mojili Casino — Privacy Policy

1. Data Controller

mojili Casino is the data controller responsible for the personal data collected through the mojili platform. As data controller, mojili determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

mojili has designated a Data Protection Officer (DPO) who is responsible for overseeing data protection compliance and serving as the point of contact for data subjects and the National Privacy Commission. You may contact mojili's DPO at [email protected] with the subject line "Data Privacy Inquiry."

2. Personal Data We Collect

2.1 Data You Provide Directly

When you register an account, complete KYC verification, make deposits or withdrawals, or contact mojili's support team, you provide us with personal data including:

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify that you are 21 years of age or older);
• Philippine mobile number and email address;
• Residential address in the Philippines;
• Government-issued identification documents (e.g., PhilSys National ID, Driver's License, Passport, SSS/GSIS ID, Voter's ID);
• Payment information, including GCash account details, PayMaya account details, and Philippine bank account details (BPI, BDO, Metrobank, UnionBank, and others);
• Source of funds documentation where required for KYC compliance;
• Communications you send to mojili's support team, including chat transcripts and email correspondence.

2.2 Data Collected Automatically

When you access and use the mojili platform, we automatically collect certain technical and usage data, including:

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used;
• Game history, wagering activity, and transaction records;
• Login timestamps and access logs;
• Cookie identifiers and similar tracking technologies (see Section 9).

2.3 Data from Third Parties

mojili may receive personal data about you from third-party sources in limited circumstances, including identity verification service providers used for KYC purposes, payment processors for transaction verification, and fraud prevention and anti-money laundering screening services.

3. How We Use Your Personal Data

mojili processes your personal data for the following purposes:

• Account Registration and Management: To create and maintain your mojili player account, verify your identity, and manage your account settings and preferences;
• Age and Eligibility Verification: To confirm that you are at least 21 years of age and legally eligible to use mojili's gaming services under Philippine law;
• KYC and AML Compliance: To fulfill mojili's legal obligations under Philippine anti-money laundering regulations, including the Anti-Money Laundering Act (AMLA) and its amendments;
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers in Philippine Peso;
• Gaming Services: To provide access to mojili's game library, record game outcomes and transaction history, and resolve disputes;
• Customer Support: To respond to your inquiries, resolve complaints, and provide technical assistance;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion;
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security incidents;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided your consent to receive such communications;
• Platform Improvement: To analyze usage patterns, conduct research, and improve the mojili platform's features and user experience.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, mojili processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of the contract between you and mojili, including account management, payment processing, and the provision of gaming services;
• Legal Obligation: Processing required to comply with mojili's legal obligations under Philippine law, including KYC verification, AML compliance, age verification, and regulatory reporting;
• Legitimate Interests: Processing necessary for mojili's legitimate interests, including fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your rights and interests;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including the sending of marketing communications and the use of non-essential cookies.

5. Data Sharing & Third Parties

mojili does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Processors: GCash (GXI), PayMaya (Voyager Innovations), and Philippine banking partners for the processing of deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and identity verification service providers used to verify your identity and age in compliance with Philippine regulations;
• Game Software Providers: Game developers and live dealer studios whose games are available on the mojili platform may receive limited session data necessary for game operation;
• IT and Cloud Service Providers: Hosting, cloud storage, and IT infrastructure providers who process data on mojili's behalf under strict data processing agreements;
• Regulatory Authorities: The Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities where disclosure is required by law;
• Fraud Prevention Services: Third-party fraud detection and prevention service providers used to protect the integrity of the mojili platform.

6. Data Retention

mojili retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and KYC Data: Retained for a minimum of five (5) years from the date of account closure, in compliance with Philippine AML regulations and PAGCOR requirements;
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act;
• Game History: Retained for a minimum of three (3) years from the date of each game session for dispute resolution and regulatory audit purposes;
• Customer Support Records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution;
• Marketing Consent Records: Retained for the duration of your account and for two (2) years following account closure or withdrawal of consent, whichever is later;
• Technical and Usage Logs: Retained for up to twelve (12) months for security monitoring and platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with mojili's data disposal procedures.

7. Data Security

mojili implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the mojili platform;
• Encryption at rest for sensitive personal data, including identity documents and payment information;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security vulnerability assessments and penetration testing;
• Multi-factor authentication requirements for administrative access to systems containing personal data;
• Incident response procedures for the detection, containment, and notification of personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mojili will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with the requirements of the Philippine Data Privacy Act.

While mojili takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the security of your mojili account credentials and for notifying mojili immediately if you suspect any unauthorized access to your account.

8. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by mojili:

• Right to be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy;
• Right of Access: The right to obtain confirmation of whether mojili holds personal data about you, and to receive a copy of that data in a commonly used electronic format;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held by mojili. You may update most account information directly through your mojili account settings;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mojili's legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on mojili's legitimate interests;
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that mojili has processed your personal data in violation of the Data Privacy Act.

9. Cookies & Tracking Technologies

mojili uses cookies and similar tracking technologies to enhance your experience on the platform, remember your preferences, and analyze how the platform is used. The following categories of cookies are used:

• Essential Cookies: Strictly necessary for the mojili platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled;
• Functional Cookies: Used to remember your preferences, such as your preferred language, display settings, and responsible gaming limits. Disabling these cookies may affect your platform experience;
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the mojili platform, helping us identify areas for improvement. These cookies do not identify you personally;
• Marketing Cookies: Used to deliver relevant promotional content based on your interests and platform activity, where you have consented to receive marketing communications.

You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the mojili platform. For more information on managing cookies, refer to your browser's help documentation.

10. Minors & Age Restriction

mojili Casino is strictly intended for players aged 21 years and above. mojili does not knowingly collect personal data from individuals under the age of 21. If mojili becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to mojili, please contact us immediately at [email protected] so that we can take appropriate action.

11. Changes to This Privacy Policy

mojili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. Where changes are material, mojili will notify registered players via the email address or mobile number associated with their account at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this document indicates when the Privacy Policy was most recently revised. Your continued use of the mojili platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how mojili protects your personal data.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or mojili's data processing practices, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.