oojl Privacy Policy

1 Introduction

oojl is an online gaming platform operated for Filipino players and accessible at oojl.vip. As a data controller processing the personal information of our registered Players and website visitors, oojl takes its obligations under Republic Act No. 10173 (the Data Privacy Act of 2012, or "DPA") and all applicable implementing rules and regulations seriously.

This Privacy Policy is issued in accordance with Section 16 of the DPA and the requirements of the National Privacy Commission (NPC) of the Philippines. It sets out what personal data oojl collects, the purposes for which that data is processed, who it may be shared with, how long it is retained, and the rights available to data subjects under Philippine law.

oojl also processes data in compliance with PAGCOR's requirements for licensed online gaming operators, which include specific obligations relating to player identity verification, transaction monitoring, and responsible gaming interventions — all of which necessarily involve the processing of personal data.

2 Data Controller

The data controller responsible for the personal information processed through the oojl platform is the operator of oojl.vip. For all data privacy inquiries, requests to exercise data subject rights, and complaints, please contact oojl's designated Data Protection Officer (DPO) using the contact details set out in Section 14 of this Policy.

Where oojl engages third-party processors to perform services on its behalf (such as payment processors, game studios, or fraud detection providers), oojl enters into data processing agreements with those processors to ensure they handle personal data in accordance with the DPA and this Privacy Policy.

3 Personal Data We Collect

oojl collects personal data from Players and visitors through several means, as described below. oojl adheres to the principle of data minimisation — we collect only the data that is necessary for the stated purpose.

3.1 Data Provided Directly by You

• Registration data: Full legal name, date of birth, Philippine mobile number, email address, and username chosen at account creation.
• Identity verification (KYC) data: Government-issued Philippine ID (e.g., PhilSys ID, Passport, Driver's License, UMID), selfie or photograph, and proof of address where required.
• Financial data: GCash account number, PayMaya account number, BPI/BDO/Metrobank account details provided for deposit and withdrawal processing. oojl does not store full bank account credentials beyond what is required for transaction processing.
• Correspondence data: Records of communications between you and oojl support, including chat transcripts and email content.
• Responsible gaming data: Information you voluntarily provide in connection with deposit limit settings, self-exclusion requests, or responsible gaming assessments.

3.2 Data Collected Automatically

• Device and access data: IP address, device type, operating system, browser type and version, and screen resolution.
• Usage data: Pages visited on oojl.vip, time and duration of visits, click-stream data, and navigation paths.
• Gaming activity data: Game sessions accessed, bets placed, outcomes, winnings, and session duration — recorded for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.
• Transaction logs: Timestamped records of all deposits, withdrawals, and bonus transactions associated with your oojl Wallet.
• Cookie and tracking data: As described in Section 7 of this Policy.

3.3 Data Received from Third Parties

oojl may receive limited personal data from third-party payment processors confirming the status of deposit and withdrawal transactions, and from fraud detection and KYC verification service providers used to assist with identity verification and anti-money laundering compliance.

4 How oojl Uses Your Personal Data

oojl uses the personal data it collects for the following purposes:

oojl does not use your personal data for unsolicited third-party marketing. Promotional communications from oojl about our own platform, bonuses, and games are sent only to Players who have not opted out of such communications. You may opt out at any time via your Account settings.

5 Legal Bases for Processing

Under the Data Privacy Act of 2012, oojl processes personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the account agreement with you — including providing gaming services, processing financial transactions, and maintaining your Wallet.
• Legal obligation: Processing required to comply with applicable Philippine law — including PAGCOR regulatory requirements, anti-money laundering obligations under Republic Act No. 9160 (as amended), and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for oojl's legitimate business interests that are not overridden by your privacy rights — including fraud prevention, platform security, and analytics for platform improvement.
• Consent: Where oojl relies on consent as the legal basis for processing (e.g., optional marketing communications), you may withdraw that consent at any time without affecting the lawfulness of prior processing.

6 Sharing Your Personal Data

oojl does not sell your personal data. We share your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash (G-Xchange Inc.), PayMaya (Maya Philippines Inc.), and Philippine banking partners (BPI, BDO, Metrobank) receive transaction data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services used to assist with compliance with age verification and anti-money laundering requirements.
• Game content providers: Licensed game studios (e.g., JILI, PG Soft, Pragmatic Play) may receive anonymised or pseudonymised session identifiers necessary to deliver game content. These providers do not receive your full identity or financial data through this mechanism.
• Regulatory authorities: PAGCOR and other Philippine government authorities with lawful authority to request personal data, including the Anti-Money Laundering Council (AMLC) and the National Privacy Commission (NPC).
• Fraud and security service providers: Third-party providers assisting oojl with fraud detection, cybersecurity, and platform integrity.
• Professional advisers: Legal counsel, auditors, and accountants under appropriate confidentiality obligations where necessary for oojl's legitimate business operations.

7 Cookies & Tracking Technologies

oojl uses cookies and similar tracking technologies on oojl.vip for the following purposes:

• Essential cookies: Required for the Platform to function — including session management, login authentication, and security token validation. These cannot be disabled without disrupting core Platform functionality.
• Functional cookies: Used to remember your preferences (e.g., language, game lobby settings) and enhance your experience on oojl.
• Analytics cookies: Used to understand aggregate patterns of Platform usage — which pages are visited most, where players encounter friction, and how the Platform performs technically. oojl uses anonymised analytics data only.
• Security cookies: Used to detect and prevent fraudulent activity, including identifying unusual login patterns and bot traffic.

oojl does not use third-party advertising cookies or cross-site tracking technologies that share your data with unrelated advertising networks.

You may control non-essential cookies through your browser settings. Disabling essential cookies will impair your ability to use the oojl Platform. For detailed information about specific cookies used on oojl.vip, please contact our DPO at the address in Section 14.

8 Data Security

oojl implements technical and organisational security measures proportionate to the nature of the personal data processed and the risks involved. These measures include:

• 256-bit SSL/TLS encryption on all data transmitted between your device and oojl's servers;
• Encryption of sensitive data fields (including financial account references) in oojl's databases;
• Role-based access controls limiting internal access to personal data to authorised personnel with a legitimate need to access it;
• Multi-factor authentication requirements for access to oojl's internal systems;
• Regular security audits and penetration testing of oojl's platform infrastructure;
• Segregation of player funds from operational accounts, reducing financial data exposure in the event of a security incident;
• Incident response procedures for the detection, containment, and notification of personal data breaches in accordance with NPC requirements.

9 Data Retention

oojl retains personal data for the following periods, unless a longer retention period is required by applicable Philippine law:

• Account and KYC data: Retained for the duration of your active oojl account plus five (5) years following account closure, as required by PAGCOR and anti-money laundering regulations under Republic Act No. 9160.
• Transaction records: Retained for five (5) years from the date of each transaction, in compliance with PAGCOR reporting requirements and applicable financial record-keeping obligations.
• Gaming activity data: Retained for five (5) years from the date of each gaming session for regulatory compliance and dispute resolution purposes.
• Customer support records: Retained for three (3) years from the date of the last correspondence.
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period to evidence compliance.
• Technical logs (access, security): Retained for twelve (12) months from the date of generation, unless required for an ongoing security investigation.

Upon expiry of the applicable retention period, oojl will securely delete or anonymise the relevant personal data in accordance with its data disposal procedures.

10 Your Data Subject Rights

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data processed by oojl:

• Right to be informed: The right to be notified of the nature, purpose, and extent of processing of your personal data before collection or at the first reasonable opportunity.
• Right of access: The right to obtain confirmation of whether oojl processes your personal data, and to request a copy of that data in a commonly used format.
• Right to correction: The right to request correction of inaccurate or incomplete personal data held by oojl about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected and no overriding legal obligation to retain it exists. Note that oojl is subject to mandatory retention periods (see Section 9) that may limit this right.
• Right to data portability: The right to request that your personal data be provided to you in a structured, commonly used, machine-readable format.
• Right to object: The right to object to processing of your personal data where oojl relies on legitimate interests as the legal basis, and to opt out of direct marketing communications at any time.
• Right to damages: The right to be indemnified for any damages sustained in connection with inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to file a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact oojl's Data Protection Officer using the details in Section 14. oojl will respond to valid data subject requests within thirty (30) calendar days of receipt, in accordance with NPC requirements. Identity verification may be required before processing your request.

11 Children's Privacy and Age Restriction

oojl implements age verification as part of its account registration and KYC process to enforce this requirement. If you have reason to believe that a minor has created an account on oojl, please contact our support team at [email protected] immediately.

12 International Data Transfers

oojl's primary data processing infrastructure is located in accordance with applicable Philippine regulatory requirements. Where personal data is transferred outside the Philippines — for example, to game content providers or cloud infrastructure partners located in other jurisdictions — oojl ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

Such safeguards include contractual data transfer agreements that impose obligations equivalent to those under Philippine data privacy law, and assessments of the adequacy of data protection in the recipient jurisdiction. oojl will not transfer your personal data to countries or entities that cannot provide an adequate level of data protection without your explicit consent or a valid legal basis under the DPA.

13 Amendments to This Privacy Policy

oojl reserves the right to update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or regulatory requirements. Where material changes are made, oojl will notify registered Players via email or in-platform notification at least fourteen (14) days before the changes take effect.

The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. The current version of this Privacy Policy is always available at oojl.vip/privacy-policy. Continued use of the oojl Platform following any amendment constitutes acceptance of the updated Policy.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data held by oojl, please contact oojl's designated Data Protection Officer:

If you are not satisfied with oojl's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about filing a complaint with the NPC is available on the NPC's official government website.

For responsible gaming concerns including self-exclusion requests, please visit our Responsible Gaming page.