This Privacy Policy explains how 25jili collects, processes, stores, protects, and shares your personal information when you register and use our platform. We take your privacy seriously — this document tells you exactly what data we hold, why we hold it, and what rights you have over it under Philippine law and PAGCOR regulatory requirements.
Summary: 25jili collects only the personal information necessary to operate your account, process transactions, comply with PAGCOR and Philippine anti-money laundering regulations, and provide customer support. We do not sell your personal data to third parties. Your data is protected by TLS encryption in transit and AES-256 encryption at rest. You have full rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) to access, correct, and delete your data subject to applicable legal retention obligations.
This Privacy Policy ("Policy") is issued by 25jili ("25jili", "we", "us", "our") and applies to all personal information collected from individuals ("you", "Player", "User") who register an account, access, or otherwise interact with the 25jili online gaming platform available at https://25jili.org, including all associated mobile web interfaces and customer support channels.
This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the regulations issued by the National Privacy Commission ("NPC"). It is also consistent with 25jili's obligations under PAGCOR's licensing framework, which imposes specific requirements on the collection, processing, and retention of player personal data.
This Policy should be read together with 25jili's Terms & Conditions and Responsible Gaming Policy, which form part of the overall agreement governing your use of the 25jili platform. By registering a 25jili account or continuing to use the platform, you confirm that you have read and understood this Policy and consent to the processing of your personal data as described herein.
Note: This Policy does not apply to third-party websites, payment processors, game providers, or other external services that may be accessible from or integrated with the 25jili platform. Each of those third parties maintains its own privacy practices, which 25jili does not control. Players are encouraged to review the privacy policies of any third-party services they interact with.
For the purposes of the Philippine Data Privacy Act of 2012, 25jili is the Personal Information Controller ("PIC") responsible for the personal data processed in connection with your 25jili account and use of the platform.
25jili operates as a data controller under PAGCOR's online gaming regulatory framework and has registered its data processing activities with the National Privacy Commission as required under NPC Circular No. 16-01.
For all data privacy inquiries, requests, and complaints, 25jili's Data Protection Officer ("DPO") can be contacted via email at [email protected] with the subject line "Data Privacy Request — [Your Account Username]". The DPO will acknowledge receipt within five (5) business days and provide a substantive response within fifteen (15) business days.
25jili collects personal data in the following categories. The specific data points collected depend on how you interact with the platform and what stage of the account lifecycle you are at:
When you create a 25jili account, we collect: email address or Philippine mobile number (09XX format), date of birth, password (stored as an irreversible cryptographic hash — we never store your password in plain text), preferred currency, and registration date and IP address.
To comply with PAGCOR's player verification requirements and Philippine anti-money laundering law (Republic Act No. 9160), we collect identity documents including but not limited to: full legal name as it appears on government-issued identification, photograph from your submitted ID, ID type and number, date of birth (cross-referenced against registration data), and residential address. Enhanced due diligence may require additional documentation such as proof of address, source of funds declarations, or supplementary identity documents.
We collect records of all financial transactions conducted through your account, including: deposit amounts, dates, and payment methods; withdrawal requests, amounts, and destinations; game wagering records including bet amounts, game types, outcomes, and timestamps; balance history; and bonus credit and wagering records.
When you access 25jili, our systems automatically collect: IP address, device type and operating system, browser type and version, session timestamps, pages visited and features accessed, and error logs. This data is used for platform security, fraud detection, and performance optimization.
If you contact 25jili customer support, we retain records of those communications — including live chat transcripts, email correspondence, and any attachments — for quality assurance, dispute resolution, and regulatory compliance purposes.
25jili collects certain data that may constitute sensitive personal information under the DPA, specifically: government ID numbers, financial account details (limited to the minimum required to process payments), and self-exclusion or problem gambling disclosures made to our responsible gaming team. Such data is subject to heightened security controls and is processed only where strictly necessary for the stated purpose and under appropriate legal authority.
