28jili Privacy Policy — How We Protect Your Personal Data

1. Policy Overview

This Privacy Policy is issued by 28jili in its capacity as the personal information controller (PIC) for all data collected through the 28jili platform. As the PIC, 28jili determines the purposes and means of processing personal information collected from players and site visitors.

The legal bases on which 28jili processes your personal data include:

• Performance of a contract — processing necessary to register your account, provide access to games, and process deposits and withdrawals.
• Compliance with legal obligation — processing required under Philippine AML law, PAGCOR regulations, tax obligations, and the Data Privacy Act.
• Legitimate interests — processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving the 28jili service.
• Consent — marketing communications and non-essential cookies, where your consent is obtained and may be withdrawn at any time.

2. Data We Collect

28jili collects personal data through several channels: during account registration, through your ongoing use of the platform, via identity verification processes, and automatically through your device and browser when you visit 28jili.best. Here's a clear breakdown of what we collect and why:

Registration & Account Data

This data is collected when you create your 28jili account. It is used to establish your identity, create and manage your account, verify age eligibility (21+), and communicate with you about your account.

Identity Verification (KYC) Data

KYC documents are required under PAGCOR regulations and Philippine AML law. 28jili may request these at registration or at any time during your account lifecycle. Documents are handled securely and are not used for any purpose beyond identity verification and regulatory compliance.

Financial & Transaction Data

Financial data is processed to manage your 28jili wallet, handle deposits and withdrawals via GCash, Maya, BDO, BPI, UnionBank, and other supported payment methods, and to meet our AML and tax reporting obligations.

Technical & Device Data

Technical data is collected automatically to ensure platform security, detect fraudulent activity, enforce geo-restrictions required by PAGCOR, and optimize the 28jili experience across different devices and network types common in the Philippines.

Communications Data

If you contact 28jili support, we keep records of your communications including email threads, live chat transcripts, and support ticket history. This data is used to resolve your query and improve our service quality.

3. How We Use Your Data

28jili uses the personal data collected from you strictly for the following purposes:

• Account management. Creating, maintaining, and securing your 28jili player account, including password resets, login verification, and account notifications.
• Game access and delivery. Processing your bets, determining game outcomes, crediting winnings, and managing your 28jili wallet balance across all games including Pusoy, Tongits, Live Casino, Bingo, Volleyball Betting, and Color Game.
• Payment processing. Facilitating deposits via GCash, Maya, GrabPay, bank transfers, and card payments, and processing withdrawals to your registered payment account.
• KYC and AML compliance. Verifying your identity, age, and the source of funds where required by PAGCOR and Philippine AML law. 28jili is legally obligated to conduct these checks.
• Fraud prevention and security. Detecting and investigating suspicious account activity, unauthorized access, bonus abuse, multi-accounting, and other forms of fraudulent behavior on the 28jili platform.
• Responsible gaming. Monitoring gameplay patterns to identify potential problem gaming indicators and, where necessary, applying responsible gaming interventions such as cooling-off periods or contacting players about support resources.
• Customer support. Responding to your queries, resolving disputes, and improving the support experience based on historical interaction data.
• Platform improvement. Analyzing anonymized aggregate usage data to understand how players use 28jili and improve game performance, navigation, and features.
• Marketing communications. Sending you information about 28jili promotions, bonus offers, and VIP Club updates — but only where you have given your consent or where this is permitted by applicable law. You may opt out at any time.
• Legal compliance. Fulfilling reporting obligations to PAGCOR, the National Privacy Commission, tax authorities, and law enforcement agencies where required by Philippine law.

4. Who We Share Your Data With

28jili does not sell your personal data. We share personal information only in the following limited circumstances, and only to the extent necessary for the stated purpose:

All third parties who handle your personal data on behalf of 28jili are bound by data processing agreements that require them to handle data in accordance with the Philippine Data Privacy Act and to use it only for the purposes specified.

