🔒 Data Privacy & Security

21jili Privacy Policy – How We Protect Your Personal Data

At 21jili, we take your privacy seriously. This Privacy Policy explains exactly what personal information we collect, why we need it, how it's stored and protected, who can see it, and what rights you have under Philippine law. No jargon — just a clear explanation of how we handle your data.

Policy at a Glance
Governing Law RA 10173 (Data Privacy Act)
Regulator NPC & PAGCOR
Data Sold to 3rd Parties Never
Encryption Standard 256-bit SSL / TLS
Last Updated January 2025
Updated: January 1, 2025 Jurisdiction: Philippines Standard: RA 10173 – Data Privacy Act of 2012 Applies to: All 21jili account holders

Our Commitment
Six Privacy Commitments 21jili Makes to Every Player

Before you read the full policy, here's the short version of what 21jili promises about your personal data

We Never Sell Your Data

21jili does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes — ever. The data you provide when registering your 21jili account is used solely to operate your account and meet our legal obligations under Philippine law.

Bank-Grade Encryption on Everything

All data transmitted between your device and 21jili's servers is encrypted using 256-bit SSL/TLS technology — the same standard used by major Philippine banks. Your passwords are stored as one-way hashed values. Even 21jili's own staff cannot see your plaintext password.

You Control Your Data

Under the Philippine Data Privacy Act (RA 10173), you have the right to access, correct, and request deletion of your personal data. You can exercise these rights at any time by contacting 21jili's Data Protection Officer — no lengthy processes, no unnecessary delays.

Minimal Data Collection

21jili only collects the personal data that is genuinely necessary to operate your account, process payments, verify your identity, and comply with PAGCOR and anti-money laundering regulations. We don't collect data speculatively or "just in case." If we don't need it, we don't ask for it.

Clear Retention Limits

21jili does not hold onto your data indefinitely. Retention periods are determined by our legal obligations under Philippine law — transaction records for 5 years, KYC documents for the duration of account activity plus 5 years. Data is securely deleted once retention periods expire.

Breach Notification Within 72 Hours

In the unlikely event of a data breach affecting your personal information, 21jili will notify the National Privacy Commission (NPC) within 72 hours of discovery and notify affected players as soon as practically possible. This is both a legal obligation and a commitment we take seriously.

21jili

01

Who We Are

This Privacy Policy is published by 21jili, operating the online gaming platform accessible at 21jili.best. 21jili is a Philippine-based online casino and sports betting platform licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR).

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173), 21jili acts as the personal information controller for all data collected through the platform. This means 21jili determines the purposes and means of processing your personal data and is responsible for ensuring that processing is lawful, fair, and transparent.

If you have any questions about this policy or about how 21jili handles your personal data, you can reach our Data Protection Officer (DPO) at privacy@21jili.best or through the customer support live chat available within your account.

Scope: This Privacy Policy applies to all personal data collected through the 21jili website, mobile browser, and any related services. It applies to registered players, users who browse without registering, and former account holders whose data is retained pursuant to legal obligations.

02

Data We Collect

21jili collects personal data through several channels: information you provide directly during registration and KYC, data generated by your use of the platform, and technical data collected automatically by our systems. Here is a full breakdown:

Category Data Collected When Collected
Registration Data Full legal name, date of birth, mobile number, email address, preferred username, password (hashed) Account registration
Identity (KYC) Government ID type and number, ID photos (front and back), selfie for liveness check First withdrawal / KYC verification
Financial Data GCash/Maya number, bank account name and number, transaction history, deposit and withdrawal amounts Deposits, withdrawals, cashier use
Gaming Activity Bets placed, games played, session duration, win/loss history, bonus redemptions Active play
Technical Data IP address, device type, browser, operating system, screen resolution, referring URL Every site visit
Communication Data Support chat transcripts, email correspondence, complaint records Customer support interactions
Preference Data Language preference, notification settings, responsible gaming limit settings Account settings updates

What we do not collect: 21jili does not collect sensitive personal information such as your religion, ethnicity, health records, sexual orientation, or political affiliations. We do not store full card numbers — card payments are processed by certified PCI-DSS compliant payment gateways that do not pass card details to 21jili.

