phjoy28 Privacy Policy – Your Data, Protected

1. Introduction

Welcome to phjoy28 — your go-to online gaming destination in the Philippines. This Privacy Policy explains how phjoy28 (referred to as "we," "us," or "our") collects, uses, stores, and protects your personal information when you use our website at https://phjoy28.best and all services connected to it.

By registering an account or using any phjoy28 service, you agree to the terms set out in this Privacy Policy. If you do not agree, please do not proceed with registration or continue using our platform. Kung may tanong ka, feel free to reach out — we want to make this as clear as possible for every Filipino player.

phjoy28 takes its obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR) very seriously. We are committed to responsible data handling in line with the standards set by the National Privacy Commission (NPC) of the Philippines.

2. Personal Data We Collect

To give you a smooth, secure, and fair gaming experience, phjoy28 needs to collect certain types of personal data. Here's a breakdown of what we gather and why:

We only collect information that is necessary, relevant, and proportionate to the services we provide. We do not collect sensitive personal information (such as religious beliefs or political affiliations) unless specifically required and justified under applicable law.

3. How We Use Your Personal Data

Your data helps us run a better, safer, and more enjoyable platform for everyone on phjoy28. Here's how we put it to use:

• Account Management: Creating, verifying, and maintaining your player account, including password resets and profile updates.
• Transaction Processing: Handling deposits via GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, InstaPay/PESONet, Visa, and Mastercard, as well as processing withdrawal requests promptly.
• Identity Verification & Compliance: Meeting our KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations as required by PAGCOR licensing and Philippine law.
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance through our support channels.
• Platform Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent activity, cheating, multi-accounting, and other violations of our Terms and Conditions.
• Personalisation: Showing you game recommendations, bonuses, and promotions that are relevant to your play style and preferences.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling and offering tools like deposit limits, self-exclusion, and cooling-off periods.
• Legal Compliance: Maintaining records as required by Philippine law and responding to lawful requests from regulatory authorities.
• Marketing Communications: Sending you updates about new games, promos, and special events — only if you've opted in, and always with an easy way to opt out.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phjoy28 processes your personal data on the following legal bases:

• Consent: You give us clear, informed consent when you register an account and agree to this Privacy Policy.
• Contractual Necessity: We need certain data to fulfil our obligations to you as a player — such as processing your transactions and managing your account.
• Legal Obligation: Some data processing is required to comply with PAGCOR regulations, AML laws, and other applicable Philippine legislation.
• Legitimate Interest: We process limited data to protect our platform, prevent fraud, and improve overall service quality — where these interests do not override your fundamental rights.

5. Data Sharing and Third Parties

phjoy28 does not sell, rent, or trade your personal information. However, we may share limited data with the following categories of third parties, strictly for legitimate purposes:

• Payment Processors: Providers like GCash, Maya, GrabPay, and partner banks handle your financial data solely to process your transactions. They operate under their own privacy policies and are bound by contractual data protection obligations.
• Identity Verification Partners: KYC service providers who assist us in verifying player identity and age. All processing is done in compliance with Philippine law.
• Game Software Providers: Third-party game studios and providers (e.g., JILI) may receive anonymised usage data to maintain game functionality and fairness.
• IT and Cybersecurity Vendors: Service providers who help us host, maintain, and secure our platform under strict confidentiality agreements.
• Regulatory and Legal Authorities: PAGCOR, the NPC, law enforcement, or courts — when required by law or to protect the rights and safety of our players and staff.

All third-party partners are vetted for compliance with Philippine data protection standards before we share any data with them. Cross-border data transfers, if any, are only made to jurisdictions with adequate data protection measures in place.

6. Cookies and Tracking Technologies

phjoy28 uses cookies and similar technologies to make your experience smoother and more personalised. Here's what we use and why:

• Essential Cookies: Necessary for the platform to function — like keeping you logged in during your session.
• Performance Cookies: Help us understand how players use phjoy28 so we can fix issues and improve load times.
• Functional Cookies: Remember your preferences like language, display settings, and favourite games.
• Analytics Cookies: Aggregate, anonymised data about site usage — helping us prioritise improvements and features Filipino players actually want.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect your ability to log in or use certain features of phjoy28.

7. Data Retention

We keep your personal data for as long as your account is active and for a reasonable period afterwards, in line with our legal and regulatory obligations. Specifically:

• Active account data is retained for the duration of your membership on phjoy28.
• After account closure, we retain records for a minimum of five (5) years to comply with AML regulations and PAGCOR requirements.
• Communication records (e.g., support tickets) are retained for up to three (3) years for quality assurance and dispute resolution.
• Data required by law (e.g., transaction logs) may be kept longer if mandated by applicable Philippine legislation.

Once the retention period expires and there's no longer a legal basis to keep your data, phjoy28 securely deletes or anonymises it.

8. Your Rights Under Philippine Data Privacy Law

As a data subject under RA 10173, you have the following rights with respect to your personal data held by phjoy28:

• Right to be Informed: You have the right to know how your data is being collected and used — which is exactly what this Privacy Policy is for.
• Right to Access: You can request a copy of the personal data we hold about you at any time.
• Right to Rectification: If any of your data is inaccurate or outdated, you can ask us to correct it.
• Right to Erasure or Blocking: Under certain conditions, you can request that we delete or block your personal data.
• Right to Data Portability: You can request that we provide your data in a structured, commonly used format.
• Right to Object: You can object to specific types of data processing, such as direct marketing.
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, contact our Data Protection Officer (DPO) at privacy@phjoy28.best. We will respond within the timeframes prescribed by law.

9. Data Security Measures

Protecting your data isn't just a legal requirement for us — it's a core part of how we run phjoy28. Our security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers.
• Hashed and salted password storage — your actual password is never stored in plain text.
• Two-factor authentication (2FA) options available for all player accounts.
• Regular vulnerability assessments and penetration testing of our systems.
• Strict role-based access controls limiting who within phjoy28 can view sensitive player data.
• Intrusion detection systems and 24/7 security monitoring.
• Staff training on data protection and cybersecurity best practices.

Despite our best efforts, no system is 100% impenetrable. In the unlikely event of a data breach that affects your rights, phjoy28 will notify you and the NPC in accordance with the timeline required by Philippine law.

10. Minors and Age Restriction

phjoy28 is strictly an 18+ platform. We do not knowingly collect personal data from anyone under the age of 18. Age verification is a mandatory part of our KYC process, and accounts found to belong to minors will be immediately closed and any funds returned in accordance with applicable law.

If you believe a minor has registered on phjoy28, please contact us immediately at privacy@phjoy28.best so we can take swift action.

11. Changes to This Privacy Policy

phjoy28 may update this Privacy Policy from time to time — whether to reflect changes in the law, our services, or our data practices. When we do, we'll always post the updated policy on this page with a revised "Last Updated" date.

For significant changes, we'll send you a notification via email or a prominent notice on the phjoy28 platform. We encourage you to review this page periodically so you're always up to date. Your continued use of phjoy28 after changes are posted means you accept the updated terms.

12. Contact Us & Data Protection Officer

Got questions about this Privacy Policy or how phjoy28 handles your data? Our Data Protection Officer (DPO) is here to help.

• Email: privacy@phjoy28.best
• General Support: support@phjoy28.best
• Website: https://phjoy28.best

We aim to respond to all data-related requests within 15 business days. For urgent concerns involving potential data breaches or compromised accounts, we prioritise response within 72 hours.