25jili processes your personal data under the following legal bases as recognized under the Philippine Data Privacy Act of 2012:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of contract (Section 12(b), DPA) |
| Payment processing and transaction records | Performance of contract; legal obligation |
| KYC identity verification | Legal obligation — PAGCOR, RA 9160 (AMLA) |
| Fraud prevention and platform security | Legitimate interests (Section 12(f), DPA) |
| Responsible gaming monitoring and tools | Legal obligation; legitimate interests |
| Customer support communications | Performance of contract; legitimate interests |
| Regulatory reporting (PAGCOR, AMLC) | Legal obligation — RA 9160, PAGCOR regulations |
| Promotional communications (opt-in only) | Consent (Section 12(a), DPA) |
| Platform analytics and improvement | Legitimate interests (Section 12(f), DPA) |
| Legal claims and dispute resolution | Legal obligation; legitimate interests |
Consent Withdrawal: Where processing is based on your consent — primarily marketing communications — you may withdraw that consent at any time by updating your communication preferences in account settings or by contacting support. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal, and does not affect processing under other legal bases such as legal obligation or performance of contract.
25jili uses the personal data it collects exclusively for the following defined purposes. We do not use your data for any purpose incompatible with the purposes for which it was originally collected without your explicit consent:
Your registration data enables us to create and maintain your account, authenticate your identity at each login, maintain your balance and transaction records, communicate important account notifications (balance changes, security alerts, and regulatory updates), and process deposits and withdrawals to verified payment methods in your name.
PAGCOR's licensing requirements and Philippine law impose mandatory data processing obligations on 25jili. These include verifying that all players are 21 years of age or older, maintaining comprehensive transactional records for anti-money laundering audits, reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) where required under RA 9160, retaining KYC documentation for the legally mandated retention periods, and cooperating with PAGCOR inspections and audits.
Device data, IP addresses, and session records are used to detect and investigate unauthorized access to player accounts, identify patterns associated with bonus abuse or coordinated fraud, enforce the one-account-per-player policy, and verify that Players are not accessing the platform from Prohibited Territories in violation of their local laws or 25jili's Terms & Conditions.
25jili uses wagering pattern data and session frequency records to identify players who may exhibit indicators of problem gambling, trigger responsible gaming tool prompts and session reminders, administer self-exclusion and account cooling-off periods, and ensure that players who have registered for self-exclusion are prevented from opening new accounts.
Communication records and account data are used to investigate and resolve player complaints and disputes, verify identity before making account changes, and train and quality-assure our customer support team.
Where you have explicitly opted in to receive promotional communications, 25jili may use your contact details and game preference data to send you information about relevant bonuses, tournaments, and new game releases. Marketing communications are always opt-in — you will never receive unsolicited promotional messages from 25jili. You may opt out at any time via account settings.
25jili does not sell your personal data to any third party. Personal data is shared externally only in the following limited circumstances:
To process deposits and withdrawals, 25jili shares the minimum necessary data with payment service providers including GCash, Maya, BPI, BDO, UnionBank, Metrobank, 7-Eleven Cliqq, and Coins.ph. Data shared is limited to the transaction amount, account reference, and the name and account details required to route the payment. Each payment processor operates under its own privacy policy and is subject to Bangko Sentral ng Pilipinas (BSP) regulations.
Game providers (including JILI Games, PG Soft, Pragmatic Play, and others) receive anonymized session and wagering data for game performance optimization and RNG audit purposes. Game providers do not receive Players' full names, government ID data, or payment account details.
25jili is required by law to share data with PAGCOR for licensing compliance audits, and with the Anti-Money Laundering Council (AMLC) in the event of suspicious transaction reports as required under Republic Act No. 9160 and its amendments. Disclosure to these authorities is a legal obligation and does not require your consent.
25jili may engage accredited third-party identity verification providers to assist with the KYC process. Such providers process only the document images and personal details strictly necessary for identity verification and are contractually bound to treat such data as confidential and to process it only for the stated purpose.
25jili may disclose personal data where required by a valid court order, lawful subpoena, or other legal process issued by a competent Philippine court or regulatory authority. In such cases, 25jili will endeavor to provide reasonable notice to the affected player before disclosure unless prohibited from doing so by the applicable legal instrument.
No Data Sales: 25jili will never sell, rent, or trade your personal data to data brokers, advertisers, or any other commercial third party. If you receive unsolicited communications purportedly from 25jili from an unexpected source, please report it to [email protected] immediately as it may indicate a phishing attempt.
