Privacy Policy

1. Introduction

phejoy operates as a PAGCOR-licensed online casino and sports betting platform serving players in the Philippines. As part of delivering our services, we collect and process personal information about our players. phejoy is the data controller for all personal data processed through the phejoy platform.

This Privacy Policy has been prepared in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the regulations of the National Privacy Commission (NPC). It also reflects phejoy's obligations under PAGCOR's licensing framework, which includes specific requirements on player data handling, identity verification, and anti-money laundering reporting.

We encourage you to read this Privacy Policy carefully. If you have questions about how phejoy handles your personal data, you may contact our Data Protection Officer at [email protected]. Our support team is available 24/7 and our average response time is three to five minutes via live chat, or within 24 hours for email enquiries.

2. Data We Collect

phejoy collects personal data from you in several ways: directly when you register and use our platform, automatically through your device and browsing behaviour, and from third-party verification providers during our KYC process.

phejoy does not collect sensitive personal information such as biometric data, health records, or political affiliations beyond what is strictly required for identity verification and AML compliance. We do not collect data from minors. Our platform is strictly for players aged 21 and above.

3. How We Use Your Data

phejoy uses the personal data we collect for the following purposes:

• Account Registration and Management: To create, verify, and maintain your phejoy account, including processing KYC documents to confirm your identity and eligibility.
• Payment Processing: To facilitate deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank, and to maintain accurate transaction records in compliance with PAGCOR and AMLC requirements.
• Game Delivery and Fairness: To provide access to our slots, live casino, bingo, fishing games, and sports betting products and to maintain game integrity and accurate accounting of bets and winnings.
• Customer Support: To respond to your queries, resolve disputes, investigate complaints, and provide personalised assistance through our 24/7 Filipino support team.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent transactions, cheating, money laundering, and other prohibited activities on the phejoy platform.
• Regulatory Compliance: To meet our obligations under PAGCOR regulations, the Anti-Money Laundering Act, and the Philippine Data Privacy Act, including mandatory reporting to the AMLC where applicable.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to administer self-exclusion, deposit limit, and cooling-off requests as described on our Responsible Gaming page.
• Marketing Communications: Where you have provided explicit consent, to send you personalised promotions, bonus offers, and news about phejoy games and features. You may withdraw this consent at any time from your account settings.
• Platform Improvement: To analyse aggregated, anonymised usage data that helps us improve the phejoy user experience, particularly for mobile users in Manila, Cebu, Davao, Quezon City, and Makati.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, phejoy must have a lawful basis for processing your personal data. The legal bases we rely on are:

• Performance of a Contract: Processing that is necessary to fulfil our contractual obligations to you as a registered phejoy player — including account management, game delivery, and payment processing.
• Compliance with a Legal Obligation: Processing that is required by PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws — including KYC verification, suspicious transaction reporting, and mandatory data retention.
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and improving our services — where these interests are not overridden by your data protection rights.
• Consent: Processing for direct marketing communications, where you have explicitly opted in. This consent is freely given, specific, and may be withdrawn at any time without affecting the legality of prior processing.

5. Sharing Your Data

phejoy does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share your data only in the following circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum data necessary to process your deposits and withdrawals. These processors are bound by their own privacy policies and applicable Philippine financial regulations.
• KYC Verification Providers: phejoy uses a licensed third-party identity verification provider to conduct KYC checks. This provider processes your identity documents solely for verification purposes and is contractually prohibited from using your data for any other purpose.
• Regulatory Authorities: PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine government bodies may receive data from phejoy where we are legally required to report or disclose information.
• Technology and Hosting Partners: Our platform infrastructure providers and game software licensors may process certain technical and gaming data as part of delivering our services. All such partners are bound by data processing agreements and may not use your data independently.
• Legal Proceedings: phejoy may disclose data to courts, law enforcement, or legal advisers where required to do so by law or to protect the rights, property, or safety of phejoy, its players, or the public.

