phjoly Privacy Policy
At phjoly, your privacy is not an afterthought — it is a core part of how we operate. This Privacy Policy explains what personal data phjoly collects from Filipino players, how we use and protect that data, who we share it with, and what rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Please read this document carefully before registering or using any phjoly service.
1. Who We Are
phjoly is an online gaming and sports betting platform accessible at phjoly.net, providing Filipino players with access to casino games, live dealer tables, slots, bingo, poker, and a sportsbook covering PBA, NBA, international football, boxing, UFC, and other markets. phjoly operates for players based in the Philippines and complies with applicable Philippine regulations, including those issued by the Philippine Amusement and Gaming Corporation (PAGCOR).
For the purposes of this Privacy Policy, phjoly is the Personal Information Controller as defined under Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA). This means phjoly determines the purposes for which personal data collected from players is processed, and is responsible for ensuring that such processing is carried out lawfully, securely, and in compliance with the DPA and its implementing rules.
By registering an account on phjoly, using any phjoly service, or accessing the phjoly platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
2. Personal Data We Collect
phjoly collects personal data from players across several categories. The data we collect depends on the services you use, the stage of your Account lifecycle, and our legal and regulatory obligations at the time of collection.
| Data Category | Specific Data Points | Collection Stage |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number and type (PhilSys, UMID, passport, driver's license, SSS/GSIS ID) | Registration & KYC |
| Contact Data | Philippine mobile number, email address, city of residence (Metro Manila, Cebu, Davao, etc .) | Registration |
| Financial Data | GCash number, PayMaya account, BPI/BDO/Metrobank account details, Visa/Mastercard last four digits, transaction history, deposit and withdrawal amounts in PHP | Cashier / KYC |
| Gaming Activity Data | Game sessions, bet amounts, win/loss records, bonus claims, wagering history, preferred game categories, session durations | Ongoing Platform Use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, session timestamps | Automated on Login |
| Communications Data | Live chat transcripts, support ticket content, email correspondence, feedback and survey responses | Support Interactions |
| Verification Documents | Photos or scans of government-issued IDs, selfie verification images, proof of address documents (utility bills, bank statements) | KYC Verification |
Sensitive Personal Information: Government-issued ID numbers and financial account details are classified as sensitive personal information under the Philippine Data Privacy Act. phjoly processes these categories only where strictly necessary for identity verification and anti-money laundering compliance, and applies heightened security controls to their storage and handling.
3. How We Collect Your Data
phjoly collects personal data through several channels, both direct and automated:
- Account Registration: When you create a phjoly Account, you provide your name, date of birth, mobile number, and email address directly via the registration form.
- KYC Verification: When you submit identity documents for account verification — either voluntarily or as required before processing a withdrawal — phjoly collects the document images and the data contained within them.
- Cashier Transactions: When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, or Mastercard, the payment provider transmits transaction data to phjoly for processing and reconciliation.
- Platform Usage: phjoly's servers automatically log technical data — including your IP address, device identifiers, and session timestamps — every time you access the platform or complete a game round.
- Cookies and Tracking Technologies: phjoly uses cookies and similar technologies on the phjoly.net website to maintain session state, remember your preferences, and analyse platform usage patterns. See Section 9 for full cookie details.
- Customer Support: When you contact phjoly's support team via live chat or email, we collect the content of those communications along with your Account identifier and the timestamp of the interaction.
- Responsible Gaming Tools: When you configure deposit limits, session reminders, cooling-off periods, or self-exclusion via Account Settings after phjoly Login, phjoly records these preferences and their activation dates as part of your Account history.
4. How We Use Your Personal Data
phjoly processes personal data for the following specific purposes. Each purpose is tied to a lawful basis described in Section 5.
- Account Creation and Management: To register your phjoly Account, authenticate your identity at phjoly Login, and maintain your Account in good standing throughout its lifecycle.
- Identity Verification (KYC): To verify that you are who you say you are, that you are at least 21 years of age, and that your identity documents are valid — in compliance with PAGCOR requirements and anti-money laundering regulations applicable in the Philippines.
- Payment Processing: To process your deposits and withdrawals via your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, Mastercard) and to maintain accurate financial records of all transactions on your Account.
