nojl Privacy Policy

01 Introduction

nojl ("we", "us", "our") operates the online gambling platform accessible at nojl.app, providing Filipino players with access to live casino games, online sabong, slot machines, sports betting, bingo, and related services. In the course of operating this platform and managing player accounts, nojl necessarily collects and processes personal data.

This Privacy Policy sets out, in clear terms, the categories of personal data nojl collects from you, the purposes for which that data is processed, the legal bases on which nojl relies to process your data, the parties with whom nojl may share your data, the security measures applied to protect it, and the rights available to you under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines.

nojl is committed to processing personal data lawfully, fairly, and transparently. If you have questions about how nojl handles your data at any time, you can contact the nojl Data Privacy team as described in Section 17.

02 Data Controller

For the purposes of the Data Privacy Act of 2012, nojl is the personal information controller responsible for personal data collected through nojl.app. nojl determines the purposes and means of processing personal data provided by players and website visitors.

nojl has designated a Data Protection Officer (DPO) who oversees compliance with data protection obligations. The DPO may be contacted through the support channels described in Section 17 of this Policy.

03 Categories of Personal Data We Collect

nojl collects the following categories of personal data from players and platform visitors:

3.1 Identity and Registration Data

Data Category	Specific Items	Purpose
Identity Data	Full name, date of birth, nationality, government ID type and number	KYC verification, age confirmation, account identity
Contact Data	Philippine mobile number, email address (if provided)	Account access, OTP delivery, security alerts, communications
Account Data	Username, encrypted password, account creation date, login history	Account management, security monitoring, fraud prevention
Verification Data	Copies of government-issued ID, selfie verification images	KYC compliance, AML obligations, regulatory requirements

3.2 Financial and Transaction Data

Data Category	Specific Items	Purpose
Payment Method Data	GCash-linked mobile number, Maya account reference, bank account numbers (last four digits only for cards)	Deposit processing, withdrawal routing, payment verification
Transaction History	Deposit amounts, dates, payment methods; withdrawal requests, amounts, processing status	Account management, financial reporting, AML monitoring
Balance Data	Real-money balance, bonus balance, pending withdrawal amounts	Account operation, player dashboard display

3.3 Gaming Activity Data

Data Category	Specific Items	Purpose
Gameplay Records	Game titles played, bet amounts, outcomes, session timestamps, round identifiers	Dispute resolution, RTP auditing, responsible gaming monitoring
Responsible Gaming Data	Deposit limits set, self-exclusion records, cooling-off periods, reality check preferences	Responsible gaming compliance, player protection
Loyalty Data	Loyalty points earned, tier level, reward redemption history	Loyalty program administration

3.4 Technical and Device Data

When you access nojl, we automatically collect certain technical data including: IP address and approximate geographic location; device type, operating system, and browser version; session duration and page navigation patterns; and referral source (how you arrived at nojl.app). This data is used for security monitoring, fraud prevention, platform performance optimization, and — where applicable — responsible gaming assessments.

04 How We Collect Your Personal Data

nojl collects personal data through the following means:

• Direct provision by you: Data entered during account registration, KYC submission, deposit/withdrawal requests, support communications, and responsible gaming tool activation;
• Automated technical collection: Device data, IP address, session data, and cookie-derived analytics collected automatically when you access nojl.app;
• Payment processor data: Transaction confirmation data shared by GCash, Maya, GrabPay, and banking partners in connection with deposit and withdrawal processing;
• Third-party verification services: Identity verification data from KYC service providers used to confirm document authenticity and check against regulatory watchlists;
• Public sources: Publicly available regulatory databases, such as PAGCOR's self-exclusion registry and AML-relevant sanctions lists.

05 How nojl Uses Your Personal Data

nojl uses your personal data for the following purposes:

• Account creation and management: Registering and maintaining your nojl account, processing your nojl login, managing account security and password recovery;
• Service delivery: Enabling access to casino games, live sabong, slots, sports betting, and bingo; processing deposits and withdrawals; administering bonuses and the nojl Loyalty Program;
• Identity and age verification: Conducting KYC to confirm you are 21 years of age or older and eligible to use nojl's gambling services;
• Legal and regulatory compliance: Meeting obligations under Philippine law including AML requirements, PAGCOR regulatory requirements, and responding to lawful requests from government authorities;
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, money laundering, bonus abuse, and other prohibited conduct;
• Responsible gambling: Monitoring gaming patterns to identify indicators of problem gambling; administering deposit limits, self-exclusion, and cooling-off tools;
• Customer support: Responding to your queries, resolving disputes, and providing technical assistance via live chat and other support channels;
• Service improvement: Analyzing platform usage patterns to improve performance, game selection, user experience, and payment system reliability;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates — only where you have provided consent to receive such communications.

06 Legal Basis for Processing

nojl processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contract performance: Processing necessary to provide the nojl platform services you have registered for, including account management, game access, and payment processing;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, regulatory reporting requirements, and responses to lawful authority requests;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where nojl's legitimate interests do not override your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given consent. You may withdraw consent for marketing at any time through your account settings.

07 Data Sharing and Third-Party Disclosure

nojl does not sell, rent, or trade your personal data to third parties. nojl may share your personal data with the following categories of recipients strictly as necessary:

• Payment processors: GCash (Mynt), Maya (Voyager Innovations), GrabPay, BPI, BDO, Metrobank, and cryptocurrency wallet providers — for the sole purpose of processing your transactions;
• KYC and identity verification providers: Third-party services contracted by nojl to verify identity documents, confirm age eligibility, and screen against regulatory watchlists;
• Game content providers: Software studios and live dealer platform providers (such as Pragmatic Play) may process limited session and game round data as necessary to deliver game content — subject to contractual data protection obligations;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by Applicable Law or pursuant to a lawful order;
• Professional advisers: Legal counsel, auditors, and compliance consultants bound by professional confidentiality obligations, where engagement requires limited data access;
• Business successors: In the event of a merger, acquisition, or sale of nojl's business operations, personal data may be transferred to the successor entity, subject to equivalent data protection standards.

