phnjoy Privacy Policy

phnjoy is a Philippines-focused online casino and sportsbook platform offering sports betting, live casino, slots, and bingo games to Filipino players aged 21 and above. phnjoy operates within the PAGCOR regulatory framework and is committed to responsible gaming across all product categories.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), phnjoy acts as the Personal Information Controller in respect of the personal data of all registered users and visitors to the phnjoy platform. This means phnjoy determines the purposes and means of processing your personal data, and is responsible for ensuring that such processing is carried out lawfully.

If you have any questions about this Privacy Policy or how phnjoy handles your personal data, you may contact our Data Privacy Officer at [email protected]. We aim to respond to all data privacy enquiries within 72 hours.

phnjoy collects personal data in order to operate a safe, compliant, and enjoyable gaming platform for Filipino players. The categories of personal data we collect are described in the table below:

phnjoy collects personal data through the following channels:

• Direct registration — data you provide when creating your phnjoy account, completing KYC verification, or updating your profile.
• Transactional activity — data generated when you make deposits, request withdrawals, or interact with the phnjoy payment system via GCash, PayMaya, or local bank transfer.
• Platform usage — data automatically generated as you navigate the phnjoy website or application, place bets, play games, or interact with features.
• Customer support interactions — data shared during live chat sessions or email correspondence with the phnjoy support team.
• Cookies and tracking technologies — data collected through cookies, pixels, and similar technologies as described in Section 7 of this policy.
• Third-party payment providers — transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and USDT processing partners when you complete a payment.
• Regulatory and fraud prevention services — data received from identity verification and anti-money laundering screening services that phnjoy uses to meet its PAGCOR and AMLA compliance obligations.

phnjoy uses your personal data for specific, legitimate purposes only. We do not process your data in ways that are incompatible with the purpose for which it was originally collected. Our processing purposes are:

• Account creation and management — to register your phnjoy account, verify your identity, manage your profile settings, and process account closure requests.
• Age verification — to confirm that you are at least 21 years old before granting access to real-money gaming features, in line with Philippine gaming regulations and PAGCOR requirements.
• Payment processing — to process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and USDT, and to maintain accurate transaction records in Philippine Peso (₱).
• KYC and AML compliance — to verify your identity for withdrawals above regulatory thresholds and to screen transactions for suspicious activity as required under the Philippine Anti-Money Laundering Act (AMLA).
• Responsible gaming — to monitor gaming activity patterns, enforce deposit and loss limits you have set, manage self-exclusion requests, and fulfil our duty of care obligations to Filipino players.
• Platform security and fraud prevention — to detect unauthorised access, identify fraudulent activity, enforce our one-account-per-player policy, and protect the integrity of the phnjoy platform.
• Customer support — to respond to your queries, resolve disputes, process complaints, and maintain records of support interactions.
• Legal and regulatory compliance — to meet our obligations under PAGCOR regulations, RA 10173, AMLA, and any other applicable Philippine laws. This may include reporting certain data to PAGCOR or the Anti-Money Laundering Council (AMLC) as required by law.
• Platform improvement — to analyse aggregate, anonymised usage data to improve the phnjoy platform, optimise game performance, and enhance the player experience for Filipino users.
• Marketing communications — where you have given explicit consent, to send you information about phnjoy promotions, new game launches, and platform updates. You may withdraw consent at any time by contacting support.

Under the Philippine Data Privacy Act of 2012, phnjoy must have a valid legal basis for each category of personal data processing. Our processing is carried out under the following legal bases:

• Contractual necessity — processing required to fulfil our contract with you as a registered phnjoy player, including account management, bet settlement, and payment processing.
• Legal obligation — processing required to comply with Philippine law, including PAGCOR regulatory requirements, AMLA reporting obligations, and age verification mandates.
• Legitimate interests — processing carried out for phnjoy's legitimate interests, such as platform security, fraud prevention, and internal analytics, where these interests are not overridden by your privacy rights.
• Consent — processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional platform personalisation features. You may withdraw consent at any time without affecting the lawfulness of processing that occurred before withdrawal.

phnjoy does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment processors — we share transactional data with GCash, PayMaya, BPI, BDO, Metrobank, and USDT processing partners to facilitate deposits and withdrawals. These processors handle your data under their own privacy policies and are bound by contractual data protection obligations.
• Identity verification providers — phnjoy uses regulated KYC and age verification service providers to validate player identities and government-issued Philippine IDs. These providers process identity data solely for verification purposes.
• PAGCOR and regulatory authorities — we may be required to share player data with PAGCOR or other Philippine regulatory bodies in the exercise of their supervisory functions over licensed gaming operators.
• Anti-money laundering authorities — phnjoy is obligated to report suspicious transactions to the Anti-Money Laundering Council (AMLC) under the Philippine AMLA. Relevant transaction and identity data will be shared as required by law.
• Law enforcement — phnjoy will disclose personal data to Philippine law enforcement agencies where required by a valid court order, subpoena, or other lawful legal process.
• Technology service providers — phnjoy works with contracted technology partners (including cloud hosting, data analytics, and customer support platform providers) who process data on our behalf under strict data processing agreements. These partners are prohibited from using your data for their own purposes.
• Business transfers — in the event of a merger, acquisition, or sale of phnjoy's business assets, personal data held by phnjoy may be transferred to the acquiring entity. You will be notified of any such transfer and of any material changes to this Privacy Policy that arise from it.

