phjoy28 Privacy Policy

This Privacy Policy ("Policy") is issued by phjoy28 ("we," "us," or "our") and applies to all personal data collected through the phjoy28 website at https://phjoy28.net, the phjoy28 mobile application, and any related services, features, or communications (collectively, the "Platform").

This Policy governs the personal data of all individuals who interact with the phjoy28 Platform, including registered players, prospective players who browse the Platform without registering, and any other persons whose personal data we process in connection with the operation of our services.

phjoy28 acts as the Personal Information Controller in respect of the personal data described in this Policy. This means we determine the purposes and means by which your personal data is processed. Where we engage third-party service providers to process data on our behalf, those parties act as Personal Information Processors and are bound by data processing agreements consistent with applicable Philippine law.

This Policy should be read together with the phjoy28 Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

phjoy28 collects the following categories of personal data, depending on how you interact with the Platform:

We do not collect sensitive personal information — such as racial or ethnic origin, political opinions, religious beliefs, or health data — unless specifically required for responsible gaming assessments or as mandated by applicable law.

phjoy28 collects personal data through the following means:

• Direct collection: Information you provide when registering a phjoy28 account, completing identity verification, making deposits or withdrawals, contacting our support team, or updating your account settings.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 7 for more details.
• Third-party sources: Identity and financial verification data received from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank, as well as from identity verification service providers engaged by phjoy28 to fulfill our Know Your Customer (KYC) obligations.
• Public sources: Publicly available information used to verify identity or to comply with anti-money laundering screening requirements, including government databases and sanctions lists.

phjoy28 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform our obligations under the phjoy28 Terms & Conditions, including account management, payment processing, and game operation.
• Legal obligation: Processing necessary to comply with applicable Philippine laws and regulations, including anti-money laundering requirements, age verification obligations, and regulatory reporting duties.
• Legitimate interests: Processing carried out for phjoy28's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, such as for the receipt of marketing communications. You may withdraw consent at any time by updating your account preferences or contacting our support team.

phjoy28 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and administering your phjoy28 player account, including processing registration, verifying your identity and age, and managing account security.
• Payment processing: Facilitating deposits and withdrawals through your chosen payment method — GCash, PayMaya, BPI, BDO, or Metrobank — and maintaining accurate transaction records.
• Game delivery: Providing access to all phjoy28 games including Astar Live, Mines, Color Game, Captain Fisher, Dreams of Macao, Keno, and the Jackpot system, and recording game outcomes for dispute resolution purposes.
• Regulatory compliance: Meeting our obligations under Philippine gaming regulations, anti-money laundering laws, and data privacy legislation, including filing required reports with relevant authorities.
• Responsible gaming: Monitoring gaming activity to identify patterns that may indicate problem gambling, enforcing deposit limits and self-exclusion requests, and verifying that all players meet the 21+ age requirement.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, unauthorized account access, and other prohibited conduct as described in the phjoy28 Terms & Conditions.
• Customer support: Responding to your inquiries, resolving complaints, and providing technical assistance through our 24/7 support channels.
• Platform improvement: Analyzing aggregated usage data to understand how players interact with the phjoy28 Platform and to improve game offerings, user experience, and technical performance.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates where you have provided consent or where we have a legitimate interest in doing so. You may opt out at any time.

phjoy28 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors engaged to facilitate deposits and withdrawals. These providers receive only the data necessary to process your transactions.
• Identity verification providers: Third-party KYC and age verification service providers engaged to verify your identity and confirm that you meet the 21+ age requirement.
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology providers who process data on our behalf under binding data processing agreements.
• Regulatory and law enforcement authorities: Government agencies, regulators, and law enforcement bodies in the Philippines where disclosure is required by law, court order, or regulatory directive — including the Anti-Money Laundering Council (AMLC) and other relevant Philippine authorities.
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by phjoy28 in connection with the operation of our business, subject to professional confidentiality obligations.

phjoy28 does not transfer personal data outside the Philippines except where necessary to operate the Platform and where appropriate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012.

phjoy28 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the phjoy28 website. We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function correctly. These include session authentication cookies that keep you logged in to your phjoy28 account and security cookies that protect against fraudulent activity. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences, such as your language settings and responsible gaming configurations, so you do not need to re-enter them on each visit.
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the phjoy28 Platform — such as which games are most popular and how long sessions typically last — to help us improve our services.
• Security and fraud prevention cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other prohibited conduct on the Platform.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phjoy28 Platform, including your ability to log in or access certain features. Strictly necessary cookies cannot be disabled through browser settings without affecting Platform access.

phjoy28 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your phjoy28 account and for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements under Philippine law.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and related regulations.
• Gaming history: Retained for a minimum of three (3) years from the date of each game session, for dispute resolution and regulatory compliance purposes.
• Support and communications records: Retained for a minimum of two (2) years from the date of the last communication, unless a longer period is required for ongoing dispute resolution.
• Technical and log data: Retained for up to twelve (12) months from the date of collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phjoy28's data disposal procedures. Where data is anonymized, it may be retained indefinitely for statistical and analytical purposes.

phjoy28 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the phjoy28 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Data encryption at rest: Sensitive personal and financial data stored on phjoy28 servers is encrypted using strong encryption algorithms.
• Access controls: Access to personal data is restricted to authorized phjoy28 personnel and service providers on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Security monitoring: phjoy28 operates continuous security monitoring systems to detect and respond to unauthorized access attempts, suspicious activity, and potential data breaches.
• Regular security assessments: phjoy28 conducts periodic security audits and vulnerability assessments to identify and remediate potential weaknesses in our systems.

While phjoy28 takes all reasonable steps to protect your personal data, no security system is completely impenetrable. You are responsible for maintaining the confidentiality of your phjoy28 account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phjoy28:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data phjoy28 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the phjoy28 Data Protection Officer at the contact details provided in Section 13. We will respond to all verified requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may request proof of identity before processing your request.

The phjoy28 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with applicable Philippine gaming regulations. phjoy28 does not knowingly collect personal data from individuals under the age of 21.

If phjoy28 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to:

• Suspend the associated account pending investigation.
• Delete or anonymize the personal data of the underage individual as soon as practicable.
• Return any deposits made by the underage individual, subject to verification.
• Forfeit any winnings generated through the underage account.

If you are a parent or guardian and believe that your child has registered on the phjoy28 Platform, please contact our support team immediately at [email protected]. We will investigate and take appropriate action promptly.

phjoy28 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players by posting a prominent notice on the phjoy28 Platform and, where practicable, by sending a notification to the mobile number or email address associated with your account.

The updated Policy will take effect on the date specified in the notice. Your continued use of the phjoy28 Platform after the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with the amended Policy, you should cease using the Platform and may request account closure in accordance with the phjoy28 Terms & Conditions.

The "Last Updated" date at the top of this page reflects the most recent revision. We encourage you to review this Policy periodically to stay informed about how phjoy28 protects your personal data.

phjoy28 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact us through the following channel:

• Data Protection Officer — phjoy28
• Email: [email protected]
• Subject Line: Data Privacy Request / [Your Full Name]
• Response Time: Within 15 business days for formal data privacy requests; within 24 hours for general support inquiries
• Support Hours: 24 hours a day, 7 days a week

If you are not satisfied with our response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the regulatory authority responsible for enforcing the Data Privacy Act of 2012.

phjoy28 is committed to resolving all data privacy concerns fairly and transparently. We serve players across the Philippines — from Manila, Makati, and Quezon City to Cebu, Davao, and beyond — and we take our responsibility to protect your personal data seriously.