1Overview
CrabJili ("we," "our," "us," or "the Company") operates the online sports betting and gaming platform available at crabjili.com and through associated mobile applications. We are a Philippine Amusement and Gaming Corporation (PAGCOR) licensed operator, and we are registered with the National Privacy Commission (NPC) as a personal information controller under the Data Privacy Act of 2012 (Republic Act 10173).
This Privacy Policy applies to all personal data collected through your use of the CrabJili website, mobile app, customer support channels, and any other touchpoints where you interact with our platform or our team. When you register an account on CrabJili, you acknowledge that you have read this policy and you consent to the collection and processing of your personal data as described herein.
We use plain language throughout this policy because we genuinely want you to understand what is happening with your information — not bury important details in legal language that no one would actually read. If anything here is unclear, our Data Protection Officer is reachable at the contact details in Section 13.
Under the Philippine Data Privacy Act, you have specific rights over your personal information — including the right to access, correct, and delete your data. CrabJili is committed to honoring these rights promptly and without unnecessary barriers. See Section 8 for the full list of your rights and how to exercise them.
2Personal Data We Collect
CrabJili collects only the personal data necessary to operate our platform safely, comply with our PAGCOR license conditions, and provide you with a smooth betting experience. The categories of personal data we process are as follows:
| Category | Examples | Why We Need It |
|---|---|---|
| Identity Data | Full name, date of birth, government ID number, nationality | Age verification, KYC compliance, account ownership |
| Contact Data | Mobile number, email address, home address | Account communication, OTP delivery, support contact |
| Financial Data | GCash/Maya account number, bank account details, transaction history | Processing deposits and withdrawals, AML compliance |
| Betting Data | Bet history, stakes, winnings, selected markets | Account management, fraud detection, responsible gaming monitoring |
| Technical Data | IP address, device ID, browser type, operating system, session logs | Security, fraud prevention, platform optimization |
| Usage Data | Pages visited, features used, time on platform, click patterns | Product improvement, personalized experience |
| Communications Data | Support chat logs, email correspondence, feedback submissions | Dispute resolution, service quality, compliance records |
CrabJili does not collect sensitive personal information (as defined under RA 10173) such as health data, political opinions, or religious beliefs, unless specifically required for a regulatory compliance purpose and with your explicit consent.
Identity & KYC
CrabJili verifies identity through government-issued Philippine IDs. This protects your account from unauthorized access and keeps the platform compliant with PAGCOR KYC requirements.
Financial Records
Transaction data is stored securely for withdrawal processing, dispute resolution, and compliance with the Anti-Money Laundering Act. CrabJili never stores full card numbers on our servers.
Technical & Device Data
Device and session data helps CrabJili detect suspicious login attempts, prevent account takeovers, and ensure the platform runs smoothly across all Philippine mobile networks.
3How We Collect Your Data
CrabJili collects personal data through the following channels:
- Direct from you: When you register an account on CrabJili, complete the KYC verification process, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
- Automatically through the platform: When you browse the CrabJili website or use the mobile app, we automatically collect technical data including your IP address, device identifiers, session duration, and the pages you visit. This is standard practice for all online platforms.
- Through cookies and similar technologies: CrabJili uses cookies, pixel tags, and local storage to recognize returning users, maintain your session, and gather anonymized usage analytics. See Section 7 for full details on our cookie practices.
- From third-party verification services: To complete KYC and anti-money laundering checks as required under our PAGCOR license, CrabJili may verify your submitted identity documents through authorized third-party identity verification providers operating under appropriate data sharing agreements.
- From payment processors: When you deposit or withdraw funds, CrabJili receives confirmation data from GCash, Maya, your bank, or other payment processors. We do not receive your full payment credentials — only the data necessary to match and reconcile transactions.
4How CrabJili Uses Your Personal Data
CrabJili processes your personal data only for legitimate, defined purposes. We do not use your data for purposes beyond what is described here without obtaining your explicit consent first. The legal bases under RA 10173 on which we rely are: contractual necessity (to deliver our services to you), legal obligation (to comply with PAGCOR, AML, and tax regulations), legitimate interest (to operate and improve our platform), and consent (for marketing communications).
4.1 Service Delivery
The primary reason CrabJili processes your data is to provide you with the betting services you signed up for. This includes creating and managing your account, accepting and settling your bets, processing deposits and withdrawals to and from your nominated Philippine payment method, and providing you with access to betting odds, live scores, and your betting history.
