phjoy1 Privacy
Policy

phjoy1 ("we," "us," or "our") operates the online gaming platform accessible at phjoy1.net and any associated mobile applications or services (collectively, the "Platform"). We are committed to protecting the privacy and personal data of every player, visitor, and user who interacts with our Platform.

This Privacy Policy describes how phjoy1 collects, uses, stores, shares, and protects your personal information. It also explains the rights you have under Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

By registering an account, accessing the Platform, or otherwise providing your personal information to phjoy1, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

phjoy1 collects only the personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we may collect include:

phjoy1 collects your personal data through the following means:

• Direct interactions: When you register an account, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion.
• Automated technologies: When you browse or use the Platform, we automatically collect technical and usage data through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: We may receive data about you from identity verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention services, and regulatory databases — solely for the purposes of verifying your identity and preventing financial crime.
• Publicly available sources: In limited circumstances, we may supplement your profile with information from publicly available government or regulatory databases for compliance purposes.

phjoy1 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your phjoy1 player account, including processing your registration and verifying your identity in accordance with our Know Your Customer (KYC) obligations.
• Age verification: To confirm that you are at least 21 years of age before permitting access to real-money gaming, as required under Philippine gaming regulations.
• Transaction processing: To process deposits, withdrawals, and bonus credits accurately and securely through your chosen payment method.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat and email.
• Legal and regulatory compliance: To fulfill our obligations under Philippine law, including anti-money laundering (AML) requirements, PAGCOR reporting obligations, and the Data Privacy Act of 2012.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other illegal conduct on the Platform.
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion requests, and provide responsible gaming tools to players who may be at risk.
• Platform improvement: To analyze usage patterns, conduct A/B testing, and improve the performance, design, and game selection of the phjoy1 Platform.
• Marketing communications: To send you promotional offers, bonus notifications, and seasonal fiesta campaign updates — but only where you have given your explicit consent to receive such communications. You may opt out at any time.

Under the Data Privacy Act of 2012 and its implementing rules, phjoy1 processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform the contract between you and phjoy1 — specifically, to operate your player account, process transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing conditions, and the Data Privacy Act of 2012.
• Legitimate interests: Processing is necessary for phjoy1's legitimate interests in fraud prevention, platform security, and business analytics, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phjoy1 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following limited circumstances:

• Service providers: We share data with carefully selected third-party service providers who assist us in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting providers, and customer support software vendors. These providers are contractually bound to process your data only on our instructions and in accordance with the Data Privacy Act.
• Game providers: To deliver certain games on the Platform, we may share limited technical data (such as your player ID and session token) with licensed game studios and live casino operators. These providers do not receive your full identity or financial data.
• Regulatory authorities: We are required to share certain player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory bodies upon lawful request or as required by our licensing conditions.
• Law enforcement: We may disclose your data to law enforcement agencies, courts, or other government bodies where required by a valid legal order, warrant, or subpoena issued under Philippine law.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of phjoy1's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

phjoy1 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain your session, and gather analytics data. The types of cookies we use are:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Performance cookies: Collect anonymized data about how visitors use the Platform (e.g., which pages are visited most, error messages encountered). This helps us improve the Platform's performance and reliability.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options to provide a more personalized experience.
• Analytics cookies: Used to understand aggregate user behavior on the Platform. Data collected is anonymized and used solely for internal reporting purposes.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

phjoy1 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases, including financial information and identity documents.
• Multi-factor authentication (MFA) options for player accounts to prevent unauthorized access.
• Firewalls and intrusion detection systems to monitor and block suspicious network activity.
• Regular security audits and penetration testing conducted by independent cybersecurity professionals.
• Strict access controls ensuring that only authorized phjoy1 personnel with a legitimate need can access player data.
• Staff training on data privacy and security best practices, conducted regularly for all employees who handle personal data.

Despite these measures, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, phjoy1 will notify the National Privacy Commission and affected players within the timeframes required by the Data Privacy Act of 2012.

phjoy1 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. Our general retention periods are as follows:

• Active account data: Retained for the duration of your account's active status plus a minimum of five (5) years after account closure, in accordance with PAGCOR licensing requirements and AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act (AMLA) and its implementing rules.
• Identity verification documents: Retained for five (5) years after account closure or the completion of the relevant KYC process, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the last interaction, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.
• Technical and usage data: Retained in anonymized or aggregated form for up to two (2) years for analytics purposes.

When your personal data is no longer required, phjoy1 will securely delete or anonymize it in accordance with our data disposal procedures.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjoy1:

• Right to be informed: You have the right to know what personal data phjoy1 collects about you, how it is used, and with whom it is shared — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data phjoy1 holds about you, along with information about how it is processed.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request that it be corrected. You can update most account details directly through your phjoy1 account dashboard.
• Right to erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our overriding legal obligations.
• Right to data portability: You may request that phjoy1 provide your personal data in a structured, commonly used, and machine-readable format so that you can transfer it to another service provider.
• Right to lodge a complaint: If you believe that phjoy1 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the details provided in Section 14 of this Policy. We will respond to all verified requests within thirty (30) days, or within the timeframe required by applicable law.

The phjoy1 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from any person under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately close the associated account, void any transactions, and securely delete the personal data in question. Any funds deposited by an underage player will be handled in accordance with applicable Philippine law.

The phjoy1 Platform may contain links to third-party websites or services, such as payment provider portals (e.g., GCash, PayMaya) or regulatory authority websites. These third-party sites operate under their own privacy policies, which are independent of this Privacy Policy.

phjoy1 is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policy of any third-party site you visit before providing your personal data to them.

phjoy1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players via the email address on file and/or by displaying a prominent notice on the Platform.

The updated Privacy Policy will take effect on the date specified in the notice. Your continued use of the phjoy1 Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. We recommend that you review this page periodically to stay informed of how we protect your data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phjoy1 processes your personal data, please contact our dedicated Data Protection Officer (DPO):

• Data Protection Officer: phjoy1 Privacy Team
• Email: support@phjoy1.net
• Live Chat: Available 24/7 directly within your phjoy1 account dashboard.
• Response Time: We aim to acknowledge all privacy-related enquiries within 72 hours and resolve them within 30 days.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.