Privacy Policy

1. Who We Are

This Privacy Policy is issued by uujili ("uujili," "we," "us," "our"), the operator of the online gaming platform at uujili.co. uujili acts as the data controller for all personal information collected through the uujili platform and is responsible for ensuring that such data is processed in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

If you have any questions or concerns regarding this Privacy Policy or the manner in which uujili processes your personal data, you may contact our Data Protection Officer at the address provided in Section 13 of this Policy.

2. Personal Data We Collect

uujili collects personal data from you at various points during your use of the platform. The categories of personal data we collect include:

• Registration data: Your legal full name, date of birth, Philippine mobile number, email address, and username chosen during account creation;
• Identity verification (KYC) data: Government-issued Philippine ID (such as a PhilSys card, driver's licence, passport, or UMID), selfie photographs, and proof of address documents required to verify your identity before processing withdrawals;
• Financial data: GCash mobile number, Maya account details, bank account information (BPI, BDO, Metrobank, or other Philippine banks), deposit and withdrawal transaction records, and account balance history;
• Gameplay data: Game activity logs, betting history, session duration, wagers placed, wins, losses, and bonus usage records;
• Device and technical data: IP address, device type and operating system, browser type and version, screen resolution, and geolocation data at the time of login (city/region level only);
• Communication data: Records of your interactions with uujili customer support, including live chat transcripts, email correspondence, and support ticket history;
• Responsible gaming data: Self-exclusion requests, deposit limit settings, session time limit settings, and cooling-off period records.

uujili does not knowingly collect sensitive personal information beyond what is required for identity verification and anti-money laundering compliance. We do not collect biometric data beyond the KYC selfie photograph required for identity matching.

3. How We Use Your Personal Data

uujili uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your uujili account, including processing deposits, withdrawals, and game transactions;
• Identity verification: To verify that you meet the eligibility requirements for a uujili account, including age verification (21+) and identity confirmation as required by PAGCOR licensing conditions and Philippine AML regulations;
• Legal and regulatory compliance: To comply with anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Philippine law, including the reporting of suspicious transactions where legally required;
• Platform security: To detect, investigate, and prevent fraud, account takeover, money laundering, and other prohibited activities on the uujili platform;
• Customer support: To respond to your enquiries, resolve disputes, process complaints, and provide assistance with your uujili account;
• Responsible gaming: To monitor gaming behavior, enforce self-exclusion requests, apply deposit limits, and identify at-risk players in accordance with uujili's responsible gaming obligations;
• Marketing communications: To send you promotional offers, bonus notifications, and updates about uujili — only where you have provided consent or where permitted by applicable law. You may opt out at any time;
• Platform improvement: To analyze aggregated, anonymized usage data to improve the uujili platform, game selection, and user experience.

4. Legal Basis for Processing

uujili processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the gaming services contract between uujili and you, including account management, payment processing, and game service delivery;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, tax reporting, and PAGCOR licensing requirements;
• Legitimate interests: Processing for fraud prevention, security monitoring, and platform integrity where such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential analytics, where we have obtained your prior consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

uujili does not sell or rent your personal data to third parties. We may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (Mynt), Maya (PayMaya Philippines), BancNet, InstaPay, and Philippine banks — solely to process your deposit and withdrawal transactions;
• Identity verification providers: Third-party KYC service providers used to verify government-issued Philippine IDs and conduct liveness checks;
• Game software providers: Licensed game studios and aggregators whose games are hosted on the uujili platform — these providers may receive anonymized session tokens but do not receive your personally identifiable information;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies where disclosure is required by law or court order;
• IT infrastructure providers: Cloud hosting and cybersecurity service providers operating under strict data processing agreements that prohibit use of uujili data for their own purposes.

Any third party receiving personal data from uujili is contractually required to process that data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable Philippine data privacy law.

