How phjoy1 Protects Your Privacy
Six principles guide every data decision phjoy1 makes. These are not aspirational statements — they are built into our systems, processes, and policies from day one.
SSL Encryption on All Data
Every piece of data transmitted between your device and phjoy1's servers is protected by industry-standard SSL/TLS encryption. Whether you are logging in from Makati or checking your balance from Cebu, your personal information travels in an encrypted channel that cannot be intercepted in plain text.
No Sale of Personal Data
phjoy1 does not sell, rent, or trade your personal information to third-party marketing companies or data brokers. Your contact details, payment history, and gaming behaviour belong to you — they are used by phjoy1 solely to operate and improve the platform and to meet our legal obligations.
Philippine Data Privacy Act Compliance
phjoy1 operates in full compliance with Republic Act No. 10173 (the Data Privacy Act of 2012) and its Implementing Rules and Regulations. Our data processing activities are registered with the National Privacy Commission (NPC) of the Philippines as required.
Secure Data Storage
Player data is stored on servers protected by physical and logical access controls, regular security audits, and intrusion detection systems. Sensitive fields — including passwords and payment credentials — are stored using industry-standard hashing and tokenisation techniques, never in plain text.
Defined Data Retention Periods
phjoy1 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet PAGCOR and anti-money laundering record-keeping requirements, or as required by applicable Philippine law. Data that is no longer needed is securely deleted or anonymised.
Your Rights Are Enforceable
Under the Data Privacy Act, you have the right to access, correct, and erase your personal data held by phjoy1, subject to legal and regulatory retention requirements. phjoy1 responds to all verified data rights requests within 15 business days and provides a clear, documented response to every request received.
Important Notice: By registering an account or using any service on the phjoy1 platform at phjoy1.cam, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you must discontinue use of the platform.
Introduction
This Privacy Policy ("Policy") describes how phjoy1 ("phjoy1," "we," "us," or "our") — the operator of the online gaming platform accessible at phjoy1.cam — collects, uses, discloses, stores, and protects the personal information of registered players and website visitors ("you," "your," or "Player") in the Philippines.
phjoy1 takes the privacy and data security of its players seriously. As a platform operating in the Philippine market and serving Filipino players across Metro Manila, Cebu, Davao, and the broader archipelago, phjoy1 is subject to and fully committed to compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC) of the Philippines.
This Policy applies to all personal data collected through the phjoy1 website, mobile browser interface, account registration process, customer support interactions, and payment transactions. It should be read in conjunction with our Terms & Conditions and Responsible Gaming policy, both available on this website.
Personal Data We Collect
phjoy1 collects the minimum personal data necessary to provide its services, meet its legal obligations, and ensure a safe gaming environment for all Filipino players. The categories of data we collect include:
2.1 Identity and Contact Data
- Full legal name (as it appears on a government-issued Philippine ID);
- Date of birth (for age verification — 21+ requirement);
- Gender;
- Nationality;
- Registered Philippine mobile number;
- Email address;
- Residential address (including city, province, and postal code).
2.2 Identity Verification (KYC) Documents
- Government-issued photo identification (Philippine passport, driver's licence, SSS/UMID card, PhilHealth ID, voter's ID, or equivalent);
- Proof of residential address (utility bill, bank statement, or similar document issued within the last 3 months);
- Payment method documentation (screenshot or photo of registered GCash number, bank account details, or similar) as required for anti-money laundering compliance.
2.3 Financial and Transaction Data
- Deposit and withdrawal amounts, dates, and payment methods used;
- GCash or PayMaya account reference numbers (partial, for verification only — full wallet credentials are never stored by phjoy1);
- Bank account names and partial account numbers for BPI, BDO, Metrobank, and UnionBank transactions;
- Bonus and promotional credit transaction history;
- Account balance and wallet activity logs.
2.4 Gaming and Betting Activity Data
- Game session records including game type, bet amounts, outcomes, and session duration;
- Sports betting market selections, stake amounts, and settlement results;
- Responsible gaming tool usage (deposit limit settings, session limit configurations, cool-off requests, self-exclusion records).
2.5 Technical and Device Data
- IP address and approximate geolocation;
- Device type, operating system, and browser type;
- Session timestamps and login history;
- Cookie and tracking technology data (see Section 7).