- Service Delivery: To provide you with access to phjoly's full game library — including slots, live dealer games, the PBA and NBA sportsbook, bingo rooms, Pearls of Bingo, and poker tables — and to personalise your gaming experience based on your preferences and history.
- Bonus and Promotion Administration: To credit eligible bonuses to your Account, track wagering requirement progress, and communicate promotion details relevant to your Account status and game preferences.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, bonus abuse, and other prohibited conduct as defined in phjoly's Terms & Conditions.
- Responsible Gaming Compliance: To enforce self-exclusion and cooling-off periods, monitor gaming patterns that may indicate problem gambling, and provide timely interventions or support resources where warranted.
- Legal and Regulatory Compliance: To comply with obligations under Philippine law, including the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and any regulatory directions issued by PAGCOR or other competent authorities.
- Customer Support: To respond to your support queries, resolve disputes, and maintain records of support interactions for quality assurance and compliance purposes.
- Platform Analytics and Improvement: To analyse aggregated, anonymised usage data for the purpose of improving phjoly's platform performance, game selection, and user experience — without identifying you individually in these analyses.
- Marketing Communications: Where you have given explicit consent, to send you promotional emails, SMS messages, or in-platform notifications about phjoly offers, new games, and special events. You may withdraw this consent at any time via Account Settings or by contacting support.
phjoly does not use your personal data for automated decision-making that produces legal or similarly significant effects without human review. Responsible gaming interventions based on automated pattern detection are always reviewed by a trained phjoly compliance team member before any Account action is taken.
5. Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, phjoly processes your personal data on the following lawful bases:
- Contractual Necessity: Processing required to perform phjoly's obligations under the Terms & Conditions you accepted at registration — including Account management, payment processing, and game delivery.
- Legal Obligation: Processing required to comply with Philippine law, including AMLA-mandated KYC procedures, PAGCOR reporting obligations, and data retention requirements imposed by financial regulators.
- Legitimate Interests: Processing carried out for phjoly's legitimate interests in fraud prevention, platform security, multi-accounting detection, and responsible gaming monitoring — where those interests are not overridden by your privacy rights.
- Consent: Processing for marketing communications and non-essential cookies, where you have given freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
6. Data Sharing & Third-Party Disclosure
phjoly does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Personal data is shared only in the following circumstances:
- Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and InstaPay receive transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and applicable financial regulations.
- Game Content Providers: Third-party game studios and RNG providers may receive your Account identifier and session data necessary to deliver game content, record outcomes, and verify bet settlements. They do not receive your identity documents or financial account details.
- KYC and Identity Verification Providers: phjoly uses accredited third-party identity verification services to process government-issued ID documents submitted during KYC. These providers are contractually bound to process your data only for the purpose of identity verification on phjoly's behalf.
- Regulatory Authorities: phjoly will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities when required by law, valid court order, or regulatory direction.
- Fraud Prevention Networks: In cases of confirmed fraud or money laundering, phjoly may share relevant data with law enforcement agencies and, where applicable, with industry fraud prevention networks operating within the Philippines.
- Professional Advisers: phjoly's legal counsel, auditors, and compliance consultants may access personal data on a need-to-know basis, subject to professional confidentiality obligations.
No Data Selling: phjoly has never sold and will never sell your personal data to data brokers, advertisers, or any third party for commercial profiling. Your data stays within phjoly's controlled ecosystem of service providers listed above.
7. Data Retention
phjoly retains personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & Identity Data | Duration of Account + 5 years after closure | AMLA / PAGCOR compliance |
| Financial Transaction Records | 10 years from date of transaction | Anti-Money Laundering Act (RA 9160) |
| KYC Verification Documents | 5 years after Account closure | AMLC regulatory requirement |
| Gaming Activity Logs | 3 years from date of session | Dispute resolution / Responsible gaming |
| Support Communications | 3 years from date of interaction | Legitimate interests / Dispute resolution |
| Marketing Consent Records | Until consent withdrawn + 1 year | DPA consent documentation requirements |
| Technical / IP Logs | 12 months from date of log | Security & fraud prevention |
Upon expiry of the applicable retention period, phjoly will securely delete or anonymise personal data so that it can no longer be attributed to any individual player.
