UCJILI Privacy Policy —
How We Handle Your Personal Data

1 Who We Are

ucjili is an online betting and gaming platform operated for and serving members based in the Philippines. For the purposes of this Privacy Policy, ucjili acts as the Data Controller for the personal information of all registered members and platform visitors, as defined under Republic Act 10173, the Data Privacy Act of 2012.

ucjili is committed to handling your personal data responsibly and in accordance with all applicable Philippine data protection laws. A dedicated Data Protection Officer (DPO) oversees compliance with this policy and is the first point of contact for all data-related queries from members.

2 Data We Collect

The categories of personal data that ucjili may collect include:

• Identity information — your full legal name, date of birth, and government-issued identification documents for age and identity verification purposes.
• Contact information — your Philippine mobile number and email address, used for account management, security notifications, and support communications.
• Financial information — payment details associated with your deposits and withdrawals, including GCash numbers, Maya accounts, and bank account references. ucjili does not store full card numbers directly on its servers.
• Technical and device data — IP address, browser type, operating system, device identifiers, and session logs, collected automatically when you access the platform.
• Betting and usage history — records of bets placed, games accessed, deposit and withdrawal history, and time spent on the platform.
• Support communications — the content of messages you send to our support team, whether via live chat, email, or any other channel.

ucjili does not collect sensitive personal information as defined under RA 10173 (such as health records, political affiliations, or biometric data) unless specifically required and with your explicit consent.

3 How We Use Your Data

ucjili uses the personal data it collects for clearly defined purposes. We do not use your data for purposes beyond what is listed here without first obtaining your consent or informing you through an updated version of this policy.

• Account registration and management — to create and maintain your ucjili account, verify your identity, and manage your preferences.
• Payment processing — to process deposits, withdrawals, and refunds through your chosen Philippine payment method.
• Fraud prevention and security — to detect and prevent fraudulent activity, money laundering, account takeovers, and other security threats to you and the platform.
• Legal and regulatory compliance — to fulfil obligations under Philippine anti-money laundering laws, gaming regulations, and data protection requirements.
• Responsible gaming monitoring — to identify behavioural patterns that may indicate problem gambling and to apply appropriate responsible gaming interventions where needed.
• Platform improvement — to understand how members use ucjili and to improve the interface, performance, and game selection.
• Customer support — to respond to your queries, resolve disputes, and maintain a record of our communications for quality assurance.
• Marketing communications — to send you promotional offers and updates where you have given consent to receive these. You can opt out at any time through your account settings.

4 Legal Basis for Processing

ucjili processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our obligations under the account agreement, such as processing payments and maintaining your account.
• Legal obligation — processing required to comply with Philippine law, including anti-money laundering regulations and gaming licensing conditions.
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent — processing for marketing communications and any optional data uses where we have obtained your explicit, informed consent.

5 Sharing Your Data

ucjili does not sell, rent, or trade your personal data to any third party. We share data only in the following limited and necessary circumstances:

• Payment processors — licensed Philippine financial service providers (including GCash, Maya, and partner banks) receive the transaction data required to process your deposits and withdrawals.
• Identity verification partners — regulated KYC (Know Your Customer) service providers who assist in verifying member identities in accordance with anti-money laundering requirements.
• Technology and hosting providers — cloud infrastructure and platform technology providers who process data on our behalf under strict data processing agreements.
• Fraud prevention networks — industry fraud prevention services that help identify and prevent multi-platform fraud, account takeovers, and bonus abuse.
• Regulatory and law enforcement authorities — when required by Philippine law, court order, or a lawful request from a regulatory body.

6 Cookies and Tracking Technologies

ucjili uses cookies and similar tracking technologies to ensure the platform works properly, to keep you logged in during your session, and to understand how members use the site so we can improve it.

The types of cookies ucjili uses:

• Essential cookies — required for the platform to function. These cannot be disabled. They handle session management, security tokens, and login state.
• Analytics cookies — used to understand page visit patterns, feature usage, and error rates. Data is aggregated and does not identify individual users.
• Preference cookies — remember your settings such as language preference and notification choices.

You can manage cookie preferences in your browser settings. Disabling essential cookies will affect platform functionality and may prevent you from logging in or placing bets. Disabling analytics cookies will not affect your ability to use ucjili.

7 Data Retention

ucjili retains your personal data for as long as your account is active and for a period thereafter as required by Philippine law and our licensing obligations. Specific retention periods include:

• Account registration data and identity documents: retained for the life of the account plus 5 years after account closure, as required under Philippine AML regulations.
• Financial transaction records: retained for 10 years in accordance with the Anti-Money Laundering Act and related regulations.
• Betting and game history: retained for 5 years for dispute resolution and regulatory reporting purposes.
• Support communications: retained for 3 years for quality assurance and dispute resolution.
• Technical logs: retained for 12 months for security monitoring and fraud detection.

Once the applicable retention period has expired, ucjili securely destroys or anonymises the data so it can no longer be linked to you as an individual.

8 Data Security

ucjili takes the security of your personal data seriously. We implement multiple layers of technical and organisational security measures to protect your information from unauthorised access, loss, or misuse.

Current security measures in place include:

• TLS 1.3 encryption for all data transmitted between your device and ucjili servers.
• AES-256 encryption for sensitive data stored in our databases.
• Multi-factor authentication (MFA) available for member accounts and mandatory for internal administrative access.
• Regular third-party penetration testing and vulnerability assessments.
• Role-based access controls ensuring that ucjili staff can only access data relevant to their specific function.
• 24/7 security monitoring with automated alerting for unusual access patterns.

Despite these measures, no online platform can guarantee absolute security. If you suspect your ucjili account has been compromised, contact support immediately at support@ucjili.best.

9 Your Data Rights Under RA 10173

As a ucjili member and a data subject under the Philippine Data Privacy Act, you have the following rights regarding your personal data. Click each right to read more about how to exercise it:

10 Children's Privacy

ucjili is strictly an 18+ platform. We do not knowingly collect personal data from individuals under 18 years of age. If we discover that an account belongs to a minor, it will be immediately closed, all associated data deleted (subject to any mandatory legal retention requirements), and the incident logged for regulatory reporting purposes.

Parents and guardians who believe a minor may have registered on ucjili are encouraged to contact support immediately at support@ucjili.best so the account can be reviewed and closed without delay.

11 Cross-Border Data Transfers

In some cases, ucjili's technology infrastructure or third-party service providers may be located outside the Philippines. Where personal data is transferred internationally, ucjili ensures that appropriate safeguards are in place to protect your data at the same standard required by Philippine law.

These safeguards include contractual clauses requiring overseas recipients to process data in accordance with RA 10173, and preference for service providers that hold recognised international data protection certifications.

ucjili does not transfer your data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate contractual protections.

12 Changes to This Privacy Policy

ucjili may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or the services we offer. When significant changes are made, we will notify registered members via email and display a prominent notice on the platform for at least 14 days before the changes take effect.

For minor clarifications or non-material updates, we will update the "Last updated" date at the top of this policy. We recommend reviewing this policy periodically, especially if you use the platform regularly or have connected a new payment method.

13 Contact Us and Data Protection Officer

ucjili has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act. The DPO is responsible for overseeing compliance with this policy and is the designated point of contact for all data-related requests and complaints from members.

You can reach ucjili for any privacy-related matter using the contact details below:

We aim to acknowledge all data rights requests within 3 business days and to complete the request within 15 business days. For complex requests, this may be extended to 30 business days with notification to you.

If you are not satisfied with how ucjili handles your request, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.