phjooy Privacy Policy
At phjooy, your personal data is handled with the same care we put into every game we offer. This Privacy Policy explains what we collect, why we collect it, and exactly how it is protected — in plain, straightforward English.
Six Privacy Principles We Live By
Before you read the full policy below, here's a quick summary of how phjooy approaches the personal data of every Filipino player on the platform.
Collected with Purpose
phjooy only collects personal data that is strictly necessary for account registration, identity verification, payment processing, regulatory compliance, and improving your gaming experience. We don't collect data for its own sake.
Never Sold to Third Parties
Your personal information is never sold, rented, or traded to any third party for marketing or commercial purposes. Data is shared only with service providers who are contractually bound to protect it, and only to the extent required to deliver our services.
Stored Securely
All phjooy player data is stored on servers protected by 256-bit SSL encryption, access controls, and regular third-party security audits. Sensitive data such as payment details and government ID information is encrypted at rest and in transit at all times.
Philippine Law Applies
phjooy operates under Philippine jurisdiction and fully complies with Republic Act No. 10173, the Data Privacy Act of 2012, and the regulations of the National Privacy Commission (NPC). Your rights as a Filipino data subject are fully recognised and upheld.
You Stay in Control
You have the right to access, correct, and request deletion of your personal data at any time, subject to our legal retention obligations. Data rights requests are handled by our dedicated support team and acknowledged within 72 hours of receipt.
Transparent & Accountable
We maintain a clear record of what data we hold, why we hold it, and how long we keep it. Our Data Protection Officer (DPO) is responsible for ensuring phjooy's ongoing compliance with applicable data privacy laws and NPC regulations.
01 Who We Are
phjooy is a Philippines-facing online gaming platform offering slots, live casino, sports betting, bingo, and arcade-style games to players located in the Republic of the Philippines. The phjooy Platform is accessible at phjooy.net and is operated under the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR).
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phjooy acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. phjooy has designated a Data Protection Officer (DPO) who is responsible for overseeing data privacy compliance. Contact details for the DPO are provided in Section 14 of this Policy.
02 Personal Data We Collect
phjooy collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect include:
2.1 Identity & Registration Data
- Full legal name as it appears on a Philippine government-issued ID;
- Date of birth (to verify the 21+ age requirement under PAGCOR regulations);
- Gender;
- Nationality and country of residence;
- Government-issued ID type and number (e.g., PhilSys National ID, Philippine Passport, SSS/UMID Card, LTO Driver's License, Voter's ID);
- Photographic copies of identity documents submitted during KYC verification.
2.2 Contact Data
- Email address registered to your phjooy account;
- Philippine mobile number;
- Home or billing address (where required for payment verification).
2.3 Financial & Transaction Data
- GCash, Maya, or GrabPay account numbers used for deposits or withdrawals;
- BPI, BDO, or Metrobank account details (account name and last four digits where applicable);
- USDT TRC20 wallet addresses;
- Transaction history including deposit amounts, withdrawal requests, dates, and payment method used;
- Betting and wagering history across all game categories.
2.4 Technical & Usage Data
- IP address and approximate geographic location at the time of login;
- Device type, operating system, and browser version;
- Session duration, pages visited, and features accessed within the Platform;
- Login timestamps and session identifiers;
- Crash reports and performance data submitted automatically by the Platform client.
2.5 Communications Data
- Records of live chat conversations with the phjooy support team;
- Email correspondence submitted to [email protected];
- Survey responses, feedback submissions, and voluntary communications you send to us.
03 How We Collect Your Data
phjooy collects personal data through the following channels:
- Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions;
- Automatically: Through cookies, session tracking, and platform analytics tools as you interact with phjooy.net — see Section 7 for full details on cookies;
- From third-party payment processors: Transaction confirmation data returned by GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment partners following a successful transaction;
- From identity verification partners: Results and confirmation codes from third-party KYC verification services where phjooy uses such services to supplement manual document review;
- From fraud prevention services: Risk scores, device fingerprint data, and flagged activity alerts from anti-fraud and AML (Anti-Money Laundering) screening partners.
