Sajili Privacy Policy – How We Protect Your Data

Introduction

Sajili ("Sajili," "we," "us," or "our") operates the online gaming platform available at sajili.app. This Privacy Policy describes how Sajili collects, uses, stores, shares, and protects personal information provided by users ("you," "your," or "Player") when you visit sajili.app, create an account, make a deposit, participate in games or sports betting markets, or contact our support team.

Sajili is committed to protecting the personal information of Filipino players and all users of our platform. We comply with the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, as enforced by the National Privacy Commission, as well as any other applicable data protection laws that govern the information we process.

By registering on Sajili or continuing to use the platform after any update to this policy, you acknowledge that you have read and understood how your information is handled. If any part of this policy is unclear, please contact us before proceeding.

This Privacy Policy should be read alongside Sajili's Terms and Conditions and Responsible Gaming guidelines, which together govern your use of the platform.

What Personal Information We Collect

Sajili collects different categories of personal information depending on the nature of your interaction with the platform. Below is a breakdown of the main data types we process.

Registration and Identity Information

When you create a Sajili account, we collect your full legal name, date of birth, residential address, mobile number, and email address. We may also collect a copy of a government-issued identification document — such as a Philippine passport, driver's licence, or SSS/UMID card — when verifying your identity as part of our Know Your Customer (KYC) process.

Financial and Transaction Information

Sajili collects details of all deposits and withdrawals made in Philippine pesos, the payment methods you use (such as GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, InstaPay, PESONet, Visa, or Mastercard), and account balance records. We do not store full card numbers; payment card data is processed directly by our regulated payment service providers.

Gaming and Betting Activity

We record your participation in games such as Pusoy and Bingo, sports betting activity including the markets and betting odds you engage with, bet amounts, outcomes, session durations, and promotional offers you use or decline. This information is used to maintain account integrity, settle disputes, and support responsible gaming monitoring.

Technical and Device Data

When you access Sajili, we automatically collect information such as your IP address, device type, browser version, operating system, screen resolution, and referring URL. This helps us optimise the mobile experience and identify unusual access patterns that may indicate fraudulent activity.

Communications

If you contact Sajili through email, support chat, or any other channel, we keep a record of those communications including the content of messages and any attachments provided, in order to resolve queries and maintain a history of account interactions.

How We Collect Your Information

Sajili collects personal information through three primary means.

• Directly from you: When you register an account, complete identity verification, make a payment, update your account settings, respond to a survey, or contact customer support on Sajili.
• Automatically during use: Via cookies, web beacons, and server logs when you browse sajili.app, log into your account, or interact with games and betting markets. See Section 9 for more on cookies.
• From third parties: From identity verification service providers, payment processors, fraud-detection partners, and, where applicable, regulatory bodies — to confirm your eligibility and protect both you and Sajili.

Why We Use Your Information

Sajili uses personal information only for specific, legitimate purposes. We do not process data in ways that are incompatible with these stated purposes. The main reasons we use your information are as follows:

• Account management: Creating, verifying, and maintaining your Sajili account, processing login access, and managing account settings and preferences.
• Identity and age verification: Confirming that you meet the minimum age of 21 and other eligibility requirements before allowing participation in gaming activities.
• Payment processing: Handling deposits and withdrawals in Philippine pesos, reconciling transactions, and managing payment method verification.
• Game and bet settlement: Recording activity on sports markets, including betting odds selected, wagers placed, and outcomes for accurate settlement and dispute resolution.
• Fraud prevention and security: Detecting and investigating suspicious account activity, unauthorised access attempts, bonus abuse, and other forms of potential misuse.
• Legal compliance: Meeting our obligations under the Data Privacy Act of 2012, anti-money-laundering regulations, gaming licence conditions, and instructions from regulatory and law enforcement authorities.
• Responsible gaming: Monitoring activity patterns to identify signs of potential problem gambling and offering appropriate tools and information as part of Sajili's responsible gaming commitment.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the Sajili interface, game content, mobile experience, and customer support quality.
• Customer support: Responding to queries, resolving disputes, and maintaining records of communications for service continuity.
• Communications: Sending account-related notifications such as transaction confirmations, security alerts, policy updates, and — where you have opted in — promotional messages about Sajili offers.

Legal Basis for Processing

Sajili processes personal information only when there is a valid legal basis for doing so. Under the Data Privacy Act of 2012 of the Philippines, the lawful bases we rely upon include the following:

• Consent: For marketing communications and optional data uses where you have given clear, informed consent. You may withdraw this consent at any time.
• Contractual necessity: For processing required to perform the contract between you and Sajili — including account creation, payment processing, game operation, and bet settlement.
• Legal obligation: Where processing is required to comply with laws applicable to Sajili, including age verification obligations, anti-money-laundering requirements, tax reporting duties, and instructions from competent regulators.
• Legitimate interests: For fraud detection, security monitoring, platform improvement, and responsible gaming monitoring — where these interests do not override your own data protection rights.

When and How We Share Your Data

Sajili does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data is shared only in the circumstances described below.

