Privacy Policy

1 Introduction

phjoint ("we", "us", "our") operates the online gaming platform accessible at phjoint.net (the "Platform"). We are committed to protecting the privacy and personal data of all individuals who interact with our Platform, including registered players, prospective players, and visitors.

This Privacy Policy describes how phjoint collects, uses, stores, shares, and protects personal information in connection with the operation of the Platform. It has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").

This Policy applies to all personal data processed by phjoint in connection with your use of the Platform, regardless of the device or method of access. It should be read together with our Terms & Conditions, which govern your use of the Platform.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, phjoint is the personal information controller in respect of the personal data collected through the Platform. This means phjoint determines the purposes and means of processing your personal data.

phjoint has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Privacy Policy and applicable data privacy laws. Contact details for the DPO are provided in Section 14 of this Policy.

3 Personal Data We Collect

phjoint collects the following categories of personal data in connection with the operation of the Platform:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification numbers (e.g., passport number, driver's license number, PhilSys National ID number).
• Contact Data: Residential address (including barangay, city/municipality, province), email address, and mobile phone number.
• Account Data: Username, encrypted password, account preferences, communication preferences, and responsible gaming settings.
• Financial Data: GCash account details, PayMaya / Maya account details, bank account information (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), debit card details, transaction history, deposit and withdrawal records.
• Gaming Data: Game history, wagering activity, session duration, bonus usage, and responsible gaming tool usage.
• Technical Data: IP address, device type and identifiers, browser type and version, operating system, time zone, and platform access logs.
• Communications Data: Records of your communications with phjoint customer support, including live chat transcripts and email correspondence.
• KYC Documentation: Copies of identity documents and proof of address submitted during the Know Your Customer verification process.

We do not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and regulatory compliance purposes.

4 How We Collect Your Data

phjoint collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Information collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs. This includes your IP address, device identifiers, browser information, and navigation behavior on the Platform.
• Third-Party Sources: Information received from payment processors (such as GCash and PayMaya / Maya) and identity verification service providers in connection with KYC compliance and fraud prevention.
• Publicly Available Sources: Information from publicly available government databases or registries where necessary for regulatory compliance or fraud prevention purposes.

5 Legal Basis for Processing

phjoint processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of our contract with you — specifically, to operate your phjoint account, process deposits and withdrawals, and provide gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements, anti-money laundering obligations under Republic Act No. 9160 (as amended), and KYC requirements.
• Legitimate Interests: Processing is necessary for phjoint's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and improving our services, provided such interests are not overridden by your rights and freedoms.
• Consent: Where we rely on your consent as the legal basis for processing (for example, for certain marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 How We Use Your Personal Data

phjoint uses the personal data we collect for the following purposes:

• To create, verify, and manage your phjoint account, including processing your registration and KYC documentation.
• To process deposits, withdrawals, and other financial transactions through your chosen payment method.
• To provide access to games and gaming services available on the Platform, including live dealer tables, slots, and bingo.
• To communicate with you regarding your account, transactions, promotions, and updates to our policies.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct.
• To comply with our regulatory obligations under PAGCOR licensing conditions and applicable Philippine law.
• To monitor and enforce responsible gaming measures, including deposit limits, session controls, and self-exclusion orders.
• To analyze Platform usage and improve the quality, security, and functionality of our services.
• To send you promotional communications and personalized offers where you have consented to receive such communications or where we have a legitimate interest in doing so.
• To resolve disputes, enforce our Terms & Conditions, and respond to legal claims or regulatory inquiries.

7 Data Sharing & Disclosure

phjoint does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya / Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions.
• Identity Verification Providers: Third-party KYC and anti-money laundering service providers engaged to verify your identity and comply with regulatory requirements.
• Technology Service Providers: Cloud hosting, data storage, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Game Content Providers: Licensed game studios and live dealer platform providers who supply gaming content to the phjoint Platform, to the extent necessary for game operation and dispute resolution.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities where disclosure is required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies where disclosure is required pursuant to a valid legal order, warrant, or subpoena.
• Professional Advisers: Legal counsel, auditors, and accountants engaged by phjoint, subject to professional confidentiality obligations.

Where personal data is shared with third-party service providers, phjoint requires those providers to implement appropriate technical and organizational security measures and to process personal data only in accordance with our instructions.

8 Data Retention

phjoint retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under Philippine law.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLC and PAGCOR record-keeping obligations.
• Gaming Activity Data: Retained for a minimum of three (3) years following account closure or the date of the relevant gaming activity, whichever is later.
• Customer Support Communications: Retained for two (2) years from the date of the communication, unless the subject matter requires longer retention for dispute resolution purposes.
• Technical and Log Data: Retained for up to twelve (12) months from the date of collection, unless required for longer periods for security investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with phjoint's data disposal procedures.

9 Cookies & Tracking Technologies

phjoint uses cookies and similar tracking technologies (including web beacons and pixel tags) on the Platform. Cookies are small text files placed on your device that help us recognize you, remember your preferences, and improve your experience.

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session authentication cookies and security cookies. They cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: Used to collect anonymized information about how visitors use the Platform, such as which pages are visited most frequently and how users navigate between pages. This data helps us improve Platform performance.
• Functionality Cookies: Allow the Platform to remember your preferences, such as your chosen language, display settings, and responsible gaming configurations.
• Targeting & Marketing Cookies: Used to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These cookies are only placed where you have provided consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed information on the specific cookies we use, please refer to our Cookie Notice, available on the Platform.

10 Data Security

phjoint implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phjoint Platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that personal data is accessible only to authorized personnel who require it to perform their duties.
• Regular security assessments, penetration testing, and vulnerability scanning of Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

While phjoint takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your phjoint login credentials and for notifying us immediately of any suspected unauthorized access to your account.

11 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phjoint:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data phjoint holds about you and information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data where processing is based on legitimate interests or for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where processing is carried out by automated means.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified data subject requests within fifteen (15) business days. We may require you to verify your identity before processing your request.

12 Children's Privacy

The phjoint Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gaming regulations. phjoint does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from an individual under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the phjoint Platform, please contact us immediately using the details in Section 14.

Parents and guardians are encouraged to use available parental control tools and to monitor the online activities of minors in their care to prevent access to age-restricted platforms such as phjoint.

13 Changes to This Privacy Policy

phjoint reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes are material, phjoint will notify you by email to your registered address or by posting a prominent notice on the Platform prior to the changes taking effect. We encourage you to review this Privacy Policy periodically to stay informed of how we protect your personal data.

Your continued use of the phjoint Platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the changes, you should discontinue use of the Platform and contact us to close your account.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or phjoint's data processing activities, please contact our Data Protection Officer:

• Data Protection Officer, phjoint
• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 via the chat widget on the phjoint Platform.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have not been adequately addressed by phjoint:

• National Privacy Commission (NPC)
• Website: privacy.gov.ph
• Address: 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila, Philippines