This Privacy Policy describes how nojili collects, uses, stores, and protects the personal information of players and visitors on the nojili.app platform, in compliance with the Philippine Data Privacy Act of 2012.
All personal data held by nojili is encrypted using industry-standard AES-256 at rest. All data in transit between your device and nojili servers is protected by TLS 1.3 encryption.
nojili's data practices comply with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations. Your rights as a data subject are fully respected.
nojili does not sell, rent, or trade your personal information to third-party marketers. Data is shared only as required for platform operations, regulatory compliance, or with your explicit consent.
We tell you exactly what data we collect and why. No hidden data harvesting. No undisclosed third-party trackers beyond what is detailed in this policy.
Subject to our legal retention obligations under PAGCOR and AML regulations, you have the right to request deletion of your personal data from nojili's systems at any time.
nojili has a designated Data Protection Officer reachable at [email protected] for all privacy-related inquiries, subject access requests, and complaints.
This policy is written to be genuinely readable, not just technically compliant. If you have questions about anything in this document, our Data Protection Officer is available at [email protected]. We will respond to all privacy inquiries within five (5) business days.
1.1 This Privacy Policy ("Policy") applies to all personal information collected, used, stored, or otherwise processed by nojili ("nojili", "we", "us", or "our") in connection with the operation of the online gambling platform accessible at nojili.app (the "Platform").
1.2 This Policy covers the personal information of:
1.3 This Policy is governed by and construed in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 of the Republic of the Philippines ("DPA"), and its Implementing Rules and Regulations as administered by the National Privacy Commission ("NPC"). nojili's data processing activities are also subject to the requirements of PAGCOR's licensing framework insofar as those requirements concern the collection and handling of player data.
1.4 By registering an account, accessing the Platform, or otherwise engaging with nojili's services, you acknowledge that you have read this Policy and consent to the collection and use of your personal information as described herein, to the extent that consent is the applicable legal basis for the relevant processing activity.
2.1 nojili is the personal information controller responsible for the personal data collected through the nojili.app platform, within the meaning of the Data Privacy Act of 2012.
2.2 nojili has designated a Data Protection Officer ("DPO") to oversee compliance with this Policy and applicable data protection legislation. The DPO may be contacted as set out in Section 15 of this Policy.
2.3 Where nojili engages third-party processors — including payment service providers such as GCash (G-Xchange Inc.) and Maya (Paymaya Philippines Inc.), game software suppliers, KYC verification technology providers, and cloud infrastructure providers — such parties act as personal information processors under the DPA and are contractually required to process personal data only in accordance with nojili's documented instructions and applicable Philippine data protection law.
3.1 nojili collects the following categories of personal information from players and platform visitors:
| Category | Specific Data Items |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government ID type and number (e.g., PhilSys, UMID, Passport, Driver's License), KYC selfie photograph |
| Contact Data | Philippine mobile number, email address, residential address (city/province) |
| Account Data | Username, hashed password, account creation date, account status, security question responses, two-factor authentication settings |
| Financial Data | GCash wallet reference (name only, no full wallet credentials), Maya account reference, bank account name and number for withdrawal processing, deposit and withdrawal transaction records, account balance history |
| Gaming Data | Bet history, game session logs, win/loss records, bonus usage records, game preferences, session durations |
| Technical Data | IP address, device type and operating system, browser type and version, session tokens, login timestamps, geographic location (country and region level) |
| Communications Data | Customer support chat logs and email correspondence, records of complaints and resolution outcomes |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status and period, session time alerts, reality check configurations, problem gambling risk assessment records where applicable |
3.2 nojili does not collect sensitive personal information as defined under Section 3(l) of the DPA — such as health data, political affiliations, or religious beliefs — beyond what may be incidentally disclosed through voluntary communications with our support team. Such incidental sensitive data is handled with heightened confidentiality and is not retained beyond the resolution of the relevant support interaction.
4.1 nojili collects personal data through the following channels and methods:
4.2 nojili does not collect personal data from social media platforms or third-party data brokers without your explicit consent, except where you choose to use social login functionality (e.g., Facebook login), in which case only the data fields you authorize during the social authentication are received by nojili.
