phjoy1 Privacy Policy

1Introduction

This Privacy Policy ("Policy") describes how phjoy1 ("phjoy1," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you" or "your") who access or use the phjoy1 online casino platform, including the website at phjoy1.app, the phjoy1 Login portal, and all associated services (collectively, the "Platform").

phjoy1 is committed to complying with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its implementing rules and regulations. We are registered with the National Privacy Commission (NPC) as required by Philippine law.

By registering an account, accessing the phjoy1 Login page, or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you must not use the Platform.

2Personal Data We Collect

phjoy1 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you use the phjoy1 Platform, we automatically collect certain technical and behavioral data, including:

• IP address, device type, operating system, and browser type
• Pages visited, time spent on each page, and navigation paths within the Platform
• Game session data, including games played, wager amounts, and session duration
• Login timestamps and phjoy1 Login activity logs
• Cookies and similar tracking technologies (see Section 6)

2.3 Data from Third Parties

We may receive personal data about you from third-party sources, including payment processors (such as GCash and PayMaya), identity verification service providers, fraud prevention agencies, and regulatory bodies such as PAGCOR, where required by law.

3How We Use Your Personal Data

phjoy1 uses your personal data only for legitimate, specified purposes. We do not sell your personal data to third parties for marketing purposes. The primary purposes for which we process your data are:

• Account Management: To create, maintain, and secure your phjoy1 account, including processing your phjoy1 Login and verifying your identity.
• Service Delivery: To provide access to games, process deposits and withdrawals in Philippine Peso (₱), and deliver customer support in English, Tagalog, and Bisaya.
• Regulatory Compliance: To fulfill our obligations under Philippine law, including anti-money laundering (AML) requirements, PAGCOR reporting obligations, and the Data Privacy Act of 2012.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible Gaming: To monitor gaming behavior and apply responsible gaming tools such as deposit limits, session reminders, and self-exclusion where appropriate.
• Platform Improvement: To analyze usage patterns and improve the phjoy1 Platform, including game performance, mobile experience, and customer support quality.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may opt out at any time.

4Legal Basis for Processing

Under the Data Privacy Act of 2012, phjoy1 processes your personal data on the following legal bases:

5Data Sharing & Disclosure

phjoy1 does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Processors: GCash, PayMaya/Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and liveness-check service providers engaged to verify your identity in compliance with AML regulations.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law.
• Technology Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Game Content Providers: Licensed game studios whose titles are available on the phjoy1 Platform, to the extent necessary for game session management and fairness auditing.

6Cookies & Tracking Technologies

phjoy1 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage patterns. The types of cookies we use include:

• Strictly Necessary Cookies: Required for the Platform to function, including maintaining your phjoy1 Login session and security tokens. These cannot be disabled.
• Functional Cookies: Remember your language preferences, display settings, and responsible gaming tool configurations.
• Analytics Cookies: Help us understand how players navigate the Platform so we can improve the user experience. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used only with your consent to deliver relevant promotional content within the phjoy1 Platform.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use the Platform, including the phjoy1 Login function.

7Data Retention

phjoy1 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction and Financial Data: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Game Session Data: Retained for up to three (3) years for dispute resolution and fairness audit purposes.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.
• Technical Logs: Retained for up to twelve (12) months for security monitoring purposes.

When personal data is no longer required, phjoy1 will securely delete or anonymize it in accordance with our data disposal procedures.

8Data Security

phjoy1 implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phjoy1 Platform
• Encrypted storage of passwords using bcrypt hashing — phjoy1 staff cannot view your password in plain text
• Multi-factor authentication options for the phjoy1 Login process
• Regular penetration testing and vulnerability assessments by independent security firms
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• 24/7 security monitoring and automated threat detection systems

9Your Data Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjoy1:

To exercise any of these rights, please contact our Data Protection Officer at the email address provided in Section 14. phjoy1 will respond to all verified requests within thirty (30) days.

10Children's Privacy

The phjoy1 Platform is strictly intended for users who are 21 years of age or older, in accordance with Philippine gaming regulations. phjoy1 does not knowingly collect personal data from individuals under the age of 21.

If phjoy1 discovers that personal data has been collected from a person under 21, we will immediately close the associated account, delete all related personal data, and report the matter to the appropriate regulatory authorities where required. If you believe a minor has registered on the phjoy1 Platform, please contact us immediately at the details in Section 14.

11International Data Transfers

phjoy1 primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure partners located outside the Philippines — for example, cloud hosting or cybersecurity services — phjoy1 ensures that such transfers are subject to appropriate safeguards, including:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized under Philippine law
• Your explicit consent where required for specific transfers

phjoy1 will not transfer your personal data to jurisdictions that do not provide adequate data protection without your prior consent and appropriate contractual safeguards in place.

12Third-Party Links

The phjoy1 Platform may contain references to third-party services such as payment processors (GCash, PayMaya) and game content providers. While phjoy1 takes care to work only with reputable partners, we are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of phjoy1.

13Changes to This Privacy Policy

phjoy1 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will update the "Last Updated" date at the top of this page and, where practicable, notify registered users via the email address associated with their phjoy1 account.

Your continued use of the phjoy1 Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and may request account closure.

14Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phjoy1, please contact our designated Data Protection Officer (DPO):