phjoy6 Privacy Policy

phjoy6 ("phjoy6", "we", "us", or "our") is a PAGCOR-regulated online casino and sportsbook operating at phjoy6.net and serving players in the Republic of the Philippines. phjoy6 is the data controller responsible for the personal data collected through the phjoy6 platform.

This Privacy Policy applies to all personal data collected from individuals who visit, register on, or interact with the phjoy6 website, mobile platform, customer support channels, and any other services offered under the phjoy6 brand. It does not apply to third-party websites or services that may be linked to or from our platform — those third parties operate their own privacy policies, and we encourage you to review them separately.

phjoy6 collects personal data that is necessary to provide you with a safe, lawful, and functional online gaming experience. The categories of personal data we collect include:

2.1 Identity & Registration Data. Your full legal name, date of birth, nationality, and a copy of a valid Philippine government-issued identification document (e.g., Philippine passport, SSS Unified Multi-Purpose ID, PhilSys National ID, or driver's licence). This data is collected at registration and during KYC verification.

2.2 Contact Data. Your email address, Philippine mobile number, and residential address (barangay, city or municipality, province, and ZIP code). This information is used to communicate with you about your account, process transactions, and deliver customer support.

2.3 Financial Data. Your GCash number, PayMaya account details, or bank account information (BPI, BDO, Metrobank, UnionBank, or other participating InstaPay/PESONet banks) as provided during deposit or withdrawal. phjoy6 does not store full card or bank account numbers on its servers — payment data is tokenised and processed through accredited payment service providers.

2.4 Account & Gaming Data. Your chosen username, account balance, transaction history, deposit and withdrawal records, game play history, session durations, wager amounts, win/loss records, bonus activity, and responsible gaming limit settings.

2.5 Technical & Device Data. Your IP address, browser type and version, operating system, device type and identifiers, screen resolution, referring URLs, and pages visited on phjoy6.net. This data is collected automatically when you access the platform.

2.6 Communications Data. Records of your interactions with the phjoy6 customer support team, including live chat transcripts, email correspondence, and any documents or screenshots submitted in connection with a support request or formal complaint.

2.7 Verification & Compliance Data. Results of identity verification checks, politically exposed person (PEP) screening, sanctions list checks, and any documentation submitted in connection with AML or PAGCOR compliance requirements.

phjoy6 collects your personal data through the following channels:

• Directly from you — when you register for a phjoy6 account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse phjoy6.net or use the phjoy6 platform (see Section 7 for full details on cookies);
• From third-party identity verification providers — who perform KYC checks, document verification, liveness detection, and PEP/sanctions screening on phjoy6's behalf;
• From payment service providers — who confirm transaction status and provide payment reference data in connection with your deposits and withdrawals;
• From public sources and regulatory databases — including PAGCOR-mandated player registries, AMLC watchlists, and publicly available court or enforcement records, where required for compliance purposes.

Under the Philippine Data Privacy Act of 2012 (RA 10173), phjoy6 relies on the following lawful bases to process your personal data:

• Performance of a contract — processing your registration data, account information, and financial data is necessary to enter into and perform our agreement with you as a phjoy6 account holder;
• Compliance with a legal obligation — collecting and retaining KYC, AML, and identity verification data is required by PAGCOR licensing conditions and the Anti-Money Laundering Act (RA 9160, as amended);
• Legitimate interests — processing technical and device data to maintain platform security, detect fraud, prevent multi-accounting, and improve our services, where these interests are not overridden by your data protection rights;
• Consent — sending marketing communications and using non-essential cookies, where you have provided express, informed, and freely given consent. You may withdraw your consent at any time without affecting the lawfulness of prior processing.

phjoy6 uses your personal data for the following purposes:

• Account creation and management — setting up your player account, authenticating your identity at login, and maintaining accurate account records;
• KYC and identity verification — verifying that you meet the eligibility requirements to use phjoy6, including the minimum age of 21 and the geographic restriction to Philippine residents;
• Processing deposits and withdrawals — facilitating GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, InstaPay, and PESONet transactions securely and in Philippine Peso (PHP);
• Delivering gaming services — providing access to slots, live casino tables, bingo, Teen Patti Joker, Playtech Live games, and sports betting markets;
• Customer support — responding to your enquiries, processing formal complaints, and resolving disputes through our internal complaints process or via PAGCOR escalation;
• Responsible gaming compliance — administering deposit limits, session time limits, loss limits, reality checks, and self-exclusion requests in accordance with PAGCOR's Responsible Gaming Framework;
• AML and fraud prevention — monitoring transactions for suspicious activity, fulfilling mandatory reporting obligations to the Anti-Money Laundering Council (AMLC), and investigating potential fraud or collusion;
• PAGCOR regulatory compliance — maintaining records required under our operating licence and providing data to PAGCOR inspectors or other regulatory authorities as legally required;
• Platform security and integrity — detecting and preventing bot activity, multi-accounting, bonus abuse, and other forms of prohibited conduct described in our Terms & Conditions;
• Marketing communications — sending bonus offers, game updates, and promotions to players who have opted in, and personalising on-platform promotional banners based on your gaming preferences where you have consented;
• Analytics and platform improvement — analysing aggregated, anonymised usage data to understand how players interact with phjoy6 and improve the user experience.

phjoy6 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers — GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and affiliated InstaPay/PESONet network operators, for the purpose of processing your financial transactions;
• Identity verification and KYC providers — accredited third-party providers that perform document verification, liveness checks, and PEP/sanctions screening on phjoy6's behalf;
• Game software providers — including Playtech and other certified game developers whose titles are available on the phjoy6 platform, to the extent required to deliver game services and resolve disputes;
• PAGCOR and Philippine regulatory authorities — as required by our operating licence, including for player verification, compliance audits, and regulatory inspections;
• Anti-Money Laundering Council (AMLC) — mandatory reporting of covered and suspicious transactions as required under the Philippine AMLA;
• Law enforcement and courts — in response to a valid legal process (e.g., subpoena, court order) or where disclosure is necessary to protect the rights, property, or safety of phjoy6, its players, or the public;
• IT and cloud infrastructure providers — that host phjoy6's servers and databases, subject to binding data processing agreements that require them to maintain data security standards equivalent to those in this Policy.

All third-party service providers who process personal data on phjoy6's behalf are required to do so only under our written instruction and in accordance with the data security obligations of the Philippine DPA.

phjoy6 uses cookies and similar tracking technologies (collectively "cookies") on phjoy6.net to ensure the platform functions correctly, improve your experience, and — where you have consented — to deliver relevant promotions.

7.1 Strictly Necessary Cookies. These cookies are essential for the phjoy6 platform to operate. They enable core functions such as logging in to your account, maintaining your active session, storing your responsible gaming settings, and processing transactions. These cookies cannot be disabled without impairing the functionality of the platform and do not require your consent under the DPA.

7.2 Analytics Cookies. With your consent, phjoy6 uses analytics cookies to understand how players navigate phjoy6.net — which pages are visited most, how long players spend on each section, and where technical errors occur. This data is collected in aggregated, anonymised form and is used solely to improve the platform.

7.3 Preference Cookies. These cookies remember your platform preferences, such as your selected language, display settings, and last visited game categories, so that your experience feels personalised on each visit.

7.4 Marketing Cookies. With your explicit consent, phjoy6 may use cookies to track which promotional banners or bonus offers you have viewed and interacted with, in order to avoid showing you the same promotional content repeatedly and to tailor on-platform promotions to your gaming activity.

7.5 Managing Cookies. You can manage your cookie preferences at any time through the cookie settings panel available at the bottom of phjoy6.net, or by adjusting the cookie settings in your browser. Please note that disabling certain categories of cookies may affect the functionality of the phjoy6 platform.

phjoy6 retains your personal data only for as long as is necessary for the purposes set out in this Policy, or as required by applicable Philippine law. Our standard retention periods are:

• Account and KYC data — retained for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and Philippine AML regulations;
• Transaction and financial records — retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA reporting obligations;
• Gaming and session logs — retained for three (3) years from the date of each session to support dispute resolution and regulatory audit requirements;
• Customer support correspondence — retained for three (3) years from the date of the last interaction, or for five (5) years where the correspondence relates to a formal complaint or regulatory matter;
• Marketing consent records — retained for as long as you hold a phjoy6 account and for three (3) years after your account is closed, to demonstrate compliance with DPA consent requirements;
• Technical and device logs — retained for a rolling period of twelve (12) months, after which they are automatically deleted or anonymised.

