hotjili Privacy Policy

hotjili ("we," "us," "our," or "the Company") operates the online gaming platform accessible at hotjili.biz (the "Platform"). This Privacy Policy ("Policy") governs the collection, processing, storage, disclosure, and protection of personal data provided to or collected by hotjili in connection with your use of the Platform and any related services.

This Policy is intended to comply with the Republic Act No. 10173 — Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC"). hotjili is also subject to applicable data protection requirements under PAGCOR's regulatory framework.

By creating an account, accessing, or using the hotjili Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not use the hotjili Platform.

hotjili collects the following categories of personal data from users of the Platform:

hotjili does not collect sensitive personal information beyond what is required for identity verification, age verification, and compliance with PAGCOR's anti-money laundering (AML) and Know Your Customer (KYC) requirements. hotjili does not collect biometric data beyond selfie images used for identity verification where required by regulation.

hotjili collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and gaming data collected automatically when you access or use the Platform, including through cookies, session tracking, and server logs.
• Third-party payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment service providers when you make a deposit or withdrawal. Note that hotjili receives transaction confirmation only — we do not receive or store your full payment credentials.
• Identity verification services: Where third-party KYC service providers are used to assist in verifying the identity and age of players, data may be shared with and received from such providers strictly for verification purposes.
• PAGCOR and regulatory bodies: hotjili may receive data from PAGCOR or other regulatory authorities in connection with self-exclusion registers, licensing compliance, or anti-money laundering obligations.

hotjili processes your personal data for the following purposes:

• Account creation and management: To register your hotjili account, verify your identity and age (21+ requirement), and maintain your account records.
• Service provision: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all Platform features to you.
• Regulatory compliance: To fulfill hotjili's obligations under PAGCOR licensing requirements, the Data Privacy Act of 2012, and applicable AML/KYC regulations. This includes retaining records as required by law and reporting to relevant authorities where required.
• Security and fraud prevention: To detect and prevent unauthorized account access, fraudulent transactions, bonus abuse, and other prohibited conduct under the Terms & Conditions.
• Financial transactions: To process deposits, withdrawals, and bonus credits accurately and in compliance with applicable financial regulations.
• Customer support: To respond to your support inquiries, resolve account issues, and maintain a record of communications for quality assurance.
• Responsible gaming: To monitor gaming activity for signs of problematic behavior, enforce deposit limits and self-exclusion requests, and support PAGCOR's responsible gaming requirements.
• Platform improvement: To analyze aggregate usage data (in anonymized or pseudonymized form) to improve the performance, reliability, and features of the hotjili Platform.
• Marketing communications: Where you have provided consent, to send you information about promotions, new games, and Platform updates. You may withdraw marketing consent at any time through your account settings or by contacting support.

hotjili processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform the contract between you and hotjili — i.e., to provide you access to the Platform and its gaming services.
• Legal obligation: Processing required to comply with hotjili's legal and regulatory obligations, including PAGCOR licensing requirements, AML obligations, and tax record-keeping.
• Legitimate interests: Processing for fraud prevention, security monitoring, and aggregate analytics — where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and any non-essential data uses, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

hotjili does not share your personal data with third parties except in the following circumstances:

• Payment service providers: Transaction data is shared with GCash, Maya, BPI, BDO, Metrobank, and other payment processors solely to facilitate deposit and withdrawal processing. These providers are bound by their own privacy policies and applicable data protection requirements.
• Game software providers: Gameplay data may be shared with game studios (including JILI Games and other content partners) to the extent necessary for game operation, certification, and technical support. No identity or financial data beyond what is technically required for session management is shared with game providers.
• Identity verification services: Where third-party KYC providers are engaged, identity data is shared solely for the purpose of age and identity verification.
• PAGCOR and regulatory authorities: hotjili is required by law to share data with PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other relevant Philippine government agencies upon lawful request or as required by regulation.
• Law enforcement: Where required by court order, subpoena, or other lawful process, hotjili will disclose personal data to law enforcement or judicial authorities.
• Business transfers: In the event of a merger, acquisition, or sale of substantially all of hotjili's assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties to whom hotjili discloses personal data are required to handle it in a manner consistent with this Policy and applicable Philippine data protection law. hotjili conducts due diligence on third-party data processors and requires appropriate data processing agreements where applicable.

hotjili retains your personal data for as long as necessary to fulfill the purposes set out in this Policy and to comply with applicable legal and regulatory requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AML regulations.
• Financial transaction data: Retained for a minimum of five (5) years following the transaction date, as required under Philippine financial record-keeping regulations.
• Gaming history: Retained for the duration of your account and for three (3) years following account closure.
• Support communications: Retained for three (3) years from the date of the communication unless a longer period is required for ongoing dispute resolution.
• Technical and log data: Retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, hotjili will securely delete or anonymize your personal data unless retention is required or permitted by law.

hotjili implements technical and organizational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the hotjili Platform
• Encryption of sensitive data fields (including passwords) in storage using industry-standard hashing algorithms
• Role-based access controls limiting internal access to personal data on a need-to-know basis
• Session management controls including automatic timeout after periods of inactivity
• Two-factor authentication (OTP) for account access and sensitive account actions
• Regular security assessments and vulnerability monitoring of the Platform infrastructure
• Incident response procedures for detecting, reporting, and managing personal data breaches

Notwithstanding these measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your hotjili login credentials. hotjili will never ask you for your password via email, live chat, or telephone. Do not share your credentials with anyone.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by hotjili:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed. This Policy fulfills that obligation.
• Right of access: You may request a copy of the personal data hotjili holds about you, including the purposes for which it is being processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. You may update basic account information directly through your hotjili account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to hotjili's legal and regulatory retention obligations.
• Right to object: You may object to the processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes.
• Right to data portability: You may request that hotjili provide your personal data in a structured, machine-readable format where technically feasible and where processing is based on your consent or a contract.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
• Right to file a complaint: If you believe hotjili has processed your personal data in violation of the Data Privacy Act, you may file a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact hotjili's Data Protection Officer (DPO) at [email protected]. hotjili will respond to all verified data subject requests within thirty (30) days.

hotjili uses cookies and similar tracking technologies on the Platform for the following purposes:

• Essential cookies: Required for basic Platform functionality including maintaining your login session, processing transactions, and ensuring Platform security. These cookies cannot be disabled without affecting core functionality.
• Analytical cookies: Used to collect aggregate, anonymized information about how users navigate the Platform — page views, session duration, feature usage. This data is used to improve Platform performance and user experience.
• Security cookies: Used to detect fraudulent activity, enforce session security, and identify unusual access patterns.

hotjili does not use third-party advertising or tracking cookies. No personal data is shared with advertising networks through the hotjili Platform. You may manage cookie preferences through your browser settings; however, disabling essential cookies will affect Platform functionality.

The hotjili Platform is strictly intended for individuals who are 21 years of age or older, as required under PAGCOR's regulations for online gambling in the Philippines. hotjili does not knowingly collect, process, or store personal data from individuals under the age of 21.

Age verification is a mandatory step in the hotjili registration and KYC process. Where hotjili becomes aware that personal data has been collected from a person under 21 years of age, that account will be immediately closed, all data associated with the account deleted (except where retention is required by law), and the incident reported to PAGCOR as required by regulation.

Parents and guardians who believe a minor may have accessed the hotjili Platform should contact support immediately at [email protected].

hotjili reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — particularly where they expand the scope of data collection or alter how data is used — hotjili will notify registered users via email or in-platform notification prior to the changes taking effect. Continued use of the hotjili Platform following notification of a material policy change constitutes acceptance of the revised Policy.