2.6 Communications Data
- Records of customer support interactions (live chat transcripts, email correspondence);
- Feedback and survey responses submitted to phjoy1.
Note on Sensitive Data: phjoy1 does not intentionally collect sensitive personal information (as defined under the DPA) beyond what is strictly necessary for identity verification and KYC compliance. If sensitive data is inadvertently submitted, it is handled with the heightened protection standards required under the DPA.
How We Collect Your Data
phjoy1 collects personal data through the following means:
3.1 Direct Collection
You provide data directly to phjoy1 when you register an account, complete the KYC verification process, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings.
3.2 Automated Collection
phjoy1's platform automatically collects technical data when you visit the website or log in to your account, including your IP address, device identifiers, session data, and browser information. This data is collected through server logs, cookies, and similar technologies as described in Section 7 of this Policy.
3.3 Third-Party Sources
phjoy1 may receive data about you from third-party service providers in limited circumstances, including:
- Payment providers (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank) — transaction confirmation data for deposit and withdrawal processing;
- Identity verification services — confirmation of document authenticity as part of the KYC process;
- Fraud prevention services — risk scoring data to protect platform integrity and prevent money laundering;
- Regulatory bodies — PAGCOR and related agencies may share information relevant to our regulatory compliance obligations.
Legal Basis for Processing
Under the Data Privacy Act of 2012, phjoy1 processes your personal data on the following legal bases:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (your use of phjoy1 services) |
| KYC / identity verification | Legal obligation (PAGCOR and AML regulations) |
| Processing deposits and withdrawals | Performance of a contract |
| Fraud detection and prevention | Legitimate interest / Legal obligation |
| Responsible gaming monitoring | Legitimate interest / Legal obligation |
| Customer support communications | Performance of a contract / Legitimate interest |
| Platform analytics and improvements | Legitimate interest |
| Direct marketing communications | Consent (you may withdraw consent at any time) |
| Regulatory reporting and record-keeping | Legal obligation |
How phjoy1 Uses Your Data
phjoy1 uses collected personal data for the following purposes:
5.1 Platform Operations
To create and manage your phjoy1 account, process login authentication, maintain your wallet balance, process deposits and withdrawals, and deliver game outcomes correctly and fairly.
5.2 Identity and Age Verification
To verify that you are aged 21 or above, that you are who you claim to be, and that you are eligible to access phjoy1 services under Philippine law and our regulatory obligations. This is a core data processing activity that phjoy1 cannot waive or reduce.
5.3 Regulatory Compliance
To meet our obligations under PAGCOR's online gaming framework, Republic Act No. 9160 (the Anti-Money Laundering Act), the DPA, and any other applicable Philippine legislation. Certain data is retained and may be reported to regulatory authorities regardless of player preferences.
5.4 Fraud Prevention and Platform Security
To detect and prevent fraudulent activity, money laundering, bonus abuse, account takeovers, multi-accounting, and other prohibited conduct as defined in our Terms & Conditions. phjoy1 uses automated and manual review processes for this purpose.
5.5 Customer Support
To respond to your support enquiries, resolve account disputes, process responsible gaming requests, and communicate important account notifications. phjoy1 support agents serving Filipino players in English and Tagalog have access to your account data solely for support purposes.
5.6 Responsible Gaming
To monitor gaming patterns that may indicate problem gambling behaviour, to enforce deposit and session limits you have set, and to action self-exclusion and cool-off requests promptly. This processing is carried out as both a contractual obligation and a duty of care to phjoy1 players.
5.7 Marketing Communications
To send you information about phjoy1 promotions, new game launches, and personalised offers, where you have provided consent to receive such communications. You may opt out of marketing communications at any time by contacting phjoy1 support or adjusting your account notification settings.
Sharing and Disclosure of Your Data
phjoy1 does not sell personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:
6.1 Licensed Game Providers
Third-party game developers and live dealer studios whose products are available on the phjoy1 platform may receive limited session data (such as player ID and bet amounts) necessary to deliver game functionality. These providers are contractually bound to process data only for game delivery purposes.
