1. Who We Are
phljoy is an online gaming platform operating in the Philippines under a valid gaming licence. For the purposes of this Privacy Policy, phljoy acts as the personal information controller (PIC) of all personal data collected through the phljoy website and related services. This means phljoy determines the purposes and means of processing your personal data, and is accountable for how it is handled.
phljoy is registered and compliant with the National Privacy Commission (NPC) of the Philippines in accordance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations (IRR). Our Data Protection Officer (DPO) oversees privacy compliance across all phljoy operations. Contact details for the DPO are listed in Section 14 of this policy.
Note: This Privacy Policy applies to the phljoy website, any phljoy mobile experience, and all communication channels including email and live chat support. By using any phljoy service, you acknowledge that you have read this policy.
2. Personal Data We Collect
phljoy collects personal data that is necessary, relevant, and proportionate to the purposes outlined in this policy. The categories of data we collect include:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number | Registration and KYC verification |
| Contact Data | Email address, mobile number, residential address in the Philippines | Registration |
| Financial Data | GCash / Maya account reference, bank account details, card information (tokenised) | Deposit and withdrawal setup |
| Transaction Data | Deposit amounts, withdrawal requests, bet history, win/loss records | During gameplay and account use |
| Technical Data | IP address, device type, browser type, session duration, login timestamps | Automatically, during platform use |
| Communications Data | Support chat transcripts, email correspondence, dispute records | When you contact phljoy support |
| Preference Data | Notification settings, game preferences, responsible gaming limits set | When you update account settings |
phljoy does not intentionally collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect information about your religious beliefs, political opinions, or health status unless directly relevant to a responsible gaming intervention or legal obligation.
3. How We Use Your Personal Data
phljoy uses the personal data we collect for specific, legitimate purposes. We do not process your data in ways that are incompatible with the reason it was originally collected. Our primary uses are:
- Account creation and management — To register your phljoy account, verify your identity, and maintain accurate records of your preferences and settings.
- Gameplay and transactions — To process deposits and withdrawals, settle bets, credit winnings, and maintain an accurate transaction history accessible in your account dashboard.
- Regulatory compliance — To comply with anti-money laundering obligations (AMLA), gaming licence conditions, tax reporting requirements, and instructions from Philippine regulatory authorities including PAGCOR and the NPC.
- Identity and age verification — To confirm that you are at least 21 years old and that you are who you say you are, using your submitted government-issued ID and supporting documents.
- Responsible gaming — To monitor for patterns that may indicate problem gambling and to administer the responsible gaming tools you set up on your phljoy account, including deposit limits and self-exclusion requests.
- Platform security and fraud prevention — To detect and investigate suspicious activity, protect against fraud, and enforce our Terms and Conditions.
- Customer support — To respond to your queries, process complaints, and improve our support services based on interaction records.
- Service improvement — To analyse aggregated, anonymised usage data in order to improve the phljoy platform, fix bugs, and develop new features Filipino players will find useful.
- Marketing communications — To send you promotional offers, bonus notifications, and news about phljoy, where you have opted in to receive such communications. See Section 12 for opt-out options.
4. Legal Basis for Processing
Under the Data Privacy Act of 2012, phljoy processes your personal data on the following legal grounds:
- Contractual necessity — Processing is required to fulfil our obligations to you under the phljoy Terms and Conditions, including running your account, processing bets, and paying out winnings.
- Legal obligation — Certain processing is required by Philippine law, including identity verification under AMLA, record-keeping under gaming regulations, and reporting obligations to regulatory authorities.
- Legitimate interests — phljoy processes some data based on its legitimate interest in operating a secure, fair, and commercially viable gaming platform — for example, fraud detection and security monitoring.
- Consent — Where processing is not covered by the above grounds — particularly for marketing communications — phljoy will ask for your explicit consent and respect your right to withdraw it at any time.
6. International Data Transfers
In some cases, your personal data may be processed outside the Philippines — for example, where phljoy uses cloud infrastructure hosted in other countries, or where international payment processing involves servers in other jurisdictions.
Where this occurs, phljoy ensures that adequate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law. This may include contractual data processing agreements, standard contractual clauses, or verification that the receiving jurisdiction provides adequate data protection standards as recognised by the NPC.
phljoy will not transfer your personal data to a foreign country or international organisation without a lawful basis for doing so and, where required, your informed consent.
7. How Long We Keep Your Data
phljoy retains personal data for as long as it is needed for the purposes described in this policy, and as required by applicable Philippine law and our gaming licence obligations. In general:
- Active accounts — Data is retained for the duration of your phljoy account's activity.
- Closed accounts — Transaction records, identity documents, and compliance-related data are retained for a minimum of five (5) years after account closure, as required under AMLA and gaming regulations.
