bossjili Privacy Policy

bossjili is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy describes how bossjili collects, uses, stores, shares, and protects personal data in the course of providing online casino services to players in the Philippines and other permitted jurisdictions.

This Policy applies to:

• All registered bossjili players, regardless of whether they are currently active.
• Visitors to the bossjili website who have not yet registered an account.
• Individuals who contact bossjili customer support or submit enquiries through any channel.
• Any person whose personal data is processed by bossjili in connection with the operation of the platform.

By registering a bossjili account or continuing to use the bossjili platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the bossjili platform.

This Policy should be read alongside the bossjili Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement governing your use of bossjili.

For the purposes of the Philippine Data Privacy Act of 2012, bossjili acts as the personal information controller in respect of all personal data collected and processed through the bossjili platform. As the personal information controller, bossjili determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out in accordance with applicable Philippine data privacy law.

bossjili has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and with the Data Privacy Act. If you have any questions, concerns, or requests relating to your personal data, you may contact the bossjili DPO using the contact details provided in Section 14 of this Policy.

bossjili collects the following categories of personal data in the course of operating the platform:

3.1 Identity Data

This includes your full legal name, date of birth, nationality, and copies of government-issued identification documents (such as a Philippine passport, SSS ID, UMID, or driver's licence). Identity data is collected to verify your identity, confirm that you meet the minimum age requirement of 21 years, and comply with PAGCOR Know Your Customer (KYC) obligations.

3.2 Contact Data

This includes your email address, mobile phone number, and residential address. Contact data is used to communicate with you about your account, process transactions, and send service-related notifications.

3.3 Financial Data

This includes your GCash mobile number, PayMaya account details, bank account information (for BPI, BDO, or Metrobank transfers), and a complete record of all deposits, withdrawals, and wagers made on your bossjili account. Financial data is collected to process transactions in Philippine Peso (₱) and to comply with anti-money laundering (AML) regulations.

3.4 Technical Data

This includes your IP address, device type and model, operating system, browser type and version, and session logs. Technical data is collected automatically when you access the bossjili platform and is used for security monitoring, fraud prevention, and platform performance optimisation.

3.5 Usage Data

This includes information about how you use the bossjili platform, including the games you play, the amounts you wager, your session duration, the bonuses you claim, and your interaction with responsible gaming tools. Usage data is used to monitor for problem gambling indicators, personalise your experience, and fulfil regulatory reporting obligations.

3.6 Marketing & Communications Data

This includes your preferences regarding receiving promotional communications from bossjili, and a record of any marketing emails, SMS messages, or in-app notifications you have received and interacted with. This data is only collected where you have provided explicit consent to receive marketing communications.

bossjili collects personal data through the following means:

• Direct interactions: Data you provide when registering a bossjili account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically through cookies, server logs, and similar tracking technologies when you access the bossjili platform. See Section 8 for full details on cookies.
• Third-party sources: Identity verification data from KYC service providers, fraud screening data from security partners, and payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank. bossjili only receives data from third parties where you have authorised such sharing or where bossjili is legally required to obtain it.

bossjili uses your personal data for the following purposes:

• To create and manage your bossjili account, including verifying your identity and age (21+).
• To process deposits and withdrawals in Philippine Peso (₱) via GCash, PayMaya, BPI, BDO, and Metrobank.
• To provide customer support and respond to your enquiries and complaints.
• To monitor your account for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
• To detect, investigate, and prevent fraud, money laundering, and other illegal activity.
• To comply with PAGCOR regulatory requirements, including player activity reporting and AML obligations.
• To personalise your bossjili experience, including recommending games and promotions that may be relevant to you.
• To send you service-related communications, such as transaction confirmations, account security alerts, and policy updates.
• To send you marketing communications, where you have opted in to receive them.
• To improve the bossjili platform through analysis of aggregated, anonymised usage data.

bossjili will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate legal basis for the new processing activity.

Under the Philippine Data Privacy Act of 2012, bossjili processes your personal data on the following legal bases:

• Performance of a contract: Processing necessary to fulfil the bossjili Terms & Conditions, including account management, transaction processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AML obligations, and tax reporting requirements.
• Legitimate interests: Processing necessary for bossjili's legitimate business interests, including fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your explicit consent, including the sending of marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

bossjili does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers who assist bossjili in verifying player identities and ages in compliance with PAGCOR requirements.
• Fraud prevention and security partners: Service providers who assist bossjili in detecting and preventing fraudulent activity and money laundering.
• Game providers: Licensed game studios whose games are available on the bossjili platform, to the extent necessary to provide the gaming service.
• Regulatory authorities: PAGCOR and other Philippine government agencies, where bossjili is legally required to disclose player data.
• Law enforcement: Philippine law enforcement agencies, where bossjili is required by law or court order to disclose personal data.

