uuujl Casino – Privacy Policy

1. Data Controller

The Data Controller responsible for your personal data is the operator of the uuujl Platform at uuujl.vip ("uuujl", "we", "us", or "the Company"), operating under a PAGCOR license in the Republic of the Philippines. uuujl has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act. You may contact the uuujl DPO at [email protected] (plain text — not a clickable link) with the subject line "DPO Enquiry".

2. Personal Data We Collect

uuujl collects personal data from you in the following categories:

uuujl does not collect sensitive personal information (as defined under RA 10173 Section 3(l)) such as health data, religious beliefs, or political opinions, except where the player voluntarily discloses health information in the context of a responsible gaming self-exclusion request — in which case such information is processed solely for that purpose.

3. How We Use Your Personal Data

uuujl uses your personal data for the following purposes, each of which corresponds to a lawful basis described in Section 4 below:

• Account Registration and Identity Verification (KYC): To create and manage your uuujl account, verify your identity and age (21+ requirement), and comply with PAGCOR KYC obligations.
• Provision of Gaming Services: To process bets, record game results, apply bonuses, manage your account balance, and provide live dealer, slot, bingo, and sports betting services.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank accounts; to verify that payment accounts belong to you; and to comply with AMLC transaction monitoring requirements.
• Fraud Prevention and Security: To detect, investigate, and prevent fraud, money laundering, bot activity, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling; to implement and enforce self-exclusion requests; to enforce the 21+ age restriction.
• Customer Support: To respond to your enquiries, resolve disputes, and maintain records of communications for quality assurance and regulatory purposes.
• Marketing Communications: To send you promotional offers, new game notifications, and bonus updates — but only where you have given explicit consent at registration or have not objected to such communications.
• Legal and Regulatory Compliance: To comply with PAGCOR reporting requirements, AMLC obligations, NPC data breach notifications, and any other applicable Philippine legal obligation.
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the uuujl Platform, fixing technical issues, and enhancing the player experience.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, uuujl relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing required to provide the services you have agreed to receive under the uuujl Terms & Conditions (e.g., account management, payment processing, game delivery).
• Legal Obligation: Processing required to comply with applicable Philippine law, including but not limited to the PAGCOR regulatory framework, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act (RA 10173).
• Legitimate Interest: Processing for fraud prevention, security monitoring, and Platform improvement, where uuujl's legitimate interests in operating a secure and compliant platform are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have provided explicit and freely-given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Third-Party Disclosure

5.1 Service Providers. uuujl engages third-party service providers to assist in delivering the Platform. These include payment processing partners (e.g., GCash/GXI, PayMaya/Voyager Innovations, banking partners), identity verification providers, cloud infrastructure providers, and live casino game software licensors. All service providers are contractually obligated to process your data only on uuujl's instructions and to maintain appropriate security standards consistent with RA 10173.

5.2 Regulatory Bodies. uuujl may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), or law enforcement authorities where required by Philippine law, court order, or regulatory direction. uuujl will notify you of such disclosures to the extent permitted by law.

5.3 No Commercial Data Sales. uuujl does not sell, rent, or exchange your personal data to any third party for that third party's own commercial purposes. Full stop.

5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or a material portion of uuujl's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the applicable privacy terms before the transfer takes effect, to the extent reasonably practicable.

6. Cookies and Tracking Technologies

uuujl uses cookies and similar technologies on the Platform for the following purposes:

• Essential Cookies: Required for the Platform to function correctly (e.g., session management, login state, anti-CSRF tokens). These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players navigate the Platform, for the purpose of improving the user experience. These are not linked to identifiable individuals.
• Functional Cookies: Used to remember your preferences (e.g., language settings, display preferences) to improve your experience across sessions.
• Marketing Cookies: Only deployed where you have consented to receive marketing communications. Used to measure the effectiveness of uuujl promotional campaigns.

You may manage your cookie preferences through your browser settings. Disabling essential cookies will impair your ability to use the Platform, including completing the uuujl login process.

7. Data Retention

uuujl retains your personal data for the minimum period necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by Philippine law:

• KYC and Identity Records: Retained for a minimum of 5 years from the date of account closure or last transaction, as required by AMLC record-keeping rules under RA 9160.
• Financial Transaction Records: Retained for a minimum of 5 years from the transaction date, as required under the AMLA and BIR regulations.
• Gaming Records: Retained for a minimum of 3 years from the date of the game session, as required by PAGCOR operational standards.
• Customer Support Records: Retained for 2 years from the closure of the relevant support case.
• Marketing Consent Records: Retained for the duration of your account and 1 year after account closure, as evidence of lawful processing.

After the applicable retention period expires, your personal data will be securely deleted or anonymised in accordance with uuujl's internal data disposal procedures.

8. Data Security

uuujl implements a layered technical and organisational security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Key measures include:

• TLS 1.3 encryption for all data in transit between your device and uuujl servers
• AES-256 encryption for sensitive data at rest (including payment details and government ID scans)
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis
• Multi-factor authentication for all uuujl administrative system access
• Regular third-party penetration testing and vulnerability assessments
• 24/7 system monitoring with automated anomaly detection

In the event of a personal data breach affecting your data, uuujl will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects within a reasonable period, in accordance with NPC Circular 16-03.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by uuujl:

• Right to Access: You may request a copy of all personal data uuujl holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where retention is no longer justified — subject to uuujl's legal retention obligations under AMLC and PAGCOR rules.
• Right to Object: You may object to processing based on legitimate interest, including direct marketing. Upon valid objection to marketing, uuujl will cease marketing processing immediately.
• Right to Data Portability: You may request your data in a structured, commonly used, machine-readable format where technically feasible.
• Right to Restriction: You may request restriction of processing where you contest the accuracy of data or have objected to processing pending verification of uuujl's legitimate grounds.

To exercise any of the above rights, contact the uuujl Data Protection Officer at [email protected] with the subject line "Data Subject Rights Request". uuujl will respond within 15 business days. If you are not satisfied with uuujl's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

10. Children and Minors

The uuujl Platform is strictly for individuals aged 21 years and above. uuujl does not knowingly collect, process, or store personal data from any person under the age of 21. If uuujl becomes aware that personal data has been collected from an underage individual, the relevant account will be immediately suspended, data will be deleted (subject to any legal hold obligations), and the matter may be referred to PAGCOR.

If you are a parent or guardian and believe that a person under 21 has registered on the uuujl Platform, please contact [email protected] immediately.

11. Amendments to This Privacy Policy

uuujl reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, the Platform's features, or applicable Philippine law. Material changes will be communicated to registered uuujl members via email or in-Platform notification at least 7 days before the amended Policy takes effect. The current version of this Policy is always accessible at this page, with the effective date displayed at the top. Your continued use of the uuujl Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy.

12. Contact and Data Protection Officer

For all privacy-related enquiries, data subject rights requests, or data breach notifications, please contact the uuujl Data Protection Officer:

• Email: [email protected] — subject line: "DPO Enquiry" or "Data Subject Rights Request"
• Live Chat: 24/7 on the uuujl Platform — identify your enquiry as a privacy matter

You also have the right to file a complaint directly with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated. Details of the NPC complaints procedure are available on the NPC's official website.