- Support communications — Chat transcripts and email correspondence are retained for up to three (3) years for quality assurance and dispute resolution purposes.
- Technical logs — Server and security logs are retained for up to twelve (12) months, after which they are securely deleted.
- Marketing data — Communication preference records and consent logs are retained for five (5) years from the last interaction.
Once the applicable retention period expires, phljoy will securely delete or anonymise your personal data so it can no longer be linked to you.
8. How We Protect Your Data
phljoy takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, and destruction. These include:
- SSL/TLS encryption across all phljoy web pages and API connections.
- Encrypted storage for sensitive data including financial information and identity documents.
- Role-based access controls ensuring that only authorised phljoy personnel can access personal data, and only to the extent required for their role.
- Regular penetration testing and security audits by independent cybersecurity professionals.
- Two-factor authentication available for all phljoy player accounts.
- Secure, access-controlled data centres for server infrastructure.
- Incident response procedures for detecting, containing, and reporting data breaches in accordance with NPC requirements.
In the unlikely event of a personal data breach that is likely to result in risk to your rights and freedoms, phljoy will notify the NPC and affected players in accordance with the timelines prescribed by the Data Privacy Act and its IRR.
Your role in security: phljoy's technical measures work best when you also take care of your own account — use a strong, unique password, enable 2FA, and never share your login credentials with anyone.
9. Cookies and Similar Technologies
phljoy uses cookies — small text files stored on your device — and similar tracking technologies to make the platform work properly and to understand how players use it. Here's what we use and why:
- Essential cookies — Required for the phljoy platform to function. These maintain your login session, remember your language preference, and keep your shopping cart or bet slip active. You cannot opt out of essential cookies without losing platform functionality.
- Analytics cookies — Help phljoy understand how players navigate the platform — which pages are visited most, where players drop off, and how long sessions last. This data is aggregated and anonymised. It is used solely to improve phljoy, not to track individual behaviour for advertising.
- Preference cookies — Remember your settings such as game lobby filters or notification preferences so you don't have to reconfigure them each visit.
You can manage cookie preferences through your browser settings. Most modern browsers allow you to block, delete, or be notified about cookies. Note that disabling certain cookies may affect phljoy's functionality. phljoy does not use third-party advertising cookies or cross-site tracking technologies.
10. Your Data Privacy Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phljoy:
You have the right to know what personal data phljoy holds about you and how it is being used.
You can request a copy of the personal data phljoy holds about you, including transaction and account records.
If your data is inaccurate or incomplete, you can request that phljoy correct it promptly.
You can request deletion of your data where phljoy no longer has a legitimate reason or legal obligation to retain it.
You can object to processing based on legitimate interests, including profiling, where your particular situation warrants it.
Where technically feasible, you can request your data in a structured, machine-readable format for transfer to another service.
To exercise any of these rights, contact phljoy's Data Protection Officer using the details in Section 14. phljoy will respond to all valid requests within fifteen (15) business days. Where a request cannot be fulfilled — for example, because retention is required by law — phljoy will explain the reason clearly.
If you believe phljoy has violated your data privacy rights, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.
11. Minors and Age Restrictions
phljoy is strictly for users who are 21 years of age or older, in compliance with Philippine gaming regulations. phljoy does not knowingly collect personal data from anyone under the age of 21.
If phljoy discovers that personal data has been collected from a minor, the account will be immediately suspended, all funds held will be returned through the verified deposit method, and the data will be deleted in accordance with applicable law. If you believe a minor has registered on phljoy using false information, please contact our support team immediately.
12. Marketing Communications
phljoy may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, seasonal offers, and phljoy updates — but only if you have opted in to receive marketing communications during registration or through your account settings.
You can opt out of marketing communications at any time. To do so:
- Click the "unsubscribe" link in any phljoy marketing email.
- Update your notification preferences in your phljoy account settings.
- Contact support and request removal from marketing lists.
Opting out of marketing will not affect transactional communications — phljoy will still send you emails about your account, transactions, security alerts, and updates to our Terms or Privacy Policy as these are not optional.
13. Changes to This Privacy Policy
phljoy may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or regulatory guidance. When we make material changes, we will notify you by email and post a prominent notice on the phljoy platform at least fourteen (14) days before the changes take effect.
The effective date at the top of this page will always reflect the most recent version. We encourage you to review this policy periodically. Continuing to use phljoy after an updated Privacy Policy takes effect constitutes your acknowledgement of the changes.
14. Contact Us and Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the way phljoy handles your personal data, please contact our Data Protection Officer (DPO):
You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. Visit privacy.gov.ph for NPC contact information and complaint procedures.