5. Cookies & Tracking Technologies

28jili uses cookies and similar technologies to operate the platform, remember your session, and understand how players use the site. Here's a clear breakdown of the cookies we use:

• Essential cookies. Required for the 28jili platform to function — session management, login state, and game connectivity. These cannot be disabled without breaking core functionality.
• Functional cookies. Remember your preferences such as language settings, display preferences, and game lobby layout. These improve your experience on 28jili but are not strictly necessary.
• Analytics cookies. Used to understand aggregate player behavior on 28jili — which games are most popular, how players navigate the lobby, and where technical issues occur. Data is anonymized and not linked back to individual accounts.
• Security cookies. Help 28jili detect fraudulent logins, session hijacking, and bot activity. These are necessary for platform security.

You can manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to play on 28jili, but some convenience features may not work as expected.

28jili does not use third-party advertising or retargeting cookies. We do not allow advertising networks to place cookies on 28jili.best.

6. Security Measures

28jili implements a multi-layered security architecture to protect your personal data from unauthorized access, loss, misuse, and disclosure:

• Encryption in transit. All data exchanged between your device and 28jili servers is encrypted using TLS 1.3 / 256-bit SSL. This includes game sessions, login requests, and payment transactions.
• Encryption at rest. Sensitive personal data stored in 28jili's systems is encrypted using AES-256. Passwords are stored using bcrypt hashing with per-user salts — the actual password is never stored or visible to anyone.
• Access controls. Personal data is accessible internally only to 28jili personnel who have a legitimate business need. Role-based access controls limit data visibility based on job function.
• Two-factor authentication. 28jili players can enable two-factor authentication (2FA) on their accounts for an added layer of login security. This is recommended for all accounts, particularly those with significant wallet balances.
• Fraud monitoring. Automated systems monitor 28jili accounts around the clock for unusual activity patterns, including unusual login locations, rapid transactions, and bet patterns inconsistent with normal behavior.
• Regular security audits. 28jili undergoes periodic security reviews and penetration testing conducted by independent security specialists to identify and remediate vulnerabilities before they can be exploited.

7. Data Retention

28jili retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by Philippine law and PAGCOR regulations. Here are the key retention periods:

• Active account data — Retained for the lifetime of your 28jili account plus a minimum of five (5) years following account closure, as required by Philippine AML regulations and PAGCOR record-keeping obligations.
• Transaction records — Deposit, withdrawal, and betting history is retained for a minimum of five (5) years from the date of each transaction.
• KYC documents — Identity verification documents are retained for five (5) years following account closure or the end of the business relationship, whichever is later.
• Support communications — Customer support records are retained for three (3) years from the date of the interaction.
• Cookie and analytics data — Anonymized analytics data is retained for up to two (2) years. Session cookies expire when you close your browser.

When retention periods expire, personal data is securely deleted or anonymized so that it can no longer be linked to an identifiable individual. 28jili does not retain data beyond what is legally or operationally required.

8. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 28jili:

To exercise any of your rights, contact the 28jili Data Protection Officer at support@28jili.best. We will respond to verified requests within 15 business days. Some requests may require identity verification before we can action them.

9. Minors

28jili is strictly an adult platform. We do not knowingly collect personal data from individuals under the age of 21. Registration on 28jili requires users to confirm they are at least 21 years old, and identity verification is used to enforce this requirement.

If 28jili discovers or is notified that an account was created by a person under 21, the following steps will be taken immediately:

• The account will be suspended and then permanently closed.
• All bets placed from the account will be voided.
• The deposit balance will be returned minus any withdrawals already made.
• All personal data associated with the minor's account will be deleted as soon as legally permissible.

Parents or guardians who believe a minor has created an account on 28jili should contact us immediately at support@28jili.best. We take this matter seriously and will act without delay.

10. Changes to This Privacy Policy

28jili may update this Privacy Policy from time to time to reflect changes in Philippine law, PAGCOR requirements, data handling practices, or platform features. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Notify registered 28jili players via email or an in-platform notification upon next login.
• Provide a clear summary of what has changed where the update is significant.

Your continued use of the 28jili platform after changes take effect constitutes your acceptance of the updated Privacy Policy. We recommend bookmarking this page and reviewing it periodically — particularly when 28jili sends you a policy update notification.

11. Contact Us — Privacy Questions & Requests

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please contact the 28jili Data Protection Officer:

For complaints about how 28jili handles your personal data that are not resolved to your satisfaction through our internal process, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. 28jili will cooperate fully with any NPC investigation.