08 Cookies and Tracking Technologies

nojl uses cookies and similar tracking technologies when you access nojl.app. The following categories of cookies are used:

• Strictly necessary cookies: Required for platform functionality — managing your login session, maintaining your balance display, and processing game connections. These cannot be disabled without impairing platform function;
• Security cookies: Used for fraud detection, session authentication, and implementing rate limits on login attempts;
• Performance and analytics cookies: Used to understand how players navigate nojl.app, which features are most used, and where technical issues occur. Data collected is aggregated and does not identify individual players;
• Preference cookies: Store your platform preferences such as language selection, responsible gaming reminders, and display settings.

Non-essential cookies are only placed with your consent. You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect your nojl login experience and platform functionality.

09 Data Security

nojl implements the following technical and organizational security measures to protect your personal data:

• Encryption in transit: All data transmitted between your device and nojl.app is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms an active encrypted connection;
• Encryption at rest: Personal data stored in nojl's databases — including identity records, payment data, and KYC documents — is encrypted using AES-256 encryption;
• Access controls: Access to personal data is restricted to nojl personnel with a specific operational need. All internal access is logged and subject to regular audit;
• Two-factor authentication: SMS-based 2FA is available for all nojl accounts and is strongly recommended. Account access from unrecognized devices triggers an authentication challenge;
• Penetration testing: nojl's security infrastructure undergoes regular independent penetration testing to identify and remediate vulnerabilities before they can be exploited;
• Data breach response: In the event of a personal data breach, nojl will notify affected players and the National Privacy Commission in accordance with the requirements of the Data Privacy Act and its Implementing Rules and Regulations.

10 Data Retention

nojl retains personal data for the following periods, after which data is securely deleted or irreversibly anonymized:

• Active account data: Retained for the duration of your account's active status and for a period of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements;
• Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction in accordance with Anti-Money Laundering Act (AMLA) requirements;
• KYC documents: Identity verification documents are retained for five (5) years from the date of verification or account closure, whichever is later;
• Gaming history: Game round records are retained for a minimum of three (3) years from the date of the game round, for dispute resolution and auditing purposes;
• Responsible gaming records: Self-exclusion and limit-setting records are retained for the duration of any active restriction plus five (5) years thereafter;
• Marketing consent records: Records of your marketing preferences and consent status are retained for as long as your account is active, and for three (3) years following account closure.

11 Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by nojl:

To exercise any of these rights, contact nojl's Data Privacy team via live chat at nojl.app or email at [email protected] with the subject line "Data Privacy Request". nojl will respond to all data rights requests within 30 days of receipt.

Please note that certain data rights may be limited where retention or processing is required by Applicable Law — for example, transaction records subject to AML retention requirements cannot be deleted on request during the mandatory retention period.

12 Marketing Communications

12.1 nojl may send you promotional communications — including bonus offers, new game announcements, loyalty tier updates, and special event notifications — via SMS to your registered Philippine mobile number, where you have provided consent to receive such communications during registration or subsequently through your account settings.

12.2 You may withdraw your consent to receive marketing communications at any time by: (a) updating your communication preferences in your nojl account settings; or (b) contacting nojl support via live chat and requesting removal from promotional communications. Withdrawal of marketing consent does not affect your ability to use nojl services or your eligibility for promotions that are automatically applied to eligible accounts without a marketing communication requirement.

12.3 nojl will continue to send service-related communications — such as account security alerts, deposit confirmations, withdrawal notifications, and OTP codes — regardless of your marketing communication preferences, as these are necessary for the operation of your account.

13 Minors and Age Restriction

nojl's platform is strictly restricted to individuals who are 21 years of age or older. nojl does not knowingly collect personal data from persons under 21 years of age. The minimum age requirement is enforced through mobile number verification at registration and KYC document checks.

If nojl discovers that personal data has been collected from a person under 21 years of age, nojl will immediately suspend the relevant account, delete the collected personal data to the extent permitted by law, and report the matter as required by Applicable Law. Parents or guardians who believe a minor has registered a nojl account should contact support immediately via live chat.

14 Third-Party Services and Links

The nojl platform may incorporate third-party game content from software providers including, but not limited to, Pragmatic Play, Evolution Gaming, and other licensed studios. These providers operate their own game servers and may process limited session data as part of game delivery. nojl enters into data processing agreements with all such providers to ensure your data is handled in accordance with applicable standards.

nojl.app does not contain links to external websites not operated by nojl. This Privacy Policy applies exclusively to data processed through nojl.app and its associated services.

15 Cross-Border Data Transfers

Some of nojl's service providers and game content partners may be located or operate servers outside the Republic of the Philippines. Where personal data is transferred to recipients in other countries, nojl ensures that appropriate safeguards are in place — including contractual data protection clauses — to ensure your data receives a level of protection equivalent to that provided under the Data Privacy Act of 2012.

By registering a nojl account, you acknowledge that your personal data may be processed in countries outside the Philippines in accordance with this Policy. nojl will not transfer personal data to any jurisdiction that does not provide adequate data protection standards without implementing appropriate contractual safeguards.

16 Changes to This Privacy Policy

nojl may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or regulatory guidance. When material changes are made, nojl will notify registered players by in-account notification and/or SMS to your registered Philippine mobile number, with a minimum of seven (7) days' advance notice before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of nojl following notification of a Policy update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

17 Contact and Complaints

For any privacy-related queries, data rights requests, or concerns about how nojl handles your personal data, please contact the nojl Data Privacy team: