Your privacy is a priority at phjoint. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have as a Filipino player under applicable Philippine data protection law.
A summary of the six core commitments phjoint makes regarding your privacy — before you read the full policy below.
phjoint collects only the personal data required to provide, secure, and improve the Platform — registration details, identity verification documents, transaction records, and gameplay data. We do not collect data we have no legitimate use for.
Data MinimisationAll personal data held by phjoint is protected using industry-standard security measures including TLS 1.3 encryption in transit, AES-256 encryption at rest, access controls, and regular third-party security audits. Your GCash-linked data is handled via certified secure payment gateways.
SSL + AES-256phjoint shares your data only with regulated payment processors (GCash, PayMaya, BPI, BDO), PAGCOR and other regulatory bodies as legally required, identity verification providers, and cloud infrastructure partners — all under strict data processing agreements.
Controlled SharingUnder Republic Act No. 10173 (Data Privacy Act of 2012), you have the right to access, correct, delete, and object to the processing of your personal data. phjoint provides clear channels to exercise these rights without unreasonable barriers.
RA 10173 Rightsphjoint retains personal data only for as long as necessary to provide the Platform, comply with legal obligations (including AMLA record-keeping requirements), and resolve disputes. Inactive account data is subject to our data retention and deletion schedule.
Retention Policyphjoint will only send you promotional communications if you have consented to receive them. You may withdraw marketing consent at any time from your account notification settings. Opting out of marketing does not affect your ability to use the Platform.
Opt-Out Anytimephjoint ("phjoint," "we," "us," "our") is committed to protecting the privacy and personal information of all users of the phjoint online gaming Platform, accessible at phjoint.app (the "Platform"). This Privacy Policy describes how phjoint collects, uses, stores, discloses, and protects your personal data when you access and use the Platform — including when you register a phjoint account, log in, make deposits or withdrawals via GCash or other payment channels, participate in games, or contact our support team.
This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012, and its implementing rules and regulations as administered by the National Privacy Commission (NPC) of the Philippines. It supplements and should be read together with the phjoint Terms & Conditions.
By accessing the Platform or creating a phjoint account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not access or use the Platform.
For the purposes of Republic Act No. 10173 and applicable data protection law, phjoint is the personal information controller in respect of the personal data collected through the Platform. phjoint is responsible for determining the purposes and means of processing your personal data.
phjoint has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. You may contact the DPO using the contact details set out in Section 14 of this Privacy Policy.
When you register for a phjoint account or use the Platform, we collect the following categories of personal data that you provide directly:
When you access the Platform, we automatically collect certain technical and behavioural data, including:
phjoint may receive personal data about you from third parties in the following circumstances: identity verification service providers who confirm the authenticity of your identification documents; payment processors including GCash and PayMaya who confirm transaction status; and PAGCOR or other regulatory bodies in the context of licensing compliance, player protection, or self-exclusion register checks.
| Data Category | Examples | Source |
|---|---|---|
| identity_data | Full name, DOB, government ID | You · KYC provider |
| contact_data | Mobile number, email, address | You |
| financial_data | GCash number, transactions, balance | You · GCash · Banks |
| auth_data | Username, hashed password, OTP logs | You · Platform |
| device_data | IP address, browser, OS, device ID | Automatic collection |
| gameplay_data | Games played, bets, session duration | Automatic collection |
phjoint uses the personal data we collect for the following purposes:
Under the Data Privacy Act of 2012, phjoint processes your personal data on the following legal bases:
phjoint does not sell your personal data to third parties. We share your personal data only in the following circumstances and only to the extent necessary:
phjoint uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse usage patterns. The following categories of cookies are used:
You may manage your cookie preferences through your browser settings or through the cookie preference tool available on the Platform. Note that disabling strictly necessary cookies will impair your ability to use the phjoint Platform, including the phjoint login page.
phjoint implements technical and organisational security measures appropriate to the risk presented by the processing of your personal data. These include:
Notwithstanding these measures, no data transmission over the internet is entirely secure. phjoint cannot guarantee absolute security, and you assume certain inherent risks in transmitting personal data over the internet. In the event of a personal data breach affecting your rights and freedoms, phjoint will notify you and the NPC in accordance with applicable legal requirements.
phjoint retains your personal data for as long as necessary to fulfil the purposes described in this Privacy Policy and to comply with applicable legal obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with phjoint's data disposal procedures.
Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in relation to your personal data held by phjoint:
To exercise any of these rights, please contact the phjoint Data Protection Officer using the details in Section 14. phjoint will respond to verified requests within thirty (30) days.
The phjoint Platform is strictly intended for adults aged 21 years and above. phjoint does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the registration process, and accounts found to belong to persons under 21 are permanently closed.
If you are a parent or guardian and believe that a minor has provided personal data to phjoint without your consent, please contact us immediately via the contact details in Section 14 so that appropriate action can be taken, including deletion of the minor's data.
Some of phjoint's service providers and cloud infrastructure partners may be located outside the Philippines. Where phjoint transfers your personal data to jurisdictions outside the Philippines, we ensure that such transfers are conducted in compliance with the Data Privacy Act, including by implementing appropriate safeguards such as standard contractual clauses or ensuring that the recipient jurisdiction provides an adequate level of data protection.
Game software providers (including those providing live dealer content streamed from studios outside the Philippines) may receive limited technical data as described in Section 6. These providers are contractually obligated to process such data only for the specified purpose and in accordance with applicable privacy law.
phjoint reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, phjoint will notify registered players via their registered email address and/or through a prominent notice on the Platform prior to the changes taking effect.
The "Effective Date" at the top of this Privacy Policy indicates when it was last updated. Your continued use of the phjoint Platform following notification of changes constitutes your acceptance of the revised Privacy Policy. If you do not agree with any changes, you may close your account in accordance with the phjoint Terms & Conditions.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phjoint, you may contact our Data Protection Officer through the following channels:
When contacting us regarding a data privacy request, please clearly identify yourself (so we can verify your identity), state the nature of your request, and provide any relevant reference information (such as your registered mobile number or email address). We will respond within thirty (30) calendar days.
If you are not satisfied with phjoint's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which oversees enforcement of the Data Privacy Act of 2012.
phjoint protects your personal data with industry-leading security, processes GCash payments through certified secure gateways, and complies fully with Philippine data protection law. Join thousands of Filipino players who trust phjoint every day.
21+ only. Gamble responsibly. PAGCOR-regulated platform. RA 10173 compliant.