Service Providers

Sajili works with carefully selected third-party service providers to help operate the platform. These include payment processors (handling transactions via GCash, Maya, BDO, BPI, UnionBank, and other channels), identity verification providers, cloud hosting services, and customer support tools. These providers process your data only on our instructions and under strict confidentiality agreements.

Regulatory and Law Enforcement Authorities

Sajili will disclose personal information to competent authorities — including the National Privacy Commission, gaming regulators, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), or law enforcement agencies — where required by law, court order, or regulatory instruction.

Business Transfers

In the event of a merger, acquisition, or sale of Sajili's business or assets, your personal information may be transferred to the relevant acquiring entity. You will be notified of any such transfer and your rights under this policy will continue to apply.

Fraud and Security Partners

Sajili may share limited technical and account data with fraud prevention and cybersecurity partners for the purpose of identifying and blocking suspicious activity. This sharing is limited to what is necessary for protection purposes.

International Data Transfers

Some of Sajili's service providers — including cloud infrastructure, payment processing, and fraud detection partners — may process data in jurisdictions outside the Philippines. Where such transfers occur, Sajili ensures that appropriate safeguards are in place to protect your data to a standard equivalent to the protections afforded under Philippine data privacy law.

These safeguards may include contractual clauses approved by the National Privacy Commission, confirmation that the receiving jurisdiction has adequate data protection laws, or other legally recognised transfer mechanisms. Sajili does not transfer personal data to jurisdictions without appropriate protections in place.

How Long We Keep Your Data

Sajili retains personal information for as long as necessary to fulfil the purposes described in this policy and to comply with applicable legal, regulatory, accounting, and reporting obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your account's existence on Sajili plus a minimum of five years following closure, as required by Philippine anti-money-laundering regulations.
• Transaction records: Retained for a minimum of five years from the date of the transaction in accordance with financial record-keeping obligations.
• Identity verification documents: Retained for as long as your account is active plus the applicable statutory retention period thereafter.
• Communications and support records: Retained for up to three years following the resolution of the relevant query.
• Technical and device data: Retained in aggregated or anonymised form for analytical purposes.

Once the applicable retention period expires and there is no other legitimate reason to keep the data, Sajili securely deletes or anonymises the information concerned.

Cookies and Tracking Technologies

Sajili uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform, remember your preferences, detect suspicious activity, and understand how players interact with different sections of the site including sports betting markets and betting odds pages.

You can control non-essential cookies through your browser settings. Note that disabling essential cookies may affect the functionality of Sajili, including your ability to log in and maintain an active session. Most modern browsers allow you to view, manage, and delete stored cookies from the browser's privacy or settings menu.

How Sajili Secures Your Data

Sajili applies technical and organisational security measures designed to protect your personal information from unauthorised access, disclosure, alteration, or destruction. These measures include but are not limited to the following:

• Encryption of data in transit using TLS (Transport Layer Security) protocols for all communications between your device and Sajili's servers
• Encryption of sensitive stored data including financial records and identity information
• Access controls that limit which Sajili staff and service providers can view personal data, based on their specific job function
• Regular security assessments and penetration testing by qualified information security professionals
• Two-factor authentication options available to account holders for additional login protection
• Monitoring of account activity for signs of unauthorised access or suspicious behaviour

No online platform can guarantee absolute security against all possible threats. While Sajili takes reasonable and appropriate steps to protect your data, the transmission of information over the internet inherently involves some level of risk. In the event of a data breach that is likely to result in a high risk to your rights and freedoms, Sajili will notify you and the National Privacy Commission in accordance with our obligations under the Data Privacy Act.

Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal information held by Sajili. You may exercise these rights at any time by contacting privacy@sajili.app.

Sajili will respond to valid data rights requests within 30 days. Where a request is complex or involves a large volume of data, we may extend this period by up to an additional 30 days, notifying you of the extension. Sajili does not charge a fee for processing reasonable data rights requests.

Minors and Age Protection

Sajili's platform is intended exclusively for eligible adults aged 21 and above. Sajili does not knowingly collect personal information from persons under the age of 21. If we discover or have reason to believe that personal information has been submitted by someone below the minimum age requirement, we will suspend the relevant account, delete the associated data, and take appropriate follow-up action.

If a parent or guardian becomes aware that a minor has attempted to register on or use Sajili, they are asked to contact privacy@sajili.app immediately so that we can take prompt corrective action.

Changes to This Privacy Policy

Sajili may update this Privacy Policy from time to time to reflect changes in applicable law, updates to our platform, new data processing activities, or changes in our service provider relationships. When material changes are made, we will update the "Last Updated" date at the top of this page and send a notification to your registered email address prior to the changes taking effect.

Minor revisions — such as clarifications of existing language, correction of typographical errors, or updated contact details — may be made without a separate notification. We encourage you to review this policy periodically. Continued use of Sajili after any update takes effect constitutes your acceptance of the revised policy.

Previous versions of this Privacy Policy are available on request by emailing privacy@sajili.app.

Contact Sajili About Privacy

If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to raise a concern about how Sajili handles your personal information, please contact us using the details below.

When contacting Sajili about a data rights request, please include your full name, the email address registered to your Sajili account, a description of the right you wish to exercise, and the reason for your request where relevant. This information helps us locate your records and respond accurately within the required timeframe.