10ji Privacy
Policy

This Privacy Policy ("Policy") is issued by 10ji ("10ji," "we," "us," "our"), the operator of the online gaming platform accessible at 10ji.vip and all associated subdomains, interfaces, and applications. This Policy describes how 10ji collects, processes, stores, shares, and protects the personal information of individuals ("you," "your," "Data Subject") who register for or use the 10ji platform.

10ji is committed to processing personal data in full compliance with Republic Act No. 10173 (the Data Privacy Act of 2012, "DPA"), its Implementing Rules and Regulations, the issuances of the National Privacy Commission ("NPC") of the Philippines, and the applicable guidelines of the Philippine Amusement and Gaming Corporation ("PAGCOR"). Where the platform serves users located in other jurisdictions, 10ji applies equivalent standards of data protection.

This Policy should be read together with 10ji's Terms & Conditions and Responsible Gaming Policy, all of which form part of the overarching agreement between 10ji and each registered user. In the event of any inconsistency between this Policy and those documents on a matter specific to data privacy, this Policy prevails.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules, 10ji is the Personal Information Controller ("PIC") in respect of all personal data collected and processed in connection with the operation of the 10ji platform. 10ji determines the purposes and means of personal data processing, and bears primary accountability for the proper handling of your information.

10ji has designated a Data Protection Officer ("DPO") who is responsible for overseeing this Policy, handling data subject requests, responding to NPC enquiries, and maintaining 10ji's data privacy compliance programme. Contact details for the DPO are provided in Section 15 of this Policy.

10ji collects personal data through multiple channels — directly from you during registration and use of the platform, automatically through your interactions with the 10ji website and apps, and from third parties such as payment processors and identity verification services. The categories of personal data we collect are set out below.

3.1 Registration & Identity Data

3.2 Financial & Transaction Data

3.3 Technical & Usage Data

• IP address, approximate geographic location derived from IP, and login timestamps.
• Device type, operating system, browser type and version, screen resolution.
• Pages viewed on the 10ji platform, features accessed, navigation patterns, time spent on page.
• Cookie identifiers and similar tracking technologies (see Section 9).
• Error logs and crash reports generated during your use of the 10ji platform.

3.4 Communications Data

• Records of all communications between you and 10ji customer support, including live chat transcripts and email correspondence.
• Feedback, survey responses, and complaint records submitted to 10ji.
• Marketing communication preferences (opt-in and opt-out records).

10ji processes your personal data only for legitimate, specified, and explicitly stated purposes. We do not process your data for purposes beyond those listed below unless we obtain your prior consent or are required to do so by law.

• Account Registration and Management: Creating and maintaining your 10ji account, verifying your identity and eligibility to use the platform, and managing your login credentials.
• Age and Eligibility Verification: Confirming that you meet the mandatory 21+ age requirement under Philippine law and PAGCOR regulations before you are permitted to place bets or make deposits.
• KYC and AML Compliance: Conducting Know Your Customer identity verification and monitoring transactions to detect and prevent money laundering, fraud, and other financial crimes, as required by PAGCOR and applicable Philippine legislation.
• Payment Processing: Facilitating deposits and withdrawals through your chosen payment method (GCash, Maya, BPI, BDO, etc.), and maintaining accurate financial records of all transactions on your 10ji account.
• Gaming Services Delivery: Providing access to all games, betting markets, and promotional features available on the 10ji platform.
• Responsible Gaming: Monitoring gaming patterns to identify signs of problem gambling behaviour and administering self-exclusion, deposit limit, and cooling-off tools at your request or where required by PAGCOR guidelines.
• Customer Support: Responding to your queries, complaints, and requests relating to your 10ji account, payments, or gaming activity.
• Security and Fraud Prevention: Detecting, investigating, and preventing unauthorised access, account takeover attempts, cheating, collusion, and other fraudulent or abusive activity.
• Legal and Regulatory Compliance: Fulfilling 10ji's obligations under PAGCOR licence conditions, the Data Privacy Act of 2012, the Anti-Money Laundering Act, and other applicable Philippine laws.
• Marketing Communications (with your consent): Sending you promotional offers, bonus notifications, and platform updates through the communication channels you have opted into. You may withdraw consent at any time.
• Platform Improvement: Analysing aggregated and anonymised usage data to improve the performance, design, and features of the 10ji platform.

