nojl Privacy Policy

This Privacy Policy ("Policy") describes how nojl ("nojl," "we," "our," or "us") collects, uses, stores, shares, and protects personal data provided by or collected about individuals ("you," "Player," or "User") who register an account, access, or otherwise use the nojl Casino platform at nojl.club.

nojl is committed to handling your personal data responsibly and in compliance with applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By using the nojl platform — whether creating an account, depositing via GCash, participating in a live dealer game, or contacting our support team — you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, you should not use the nojl platform.

nojl operates the online casino platform accessible at nojl.club and is the data controller responsible for the personal data processed under this Policy. As data controller, nojl determines the purposes and means of processing your personal information.

nojl serves the Philippine market and processes personal data of Filipino players in connection with the provision of online casino and gaming services. All data processing activities described in this Policy are conducted in accordance with applicable Philippine law.

For all data protection queries, rights requests, and complaints, the designated nojl Data Protection contact may be reached at [email protected] with the subject line "Data Privacy Request."

nojl collects the following categories of personal data in the course of providing its services to Philippine players:

2.1 Registration and Identity Data

• Full legal name as it appears on a government-issued identification document
• Date of birth (required to verify the 21+ age requirement mandated by PAGCOR)
• Email address (used as the primary account identifier)
• Philippine mobile number (used for two-factor authentication and account recovery)
• Residential address

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo ID (e.g., PhilSys National ID, passport, driver's license, UMID, voter's ID, or SSS/GSIS ID)
• Proof of address documents where required (e.g., utility bill, bank statement)
• Selfie photographs submitted for identity confirmation

2.3 Financial and Payment Data

• GCash or Maya account details (mobile number associated with the e-wallet)
• Bank account numbers for bank transfer methods (BDO, BPI, Metrobank, UnionBank)
• Transaction histories including deposit amounts, withdrawal amounts, dates, and reference numbers
• Source of funds declarations where required for compliance purposes

2.4 Gaming and Account Activity Data

• Game session logs including games played, wager amounts, win/loss records, and session duration
• Bonus and promotion activity records
• Responsible gaming settings (deposit limits, session timers, self-exclusion status)
• Customer support interaction records and complaint history

2.5 Technical and Device Data

• IP address at time of registration, login, and transaction
• Device type, operating system, and browser type
• General geolocation derived from IP address (country/region level — nojl does not collect precise GPS location)
• Session identifiers and cookies

nojl collects personal data through the following means:

• Directly from you: when you register an account, complete KYC verification, make deposits or withdrawals, contact support, update your profile, or participate in promotions.
• Automatically through platform use: session logs, IP addresses, device information, and cookie data are collected automatically as you navigate and use the nojl platform.
• From third-party identity verification providers: where nojl uses a third-party KYC service to verify the authenticity of identification documents submitted by Players, that service may return verification results and confidence scores to nojl.
• From payment processors: transaction confirmation data is received from GCash, Maya, and other payment service providers to reconcile deposits and withdrawals.
• From game providers: game round results and RNG outcomes are recorded by game providers and reported to nojl to generate accurate account statements and ensure dispute resolution capability.

nojl processes your personal data for the following purposes:

nojl does not use personal data for automated decision-making that produces significant legal effects on Players, beyond fraud detection systems that flag accounts for human review.

Under the Data Privacy Act of 2012, nojl processes your personal data on the following legal grounds:

• Performance of a contract: The majority of processing activities — account management, payments, game delivery, support — are necessary to fulfill nojl's obligations to you under the Terms & Conditions you accepted upon registration.
• Legal obligation: KYC verification, AML record-keeping, transaction logging, and cooperation with regulatory authorities are required by Philippine law, including the Anti-Money Laundering Act (RA 9160, as amended) and applicable gaming regulations.
• Legitimate interests: Fraud prevention, platform security, responsible gambling monitoring, and aggregated platform analytics are processed on the basis of nojl's legitimate interests, balanced against your privacy rights. nojl has assessed that these processing activities do not unduly prejudice Players' privacy interests.
• Consent: Marketing communications and non-essential cookies are processed only where you have provided explicit, freely given, informed consent. You may withdraw this consent at any time without affecting the other processing described above.

nojl does not sell, rent, or trade your personal data to any third party. We share data only where necessary and only with the categories of recipient listed below:

• Payment service providers: GCash (Mynt/G-Xchange), Maya (PayMaya Philippines, Inc.), BDO Unibank, Bank of the Philippine Islands, Metrobank, UnionBank, and other payment processors receive payment-relevant data solely to process transactions on your behalf.
• Identity verification providers: Third-party KYC service providers receive identity documents and photographs for the purpose of verifying that you meet nojl's age and identity requirements. These providers are contractually bound to process data only for this purpose.
• Game software providers: Licensed game studios (e.g., Microgaming, Pragmatic Play, and their affiliates) receive the minimum data necessary to deliver game sessions and resolve disputes — typically an anonymized player token, stake, and game round identifier.
• Fraud prevention and security services: nojl may share device and IP data with fraud prevention providers to verify the legitimacy of logins and transactions.
• Regulatory authorities and law enforcement: Where required by Philippine law, court order, or PAGCOR/NPC regulatory requirement, nojl will disclose personal data to the relevant authority. nojl will notify affected Players of such disclosures to the extent permitted by law.
• Professional advisors: Legal counsel, auditors, and compliance consultants may access limited personal data under strict confidentiality obligations where necessary for professional services.