When personal data is no longer required, phjoy6 will securely delete or anonymise it in accordance with NPC guidelines on data disposal. Where anonymisation is not technically feasible, the data will be rendered permanently inaccessible.

phjoy6 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, and disclosure. Our security measures include:

• TLS encryption on all data in transit between your device and phjoy6 servers;
• AES-256 encryption for sensitive data at rest, including personal identification documents and financial data;
• Password hashing using industry-standard one-way hashing algorithms — phjoy6 does not store plaintext passwords;
• Payment tokenisation — GCash, PayMaya, and bank account credentials are tokenised and never stored in full on phjoy6 servers;
• Role-based access controls — phjoy6 staff access to player data is limited strictly to what is necessary for each employee's role, with all access logged and audited;
• Regular security assessments — including penetration testing, vulnerability scanning, and third-party security audits conducted on at least an annual basis;
• Incident response plan — phjoy6 maintains a documented personal data breach response plan. In the event of a breach that is likely to result in risk to your rights and freedoms, phjoy6 will notify the NPC within 72 hours of becoming aware and will notify affected players without undue delay as required by the DPA.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjoy6:

phjoy6 will respond to all data subject requests within fifteen (15) business days of receipt. Complex requests may require an extended period, in which case we will notify you of the expected timeline. We may ask you to verify your identity before fulfilling any request involving access to or deletion of personal data.

phjoy6 primarily stores and processes personal data within the Republic of the Philippines. In some cases, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, when using internationally operated cloud infrastructure, third-party game software platforms, or KYC verification providers.

When personal data is transferred outside the Philippines, phjoy6 ensures that appropriate safeguards are in place to protect your data in accordance with the standards of the Philippine DPA. These safeguards include contractual data processing agreements that impose data security and confidentiality obligations equivalent to those required under Philippine law, and — where available — transfers only to countries or organisations recognised by the NPC as providing adequate levels of data protection.

You may request information about the specific safeguards in place for any cross-border transfer of your data by contacting our Data Protection Officer at the details provided in Section 14.

The phjoy6 platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR's minimum age requirement for online casino and sports betting services in the Philippines. phjoy6 does not knowingly collect personal data from any person under the age of 21.

As part of our registration and KYC process, phjoy6 verifies the date of birth of all new account holders. Any account found — at any point — to be operated by a person under 21 years of age will be immediately suspended and referred to phjoy6's compliance team. All data associated with underage accounts will be handled in accordance with PAGCOR's guidelines on underage gambling and the DPA's special provisions on the processing of personal data of minors.

If you are a parent or guardian and believe that a minor in your care has registered for a phjoy6 account, please contact our support team immediately at [email protected]. We will investigate and take appropriate action without delay.

phjoy6 may update this Privacy Policy from time to time to reflect changes in our data processing practices, updates to Philippine data protection law or NPC regulations, changes to our PAGCOR licensing conditions, or improvements to the phjoy6 platform.

When material changes are made to this Policy, phjoy6 will notify registered players via the email address on file and/or through a prominent notice on phjoy6.net at least seven (7) days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the phjoy6 platform after the effective date of any revised Privacy Policy constitutes your acknowledgement of the changes. If you do not agree with the revised Policy, please stop using the phjoy6 platform and contact our support team to close your account.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or need to report a potential data privacy concern, please contact the phjoy6 Data Protection Officer (DPO):

• Email: [email protected] — please use the subject line "Privacy / Data Subject Request"
• Response Time: phjoy6 will acknowledge all privacy-related enquiries within 48 hours and provide a substantive response within 15 business days
• Escalation: If you are not satisfied with our response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official government channels