5.1 nojili processes personal data for the following purposes, on the legal bases indicated:
| Purpose | Legal Basis Under DPA |
|---|---|
| Account registration and authentication | Performance of contract (Terms and Conditions) |
| KYC identity and age verification | Legal obligation (PAGCOR licensing requirements, RA 9160 AML Act) |
| Processing deposits and withdrawals | Performance of contract; legal obligation (AML Act) |
| Providing gaming services (casino, slots, sports betting, bingo) | Performance of contract |
| Customer support and complaint resolution | Performance of contract; legitimate interests |
| Fraud detection, AML screening, and security monitoring | Legal obligation; legitimate interests |
| Responsible gaming monitoring and player protection | Legal obligation (PAGCOR requirements); legitimate interests |
| Platform analytics and service improvement | Legitimate interests (using anonymized or aggregated data where possible) |
| Promotional communications and bonus notifications | Consent (you may opt out at any time) |
| Regulatory reporting to PAGCOR and AMLC | Legal obligation |
Where nojili relies on legitimate interests as the legal basis for processing, we have assessed that those interests are not overridden by your rights and freedoms as a data subject. You have the right to object to processing based on legitimate interests by contacting our DPO.
6.1 nojili does not sell, rent, or trade your personal information. We share personal data only in the following circumstances and with the following categories of recipients:
6.2 In the event of a corporate restructuring, merger, acquisition, or sale of assets involving nojili, player personal data may be transferred to the acquiring entity as part of that transaction, subject to the same protections described in this Policy. Affected players will be notified of any material change in data controllership.
7.1 nojili retains personal data for the following periods:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of active account plus five (5) years after account closure, as required by PAGCOR and AML regulations |
| KYC identity verification documents | Five (5) years from account closure, in compliance with RA 9160 (AML Act) |
| Financial transaction records | Five (5) years from the date of transaction, as required by PAGCOR and AMLC reporting obligations |
| Gaming session and bet history | Three (3) years from the date of the relevant gaming session |
| Customer support communications | Two (2) years from the date of the interaction, unless linked to an ongoing dispute or legal proceeding |
| Marketing consent and opt-out records | Duration of active account plus three (3) years after closure |
| Technical and device logs | Ninety (90) days from collection, except where retained for specific security investigation purposes |
7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of individual identity. Anonymized statistical data derived from player activity may be retained indefinitely for business analysis purposes.
8.1 nojili implements a multi-layered security architecture to protect personal data against unauthorized access, disclosure, alteration, or destruction, including:
8.2 While nojili employs robust security measures, no internet-based platform can guarantee absolute security. Players are also responsible for maintaining the security of their own login credentials. nojili recommends enabling two-factor authentication on your account.
In compliance with NPC Circular 16-03, nojili will notify affected data subjects and the National Privacy Commission within 72 hours upon discovery of a personal data breach that may pose real risk of serious harm. Notification will include the nature of the breach, data affected, and remedial actions taken.
9.1 nojili uses cookies and similar tracking technologies on the nojili.app platform. Cookies are small text files stored on your device that allow the platform to recognize your browser, maintain your session, and remember your preferences.
9.2 nojili uses the following categories of cookies:
9.3 nojili does not use third-party advertising cookies or behavioral retargeting cookies. Your browsing behavior on the Platform is not shared with advertising networks.
9.4 You may configure your browser to reject cookies. Note that disabling strictly necessary cookies will prevent you from logging in to and using the Platform. Disabling functional or analytics cookies may affect your user experience but will not prevent Platform access.
10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by nojili:
Request confirmation of whether nojili holds personal data about you, and obtain a copy of that data in a readable format within 15 business days of a valid request.
Request correction of inaccurate or incomplete personal data held by nojili. Some corrections may require re-submission of KYC documents.
Request deletion of your personal data where it is no longer necessary for the purpose collected, subject to overriding legal retention obligations under PAGCOR and AML regulations.
Receive a copy of your personal data in a structured, commonly used, machine-readable format to transfer to another service where technically feasible.
