phejoy Privacy Policy

1. Introduction

phejoy ("we," "us," "our," or "Platform") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, store, and protect the personal data of users ("you," "your," "Player") who access and use our online gaming platform at https://phejoy.cam, including our website, mobile applications, and related services (collectively, the "Services").

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and all relevant circulars issued by the National Privacy Commission (NPC) of the Philippines. We also adhere to Philippine Amusement and Gaming Corporation (PAGCOR) regulations governing online gaming operations.

By creating an account, accessing our Services, or providing personal information to phejoy, you acknowledge that you have read, understood, and consent to the data processing practices described in this Privacy Policy. If you do not agree with any aspect of this policy, please discontinue use of our Services immediately and contact us at [email protected] to request account deletion.

2. Data Controller Information

For the purposes of data protection law, phejoy is the data controller responsible for your personal information. Our registered business details are as follows:

• Business Name: phejoy Gaming Corporation
• PAGCOR License Number: PH-2020-8472
• Registered Address: Makati City, Metro Manila, Philippines
• Data Protection Officer (DPO): [email protected]
• General Inquiries: [email protected]
• Customer Support: [email protected]

Our Data Protection Officer oversees compliance with the Data Privacy Act and serves as your primary point of contact for privacy-related inquiries, complaints, and data subject rights requests. You may contact our DPO directly at [email protected].

3. Information We Collect

We collect several categories of personal information to provide, maintain, secure, and improve our Services. The types of information we collect include:

3.1 Information You Provide Directly

When you register for a phejoy account or use our Services, you voluntarily provide the following personal information:

• Account Registration Data: Full legal name, date of birth, gender, email address, mobile phone number, residential address, username, password, security questions and answers.
• Identity Verification Documents: Government-issued identification (passport, driver's license, national ID, postal ID), proof of address (utility bills, bank statements), selfie photographs for facial verification, and any additional documents required for enhanced KYC (Know Your Customer) verification.
• Financial Information: Payment method details (GCash account, PayMaya account, bank account numbers, cryptocurrency wallet addresses), transaction history, deposit and withdrawal records, bonus claim history, and payment processor references.
• Communication Data: Messages sent through live chat, customer support tickets, email correspondence, feedback forms, survey responses, and promotional opt-in preferences.
• User-Generated Content: Profile pictures, display names, forum posts, chat messages, reviews, ratings, and any other content you voluntarily submit to our platform.

3.2 Information Collected Automatically

When you access or use phejoy Services, we automatically collect technical and behavioral data:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, UDID, Android ID), mobile network information, and device settings.
• Connection Data: IP address, internet service provider (ISP), geographic location (country, city, region derived from IP address), time zone settings, connection timestamps, and network quality metrics.
• Usage Data: Pages viewed, features accessed, games played, bet history, win/loss records, session duration, clickstream data, navigation paths, search queries, and interaction patterns.
• Cookies and Tracking Technologies: Cookie identifiers, session IDs, web beacons, pixel tags, local storage data, and similar technologies used for authentication, personalization, analytics, and fraud prevention.
• Gaming Activity: Game selections, betting patterns, stake amounts, game rounds played, RTP (Return to Player) data, jackpot participation, tournament entries, and gameplay statistics.

3.3 Information from Third-Party Sources

We may receive additional information about you from third-party services and partners:

• Payment Processors: Transaction verification data, fraud risk scores, payment method validity, chargeback notifications, and AML (Anti-Money Laundering) screening results.
• Identity Verification Services: Document authentication results, biometric matching scores, watchlist screening outcomes, PEP (Politically Exposed Person) checks, and adverse media reports.
• Affiliate Partners: Referral sources, affiliate tracking IDs, campaign parameters, and attribution data.
• Social Media: If you choose to link social media accounts, we may receive profile information, email addresses, friend lists, and other publicly available data in accordance with your social media privacy settings.
• Regulatory Bodies: PAGCOR compliance data, self-exclusion registry checks, responsible gaming alerts, and regulatory reporting information.

3.4 Special Categories of Data

Under certain circumstances, we may process special categories of personal data as defined by the Data Privacy Act, including biometric data (facial recognition for identity verification) and information related to responsible gaming interventions. We process such data only when legally required and with appropriate safeguards in place.