The 25jili platform uses cookies and similar technologies including local storage, session tokens, and device fingerprinting to operate core platform functions and improve the player experience. Cookies used by 25jili fall into four categories:
You can manage non-essential cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies for specific sites. Note that blocking strictly necessary cookies will prevent you from logging in to the platform. Mobile browser cookie management is accessed through the browser's privacy or settings menu.
Note: 25jili does not use third-party advertising or retargeting cookies. We do not place pixels or tracking tags that serve ads on other websites based on your 25jili usage. The cookies we use are for platform operation and security only.
25jili implements a layered security framework to protect your personal data from unauthorized access, disclosure, alteration, or destruction. Key security measures include:
Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a real risk of harm to affected players, 25jili will notify affected individuals and the National Privacy Commission within the timeframes prescribed under NPC Circular No. 16-03 on Security Incident Notification.
Security Incident Reporting: If you believe your 25jili account has been compromised or you have identified a security vulnerability on the platform, please contact 25jili customer support immediately via live chat or email. Do not attempt to exploit or test security vulnerabilities — responsible disclosure is appreciated and will be handled with appropriate urgency.
25jili retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Legal Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR regulatory requirements |
| KYC identity documents | Duration of account + 5 years post-closure | RA 9160 (Anti-Money Laundering Act) |
| Transaction records (deposits, withdrawals, bets) | 7 years from transaction date | RA 9160; PAGCOR regulations; RA 9490 (AMLA, as amended) |
| Suspicious transaction reports | 7 years from filing date | AMLC regulations |
| Customer support communications | 3 years from last communication | Legitimate interests (dispute resolution) |
| Self-exclusion records | Duration of exclusion + 5 years | PAGCOR responsible gaming obligations |
| Session and device logs (security) | 12 months from creation | Legitimate interests (security) |
| Marketing consent records | Duration of consent + 2 years after withdrawal | NPC advisory on consent management |
At the end of the applicable retention period, personal data is securely deleted or anonymized in a manner that makes re-identification impossible. Anonymized data (which can no longer be linked to an individual) may be retained indefinitely for statistical and platform analysis purposes.
The 25jili platform serves Philippine players and, where possible, stores and processes player data on servers located within the Philippines. However, certain technical operations — including cloud infrastructure services, game provider integrations, and security monitoring tools — may involve the transfer of data to servers located outside the Philippines.
Where personal data is transferred outside the Philippines, 25jili implements appropriate safeguards as required under Section 21 of the DPA, including contractual clauses that impose data protection obligations on the receiving party equivalent to those applicable under Philippine law, or ensuring that the receiving country has been assessed as providing an adequate level of protection by the NPC.
Data transferred internationally for game provider integration purposes is limited to anonymized or pseudonymized session data and does not include government-issued ID records, financial account numbers, or other sensitive personal information.
Cloud Infrastructure: 25jili uses reputable international cloud providers that maintain compliance with global security standards including ISO 27001 and SOC 2. These providers process data only as instructed by 25jili and are contractually prohibited from using player data for their own purposes.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 25jili. These rights are not absolute — they are subject to applicable legal retention obligations, PAGCOR regulatory requirements, and anti-money laundering laws that may require 25jili to retain certain data regardless of a deletion request.
Request a copy of the personal data 25jili holds about you and information about how it is processed.
Request correction of inaccurate personal data. Name corrections require supporting KYC documentation.
Request deletion of personal data, subject to legal retention requirements under PAGCOR and AMLA regulations.
Object to processing of your personal data for direct marketing purposes at any time, with immediate effect.
Request that processing of your data be suspended pending investigation of a complaint or accuracy dispute.
Receive a structured, machine-readable copy of your personal data for transfer to another controller.
Withdraw consent for consent-based processing (marketing) at any time without affecting prior lawful processing.
Lodge a complaint with the National Privacy Commission (NPC) if you believe your rights have been infringed.
To exercise any of these rights, submit a written request to the 25jili Data Protection Officer at [email protected] with the subject line "Privacy Rights Request — [Your Account Username]". Identity verification will be required before processing any rights request. 25jili will respond within fifteen (15) business days from receipt of a valid, verified request.
