Privacy Policy

uujj Casino ("uujj," "we," "us," or "the Platform") is committed to protecting the privacy and personal data of every Filipino player who uses our platform. This Privacy Policy describes how uujj collects, processes, stores, and protects your personal information when you access or use any service available at uujj.cam.

This policy is prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where uujj's operations intersect with PAGCOR licensing requirements, data processing activities also reflect those regulatory obligations.

By registering an account on uujj, making a deposit, or otherwise using our Services, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the platform and contact us to close your account.

For the purposes of the Data Privacy Act of 2012, uujj Casino is the Personal Information Controller (PIC) responsible for your personal data. As PIC, uujj determines the purpose and means by which your personal data is processed.

uujj operates under PAGCOR regulatory oversight in the Philippines. Our designated Data Protection Officer (DPO) is responsible for ensuring compliance with this policy, RA 10173, and all applicable NPC issuances. Contact details for the DPO are provided in Section 16 of this policy.

Third-party service providers engaged by uujj to deliver specific services (such as payment processors, KYC verification providers, and game software providers) act as Personal Information Processors (PIPs) under uujj's instruction and are bound by data processing agreements that require compliance with RA 10173 and this policy.

uujj collects the following categories of personal data, depending on how you interact with the platform:

uujj does not collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Specifically, uujj does not collect or process health data, political affiliations, religious beliefs, or biometric data other than government-issued photo identification for KYC purposes.

uujj collects personal data through the following means:

• Direct submission: When you register an account, complete KYC, make a deposit or withdrawal request, contact support, or update your account settings, you provide personal data directly to uujj.
• Automated technical collection: When you access the uujj platform, technical data (IP address, device identifiers, browser type, session information) is automatically collected by our servers and analytics tools.
• Cookies and tracking technologies: uujj uses cookies and similar technologies to improve platform performance and personalize your experience. See Section 10 for full details.
• Third-party payment processors: When you transact via GCash, Maya, or bank transfer, the payment processor confirms transaction details to uujj for wallet crediting and reconciliation purposes.
• KYC verification providers: uujj may engage third-party identity verification services to cross-reference the documents you submit during KYC against authoritative databases.
• Referral activity: If you join uujj through a referral, the referring player's account is recorded for bonus attribution purposes only. The referrer does not receive access to your personal data.

uujj uses personal data for the following purposes:

• Account management: To create, maintain, and administer your uujj account, including authentication, password recovery, and account settings management.
• Payment processing: To process deposits, withdrawals, and refunds accurately and to maintain a complete record of your financial activity on the platform.
• Regulatory compliance: To fulfil uujj's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Terrorism Financing Prevention and Suppression Act, and all other applicable Philippine laws. This includes mandatory transaction monitoring and suspicious activity reporting to the Anti-Money Laundering Council (AMLC).
• Identity verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that you are not subject to any regulatory exclusion from gambling platforms.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to enforce deposit limits, session limits, and self-exclusion requests that you have set on your account.
• Fraud prevention and security: To detect, investigate, and prevent unauthorized access, fraud, money laundering, bonus abuse, and other prohibited conduct.
• Customer support: To respond to your inquiries, process complaints, and resolve disputes.
• Platform improvement: To analyze aggregated, anonymized usage data for the purpose of improving the uujj platform, game selection, and user experience.
• Marketing communications (with consent): To send you promotional offers, bonus notifications, and platform updates via SMS or email, where you have consented to receive such communications. See Section 14 for opt-out information.

Under the Data Privacy Act of 2012, uujj processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between uujj and you as a registered player — including account administration, payment processing, and delivering gaming services.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA, the Data Privacy Act itself, and other applicable Philippine legislation, including mandatory reporting to government authorities.
• Legitimate interests: Processing necessary for uujj's legitimate interests in fraud prevention, platform security, and responsible gaming enforcement — provided these interests are not overridden by your rights and freedoms.
• Consent: Processing for purposes beyond those required by contract or law — primarily direct marketing communications. Consent is obtained at registration and may be withdrawn at any time without affecting the lawfulness of prior processing.

uujj does not sell your personal data. We share personal data only in the following circumstances:

• Service providers (PIPs): Third-party companies engaged by uujj to provide specific services, including payment processors (GCash / Maya / banks), KYC and identity verification providers, game software providers, cloud infrastructure providers, and customer support platforms. All PIPs operate under written data processing agreements requiring compliance with RA 10173.
• Regulatory authorities: uujj is legally required to share certain information with PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government authorities when required by law or upon valid legal process. This includes mandatory suspicious transaction reporting under AMLA.
• Law enforcement: Where required by a valid court order, subpoena, or other lawful request from a Philippine law enforcement authority, uujj will disclose the minimum personal data necessary to comply.
• Corporate transactions: In the event of a merger, acquisition, or sale of substantially all of uujj's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer in advance.
• With your consent: In any other circumstance not listed above, uujj will only share your personal data with your prior explicit consent.

uujj retains personal data for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required or permitted by law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements applicable to covered institutions.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA and PAGCOR requirements.
• Gaming history: Retained for a minimum of two (2) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Communications and support records: Retained for two (2) years from the date of the last communication, unless ongoing proceedings require longer retention.
• Marketing consent records: Retained for the duration of your account and for one (1) year following account closure, to demonstrate consent compliance.
• Technical and log data: Typically retained for twelve (12) months for security monitoring and platform performance purposes.