6. Cookies and Tracking Technologies

uujili uses cookies, web beacons, and similar tracking technologies on the uujili platform. Cookies are small text files stored on your device that allow the platform to recognize your browser session and maintain state. uujili uses the following categories of cookies:

• Essential cookies: Required for the uujili platform to function correctly — these maintain your login session, store your language preference, and enable secure account access. These cannot be disabled while you use the platform;
• Functional cookies: Remember your display preferences, game settings, and previously visited sections of uujili to improve your experience;
• Analytics cookies: Collect anonymized data about how players use the uujili platform, including pages visited, session duration, and error rates, to help us improve the platform. No personally identifiable data is transmitted via analytics cookies.

You may manage non-essential cookie preferences through your browser settings. Disabling all cookies may impair the functionality of the uujili platform, including the ability to log in.

7. Data Retention

uujili retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and legitimate business necessity. Specifically:

• Active account data is retained for the duration of your account relationship with uujili;
• Financial transaction records are retained for a minimum of five (5) years following the transaction date, as required under Philippine AML regulations;
• KYC identity verification documents are retained for a minimum of five (5) years following account closure;
• Customer support records are retained for three (3) years following resolution of the relevant matter;
• Self-exclusion records are retained indefinitely to prevent re-registration during an active exclusion period.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original information.

8. Data Security

uujili implements a range of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and uujili's servers;
• Encryption of sensitive personal data fields stored in uujili's databases;
• Role-based access controls limiting personal data access to authorized personnel only;
• Regular security audits and penetration testing of the uujili platform and infrastructure;
• Two-factor authentication available to all uujili account holders and mandatory for administrative staff;
• Incident response procedures to detect, contain, and notify affected parties in the event of a personal data breach, in accordance with NPC notification requirements.

While uujili takes all reasonable precautions to safeguard your data, no system is entirely immune from risk. You are encouraged to use a strong unique password and to enable 2FA on your uujili account to maximize your personal account security.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by uujili:

• Right to be informed: The right to be notified of the purposes for which your data is collected and processed — which this Privacy Policy fulfills;
• Right to access: The right to request a copy of the personal data uujili holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your uujili account;
• Right to erasure: The right to request deletion of your personal data where processing is no longer necessary, subject to uujili's legal retention obligations;
• Right to object: The right to object to processing of your personal data for direct marketing purposes;
• Right to data portability: The right to receive a machine-readable copy of personal data you have provided to uujili;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe uujili has processed your personal data in violation of the DPA.

To exercise any of these rights, please contact uujili's Data Protection Officer using the contact details in Section 13. uujili will respond to verified requests within thirty (30) calendar days.

10. Children's Privacy

The uujili platform is strictly restricted to individuals aged 21 years or older, in compliance with Philippine gaming regulations. uujili does not knowingly collect personal data from persons under 21 years of age. If uujili discovers that a registered account belongs to a person under 21, that account will be immediately closed, all balances forfeited, and all related personal data deleted to the extent permitted by law.

If you believe that a minor has created a uujili account, please notify us immediately at the contact address in Section 13 so that appropriate action can be taken.

11. International Data Transfers

uujili's primary data processing infrastructure is located within the Philippines or in jurisdictions that provide adequate data protection standards as determined by the National Privacy Commission. Where personal data is transferred to a third-party service provider located outside the Philippines (for example, certain cloud infrastructure providers), uujili ensures that appropriate contractual safeguards — including data processing agreements incorporating standard contractual clauses — are in place to protect your personal data in accordance with Philippine DPA requirements.

uujili does not transfer personal data to jurisdictions known to lack adequate data protection frameworks without implementing appropriate supplementary safeguards.

12. Changes to This Privacy Policy

uujili may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, uujili will notify registered players via email or an on-platform notification prior to the updated Policy taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the uujili platform after the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. If you do not agree to the updated terms, you should cease using uujili and may request account closure in accordance with the process described in the uujili Terms & Conditions.

13. Contact — Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by uujili, please contact our Data Protection Officer:

Data Protection Officer — uujili
Email: [email protected]
Response time: Within 2 business days for general enquiries; within 30 calendar days for formal data subject rights requests.

For urgent account security or suspected data breach matters, please use the live chat function on the uujili platform for the fastest response.