At 28jili, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have as a Filipino player under the Data Privacy Act of 2012.
🔐 Our Commitment
Six pillars that define how we handle your personal information on the 28jili platform.
28jili processes your personal data in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the regulations issued by the National Privacy Commission (NPC).
All data transmitted between your device and 28jili is protected by TLS encryption. Sensitive data stored on our servers — including payment details and identity documents — is encrypted at rest using industry-standard protocols.
28jili does not sell, rent, or trade your personal information to third-party marketers or data brokers. Your data is used solely to operate your account, process transactions, and improve your experience on the platform.
We collect only the data we actually need. Every piece of information we ask for has a specific, documented purpose — from verifying your identity to processing your GCash withdrawal. No unnecessary data collection.
As a data subject under Philippine law, you have the right to access, correct, delete, and port your personal data. 28jili provides clear channels to exercise all of these rights without unnecessary friction.
This Privacy Policy is written in plain English so you know exactly what is happening with your data. No hidden clauses, no vague language. If something changes, we will notify you before the change takes effect.
This Privacy Policy is issued by the operator of the 28jili online gaming platform, accessible at https://28jili.app (referred to in this document as "28jili," "we," "us," or "our"). 28jili operates as a personal information controller under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") with respect to the personal data of players and visitors to the Platform.
This Privacy Policy applies to all personal data collected through the 28jili website, mobile interface, customer support channels, and any other touchpoint through which you interact with 28jili. It should be read together with our Terms & Conditions, which govern your use of the Platform.
Scope: This policy covers all personal data collected from players located in the Philippines. If you access 28jili from outside the Philippines, this policy still applies to the extent permitted by applicable law.
28jili collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are described below.
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number, selfie / photo for KYC | Account registration, age verification, KYC compliance |
| Contact Data | Philippine mobile number, email address, city / province of residence | Account communication, OTP delivery, support |
| Financial Data | GCash number, PayMaya number, bank account details, transaction history | Processing deposits and withdrawals, fraud prevention |
| Gaming Data | Game history, bet amounts, win/loss records, session duration, bonus usage | Platform operation, responsible gaming monitoring, dispute resolution |
| Technical Data | IP address, device type, browser type, operating system, login timestamps | Security, fraud detection, platform optimization |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Customer support, quality assurance, dispute resolution |
We do not collect special categories of personal data (such as health data, political opinions, or religious beliefs) unless you voluntarily provide such information in the context of a responsible gaming self-assessment or support request, in which case it is handled with the highest level of care and used solely for the stated purpose.
28jili collects personal data through the following channels:
The majority of the personal data we hold is provided directly by you when you register a 28jili account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in a promotion. You are always informed at the point of collection what data is being requested and why.
When you access and use the 28jili Platform, certain technical data is collected automatically by our systems. This includes your IP address, device identifiers, browser type, pages visited, session duration, and in-game activity. This data is collected using cookies, web beacons, and server logs as described in Section 7 of this Policy.
In some cases, 28jili receives personal data from trusted third parties, including:
28jili uses your personal data only for specific, documented purposes. The table below sets out the primary purposes for which we process your data and the corresponding legal basis under the DPA.
We use your identity and contact data to create and maintain your 28jili account, verify your identity, authenticate your logins, and communicate important account-related information such as transaction confirmations, security alerts, and policy updates.
Your financial data is used to process deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card. All transactions are conducted in Philippine Peso (PHP). We retain transaction records as required by Philippine financial regulations and PAGCOR compliance obligations.
As an operator subject to PAGCOR oversight, 28jili is required to collect and retain certain personal data for KYC, AML, and responsible gaming compliance purposes. This includes verifying that all players are at least 21 years of age and are not on any self-exclusion or sanctions list.
We process technical and identity data to detect and prevent fraudulent activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct as defined in our Terms & Conditions. This processing is essential to protect both 28jili and our player community.
Communications data — including support chat logs and email correspondence — is used to resolve your queries, investigate complaints, and improve the quality of our support services. Support interactions may be recorded for quality assurance purposes.