Where personal data is no longer required and the applicable retention period has expired, uujj will securely delete or anonymize the data in accordance with its data disposal procedures.

uujj implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and uujj's servers.
• Encryption at rest for sensitive personal and financial data stored in uujj's databases.
• Role-based access controls ensuring that uujj staff can only access the personal data necessary for their specific role and duties.
• OTP-based two-factor authentication for player account access, requiring SMS verification for sign-ins from new devices.
• Regular security audits and penetration testing conducted by qualified third-party security professionals.
• Intrusion detection systems monitoring uujj's infrastructure for anomalous activity in real time.
• Staff training on data privacy obligations, secure data handling, and incident response procedures.
• Data breach response procedures compliant with the NPC's mandatory 72-hour breach notification requirement where applicable.

While uujj employs industry-standard security measures, no system is completely immune to all threats. In the event of a data breach that poses a risk to your rights and freedoms, uujj will notify the National Privacy Commission and affected players within the timeframes mandated by RA 10173 and NPC circulars.

uujj uses cookies and similar technologies — including local storage and session tokens — to operate the platform effectively and improve your experience. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function, including session management, authentication tokens, and security features. These cannot be disabled without affecting platform functionality.
• Functional cookies: Remember your preferences — such as language settings, remembered login, and game lobby layout — to personalize your experience on return visits.
• Analytics cookies: Collect anonymized, aggregated data on how players navigate and use the uujj platform. This data is used solely to improve platform performance and is not linked to individual identities.
• Marketing cookies: Used to deliver relevant promotional content within the uujj platform, based on your gaming activity and preferences. These are only used with your consent.

You may adjust your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the uujj platform, though some personalization features may be affected.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by uujj:

To exercise any of these rights, submit a written request to uujj's Data Protection Officer at [email protected] with the subject line "Data Rights Request – [Your Account Number]." uujj will acknowledge receipt within 48 hours and respond substantively within fifteen (15) business days, in accordance with NPC guidelines.

If you believe uujj has not adequately addressed your data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The uujj platform is strictly for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. uujj does not knowingly collect personal data from individuals under the age of 21.

Age verification is performed at registration through mobile number-linked OTP authentication and is enforced at the withdrawal stage through mandatory KYC, which requires submission of a government-issued ID confirming the player's date of birth.

If uujj discovers or receives credible notification that an account has been registered by a person under 21 years of age, uujj will immediately close the account, delete the associated personal data (except where required to be retained by law), void any winnings, and return deposits to the source payment method.

If you have reason to believe that a minor has accessed the uujj platform, please notify our Data Protection Officer immediately at [email protected].

uujj's primary data processing infrastructure is located in the Philippines. However, certain third-party service providers engaged by uujj — such as cloud hosting providers and game software platforms — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, uujj ensures that appropriate safeguards are in place, including:

• Written data processing agreements with all international processors, requiring data protection standards equivalent to those under RA 10173.
• Transfer of data only to processors whose data protection regimes have been assessed as adequate by uujj's Data Protection Officer.
• Where required, notification to the National Privacy Commission of international data transfers involving sensitive personal information.

uujj does not transfer KYC documents or government ID data outside the Philippines except where strictly necessary for identity verification with NPC-approved cross-border verification providers, and always subject to written contractual safeguards.

uujj may send you promotional communications — including bonus offers, game announcements, and platform updates — by SMS to your registered Philippine mobile number or by email, where you have consented to receive such communications during registration.

You may withdraw your marketing consent at any time by:

• Updating your communication preferences in your uujj account settings (Communications tab).
• Replying STOP to any uujj SMS promotional message.
• Submitting a written opt-out request to [email protected].

Withdrawal of marketing consent will not affect your ability to use the uujj platform, receive transactional communications (such as OTPs, deposit confirmations, and withdrawal notifications), or receive communications required by law or for account security purposes.

uujj may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When material changes are made — particularly changes that affect your rights or how your data is used — uujj will:

• Notify you via SMS or the contact details registered on your account at least seven (7) days before the changes take effect.
• Display a prominent notice on the uujj platform highlighting the nature of the changes.
• Update the "Effective Date" at the top of this policy.

Your continued use of the uujj platform following the effective date of an amended Privacy Policy constitutes acceptance of the revised terms. If you do not accept the revised policy, you must stop using the platform and request account closure in accordance with the Terms & Conditions.

All prior versions of this Privacy Policy are archived and available upon written request to uujj's Data Protection Officer.

For any questions, concerns, or requests relating to this Privacy Policy or uujj's handling of your personal data, please contact our designated Data Protection Officer:

• Data Protection Officer: uujj Casino Data Protection Office
• Email: [email protected] (Subject: "Privacy / DPO – [Your Account Number]")
• Response Time: Acknowledgement within 48 hours; substantive response within 15 business days for data rights requests.

If you are not satisfied with uujj's response to your privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information on how to lodge a complaint with the NPC is available on the NPC's official website.