6.2 Payment Processors
GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and any other payment service providers integrated with phjoy1 receive the data necessary to process your specific transaction. Each provider is subject to its own data privacy policy and applicable Philippine financial regulations.
6.3 Regulatory and Law Enforcement Authorities
PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and any other competent Philippine regulatory or law enforcement authority may receive data as required by law or in response to a valid legal order. phjoy1 does not disclose data to authorities beyond what is legally required.
6.4 Fraud Prevention and Identity Verification Services
Specialised third-party services that assist phjoy1 in KYC verification, fraud detection, and AML screening may receive identity data strictly for the purpose of those services. All such providers are bound by confidentiality obligations.
6.5 IT Infrastructure and Hosting Providers
Managed hosting, cloud storage, and cybersecurity service providers that support phjoy1's technical operations may process data as data processors acting on phjoy1's instructions. All such providers operate under data processing agreements consistent with DPA requirements.
No Data Sales: phjoy1 strictly prohibits the sale or commercial transfer of player personal data to advertising networks, marketing aggregators, or any third party for commercial purposes not directly related to the operation of the phjoy1 platform.
Cookies and Tracking Technologies
7.1 What Are Cookies?
Cookies are small text files placed on your device by websites you visit. phjoy1 uses cookies and similar technologies (such as local storage and session storage) to operate the platform, maintain your login session, remember your preferences, and analyse platform usage.
7.2 Types of Cookies Used by phjoy1
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential Cookies | Login session management, security tokens, platform functionality | Session / 30 days |
| Preference Cookies | Saving your language, display settings, and notification preferences | Up to 12 months |
| Analytics Cookies | Understanding how players navigate the platform to improve user experience | Up to 24 months |
| Security Cookies | Detecting suspicious login behaviour, CSRF protection | Session |
7.3 Managing Cookies
You can control and delete cookies through your browser settings. Note that disabling essential cookies will impair the functionality of the phjoy1 platform — login sessions and account features require essential cookies to function correctly. Disabling analytics cookies will not affect your ability to play games or make transactions.
Data Retention
phjoy1 retains personal data for the periods necessary to fulfil the purposes described in this Policy, or as required by Philippine law and PAGCOR regulations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR / AML regulatory requirement |
| KYC documents | Duration of account + 5 years post-closure | Anti-Money Laundering Act (RA 9160) |
| Financial transaction records | 5 years from transaction date | Anti-Money Laundering Act (RA 9160) |
| Game session logs | 3 years from session date | PAGCOR compliance / dispute resolution |
| Customer support records | 3 years from last interaction | Legitimate interest / contractual |
| Marketing consent records | Until consent is withdrawn + 2 years | DPA consent requirements |
| Self-exclusion records | Duration of exclusion + 5 years | Responsible gaming obligation |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised so that it can no longer be associated with any individual player.
Data Security
9.1 Technical Safeguards
phjoy1 implements a comprehensive set of technical security measures to protect your personal data, including SSL/TLS encryption for all data in transit, AES-256 encryption for data at rest where applicable, bcrypt hashing for passwords, tokenisation for payment credentials, multi-factor authentication options for player accounts, regular penetration testing and security audits, and real-time intrusion detection and monitoring systems.
9.2 Organisational Safeguards
Access to player personal data within phjoy1 is limited to personnel who require that access to perform their job functions. All staff with access to personal data are bound by confidentiality obligations and receive regular data privacy and security training. Access logs are maintained and reviewed regularly.
9.3 Data Breach Response
In the event of a personal data breach that is likely to adversely affect your rights and freedoms, phjoy1 will notify the National Privacy Commission within the timeframe required by the DPA and its Implementing Rules. Affected players will be notified promptly with information about the breach and recommended protective actions.
While phjoy1 takes all reasonable technical and organisational measures to protect your data, no method of electronic transmission or storage is 100% secure. You also play a role in keeping your account safe — choose a strong, unique password, enable two-factor authentication on your phjoy1 account, and never share your login credentials with anyone.
Your Data Rights Under the DPA
As a data subject under Republic Act No. 10173 (the Data Privacy Act of 2012), you have the following rights with respect to your personal data held by phjoy1. To exercise any of these rights, contact our Data Protection Officer at [email protected] with your verified account details and a description of your request. phjoy1 will respond within 15 business days.
