bossjili Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected by bossjili ("bossjili," "we," "us," or "our") through the bossjili.club website, any associated mobile applications, and all related services. It is intended to inform you — our valued Filipino players — of your rights and our obligations under Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR").

1.1 bossjili is committed to protecting the privacy and personal data of every player who uses our platform. We understand that Filipino players trust us with sensitive information, and we take that responsibility seriously.

1.2 This Policy covers all personal data processing activities conducted by bossjili in connection with the operation of the bossjili online gaming platform, including account registration, identity verification (KYC), payment processing, customer support, and marketing communications.

1.3 This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together form the complete agreement governing your use of bossjili.

2.1 For the purposes of the Philippine Data Privacy Act of 2012, bossjili acts as the Personal Information Controller (PIC) in respect of all personal data collected through the bossjili platform.

2.2 As the PIC, bossjili determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with the DPA, its IRR, and the issuances of the National Privacy Commission (NPC) of the Philippines.

2.3 bossjili has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact the DPO through the contact details provided in Section 15 of this Policy.

3.1 bossjili collects the following categories of personal data:

3.2 bossjili does not intentionally collect sensitive personal information as defined under the DPA (such as health data, religious beliefs, or political affiliations) unless specifically required by law or PAGCOR regulation. Where such data is collected, we will obtain your explicit consent.

4.1 bossjili collects personal data through the following means:

• Direct collection — information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection — technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the bossjili platform;
• Third-party sources — identity verification data from KYC service providers, fraud screening data from security partners, and payment data from GCash, Maya, and banking partners, all of whom are bound by confidentiality obligations.

4.2 You are not obligated to provide all requested personal data; however, failure to provide mandatory information (such as identity documents for KYC) may prevent bossjili from activating your account or processing withdrawals.

5.1 bossjili uses your personal data for the following purposes:

• Creating and managing your bossjili player account;
• Verifying your identity and age (21+) as required by Philippine law and PAGCOR regulations;
• Processing deposits and withdrawals via GCash, Maya, bank transfer, and debit card;
• Detecting and preventing fraud, money laundering, and other illegal activity;
• Complying with Anti-Money Laundering Council (AMLC) reporting obligations;
• Providing customer support and responding to your inquiries;
• Sending you transactional communications (account confirmations, security alerts, withdrawal notifications);
• Sending you marketing communications about bossjili promotions and offers, where you have opted in;
• Monitoring gameplay for responsible gaming purposes and enforcing self-exclusion requests;
• Improving the bossjili platform through analytics and user experience research;
• Complying with all applicable Philippine laws and PAGCOR regulatory requirements.

5.2 bossjili will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate lawful basis for processing.

6.1 Under the Philippine Data Privacy Act, bossjili processes your personal data on the following legal bases:

• Contractual necessity — processing required to perform our obligations under the bossjili Terms & Conditions, including account management and payment processing;
• Legal obligation — processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws;
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit opt-in consent.

6.2 Where bossjili relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

7.1 bossjili may share your personal data with the following categories of recipients:

• PAGCOR — as required by our gaming licence and applicable PAGCOR regulations;
• Anti-Money Laundering Council (AMLC) — for mandatory suspicious transaction reporting under the Anti-Money Laundering Act;
• Philippine law enforcement authorities — where required by court order, subpoena, or applicable law;
• KYC and identity verification providers — to verify your identity and age as required for account activation;
• Payment processors — GCash, Maya, and banking partners, solely for the purpose of processing your deposits and withdrawals;
• IT and security service providers — cloud hosting, cybersecurity, and fraud detection vendors who process data on our behalf under strict data processing agreements;
• Customer support platforms — third-party helpdesk tools used to manage player support tickets, bound by confidentiality obligations.

7.2 All third-party service providers who process personal data on behalf of bossjili are required to enter into data processing agreements that impose obligations equivalent to those under the Philippine DPA.

8.1 bossjili uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and understand how you use bossjili.

8.2 bossjili uses the following types of cookies:

• Strictly necessary cookies — essential for platform operation, including session management and security. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game display options.
• Analytics cookies — collect anonymized data about how players use bossjili to help us improve the platform. Used only with your consent.
• Marketing cookies — used to deliver relevant bossjili promotions. Used only with your explicit opt-in consent.

8.3 You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to use the core bossjili gaming platform, though some personalization features may be limited.

9.1 bossjili retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations.

9.2 Specific retention periods applicable to bossjili player data:

• Account and KYC data — retained for a minimum of five (5) years following account closure, as required by PAGCOR and AMLC regulations;
• Financial transaction records — retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act;
• Customer support records — retained for three (3) years from the date of the last interaction;
• Marketing consent records — retained until you withdraw consent, plus one (1) year for compliance documentation purposes;
• Technical and usage logs — retained for twelve (12) months for security and fraud detection purposes.

9.3 Upon expiry of the applicable retention period, bossjili will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.

10.1 bossjili implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and bossjili servers;
• AES-256 encryption for sensitive data stored in bossjili databases;
• Multi-factor authentication options for player accounts;
• Regular penetration testing and security audits by independent cybersecurity firms;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• 24/7 security monitoring and intrusion detection systems.

10.2 In the event of a personal data breach that is likely to result in harm to affected players, bossjili will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.

11.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by bossjili:

• Right to be informed — the right to know what personal data bossjili collects about you and how it is used;
• Right of access — the right to request a copy of the personal data bossjili holds about you;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure or blocking — the right to request deletion or blocking of your personal data where processing is no longer necessary or lawful, subject to legal retention obligations;
• Right to object — the right to object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability — the right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

11.2 To exercise any of the above rights, please contact the bossjili Data Protection Officer using the contact details in Section 15. bossjili will respond to all verified data subject requests within fifteen (15) business days, as required by the DPA IRR.

12.1 bossjili does not knowingly collect, process, or store personal data from individuals under the age of 21. If bossjili discovers that personal data has been collected from an underage individual, the account will be immediately suspended, all data will be deleted, and any funds will be handled in accordance with our Terms & Conditions and applicable PAGCOR regulations.

12.2 If you are a parent or guardian and believe that your child under 21 has registered on bossjili, please contact us immediately at the details provided in Section 15 so we can take prompt action.

13.1 bossjili primarily processes and stores personal data within the Republic of the Philippines. Where it is necessary to transfer personal data to service providers located outside the Philippines (for example, cloud infrastructure or cybersecurity services), bossjili ensures that such transfers comply with Section 21 of the Data Privacy Act and NPC guidelines on cross-border data transfers.

13.2 Cross-border transfers are only made to countries or organizations that provide an adequate level of data protection, or where appropriate safeguards (such as contractual clauses approved by the NPC) are in place to protect your personal data.

14.1 bossjili may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. The most current version will always be published at bossjili.club/privacy-policy with the effective date clearly indicated at the top of the document.

14.2 For material changes that significantly affect how we process your personal data, bossjili will provide advance notice to registered players via email or in-platform notification at least seven (7) days before the revised Policy takes effect. Your continued use of the bossjili platform after the effective date constitutes your acknowledgment of the updated Policy.

15.1 For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the bossjili Data Protection Officer:

15.2 If you are not satisfied with bossjili's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.

15.3 For responsible gaming concerns, self-exclusion requests, or gambling-related support, please visit our Responsible Gaming page.