04 Why We Use Your Personal Data
phjooy processes personal data for specific, legitimate purposes. The table below maps each processing purpose to the data categories used:
| Purpose | Data Used |
|---|---|
| Account registration & authentication | Identity data, contact data, technical data |
| Age verification (21+ requirement) | Date of birth, government ID data |
| KYC / identity verification | Identity data, ID document images |
| Processing deposits & withdrawals | Financial data, identity data |
| PAGCOR regulatory reporting | Identity data, transaction data |
| Anti-money laundering (AMLA) compliance | Identity data, financial data, transaction data |
| Fraud prevention & security | Technical data, financial data, communications data |
| Customer support | Identity data, contact data, communications data |
| Responsible gaming monitoring | Transaction data, usage data, communications data |
| Platform improvement & analytics | Technical data, usage data (aggregated/anonymised) |
| Promotional communications (with consent) | Contact data, usage data |
phjooy does not use personal data for automated decision-making that produces legal or similarly significant effects on players, without a human review step and without providing you the opportunity to contest the decision.
05 Legal Basis for Processing
Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, phjooy relies on the following legal bases to process your personal data:
- Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you accepted at registration — including account management, payment processing, and game delivery;
- Legal obligation: Processing required to comply with PAGCOR licensing conditions, AMLA reporting obligations, BIR requirements, and other applicable Philippine law;
- Legitimate interest: Processing for fraud prevention, platform security, responsible gaming monitoring, and aggregate analytics — balanced against your privacy interests and conducted with appropriate safeguards;
- Consent: Processing for optional promotional communications, marketing emails, and SMS notifications — you may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.
06 Sharing Your Personal Data
phjooy does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share your data with the following categories of recipients, strictly to the extent necessary for the purposes described in this Policy:
6.1 Payment Service Providers
GCash, Maya, GrabPay, BPI, BDO, Metrobank, 7-Eleven CLiQQ, and Coins.ph receive transaction reference data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are regulated by the Bangko Sentral ng Pilipinas (BSP) or equivalent authorities.
6.2 Identity Verification Partners
Third-party KYC service providers may receive copies of your identity documents and personal details for the sole purpose of verifying your identity. These providers are contractually bound to process data only for this purpose and to maintain equivalent data security standards.
6.3 Regulatory Authorities
PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies may receive personal data where required by law, court order, or regulatory direction. phjooy will endeavour to notify you of any such disclosure where legally permitted to do so.
6.4 Technology Service Providers
Cloud hosting providers, platform analytics services, fraud detection tools, and customer support software providers may process technical and usage data on phjooy's behalf as data processors. All such providers are bound by data processing agreements requiring them to process data only on phjooy's documented instructions and to maintain appropriate security measures.
07 Cookies & Tracking Technologies
phjooy uses cookies and similar tracking technologies to operate the Platform, maintain your session, prevent fraud, and understand how players use the site. The following categories of cookies are used:
- Strictly necessary cookies: Required for the Platform to function — including session management, authentication tokens, and security cookies. These cannot be disabled without breaking core Platform functionality;
- Functional cookies: Remember your preferences such as language settings, game lobby filters, and notification preferences;
- Analytics cookies: Collect anonymised usage data to help phjooy understand which features are most used and where the Platform can be improved. Data collected by analytics cookies does not identify individual players;
- Fraud prevention cookies: Device fingerprinting and behavioural analytics cookies used to detect suspicious activity, bot access, and multi-account abuse.
You may manage non-essential cookies through your browser settings. Disabling functional or analytics cookies will not prevent you from using the Platform but may affect certain personalisation features. Disabling fraud prevention cookies may trigger additional security verification steps during login.
08 Data Retention
phjooy retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods required by Philippine law:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration & KYC documents | 5 years after account closure | PAGCOR licensing requirement / AMLA |
| Financial transaction records | 5 years after transaction date | AMLA / BIR record-keeping |
| Betting & gaming history | 3 years after account closure | PAGCOR regulatory reporting |
| Customer support communications | 2 years after resolution | Legitimate interest / dispute resolution |
| Technical / server logs | 12 months on a rolling basis | Security & fraud prevention |
| Marketing preference records | Until consent withdrawn + 1 year | Consent record-keeping |
At the end of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual. Anonymised aggregate data may be retained indefinitely for statistical and platform improvement purposes.
