Privacy Policy

1. Introduction

phonejoy ("phonejoy," "we," "us," "our") operates the online gaming platform accessible at phonejoy.net. This Privacy Policy ("Policy") describes how phonejoy collects, processes, stores, and protects personal data relating to users ("you," "your," "Player") of the phonejoy platform and website.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as well as all other applicable data protection laws and regulations of the Republic of the Philippines. This Policy forms part of phonejoy's overall agreement with users and should be read alongside our Terms & Conditions and Responsible Gaming Policy.

By registering for or using the phonejoy platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

2. Data Controller

phonejoy is the data controller responsible for the personal data collected through the phonejoy platform. phonejoy operates within the regulatory framework governing online gaming in the Philippines, including guidelines established by the Philippine Amusement and Gaming Corporation (PAGCOR).

For all privacy-related inquiries, requests, or complaints, you may contact phonejoy's designated Data Protection Officer at the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

phonejoy collects the following categories of personal data in connection with the provision of its online gaming services:

4. How We Collect Your Data

phonejoy collects personal data through the following methods:

• Direct Submission: Information you provide directly when registering for a phonejoy account, completing KYC verification, making a deposit or withdrawal, contacting support, or responding to surveys;
• Automated Collection: Technical data automatically collected when you access the phonejoy platform, including through cookies, web beacons, and server logs;
• Third-Party Sources: Identity verification data from document verification service providers; fraud screening data from anti-fraud services; payment data from GCash, PayMaya, and banking partners in the course of processing transactions;
• Regulatory Sources: Data provided by or required by PAGCOR or other Philippine regulatory authorities in connection with phonejoy's compliance obligations.

5. How We Use Your Personal Data

phonejoy uses your personal data for the following purposes:

1. Account Management: To create, maintain, and administer your phonejoy account, verify your identity, and provide access to platform features;
2. Age Verification: To verify that you are at least 21 years of age, as required by PAGCOR regulations for online gaming in the Philippines;
3. Payment Processing: To process deposits and withdrawals via GCash, PayMaya, and supported Philippine banking channels;
4. Regulatory Compliance: To fulfill our obligations under the Data Privacy Act, Anti-Money Laundering Act, and PAGCOR licensing requirements, including KYC, transaction reporting, and record-keeping;
5. Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other prohibited conduct;
6. Responsible Gaming: To monitor gaming patterns for signs of problem gambling and to administer self-exclusion, deposit limits, and cooling-off requests;
7. Customer Support: To respond to your inquiries, resolve complaints, and provide technical assistance;
8. Service Improvement: To analyze usage patterns and improve the performance, functionality, and content of the phonejoy platform;
9. Marketing Communications: Where you have provided consent, to send promotional offers, bonus notifications, and updates about new games and features at phonejoy. You may opt out of marketing communications at any time.

6. Legal Basis for Processing

phonejoy processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing necessary for the performance of our agreement with you (account provision, payment processing, game delivery);
• Legal Obligation: Processing required to comply with applicable Philippine law, including AML obligations, KYC requirements, and PAGCOR regulatory reporting;
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given specific, informed consent.

7. Data Sharing and Disclosure

phonejoy does not sell, rent, or trade your personal data to third-party marketers or data brokers. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Identity Verification Providers: Third-party KYC and document verification services used to confirm the identity and age of phonejoy users;
• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors necessary to facilitate your financial transactions;
• Fraud Prevention Services: Anti-fraud and risk screening providers who assist phonejoy in detecting and preventing unauthorized account activity;
• Game Providers: Third-party game studios and live dealer providers whose games are offered on the phonejoy platform, to the extent required for game delivery and fairness certification;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where required by law or regulatory order;
• Professional Advisors: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations;
• Business Transfers: In connection with a merger, acquisition, or sale of phonejoy's business assets, where personal data forms part of the transferred assets.

8. Data Retention

phonejoy retains personal data for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations.

• Active Accounts: Personal data is retained for the full duration of your phonejoy account relationship;
• Closed Accounts: Following account closure, phonejoy retains identity, financial, and transaction records for a minimum of five (5) years to comply with AML regulations and PAGCOR requirements;
• Support Records: Customer support communications are retained for three (3) years;
• Marketing Data: Retained until you withdraw consent or for up to two (2) years following your last interaction with phonejoy marketing communications.

After applicable retention periods expire, personal data is securely deleted or anonymized in accordance with phonejoy's data lifecycle management procedures.

9. Cookies and Tracking Technologies

phonejoy uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit the phonejoy website. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — maintaining your login session, processing transactions, and enabling core security features. These cannot be disabled;
• Functional Cookies: Remember your preferences such as language settings and display options to provide a personalized experience;
• Analytics Cookies: Collect aggregated, anonymized data about how users interact with the phonejoy platform, used to improve performance and usability;
• Security Cookies: Support fraud detection and prevention, including recognizing trusted devices for OTP bypass purposes.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the phonejoy platform.

10. Data Security Measures

phonejoy implements technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the phonejoy platform;
• Encryption of sensitive personal data at rest within phonejoy's systems;
• Access controls limiting personal data access to authorized phonejoy personnel on a need-to-know basis;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Continuous fraud monitoring and anomaly detection systems;
• Regular security assessments and penetration testing of phonejoy infrastructure;
• Contractual data protection obligations binding on all third-party service providers who process personal data on phonejoy's behalf.

While phonejoy maintains these safeguards, no security system is impenetrable. You are responsible for maintaining the security of your own account credentials and for notifying phonejoy immediately if you suspect unauthorized access to your account.

11. Your Data Protection Rights

Under the Data Privacy Act of 2012 and applicable Philippine data protection regulations, you have the following rights regarding your personal data held by phonejoy:

• Right to be Informed: To receive clear information about how your data is collected and used, as provided in this Privacy Policy;
• Right of Access: To request a copy of the personal data phonejoy holds about you;
• Right to Rectification: To request correction of inaccurate or incomplete personal data;
• Right to Erasure: To request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to phonejoy's legal retention obligations;
• Right to Object: To object to processing based on legitimate interests, including direct marketing;
• Right to Data Portability: To receive your personal data in a structured, commonly used format where technically feasible;
• Right to Lodge a Complaint: To file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact phonejoy's Data Protection Officer at the details provided in Section 14. phonejoy will respond to verifiable data subject requests within thirty (30) days of receipt.

12. Children's Privacy

The phonejoy platform is strictly for adults aged 21 years or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. phonejoy does not knowingly collect personal data from individuals under the age of 21.

If phonejoy becomes aware that personal data has been collected from an individual under the age of 21, such data will be deleted and the associated account will be suspended immediately. If you believe a minor has created a phonejoy account, please notify us immediately at the contact details in Section 14.

13. Changes to This Privacy Policy

phonejoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered users via the contact information associated with their phonejoy account, or by prominent notice on the phonejoy platform, at least fourteen (14) days before the changes take effect.

Your continued use of the phonejoy platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not accept the changes, you must cease using the platform and may request account closure.

14. Contact — Data Protection Officer

For all privacy-related inquiries, data subject requests, or complaints regarding phonejoy's handling of your personal data, please contact our Data Protection Officer:

phonejoy is committed to resolving privacy concerns directly. If your concern is not resolved to your satisfaction, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).