6. Cookies and Tracking

phejoy uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your session and preferences, and to analyse how players use our website and mobile interface.

The types of cookies used by phejoy include:

• Essential Cookies: Necessary for the platform to function. These cannot be disabled as they are required for login sessions, security tokens, and core game functionality.
• Analytics Cookies: Used to collect anonymised data about how players navigate phejoy, which pages are visited most, and where technical errors occur. This data helps us improve the platform experience, especially for mobile users on Philippine networks.
• Preference Cookies: Store your language, region, and interface preferences so you do not need to re-enter them on each visit.
• Marketing Cookies: Used only where you have consented to receive personalised promotions. These cookies help phejoy deliver relevant bonus offers and game recommendations based on your activity.

You may manage your cookie preferences at any time through your browser settings. Note that disabling essential cookies may prevent certain phejoy features from working correctly.

7. Data Security

phejoy implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phejoy's servers.
• Encryption of sensitive data fields (including payment information and government ID numbers) at rest in our database systems.
• Role-based access controls ensuring that phejoy staff can only access the player data necessary for their specific function.
• Regular penetration testing and vulnerability assessments conducted by independent security professionals.
• 24/7 security monitoring from phejoy's Manila headquarters, with automated alerts for suspicious access patterns.
• Strict internal data handling policies and mandatory privacy training for all phejoy employees who handle player data.

In the event of a personal data breach that is likely to pose a risk to your rights and freedoms, phejoy will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will inform affected players without undue delay in accordance with NPC guidelines.

8. Data Retention

phejoy retains your personal data for as long as your account is active and for a minimum of five years following permanent account closure. This retention period reflects phejoy's obligations under PAGCOR's licensing conditions and the Anti-Money Laundering Act, which require online gaming operators to maintain complete player records for regulatory audit and law enforcement purposes.

Specific retention periods by data category are as follows:

• Identity and KYC Data: Retained for 5 years after account closure.
• Financial Transaction Records: Retained for 5 years after the date of each transaction, per AMLC requirements.
• Gaming Activity Logs: Retained for 3 years from the date of each session.
• Customer Support Communications: Retained for 2 years from the date of the interaction.
• Marketing Consent Records: Retained for the duration of the consent and for 1 year after withdrawal of consent, to demonstrate compliance.

After the applicable retention period expires, phejoy will securely delete or irreversibly anonymise your personal data. Anonymised, aggregated data (which cannot be traced back to you as an individual) may be retained indefinitely for statistical and platform improvement purposes.

9. Your Rights Under the Data Privacy Act

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phejoy:

To exercise any of these rights, please contact phejoy's Data Protection Officer at [email protected]. We will respond to all verified rights requests within 15 business days, in line with NPC guidelines. We may need to verify your identity before processing a rights request to ensure we are responding to the genuine account holder.

10. Children and Minors

phejoy's platform is strictly for individuals aged 21 years and above, in accordance with Philippine gambling laws and PAGCOR regulations. phejoy does not knowingly collect personal data from individuals under the age of 21.

If phejoy becomes aware that it has inadvertently collected data from a person under 21, we will immediately close the associated account, forfeit any balance, and permanently delete all related personal data. If you believe a minor has registered on phejoy, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

phejoy may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When we make changes, we will update the effective date at the top of this document.

For material changes that significantly affect how we process your personal data, phejoy will notify registered players via their registered email address or through an in-platform announcement at least seven days before the changes take effect. Your continued use of phejoy following the effective date of any update constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically. The most current version is always available at phejoy.net/privacy-policy.

12. Contact the Data Protection Officer

If you have any questions, concerns, or complaints about this Privacy Policy or about how phejoy processes your personal data, please contact our designated Data Protection Officer:

• Support Email: [email protected] (plain text — not a link)
• Live Chat: Available 24/7 via the phejoy platform — average response 3–5 minutes
• Headquarters: Manila, Philippines (PHT — UTC+8)

If you are not satisfied with phejoy's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about the NPC and how to file a complaint is available on the NPC's official government website.