All third parties with whom bossjili shares personal data are required to process that data in accordance with applicable Philippine data privacy law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

bossjili uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the bossjili website. The following types of cookies are used:

• Strictly necessary cookies: Essential for the bossjili platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your preferred language and display settings. These cookies improve your bossjili experience but are not essential.
• Analytics cookies: Used to collect anonymised data about how players use the bossjili platform, helping us identify areas for improvement. These cookies are only set with your consent.
• Marketing cookies: Used to track your interaction with bossjili promotional content and to ensure that marketing communications are relevant to your interests. These cookies are only set with your explicit consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the bossjili platform. For full details on the cookies used by bossjili, please refer to our Cookie Policy, which is available on request from bossjili support.

bossjili implements a comprehensive range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the bossjili platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Multi-factor authentication options for player accounts.
• Regular security audits and penetration testing of the bossjili platform.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Comprehensive staff training on data privacy and security obligations.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, bossjili will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act and NPC regulations.

bossjili retains your personal data for the following periods:

• Account data: Retained for the duration of your bossjili account and for a period of five (5) years following account closure, in accordance with PAGCOR regulatory requirements.
• Transaction records: Retained for a minimum of five (5) years following the date of the transaction, as required by Philippine AML regulations.
• Identity verification documents: Retained for the period required by PAGCOR KYC regulations, typically five (5) years from the date of verification or account closure, whichever is later.
• Customer support records: Retained for three (3) years from the date of the last interaction, to enable bossjili to respond to any follow-up enquiries or complaints.
• Marketing data: Retained until you withdraw your consent to receive marketing communications, after which it will be deleted within thirty (30) days.
• Technical and usage data: Retained for a period of twelve (12) months from the date of collection, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, bossjili will securely delete or anonymise your personal data in accordance with industry best practices. Where data is anonymised rather than deleted, the resulting anonymised data cannot be used to identify you and is no longer considered personal data under the Data Privacy Act.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by bossjili:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed, including the purposes of processing, the identity of the data controller, and the recipients of your data.
• Right of access: You have the right to request a copy of the personal data bossjili holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data bossjili holds about you.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, where you have withdrawn consent, or where processing is unlawful. This right is subject to bossjili's legal obligations to retain certain data.
• Right to object: You have the right to object to the processing of your personal data where bossjili relies on legitimate interests as the legal basis for processing, and where you believe your rights and interests override those legitimate interests.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that bossjili transmit that data to another personal information controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that bossjili has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact the bossjili Data Protection Officer using the contact details in Section 14. bossjili will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case bossjili will notify you of the extension and the reasons for it.

The bossjili platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. bossjili does not knowingly collect personal data from individuals under the age of 21.

As part of the bossjili registration process, all applicants are required to provide proof of age in the form of a valid government-issued identification document. bossjili will not activate any account where the applicant cannot demonstrate that they are at least 21 years of age.

If bossjili becomes aware that personal data has been collected from an individual under the age of 21, bossjili will immediately suspend the relevant account, delete the personal data collected, and report the matter to the appropriate regulatory authorities where required.

If you are a parent or guardian and believe that your child has registered a bossjili account or provided personal data to bossjili, please contact bossjili support immediately at the contact details provided in Section 14.

bossjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The most current version of this Policy will always be available on the bossjili website at bossjili.app/privacy-policy.

Where bossjili makes material changes to this Policy — that is, changes that significantly affect your rights or the way in which your personal data is processed — bossjili will notify you by email to the address registered on your account and/or by a prominent notice on the bossjili platform, at least fourteen (14) days before the changes take effect.

Your continued use of the bossjili platform after the effective date of any updated Privacy Policy constitutes your acceptance of the updated Policy. If you do not agree with the updated Policy, you should close your bossjili account and cease using the platform before the effective date of the changes.

The date at the top of this Policy indicates when it was last updated. Previous versions of this Policy are available on request from the bossjili Data Protection Officer.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by bossjili, please contact the bossjili Data Protection Officer:

bossjili will acknowledge all data privacy enquiries within five (5) business days and will endeavour to resolve all requests within thirty (30) days.

If you are not satisfied with bossjili's response to your data privacy enquiry or complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.