phjoy21 Privacy Policy

phjoy21 is committed to protecting the privacy and security of every player who uses our platform. We understand that your personal information is valuable, and we take our obligations as a personal information controller under Philippine law seriously. This Policy applies to all personal data collected through the phjoy21 website, mobile platform, customer support channels, and any other touchpoints through which you interact with phjoy21.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, both of which form part of the overall agreement between you and phjoy21. If you have any questions about how we handle your personal data, please refer to Section 15 of this Policy for our contact details.

We may update this Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. The "Last Updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this Policy periodically to stay informed about how phjoy21 protects your information.

phjoy21 collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include, but are not limited to, the following:

2.1 Identity & Registration Data

• Full legal name
• Date of birth (for age verification — you must be 21 or older)
• Gender
• Government-issued identification number (e.g., Philippine National ID, passport, driver's license)
• Username and account credentials

2.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including city, province, and postal code)

2.3 Financial Data

• GCash account details
• PayMaya / Maya account details
• Bank account information (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank)
• Debit card details (card number masked, expiry date)
• Transaction history, deposit records, and withdrawal records

2.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, login timestamps, and activity logs
• Game history, wagering records, and betting patterns
• Pages visited and features used on the phjoy21 platform

2.5 Communications Data

• Customer support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Promotional opt-in preferences and marketing communication history

phjoy21 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access and interact with the phjoy21 platform, including through cookies, web beacons, and similar tracking technologies (see Section 7).
• Third-Party Sources: Information received from identity verification service providers, payment processors, fraud detection partners, and regulatory databases where permitted by applicable law.
• Publicly Available Sources: In limited circumstances, phjoy21 may supplement your profile with information from publicly available sources for fraud prevention and compliance purposes.

phjoy21 uses the personal data we collect for the following purposes:

phjoy21 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by applicable law.

phjoy21 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide you with access to the phjoy21 platform and its services, including account management, gaming, and financial transactions.
• Legal Obligation: Processing is necessary to comply with applicable legal and regulatory obligations, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and PAGCOR regulatory requirements.
• Legitimate Interests: Processing is necessary for phjoy21's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and business analytics, provided that such interests are not overridden by your rights and interests.
• Consent: Where required by law, phjoy21 will obtain your explicit consent before processing your personal data — for example, for direct marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

phjoy21 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya/Maya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to facilitate deposits and withdrawals.
• Identity Verification Providers: Third-party KYC and age verification service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Fraud Prevention & Security Partners: Service providers that assist phjoy21 in detecting and preventing fraudulent activity, money laundering, and other illegal conduct.
• Game Software Providers: Licensed game developers and content providers whose games are available on the phjoy21 platform, to the extent necessary to deliver gaming services.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities, where disclosure is required by law or regulatory mandate.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by phjoy21 in connection with legal proceedings, compliance reviews, or corporate transactions, subject to appropriate confidentiality obligations.
• IT & Infrastructure Providers: Cloud hosting, data storage, and platform infrastructure providers engaged by phjoy21 to operate and maintain the phjoy21 platform, subject to data processing agreements.

phjoy21 uses cookies and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and support security and fraud prevention functions. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the operation of the phjoy21 platform, including session management, authentication, and security functions. These cookies cannot be disabled without affecting platform functionality.
• Performance & Analytics Cookies: Used to collect aggregated, anonymized information about how players use the phjoy21 platform, helping us identify areas for improvement and optimize the user experience.
• Functional Cookies: Used to remember your preferences and settings, such as language preferences and display options, to provide a more personalized experience.
• Targeting & Marketing Cookies: Used, with your consent, to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. You may opt out of these cookies at any time through your account settings or browser preferences.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phjoy21 platform. For more information on managing cookies, refer to your browser's help documentation.

phjoy21 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and regulatory record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended) and PAGCOR regulations.
• Identity Verification Documents: Retained for the duration of your account and for a minimum of five (5) years following account closure.
• Customer Support Records: Retained for a minimum of three (3) years from the date of the interaction.
• Marketing Preferences: Retained until you withdraw your consent or request deletion, subject to applicable legal retention requirements.

Upon expiry of the applicable retention period, phjoy21 will securely delete or anonymize your personal data in accordance with our data disposal procedures.

phjoy21 implements a comprehensive set of technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security measures include, but are not limited to:

• Encryption: All data transmitted between your device and the phjoy21 platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized phjoy21 personnel and service providers on a strict need-to-know basis. All access is logged and monitored.
• Two-Factor Authentication: phjoy21 supports and encourages the use of two-factor authentication (2FA) to protect your account from unauthorized access.
• Regular Security Audits: phjoy21 conducts regular security assessments, penetration testing, and vulnerability scans to identify and remediate potential security risks.
• Incident Response: phjoy21 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phjoy21 will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phjoy21:

To exercise any of the above rights, please contact our Data Protection Officer (DPO) using the details provided in Section 15. phjoy21 will respond to all verified data subject requests within thirty (30) days of receipt, or within such extended period as permitted by applicable law. We may require you to verify your identity before processing your request.

If you believe that phjoy21 has not adequately addressed your data privacy concerns, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The phjoy21 platform is strictly intended for individuals who are 21 years of age or older. phjoy21 does not knowingly collect, process, or retain personal data from individuals under the age of 21. Age verification is conducted as part of the registration process, and phjoy21 reserves the right to request documentary proof of age at any time.

If phjoy21 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, we will take immediate steps to delete such data and close the associated account. If you believe that a minor has registered on the phjoy21 platform, please contact us immediately at the details provided in Section 15.

The phjoy21 platform may contain links to third-party websites or services, including game software providers and payment partners. This Privacy Policy applies solely to the phjoy21 platform and does not govern the data practices of any third-party websites or services. phjoy21 is not responsible for the privacy practices or content of third-party sites.

We encourage you to review the privacy policies of any third-party websites you visit. The inclusion of a link to a third-party site on the phjoy21 platform does not constitute an endorsement of that site's privacy practices.

phjoy21 primarily processes and stores personal data within the Philippines. In certain circumstances, your personal data may be transferred to, stored in, or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software developers operating in other jurisdictions.

Where such international transfers occur, phjoy21 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations. These safeguards may include contractual data protection clauses, adequacy assessments, or other mechanisms recognized under Philippine data protection law.

By using the phjoy21 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside the Philippines where necessary for the provision of phjoy21's services, subject to the safeguards described above.

phjoy21 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, phjoy21 will notify registered players via email or through a prominent notice on the phjoy21 platform prior to the changes taking effect. The "Last Updated" date at the top of this page will be revised accordingly.

Your continued use of the phjoy21 platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised Policy. If you do not agree to the updated Policy, you must cease using the phjoy21 platform and may request the closure of your account.

We recommend bookmarking this page and reviewing it periodically so you are always up to date on how phjoy21 handles your personal information.

phjoy21 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through any of the following channels:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 directly on the phjoy21 platform.
• FAQ: Visit our FAQ page for answers to common questions.

phjoy21 will acknowledge receipt of your data privacy request within seventy-two (72) hours and will endeavor to resolve your request within thirty (30) days. For complex requests, we may require additional time, in which case we will notify you of the expected resolution timeline.

If you are not satisfied with phjoy21's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.