phjo Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how phjo ("phjo," "we," "us," "our"), the operator of the online gaming platform at phjo.org, collects, uses, stores, shares, and protects personal data relating to registered players, visitors, and prospective users ("Data Subjects," "you") of the phjo platform and all associated services.

phjo is committed to full compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC). Where phjo processes data of individuals located in other jurisdictions, phjo applies equivalent standards of protection.

By registering a phjo account, accessing phjo.org, or otherwise engaging with the phjo platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with the practices described in this Policy, you must refrain from using the phjo platform.

2. Data Controller Information

For purposes of the Data Privacy Act of 2012 and this Policy, the personal information controller responsible for your data is phjo, the operator of phjo.org. Players or visitors with questions, requests, or concerns regarding personal data processed by phjo may contact our designated Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

phjo collects the following categories of personal data in the ordinary course of operating the platform:

3.1 Account Registration Data

When you register a phjo account, we collect your full legal name, date of birth, Philippine mobile number, email address, and the login credentials you create (username and encrypted password). This data is necessary to establish and maintain your phjo account identity.

3.2 Identity Verification (KYC) Data

To comply with PAGCOR guidelines and Anti-Money Laundering Act (AMLA) obligations, phjo may collect copies of government-issued identification documents (such as PhilSys ID, Philippine passport, or driver's license), proof of residential address, and proof of payment method ownership. KYC data is processed only to the extent required by applicable law and regulatory obligations.

3.3 Financial Transaction Data

phjo records all deposit and withdrawal transactions processed through your account, including transaction amounts in Philippine Peso (₱), timestamps, payment method identifiers (e-wallet account references, partial bank account numbers), and transaction status. Full payment credential details (e.g., complete card numbers or GCash PINs) are never stored by phjo.

3.4 Gaming Activity Data

phjo automatically records your gaming activity, including games played, wager amounts, outcomes, session durations, and bonus usage history. This data is used to operate the platform, resolve disputes, detect fraud, and fulfil responsible gaming obligations.

3.5 Device and Technical Data

When you access phjo.org, our servers automatically collect your IP address, device type and model, operating system version, browser type and version, referring URLs, and session timestamps. This technical data helps us maintain platform security and optimize performance for Philippine mobile networks.

3.6 Communications Data

If you contact phjo's player support team via live chat, email, or in-platform messaging, we retain records of those communications to resolve your inquiry, improve our services, and maintain accountability.

4. How We Use Your Personal Data

phjo processes your personal data for the following purposes:

1. Account Management: To create, maintain, verify, and secure your phjo account, including phjo Login authentication and two-factor verification;
2. Service Delivery: To provide access to all phjo games and platform features, process deposits and withdrawals, and operate the full phjo gaming service;
3. Legal and Regulatory Compliance: To fulfil phjo's obligations under the Data Privacy Act of 2012, AMLA, PAGCOR regulations, and other applicable Philippine laws — including KYC verification, transaction monitoring, and suspicious activity reporting;
4. Fraud Prevention and Security: To detect, investigate, and prevent unauthorized access, fraudulent transactions, bonus abuse, money laundering, and other prohibited activities;
5. Responsible Gaming: To operate deposit limits, session controls, self-exclusion tools, and other player protection mechanisms required under phjo's responsible gaming programme;
6. Customer Support: To respond to player inquiries, resolve disputes, and maintain service quality;
7. Platform Improvement: To analyse aggregate usage patterns, identify technical issues, and improve phjo's games and user interface — particularly for Philippine mobile conditions;
8. Marketing and Promotions: To send personalised promotional offers, bonus notifications, and platform updates to players who have consented to marketing communications. Players may withdraw marketing consent at any time via account settings.

5. Legal Bases for Processing

phjo processes personal data on one or more of the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfil phjo's obligations under the Terms & Conditions you accepted upon registration;
• Legal Obligation: Processing required to comply with applicable Philippine law, PAGCOR regulations, or AMLA obligations;
• Legitimate Interest: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your fundamental rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given freely given, specific, informed, and unambiguous consent. Consent may be withdrawn at any time without affecting prior processing.