03

How We Use Your Data

21jili uses your personal data for specific, legitimate purposes directly related to operating your account and complying with Philippine law. Here is a complete list of how your data is used:

  • Account creation and management: Processing your registration, maintaining your account, enabling login authentication, and managing your account settings.
  • Identity verification (KYC): Confirming your identity to meet PAGCOR licensing requirements and Philippine Anti-Money Laundering Council (AMLC) obligations before processing withdrawals.
  • Payment processing: Executing deposits and withdrawals via GCash, Maya, InstaPay, bank transfer, and other supported payment channels. Reconciling transactions and handling refunds.
  • Fraud prevention and security: Detecting unusual account activity, preventing unauthorised access, identifying multi-accounting, and complying with anti-fraud and anti-money laundering regulations.
  • Platform improvement: Analysing aggregated (anonymised) gaming and browsing behaviour to improve game selection, platform performance, and user interface design.
  • Customer support: Investigating and resolving support tickets, complaints, and disputes. Maintaining records of support interactions for quality assurance.
  • Responsible gaming: Monitoring gaming behaviour patterns to identify potential problem gambling indicators. Facilitating deposit limit changes, self-exclusion requests, and cooling-off periods.
  • Legal and regulatory compliance: Meeting reporting requirements to PAGCOR, AMLC, and the National Privacy Commission. Responding to lawful requests from Philippine law enforcement or courts.
  • Marketing communications (opt-in only): Sending promotional emails, SMS notifications about bonuses, or personalised offers — only if you have explicitly opted in to marketing communications during registration or via account settings.

Marketing opt-out: You can withdraw consent for marketing communications at any time by updating your notification preferences in your 21jili account dashboard, or by clicking the unsubscribe link in any marketing email. Opting out does not affect transactional communications such as deposit confirmations or withdrawal notifications.

21jili
04

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 21jili is required to have a lawful basis for processing your personal data. Different processing activities rely on different legal bases:

  • Contract performance: Processing necessary to provide the services you signed up for — account management, game access, payment processing, and customer support.
  • Legal obligation: Processing required to comply with Philippine law — KYC verification (PAGCOR requirement), transaction record-keeping (AMLC requirement), and data breach reporting (NPC requirement).
  • Legitimate interest: Processing for fraud prevention, platform security, and aggregated analytics — where 21jili's interest in secure, compliant operations does not override your privacy rights.
  • Consent: Processing for marketing communications and optional personalisation features — where you have given clear, specific, and freely-given consent that you may withdraw at any time.
05

Data Sharing

21jili does not sell your personal data to any third party. We do, however, share data with trusted parties in the following limited circumstances — all of which are governed by data processing agreements that require those parties to protect your data to the same standards as 21jili:

Payment Processors

GCash, Maya, bank networks, and card payment gateways receive your payment account details and transaction data as necessary to process deposits and withdrawals. These providers are independently regulated financial institutions operating under Bangko Sentral ng Pilipinas (BSP) oversight.

Identity Verification Services

Third-party KYC verification partners receive your identity documents and biometric data solely for the purpose of confirming your identity. These partners are certified and operate under strict data processing agreements with 21jili.

Game Software Providers

Certified third-party game suppliers (such as Pragmatic Play and Evolution Gaming) receive your player session data — which does not include financial information — for game delivery and fair-play auditing purposes.

Regulatory Authorities

21jili may be legally required to disclose certain player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or Philippine law enforcement agencies pursuant to lawful requests, court orders, or regulatory directives. 21jili complies with all lawful data requests from Philippine authorities.

International transfers: Where your data is processed by service providers outside the Philippines (for example, global game servers), 21jili ensures appropriate safeguards are in place in accordance with the Data Privacy Act and NPC guidelines. We only work with processors who can demonstrate adequate data protection standards.

06

Cookies & Tracking Technologies

21jili uses cookies and similar tracking technologies to operate the platform, remember your preferences, and improve your experience. A cookie is a small text file stored on your device when you visit 21jili. Here is how we use them:

  • Essential cookies: Required for the platform to function. These handle login sessions, security tokens, and shopping cart-equivalent features. You cannot opt out of these without losing access to your account.
  • Functional cookies: Remember your language preference, display settings, and responsible gaming notifications. These persist between sessions to avoid you having to reconfigure settings every time.
  • Analytics cookies: Collect anonymised data about how players navigate the platform — which pages are visited most, where users drop off, and how long sessions last. This data is used to improve the platform. No individual player is identified in analytics reports.
  • Security cookies: Help detect and prevent fraud, multi-accounting, and bot activity by analysing patterns across sessions and devices.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in or using certain platform features. 21jili does not use third-party advertising cookies or serve targeted advertisements based on your gaming behaviour to external ad networks.

