Privacy Policy

1.Introduction

uujili Casino ("uujili," "we," "us," or "our") operates the online gaming platform accessible at uujili.cam (the "Platform"). In the course of providing our services to players across the Philippines — from Manila and Quezon City to Cebu, Davao, and beyond — uujili collects, processes, and stores certain personal information about you.

This Privacy Policy ("Policy") describes how uujili handles personal data in accordance with the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. We are committed to upholding the principles of transparency, legitimate purpose, and proportionality in all our data processing activities.

By accessing the Platform or creating a uujili account, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree, please discontinue your use of the Platform immediately.

This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of uujili.

2.Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is:

As the data controller, uujili determines the purposes and means by which your personal data is processed. Where uujili engages third-party service providers to process personal data on our behalf, those parties act as data processors and are bound by contractual obligations consistent with applicable data protection law.

3.Data We Collect

uujili collects personal data that is necessary for providing our services, complying with legal obligations, and improving your experience on the Platform. The categories of personal data we collect include:

uujili does not collect sensitive personal information as defined under the DPA — such as health data, religious beliefs, or political affiliations — unless specifically required by law or explicitly consented to by you.

4.How We Collect Data

uujili collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Data collected automatically as you use the Platform, including through cookies, web beacons, log files, and similar tracking technologies (see Section 10).
• Third-party sources: Data received from identity verification providers, payment processors, fraud detection services, and game providers in connection with your use of the Platform.
• Publicly available sources: Information that may be lawfully obtained from public registries or databases for identity verification or fraud prevention purposes.

5.Purposes of Processing

uujili processes your personal data for the following specific, legitimate purposes:

1. Account management: Creating, maintaining, and administering your player account, including authentication and security.
2. Service delivery: Enabling you to access games, place wagers, and use all features of the Platform.
3. Financial processing: Processing deposits, withdrawals, and other financial transactions securely and accurately.
4. Identity verification (KYC): Verifying your identity and age in compliance with Philippine gaming regulations and AML obligations.
5. Legal compliance: Meeting our obligations under the Data Privacy Act, Anti-Money Laundering Act, and other applicable Philippine laws, as well as cooperating with PAGCOR and other regulatory authorities.
6. Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, cheating, multi-accounting, and other prohibited activities.
7. Responsible gaming: Monitoring gaming behavior to identify signs of problem gambling and applying responsible gaming tools where appropriate.
8. Customer support: Responding to your inquiries, resolving disputes, and improving the quality of our support services.
9. Platform improvement: Analyzing usage patterns and player behavior to enhance the Platform's performance, features, and user experience.
10. Marketing and promotions: Sending you information about relevant promotions, bonuses, and new games, subject to your marketing preferences and consent where required.

uujili will not process your personal data for purposes incompatible with those stated above without your explicit consent or a lawful basis under the DPA.

6.Legal Basis for Processing

uujili relies on the following legal bases under the Data Privacy Act of 2012 to process your personal data:

• Contractual necessity: Processing required to perform our contract with you, including account registration, service delivery, and financial transactions.
• Legal obligation: Processing necessary to comply with applicable Philippine laws, including KYC requirements, AML regulations, and regulatory reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests do not override your fundamental rights.
• Consent: Processing for marketing communications and certain optional features, where you have provided freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7.Sharing Your Personal Data

uujili does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Game providers and software partners: Pragmatic Play, PG Soft, JILI, Evolution Gaming, Microgaming, and other providers necessary to deliver gaming services.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, cryptocurrency processors, and other financial service providers facilitating transactions.
• Identity verification and KYC providers: Third-party services used to verify your identity and comply with AML obligations.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine courts, and other competent authorities, where required by law or lawful order.
• Fraud prevention and security services: Third-party providers assisting in detecting and preventing fraudulent activity on the Platform.
• Professional advisers: Legal counsel, auditors, and consultants bound by professional confidentiality obligations.
• Business transfers: In connection with a merger, acquisition, or sale of assets, subject to the receiving party assuming equivalent data protection obligations.