nojl retains personal data for as long as is necessary for the purpose for which it was collected, or for as long as is required by applicable law, whichever is longer.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual. Anonymized aggregated data may be retained indefinitely for statistical and analytical purposes.

nojl implements technical and organizational security measures appropriate to the risk profile of the personal data it processes. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and nojl servers.
• Encryption at rest for sensitive stored data including KYC documents and financial records.
• Hashed password storage — nojl never stores plain-text passwords. Passwords are stored using industry-standard cryptographic hashing algorithms, meaning nojl staff cannot retrieve your password.
• Two-factor authentication (2FA) available to all Players for account access, using one-time codes sent to your registered Philippine mobile number.
• Role-based access control — internal access to personal data is restricted on a need-to-know basis. Support agents, compliance staff, and technical teams have access only to the data required for their specific function.
• Regular security assessments of the nojl platform, including penetration testing and vulnerability scanning.
• Incident response procedures that comply with NPC-mandated breach notification requirements, including reporting to the NPC and notifying affected Players within 72 hours of discovery of a qualifying personal data breach.

Despite these measures, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials. If you believe your account has been compromised, contact support at [email protected] immediately.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nojl. You may exercise any of these rights by contacting [email protected] with the subject line "Data Privacy Request." nojl will respond within 30 calendar days of receiving a verified request.

If you believe nojl has not handled your personal data appropriately, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Complaint procedures are available at the NPC's official website. nojl encourages Players to contact us directly first so we can resolve any concerns promptly.

nojl uses cookies — small text files stored on your device — and similar technologies such as web storage and session tokens to operate the platform effectively. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in during a session, CSRF protection tokens, and load balancing identifiers. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Remember your preferences, including your preferred language, the last game category you browsed, and whether you have previously dismissed certain notifications. These improve your experience but are not essential.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Players navigate the nojl platform — which sections receive the most visits, average session duration, and error rates. This data helps nojl improve the platform. No individual-level data is exported from analytics cookies.

nojl does not use:

• Third-party advertising or retargeting cookies
• Social media tracking pixels from any platform
• Cross-site tracking technologies

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging in and using nojl Casino.

nojl Casino is strictly prohibited to persons under 21 years of age, consistent with the minimum gambling age set by PAGCOR for casino-style gaming in the Philippines. nojl does not knowingly collect personal data from individuals under 21.

Age verification is conducted at the account registration stage and again during KYC verification before real-money gaming access or withdrawals are permitted. Where nojl discovers — through KYC review or complaint — that an account was registered by a person under 21, the account will be immediately closed, all winnings will be forfeited, and the deposited amount will be returned through the original payment method after identity confirmation.

Parents and guardians in the Philippines can also make use of internet filtering and parental control software to restrict access to online gambling platforms on household and family devices.

nojl's primary data processing activities are conducted in the Philippines. However, certain service providers — including game software providers and cloud infrastructure partners — may be located or operate servers outside the Philippines.

Where personal data is transferred outside the Philippines, nojl ensures that appropriate safeguards are in place to protect your data to a standard equivalent to Philippine data protection requirements. These safeguards include:

• Contractual obligations (Data Processing Agreements) that impose equivalent privacy and security standards on the recipient.
• Selection of service providers that operate in jurisdictions recognized as providing adequate data protection standards, or that have undergone independent security certification.

Cross-border transfers are limited to what is strictly necessary to deliver the services described in this Policy. nojl does not transfer personal data to overseas entities for purposes unrelated to platform operation.

The nojl platform integrates third-party services including game providers and payment processors, as described in Section 6. Each such third party operates under its own privacy policy, and nojl is not responsible for the data practices of third-party services once data passes to them under the specific purpose for which it was shared.

nojl does not embed third-party social media widgets, advertising networks, or analytics platforms that would collect Player data independently. Any links to third-party platforms that may appear in nojl marketing communications lead to pages governed by those platforms' own privacy policies — nojl is not responsible for the content or privacy practices of websites it does not own or operate.

nojl may update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements, or platform development. The "Last Updated" date at the top of this Policy reflects the most recent revision.

Where changes are material — meaning they meaningfully affect your rights or how nojl processes your personal data — nojl will notify registered Players by email to their registered address at least 14 days before the revised Policy takes effect.

Continued use of the nojl platform after the effective date of an updated Privacy Policy constitutes acceptance of the revised version. If you do not agree with the changes, you should close your account and request data deletion before the effective date.

For all privacy-related queries, rights requests, complaints, or concerns regarding nojl's handling of your personal data, please contact us using the details below:

If you are not satisfied with nojl's response to a data privacy concern, you may escalate your complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the Philippine government authority responsible for overseeing compliance with the Data Privacy Act of 2012.

This Privacy Policy was last reviewed on 1 January 2026 and is effective from that date.