4. How We Use Your Information

phejoy processes your personal information for the following legitimate business purposes:

4.1 Account Management and Service Delivery

• Creating and maintaining your player account
• Processing deposits, withdrawals, and other financial transactions
• Providing access to casino games, live dealers, sports betting, and other gaming products
• Managing bonuses, promotions, loyalty programs, and VIP rewards
• Tracking gaming activity, balances, and transaction histories
• Delivering customer support via live chat, email, and phone
• Sending transactional notifications (deposit confirmations, withdrawal updates, account alerts)

4.2 Compliance and Legal Obligations

• Verifying your identity to comply with KYC and AML regulations
• Conducting age verification to prevent underage gambling
• Screening against sanctions lists, PEP databases, and watchlists
• Reporting suspicious transactions to PAGCOR and AMLC (Anti-Money Laundering Council)
• Maintaining records as required by PAGCOR licensing conditions
• Responding to lawful requests from law enforcement, regulatory authorities, and courts
• Enforcing our Terms & Conditions and detecting Terms violations
• Implementing responsible gaming measures including self-exclusion, deposit limits, and cooling-off periods

4.3 Security and Fraud Prevention

• Detecting and preventing fraud, money laundering, and other illegal activities
• Identifying duplicate accounts, bonus abuse, and collusion
• Monitoring for suspicious betting patterns and arbitrage exploitation
• Protecting against unauthorized access, cyberattacks, and data breaches
• Conducting security audits and risk assessments
• Investigating and resolving disputes, chargebacks, and payment reversals

4.4 Service Improvement and Analytics

• Analyzing user behavior to improve game offerings and platform features
• Conducting A/B testing to optimize user experience
• Generating statistical reports and business intelligence
• Developing new games, features, and payment methods
• Troubleshooting technical issues and improving platform performance
• Training our customer support team and improving service quality

4.5 Marketing and Communications

• Sending promotional offers, bonus notifications, and tournament announcements (with your consent)
• Personalizing marketing content based on your gaming preferences
• Conducting surveys and requesting feedback
• Displaying targeted advertisements on our platform and partner websites
• Managing email, SMS, and push notification subscriptions

You may opt out of marketing communications at any time by clicking the "unsubscribe" link in emails, adjusting notification settings in your account, or contacting [email protected]. Opting out will not affect transactional or service-related communications.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, we process your personal information based on one or more of the following legal grounds:

5.1 Contractual Necessity

Processing is necessary to perform our contract with you (the Terms & Conditions) and to provide the Services you requested. This includes account creation, payment processing, game access, and customer support.

5.2 Legal Obligations

Processing is necessary to comply with legal obligations imposed by Philippine law, including PAGCOR regulations, AML laws (Republic Act No. 9160 as amended), tax reporting requirements, and data retention mandates.

5.3 Legitimate Interests

Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, service improvement, analytics, and direct marketing. We balance these interests against your privacy rights and implement safeguards to protect your data.

5.4 Consent

For certain processing activities such as marketing communications, cookies, and optional data collection, we rely on your explicit consent. You may withdraw consent at any time by contacting us or adjusting your account settings.

6. Information Sharing & Disclosure

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients:

6.1 Service Providers and Business Partners

• Payment Processors: GCash, PayMaya, coins.ph, cryptocurrency exchanges, and banking partners to facilitate deposits and withdrawals.
• Game Providers: Evolution Gaming, Pragmatic Play, and other licensed software providers to deliver casino games and live dealer experiences.
• Cloud Hosting: AWS, Google Cloud, or other infrastructure providers for data storage and platform hosting.
• Identity Verification: Third-party KYC/AML service providers for document authentication and identity checks.
• Customer Support: Zendesk, Intercom, or similar platforms for managing support tickets and live chat.
• Marketing Platforms: Email service providers, SMS gateways, and advertising networks for promotional communications.
• Analytics: Google Analytics, Mixpanel, or similar tools for usage tracking and performance monitoring.

All service providers are contractually obligated to protect your data and use it only for the purposes we specify.

6.2 Regulatory and Legal Authorities

We may disclose your information to PAGCOR, the National Privacy Commission, Anti-Money Laundering Council, law enforcement agencies, courts, and other governmental bodies when legally required or to comply with valid legal processes such as subpoenas, court orders, and regulatory investigations.

6.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy, your personal information may be transferred to the acquiring entity or successor organization. We will notify you via email and platform announcements if such a transfer occurs.

6.4 Fraud Prevention and Security

We may share information with fraud detection services, cybersecurity firms, and industry databases to prevent fraud, money laundering, and security threats. This includes sharing information with other gaming operators to identify duplicate accounts and bonus abusers.

6.5 With Your Consent

We may share your information with other parties when you explicitly consent to such sharing, such as participating in third-party promotions, linking social media accounts, or referring friends.

7. Data Security Measures

phejoy employs comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

7.1 Technical Safeguards

• Encryption: All sensitive data is encrypted in transit using TLS 1.3 (Transport Layer Security) and at rest using AES-256 encryption.
• Secure Infrastructure: Our servers are hosted in TIER III+ certified data centers with redundant power, climate control, and physical security.
• Firewall Protection: Multi-layer firewalls, intrusion detection systems (IDS), and DDoS mitigation protect against cyberattacks.
• Access Controls: Role-based access control (RBAC) ensures only authorized personnel can access personal data on a need-to-know basis.
• Secure Development: We follow secure coding practices, conduct regular code reviews, and perform penetration testing.
• Two-Factor Authentication: All player accounts support 2FA via Google Authenticator and SMS verification.

