epicjili Privacy Policy

1. Scope and Application

This Privacy Policy (hereinafter "Policy") applies to all personal information collected, processed, stored, and disclosed by epicjili (hereinafter "epicjili", "we", "us", or "our") in connection with your use of the online gaming platform operated at epicjili.net and any associated mobile or web-based applications.

This Policy applies to all registered members, prospective registrants, and visitors to the epicjili platform located in the Philippines. It covers personal data collected through account registration, gameplay activity, payment processing, customer support interactions, and technical platform operations.

This Policy is incorporated by reference into the epicjili Terms and Conditions and should be read in conjunction with those Terms. By registering an account or continuing to use the epicjili platform, you acknowledge that you have read, understood, and agreed to the data processing practices described in this Policy.

2. Data Controller Identity

For the purposes of the Philippine Data Privacy Act of 2012, epicjili is the personal information controller responsible for the processing of your personal data collected through the epicjili platform. epicjili determines the purposes and means of processing your personal information as described in this Policy.

epicjili has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with RA 10173. The DPO can be contacted using the details provided in Section 16 of this Policy.

Where epicjili engages third-party service providers (payment processors, identity verification providers, analytics vendors) to assist in platform operations, those providers act as personal information processors under epicjili's instruction and are bound by data processing agreements that restrict their use of your data to the purposes specified herein.

3. Information We Collect

epicjili collects personal information that is necessary for the specific purposes outlined in Section 5 of this Policy. We do not collect personal information beyond what is required for those purposes. The categories of personal information we process include:

• Identity and Verification Data: Full legal name, date of birth, nationality, government-issued Philippine ID type and number, and photographic identification — collected for KYC compliance and age verification.
• Contact Information: Philippine mobile number, email address — used for account authentication, security OTPs, and service communications.
• Financial and Transaction Data: Payment method identifiers (GCash account reference, bank account details), deposit and withdrawal records, transaction amounts, timestamps — processed for payment execution and AMLA compliance.
• Gaming Activity Data: Game session records, bet histories, game preferences, bonus usage, responsible gaming settings — retained for regulatory reporting, dispute resolution, and responsible gaming monitoring.
• Technical and Device Data: IP address, device fingerprint, browser type and version, operating system, session duration, access timestamps — collected automatically during platform use for security and fraud prevention.
• Communications and Support Data: Live chat transcripts, email correspondence, support ticket content — retained for complaint management and quality assurance purposes.

epicjili does not collect sensitive personal information beyond what is strictly required for identity verification, financial crime compliance, and responsible gaming obligations under PAGCOR's regulatory framework.

4. How We Collect Your Data

epicjili collects personal information through the following channels and mechanisms:

• Account Registration: Information you directly provide when creating your epicjili account, including your mobile number, personal details, and account preferences.
• KYC Verification: Identity documents submitted during the identity verification process — government-issued Philippine ID, selfie photographs, and associated documentation.
• Payment Transactions: Payment method details provided when initiating deposits or withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, Coins.ph, and other accepted methods.
• Platform Activity: Data generated automatically through your use of the platform, including gameplay records, session data, and navigation patterns within the epicjili interface.
• Device and Browser: Technical information collected automatically by the platform's servers each time your device connects — IP addresses, device identifiers, and browser characteristics.
• Customer Support Interactions: Information you provide when contacting epicjili support through live chat, email, or other designated support channels.
• Cookies and Tracking Technologies: Information collected through session cookies and similar technologies as described in Section 11 of this Policy.

5. Purposes of Processing

epicjili processes your personal information for the following specific, legitimate, and lawful purposes:

• Account Creation and Management: Establishing and maintaining your epicjili account, verifying your identity, and providing access to the platform's features.
• Age Verification (21+): Confirming that all players meet the minimum age requirement of 21 years as mandated by PAGCOR's iGaming regulations.
• PAGCOR Regulatory Compliance: Fulfilling mandatory reporting obligations to PAGCOR as epicjili's licensing authority, including player registration records and gaming activity reports.
• AMLA Compliance: Fulfilling anti-money laundering obligations under the Anti-Money Laundering Act (RA 9160 as amended) and related AMLC regulations, including customer due diligence, transaction monitoring, and suspicious transaction reporting.
• Payment Processing: Executing deposit and withdrawal transactions, reconciling financial records, and managing payment disputes.
• Security and Fraud Prevention: Detecting, investigating, and preventing unauthorized access, fraudulent activity, account compromise, and prohibited conduct.
• Responsible Gaming Monitoring: Monitoring gaming activity to identify potential problem gambling indicators and administering self-exclusion and limit-setting tools.
• Customer Support: Responding to inquiries, resolving complaints, and providing technical assistance.
• Platform Improvement: Analyzing aggregated and anonymized platform usage data to improve the epicjili user experience.
• Marketing Communications: Sending promotional offers and platform updates to members who have opted in, subject to Section 14.

6. Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, epicjili relies on the following legal bases for processing your personal information:

• Contractual Necessity: Processing required to perform the contract between you and epicjili — account management, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine law — PAGCOR regulatory reporting, AMLA compliance, and NPC-mandated data handling requirements.
• Legitimate Interests: Processing necessary for epicjili's legitimate business interests where not overridden by your privacy rights — platform security, fraud detection, responsible gaming monitoring, and technical platform operation.
• Consent: Processing based on your freely given, specific, and informed consent — marketing communications and certain non-essential data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Disclosure to Third Parties

epicjili does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your personal information may be shared with the following categories of third parties solely for the purposes described in this Policy:

• Payment Service Providers: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, UnionBank, Coins.ph, and other payment processors — solely for transaction execution and financial reconciliation.
• Identity Verification Providers: KYC/AML technology partners engaged to assist with identity verification and document authentication in compliance with PAGCOR and AMLC requirements.
• Game Content Providers: JILI and other licensed game providers whose titles are accessible through the epicjili platform. Game providers may receive anonymized session data for technical integration and game performance purposes.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any court or law enforcement body where disclosure is required by law, court order, or regulatory direction.
• Technology Infrastructure Providers: Cloud hosting, cybersecurity, and technical infrastructure vendors engaged under data processing agreements that restrict their use of data to platform operation only.
• Professional Advisors: Legal counsel, accountants, and auditors engaged under professional confidentiality obligations where access to personal data is necessary for their advisory role.

All third-party processors engaged by epicjili are required to implement appropriate technical and organizational security measures and to process personal data only on epicjili's instructions and for the purposes specified herein.

8. International Data Transfers

The epicjili platform is operated primarily from within the Philippines. Where personal data is transferred to processing infrastructure located outside the Philippines — for example, cloud hosting services or game provider systems hosted in other jurisdictions — epicjili ensures that such transfers are subject to appropriate safeguards in accordance with RA 10173 and the NPC's applicable guidelines on cross-border data transfers.

Safeguards for international transfers may include contractual obligations binding the recipient to data protection standards equivalent to those applicable in the Philippines, or reliance on recognized adequacy determinations for the receiving jurisdiction. Where epicjili transfers personal data internationally, such transfers are limited to what is strictly necessary for the specified processing purpose.

9. Data Retention

epicjili retains your personal information for as long as is necessary to fulfil the purposes for which it was collected, subject to applicable legal retention obligations. Key retention periods include:

• Active Account Data: Retained for the duration of your active epicjili account plus an additional period to accommodate post-account-closure compliance requirements.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction in accordance with AMLA obligations. Certain records may be retained for up to 10 years where required by applicable law or regulatory direction.
• KYC and Identity Verification Documents: Retained for the minimum period required by PAGCOR and AMLC regulations — typically 5 years from account closure or the date of the relevant transaction, whichever is later.
• Customer Support Records: Retained for 3 years from the date of the interaction or the resolution of any related dispute, whichever is later.
• Marketing Consent Records: Retained for the duration of your subscription to marketing communications plus 2 years following opt-out, for legal compliance purposes.
• Technical and Security Logs: Retained for up to 12 months from the date of generation, unless extended for active security investigation purposes.

Upon expiry of applicable retention periods, personal data is securely deleted or irreversibly anonymized. Anonymized data retained for statistical or analytical purposes is no longer considered personal information and is not subject to this Policy.

10. Security Measures

epicjili implements a multi-layered security framework to protect your personal information from unauthorized access, alteration, disclosure, and destruction. Our technical and organizational security measures include:

• Encryption in Transit: All data transmitted between your device and epicjili's servers is encrypted using 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data stored in epicjili's databases is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Internal access to personal data is restricted to authorized personnel on a need-to-know basis, enforced through role-based access control and multi-factor authentication for system administrators.
• Intrusion Detection and Monitoring: Continuous monitoring of platform infrastructure for suspicious access patterns, unauthorized activity, and potential security threats.
• OTP Authentication: Sensitive account actions — including password changes, new device logins, and large withdrawals — require SMS OTP verification to your registered Philippine mobile number.
• Regular Security Audits: Periodic independent security assessments and penetration testing of the epicjili platform to identify and remediate vulnerabilities.

