Last updated: 1 January 2026 · Version 2.4
This Privacy Policy describes how oojl ("we," "us," or "our") collects, uses, stores, shares, and protects personal data provided by users ("you") of the oojl.org platform. This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Republic of the Philippines, and its Implementing Rules and Regulations.
oojl operates the online gaming platform accessible at oojl.org. For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, oojl is the Personal Information Controller in respect of all personal data collected through the oojl.org platform.
oojl has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection law. Contact details for the DPO are provided in Section 14 of this Policy.
oojl collects and processes the following categories of personal data, depending on the nature of your interaction with the platform:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number, ID document images, selfie/likeness | Mandatory (KYC) |
| Contact Data | Email address, Philippine mobile number, home address | Mandatory |
| Financial Data | GCash number, PayMaya number, bank account details (BPI, BDO, Metrobank), transaction history, deposit and withdrawal records | Mandatory (transactions) |
| Technical Data | IP address, device type and model, operating system, browser type and version, session identifiers, login timestamps | Automatic |
| Usage Data | Game history, bet amounts, session duration, pages visited, features accessed, responsible gaming tool usage | Automatic |
| Communication Data | Live chat transcripts, support emails, feedback or complaint records | When you contact us |
| Marketing Data | Promotional preferences, communication opt-in or opt-out status | Optional |
oojl collects personal data through the following means:
oojl processes personal data for the following purposes, each of which rests on a lawful basis as provided under the Data Privacy Act of 2012:
5.1 No Sale of Data. oojl does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes.
5.2 Service Providers. oojl shares personal data with carefully selected third-party service providers who assist in operating the platform, subject to contractual data processing agreements that require them to process data only on oojl's documented instructions and in accordance with applicable law. These include:
5.3 Legal Disclosure. oojl may disclose personal data to competent Philippine authorities — including the National Privacy Commission (NPC), Anti-Money Laundering Council (AMLC), and law enforcement — where required to do so by applicable law, court order, or regulatory obligation, without prior notice to you where disclosure is lawfully required.
5.4 Business Transfers. In the event of a merger, acquisition, or sale of all or part of oojl's business, personal data held by oojl may be transferred to the successor entity, subject to the same privacy obligations as set out in this Policy.
oojl's primary data processing infrastructure is located within the Asia-Pacific region. Where personal data is transferred to service providers located outside the Philippines — for example, cloud infrastructure providers or game content studios — oojl ensures that adequate safeguards are in place as required by the Data Privacy Act, including contractual data processing agreements incorporating data protection obligations consistent with Philippine law.
oojl does not transfer personal data to countries or organisations that do not provide adequate levels of data protection without first implementing appropriate safeguards.
oojl retains personal data for as long as is necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting obligations.
Upon expiry of the applicable retention period, oojl will securely delete or anonymise your personal data in accordance with its data disposal procedures.
oojl uses cookies and similar tracking technologies on the oojl.org platform for the following purposes:
You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the oojl platform, including the ability to log in and play.
As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by oojl:
To exercise any of the above rights, please contact oojl's Data Protection Officer using the contact details provided in Section 14. oojl will respond to all verified data subject requests within thirty (30) days of receipt, or within such other period as may be required by applicable law.
The oojl platform is strictly intended for use by individuals who are twenty-one (21) years of age or older, in accordance with the minimum age requirements for casino-style gaming under applicable Philippine law. oojl does not knowingly collect personal data from persons under the age of twenty-one (21).
If oojl becomes aware that it has inadvertently collected personal data from a person under the age of twenty-one (21), the account will be immediately closed, all data will be deleted, and any funds held in the account will be returned via the original deposit method to the extent possible. If you believe a minor has registered an account with oojl, please contact us immediately at [email protected].
oojl implements appropriate technical and organisational security measures to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:
While oojl takes all reasonable steps to protect your personal data, no system can guarantee absolute security. You are responsible for maintaining the confidentiality of your own oojl login credentials and for notifying oojl promptly if you suspect any unauthorised account access.
In the event of a personal data breach that is likely to result in serious harm to affected data subjects, oojl will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under the Data Privacy Act and NPC Circular 16-03. Affected data subjects will be notified without undue delay where the breach is likely to result in high risk to their rights and freedoms.
Notification to data subjects will be provided via the registered email address or mobile number associated with the affected account, and will include a description of the nature of the breach, the categories of data affected, the likely consequences, and the measures taken or proposed to address the breach.
oojl reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, or oojl's data processing practices. Where a material change is made, oojl will notify registered users via email or an in-platform notification prior to the change taking effect.
The most current version of this Privacy Policy is always available at oojl.org/privacy-policy. The version number and "last updated" date at the top of this Policy indicate when it was last revised. Your continued use of the oojl platform after the effective date of any change constitutes acceptance of the revised Policy.
For any questions, requests, or complaints relating to this Privacy Policy or oojl's data processing practices, please contact:
You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with oojl's response. The NPC is the supervisory authority for data protection in the Philippines.
oojl does not monetise your personal data by selling or renting it to third parties. The only data sharing that occurs is with service providers who help operate the platform, under strict contractual data protection obligations.
All personal data stored by oojl — including your identity documents submitted for KYC, financial records, and transaction history — is protected using AES-256 encryption at rest. Data in transit uses TLS 1.3 / 256-bit SSL.
Under the Data Privacy Act of 2012, you have enforceable rights to access, correct, delete, and port your personal data. oojl responds to all verified data subject requests within 30 days and has a dedicated DPO to handle them.
This Privacy Policy is drafted in full compliance with Republic Act No. 10173 (Data Privacy Act 2012) and the implementing regulations of the National Privacy Commission (NPC). Philippine law governs all data processing by oojl.
oojl retains your data only as long as legally required — typically 5 years post-account closure for KYC and transaction records under anti-money laundering regulations. After the retention period, data is securely deleted or anonymised.
If a data breach affecting your personal data occurs, oojl will notify the NPC within 72 hours and inform affected users without undue delay — explaining what happened, what data was involved, and what oojl is doing about it.
You've reviewed how oojl handles your data. One account, one secure PHP wallet, GCash deposits, 500+ games — all with the data protection standards you just read about. Sign in or register to start playing.
Must be 21+. Gambling involves risk. Responsible Gaming. Terms & Conditions.