8. Data Security
phjoly implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our technical and organisational security measures include:
- TLS/SSL Encryption: All data transmitted between your browser or device and phjoly's servers is encrypted using TLS 1.2 or higher. The padlock icon in your browser confirms an active encrypted connection every time you access phjoly.
- Data Encryption at Rest: Sensitive personal data — including KYC documents, financial account details, and government ID numbers — is encrypted at rest using AES-256 encryption on phjoly's database infrastructure.
- Access Controls: Access to personal data is restricted on a strict need-to-know basis. phjoly staff are granted data access permissions only to the extent required for their specific role. All access is logged and audited.
- Two-Factor Authentication: phjoly Login supports two-factor authentication (2FA) for player accounts to prevent unauthorised access in the event of credential compromise.
- Penetration Testing: phjoly's platform and infrastructure undergo regular penetration testing and vulnerability assessments conducted by independent security professionals.
- Incident Response: phjoly maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, phjoly will notify the National Privacy Commission within 72 hours of discovery and will notify affected players without undue delay, as required under the Data Privacy Act.
Your Role in Security: phjoly's security measures protect data on our side of the connection. You are responsible for keeping your phjoly Login credentials confidential, enabling 2FA, and ensuring that your device is secure and free from malware. Never share your password with anyone — including phjoly support staff, who will never ask for it.
9. Cookies & Tracking Technologies
phjoly uses cookies and similar tracking technologies on the phjoly.net website. Cookies are small text files stored on your device that help the platform function correctly and allow phjoly to understand how players use the site.
Types of Cookies phjoly Uses:
- Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens (keeping you logged in after phjoly Login), CSRF protection tokens, and load-balancing identifiers. These cookies cannot be disabled without breaking core platform functionality.
- Functional Cookies: Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations. These improve your experience but are not strictly necessary for the platform to operate.
- Analytics Cookies: phjoly uses privacy-respecting, server-side analytics to understand aggregate traffic patterns — such as which games are most popular, peak usage hours, and common user journeys through the site. These analytics are anonymised and do not identify individual players.
- Security Cookies: Used for fraud detection and multi-accounting prevention — for example, to identify device fingerprints associated with previously banned accounts.
You can manage cookie preferences via your browser settings. Note that disabling strictly necessary cookies will prevent you from accessing the phjoly platform. phjoly does not use third-party advertising cookies or retargeting pixels from external ad networks.
10. Your Data Rights
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjoly:
- Right to Be Informed: You have the right to know what personal data phjoly holds about you, why it is being processed, how long it will be retained, and who it is shared with. This Privacy Policy is the primary fulfilment of this right.
- Right to Access: You may request a copy of the personal data phjoly holds about your Account at any time. phjoly will respond to verified access requests within fifteen (15) business days.
- Right to Correction: If you believe that personal data phjoly holds about you is inaccurate, incomplete, or outdated, you may request a correction. Account profile details can be updated via Account Settings; corrections to KYC data require submission of updated verification documents.
- Right to Erasure: You may request deletion of your personal data where processing is no longer necessary for its original purpose and no legal retention obligation applies. Note that phjoly is required by AMLA and PAGCOR regulations to retain certain data for defined periods even after Account closure — erasure requests cannot override these legal obligations.
- Right to Data Portability: You may request your personal data in a structured, commonly used, and machine-readable format where technically feasible, for the purpose of transmitting it to another controller.
- Right to Object: You may object to processing based on phjoly's legitimate interests — including direct marketing and certain analytics activities. Objections to processing based on legal obligations cannot override those obligations.
- Right to File a Complaint: If you believe phjoly has violated your data privacy rights, you may file a complaint with the National Privacy Commission (NPC) of the Philippines through official government channels.
To exercise any of the rights above, contact phjoly's Data Protection Officer at [email protected] with the subject line "Data Privacy Request". All requests must be accompanied by sufficient information to verify your identity as the Account holder before phjoly can act on them.
11. Children & Minors
phjoly's platform is strictly restricted to individuals who are 21 years of age or older, in accordance with Philippine regulations governing online gaming. phjoly does not knowingly collect personal data from individuals under the age of 21.