Under the Data Privacy Act of 2012, 10ji must have a recognised legal basis for each category of personal data processing. The primary legal bases relied upon by 10ji are as follows:

• Performance of Contract: Processing necessary to fulfil 10ji's contractual obligations to you under the Terms & Conditions — including account management, game delivery, and payment processing.
• Legal Obligation: Processing required to comply with 10ji's obligations under Philippine law, including PAGCOR licensing conditions, AML reporting requirements, tax obligations, and NPC data privacy compliance.
• Legitimate Interests: Processing necessary for 10ji's legitimate business interests, including fraud prevention, platform security, and statistical analysis — provided those interests do not override your fundamental rights.
• Consent: Processing of your data for marketing communications and certain analytics purposes, where 10ji has obtained your explicit, informed, and freely given consent. You have the right to withdraw this consent at any time without affecting the lawfulness of prior processing.

10ji does not sell your personal data to third parties. 10ji does not share your personal data for the direct marketing purposes of unrelated third parties. Your data is shared only in the following limited and controlled circumstances:

6.1 Service Providers (Personal Information Processors)

10ji engages trusted third-party service providers ("Personal Information Processors" under Philippine law) who process data on 10ji's behalf under written contracts that require them to maintain appropriate data protection standards. These include: payment processing partners (GCash, Maya, bank partners), KYC identity verification service providers, game software providers, customer support platform operators, cloud hosting and infrastructure providers, and fraud detection and analytics services.

6.2 Regulatory & Law Enforcement Disclosures

10ji is legally obligated to disclose personal data to PAGCOR, the Anti-Money Laundering Council ("AMLC"), the National Privacy Commission, the Bureau of Internal Revenue ("BIR"), and other Philippine government bodies upon valid legal demand or as required by the conditions of 10ji's PAGCOR licence. 10ji may also disclose data to law enforcement agencies in the Philippines where required by court order or valid legal process.

10ji retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

Upon expiry of the applicable retention period, 10ji will securely delete or anonymise your personal data such that you can no longer be identified from the retained information.

10ji implements a comprehensive set of technical, organisational, and physical security measures designed to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Encryption in Transit: All data transmitted between your device and the 10ji platform is encrypted using industry-standard 256-bit Transport Layer Security (TLS/SSL). Credentials entered during the 10ji Login process are never transmitted in plain text.
• Encryption at Rest: Sensitive personal data stored in 10ji's systems — including KYC documents and financial identifiers — is encrypted at rest using AES-256 encryption.
• Password Security: Account passwords are stored as one-way cryptographic hashes using modern hashing algorithms. 10ji never stores raw passwords and cannot retrieve them.
• Two-Factor Authentication: 10ji employs SMS-based OTP verification on new device logins and at other security checkpoints to prevent unauthorised account access.
• Access Controls: Access to personal data within 10ji's systems is restricted on a strict need-to-know basis. All data access is logged and subject to regular internal audit.
• Security Monitoring: 10ji maintains 24/7 monitoring of its systems for suspicious activity, intrusion attempts, and anomalous behaviour patterns.
• Data Breach Response: 10ji maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk of serious harm, 10ji will notify the National Privacy Commission and affected data subjects within the timeframes required by the Data Privacy Act.

The 10ji platform uses cookies and similar technologies (including local storage, session storage, and pixel tags) to operate core platform functions, improve user experience, and gather anonymised usage statistics. A cookie is a small text file placed on your device by the 10ji website when you visit.

9.1 Essential Cookies

These are strictly necessary for the 10ji platform to function. They maintain your authenticated session after the 10ji Login, remember your language preference, protect against cross-site request forgery, and load-balance traffic across 10ji's servers. Essential cookies cannot be disabled without rendering core platform features inoperable.

