1Overview and Scope
This Privacy Policy applies to all personal data collected and processed by DMJILI through the website at dmjili.best and any related mobile or browser-based interfaces (collectively, the "Platform"). It covers all registered players, visitors, and any person who interacts with DMJILI services.
DMJILI acts as the personal information controller for the data described in this policy. This means we are responsible for deciding how your data is collected, stored, used, and protected. Our processing practices are designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.
By creating an account on DMJILI or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described here. If you do not agree, please refrain from using DMJILI.
2What Personal Data DMJILI Collects
DMJILI collects different categories of personal data depending on how you interact with the Platform. Here is a breakdown of the main categories:
Identity Data
Your full legal name, date of birth, gender, and nationality as provided during registration or KYC verification.
Contact Data
Your email address, mobile number, and Philippine residential address. Used for account verification, support, and transactional notifications.
Financial Data
Transaction history, deposit and withdrawal amounts, associated payment method references (e.g., masked GCash number, bank account partial details). Full card or wallet numbers are never stored by DMJILI.
Gaming Activity Data
Games played, bets placed, session duration, win/loss history, and bonus usage. Collected to run the Platform and meet licensing obligations.
Device & Technical Data
IP address, device type, operating system, browser version, and screen resolution. Used for fraud detection, security monitoring, and optimizing mobile performance.
Verification Documents
Government-issued Philippine ID documents (e.g., passport, driver's license, UMID) and proof of address submitted during KYC. Stored securely and used solely for identity verification.
3How DMJILI Collects Your Data
DMJILI collects personal data through several methods, all of which are within your reasonable expectation as a platform user:
3.1 Directly From You
The majority of personal data we hold is provided directly by you — during account registration, when completing KYC verification, when you contact support, or when you fill in any form on the Platform. This is the primary collection method.
3.2 Automatically During Platform Use
When you visit or use DMJILI, certain technical data is collected automatically through cookies, server logs, and standard web technologies. This includes your IP address, session timing, pages visited, and device characteristics. See Section 8 for full details on cookies.
3.3 From Third-Party Verification Providers
When you complete KYC verification, DMJILI works with licensed identity verification service providers who may return confirmation data (e.g., whether a submitted document was verified successfully). These providers are contractually bound to handle your data only for the purpose of verification and are not permitted to use it for any other purpose.
3.4 From Payment Processors
When you deposit or withdraw through GCash, Maya, a bank transfer, or a card, the payment processor may provide DMJILI with transaction reference data, status confirmations, and partial payment method identifiers. Full payment credentials are processed exclusively by the payment provider and are never transmitted to or stored by DMJILI.
4Why DMJILI Uses Your Personal Data
DMJILI only processes personal data where there is a lawful basis for doing so under the Data Privacy Act of 2012. The purposes and corresponding legal bases are:
- Account creation and management — necessary to perform our contract with you as a registered player
- Identity verification (KYC) — required by our licensing conditions and anti-money laundering obligations
- Processing deposits and withdrawals — necessary to deliver the service you have requested
- Fraud detection and account security — legitimate interest in protecting the Platform and all players
- Customer support — necessary to respond to your queries and resolve disputes
- Responsible gaming tools — legal obligation and legitimate interest in protecting player welfare
- Regulatory reporting — legal obligation under Philippine gaming and financial regulations
- Improving the Platform — legitimate interest in understanding how the Platform is used so we can make it better for everyone
- Promotional communications — only with your explicit consent; you can withdraw this consent at any time
5Who DMJILI Shares Your Data With
DMJILI does not sell, rent, or trade your personal data to third parties for commercial purposes — full stop. We share data only in the following limited circumstances:
5.1 Service Providers
We work with carefully selected third-party companies to help run the Platform — including payment processors (e.g., GCash/Maya infrastructure partners), identity verification services, cloud hosting providers, and customer support tools. These providers act as data processors on behalf of DMJILI and are contractually required to:
- Handle your data only as instructed by DMJILI
- Implement appropriate security measures
- Not use your data for their own purposes
- Delete or return data at the end of the service relationship
5.2 Regulatory and Legal Disclosure
DMJILI may be required to disclose personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the National Privacy Commission, law enforcement agencies, financial intelligence units, or courts where required by law. In such cases, DMJILI will comply while sharing only the minimum data necessary to satisfy the legal requirement.
5.3 Business Transfers
In the event of a merger, acquisition, or sale of DMJILI's business, personal data held by the Platform may be transferred to the acquiring entity. In such cases, DMJILI will notify players before their data is transferred and subject to a different privacy policy.
6How DMJILI Protects Your Data
Protecting the personal data of DMJILI players is an operational priority, not an afterthought. The following security measures are in place:
256-bit SSL Encryption
All data transmitted between your device and DMJILI's servers is encrypted using TLS/SSL, the same standard used by Philippine banks.
Encrypted Storage
Sensitive data — including KYC documents and financial records — is encrypted at rest on DMJILI's secure servers. Access is strictly controlled.
