Privacy Policy —
phjioy Online Casino Philippines

This Privacy Policy is issued by phjioy ("phjioy," "we," "us," "our"), the operator of the online gaming platform accessible at phjioy.net. phjioy is a PAGCOR-regulated online gaming brand serving Filipino players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond.

For the purposes of the Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations, phjioy acts as the Personal Information Controller (PIC) with respect to the personal data of our registered players and site visitors. This means we determine the purposes and means by which your personal data is processed.

phjioy collects personal data that is necessary, relevant, and not excessive relative to the purposes for which it is collected. The categories of personal data we may collect include:

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (used to verify 21+ age eligibility)
• Residential address (street, city, province, postal code)
• Email address and mobile phone number
• Nationality and country of residence

• Copies of government-issued Philippine ID documents (Passport, Driver's License, SSS ID, UMID, PhilHealth card, Voter's ID, or Postal ID)
• Proof of residential address documents (utility bills, bank statements, barangay certificate)
• Selfie photographs for identity liveness checks, where required
• Source of funds declarations, where applicable under AML regulations

• GCash or PayMaya mobile number linked to your payment account
• BDO, BPI, or Metrobank account details used for withdrawals
• Deposit and withdrawal transaction history
• Wagering history, game activity logs, and account balance records

• IP address and geolocation data at login
• Device type, operating system, browser type and version
• Session duration, pages visited, and features accessed on phjioy
• Cookies and similar tracking technology identifiers (see Section 8)

• Content of live chat conversations and support ticket exchanges with phjioy customer service
• Responses to surveys, promotions, or feedback forms
• Records of emails or messages sent to and received from phjioy

phjioy collects personal data through several channels, all of which involve your direct or indirect interaction with the phjioy platform:

• Account Registration: When you create a phjioy account, you provide identity and contact data directly through the registration form.
• KYC Verification: When you complete our identity verification process, you upload ID documents and supporting materials through the secure phjioy verification portal.
• Deposits & Withdrawals: When you conduct financial transactions, payment details and transaction metadata are captured automatically by our payment processing systems.
• Platform Activity: As you use phjioy — playing games, placing bets, accessing promotions — our systems automatically log your activity for security, fraud prevention, and personalization purposes.
• Customer Support: When you contact phjioy's support team via live chat or email, the content and metadata of those communications are recorded.
• Cookies & Tracking Technologies: When you visit phjioy.net, cookies and similar technologies automatically collect technical and usage data. See Section 8 for details.
• Third-Party Sources: In limited circumstances, phjioy may receive data about you from third-party identity verification providers, fraud screening services, or PAGCOR, where permitted by law.

phjioy processes your personal data only for specific, legitimate purposes. The table below summarizes the primary purposes for which phjioy uses your data:

phjioy will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing another lawful basis for the new processing activity.

Under the Data Privacy Act of 2012 and its Implementing Rules, phjioy relies on one or more of the following lawful bases when processing your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and phjioy — specifically, to provide you with access to the gaming platform, process your transactions, and manage your account.
• Legal Obligation: Processing is required to comply with phjioy's legal and regulatory obligations, including PAGCOR licensing requirements, AML obligations under Republic Act No. 9160 (as amended), and tax reporting requirements.
• Legitimate Interests: phjioy processes certain data on the basis of our legitimate business interests — including fraud detection, platform security, and responsible gaming monitoring — where these interests are not overridden by your rights and freedoms.
• Consent: Where required by law — particularly for direct marketing communications and non-essential cookies — phjioy relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by contacting our support team or adjusting your account preferences.

phjioy does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your data only in the following limited circumstances:

phjioy shares player data with PAGCOR and other competent Philippine government authorities where required by law, including for regulatory audits, AML reporting, and player exclusion enforcement. This sharing is a legal obligation and cannot be withheld.

To process your GCash, PayMaya, BDO, BPI, and Metrobank transactions, phjioy shares the minimum necessary financial and identity data with our licensed payment processing partners. These partners are contractually bound to process your data only for the purpose of completing your transaction and comply with applicable Philippine financial regulations.

phjioy uses third-party KYC and identity verification service providers to assist with document verification and liveness checks. These providers act as Personal Information Processors (PIPs) under our instructions and are contractually prohibited from using your data for any purpose other than completing the verification service.

phjioy uses cloud hosting providers, game technology suppliers, cybersecurity vendors, and analytics platforms to operate the phjioy platform. These providers may process limited technical and usage data on our behalf as PIPs under appropriate data processing agreements.

phjioy may disclose personal data to Philippine law enforcement or judicial authorities where we are legally compelled to do so by a valid court order, subpoena, or other lawful process, or where disclosure is necessary to prevent fraud, money laundering, or other criminal activity.

phjioy retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. Specific retention periods include:

• Account data: Retained for the duration of your active account relationship with phjioy, plus a minimum of five (5) years following account closure, in compliance with AML and PAGCOR record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the end of your business relationship with phjioy, as required under Republic Act No. 9160.
• Transaction records: Retained for a minimum of five (5) years, consistent with PAGCOR and BIR record-keeping obligations.
• Communications data: Customer support conversations are retained for up to three (3) years for dispute resolution and training purposes.
• Technical and usage data: Log data and session data are retained for up to twelve (12) months for security monitoring and platform improvement purposes.
• Marketing consent records: Retained for the duration of the consent, plus three (3) years to demonstrate compliance in the event of a regulatory inquiry.