8.Data Retention

uujili retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with our legal obligations, resolve disputes, and enforce our agreements. General retention periods are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years after account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of ten (10) years in accordance with Philippine banking and AML regulations.
• KYC and identity documents: Retained for the period required by applicable law and regulatory guidelines, typically five (5) years from the end of the business relationship.
• Communications and support records: Retained for up to three (3) years following the resolution of each matter.
• Marketing data: Retained until you withdraw consent or opt out, after which it is promptly deleted or anonymized.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original information.

9.Security Measures

uujili takes the security of your personal data seriously and implements appropriate technical and organizational measures to protect it against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data stored in our databases, including financial credentials and identity documents
• Multi-factor authentication for account access and administrative systems
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis
• 24/7 intrusion detection and real-time security monitoring
• Regular staff training on data protection obligations and security best practices
• Incident response procedures for promptly detecting and managing personal data breaches

In the event of a personal data breach that is likely to result in harm to you, uujili will notify the National Privacy Commission and affected data subjects in accordance with the timeframes and requirements prescribed by the DPA and NPC regulations.

10.Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files stored on your device when you visit the Platform. uujili uses cookies and similar technologies (such as web beacons, pixel tags, and local storage) to enhance your experience, maintain session security, and gather analytics data.

10.2 Types of Cookies We Use

• Strictly necessary cookies: Essential for the Platform to function. These enable core features like login sessions and security checks. They cannot be disabled without affecting your ability to use the Platform.
• Functional cookies: Remember your preferences (e.g., language settings, game history) to personalize your experience across sessions.
• Analytics cookies: Help us understand how players interact with the Platform, which pages are most visited, and where improvements can be made. Data collected is aggregated and anonymized.
• Security cookies: Used for fraud prevention, bot detection, and protection against cross-site request forgery (CSRF) attacks.

10.3 Managing Cookies

You may configure your browser to refuse or delete cookies. Please note that disabling strictly necessary cookies may impair your ability to log in or use certain features of the Platform. For information on managing cookies in your specific browser, consult your browser's help documentation.

11.Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by uujili:

• Right to be informed: The right to know that your personal data is being collected and processed, and the purposes for which it is used.
• Right to access: The right to request a copy of the personal data we hold about you and information about how it is processed.
• Right to rectification: The right to request correction of inaccurate, incomplete, or outdated personal data.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please submit a written request to our Data Privacy contact at [email protected]. We will respond to your request within thirty (30) days as required by the DPA. In some cases, we may need to verify your identity before processing your request.

12.Minors

If uujili discovers or reasonably suspects that personal data has been collected from a person under 21 without verifiable parental or guardian consent, we will immediately suspend the associated account, delete the personal data, and refund any deposits subject to applicable verification procedures.

Parents and guardians who believe their child has registered on the Platform are urged to contact us immediately at [email protected] so that we may take prompt corrective action.

13.International Data Transfers

uujili may transfer your personal data to recipients located outside the Republic of the Philippines in connection with the provision of our services — for example, to game providers or cloud infrastructure providers operating in other jurisdictions. Any such international transfer will be conducted in accordance with the requirements of the Data Privacy Act, including ensuring that the receiving country or organization provides an adequate level of data protection equivalent to Philippine standards.

Where required, uujili will put in place appropriate safeguards — such as data processing agreements incorporating standard contractual clauses — to protect the personal data transferred internationally.

14.Changes to This Policy

uujili reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revisions were made. Your continued use of the Platform following the effective date of any updated Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how uujili protects your data.

15.Contact & Data Protection Officer

uujili Casino has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. If you have any questions, concerns, or complaints regarding this Privacy Policy or our data processing practices, please contact us:

We aim to respond to all data privacy inquiries within thirty (30) calendar days. If you remain unsatisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.