4.2 Regulatory Compliance
As a PAGCOR-licensed operator, CrabJili is legally required to verify member identities (KYC), monitor transactions for suspicious activity (AML), maintain accurate betting records for audit purposes, and report certain transactions and activities to PAGCOR, the Anti-Money Laundering Council (AMLC), and other relevant Philippine authorities when required by law. Your data is essential to these obligations.
4.3 Security and Fraud Prevention
CrabJili uses technical and behavioral data to detect and prevent unauthorized account access, identify multiple accounts operated by the same person, flag potentially fraudulent transactions, and protect the integrity of our betting markets. If our systems flag unusual activity on your account, we may suspend access temporarily while we investigate — this is to protect you as much as it is to protect the platform.
4.4 Responsible Gaming Monitoring
CrabJili monitors betting patterns across all member accounts as part of our responsible gaming obligations under our PAGCOR license. If our systems identify patterns that may indicate problematic gambling behavior — such as rapidly escalating stakes, frequent large losses, or erratic session patterns — our responsible gaming team may make contact to offer support and information about available tools.
4.5 Marketing and Promotions
With your consent, CrabJili may send you promotional communications about new betting markets, upcoming fight nights, PBA season promotions, bonus offers, and other CrabJili news through SMS, email, and in-app notifications. You can withdraw your marketing consent at any time through your account settings or by contacting support@crabjili.com. Withdrawing marketing consent does not affect your ability to use the platform.
4.6 Platform Improvement
Aggregated and anonymized usage data helps CrabJili's product team understand how members use the platform, which features are most useful, and where technical improvements should be prioritized. This analysis does not identify individual members and is used solely to improve the CrabJili experience for everyone.
6Data Storage and Security
CrabJili stores personal data on secure servers protected by industry-standard security measures. All data transmitted between your device and CrabJili's servers is encrypted using TLS (Transport Layer Security). Sensitive data — including financial information and identity documents — is encrypted at rest using AES-256 encryption.
TLS Encryption
All communication between your browser or app and CrabJili's servers is encrypted with TLS. Your login credentials, bet slips, and payment data travel securely at all times.
Encrypted Storage
Sensitive personal and financial data stored on CrabJili's servers is encrypted at rest. Even in the event of an infrastructure breach, your raw data would not be accessible without the encryption keys.
Access Controls
CrabJili staff access to member personal data is strictly role-based and logged. Only personnel with a specific operational need are authorized to view personal account information.
In the event of a personal data breach that is likely to result in risk to your rights and freedoms, CrabJili will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected members without undue delay as required under RA 10173 and its Implementing Rules and Regulations.
7Cookies and Tracking Technologies
CrabJili uses cookies and similar technologies on its website and mobile app. Cookies are small text files stored on your device that help the platform recognize you between sessions, maintain your login state, and understand how the platform is being used.
Types of Cookies CrabJili Uses
- Strictly Necessary Cookies: These are required for the CrabJili platform to function. They maintain your login session, remember your language preferences, and ensure bet slips work correctly. You cannot opt out of these without ceasing to use the platform.
- Performance Cookies: These collect anonymized data about how members use CrabJili — which pages load slowly, which features are most used, and where navigation problems occur. This data helps our technical team improve the platform.
- Functionality Cookies: These remember your preferences — such as your preferred sports view, odds format, or notification settings — so you do not have to reconfigure them every visit.
- Analytics Cookies: CrabJili uses analytics tools to understand overall platform traffic patterns and member engagement. Data collected through analytics cookies is aggregated and does not identify individual members.
You can manage non-essential cookies through your browser settings or through the CrabJili cookie preference center accessible from the platform footer. Disabling performance or analytics cookies will not affect your ability to bet or use any CrabJili feature.
8Your Data Rights Under Philippine Law
Under the Data Privacy Act of 2012 (RA 10173), you — as a CrabJili member and data subject — have the following rights with respect to your personal information. CrabJili is committed to responding to all rights requests within 15 calendar days of receiving a verified request.
Right to Access
Request a copy of the personal data CrabJili holds about you, including what it is, where it came from, and how it has been used.
Right to Rectification
Request correction of inaccurate or outdated personal data on your CrabJili account — including your name, address, or contact details.
Right to Erasure
Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
Right to Object
Object to CrabJili processing your personal data for direct marketing at any time. You can also object to other forms of processing where you have grounds to do so.