When personal data is no longer required for any lawful retention purpose, phjioy securely destroys or anonymizes it using industry-standard data disposal methods.

phjioy uses cookies and similar technologies (such as web beacons and local storage) on phjioy.net to ensure the platform functions correctly and to improve your experience as a Filipino player on our site. Below is a summary of the cookie categories we use:

• Strictly Necessary Cookies: These cookies are essential for phjioy to function. They maintain your login session, remember your security token, and enable core platform features such as the game lobby and cashier. These cannot be disabled without breaking the platform.
• Performance & Analytics Cookies: These cookies help phjioy understand how players interact with the platform — which game categories are most popular, how players navigate between sections, and where technical errors occur. This data is used in aggregate and anonymized form to improve the phjioy experience.
• Functionality Cookies: These cookies remember your preferences — such as your language settings and display preferences — so you do not need to re-configure the platform each time you log in.
• Marketing & Targeting Cookies: Where you have consented, phjioy uses cookies to track your activity across phjioy.net and deliver promotions and bonus offers relevant to your gaming interests. These cookies may also assist in frequency-capping our communications to avoid sending you repetitive messages.

You can manage or disable cookies through your browser's settings at any time. Please note that disabling strictly necessary cookies will impair your ability to use core phjioy platform features. Adjusting your cookie preferences does not affect personal data already lawfully processed prior to your change in preferences.

Under the Data Privacy Act of 2012, you have specific rights in relation to your personal data held by phjioy. phjioy fully recognizes and respects all of the following data subject rights:

To exercise any of the above rights, contact phjioy's Data Protection Officer via our 24/7 live support chat or by email to [email protected]. phjioy will acknowledge your request within 72 hours and respond substantively within fifteen (15) business days in accordance with NPC guidelines. We may need to verify your identity before processing your request.

phjioy implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security framework includes:

• Transport Layer Security (TLS): All data transmitted between your device and phjioy servers is encrypted using TLS 1.2 or higher, ensuring that your login credentials, financial details, and personal information cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data stored on phjioy infrastructure — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data within phjioy's internal systems is restricted on a strict need-to-know basis. Only authorized personnel with a documented business need may access identifiable player data, and all access is logged and audited.
• Intrusion Detection & Monitoring: phjioy operates 24/7 security monitoring systems, including intrusion detection and prevention tools, to identify and respond to potential threats in real time.
• Penetration Testing: Our platform undergoes regular independent security assessments and penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Staff Training: All phjioy staff who handle personal data receive regular data privacy and security training. Awareness of social engineering, phishing, and insider threat risks is maintained across the team.
• Breach Response: In the event of a personal data breach that poses a real risk to affected individuals, phjioy will notify the National Privacy Commission and affected data subjects within the timeframes required by the Data Privacy Act of 2012 and its Implementing Rules.

While phjioy takes every reasonable precaution to protect your data, no online platform can guarantee absolute security. We encourage you to use a strong, unique password for your phjioy account and to enable any available two-factor authentication features for additional protection.

phjioy is an online gaming platform intended exclusively for adults aged 21 years and above, consistent with Philippine law on casino-style gambling. phjioy does not knowingly collect, process, or retain personal data from any person under the age of 21.

During registration and KYC verification, phjioy performs age verification checks using date of birth information and supporting ID documents. Any account found to belong to a person under 21 years of age will be immediately suspended, any outstanding balance refunded to the original payment source, and all associated personal data securely deleted or anonymized, except where retention is required for legal compliance purposes.

phjioy reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or our platform's features. When we make material changes to this Privacy Policy, we will:

• Update the "Last Updated" date at the top of this page.
• Post a prominent notice on the phjioy platform informing registered players of the update.
• Where the changes materially affect your rights or how we use your data, send a direct notification to your registered email address.

We encourage you to review this Privacy Policy periodically to stay informed about how phjioy protects your personal data. Your continued use of the phjioy platform following the posting of a revised Privacy Policy constitutes your acknowledgment and acceptance of the updated terms, to the extent permitted by applicable law.

If you have any questions, concerns, or requests relating to this Privacy Policy or phjioy's handling of your personal data, you may contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the phjioy platform — the fastest way to reach our support team.
• Email: [email protected] — for formal data subject requests and privacy-related inquiries. Please include "Privacy Request" in the subject line.

If you are not satisfied with phjioy's response to your privacy concern, or if you believe that phjioy has processed your personal data in violation of the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC can be reached through their official government channels.