07

Data Storage & Security

21jili stores all personal data on secure servers protected by multiple layers of technical and organisational security measures. Our security framework includes:

  • Encryption in transit: All data transmitted between your browser and 21jili's servers is encrypted using TLS 1.2 or higher. This prevents interception of data on public or shared networks.
  • Encryption at rest: Sensitive personal data stored in our databases — including KYC documents and payment account details — is encrypted using AES-256 encryption.
  • Password hashing: Your password is never stored in readable form. It is processed through a one-way cryptographic hash function, meaning even 21jili's database administrators cannot see your password.
  • Access controls: Access to personal data is restricted on a need-to-know basis. Staff members can only access the specific data required for their role. All data access is logged and auditable.
  • Two-factor authentication: Internal access to systems containing personal data requires multi-factor authentication. Players are encouraged to enable 2FA on their own accounts for additional protection.
  • Regular security audits: 21jili undergoes periodic third-party security assessments to identify and address vulnerabilities before they can be exploited.

Your responsibility: While 21jili implements robust security measures, players also have a role in protecting their accounts. Use a strong, unique password. Enable two-factor authentication. Never share your login credentials. Log out of shared devices. Contact 21jili support immediately if you suspect unauthorised access to your account.

08

Data Retention

21jili retains personal data only for as long as necessary to fulfil the purposes described in this policy and to comply with applicable Philippine legal requirements. Retention periods are as follows:

  • Account data (registration information): Retained for the lifetime of your account plus 5 years after account closure, as required by PAGCOR regulations and standard anti-money laundering record-keeping requirements.
  • KYC/identity documents: Retained for the duration of your account activity plus 5 years after closure. This is a legal requirement under Philippine AML regulations.
  • Transaction records (deposits, withdrawals, bets): Retained for 5 years from the date of each transaction. This satisfies both PAGCOR reporting requirements and the Anti-Money Laundering Act of 2001 (as amended).
  • Customer support records: Retained for 3 years from the date of the interaction. Used for dispute resolution, quality assurance, and regulatory reporting where applicable.
  • Marketing preference data: Retained until you withdraw consent or close your account, whichever is earlier.
  • Technical logs and security records: Retained for 90 days for operational purposes, then securely deleted.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with our internal data destruction policy and NPC guidelines.

21jili
09

Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 21jili. You may exercise any of these rights by contacting our Data Protection Officer at privacy@21jili.best:

Right to Access

Request a copy of all personal data 21jili holds about you, along with information on how it is being used. 21jili will respond within 15 days of a verified request.

Right to Correction

Request correction of inaccurate, outdated, or incomplete personal data. You can update most account information directly from your dashboard; formal corrections go through the DPO.

Right to Erasure

Request deletion of your personal data when it is no longer necessary for the purposes it was collected, or where you withdraw consent and no other legal basis applies. Note: data subject to legal retention periods cannot be deleted early.

Right to Object

Object to processing of your personal data for direct marketing at any time. You may also object to processing based on legitimate interest if you can demonstrate that your rights override 21jili's legitimate purposes.

Right to Data Portability

Request a copy of your personal data in a structured, machine-readable format. You may then transfer this data to another service provider of your choosing.

Right to Lodge a Complaint

If you are unsatisfied with how 21jili has handled a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines — the independent body responsible for enforcing the Data Privacy Act.

10

Children's Privacy

21jili's services are strictly for adults aged 21 years and above, in line with PAGCOR's minimum gambling age requirement. 21jili does not knowingly collect personal data from individuals under 21 years of age.

If we become aware that an account has been registered by a person under 21, we will immediately close the account, return any deposited funds to the original payment source, delete all personal data associated with the account to the extent permitted by law, and report the incident to PAGCOR if required.

