Privacy Policy

1 Scope & Application

This Privacy Policy applies to all personal data processed by n1jl Casino in connection with the operation of the n1jl Platform accessible at n1jl.club, including all associated gaming services, payment processing, customer support interactions, and marketing communications.

This Policy applies to all individuals who interact with n1jl, including registered Members, prospective Members who have initiated but not completed registration, and visitors who access the Platform without registering. By accessing or using the n1jl Platform, you acknowledge that you have read and understood this Privacy Policy.

This Policy should be read in conjunction with the n1jl Terms & Conditions, which govern the overall use of the Platform and are incorporated by reference herein.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (R.A. 10173), n1jl Casino is the Personal Information Controller (PIC) in respect of the personal data processed through the n1jl Platform. n1jl is responsible for determining the purposes and means of processing personal data collected in connection with Platform operations.

n1jl has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with R.A. 10173 and this Privacy Policy. Contact details for our DPO are provided in Section 15 of this Policy.

Where n1jl engages third-party service providers (such as payment processors, game providers, or IT infrastructure suppliers) who process personal data on n1jl's behalf, those parties act as Personal Information Processors (PIPs) under written agreements that require them to process data only on n1jl's documented instructions and in compliance with applicable Philippine privacy law.

3 Personal Data We Collect

n1jl collects the following categories of personal data in the course of operating the Platform:

n1jl does not intentionally collect sensitive personal information (as defined under R.A. 10173) unless strictly required for KYC verification or as mandated by PAGCOR or Philippine law enforcement. Where sensitive personal information is collected, it is processed with the additional safeguards required by law.

4 How We Collect Personal Data

n1jl collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical data collected automatically when you access the Platform, including via cookies, web beacons, and server logs. See Section 9 for details.
• Third-party sources: Identity verification data from government ID verification service providers; payment confirmation data from GCash, Maya, and banking partners; AML screening data from licensed compliance data providers.
• PAGCOR and regulatory databases: n1jl may verify Member identity and exclusion status against PAGCOR's player registry and exclusion databases as required by our operating licence.

5 Purposes & Legal Bases for Processing

n1jl processes personal data only for specified, legitimate purposes and on lawful bases as recognised under R.A. 10173:

6 Disclosure of Personal Data

6.1 No Sale of Data. n1jl does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes.

6.2 Authorised Disclosures. n1jl may disclose personal data to the following categories of recipients, strictly to the extent necessary for the stated purpose:

• PAGCOR: As required by our operating licence, including player identity data, gaming activity reports, and AML-related information;
• Payment processors: GCash (G-Xchange Inc.), Maya Philippines Inc., BancNet, Visa, Mastercard, and other licensed Philippine payment system operators, for the purpose of processing transactions;
• KYC and AML service providers: Licensed identity verification and compliance screening providers operating in the Philippines;
• Game software providers: JILI Gaming, Pragmatic Play, PG Soft, and other certified game studios, to the limited extent necessary for game session management and dispute resolution;
• IT and hosting providers: Cloud infrastructure and security service providers operating under data processing agreements;
• Law enforcement and government authorities: Where required by Philippine law, court order, or regulatory directive, including disclosures required under the Anti-Money Laundering Act (R.A. 9160, as amended) to the AMLC.

6.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of n1jl's business, personal data held by n1jl may be transferred to the successor entity, subject to equivalent privacy protections.

7 Data Retention

n1jl retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by law:

• Account and KYC records: Retained for the duration of the account relationship and for a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and the AMLA;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity logs: Retained for a minimum of ninety (90) days for dispute resolution purposes, and thereafter in aggregated or anonymised form;
• Support communications: Retained for twenty-four (24) months from the date of the last interaction;
• Marketing consent records: Retained for the period of the marketing relationship and for three (3) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with n1jl's data disposal procedures.

8 Data Security

n1jl implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption for all data in transit between your device and the n1jl Platform;
• Encryption of sensitive personal data at rest in n1jl's databases;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Multi-factor authentication for administrative access to systems containing personal data;
• Regular security vulnerability assessments and penetration testing;
• Incident response procedures including mandatory notification to the National Privacy Commission (NPC) and affected individuals in the event of a personal data breach, as required by R.A. 10173.

9 Cookies & Tracking Technologies

n1jl uses cookies and similar tracking technologies to operate the Platform, remember your session preferences, and analyse Platform usage. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function, including session authentication and security tokens. These cannot be disabled without impairing Platform functionality.
• Functional Cookies: Remember your preferences (such as language and responsible gaming settings) to provide a personalised experience.
• Analytics Cookies: Collect aggregated, anonymised data about how Members use the Platform, enabling n1jl to identify and fix usability issues and improve game selection.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content. You may withdraw consent at any time via your account settings or browser controls.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the n1jl Platform.

10 Your Rights Under R.A. 10173

As a data subject under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by n1jl:

• Right to be Informed: The right to know that your personal data is being collected, including the purposes and bases for processing — which this Policy provides;
• Right of Access: The right to request a copy of the personal data n1jl holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to Erasure / Blocking: The right to request deletion or blocking of personal data where processing is no longer justified, subject to n1jl's legal retention obligations;
• Right to Object: The right to object to processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe n1jl has violated your data privacy rights.

To exercise any of the above rights, please contact n1jl's Data Protection Officer using the contact details in Section 15. n1jl will respond to rights requests within thirty (30) days of receipt, or within the extended timeframe permitted by the NPC for complex requests.

11 Children's Privacy

The n1jl Platform is strictly intended for adults aged 21 years and above, as required by PAGCOR regulations. n1jl does not knowingly collect personal data from individuals under 21 years of age. If n1jl becomes aware that personal data has been collected from an individual under 21, that account will be immediately suspended, the data will be deleted (subject to PAGCOR compliance obligations), and the matter will be referred to PAGCOR.

Parents and guardians who believe their child may have registered on the n1jl Platform are urged to contact us immediately via live chat or at [email protected].

12 Cross-Border Data Transfers

In certain cases, n1jl may transfer personal data to third-party service providers or game software partners located outside the Philippines — for example, to international game certification laboratories or cloud hosting providers with data centres in other jurisdictions. Where such transfers occur, n1jl ensures that:

• The recipient country's data protection laws are assessed to provide a comparable level of protection to R.A. 10173, or
• Appropriate safeguards are in place through contractual data processing agreements that incorporate the NPC's standard contractual clauses, and
• Such transfers are disclosed to and, where required, approved by the National Privacy Commission.

13 Third-Party Links & Integrations

The n1jl Platform may contain references to third-party services (such as GCash or Maya) accessed via their own interfaces. This Privacy Policy applies solely to data processed by n1jl Casino and does not govern the privacy practices of third-party platforms. n1jl is not responsible for the content or privacy practices of any third-party service. Members are encouraged to review the privacy policies of any third-party service they use in connection with their n1jl account.

14 Changes to This Privacy Policy

n1jl reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, Platform functionality, or applicable law. Material changes will be communicated to registered Members via SMS notification and/or a notice on the Platform at least 7 days before the revised Policy takes effect. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. Continued use of the Platform following the effective date of a revised Policy constitutes acceptance of the updated terms.

15 Contact & Data Protection Officer

For privacy-related enquiries, rights requests, or to contact n1jl's Data Protection Officer, please use the following channels:

• Live Chat: Available 24/7 on the n1jl Platform — the fastest channel for urgent matters
• Email: [email protected] — mark the subject line "Privacy Request" or "DPO Enquiry"

n1jl aims to acknowledge all privacy requests within 3 business days and to provide a substantive response within 30 days. If you are not satisfied with n1jl's response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC).