Your privacy matters to oojl. This Policy explains exactly what personal information we collect from Filipino players, why we collect it, how we use it, and the rights you have over your own data.
oojl ("oojl," "we," "us," or "our") operates the online gaming platform at oojl.app (the "Platform"). We are committed to protecting the personal data of every Filipino player who uses our services. This Privacy Policy ("Policy") explains how oojl collects, uses, discloses, stores, and protects your personal information when you access or use the Platform.
This Policy is drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). As a platform that processes the personal data of Philippine residents, oojl adheres to the NPA's data privacy principles of transparency, legitimate purpose, and proportionality.
By registering an account on oojl, logging in to the Platform, or continuing to use any oojl service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree to this Policy, you must not create an account or use the Platform.
This Policy applies to all personal data processed by oojl in connection with the Platform, including data collected via the oojl website, mobile browser sessions, customer support interactions, and payment processing channels. It does not apply to third-party websites or services that may be linked from the Platform.
For the purposes of the Data Privacy Act of 2012 and this Policy, oojl is the personal information controller responsible for the collection, use, and processing of your personal data in connection with the Platform and services described herein.
oojl has designated a Data Protection Officer (DPO) responsible for overseeing data protection compliance within the organization. You may contact the DPO with any privacy-related queries or to exercise your data subject rights, using the contact details provided in Section 15 of this Policy.
oojl collects only the personal data that is necessary to provide its services, meet regulatory obligations, and protect the interests of its Players. The following table describes the categories of personal data oojl collects, with examples and the primary purpose of collection:
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity | Full legal name, date of birth, nationality, government ID number | Account registration, KYC verification, age verification (21+) |
| Contact | Philippine mobile number, email address, residential address | Account communication, OTP delivery, support correspondence |
| Financial | GCash number, Maya account, bank account details, transaction history | Deposit and withdrawal processing, fraud prevention, AML compliance |
| KYC Documents | Government-issued ID images, selfie photograph, proof of address | Identity verification, regulatory compliance, fraud prevention |
| Gaming Activity | Game history, bet amounts, wins/losses, session duration, bonus usage | Service provision, responsible gaming monitoring, dispute resolution |
| Technical | IP address, device type, browser, operating system, login timestamps | Security, fraud prevention, platform optimization |
| Behavioural | Page navigation patterns, feature usage, session frequency | Platform improvement, personalized experience, marketing analytics |
| Communications | Support chat logs, email correspondence, complaint records | Service provision, dispute resolution, quality assurance |
Certain data collected by oojl — including government ID numbers, financial account details, and biometric selfie data used for identity verification — constitutes sensitive personal information under the Data Privacy Act of 2012. oojl processes such data only where strictly necessary for regulatory compliance (KYC, AML) and with appropriate technical and organizational safeguards in place, including encryption at rest and in transit.
oojl collects personal data through the following channels and methods:
We collect data directly from you when you register an account (name, mobile number, email, date of birth, password); complete KYC verification (government ID, selfie, proof of address); make deposits or request withdrawals (GCash number, bank account); contact customer support; respond to surveys or promotions; or update your account profile and preferences.
When you access and use the oojl Platform, we automatically collect certain technical and behavioral data, including your device's IP address, browser type and version, operating system, the pages you visit, features you interact with, login and logout timestamps, game sessions initiated, and error logs generated during your session. This collection is performed through standard web server logs, session management technology, and analytics tools.
oojl works with payment processors (GCash, Maya, and Philippine banks) and identity verification service providers. When you make a deposit or withdrawal, or when KYC verification is processed, these third parties may share relevant transactional and verification data with oojl as necessary to complete the service and fulfill regulatory obligations. oojl does not receive your full GCash PIN or bank account passwords — only the information necessary to confirm a transaction's validity.
oojl uses cookies and similar technologies as described in Section 9 of this Policy. These technologies automatically collect certain data about your browser, session, and Platform usage when you visit oojl.app.
oojl processes your personal data only where a lawful basis exists under the Data Privacy Act of 2012. The applicable legal bases for oojl's data processing activities are as follows:
oojl uses the personal data we collect for the following specific purposes:
To create and manage your oojl account; process deposits and withdrawals via GCash, Maya, and Philippine banks; provide access to live casino, slots, bingo, sports betting, and other game categories; and process bonus claims and wagering activities.
To verify your age (minimum 21 years old, as required by PAGCOR regulations); verify your identity through KYC procedures; comply with anti-money laundering reporting obligations; and respond to requests from regulatory authorities where legally required.
To detect, investigate, and prevent fraud, cheating, bonus abuse, money laundering, multiple account creation, and unauthorized access to player accounts; to monitor login activity for anomalous access patterns; and to protect the integrity of the Platform and the interests of all Players.
To monitor gaming behavior for signs of problem gambling; to apply deposit limits, loss limits, and session restrictions as configured by the Player; to process self-exclusion requests; and to fulfill any responsible gaming obligations imposed by applicable regulatory guidance.