Aggregated and anonymized gaming and technical data is used to analyze Platform performance, identify popular games, optimize user experience, and develop new features. Where possible, this analysis is conducted on anonymized datasets that cannot be linked back to individual players.
With your consent, 28jili may send you promotional communications about new games, bonuses, and special offers via SMS or push notification to your registered mobile number. You may withdraw your consent to marketing communications at any time through your account settings or by contacting support.
Under the Philippine Data Privacy Act of 2012, 28jili processes your personal data on the following legal bases:
💡 Note: Where we rely on legitimate interests as our legal basis, we conduct a balancing test to ensure our interests do not override your fundamental rights. You may request details of this assessment by contacting our Data Protection Officer.
28jili does not sell your personal data. We share your data only in the limited circumstances described below, and only with parties who are contractually bound to handle it in accordance with the DPA and this Privacy Policy.
We engage trusted third-party service providers to support the operation of the 28jili Platform. These include KYC and identity verification providers, payment processors (GCash, PayMaya, and banking partners), cloud hosting providers, customer support platform operators, and analytics providers. All service providers are subject to data processing agreements that restrict their use of your data to the specific services they provide to 28jili.
28jili may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. We will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of all or substantially all of 28jili's assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity before your data is transferred.
We will share your personal data with any other third party only with your explicit prior consent, which you may withdraw at any time.
28jili uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session, and analyze usage patterns. The types of cookies we use are described below.
You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect the functionality of the 28jili Platform. For analytics and marketing cookies, you may opt out through your account settings.
28jili retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulation. The general retention periods we apply are as follows:
When personal data is no longer required, it is securely deleted or anonymized in accordance with our data disposal procedures.
28jili implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:
Your role in security: While 28jili takes extensive measures to protect your data, you also play an important role. Keep your 28jili login credentials confidential, use a strong and unique password, and never share your OTP with anyone — including people claiming to be 28jili staff.
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 28jili. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.
28jili will respond to all data subject requests within thirty (30) days of receipt. In complex cases, we may extend this period by a further thirty (30) days, in which case we will notify you of the extension and the reason for it.
The 28jili Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law governing casino-style gaming. We do not knowingly collect personal data from individuals under the age of 21.
During registration, all players are required to confirm that they are at least 21 years old and to submit a government-issued ID for age verification. If 28jili discovers that personal data has been collected from a player who is under 21, the account will be immediately suspended, the data will be deleted, and any balance will be withheld pending investigation.
If you are a parent or guardian and believe that a minor has registered a 28jili account, please contact our support team immediately so we can take appropriate action.
28jili primarily stores and processes your personal data on servers located within or serving the Philippines. In some cases, personal data may be transferred to and processed by service providers located in other countries — for example, cloud infrastructure providers or KYC verification platforms with global operations.
Where such transfers occur, 28jili ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to apply data protection standards equivalent to those required by the Philippine DPA. We will not transfer your personal data to a country that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate safeguards.
28jili reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to you via your registered mobile number or email address, or by prominent notice on the Platform, at least seven (7) days before the changes take effect.
The "Last Updated" date at the top of this Policy indicates when it was most recently revised. We encourage you to review this Policy periodically to stay informed about how 28jili protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 28jili handles your personal data, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing 28jili's compliance with the Philippine Data Privacy Act and is your primary point of contact for all data privacy matters.
If you are not satisfied with our response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the competent supervisory authority for data protection matters in the Philippines.
💡 For responsible gaming concerns, including self-exclusion requests and deposit limit adjustments, please visit our Responsible Gaming page or contact our 24/7 support team.
🚀 Play With Confidence
28jili is built for Filipino players who value both great gaming and genuine privacy. GCash deposits, live casino, slots, bingo — all on a platform that takes your data as seriously as your winnings.
21+ only · DPA 2012 compliant · GCash & PayMaya accepted · ₱100 minimum deposit