Contents
- 1. Introduction
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect It
- 5. How We Use Your Data
- 6. Legal Basis
- 7. Who We Share Data With
- 8. Data Retention
- 9. Security Measures
- 10. Your Rights
- 11. Cookies
- 12. Minors
- 13. Policy Changes
- 14. Contact & DPO
1. Introduction
This Privacy Policy describes how xophjili ("we", "us", "our") collects, uses, stores, shares, and protects the personal information of players and visitors ("you") who use the xophjili platform at https://xophjili.net and any associated mobile interface.
xophjili takes privacy seriously. We operate in the Philippines and are committed to complying with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations as administered by the National Privacy Commission (NPC). We also apply internationally recognised data protection standards where relevant.
By registering an account or using the xophjili platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, please do not register or continue using xophjili. If you have questions before registering, contact us at support@xophjili.net — we're happy to explain anything in more detail.
This policy should be read alongside our Terms and Conditions and Responsible Gaming Policy, which together form the full framework governing your use of xophjili.
2. Data Controller
xophjili is the data controller responsible for the personal information collected through this platform. This means xophjili determines the purposes and means by which your personal data is processed. As data controller, xophjili is accountable for the compliance of its data processing activities with the Data Privacy Act of 2012.
Our designated Data Protection Officer (DPO) is responsible for overseeing xophjili's data protection strategy and ensuring compliance with applicable law. You can contact the DPO directly at: privacy@xophjili.net. This is the appropriate contact for any formal data privacy requests, concerns, or complaints.
3. Data We Collect
xophjili collects personal data that is necessary, relevant, and not excessive in relation to the purposes for which it is collected. Below is a breakdown of the categories of personal data we process.
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality | Yes – account registration |
| Contact Data | Mobile number, email address | Yes – account registration |
| Verification Data | Government-issued ID (front and back), selfie for liveness check, proof of address | Required before first withdrawal |
| Financial Data | Payment method type (GCash, Maya, bank), transaction amounts, deposit and withdrawal history | Yes – payment processing |
| Gaming Activity Data | Games played, bets placed, win/loss records, session duration, device used | Yes – platform operation and regulatory compliance |
| Technical Data | IP address, device type, operating system, browser type, cookies, time-zone | Yes – security and fraud prevention |
| Communication Data | Support chat logs, email correspondence, feedback submitted | Only when you contact us |
| Marketing Preferences | Whether you have opted in to promotional communications | Optional |
We do not collect sensitive personal information (as defined under the Data Privacy Act) such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation, except where specifically required for regulatory compliance — for example, problem gambling support programmes.
4. How We Collect Your Data
4.1 Directly From You
The majority of data xophjili holds about you comes directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or interact with promotions. You control what you submit at each of these points.
4.2 Automatically During Platform Use
When you use xophjili — whether browsing the site or actively playing — our systems automatically log technical data including your IP address, device identifiers, browser type, pages visited, session duration, and interaction patterns. This data is collected using cookies and similar tracking technologies (see Section 11) and is used primarily for security monitoring, fraud detection, and platform performance optimisation.
4.3 From Third Parties
In certain circumstances, xophjili may receive personal data about you from third parties, including:
- Payment processors (GCash, Maya, banks) — confirmation of transaction status and payment method ownership
- Identity verification services — validation of document authenticity and identity matching
- Fraud prevention providers — device reputation scores and risk signals
- Regulatory bodies — mandatory data sharing required by Philippine gaming and financial regulations
5. How We Use Your Personal Data
xophjili uses personal data only for specific, legitimate purposes. We do not use your data in ways you would not reasonably expect. The primary purposes are:
5.1 Account Management and Service Delivery
To create and manage your xophjili account, process your deposits and withdrawals in Philippine Peso, provide access to games and betting markets, process bets and settle winnings, and respond to your support queries. Without this processing, xophjili cannot function as a gaming platform for you.
5.2 Identity Verification and KYC Compliance
Philippine gaming regulations require xophjili to verify the identity of players before processing withdrawals and at other trigger points. This involves matching the information you provide against government-issued identification. KYC (Know Your Customer) processing is a legal requirement, not optional.
5.3 Fraud Prevention and Security
xophjili analyses technical and behavioural data to detect and prevent fraud, account takeovers, money laundering, bonus abuse, multi-accounting, and other prohibited activities. This analysis uses automated systems supplemented by manual review in cases where automated flags require human assessment.
5.4 Regulatory Compliance and Reporting
As a licensed Philippine gaming operator, xophjili is required to maintain records of gaming activity, large transactions, and player identity for regulatory reporting purposes. Certain data must be retained for legally mandated periods regardless of account status.
5.5 Responsible Gaming
Gaming activity data is used to monitor for behavioural patterns associated with problem gambling — such as rapid increase in deposit frequency, extended session durations, or escalating bet sizes following losses. Where concerning patterns are identified, xophjili may proactively contact the player and offer responsible gaming tools. This processing is in the player's interest.
5.6 Platform Improvement
Aggregated and anonymised data about how players interact with xophjili — which games are most popular, where navigation problems occur, how long registration takes — is used to improve the platform. This analysis does not identify individual players.
5.7 Marketing Communications (With Consent)
If you have opted in to promotional communications, xophjili may send you information about new games, bonuses, promotions, and events relevant to your interests as a Philippine player. You can withdraw marketing consent at any time from your account settings or by contacting support. Withdrawal of marketing consent does not affect the operation of your account.
6. Legal Basis for Processing
Under the Data Privacy Act of 2012, xophjili processes personal data on the following legal bases:
- Contractual necessity: Processing required to fulfil the agreement between you and xophjili — account creation, payment processing, game access, and bet settlement.
- Legal obligation: Processing required to comply with Philippine gaming regulations, anti-money laundering laws, tax reporting requirements, and orders from regulatory bodies.
- Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics, where such interests do not override your fundamental rights.
- Consent: Processing for marketing communications and optional features — only where you have given clear, informed, and freely given consent. You may withdraw consent at any time.
8. Data Retention
xophjili retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to any longer retention period required by law.
| Data Category | Retention Period | Reason |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | Regulatory and AML compliance |
| Transaction and financial records | 10 years from transaction date | Philippine tax and financial regulation |
| Gaming activity logs | 5 years from the relevant session | Dispute resolution and regulatory requirements |
| Support communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Marketing preferences and logs | Until consent withdrawal + 1 year | Consent documentation |
| Technical/security logs (IP, device) | 12 months from collection | Fraud prevention and security monitoring |
When data is no longer required, xophjili securely deletes or anonymises it in a manner that prevents reconstruction or re-identification. Anonymised aggregate data may be retained indefinitely for platform analytics.
9. Security Measures
xophjili implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and xophjili's servers — the same standard used by major Philippine banks
- Encryption at rest for sensitive stored data including identity documents and financial records
- Access controls ensuring that only authorised xophjili personnel can access personal data, on a strict need-to-know basis
- Multi-factor authentication for internal systems access by xophjili staff
- Regular security audits and penetration testing by independent security specialists
- Fraud monitoring systems operating continuously to detect unusual account activity
- Incident response procedures ensuring rapid containment and notification in the event of a data breach
While xophjili takes all reasonable steps to secure your data, no system is completely impenetrable. You also have a responsibility to protect your account by using a strong, unique password and not sharing your login credentials with anyone. If you suspect your account has been compromised, contact support immediately at support@xophjili.net.
10. Your Data Rights
Under the Data Privacy Act of 2012, you have the following rights over your personal data held by xophjili. To exercise any of these rights, contact our DPO at privacy@xophjili.net with your registered account details and a description of your request.
Right to Access
Request a copy of the personal data xophjili holds about you, along with information about how it is used.
Right to Correction
Request correction of inaccurate or incomplete personal data held in your xophjili account.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected — subject to legal retention requirements.
Right to Object
Object to processing of your data for direct marketing or on grounds relating to your particular situation where processing is based on legitimate interests.
Right to Data Portability
Receive your personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.
Right to Withdraw Consent
Where processing is based on your consent (e.g., marketing emails), you may withdraw that consent at any time. Withdrawal does not affect prior lawful processing.
xophjili will respond to verified data rights requests within 30 calendar days. Where a request is complex or numerous, this may be extended by a further 60 days with notice. If you are unsatisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
11. Cookies and Similar Technologies
xophjili uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored in your browser that allows a website to recognise your device across visits.
11.1 Types of Cookies We Use
- Strictly Necessary Cookies: Required for the platform to function — session authentication, security tokens, and preference storage. These cannot be disabled without breaking core functionality.
- Performance Cookies: Anonymous data about how players navigate xophjili — which pages are visited most, where errors occur, and how fast pages load. Used to improve the platform.
- Functional Cookies: Remember your preferences — language settings, game filters, and display options — across sessions.
- Security Cookies: Help detect and prevent fraudulent access, bot activity, and account takeover attempts.
11.2 Managing Cookies
You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will prevent you from logging in and using xophjili. Disabling performance or functional cookies will not affect login but may reduce your experience on the platform. Most modern mobile browsers (Chrome, Safari) allow you to clear or block cookies from individual sites.
12. Minors
xophjili is strictly prohibited for individuals under 21 years of age. xophjili does not knowingly collect personal data from anyone under 21. If we discover that a player is under 21, their account will be closed immediately and any data collected will be deleted, except where retention is required by law or to prevent future underage registration attempts.
If you are a parent or guardian and believe your child has registered on xophjili, please contact us immediately at privacy@xophjili.net with relevant details so we can take prompt action.
13. Changes to This Privacy Policy
xophjili may update this Privacy Policy from time to time to reflect changes in our data practices, Philippine law, or regulatory requirements. When material changes are made, we will notify registered players via email and/or a prominent platform notice — typically with at least 7 days' advance notice before the changes take effect.
The effective date at the top of this policy indicates when it was last updated. We recommend reviewing this page periodically. Your continued use of xophjili after an update constitutes acceptance of the revised policy. The current version is always accessible at https://xophjili.net/privacy-policy.
14. Contact & Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or xophjili's handling of your personal data, please use the contact details below.
Response time for formal data rights requests: within 30 calendar days of receiving a verified request. We aim to respond to general enquiries via email within 48 hours.