6. Cookies and Tracking Technologies

phjo.org uses cookies and similar technologies to operate the platform, maintain authenticated sessions (including your phjo Login session), and analyse aggregate traffic patterns. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for platform operation including session management and security. These cannot be disabled without impairing core functionality.
• Functional Cookies: Enable personalised features such as remembering your preferred game categories and language settings.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate phjo.org, used to improve platform performance. No individual player is identifiable from analytics data.
• Marketing Cookies: Used only where you have given explicit consent to receive personalised promotional content.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access phjo games or process transactions.

7. Sharing of Personal Data

phjo does not sell, rent, or trade your personal data to third parties for commercial purposes. phjo may share personal data with the following categories of recipients where strictly necessary:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other authorised Philippine payment service providers, to the minimum extent required to process your transactions;
• Game Content Providers: Licensed game developers whose software powers phjo's game library, solely for the purpose of delivering the requested gaming service;
• Identity Verification Providers: Third-party KYC and AML screening services used to fulfil phjo's regulatory obligations;
• Regulatory and Law Enforcement Authorities: The Anti-Money Laundering Council (AMLC), PAGCOR, the National Privacy Commission, and other Philippine authorities, where disclosure is required by law or regulatory order;
• IT Service Providers: Cloud infrastructure, cybersecurity, and analytics providers engaged by phjo under strict data processing agreements.

All third-party data processors engaged by phjo are bound by contractual data protection obligations no less stringent than those applicable to phjo itself.

8. Data Retention

phjo retains personal data for the minimum period necessary to fulfil the purposes described in this Policy and to comply with applicable legal and regulatory retention obligations. The general retention periods applied by phjo are as follows:

• Account registration and KYC data: Five (5) years from account closure, consistent with AMLA retention requirements;
• Financial transaction records: Five (5) years from the date of transaction;
• Gaming activity logs: Three (3) years from the date of activity;
• Customer support communications: Two (2) years from the date of resolution;
• Marketing consent records: Until consent is withdrawn, plus two (2) years.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

9. Data Security

phjo implements a comprehensive information security programme to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Key security measures include:

• Transport Layer Security (TLS/SSL) encryption on all data transmitted between your device and phjo servers;
• Encryption at rest for sensitive personal and financial data stored on phjo infrastructure;
• Multi-factor authentication options for phjo Login, reducing account takeover risk;
• Rate limiting, anomaly detection, and real-time fraud monitoring to identify and block suspicious activity;
• Role-based access controls ensuring phjo staff can access player data only to the extent required by their specific role;
• Regular security assessments and penetration testing of phjo's platform infrastructure.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phjo will notify the National Privacy Commission and affected Data Subjects in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03.

10. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjo:

To exercise any of the above rights, submit a written request to phjo at [email protected] with the subject line "Data Subject Rights Request." phjo will acknowledge receipt within three (3) business days and respond substantively within fifteen (15) business days.

11. Children's Privacy

phjo's platform is strictly intended for individuals who are at least twenty-one (21) years of age. phjo does not knowingly collect personal data from persons under 21 years of age. If phjo discovers that personal data has been collected from a minor, it will immediately close the associated account, delete the data, and refund any deposited funds to the verified payment source. Parents or guardians who believe a minor has accessed phjo should contact [email protected] immediately.

12. Cross-Border Data Transfers

Some of phjo's third-party service providers (including cloud infrastructure providers and game content suppliers) may process personal data outside the Philippines. Where such transfers occur, phjo ensures that adequate safeguards are in place — including contractual data protection clauses consistent with NPC standards — to maintain equivalent levels of protection for your personal data regardless of where it is processed.

13. Changes to This Privacy Policy

phjo reserves the right to modify this Privacy Policy at any time. Material changes — those that significantly affect your rights or how your data is processed — will be communicated to registered players via email or in-platform notification at least seven (7) days prior to taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the phjo platform following the effective date of a revised Policy constitutes your acceptance of the updated terms.

14. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or phjo's data processing practices, please contact our Data Protection Officer:

You also have the right to escalate unresolved privacy concerns to the National Privacy Commission of the Philippines, the supervisory authority for data protection in the Philippines.