Parents and guardians concerned about underage access to gambling platforms are encouraged to use device-level parental control software and to keep login credentials secure. If you believe a minor has registered a 21jili account, please contact us immediately at privacy@21jili.best.

11

Third-Party Links

The 21jili platform may contain links to third-party content or services — for example, links to payment providers or game suppliers during the payment or game launch process. 21jili is not responsible for the privacy practices of third-party websites or services.

When you leave the 21jili platform and access a third-party service, you should review that service's privacy policy independently. 21jili's Privacy Policy applies only to data collected through 21jili's own platform and services.

12

Changes to This Privacy Policy

21jili reviews and updates this Privacy Policy periodically to reflect changes in our data practices, Philippine legal requirements, or NPC guidance. The "Last Updated" date at the top of this page and in the hero section reflects when the policy was most recently revised.

For material changes — such as new categories of data collection, new sharing arrangements, or changes to your rights — 21jili will provide notice via email to your registered address and via an in-platform notification at least 7 days before the changes take effect.

Minor clarifications or corrections that do not affect your rights may be updated without advance notice. We encourage you to review this policy periodically. Continued use of the 21jili platform after a revised policy takes effect constitutes your acceptance of the changes.

13

Contact & Data Protection Officer

If you have any questions, concerns, or requests related to this Privacy Policy or to how 21jili handles your personal data, please contact our Data Protection Officer:

  • Email: privacy@21jili.best
  • Support Live Chat: Available 24/7 from your 21jili account dashboard
  • General Support: support@21jili.best

We aim to respond to all privacy-related requests and queries within 5 business days of receipt. For formal data subject requests (access, correction, erasure, portability), we will respond within 15 calendar days as required by the Data Privacy Act.

If you are not satisfied with our response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the government body responsible for enforcing the Data Privacy Act of 2012.

Privacy-first commitment: 21jili takes every privacy concern seriously. Our Data Protection Officer is not a rubber stamp — they have the authority and mandate to investigate concerns and implement changes where our data practices fall short. If something doesn't seem right about how we're handling your data, please reach out. We want to know.


FAQ
Common Privacy Questions at 21jili

Straight answers to what Filipino players most often ask about data and privacy

Only when legally required. As a PAGCOR-licensed operator, 21jili may be required to share transaction data with PAGCOR or the Anti-Money Laundering Council (AMLC) as part of regular regulatory reporting. 21jili will also comply with lawful requests from Philippine courts or law enforcement. We do not proactively share individual player data with government bodies beyond what is required by law.

Yes, with some limitations. You can request account closure and data deletion by contacting our Data Protection Officer at privacy@21jili.best. However, data subject to legal retention requirements — particularly transaction records and KYC documents required under PAGCOR and AML regulations — cannot be deleted early. These are retained for 5 years after account closure as mandated by Philippine law. Your real-money balance will be returned before closure.

KYC (Know Your Customer) verification is a legal requirement under PAGCOR's licensing conditions and the Philippine Anti-Money Laundering Act. Before 21jili can process your first withdrawal, we are required to confirm that you are who you say you are. This protects you — it prevents anyone else from withdrawing your winnings — and it protects the integrity of the platform. Your ID documents are encrypted, access-controlled, and never shared with third parties outside of verified KYC service providers bound by strict data processing agreements.

You can opt out of marketing communications in two ways: (1) Click the unsubscribe link at the bottom of any marketing email from 21jili — this takes effect within 24 hours; or (2) Log in to your 21jili account, go to account settings, and update your notification preferences. Opting out of marketing does not affect transactional notifications like deposit confirmations and withdrawal updates — those are necessary for account operation and will continue.

In the unlikely event that 21jili ceases operations, player data would be handled in accordance with PAGCOR's wind-down requirements and the Data Privacy Act. Player balances would be returned, and personal data would either be transferred to a successor entity (with player notification) or securely destroyed once legal retention periods are satisfied. 21jili would notify players via email of any material changes to how their data is managed in such a scenario.
🔒

Your Data is Safe at 21jili — Ready to Play?

21jili is a PAGCOR-licensed platform that takes data privacy as seriously as game fairness. Register with confidence — your personal information is protected under Philippine law and handled with the care it deserves.

🔒 256-bit SSL 🏛️ PAGCOR Licensed 📋 RA 10173 Compliant 🚫 Data Never Sold