phjoint Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how phjoint ("phjoint," "we," "us," or "our") collects, uses, stores, shares, and protects personal information about users ("Players" or "you") of the phjoint Platform located at phjoint.club, including all associated services, features, mobile experience, and content (collectively, the "Platform").

phjoint is committed to protecting the privacy and personal data of all Filipino players who trust us with their information. This Policy is drafted in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission of the Philippines.

By registering an account with phjoint or using the Platform in any manner, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. If you do not agree to this Policy, you must not register an account or use the Platform.

This Policy should be read in conjunction with phjoint's Terms and Conditions, which govern your use of the Platform.

2. Personal Data We Collect

phjoint collects personal data through various means in connection with the operation of the Platform. The categories of personal data we collect include, but are not limited to, the following:

2.1 Registration and Account Data

• Full legal name;
• Date of birth (for age verification purposes);
• Philippine mobile number;
• Username and encrypted password;
• Residential address in the Philippines (for KYC verification);
• Email address (where provided).

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys National ID, UMID, Passport, Driver's License, SSS ID, Voter's ID);
• Proof of address documents;
• Selfie or photograph (where required for document matching);
• Tax Identification Number (TIN) where applicable under Philippine law.

2.3 Financial and Transaction Data

• GCash account number or Maya account details associated with your phjoint account;
• Bank account details (BPI, BDO, Metrobank, or other Philippine bank) where used for transactions;
• Deposit and withdrawal transaction records;
• Account balance history and bonus records.

2.4 Gaming Activity Data

• Game session records including game type, stakes, wins, and losses;
• Sports betting selections and outcomes;
• Bonus and promotion usage history;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

2.5 Technical and Device Data

• IP address at time of login and transaction;
• Device type, operating system, and browser version;
• Session timestamps and duration;
• Cookies and similar technical identifiers (see Section 6).

2.6 Communications Data

• Records of your communications with phjoint support (live chat, SMS);
• Feedback, complaints, and dispute records;
• Marketing communication preferences and opt-out records.

3. How We Use Your Personal Data

phjoint uses the personal data it collects for the following purposes:

• Account management: Creating, maintaining, verifying, and securing your phjoint account;
• Service delivery: Processing deposits, withdrawals, game sessions, and bonus credits;
• Identity and age verification: Confirming that you meet the 21+ age requirement and that your identity matches your registered details;
• Anti-money laundering (AML) compliance: Monitoring transactions for suspicious activity in accordance with Philippine AML laws and gaming regulatory requirements;
• Fraud and security: Detecting, investigating, and preventing unauthorized account access, bonus abuse, and fraudulent transactions;
• Responsible gaming: Monitoring gaming activity to identify potential problem gambling indicators and to give effect to your self-imposed responsible gaming limits;
• Customer support: Responding to your queries, complaints, and support requests;
• Regulatory compliance: Fulfilling phjoint's obligations to Philippine gaming regulators, including maintaining required player records and transaction logs;
• Platform improvement: Analyzing aggregated, anonymized usage data to improve the Platform's features, performance, and game library;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to your registered mobile number or email, subject to your communication preferences and applicable opt-out rights.

phjoint will not use your personal data for any purpose materially different from those listed above without first obtaining your consent or updating this Privacy Policy with appropriate notice.

4. Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012, phjoint processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform phjoint's obligations under the Terms and Conditions you accepted upon registration — including operating your account, processing transactions, and delivering gaming services;
• Legal obligation: Processing required to comply with Philippine laws and regulations, including AML obligations, gaming regulatory requirements, and tax reporting obligations;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement — where phjoint's legitimate interests do not override your fundamental privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided your express consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

phjoint does not sell, rent, or trade your personal information. We may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:

5.1 Game and Technology Providers

phjoint's game library is powered by certified third-party game providers (such as PG Soft, Pragmatic Play, Jili, and others). These providers may receive technical session data necessary to deliver game content. They do not receive your full identity or financial details.

5.2 Payment Processors

Processing your GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, or other Philippine payment transactions requires sharing necessary transaction data with the relevant payment service providers. These providers process your data in accordance with their own privacy policies and applicable Philippine financial regulations.

5.3 KYC and Identity Verification Services

phjoint may use third-party identity verification providers to process KYC documents in a secure, compliant manner. These providers operate under strict data processing agreements and are prohibited from using your data for any purpose beyond the identity verification service.

5.4 Regulatory and Law Enforcement Authorities

phjoint may disclose your personal data to Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other government authorities where required by law, court order, or regulatory directive. phjoint will make reasonable efforts to notify you of any such disclosure where legally permitted to do so.

5.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or part of phjoint's business assets, your personal data may be transferred to the acquiring entity, subject to confidentiality obligations and continued protection under this Privacy Policy or an equivalent policy.

6. Cookies and Tracking Technologies

phjoint uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device by your browser when you access the Platform.

6.1 Essential Cookies

These cookies are strictly necessary for the Platform to function. They enable your login session to be maintained, your account preferences to be remembered, and security features to operate correctly. You cannot opt out of essential cookies while using the Platform.

6.2 Analytics Cookies

phjoint uses analytics tools to collect aggregated, anonymized data about how Players use the Platform — including which pages are visited most frequently, how long sessions last, and which game categories are most popular. This data is used solely to improve Platform performance and content. Analytics cookies do not identify you personally.

6.3 Marketing Cookies

Where you have provided consent, phjoint may use cookies to deliver relevant promotional content during your Platform sessions. You may withdraw consent for marketing cookies at any time through your browser settings.

6.4 Managing Cookies

Most web browsers allow you to manage cookie preferences through the browser settings menu. Restricting or disabling cookies may affect the functionality of the phjoint Platform, particularly features that depend on session authentication.

7. Data Retention

phjoint retains your personal data for as long as your account remains active and for such further period as is required by law or necessary to fulfill the purposes described in this Policy. Specific retention periods are guided by the following principles:

• Account and identity data is retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with Philippine AML and gaming regulatory record-keeping requirements;
• Transaction records are retained for a minimum of five (5) years following each transaction, in accordance with AMLC reporting obligations;
• Gaming session data is retained for a minimum of two (2) years for dispute resolution and responsible gaming monitoring purposes;
• Customer support communications are retained for two (2) years after the resolution of the relevant matter;
• Marketing communication preferences and opt-out records are retained indefinitely to honor your stated preferences.

Where phjoint has no legitimate operational, legal, or regulatory basis for retaining personal data beyond the periods above, the data will be securely deleted or anonymized.

8. Data Security

phjoint implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phjoint Platform;
• Encryption of sensitive data at rest, including identity documents and financial details;
• Role-based access controls that restrict employee access to personal data strictly on a need-to-know basis;
• Multi-factor authentication for phjoint system administrators;
• Regular security assessments and penetration testing of Platform infrastructure;
• Real-time monitoring for unauthorized access attempts and anomalous transaction patterns.

While phjoint takes all reasonable steps to protect your personal data, no data transmission over the internet or data storage system can be guaranteed to be 100% secure. In the unlikely event of a data breach affecting your personal information, phjoint will notify you and the National Privacy Commission of the Philippines in accordance with the obligations and timelines set out in the Philippine Data Privacy Act and its implementing regulations.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjoint:

• Right to be Informed: The right to be notified about how your personal data is collected and processed — which is the purpose of this Privacy Policy;
• Right to Access: The right to obtain a copy of the personal data phjoint holds about you and information about how it is being processed;
• Right to Rectification: The right to have inaccurate or outdated personal data corrected. You can update most account details directly through your phjoint account settings;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected — subject to overriding legal or regulatory retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may opt out of marketing communications at any time;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phjoint has handled your personal data unlawfully.

To exercise any of these rights, please contact phjoint's Data Privacy Officer using the contact details set out in Section 13. phjoint will respond to all valid data subject requests within thirty (30) days, or within such extended period as may be permitted under applicable law where the request is complex.

10. Children and Minors

The phjoint Platform is strictly intended for persons aged twenty-one (21) years and above, in accordance with Philippine gaming regulations. phjoint does not knowingly collect personal data from individuals under the age of 21.

If phjoint becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted immediately and the associated account will be permanently closed. If you are a parent or guardian and believe that a minor in your care has registered an account with phjoint, please contact phjoint support immediately so that the account can be investigated and closed.

11. International Data Transfers

phjoint's primary data processing activities occur within the Philippines. However, certain third-party service providers — including game certification laboratories, cloud infrastructure providers, and KYC technology providers — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, phjoint ensures that such transfers are governed by appropriate contractual safeguards — including data processing agreements that require the receiving party to apply data protection standards equivalent to those required under Philippine law — or that the transfer is to a jurisdiction that the National Privacy Commission of the Philippines has recognized as providing an adequate level of data protection.

12. Changes to This Policy

phjoint reserves the right to update or modify this Privacy Policy at any time. When material changes are made, phjoint will provide notice through one or more of the following means: an SMS notification to your registered Philippine mobile number; a prominent notice displayed on the phjoint Platform upon your next login; or an update to the "Last updated" date at the top of this page.

Your continued use of the phjoint Platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of and agreement to the updated terms. If you do not agree to a revised Privacy Policy, you must cease using the Platform and may request account closure.

phjoint encourages you to review this Privacy Policy periodically to stay informed about how your personal information is protected.

13. Contact and Data Privacy Officer

phjoint has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions about this Policy, wish to exercise your data subject rights, or have a privacy-related complaint, please contact:

• Data Privacy Officer, phjoint
• Email: [email protected] (Subject line: "Data Privacy Request")
• Response time: Within 30 days of receipt of your request

If you are not satisfied with phjoint's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.