Object to processing based on legitimate interests or for direct marketing purposes. Objection to marketing takes effect immediately; objections to other processing bases are assessed on a case-by-case basis.
Request suspension of processing pending resolution of a correction request or an objection, where the challenge to accuracy or lawfulness of processing is pending determination.
10.2 To exercise any of the above rights, submit a written request to nojili's Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request." nojili will acknowledge receipt within three (3) business days and provide a substantive response within fifteen (15) business days, as required under NPC guidelines.
10.3 Identity verification will be required before processing any data subject rights request to confirm that the request originates from the account holder or an authorized representative.
10.4 Where nojili is unable to fulfil a data subject rights request — for example, because doing so would conflict with a legal retention obligation — nojili will explain the reason in writing.
10.5 If you are dissatisfied with nojili's handling of your personal data or your data subject rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (www.privacy.gov.ph).
11.1 nojili may send promotional communications — including bonus offers, tournament notifications, and platform updates — to registered players via SMS, email, and in-platform notifications, subject to your communication preferences.
11.2 Marketing communications are sent only to players who have not opted out of such communications. You may update your marketing preferences at any time through your account settings, or by contacting customer support.
11.3 Opting out of marketing communications will not affect the delivery of transactional messages required for platform operations, such as deposit confirmations, withdrawal notifications, OTPs, and security alerts. These operational communications are not optional while you hold an active account.
11.4 nojili will not send marketing communications to players who are under self-exclusion or who have registered a problem gambling concern. This restriction applies for the duration of any active self-exclusion period.
11.5 nojili does not share player contact information with third-party marketers for the purpose of marketing their products or services to nojili players.
12.1 The nojili Platform is strictly restricted to individuals aged twenty-one (21) years and above. nojili does not knowingly collect personal data from individuals under 21 years of age.
12.2 Age verification is conducted through the KYC process, which requires submission of a valid Philippine government-issued identification document bearing a verifiable date of birth. Accounts cannot progress to withdrawal capability without completed age verification.
12.3 If nojili discovers that personal data has been collected from an individual who was under 21 years of age at the time of collection, the relevant account will be immediately suspended, all associated personal data will be securely deleted to the extent not required for regulatory reporting purposes, and any funds held in the account will be handled in accordance with PAGCOR's requirements for underage account remediation.
12.4 If you believe that personal data of an individual under 21 has been submitted to nojili, please notify our DPO immediately at [email protected].
13.1 nojili's primary data processing infrastructure is located within the Philippines. Certain ancillary processing activities — including cloud infrastructure services, some KYC technology operations, and game software delivery — may involve transfers of personal data to servers or processors located outside the Philippines.
13.2 Where personal data is transferred outside the Philippines, nojili ensures that such transfers are protected by one or more of the following safeguards:
13.3 You may request information about the specific safeguards applied to cross-border transfers affecting your personal data by contacting nojili's DPO.
14.1 nojili may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. The "Last Updated" date at the top of this document will reflect the date of the most recent revision.
14.2 Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — nojili will notify registered players via the email address or mobile number on file at least seven (7) calendar days before the changes take effect.
14.3 Your continued use of the Platform following the effective date of any updated Policy constitutes your acknowledgement of the changes. If you do not agree with material changes, you may close your account in accordance with the Terms and Conditions before the changes take effect.
15.1 For privacy-related inquiries, data subject rights requests, or complaints, contact nojili's Data Protection Officer:
15.2 If you are dissatisfied with nojili's response to your privacy inquiry or data subject rights request, you may escalate your complaint to the National Privacy Commission of the Philippines. The NPC's contact details and complaint procedures are publicly available on the NPC's official website.
This Privacy Policy should be read alongside nojili's Terms and Conditions and Responsible Gaming Policy, which together form the full framework governing your use of the nojili platform and nojili's obligations to you.
You've reviewed how nojili handles your privacy. We collect only what we need, protect it rigorously, and respect your rights under Philippine law. With that assurance in place — dive into the Philippines' most complete PAGCOR-licensed online casino.
21+ only · PAGCOR licensed · DPA compliant · Play responsibly