Children and Minors
The phjoy1 platform is strictly for individuals aged 21 years and above. phjoy1 does not knowingly collect personal data from individuals under 21. If we discover that an account has been created by or on behalf of a person under the minimum age requirement, that account will be closed immediately, all funds will be returned (excluding any winnings generated during the underage usage period), and the matter will be reported to relevant authorities where required.
Parents and guardians who have reason to believe that a minor has accessed the phjoy1 platform or provided personal data to phjoy1 are encouraged to contact us immediately at [email protected] so that appropriate action can be taken without delay.
Cross-Border Data Transfers
Some of phjoy1's technology partners — including licensed game providers and certain platform infrastructure providers — may operate servers or process data outside the Philippines. In such cases, phjoy1 ensures that appropriate data transfer safeguards are in place, including contractual data processing agreements that require overseas recipients to apply data protection standards consistent with the DPA and its Implementing Rules.
phjoy1 does not transfer personal data to countries with demonstrably inadequate data protection standards without implementing compensating safeguards. Where required, phjoy1 notifies the National Privacy Commission of cross-border data sharing arrangements.
Changes to This Privacy Policy
phjoy1 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material — meaning they significantly affect how we use your personal data or your rights as a data subject — phjoy1 will provide at least 14 days' advance notice via a prominent notice on the platform and, where appropriate, direct communication to registered players by email or mobile notification.
Minor changes — such as typographical corrections, formatting updates, or clarifications that do not affect the substantive content of the Policy — may be made without prior notice. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to remain informed about how phjoy1 handles your personal data.
Contact Us and Filing a Complaint
14.1 Data Protection Officer
For any questions, concerns, or requests relating to your personal data and this Privacy Policy, please contact the phjoy1 Data Protection Officer:
phjoy1 Data Protection Officer
Email: [email protected]
Subject Line: Data Privacy Request — [Your Registered Name]
Live Chat: Available 24/7 via the phjoy1 platform for general enquiries
Response Time: Within 15 business days for formal data rights requests
14.2 Complaints to the National Privacy Commission
If you are not satisfied with phjoy1's response to your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government agency responsible for administering and implementing the Data Privacy Act of 2012.
phjoy1 encourages players to contact us first so that we have the opportunity to address your concern directly. However, your right to approach the NPC at any time is unconditional and phjoy1 will cooperate fully with any NPC investigation.
Your Data Rights at a Glance
Under the Philippine Data Privacy Act, phjoy1 players have six enforceable rights over their personal data. Here is what each one means for you.
Right to Access
You can request a copy of the personal data phjoy1 holds about you, including what data we have, why we hold it, who we share it with, and how long we will keep it. phjoy1 responds to access requests within 15 business days.
Right to Rectification
If any personal data phjoy1 holds about you is inaccurate or incomplete, you have the right to request correction. Many basic details — such as your contact number and email — can be updated directly from your account settings after identity re-verification.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose it was collected, or where you withdraw consent and there is no other legal basis for retention. Note that data subject to PAGCOR or AML retention requirements cannot be deleted before the mandatory period expires.
Right to Object
You have the right to object to phjoy1 processing your personal data on the grounds of legitimate interest — including processing for direct marketing purposes. An objection to marketing communications will be actioned immediately. Objections to other processing activities are assessed against phjoy1's legitimate interests and legal obligations.
Right to Data Portability
You may request that phjoy1 provides your personal data in a structured, commonly used, machine-readable format so that you can transfer it to another service provider, where technically feasible. This right applies to data you have directly provided to phjoy1 and that we process by automated means.
Right to Complain
If you believe phjoy1 has violated your data privacy rights, you have the right to file a formal complaint. Contact phjoy1 first at [email protected] — we commit to a meaningful response within 15 business days. You may also escalate to the National Privacy Commission of the Philippines at any time.
Play at phjoy1 With Confidence
Your data is protected. Your rights are respected. Your privacy is taken seriously. Join the phjoy1 community and experience online gaming the way it should be — fair, fast, and built for Filipino players.
21+ only. Please read our full Privacy Policy and Terms & Conditions. phjoy1 promotes responsible gaming.