9.2 Analytics Cookies

10ji uses analytics cookies to understand how players navigate and use the platform. These cookies collect anonymised and aggregated information about page views, feature usage, navigation paths, and session durations. No personally identifiable information is shared with analytics providers in this context.

9.3 Functional Cookies

These cookies remember your preferences — such as your most recently played game category, display settings, and responsible gaming reminder configurations — to provide a more personalised experience on return visits to 10ji.

The 10ji platform is strictly prohibited for persons under the age of twenty-one (21) years. This is not merely a policy preference — it is a mandatory requirement under Philippine law and the regulatory conditions of 10ji's PAGCOR licence.

If you are a parent or guardian and believe that a person under 21 in your care has registered a 10ji account, please contact 10ji customer support immediately so that the account can be reviewed and closed if confirmed. 10ji takes underage access seriously and enforces its age verification procedures rigorously.

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights in respect of your personal data held by 10ji. These rights are subject to applicable legal limitations and may be qualified by 10ji's obligations under PAGCOR licence conditions and AML law.

• Right to Be Informed: You have the right to be informed that your personal data is being collected and processed, and to receive this Privacy Policy describing how your data is handled by 10ji.
• Right of Access: You have the right to request a copy of the personal data that 10ji holds about you, together with information about how it is processed. You may submit an access request to 10ji's DPO.
• Right to Rectification: If any personal data held by 10ji about you is inaccurate, incomplete, or out of date, you have the right to request its correction. You may update many account details directly through your 10ji account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request that 10ji delete your personal data where it is no longer necessary for the purpose for which it was collected, subject to 10ji's legal retention obligations under AML, tax, and PAGCOR regulations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in certain circumstances.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract performance, you may request that 10ji provide your personal data in a structured, machine-readable format.
• Right to Complain: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 10ji has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact 10ji's Data Protection Officer using the contact details in Section 15. 10ji will acknowledge your request within five (5) working days and respond in full within fifteen (15) working days, which may be extended by a further fifteen (15) working days where the request is complex or voluminous.

Some of 10ji's third-party service providers — including cloud infrastructure providers, game software platforms, and analytics services — may process personal data outside the Republic of the Philippines. Where such transfers occur, 10ji ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by Philippine law.

These safeguards include: data processing agreements requiring compliance with the Data Privacy Act standards; standard contractual clauses approved for cross-border data transfers; and transfer to countries or organisations recognised as offering an adequate level of data protection by the NPC or applicable authority.

10ji does not transfer your personal data to any jurisdiction where adequate data protection safeguards cannot be provided. If you would like more information about the safeguards applicable to a specific international transfer, please contact 10ji's DPO.

The 10ji platform may contain links to or integrations with third-party payment services (such as the GCash and Maya payment interfaces). These third-party services operate independently of 10ji and have their own privacy policies. 10ji is not responsible for the data practices of third-party platforms, including the payment gateways you use to fund your 10ji account.

When you initiate a GCash or Maya transaction from the 10ji platform, you will be redirected to or interact with those services' own interfaces. Any personal data you submit directly to those third-party services is governed by their respective privacy policies — not this Policy. 10ji only receives the transaction confirmation and reference data necessary to credit your account.

10ji reserves the right to update or amend this Privacy Policy at any time to reflect changes in law, regulatory requirements, or 10ji's data processing practices. The date of the most recent update is indicated at the top of this Policy.

Where amendments are material — meaning they significantly affect your rights or the way 10ji processes your data — 10ji will provide advance notice through one or more of the following channels: a notice displayed upon your next 10ji Login, an announcement published on the 10ji platform, or a notification sent to your registered mobile number or email address.

Your continued use of the 10ji platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy. The current version of this Policy is always available at 10ji.vip/privacy-policy and supersedes all prior versions.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to raise a data privacy concern about 10ji's practices, please contact 10ji's Data Protection Officer through the following channels:

This Privacy Policy was last reviewed and updated in January 2026. All previous versions of this Policy are superseded by this version. Prior versions may be requested from the DPO for reference purposes.