PHJoyy Privacy Policy — Your Data, Fully Protected

PHJoyy ("we," "us," "our") is committed to protecting the personal data of every player and visitor who interacts with our platform at phjoyy.net. This Privacy Policy explains how PHJoyy collects, processes, stores, and protects your personal information in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the rules and regulations issued by the National Privacy Commission (NPC).

By registering for a PHJoyy account or using any part of our platform — whether on mobile, tablet, or desktop — you acknowledge that you have read and understood this Privacy Policy and you consent to the collection and use of your personal data as described herein. This policy applies to all Filipino players and visitors across the Philippines.

PHJoyy collects only the personal data that is necessary to deliver our services safely and effectively to Filipino players. The categories of data we collect include the following:

PHJoyy does not collect sensitive personal information such as biometric data, religious beliefs, political opinions, or health information unless specifically required by Philippine regulatory authorities and with your explicit prior consent.

PHJoyy gathers personal data through several channels — all of which are transparent and within the bounds of applicable Philippine law:

• Direct Registration: When you create your PHJoyy account, you voluntarily provide your name, email, mobile number, and date of birth.
• KYC Verification: We collect copies of government-issued IDs (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS card) during the identity verification process.
• Payment Transactions: Financial data is collected when you deposit or withdraw funds via GCash, Maya, bank transfer, or card payment.
• Platform Usage: Technical and usage data is automatically gathered as you navigate the PHJoyy platform through cookies, log files, and analytics tools.
• Customer Support: When you contact our support team via live chat or email, we retain records of those communications to improve service quality.
• Promotions & Surveys: If you participate in PHJoyy promotions, surveys, or referral programmes, additional information may be collected with your consent.

PHJoyy uses your personal data strictly for legitimate operational and regulatory purposes. We do not use your data in ways that exceed what you would reasonably expect as a Filipino player on our platform. Specific uses include:

• Creating and managing your PHJoyy account and verifying your eligibility to play.
• Processing deposits and withdrawals in Philippine Pesos via your chosen payment method.
• Complying with anti-money laundering (AML) and Know Your Customer (KYC) obligations under Philippine law.
• Detecting and preventing fraud, account abuse, and unauthorised access.
• Personalising your gaming experience based on your preferences and play history.
• Sending transactional communications such as deposit confirmations, withdrawal updates, and security alerts.
• Sending promotional emails or SMS if you have opted in to receive marketing communications.
• Monitoring responsible gaming indicators and providing intervention tools when needed.
• Improving the PHJoyy platform through aggregated, anonymised analytics data.
• Fulfilling legal obligations and responding to regulatory requests from authorised Philippine agencies.

PHJoyy processes your personal data only when we have a valid legal basis to do so under the Philippine Data Privacy Act of 2012. The legal bases we rely on are:

• Contractual Necessity: Processing is required to fulfil our contractual obligations to you as a registered PHJoyy player — including account management, game delivery, and payment processing.
• Legitimate Interests: We process certain data to pursue legitimate business interests, such as fraud prevention, platform security, and service improvement — where these interests do not override your rights.
• Legal Obligation: PHJoyy is required by Philippine law (including AML regulations and gaming licence conditions) to collect and retain certain data.
• Consent: For marketing communications and optional data collection, we rely on your explicit, freely given, and informed consent — which you may withdraw at any time.

PHJoyy does not sell, rent, or trade your personal data. We share your information only with trusted partners and authorities who have a legitimate reason to access it, and only to the minimum extent necessary. Third parties who may receive your data include:

• Payment Processors: GCash, Maya, GrabPay, Coins.ph, Philippine banks, and Visa/Mastercard networks — strictly for transaction processing.
• KYC and Identity Verification Providers: Licensed third-party providers that verify the authenticity of your government-issued identification documents.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and fraud detection partners who process data on our behalf under strict confidentiality agreements.
• Regulatory Authorities: Philippine regulatory bodies, law enforcement agencies, and financial intelligence units when required by law or court order.
• Game Content Providers: Third-party game studios whose titles are integrated into PHJoyy may receive anonymised session data for technical purposes.

All third parties that process personal data on behalf of PHJoyy are required to enter into data processing agreements and are prohibited from using your data for any purpose other than the specific service they provide to us.

PHJoyy retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by Philippine law and our gaming licence conditions. General retention periods are as follows:

• Account Data: Retained for the duration of your active account plus five (5) years after account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Financial transaction data is retained for a minimum of five (5) years as required under Philippine anti-money laundering regulations.
• KYC Documents: Identity verification documents are retained for five (5) years from the date of submission or account closure, whichever is later.
• Marketing Data: Retained until you withdraw your consent or request deletion, whichever comes first.
• Technical/Log Data: System logs and technical data are typically retained for twelve (12) months for security and fraud analysis purposes.

Once the applicable retention period expires, your personal data is securely deleted or anonymised so it can no longer be linked back to you as an individual.

PHJoyy implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, disclosure, or destruction. Our security infrastructure includes:

• 256-bit SSL/TLS encryption for all data transmitted between your device and PHJoyy servers.
• AES-256 encryption for all sensitive data stored in our databases.
• Multi-factor authentication (MFA) available to all registered players.
• Regular third-party security audits and penetration testing.
• Role-based access controls ensuring only authorised staff can access personal data.
• Automated intrusion detection and real-time threat monitoring systems.
• Incident response procedures aligned with NPC breach notification requirements.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by PHJoyy. You may exercise any of these rights by contacting our Data Protection Officer:

To exercise any of these rights, send a written request to support@phjoyy.net with the subject line "Data Privacy Request." PHJoyy will respond within fifteen (15) business days of receiving your request.

PHJoyy uses cookies and similar tracking technologies to deliver a personalised and secure gaming experience on our platform. Cookies are small text files stored on your device when you visit phjoyy.net. We use the following types of cookies:

• Essential Cookies: Required for the platform to function correctly — including session authentication, security tokens, and load balancing. These cannot be disabled without impacting platform functionality.
• Analytics Cookies: Help us understand how Filipino players use the platform, which pages are most visited, and how we can improve the user experience. Data is aggregated and anonymised.
• Preference Cookies: Remember your settings and preferences — such as your preferred language and notification preferences — to personalise your session.
• Marketing Cookies: Used only with your consent to track interactions with PHJoyy promotions and display relevant offers based on your activity.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the PHJoyy platform. You can also manage your cookie preferences through the PHJoyy cookie consent panel displayed on your first visit to the site.

PHJoyy is strictly an adult gaming platform. In accordance with Philippine gaming regulations, you must be at least 21 years of age to register and play. PHJoyy does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a minor, we will immediately delete that data and close the associated account. If you believe your child's data has been inadvertently collected, please contact us immediately at support@phjoyy.net and we will take swift action.

PHJoyy may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, our data practices, or the services we offer. When material changes are made, we will notify registered players via email and post a prominent notice on the PHJoyy platform at least seven (7) days before the updated policy takes effect.

We encourage you to review this Privacy Policy periodically to stay informed about how your personal data is protected. Your continued use of the PHJoyy platform after any update to this policy constitutes acceptance of the revised terms.

PHJoyy has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests regarding your personal data, please reach out to us:

• Email: support@phjoyy.net (Subject: "Data Privacy Request")
• Response Time: Within 15 business days for formal privacy requests; within 72 hours for breach-related matters
• Language: Inquiries accepted in English and Filipino
• NPC Complaints: You may also lodge a complaint with the National Privacy Commission at privacy.gov.ph if you believe your rights have been violated