To respond to queries, complaints, and dispute resolution requests submitted by Players; to verify the Player's identity when processing support requests; and to maintain records of communications for quality assurance purposes.
To analyze aggregate, anonymized gameplay and usage data to improve Platform performance, mobile responsiveness, and game selection; to identify and resolve technical issues; and to optimize the Player experience based on usage patterns.
Where you have expressly opted in, to send promotional communications about oojl bonuses, new game releases, tournaments, and special events relevant to Filipino players. You may opt out of marketing communications at any time by adjusting your notification preferences in Account Settings or by contacting oojl support.
oojl does not sell your personal data to third parties. We do not share your personal information with third-party marketers or data brokers. oojl shares your personal data only in the following limited circumstances:
oojl engages trusted third-party service providers who process personal data on our behalf, strictly in accordance with oojl's instructions and under data processing agreements that require compliance with applicable data privacy laws. These providers include: payment processors (GCash/Maya API partners, bank InstaPay operators), identity verification and KYC platform providers, cloud infrastructure and data hosting providers, analytics and session monitoring tools, and customer support software operators. All such service providers are contractually prohibited from using your data for any purpose other than the specific service they provide to oojl.
Some game providers integrated into the oojl Platform (such as slot and live casino software studios) may receive anonymized or pseudonymized player session data for the purposes of game operation, technical monitoring, and regulatory audit. oojl does not share personally identifiable information such as your full name, government ID number, or contact details with game content providers unless specifically required by regulatory reporting obligations.
oojl may disclose personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by Philippine law or by a valid legal process. This includes mandatory reporting under the Anti-Money Laundering Act (RA 9160), compliance with PAGCOR directives, and responses to NPC investigations under the Data Privacy Act of 2012. oojl will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, reorganization, or sale of all or substantially all of oojl's assets, your personal data may be transferred to the acquiring entity as part of that transaction. oojl will notify affected Players via email and/or a prominent notice on the Platform prior to any such transfer, and the acquiring entity will be required to honor the commitments made in this Privacy Policy.
oojl does not sell, rent, or trade your personal information to any third party for commercial purposes. Your data is used exclusively to operate, improve, and protect the oojl Platform and to comply with our legal obligations. This commitment applies to all categories of personal data collected from Filipino players on oojl.
KYC (Know Your Customer) verification is a regulatory requirement for online gaming operators and a critical component of oojl's anti-money laundering and age verification compliance framework. oojl requires all Players to complete KYC verification before withdrawal requests can be processed.
oojl collects a copy of a valid Philippine government-issued photo ID (UMID, Driver's License, Philippine Passport, PhilHealth ID, Voter's ID, or PRC ID), a real-time selfie photograph for face-matching purposes, and proof of residential address (utility bill, bank statement, or equivalent document) where required. These documents are processed through oojl's secure KYC verification system.
KYC documents and biometric data are stored in encrypted form using AES-256 encryption at rest. Access to KYC data is restricted to authorized oojl compliance personnel on a strictly need-to-know basis. oojl does not share KYC documents with third parties except as required by law or by our KYC service provider operating under a data processing agreement.
As required under Philippine anti-money laundering regulations, KYC records are retained for a minimum of five (5) years following account closure or the last transaction date, whichever is later. Upon expiry of this mandatory retention period, KYC documents will be securely deleted in accordance with oojl's data deletion procedures.
oojl uses cookies and similar tracking technologies to operate the Platform, maintain session state, enhance security, and analyze Platform usage. Cookies are small data files placed on your device's browser when you visit oojl.app.
oojl uses the following categories of cookies:
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair the functionality of the Platform. Disabling analytics or functional cookies will not prevent you from using the Platform but may affect your experience.
oojl retains personal data only for as long as necessary to fulfill the purposes described in this Policy or as required by applicable Philippine law. The following retention periods apply to the main categories of personal data held by oojl:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | AML regulatory requirement |
| KYC documents and identity data | 5 years from last transaction or account closure | RA 9160 Anti-Money Laundering Act |
| Transaction and financial records | 5 years from transaction date | AML and tax compliance |
| Gaming activity logs | 3 years from session date | Dispute resolution, responsible gaming |
| Customer support records | 3 years from last interaction | Dispute resolution, quality assurance |
| Technical and security logs | 12 months from log date | Security monitoring, fraud investigation |
| Marketing consent records | Until consent is withdrawn + 1 year | Consent management compliance |
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with oojl's data lifecycle management procedures. Anonymized aggregated data (from which all personal identifiers have been permanently removed) may be retained indefinitely for statistical and analytical purposes.
oojl implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:
In the event of a personal data breach that poses a real risk of serious harm to affected Players, oojl will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with Section 20 of the Data Privacy Act of 2012. The notification will describe the nature of the breach, the data affected, the likely consequences, and the measures oojl has taken or proposes to take to address the breach.
