ybjili Privacy Policy

1. Introduction

ybjili ("ybjili," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform at ybjili.app. This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal information when you access or use the ybjili Platform, including our website, mobile interface, and all associated services.

This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). By registering an account on ybjili or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which together govern your use of the ybjili Platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for your personal information is:

• Entity: ybjili
• Platform: ybjili.app
• Contact: [email protected]
• Regulatory Framework: PAGCOR and the National Privacy Commission of the Philippines

As data controller, ybjili determines the purposes and means of processing your personal data. Where we engage third-party service providers to process data on our behalf, those parties act as data processors and are bound by contractual obligations to process your data only as instructed by ybjili and in accordance with applicable law.

3. Data We Collect

ybjili collects the following categories of personal data from players and visitors to the Platform:

We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required for responsible gaming assessments or as mandated by applicable law.

4. How We Collect Your Data

ybjili collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs.
• Third-party sources: Identity verification data from KYC providers; payment data from GCash, PayMaya, and banking partners; fraud signals from security service providers.
• Regulatory sources: Information received from PAGCOR or other regulatory authorities in connection with compliance obligations.

5. How We Use Your Data

ybjili uses your personal data for the following purposes:

• To create, verify, and manage your ybjili account.
• To process deposits, withdrawals, and other financial transactions in Philippine Peso (PHP).
• To verify your identity and age (21+) in compliance with PAGCOR requirements and the Data Privacy Act.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To provide customer support and respond to your enquiries.
• To administer bonuses, promotions, and loyalty programmes.
• To monitor gaming activity for responsible gaming purposes, including identifying signs of problem gambling.
• To personalise your experience on the Platform, including game recommendations.
• To send you transactional communications (account alerts, payment confirmations, security notices).
• To send you marketing communications where you have opted in to receive them.
• To comply with our legal and regulatory obligations under Philippine law.
• To improve, maintain, and secure the Platform.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, ybjili processes your personal data on the following legal bases:

• Consent: Where you have given clear, informed consent to the processing of your data for a specific purpose, such as receiving marketing communications.
• Contractual necessity: Where processing is necessary to perform our contract with you — i.e., to operate your ybjili account, process transactions, and deliver gaming services.
• Legal obligation: Where processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, anti-money laundering laws, and KYC requirements.
• Legitimate interests: Where processing is necessary for ybjili's legitimate business interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.

7. Data Sharing & Disclosure

ybjili does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, Pay Maya, BPI, BDO, Metrobank, and InstaPay partners, solely to process your financial transactions.
• KYC and identity verification providers: Third-party services that assist in verifying your identity and age in compliance with PAGCOR and anti-money laundering requirements.
• Fraud prevention and security services: Providers that help ybjili detect and prevent fraudulent activity, account takeovers, and money laundering.
• IT and platform infrastructure providers: Cloud hosting, database, and technical service providers who process data on our behalf under strict data processing agreements.
• Customer support tools: Live chat and helpdesk software providers used to manage player support interactions.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies where disclosure is required by law or court order.
• Professional advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where necessary for ybjili's legal and compliance functions.

All third-party processors engaged by ybjili are required to implement appropriate technical and organisational security measures and to process personal data only in accordance with ybjili's documented instructions.

8. Cookies & Tracking Technologies

ybjili uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following types of cookies may be set when you visit ybjili.app:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred games, and display options to personalise your experience.
• Analytics cookies: Collect anonymised data about how players use the Platform — which pages are visited most, where users drop off, and how features are used — to help us improve the service.
• Security cookies: Help detect and prevent fraudulent login attempts, bot activity, and other security threats.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Clearing cookies will log you out of your ybjili session.

ybjili does not use third-party advertising cookies or allow external ad networks to track your activity on the Platform.

9. Data Retention

ybjili retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR licensing conditions and Philippine anti-money laundering regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (as amended).
• Gaming history: Retained for a minimum of three (3) years for dispute resolution and responsible gaming monitoring purposes.
• Customer support communications: Retained for two (2) years from the date of the interaction.
• Marketing consent records: Retained for the duration of your consent and for one (1) year after withdrawal of consent.
• Technical and usage logs: Retained for up to twelve (12) months for security and platform optimisation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with ybjili's data disposal procedures. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes.

10. Data Security

ybjili implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ybjili Platform.
• Encryption at rest for sensitive data stored on ybjili's servers, including financial information and identity documents.
• Multi-factor authentication (MFA) options for player accounts to prevent unauthorised access.
• Role-based access controls ensuring that ybjili staff can only access personal data necessary for their specific job functions.
• Regular security audits and penetration testing conducted by independent security professionals.
• Intrusion detection systems and real-time monitoring for suspicious activity on the Platform.
• Staff training on data privacy and security obligations under Philippine law.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ybjili will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

While ybjili takes all reasonable steps to protect your data, no electronic transmission or storage system is completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

11. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ybjili:

• Right to be informed: You have the right to know what personal data ybjili collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data ybjili holds about you at any time.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ybjili's legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to ybjili's overriding legal or operational requirements.
• Right to data portability: You may request that ybjili provide your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ybjili has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact ybjili's Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond to all verified requests within thirty (30) calendar days. We may require proof of identity before processing your request.

12. Children's Privacy

The ybjili Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. ybjili does not knowingly collect personal data from persons under the age of 21.

If ybjili discovers or is notified that personal data has been collected from a person under 21, we will immediately close the associated account, delete the personal data in question, and return any deposits to the payment source where technically feasible.

If you are a parent or guardian and believe that your child has registered on the ybjili Platform, please contact us immediately at [email protected] so that we can take prompt action.

13. International Data Transfers

ybjili's primary operations and data storage are based in the Philippines. In some cases, personal data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or KYC verification services operating in other jurisdictions.

Where such transfers occur, ybjili ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organisations that provide an adequate level of data protection as recognised by the National Privacy Commission.
• Implementing contractual clauses in agreements with overseas processors that require them to protect your data to the same standard as required under Philippine law.
• Conducting due diligence on overseas processors to verify their security practices before engaging their services.

By using the ybjili Platform, you acknowledge and consent to the transfer of your personal data to overseas processors where necessary for the operation of the Platform, subject to the safeguards described above.

14. Changes to This Policy

ybjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the services we offer. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when the Policy was most recently revised. We encourage you to review this Policy periodically to stay informed about how ybjili protects your personal data.

Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree to the amended Policy, you must cease using the Platform and may request account closure by contacting our support team.

15. Contact & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or ybjili's data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Subject line: "Data Privacy Request" or "Privacy Complaint"
• Response time: We aim to acknowledge all privacy enquiries within 3 business days and resolve them within 30 calendar days.

If you are not satisfied with ybjili's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC can be reached through their official government channels.

For responsible gaming concerns, including self-exclusion requests, please visit our Responsible Gaming page.