Right to Data Portability
Request your personal data in a structured, machine-readable format that you can take to another service provider.
Right to Complain
If you believe CrabJili has not handled your data correctly, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of your rights, send a written request to our Data Protection Officer at privacy@crabjili.com with the subject line "Data Subject Rights Request" and your registered CrabJili mobile number or email address for verification. We may need to verify your identity before processing the request to protect your account security.
9Minors and Age Restrictions
CrabJili's services are strictly available to persons aged 18 years and above. We do not knowingly collect personal data from anyone under 18. If you are a parent or guardian and you believe your child has registered on CrabJili, please contact us immediately at support@crabjili.com so we can close the account, delete all associated personal data, and return any funds that may have been deposited.
CrabJili conducts age verification as part of the KYC process. Any account where we cannot confirm that the member is of legal betting age will be suspended pending verification. We treat this obligation seriously — protecting minors from gambling harm is a core part of CrabJili's responsible gaming commitment.
If you share a device with other household members, we strongly recommend keeping your CrabJili login credentials secure and logging out after each session. You can also use your device's built-in parental control features to restrict access to the CrabJili website and app by minors in your household.
10Data Retention
CrabJili retains your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by applicable Philippine law and our PAGCOR license conditions. The following general retention periods apply:
- Active account data (identity, contact, financial, betting): Retained for the duration of your account's active status on CrabJili plus a minimum of five years following account closure, as required for anti-money laundering record-keeping under the AMLA.
- KYC documents: Retained for five years after account closure or the end of the business relationship, whichever is later, in line with PAGCOR and AMLC requirements.
- Transaction records: Retained for five years from the date of the transaction for tax and regulatory compliance purposes.
- Support communications: Retained for two years from the date of the last communication for dispute resolution and quality assurance purposes.
- Technical and session logs: Retained for 12 months from creation for security and fraud investigation purposes, then deleted or anonymized.
- Marketing consent records: Retained for the duration of your consent and for six months after withdrawal of consent as proof of your preferences.
When personal data reaches the end of its retention period, CrabJili will securely delete or anonymize it so that it can no longer be associated with you as an individual.
11Cross-Border Data Transfers
CrabJili primarily stores and processes member data within the Philippines. In certain cases, however, some of our technology service providers and cloud infrastructure partners may process or store data in data centers located outside the Philippines — for example, in other Southeast Asian jurisdictions or globally distributed cloud regions.
Whenever data is transferred outside the Philippines, CrabJili ensures that appropriate safeguards are in place as required by RA 10173. These safeguards include data processing agreements that require the recipient to maintain security standards equivalent to or exceeding those required under Philippine law, and that the recipient uses your data only for the specified purpose under the agreement.
CrabJili does not transfer personal data to jurisdictions known for inadequate data protection standards. If you have questions about specific cross-border transfers involving your data, contact our Data Protection Officer.
12Updates to This Privacy Policy
CrabJili reviews this Privacy Policy regularly and may update it to reflect changes in our services, changes in Philippine data privacy law and NPC regulations, new PAGCOR requirements, or improvements to how we explain our practices to members. The "Last Updated" date at the top of this document will always reflect when the current version was published.
When we make material changes to this policy — particularly changes that affect your rights or how we use your data — CrabJili will provide notice through a banner on the platform, an in-app notification, or direct communication to your registered contact details. We will give you adequate time to review significant changes before they take effect.
Continuing to use the CrabJili platform after a policy update takes effect constitutes your acceptance of the revised Privacy Policy. If you do not agree with the updated terms, you may close your account and withdraw your balance by contacting our support team.
13Contact Us and Data Protection Officer
CrabJili has appointed a Data Protection Officer (DPO) as required under RA 10173. If you have any questions about this Privacy Policy, want to exercise your data subject rights, or wish to report a concern about how CrabJili is handling your personal data, you can reach us through the following channels:
Data Privacy Queries
privacy@crabjili.com — for data subject rights requests, consent withdrawals, and privacy-related questions.
General Support
support@crabjili.com or 24/7 live chat on the CrabJili platform — for account-related help and general inquiries.
National Privacy Commission
If your complaint cannot be resolved by CrabJili directly, you have the right to escalate to the NPC of the Philippines.
Response Time Commitment: CrabJili's DPO will acknowledge all data subject rights requests within 3 business days of receipt and provide a substantive response or resolution within 15 calendar days. For complex requests that require additional processing time, we will inform you of the expected timeline and the reason for the extension.