Fraud Monitoring
Automated systems monitor login activity, transaction patterns, and device fingerprints for signs of unauthorized access or account compromise.
Access Controls
Only authorized DMJILI staff with a legitimate need can access personal data. Access is logged, reviewed, and subject to strict internal policies.
Two-Factor Authentication
Players are encouraged — and in some cases required — to enable 2FA on their DMJILI account, adding a second verification layer beyond the password.
Regular Security Reviews
DMJILI conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
While DMJILI takes all reasonable technical and organizational measures to protect your data, no internet-based system can guarantee 100% security against all threats. In the event of a personal data breach that poses risk to players, DMJILI will notify affected individuals and the National Privacy Commission as required by Philippine law.
7How Long We Keep Your Data
DMJILI retains personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law. Key retention periods are:
- Active account data: Retained for the lifetime of your account plus a minimum of 5 years after closure, as required for gaming and anti-money laundering regulatory compliance
- Transaction records: Retained for 7 years following each transaction, in line with Philippine financial record-keeping requirements
- KYC documents: Retained for the duration of the account relationship and 5 years thereafter
- Support interaction logs: Retained for 3 years from the date of the interaction
- Marketing consent records: Retained until consent is withdrawn plus a reasonable period for legal reference
When data is no longer required, it is deleted or irreversibly anonymized in a manner that prevents reconstruction or re-identification.
8Cookies and Tracking Technologies
DMJILI uses cookies and similar technologies to operate the Platform, remember your preferences, ensure session security, and understand how the site is being used. Here is a breakdown of the types of cookies in use:
| Cookie Type | Purpose | Duration | Required? |
|---|---|---|---|
| Session Cookies | Maintain your login state and keep your session active while using the Platform | Session only | Required |
| Security Cookies | Detect and prevent fraudulent login attempts, CSRF attacks, and unauthorized access | 30 days | Required |
| Preference Cookies | Remember your language, display settings, and lobby sort preferences | 1 year | Optional |
| Analytics Cookies | Aggregate, anonymized data on how pages are navigated and which features are most used — helps us improve the Platform | 13 months | Optional |
You can manage cookie preferences through your browser settings. Disabling required cookies will impair Platform functionality — you may not be able to log in or maintain a session without them. Optional cookies can be declined without affecting your ability to play.
9Your Data Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by DMJILI. These rights apply regardless of where in the Philippines you are located.
Right to Be Informed
You have the right to know what personal data DMJILI collects, how it is used, with whom it is shared, and for how long it is retained. This Privacy Policy fulfills that obligation.
Right to Access
You can request a copy of the personal data DMJILI holds about you at any time. We will provide this within 15 business days of a verified request at no charge.
Right to Rectification
If any of the personal data we hold is inaccurate or outdated, you have the right to request correction. For most fields, you can update your details directly in your DMJILI account settings.
Right to Erasure
You may request deletion of your personal data when it is no longer necessary for the purpose it was collected — subject to DMJILI's legal data retention obligations under gaming and AML regulations.
Right to Object
You can object to the processing of your personal data for direct marketing at any time. You can also object to processing based on legitimate interests, subject to DMJILI demonstrating compelling grounds.
Right to Data Portability
You may request your personal data in a commonly used, machine-readable format so it can be transferred to another service or stored by you directly.
To exercise any of these rights, send a written request to our Data Protection Officer at privacy@dmjili.best. We will verify your identity before processing the request and respond within the timeframes required by Philippine law. If you believe your rights have been violated, you also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
10Children and Minors
DMJILI is strictly an adult platform. Registration and use of the Platform is prohibited for anyone under 21 years of age. DMJILI does not knowingly collect personal data from individuals under 21. If we discover that a minor has registered an account, the account will be immediately suspended and any data associated with it deleted in accordance with our legal obligations.
If you are a parent or guardian and believe a minor in your care has registered on DMJILI, please contact us immediately at support@dmjili.best. We will act promptly.
11Changes to This Privacy Policy
DMJILI may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. When material changes are made, we will notify active players by email and/or through a notice on the Platform at least 7 days before the changes take effect.
The current version of this policy is always accessible at dmjili.best/privacy-policy, and the effective date at the top of the page reflects when it was last updated. We encourage you to review the policy periodically. Continued use of DMJILI after a change takes effect constitutes your acceptance of the revised policy.
12Contact Us and Our Data Protection Officer
DMJILI has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. The DPO is responsible for overseeing our data protection strategy and ensuring compliance with RA 10173.
Email: privacy@dmjili.best
General support: support@dmjili.best
Response time: within 5 business days for privacy-related queries
When contacting the DPO, please include your registered email address, a clear description of your request or concern, and any relevant account reference. Verification of your identity may be required before we can act on certain requests.
If you are not satisfied with DMJILI's response to your privacy concern, you may escalate the matter to the National Privacy Commission of the Philippines, which provides a formal complaints process for individuals exercising their rights under RA 10173.