phnjoy uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain session security, and analyse how Filipino players use our site. The categories of cookies used on phnjoy are:

• Essential cookies — strictly necessary for the phnjoy platform to function. These cookies manage your login session, maintain your account state, and enable core platform features. They cannot be disabled without breaking platform functionality.
• Performance cookies — collect anonymised information about how visitors use the phnjoy platform, such as which pages are visited most often and where errors occur. This data helps us improve platform performance and the Filipino player experience.
• Functional cookies — remember your preferences, such as your preferred language, display settings, and responsible gaming limit configurations, so you do not need to re-enter them on each visit.
• Analytics cookies — used to measure aggregate traffic patterns and player behaviour on the phnjoy platform. Analytics data is anonymised and cannot be used to identify individual players.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from using phnjoy's core features. Disabling other categories of cookies will not affect your access to the platform but may reduce its functionality and personalisation.

phnjoy retains personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by Philippine law and PAGCOR regulations. Our general retention periods are as follows:

• Active account data — retained for the duration of your phnjoy account and for a minimum of five (5) years following account closure, in line with PAGCOR record-keeping requirements and AMLA obligations.
• Transaction records — all deposit and withdrawal records, including GCash and PayMaya transaction logs, are retained for a minimum of five (5) years as required by AMLA.
• KYC and identity verification documents — retained for a minimum of five (5) years from the date of verification, or longer if required by a PAGCOR regulatory instruction or active legal proceeding.
• Customer support communications — live chat transcripts and support emails are retained for two (2) years from the date of the interaction.
• Marketing consent records — records of your marketing consent and any subsequent withdrawal of consent are retained for three (3) years.
• Technical and log data — server logs and access records are retained for twelve (12) months, after which they are automatically deleted unless flagged for security or compliance review.

When personal data reaches the end of its retention period, phnjoy will securely delete or anonymise it in a manner that prevents reconstruction or re-identification. Anonymised, aggregate data may be retained indefinitely for statistical and platform improvement purposes.

phnjoy implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phnjoy servers.
• Encryption at rest for sensitive personal data stored on phnjoy databases, including government ID data, financial account references, and KYC documents.
• Role-based access controls — phnjoy staff can only access personal data to the extent required for their specific role. Access to sensitive player data is logged and reviewed.
• Two-factor authentication (2FA) for phnjoy platform accounts, providing an additional layer of protection beyond your password.
• Intrusion detection and monitoring — phnjoy's infrastructure is monitored 24/7 for suspicious activity, unauthorised access attempts, and anomalous data access patterns.
• Regular security assessments — phnjoy conducts periodic vulnerability assessments and penetration tests to identify and remediate security weaknesses before they can be exploited.
• Staff training — all phnjoy staff who handle personal data receive regular data privacy and security training aligned with RA 10173 requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phnjoy will notify you and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, in accordance with our obligations under RA 10173.

Under the Philippine Data Privacy Act of 2012, all registered phnjoy players have the following rights in relation to their personal data:

To exercise any of the above rights, please contact our Data Privacy Officer at [email protected] with the subject line "Data Rights Request". We will verify your identity before processing any request, and will respond within 15 business days. There is no fee for exercising your data rights under normal circumstances.

phnjoy is strictly an adults-only platform. In the Philippines, the minimum legal age for participation in casino-style gaming and sports betting is 21 years old. phnjoy does not knowingly collect personal data from any individual below the age of 21.

All new registrants are required to provide proof of age as part of the phnjoy KYC verification process. Any account found to belong to a person under 21 years of age will be immediately suspended, all pending withdrawals will be cancelled, and the matter will be reported to PAGCOR as required under our operating licence conditions.

phnjoy primarily stores and processes personal data within the Philippines or in data centres with equivalent data protection standards. Where personal data is transferred outside the Philippines — for example, to cloud infrastructure providers or technology partners operating in other jurisdictions — phnjoy ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173.

These safeguards may include contractual data processing agreements, standard data protection clauses, or transfers to jurisdictions that have been assessed as providing an adequate level of data protection. phnjoy does not transfer personal data to jurisdictions with inadequate data protection frameworks without appropriate contractual protections in place.

phnjoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in Philippine law or PAGCOR regulatory requirements, or improvements to our platform. The "Last Updated" date at the top of this page will be revised whenever a material change is made.

Where a change is material — meaning it significantly affects your privacy rights or how your personal data is processed — phnjoy will notify registered players via the email address on file with their account at least 14 days before the change takes effect. Your continued use of the phnjoy platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed about how phnjoy protects your personal data. The current version of this policy is always accessible at phnjoy.net/privacy-policy.

If you have any questions, concerns, or complaints about this Privacy Policy or phnjoy's handling of your personal data, please contact our Data Privacy Officer using the details below. We take all privacy concerns seriously and will respond promptly.

If you are not satisfied with phnjoy's response to your privacy concern, you have the right to escalate your complaint to the Philippine National Privacy Commission (NPC), which is the independent regulatory authority responsible for enforcing RA 10173 in the Philippines.

phnjoy is committed to working constructively with the NPC and with our players to resolve all data privacy matters fairly and in accordance with Philippine law. We operate within the PAGCOR regulatory framework and take our data protection obligations as seriously as our gaming compliance obligations.