phjoy 23 Privacy Policy

phjoy 23 ("we," "us," "our") is committed to protecting the personal data of every player who uses our platform. As a responsible online casino serving Filipino players, we are bound by the Data Privacy Act of 2012 (RA 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy describes our practices as a Personal Information Controller (PIC) as defined under RA 10173. We collect and process personal data only for legitimate, specified, and explicit purposes, and we do not process data in a manner incompatible with those purposes. We are transparent about our data practices and give you meaningful control over your personal information.

By registering an account on phjoy 23 or by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the platform.

2.1 Personal Identification Data

When you register for a phjoy 23 account, we collect the following personal identification information:

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Nationality and country of residence
• Government-issued ID number (e.g., Philippine passport, driver's license, SSS/UMID, PhilSys ID)
• Residential address (including barangay, city/municipality, province)
• Email address
• Philippine mobile number
• Profile photograph (where required for KYC verification)

2.2 Financial Data

To process deposits and withdrawals, we collect financial information including:

• GCash or PayMaya/Maya account details (mobile number linked to the e-wallet)
• Bank account details (bank name, account number, account name) for bank transfer transactions
• Debit card details where applicable (card number, expiry — stored in tokenized form only)
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps
• Source of funds declarations where required by anti-money laundering regulations

2.3 Gaming Activity Data

We collect data related to your gaming activity on phjoy 23, including:

• Games played, bet amounts, win/loss records, and session durations
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Game preferences and platform interaction patterns

2.4 Technical and Device Data

When you access phjoy 23, we automatically collect certain technical data:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Unique device identifiers
• Log data including access times, pages visited, and error reports
• Cookie and tracking data (see Section 9)

2.5 Communications Data

We retain records of communications between you and phjoy 23, including live chat transcripts, email correspondence, and support ticket history. This data is used to resolve disputes, improve our services, and maintain a record of commitments made to players.

phjoy 23 collects personal data through the following channels:

• Direct submission: Information you provide when registering, completing KYC, making transactions, or contacting support
• Automated collection: Technical and device data collected automatically when you access the platform
• Third-party verification: Identity and address verification data from KYC service providers and government databases, where permitted by law
• Payment processors: Transaction confirmation data from GCash, PayMaya/Maya, and banking partners
• Regulatory bodies: Information shared with us by PAGCOR or other regulatory authorities in connection with our licensing obligations

phjoy 23 processes your personal data for the following specific purposes:

Under the Data Privacy Act of 2012, phjoy 23 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the phjoy 23 Terms & Conditions, including account management, game provision, and payment processing
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent that can be withdrawn at any time

6.1 Third-Party Service Providers

phjoy 23 may share your personal data with trusted third-party service providers who assist us in operating the platform. These include KYC and identity verification providers, payment processors (GCash, PayMaya/Maya, banking partners), game software providers, cloud hosting and infrastructure providers, and customer support platform providers. All third-party providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

6.2 Regulatory and Law Enforcement Authorities

phjoy 23 is required by law to share certain player data with PAGCOR and other Philippine regulatory and law enforcement authorities upon lawful request. This includes data required for AML reporting, tax compliance, and regulatory audits. We will only disclose data to authorities where we are legally obligated to do so.

6.3 No Sale of Personal Data

phjoy 23 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Your data is used solely for the purposes described in this Privacy Policy.

phjoy 23 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, and as required by applicable Philippine law. Specifically:

• Account and KYC data is retained for a minimum of five (5) years after account closure, in compliance with AMLA requirements
• Transaction records are retained for a minimum of five (5) years from the date of the transaction
• Communications data is retained for three (3) years from the date of the communication
• Technical and device data is retained for up to twelve (12) months, after which it is anonymized or deleted
• Marketing consent records are retained for as long as you remain subscribed, plus one (1) year after unsubscription

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

phjoy 23 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data at rest using AES-256 standards
• Multi-factor authentication (MFA) options for player accounts
• Regular security audits and penetration testing by independent third parties
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Secure data centers with physical access controls
• Incident response procedures for detecting and responding to data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phjoy 23 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173.

9.1 What Are Cookies

Cookies are small text files placed on your device when you visit phjoy 23. We also use similar tracking technologies such as web beacons and local storage. These technologies help us operate the platform, remember your preferences, and understand how players use our services.

9.2 Types of Cookies We Use

9.3 Managing Cookies

You can manage your cookie preferences through our cookie consent banner when you first visit the platform. You may also configure your browser to block or delete cookies at any time. Please note that disabling strictly necessary cookies may affect the functionality of the phjoy 23 platform.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjoy 23:

• Right to be informed: You have the right to know what personal data we collect, how we use it, and with whom we share it — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: If any of your personal data is inaccurate or incomplete, you have the right to request correction.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. We will respond to all verified requests within thirty (30) days.

phjoy 23 is strictly an adults-only platform. We do not knowingly collect personal data from individuals under the age of twenty-one (21). Our registration process includes mandatory age verification, and we require government-issued ID to confirm that all players meet the 21+ age requirement under Philippine law.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will immediately delete that data and close the associated account. If you believe a minor has registered on phjoy 23, please contact our support team immediately so we can take appropriate action.

phjoy 23 may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players via email or in-platform notification at least seven (7) days before the changes take effect. The updated Policy will always be available on this page, with the "Last Updated" date revised accordingly.

Your continued use of phjoy 23 after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

phjoy 23 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our DPO:

• Data Protection Officer: phjoy 23 Privacy Office
• Email: privacy@phjoy23.club
• General Support: support@phjoy23.club
• Response Time: Within 30 days for data rights requests; within 24 hours for general inquiries

You also have the right to escalate unresolved privacy concerns to the National Privacy Commission (NPC) of the Philippines through their official channels.