Six core commitments that define how aajili treats the personal information of every Filipino player on the platform.
All personal data stored by aajili is protected using 256-bit encryption at rest and in transit. Access to player data is restricted to authorised personnel on a strict need-to-know basis. We apply industry-standard security controls consistent with PAGCOR compliance requirements and the National Privacy Commission's guidelines under RA 10173.
aajili collects only the personal data that is necessary to operate the platform, comply with PAGCOR licensing conditions, and fulfil obligations under Philippine law — including the Anti-Money Laundering Act (AMLA) and the Data Privacy Act. We do not collect data for which there is no clear, disclosed purpose.
aajili does not sell your personal data. Data is shared with third parties only where required by law (e.g., PAGCOR regulatory reporting, AMLC disclosures), where necessary to operate the platform (e.g., payment processors like GCash and Maya), or where you have provided explicit, informed consent.
As a Filipino data subject under the Data Privacy Act of 2012 (RA 10173), you have the rights of access, rectification, erasure, data portability, and objection in respect of your personal data held by aajili. These rights are enforceable and can be exercised by contacting aajili's Data Privacy Officer.
aajili uses cookies and similar tracking technologies solely to maintain session state, improve platform performance, and deliver relevant content. We do not use tracking cookies for cross-site advertising. Cookie preferences can be managed through your browser settings. Essential cookies required for platform security and session management cannot be disabled.
aajili retains personal data only for as long as is necessary for its stated purpose and as required by applicable Philippine law. Account data is retained for a minimum of five (5) years after account closure as required under PAGCOR AML compliance obligations. Financial transaction records are retained for six (6) years in accordance with AMLA requirements.
This Privacy Policy ("Policy") describes how aajili ("aajili," "we," "us," "our") — the operator of the online gaming platform at https://aajili.bio — collects, processes, stores, shares, and protects the personal information of players and visitors ("you," "your," "data subject") in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. aajili operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR), and all data processing activities are conducted in alignment with both PAGCOR licensing conditions and Philippine data privacy law. Please read this Policy carefully before creating an account or submitting any personal information to aajili.
1.1 aajili is committed to protecting the privacy and personal information of every player who accesses the platform. This Policy applies to all personal data collected through the aajili website at https://aajili.bio, the aajili mobile web application, and any related services, communications, and transactions conducted through the platform.
1.2 This Policy applies to all current and former registered players, visitors to the aajili website who have not yet registered, and any individual whose personal data is processed by aajili in connection with its operations.
1.3 By registering an aajili account, completing the KYC (Know Your Customer) process, making a deposit, or continuing to use the Platform after this Policy has been made available to you, you acknowledge that you have read and understood this Privacy Policy.
This Policy is to be read together with the aajili Terms & Conditions and Responsible Gaming Policy, both of which are accessible from the aajili website footer. Together, these documents form the complete regulatory and contractual framework governing your relationship with aajili.
2.1 For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is aajili, the operator of the online gaming platform accessible at https://aajili.bio, operating under a PAGCOR licence for online gaming services in the Philippines.
2.2 aajili has designated a Data Privacy Officer (DPO) in compliance with Section 21 of RA 10173. The DPO is responsible for overseeing aajili's data protection compliance, handling data subject rights requests, and acting as the primary point of contact with the National Privacy Commission. Contact details for the DPO are provided in Section 16 of this Policy.