7.2 Organizational Safeguards

• All employees and contractors sign confidentiality agreements and undergo data protection training.
• We conduct regular security audits and vulnerability assessments by independent third parties.
• Our incident response plan ensures rapid detection, containment, and notification of data breaches.
• We maintain business continuity and disaster recovery procedures to protect data integrity.

7.3 Data Breach Notification

In the unlikely event of a data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission within 72 hours of discovery and inform affected users via email within a reasonable timeframe. Breach notifications will include the nature of the breach, affected data categories, likely consequences, and remedial measures taken.

8. Data Retention Periods

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy and to comply with legal obligations:

After the retention period expires, we securely delete or anonymize your personal information using industry-standard data sanitization methods. Some information may be retained in aggregated, anonymized form for statistical analysis.

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

9.1 Right to Information

You have the right to be informed about the collection, use, and disclosure of your personal data. This Privacy Policy serves as our primary notice, but you may request additional details at any time.

9.2 Right to Access

You may request a copy of all personal information we hold about you. Access requests can be made through your account dashboard or by contacting [email protected]. We will respond within fifteen (15) days.

9.3 Right to Rectification

If you believe any information we hold is inaccurate, incomplete, or outdated, you may update it through your account settings or request corrections by contacting [email protected].

9.4 Right to Erasure (Right to be Forgotten)

You may request deletion of your personal data under certain circumstances, including withdrawal of consent, completion of service delivery, or when processing is no longer necessary. However, we may retain data when required by law or for legitimate purposes such as fraud prevention and regulatory compliance.

9.5 Right to Object

You may object to processing based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications at any time.

9.6 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another service provider where technically feasible.

9.7 Right to Lodge a Complaint

If you believe we have violated your privacy rights, you may file a complaint with the National Privacy Commission of the Philippines:

• Website: privacy.gov.ph
• Email: [email protected]
• Address: NPC, 5th Floor Delegation Building, PICC Complex, Pasay City, Philippines

9.8 Exercising Your Rights

To exercise any of these rights, contact our Data Protection Officer at [email protected] or submit a request through your account settings. We will verify your identity before processing requests and respond within the timeframes prescribed by law.

10. Cookies & Tracking Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device when you visit our website. They help us recognize your device, remember your preferences, and improve your user experience.

10.2 Types of Cookies We Use

• Essential Cookies: Required for platform functionality, authentication, and security. These cannot be disabled.
• Performance Cookies: Collect anonymous data about how you use our site to help us improve performance and identify issues.
• Functionality Cookies: Remember your preferences, language settings, and customizations.
• Marketing Cookies: Track your browsing activity to deliver personalized advertisements and measure campaign effectiveness.

10.3 Third-Party Cookies

We use third-party services such as Google Analytics, Facebook Pixel, and advertising networks that may place their own cookies on your device. These third parties have their own privacy policies governing cookie usage.

10.4 Managing Cookies

You can control cookie preferences through your browser settings. Most browsers allow you to block or delete cookies, though this may affect platform functionality. To learn more about cookies and how to manage them, visit www.allaboutcookies.org.

11. International Data Transfers

phejoy primarily operates within the Philippines and stores data on servers located in Philippine data centers. However, some of our service providers, such as cloud hosting and analytics platforms, may be located outside the Philippines.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the National Privacy Commission
• Data processing agreements requiring equivalent data protection standards
• Encryption and security measures for data in transit
• Compliance with GDPR, CCPA, and other applicable international privacy laws

By using phejoy Services, you consent to the transfer of your information to countries outside the Philippines that may have different data protection standards.

12. Children's Privacy

phejoy Services are strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from minors under the age of 21. If we discover that we have inadvertently collected data from a minor, we will immediately delete such information and permanently suspend the associated account.

Parents or guardians who believe their child has provided personal information to phejoy should contact us immediately at [email protected]. We will investigate and take appropriate action, including reporting to relevant authorities if required.

All users must verify their age through government-issued identification during the KYC process. Age verification is mandatory before processing any withdrawals.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through the following channels:

• Email notification to registered users at least 14 days before the effective date
• Prominent banner notification on the phejoy website and mobile app
• Updated "Last Modified" date at the top of this policy

Continued use of phejoy Services after the effective date constitutes acceptance of the revised Privacy Policy. If you do not agree with the changes, you must cease using our Services and request account closure within 30 days.

Previous versions of this Privacy Policy are archived and available upon request by contacting [email protected].

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us using the following methods:

• Data Protection Officer: [email protected]
• Privacy Inquiries: [email protected]
• Customer Support: [email protected]
• Live Chat: Available 24/7 through the phejoy platform
• Mailing Address: phejoy Gaming Corporation, Makati City, Metro Manila, Philippines

We aim to respond to all privacy-related inquiries within five (5) business days. For urgent matters concerning data breaches or unauthorized access, contact us immediately at [email protected].