Age verification is a mandatory step in phjoly's registration and KYC process. Any Account found to belong to a player under 21 years of age will be closed immediately. All funds held in the Account at the time of closure will be returned to the originating payment method after deduction of any winnings, which will be forfeited. All personal data collected from an underage Account will be deleted from phjoly's systems upon discovery, except where retention is required by law.
If you have reason to believe that a minor has registered on phjoly or that personal data of a minor has been collected, please contact phjoly's support team immediately at [email protected] so that the matter can be investigated and resolved without delay.
12. Cross-Border Data Transfers
phjoly's primary data processing infrastructure is located within the Philippines. However, certain service providers — including game content providers, identity verification platforms, and cloud infrastructure partners — may process data in data centres located outside the Philippines.
Where personal data is transferred outside the Philippines, phjoly ensures that adequate safeguards are in place, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those required under the Philippine Data Privacy Act. phjoly does not transfer personal data to countries or organisations that the National Privacy Commission has identified as providing inadequate data protection without applying appropriate safeguards.
13. Updates to This Privacy Policy
phjoly reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law, or changes in the services phjoly provides. The "Last Updated" date at the top of this document will be revised each time a material change is made.
For material changes — those that significantly affect your rights or the way phjoly processes your personal data — phjoly will notify you via the email address registered to your Account and/or via an in-platform notification upon your next phjoly Login, providing at least fourteen (14) days' advance notice before the revised policy takes effect. Continued use of the phjoly platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms.
Prior versions of this Privacy Policy are retained by phjoly for regulatory compliance and are available upon request by contacting the Data Protection Officer.
14. Contact & Data Protection Officer
phjoly has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, please contact the DPO through the following channels:
- Email: [email protected] — use subject line "Data Privacy Request" for all DPA-related correspondence. Response time is within five (5) business days for standard queries and within fifteen (15) business days for formal access or correction requests.
- Live Chat: Available 24/7 on the phjoly platform. For initial data privacy queries and to request escalation to the DPO, live chat is the fastest first point of contact.
If you are not satisfied with phjoly's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through official Philippine government channels. The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.
Regulatory Reference: Philippines Data Privacy Act of 2012 — Republic Act No. 10173 and its Implementing Rules and Regulations. Anti-Money Laundering Act — Republic Act No. 9160, as amended. All phjoly data processing activities are carried out in accordance with these laws and applicable PAGCOR regulations.
How phjoly Protects Filipino Players' Privacy
Behind the legal language, these six commitments define how phjoly handles your personal data every day.
AES-256 Data Encryption
All sensitive data stored on phjoly's servers — including your KYC documents, government ID numbers, and financial account details — is encrypted at rest using AES-256, the same standard used by financial institutions and government agencies. Your data is unreadable to anyone without the decryption key.
Strict Need-to-Know Access
Not everyone at phjoly can see your personal data. Access is restricted strictly to team members whose role requires it — a customer support agent helping you with a deposit issue sees what's necessary for that ticket, and nothing more. All access is logged and reviewed by phjoly's compliance team.
Zero Data Selling Policy
phjoly has never sold player data and will never sell player data — to data brokers, advertisers, third-party marketers, or anyone else. Your personal information exists on phjoly to make your gaming experience work, not to generate a secondary revenue stream from your identity.
Full DPA Compliance
phjoly processes all personal data in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012. We have appointed a registered Data Protection Officer, maintain a data processing register, and are prepared for NPC audits at any time. Filipino players' rights under the DPA are fully enforceable on phjoly.
72-Hour Breach Notification
In the unlikely event of a personal data breach, phjoly is committed to notifying the National Privacy Commission within 72 hours of discovery — and notifying affected players without undue delay. You will never find out about a data incident from the news before phjoly has told you directly.
You Control Your Consent
Marketing communications from phjoly require your explicit opt-in consent. You can withdraw that consent at any time via Account Settings or by contacting support — no awkward unsubscribe loops, no re-subscription dark patterns. One action removes you from all phjoly marketing communications immediately.
Your Privacy is Protected. Now Play.
You know how phjoly handles your data. Now explore everything the platform has to offer — from live PBA betting to Pearls of Bingo — backed by full Philippine DPA compliance.