Age Restriction: The 25jili platform is strictly for individuals aged 21 years and older. PAGCOR regulations prohibit any individual under 21 from registering or using online gambling services in the Philippines. 25jili does not knowingly collect personal data from individuals under 21 years of age.
Age is verified at registration through the date of birth field and confirmed during KYC verification through government-issued identification documents. Any account found to belong to a person under 21 will be immediately closed, all deposits will be returned to the source payment method, and all associated data will be securely deleted to the extent not legally required to be retained for AML reporting purposes.
If you are a parent or guardian and believe that a minor has registered a 25jili account, please contact us immediately at [email protected] with the subject line "Minor Account Report". 25jili will investigate and act on all such reports as a priority matter.
The 25jili platform may contain links to or integrations with third-party services, including game providers, payment processors, and identity verification services. This Privacy Policy applies only to personal data processed by 25jili directly. 25jili is not responsible for the privacy practices of third-party services.
When you access payment services (GCash, Maya, BPI, BDO, and others), those services process your transaction data under their own privacy policies and BSP-regulated terms of service. 25jili recommends that you review the privacy documentation of any third-party service you interact with in connection with your 25jili account.
25jili reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, regulatory requirements, or the introduction of new platform features. Material changes — including any expansion of the categories of data we collect, new purposes for which data is used, or changes to your rights — will be communicated to registered Players via the email address on file at least fourteen (14) days before the change takes effect.
Minor amendments — including corrections to typographical errors, clarifications of existing provisions without substantive change, and updates to contact details — may be made without advance notice. The "Last Updated" date at the top of this page reflects the date of the most recent revision.
Your continued use of the 25jili platform after the effective date of any update constitutes your acknowledgment of the revised Policy. If you do not accept the revised Policy, you may request account closure in accordance with 25jili's Terms & Conditions.
For all privacy-related inquiries, rights requests, and complaints, please contact 25jili's Data Protection Officer:
25jili is committed to resolving all privacy complaints promptly and fairly. We encourage Players to contact us directly in the first instance before escalating to the NPC — most concerns can be resolved quickly through our internal complaints process.
Your Privacy at 25jili
Privacy isn't just a policy document at 25jili — it's reflected in real technical and operational decisions that protect every registered player.
Every request between your device and 25jili's servers is encrypted using TLS 1.2/1.3 — the same standard used by Philippine banks and financial institutions. The padlock in your browser confirms the connection is secure before you type a single character of your login credentials.
25jili does not sell, rent, or trade your personal data to data brokers, advertising networks, or any other commercial third party. The only third parties that receive your data are those directly necessary to operate your account — payment processors, PAGCOR, and accredited KYC providers — and only the minimum data required for their specific function.
25jili's data practices are designed around the Philippine Data Privacy Act of 2012 and NPC regulations. This means you have enforceable legal rights — access, correction, deletion, and portability — that 25jili is obligated to honor within defined timeframes. The NPC provides independent oversight if those rights are not respected.
25jili has a designated Data Protection Officer (DPO) responsible for overseeing privacy compliance, handling rights requests, and maintaining the NPC registration as required under DPA regulations. The DPO is contactable directly for any privacy concern — not routed through a generic support queue for privacy-specific matters.
25jili doesn't hold your data indefinitely. Each category of personal data has a defined retention period based on the legal minimum required — transaction records are kept for 7 years under AMLA requirements, but marketing preference data is deleted within 2 years of consent withdrawal. After retention periods expire, data is securely deleted.
In the event of a data breach that poses real risk of harm, 25jili is committed to notifying affected players and the NPC within the timeframes required under NPC Circular No. 16-03. We conduct regular security assessments and penetration testing to minimize the likelihood of a breach in the first place.
Your personal information is handled with the same care we apply to your gaming experience — rigorously, transparently, and in full compliance with Philippine law. GCash deposits from ₱100. PAGCOR regulated. 21+ only.
PAGCOR licensed, DPA compliant, SSL encrypted. Your account and data are protected at every layer.
Fast deposits and withdrawals via the payment methods Filipino players actually use every day.
JILI, PG Soft, Pragmatic Play slots plus live tables, sports betting, bingo, and sabong.
Quarter betting, live odds, and player props on PBA games — alongside NBA, UFC, and boxing.