11. Cookies and Tracking Technologies

The epicjili platform uses cookies and similar tracking technologies to operate essential platform functions, maintain security, and analyze platform performance. The categories of cookies used include:

• Essential Cookies: Required for the platform to function — session management, authentication tokens, security identifiers. These cannot be disabled without impairing platform functionality.
• Security Cookies: Used to detect and prevent fraudulent access, bot activity, and account abuse.
• Performance Cookies: Collect anonymized data on how players navigate the epicjili platform — used to identify usability issues and improve the user experience. No personal identification is possible from this data.
• Preference Cookies: Remember your platform settings and preferences — game lobby view, language selection, notification preferences.

epicjili does not use third-party advertising cookies or behavioral tracking cookies that track your activity across other websites. You may manage non-essential cookie preferences through the privacy settings available within your epicjili account. Disabling essential cookies may prevent access to certain platform features.

12. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to your personal information processed by epicjili:

• Right to Be Informed: The right to be informed of how your personal information is being processed — fulfilled by this Privacy Policy and by in-platform disclosures at the point of data collection.
• Right of Access: The right to request a copy of the personal information epicjili holds about you, including the purposes for which it is processed.
• Right to Correction: The right to request correction of inaccurate, incomplete, or outdated personal information in your epicjili account.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal information where it is no longer necessary for the purposes for which it was collected, subject to epicjili's legal retention obligations.
• Right to Object: The right to object to the processing of your personal information for direct marketing or where processing is based on legitimate interests, citing compelling legitimate grounds.
• Right to Data Portability: The right to receive your personal information in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Damages: The right to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal information.
• Right to File a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of the above rights, submit a written request to epicjili's Data Protection Officer using the contact details provided in Section 16. epicjili will respond to all substantiated data rights requests within 15 business days of receipt, subject to identity verification and applicable legal constraints.

13. Minor Protection Policy

epicjili does not knowingly collect personal information from individuals under 21 years of age. All epicjili platform features — including account registration, gameplay, and payment services — are exclusively available to individuals who are 21 years old or older, as required by PAGCOR's iGaming regulations.

Age verification is a mandatory step in the account registration process. If epicjili discovers that personal information has been collected from a person under 21 years of age, that information will be immediately deleted and the associated account suspended. Parents or guardians who believe their child has registered on the epicjili platform should contact support immediately for account investigation and closure.

14. Marketing Communications

With your consent, epicjili may send you marketing communications regarding promotions, bonuses, new game launches, and platform updates. Marketing communications are delivered via your registered mobile number (SMS) and email address.

You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your epicjili account settings, or by responding to any marketing message with an opt-out instruction. Opt-out requests are processed within 5 business days. Withdrawal of marketing consent does not affect the delivery of transactional and service communications that are essential to your account operation.

epicjili does not send unsolicited commercial communications (spam) and does not share your contact details with third-party marketers for their own promotional use.

15. Amendments to This Policy

epicjili reserves the right to amend this Privacy Policy to reflect changes in applicable law, regulatory requirements, or platform operations. When material amendments are made, epicjili will notify registered members via email or in-platform notification prior to the effective date of the revised Policy.

Minor amendments — such as clarifications to existing practices that do not materially alter your rights — may be made without formal advance notice, but will be reflected in the updated Policy with a revised effective date. Your continued use of the epicjili platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy.

The current version and effective date of this Policy are displayed in the header section of this page. Previous versions of this Policy are available upon request from the Data Protection Officer.

16. Contact and Data Protection Officer Details

For questions about this Privacy Policy, to exercise your data rights under RA 10173, or to report a privacy concern, please contact epicjili's Data Protection Officer through the following channels:

• Email: [email protected] (Subject line: Privacy Request)
• Live Chat: Available 24/7 within the epicjili platform after logging in to your account.
• Response Time: Data rights requests and privacy inquiries are acknowledged within 2 business days and responded to substantively within 15 business days.

For complaints not resolved through epicjili's internal privacy request process, you may contact the National Privacy Commission of the Philippines through their official website or complaint handling channels.