use of the ofjili Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with the revised Policy, you may contact us to request account closure in accordance with our Terms & Conditions.

14. Contact Our Data Protection Officer

For any privacy-related inquiries, data rights requests, or concerns about how ofjili handles your personal information, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Data Privacy Inquiry — [Your Full Name]
• Response Time: Within 5 business days for general inquiries; within 15 business days for formal data rights requests
• Live Support: Available 24/7 via the ofjili in-platform live chat after login

For complaints that remain unresolved after engaging with ofjili, you have the right to escalate your concern to the National Privacy Commission of the Philippines. You may also visit our Responsible Gaming page if your inquiry relates to gaming habits, self-exclusion, or player protection resources.