Privacy Policy

1. Introduction

phjoy25 ("phjoy25," "we," "us," or "our") is committed to protecting the privacy and personal data of all users who access or use the phjoy25 online casino platform at phjoy25.app (the "Platform"). This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information in connection with your use of the phjoy25 Platform and all related services.

This Policy is issued in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). By registering an account or using the phjoy25 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree with the terms of this Policy, please discontinue use of the phjoy25 Platform immediately. For questions or concerns about how phjoy25 handles your data, please refer to the Contact section at the end of this Policy.

2. Personal Data We Collect

phjoy25 collects the following categories of personal data from users of the Platform:

Identity & Registration Data:

• Full legal name as it appears on a government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Gender;
• Nationality and country of residence;
• Government-issued identification number (e.g., PhilSys ID, passport, driver's license, SSS/GSIS number).

Contact Data:

• Philippine mobile number;
• Email address;
• Residential address (city, province, barangay).

Financial Data:

• GCash or PayMaya/Maya account number linked to your phjoy25 account;
• Bank account details (for bank transfer transactions via BPI, BDO, Metrobank, UnionBank, Landbank, PNB, or Security Bank);
• Transaction history, deposit and withdrawal records, and account balance information.

Technical & Usage Data:

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used on the Platform;
• Game history, betting patterns, and wagering activity.

Communications Data:

• Records of your communications with phjoy25 customer support;
• Feedback, survey responses, and promotional opt-in preferences.

3. How We Collect Your Data

phjoy25 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies;
• Third-party sources: Identity verification data from KYC/AML service providers; payment data from GCash, PayMaya, and banking partners; fraud detection signals from security service providers.

4. How We Use Your Personal Data

phjoy25 processes your personal data for the following purposes, each of which has a lawful basis under the Data Privacy Act of 2012:

• Account management: To create, maintain, and secure your phjoy25 account, including identity verification and KYC compliance;
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the core features of the phjoy25 Platform;
• Legal and regulatory compliance: To comply with PAGCOR-aligned requirements, Anti-Money Laundering Act (AMLA) obligations, and NPC data privacy regulations;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized access, and other security threats;
• Responsible gaming: To monitor gaming behavior, enforce deposit limits and self-exclusion requests, and identify players who may need responsible gaming support;
• Customer support: To respond to your inquiries, complaints, and support requests;
• Marketing and promotions: To send you relevant offers, bonuses, and promotional communications — only where you have provided consent and subject to your opt-out rights;
• Platform improvement: To analyze usage patterns, conduct research, and improve the features and performance of the phjoy25 Platform.

5. Sharing Your Personal Data

phjoy25 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, PayMaya/Maya, and Philippine banking partners, for the purpose of processing your deposits and withdrawals;
• KYC/AML providers: Identity verification and anti-money laundering service providers engaged to fulfill our regulatory obligations;
• IT and security providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on our behalf under strict confidentiality obligations;
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where required by law or regulatory directive;
• Legal and professional advisors: Lawyers, auditors, and compliance consultants, subject to professional confidentiality obligations.

Any third party that receives your personal data from phjoy25 is contractually required to process it only for the specified purpose and in accordance with applicable data protection laws.

6. Data Retention

phjoy25 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Specifically:

• Account and KYC data is retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years from the date of the transaction;
• Customer support communications are retained for three (3) years;
• Marketing preference data is retained until you withdraw consent or request deletion.

Upon expiry of the applicable retention period, phjoy25 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

7. Data Security

phjoy25 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phjoy25 Platform;
• Encryption of sensitive data at rest, including financial and identity information;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, penetration testing, and vulnerability assessments;
• Two-factor authentication (2FA) available for all player accounts;
• Incident response procedures for detecting and responding to data breaches in accordance with NPC notification requirements.

While phjoy25 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are also responsible for maintaining the security of your phjoy25 login credentials.

8. Cookies & Tracking Technologies

phjoy25 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver relevant content. The types of cookies we use include:

• Essential cookies: Required for the Platform to function correctly, including session management and security features. These cannot be disabled.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the Platform, helping us improve performance and user experience.
• Preference cookies: Used to remember your settings and preferences, such as language and display options.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our campaigns. These are only set with your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phjoy25 Platform.

9. Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjoy25:

• Right to be informed: The right to know what personal data phjoy25 collects and how it is processed;
• Right of access: The right to request a copy of the personal data phjoy25 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the phjoy25 Data Protection Officer using the contact details provided in Section 12 of this Policy. We will respond to all verified requests within fifteen (15) business days.

10. Minors and Age Restriction

The phjoy25 Platform is strictly intended for individuals who are at least twenty-one (21) years of age. phjoy25 does not knowingly collect personal data from persons under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has registered on the phjoy25 Platform, please contact our support team immediately at [email protected] so that we can take appropriate action.

11. Changes to This Privacy Policy

phjoy25 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or Platform features. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered users via email or in-platform notification.

Your continued use of the phjoy25 Platform following the posting of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Policy periodically to stay informed about how phjoy25 protects your personal data.