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you — as a data subject — are entitled to the following rights with respect to your personal data held by oojl. You may exercise any of these rights by contacting oojl's Data Protection Officer using the contact details in Section 15.
oojl will respond to all valid data subject rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by an additional thirty (30) days, with notification to the requesting data subject.
The oojl Platform is intended exclusively for adults aged 21 years and above, as required by PAGCOR regulations and Philippine law. oojl does not knowingly collect, use, or retain personal data from individuals under the age of 21. The 21+ age requirement is enforced through mandatory KYC identity verification that includes date-of-birth verification against a Philippine government-issued ID.
If oojl discovers that an account has been created by a person under 21 years of age, the account will be immediately closed, all associated personal data will be deleted (subject to any mandatory regulatory retention requirements), and any deposited funds will be returned to the source payment method. oojl will not process any withdrawal to a player found to be under 21 years of age.
If you are the parent or guardian of a minor and believe that your minor child has registered an account on oojl, please contact oojl's Data Protection Officer immediately using the contact details in Section 15. oojl will investigate and take appropriate action, including account closure and data deletion, within five (5) business days of receiving a verified parental or guardian report.
oojl reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, regulatory guidance from the National Privacy Commission, or changes to the oojl Platform and services. The revised Policy will display the updated "Last Updated" date at the top of this page.
Where a material change is made to this Policy — particularly any change that affects the purposes for which we use your personal data, the categories of data we collect, or the third parties with whom we share your data — oojl will provide advance notice to registered Players via email to their registered email address and via a prominent notice on the Platform, at least fourteen (14) days before the change takes effect.
Your continued use of the oojl Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must discontinue use of the Platform and may request account closure and data deletion in accordance with your rights under Section 12.
If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to report a privacy concern, please contact oojl's Data Protection Officer. All privacy-related communications should be submitted in writing.
Email (plain text, not a link): [email protected]
Subject line: Data Privacy Request — [Your Full Name]
Platform: oojl.app
Response time: Within 30 days of receipt of a valid written request.
You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that oojl has not handled your personal data in compliance with the Data Privacy Act of 2012. The NPC is the competent supervisory authority for data privacy matters in the Philippines.
This Privacy Policy was last reviewed and updated in January 2026. The version published on this page at any given time is the operative version applicable to all registered oojl Players.
As a Filipino player on oojl, the Data Privacy Act of 2012 gives you these specific rights over your personal data.
You have the right to be told what data oojl collects about you, why we collect it, and how we use it — before or at the point of collection. This Policy fulfills that right.
You may request a copy of the personal data oojl holds about you, including what data we have, how it was obtained, and who it has been shared with. Contact the DPO to submit an access request.
If any personal data oojl holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. Update basic details via Account Settings or contact support for KYC data amendments.
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to oojl's mandatory regulatory retention obligations (e.g., AML-required 5-year retention of KYC records).
You may request your personal data in a structured, commonly used, machine-readable format, allowing you to transfer it to another service provider. This right applies to data you provided to oojl directly.
You may object to oojl's processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to oojl demonstrating compelling grounds that override your objection.
Six specific commitments oojl makes to every Filipino player regarding the handling of their personal data.
Every byte of data exchanged between your device and oojl's servers is protected by 256-bit SSL encryption — the same standard used by Philippine banks like BDO and BPI. KYC documents and financial data are additionally encrypted at rest using AES-256. Your personal information is never transmitted or stored in plaintext.
oojl does not sell, rent, or commercially transfer your personal data to any third party. Full stop. Your GCash number, mobile number, email address, gaming history, and identity documents remain within oojl's controlled environment and are shared only where strictly required by law or to operate the service you requested.
Your Philippine government-issued ID and selfie photos submitted for KYC verification are stored in encrypted form, accessible only to authorized oojl compliance personnel. KYC data is never shared with game providers, marketing partners, or non-regulatory third parties. Mandatory retention periods apply as required by Philippine AML law.
oojl never knowingly collects data from individuals under 21 years of age. KYC age verification is mandatory and enforced on every account before withdrawal access is granted. Any account confirmed to belong to a minor under 21 is immediately closed and all associated personal data deleted, as required by PAGCOR regulations and the Data Privacy Act.
In the event of a data breach that risks harm to Filipino players, oojl commits to notifying the National Privacy Commission within 72 hours and notifying affected Players without undue delay — in full compliance with Section 20 of the Data Privacy Act of 2012. We believe in transparent, timely communication when data incidents occur.
oojl's privacy practices are built to comply with Republic Act No. 10173 — the Data Privacy Act of 2012 — and the National Privacy Commission's implementing regulations. A dedicated Data Protection Officer oversees compliance, and oojl staff who handle personal data receive mandatory privacy training. Your rights as a Filipino data subject are recognized and honored.
Now that you understand how oojl handles your personal data, you can play with confidence. oojl combines a world-class gaming experience with a genuine commitment to Filipino data privacy rights — backed by compliance with the Data Privacy Act of 2012.
🔞 Must be 21 years or older to register and play. By registering, you acknowledge you have read and understood oojl's Privacy Policy.