09 Data Security
phjooy implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:
- Encryption in transit: All data transmitted between your device and phjooy's servers is encrypted using TLS 1.2 or higher (256-bit SSL);
- Encryption at rest: Sensitive personal data including ID document images and financial account references are encrypted at rest using AES-256;
- Access controls: Strict role-based access controls limit which phjooy personnel can access player data, on a need-to-know basis only;
- Two-factor authentication: Available to all players and required for all phjooy staff accessing internal systems containing player data;
- Penetration testing: Regular third-party penetration tests and vulnerability assessments are conducted on phjooy's infrastructure;
- Incident response: phjooy maintains a documented data breach incident response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, you will be notified in accordance with NPC notification requirements.
While phjooy takes all reasonable steps to protect your personal data, no system is completely immune to risk. You are also responsible for maintaining the security of your phjooy account credentials — see the Account Security section of our Terms & Conditions for guidance.
10 Your Data Rights
As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in relation to the personal data phjooy holds about you:
- Right to be informed: You have the right to be notified of the purpose and manner in which your personal data is being processed before it is collected — this Privacy Policy fulfils that obligation;
- Right of access: You may request a copy of the personal data phjooy holds about you, together with information about how it is processed;
- Right to rectification: You may request correction of inaccurate, incomplete, or outdated personal data. Some corrections can be made directly in your account settings;
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to phjooy's legal retention obligations under PAGCOR and AMLA regulations;
- Right to data portability: You may request a copy of your personal data in a commonly used, machine-readable format where technically feasible;
- Right to object: You may object to processing based on legitimate interest, including processing for direct marketing purposes. Objections to marketing can be actioned immediately via your account preferences;
- Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.
If you are not satisfied with phjooy's response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for data protection in the Republic of the Philippines.
11 Children & Minors
The phjooy Platform is strictly intended for individuals who are 21 years of age or older, as required by PAGCOR's regulatory framework governing online gambling in the Philippines. phjooy does not knowingly collect personal data from individuals under the age of 21.
If phjooy discovers or is notified that personal data has been collected from an individual below the age of 21, that account will be immediately suspended, any deposits will be returned to the originating payment method, and all personal data associated with the account will be securely deleted from phjooy's systems within 30 days, except where retention is required by law for regulatory reporting purposes.
Parents or guardians who have reason to believe that a minor has registered on the phjooy Platform should contact the support team immediately via live chat or at [email protected]. phjooy will investigate and act promptly on all such reports.
12 International Data Transfers
phjooy's primary data processing infrastructure is located within or closely aligned with the Asia-Pacific region. In certain circumstances, personal data may be transferred to or processed by service providers located outside the Republic of the Philippines — for example, cloud infrastructure providers or global fraud detection services.
Where personal data is transferred outside the Philippines, phjooy ensures that appropriate safeguards are in place to protect that data to a standard equivalent to Philippine law, including contractual clauses requiring the recipient to process data only on phjooy's instructions and to implement security measures at least equivalent to those described in Section 9 of this Policy.
phjooy does not transfer personal data to jurisdictions that do not offer adequate data protection standards without implementing appropriate contractual and technical safeguards.
13 Updates to This Privacy Policy
phjooy reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, regulatory requirements, or Platform features. Material changes to this Policy will be communicated to registered players via email to the address on their account, or via a prominent notice displayed within the Platform, at least seven (7) days before the revised Policy takes effect.
The effective date displayed at the top of this document reflects the most recent version of the Policy. We encourage you to review this Privacy Policy periodically to stay informed about how phjooy protects your personal data. Your continued use of the Platform after the effective date of any revision constitutes your acceptance of the updated Policy.
Previous versions of this Privacy Policy are available upon request by contacting the phjooy Data Protection Officer at the contact details listed in Section 14.
14 Contact & Data Protection Officer
If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact phjooy through the following channels:
- Live Chat: Available 24/7 directly within the phjooy Platform — the fastest channel for urgent privacy concerns;
- Email: [email protected] — for formal data rights requests or written complaints. Please include "Privacy Request" or "Data Rights" in the subject line to ensure prompt routing to the correct team;
- Data Protection Officer: Formal DPO correspondence can be directed to the same email address with "Attention: Data Protection Officer" in the subject line.
This Privacy Policy was last reviewed and updated on 1 January 2026. It governs all personal data collected by phjooy from that date forward. The version published on this page is always the current governing version.
Your Data Is Safe — Now Let's Get You Playing
phjooy is built for Filipino players who value both great games and their personal privacy. Explore slots, bingo, live casino, and more on a PAGCOR-regulated platform you can trust. 21+ only.
Must be 21 or older to participate. PAGCOR regulated. Gambling involves financial risk — please play responsibly.