merryjili Privacy
Policy

merryjili ("merryjili," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online casino and sports betting platform at https://merryjili.asia (the "Platform"). This Privacy Policy ("Policy") describes how merryjili collects, uses, stores, shares, and protects your personal information in connection with your use of the Platform.

This Policy applies to all registered players, visitors to the Platform, and any individual whose personal data is processed by merryjili in connection with the services we provide. By registering an account or continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of your agreement with merryjili.

For the purposes of the Philippine Data Privacy Act of 2012, merryjili is the personal information controller responsible for the personal data collected through the Platform. merryjili has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection legislation.

All data subject requests, privacy inquiries, and complaints should be directed to the merryjili Data Protection Officer using the contact details provided in Section 13 of this Policy. merryjili will respond to all data subject requests within the timeframes prescribed by Philippine law.

merryjili collects only the personal data that is necessary to provide you with a safe, compliant, and high- quality gaming experience. The categories of personal data we collect include:

Identity Data:

• Full legal name as it appears on your government-issued identification;
• Date of birth (used to verify that you meet the 21-year minimum age requirement);
• Nationality and country of residence;
• Government-issued identification number (e.g., Philippine National ID, passport, driver's license, SSS, GSIS, or PhilHealth ID).

Contact Data:

• Email address;
• Mobile number (Philippine mobile numbers accepted, including Globe, Smart, and DITO);
• Residential address, including barangay, city or municipality, province, and postal code.

Financial Data:

• GCash or PayMaya account details used for deposits and withdrawals;
• Bank account details for BPI, BDO, Metrobank, or other linked Philippine bank accounts;
• Transaction history, including deposit amounts, withdrawal amounts, and dates.

Technical & Usage Data:

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, pages visited, and game activity logs;
• Login timestamps and access history.

merryjili collects your personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion;
• Automated collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data received from licensed KYC and anti-money laundering service providers; payment transaction data received from GCash, PayMaya, and partner banks; and fraud prevention data received from security service providers.

merryjili does not collect personal data from social media platforms or purchase personal data from data brokers. All data collected by merryjili is obtained through lawful means and with a valid legal basis as described in Section 5 of this Policy.

merryjili processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account registration and management — to create and maintain your merryjili account, verify your identity, and provide access to the Platform. Legal basis: performance of a contract;
• Age and identity verification (KYC) — to confirm that you meet the 21-year minimum age requirement and to comply with PAGCOR regulatory obligations. Legal basis: compliance with a legal obligation;
• Payment processing — to process deposits and withdrawals via GCash, PayMaya, and partner banks. Legal basis: performance of a contract;
• Anti-money laundering (AML) compliance — to monitor transactions and report suspicious activity as required under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160) and its amendments. Legal basis: compliance with a legal obligation;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, unauthorized account access, and abuse of the Platform. Legal basis: legitimate interests of merryjili;
• Customer support — to respond to your inquiries, complaints, and support requests. Legal basis: performance of a contract;
• Responsible gaming — to monitor gaming behavior and apply responsible gaming tools where appropriate. Legal basis: compliance with a legal obligation and legitimate interests;
• Marketing communications — to send you promotional offers and updates about merryjili, where you have provided your consent. Legal basis: consent (you may withdraw consent at any time).

merryjili does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary and with appropriate safeguards in place:

• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law;
• KYC and identity verification providers: Licensed third-party service providers engaged to perform identity verification and document authentication on behalf of merryjili;
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers engaged to process your deposits and withdrawals;
• Fraud prevention and security providers: Third-party service providers engaged to detect and prevent fraudulent activity on the Platform;
• IT and infrastructure providers: Cloud hosting and data storage providers engaged to operate the technical infrastructure of the Platform, subject to strict data processing agreements;
• Legal and professional advisors: Lawyers, auditors, and other professional advisors engaged by merryjili in connection with legal proceedings or regulatory investigations.

All third-party service providers engaged by merryjili are required to process your personal data only in accordance with merryjili's instructions and applicable Philippine data protection law. merryjili remains responsible for ensuring that your data is handled appropriately by all processors acting on our behalf.

merryjili uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following categories of cookies are used by merryjili:

• Strictly necessary cookies: Essential for the Platform to function correctly, including session management, authentication, and security. These cookies cannot be disabled;
• Performance cookies: Used to collect anonymized data about how players use the Platform, including pages visited and error messages encountered, to help us improve Platform performance;
• Functional cookies: Used to remember your preferences, such as your preferred language and display settings, to provide a more personalized experience.

merryjili does not use third-party advertising cookies or behavioral tracking cookies. We do not share cookie data with advertising networks or social media platforms.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

merryjili implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform;
• Encryption of sensitive data at rest, including financial data and government identification numbers;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all internal systems that process personal data;
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security specialists;
• Incident response procedures designed to detect, contain, and report personal data breaches in accordance with NPC notification requirements.

While merryjili takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying merryjili immediately if you suspect unauthorized access to your account.

merryjili retains your personal data for as long as is necessary to fulfill the purposes described in this Policy, or as required by applicable Philippine law, whichever is longer. The following retention periods apply:

• Account and identity data: Retained for a minimum of five (5) years following the closure or termination of your merryjili account, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Transaction and financial data: Retained for a minimum of five (5) years following the date of each transaction, in compliance with AML record-keeping obligations;
• Customer support records: Retained for three (3) years following the resolution of each support interaction;
• Marketing consent records: Retained for as long as you remain a registered player, and for three (3) years following account closure;
• Technical and usage logs: Retained for twelve (12) months from the date of collection, unless required for longer retention in connection with a security investigation or legal proceeding.

Upon expiry of the applicable retention period, merryjili will securely delete or anonymize your personal data in accordance with our data disposal procedures.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by merryjili:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy;
• Right of access: The right to request a copy of the personal data merryjili holds about you;
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held by merryjili;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to merryjili's legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on merryjili's legitimate interests;
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, please submit a written request to the merryjili Data Protection Officer at [email protected]. merryjili will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

The merryjili Platform is strictly intended for individuals who are at least 21 years of age. merryjili does not knowingly collect personal data from individuals under the age of 21. The 21-year minimum age requirement is enforced through mandatory age verification during the account registration process and through KYC document checks.

If merryjili becomes aware that personal data has been collected from an individual under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and report the matter to the relevant authorities where required by law.

If you are a parent or guardian and believe that your child has registered an account on merryjili, please contact us immediately at [email protected] so that we can take prompt action.

merryjili reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Where changes are material, merryjili will provide reasonable advance notice to registered players via email or a prominent notice on the Platform.

The date of the most recent revision to this Policy is displayed at the top of this page. Your continued use of the Platform following the effective date of any revised Policy constitutes your acknowledgment of the changes. We encourage you to review this Policy periodically to stay informed of how merryjili protects your personal data.

If you have any concerns about changes to this Policy, please contact our Data Protection Officer before the effective date of the changes. If you do not agree with the revised Policy, you may close your account by contacting our support team.

For all privacy-related inquiries, data subject requests, or complaints regarding merryjili's handling of your personal data, please contact our Data Protection Officer using the details below:

• Data Protection Officer: merryjili DPO
• Email: [email protected]
• Subject Line: Please use "Data Privacy Request" or "Privacy Complaint" in your email subject line to ensure prompt routing to our DPO;
• Response Time: Within 15 business days of receipt of your request.

If you are not satisfied with merryjili's response to your privacy inquiry or complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information about filing a complaint with the NPC is available on the NPC's official website.