3.1 aajili collects personal data across the following categories, as necessary for the purposes described in Section 5:
| Data Category | Specific Data Points Collected | Collection Trigger |
|---|---|---|
| Identity Data | Legal full name, date of birth, gender, nationality, government ID type and number | KYC verification |
| Contact Data | Philippine mobile number, email address, residential address | Account registration |
| Financial Data | GCash account reference, bank name, deposit and withdrawal transaction records, account balance history | First deposit / withdrawal |
| Gaming Data | Game history, bet amounts, outcomes, session durations, game preferences, bonus usage | Platform use (real-money play) |
| Technical Data | IP address, device type, operating system, browser type, session identifiers, login timestamps | Platform access (logged-in or not) |
| Communications Data | Records of live chat, email, and support interactions with aajili staff | Customer support contacts |
| Responsible Gaming Data | Self-exclusion status, deposit limit settings, session limit preferences, problem gambling flags | Responsible gaming tool use |
| Document Data | Photographs or scans of government-issued IDs, proof of address documents | KYC submission |
3.2 aajili does not collect sensitive personal information as defined under Section 3(l) of RA 10173 (including race, ethnicity, health, religious beliefs, or biometric data) unless specifically required by PAGCOR or applicable law, and only with your explicit consent.
4.1 aajili collects personal data through the following channels and mechanisms:
5.1 aajili processes your personal data for the following purposes, each supported by a lawful basis under RA 10173:
Where aajili relies on "legitimate interests" as the legal basis for processing, we have conducted a balancing test and determined that our interests do not override your fundamental rights and freedoms under Philippine law. You have the right to object to processing based on legitimate interests — see Section 11.
6.1 aajili does not sell, rent, or trade your personal data to third parties for commercial purposes. Your data is shared only in the following circumstances:
6.2 All third parties receiving personal data from aajili are contractually required to handle that data in accordance with the Data Privacy Act of 2012 and to use it solely for the specified purpose of the disclosure.
AML Reporting Obligations. aajili is legally required under the Anti-Money Laundering Act (RA 9160) to report certain transactions to the Anti-Money Laundering Council (AMLC) without prior notice to the data subject. This is a mandatory legal obligation that supersedes any consent or objection the data subject may provide.
7.1 aajili may engage third-party service providers located outside of the Philippines in the provision of certain technical and operational services, including cloud infrastructure, customer support software, and game content delivery networks. In such cases, personal data may be transferred to and processed in jurisdictions outside the Philippines.
7.2 Where personal data is transferred internationally, aajili ensures that the receiving jurisdiction provides an adequate level of protection for personal data, or that appropriate safeguards are in place, including contractual clauses approved by the National Privacy Commission, or that the transfer falls within a recognised lawful basis under Section 20 of RA 10173 and its Implementing Rules and Regulations.
7.3 A list of the categories of countries to which data may be transferred is available from aajili's Data Privacy Officer upon written request.
8.1 aajili retains personal data for no longer than is necessary for the purpose for which it was collected, subject to the following minimum retention periods required by Philippine law:
8.2 Where retention beyond these minimum periods is required by a regulatory directive, court order, or ongoing legal proceedings, aajili will retain the relevant data until such obligation is discharged.
8.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction of the original personal data.
aajili implements technical and organisational security measures commensurate with the sensitivity of the personal data processed and the risks to Filipino players' rights and freedoms. These measures are reviewed and updated periodically to reflect changes in technology and the threat environment.
9.1 aajili's current security measures include, without limitation:
9.2 Data Breach Notification. In the event of a personal data breach that is likely to give rise to a real risk of serious harm to affected data subjects, aajili will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required under the Data Privacy Act and NPC Circular 16-03. Affected individuals will be notified without undue delay where the breach is likely to result in a high risk to their rights and freedoms.
10.1 aajili uses cookies and similar technologies (session tokens, local storage identifiers) on the Platform for the following purposes:
10.2 aajili does not use cross-site tracking cookies for targeted advertising on third-party platforms. No personal data collected via aajili's cookies is shared with advertising networks.
10.3 You may manage non-essential cookies through your browser settings. Please note that disabling functional cookies may impair certain features of the Platform. Browser-level cookie controls vary by browser; refer to your browser's help documentation for instructions.
11.1 As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights in respect of personal data held by aajili:
| Right | What It Means in Practice at aajili | Response Time |
|---|---|---|
| Right to Access | Request a copy of the personal data aajili holds about you and information on how it is used. | 15 business days |
| Right to Rectification | Request correction of inaccurate or incomplete personal data in your aajili account. Minor details can be updated directly in your account settings. | 10 business days |
| Right to Erasure | Request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to overriding legal retention obligations (see Section 8). | 30 business days |
| Right to Data Portability | Request a copy of your personal data in a structured, commonly used, machine-readable format (CSV or equivalent) where technically feasible. | 20 business days |
| Right to Object | Object to processing of your data based on aajili's legitimate interests. Objection to processing for direct marketing is always honoured unconditionally. | 10 business days |
| Right to Complain | Lodge a complaint with the National Privacy Commission (NPC) if you believe aajili has violated your rights under RA 10173. NPC complaint forms are available at privacy.gov.ph. | N/A (NPC timeline) |
11.2 To exercise any of the above rights, submit a written request to aajili's Data Privacy Officer using the contact details in Section 16. Requests must include sufficient information to verify your identity before personal data is disclosed or modified. aajili reserves the right to decline requests that are manifestly unfounded or excessive.
21+ Age Requirement. The aajili Platform is strictly restricted to individuals aged 21 years and above, as required by PAGCOR regulations governing online gaming in the Philippines. aajili does not knowingly collect personal data from individuals under 21 years of age.
12.1 If aajili becomes aware that personal data has been collected from an individual who is under 21 years of age, the account will be suspended immediately, all associated data will be reviewed, and any real-money balance will be handled in accordance with PAGCOR guidelines. The incident will be reviewed by the Data Privacy Officer for any required NPC notification.
12.2 If you believe that a minor has registered an aajili account, please contact the aajili Data Privacy Officer or customer support immediately using the contact details in Section 16.
13.1 aajili will send you promotional communications (bonus offers, new game announcements, platform updates) via SMS and email only where you have provided your explicit, opt-in consent during registration or subsequently through your account notification preferences.
13.2 You may withdraw your marketing consent at any time by:
13.3 Withdrawal of marketing consent will not affect your ability to use the aajili Platform or receive transactional communications (deposit/withdrawal confirmations, security alerts, account notifications) which are necessary for platform operation and cannot be disabled.
13.4 aajili does not share your contact details with third-party marketers for the purpose of marketing products or services unrelated to the aajili Platform.
14.1 The aajili Platform may contain references to or integrations with third-party services (such as GCash payment interfaces or game provider interfaces rendered within the Platform). These third-party services operate under their own privacy policies, which are independent of this Policy. aajili is not responsible for the data practices of third-party service providers beyond the contractual protections described in Section 6.
14.2 Payment transactions processed through GCash, Maya, BPI, and other payment partners are subject to those providers' own privacy notices in addition to this Policy. By initiating a transaction, you acknowledge that your payment provider will process data about the transaction in accordance with their policies.
15.1 aajili reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidelines, or PAGCOR requirements. The current version of the Policy, including its effective date, is always published at https://aajili.bio/privacy-policy.
15.2 For material changes that significantly affect how your personal data is processed, aajili will notify registered players via the email address or mobile number associated with their account at least seven (7) calendar days before the updated Policy takes effect. Your continued use of the Platform after the effective date of the revised Policy constitutes your acceptance of the changes.
15.3 Minor updates (including corrections of typographical errors, restructuring of sections without substantive content changes, or updated regulatory references) may be made without prior notification.
16.1 For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your rights under RA 10173, please contact the aajili Data Privacy Officer through the following channels:
16.2 If you are not satisfied with aajili's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information on NPC complaint procedures is available through official NPC channels.
Regulatory Notice. aajili processes personal data as a personal information controller registered under the Data Privacy Act of 2012 (RA 10173) with the National Privacy Commission of the Philippines, and as a licensed online gaming operator under the Philippine Amusement and Gaming Corporation (PAGCOR). All data processing activities described in this Policy are conducted in accordance with applicable Philippine law. The aajili Platform is restricted to individuals aged 21 years and above. Gambling involves financial risk — please play responsibly.