PHJoin Privacy Policy for Users in the Philippines

Scope and Privacy Commitment

This PHJoin Privacy Policy explains the handling of personal data connected with phjoin777.ph, its account features, and related services. It is written for users in the Philippines and should be read before registration, verification, payment, or support contact.

For this policy, “PHJoin”, “we”, and “our” refer to the entity responsible for the processing described on this website. If an account screen, payment page, or game identifies another operator or personal information controller, its own privacy notice may also apply. That notice should identify the controller, purposes, recipients, and contact details.

Processing should follow applicable Philippine privacy requirements, including the principles of transparency, legitimate purpose, and proportionality under Republic Act No. 10173, or the Data Privacy Act of 2012. Consent is requested where it is the appropriate legal basis; using the website does not replace a consent choice that the law requires to be specific and informed.

Your Privacy Rights and Choices

Rights of Data Subjects

Subject to the Data Privacy Act, its implementing rules, and lawful limitations, a user may have the following rights:

1. Right to be informed: know whether personal data is being, has been, or will be processed.
2. Right of access: request information about personal data and its processing.
3. Right to object: object to processing in circumstances recognised by law.
4. Right to rectify: correct inaccurate or incomplete personal data.
5. Right to erasure or blocking: request removal, blocking, or destruction when legal conditions are met.
6. Right to data portability: receive eligible electronically processed data in a commonly used structured format.
7. Right to damages: seek compensation when legally available for a privacy violation.
8. Right to file a complaint: bring an eligible concern to the National Privacy Commission.

How to Submit a Privacy Request

Email [email protected] or [email protected] with the right you wish to exercise and enough information to locate the relevant account. PHJoin may ask for proportionate identity verification before disclosing, correcting, exporting, or deleting data. The response period and any extension depend on the request and applicable law.

Marketing Preferences

Use the unsubscribe control in an email or the communication settings available in your account. You may also ask support to stop optional marketing. A limited suppression record may be retained so that the opt-out can be respected. Transactional, security, legal, or service messages may still be sent when necessary.

Personal Data PHJoin May Collect

Account, Identity, and Payment Data

Depending on the service used and the information requested on screen, PHJoin may process:

1. Profile details: legal name, date and place of birth, nationality, address, occupation, and source-of-funds information where required.
2. Contact details: email address, mobile number, and communication preferences.
3. Verification records: government-issued identification, image or liveness checks, and verification results.
4. Payment records: method, account-holder name, transaction reference, amount, currency, status, and limited account details needed to process a transaction.
5. Account credentials: username and protected authentication information. Never send a password or one-time code to support.

Device, Usage, and Game Data

Technical processing may include IP address, approximate location, browser, operating system, device identifiers, language, timestamps, referral page, cookie identifiers, security events, pages viewed, account sessions, game rounds, stakes, results, and transaction history.

Support and Communication Data

When a user contacts PHJoin, records may include the message, email address, support ticket, attachments, complaint details, and actions taken. Calls or chats should be recorded only when disclosed and supported by an appropriate legal basis.

How Personal Data May Be Used

Account and Core Service Purposes

Data may be used to create and administer an account, verify identity and age, apply eligibility restrictions, process payments, record game activity, provide requested support, prevent fraud, investigate disputes, apply responsible-gaming controls, and meet legal or regulatory duties.

Marketing and Personalisation

When supported by valid consent or another applicable basis, contact details and account preferences may be used for offers, product updates, or personalised content. Each optional channel should provide a practical way to change the preference. Withdrawing consent does not affect processing completed lawfully before withdrawal.

Analytics and Service Improvement

Usage and technical information may be analysed to maintain performance, understand navigation, diagnose errors, detect abuse, improve accessibility, and measure content usefulness. Where practical, reports should use aggregated or de-identified information.

Sharing and Disclosure

When Information May Be Shared

Personal data may be disclosed when necessary to payment processors, identity-verification services, game or platform providers, hosting and security vendors, analytics providers, professional advisers, regulators, law-enforcement bodies, courts, or parties involved in a lawful corporate transaction. A disclosure may also occur with the user’s specific instruction or consent.

Service Provider Responsibilities

A provider should receive only the information required for its assigned service and be subject to confidentiality, security, use limitation, deletion or return, and incident-reporting duties. PHJoin remains accountable for selecting appropriate processors and overseeing the agreed safeguards.

International Data Transfers

Some providers or systems may operate outside the Philippines. When personal data is transferred, PHJoin should use contractual, organisational, and technical measures appropriate to the destination and sensitivity of the data. Users may ask which categories of recipient or country are relevant to their information.

Data Security and Incident Response

Technical Safeguards

Controls may include encrypted transmission where supported, password protection, access logging, network safeguards, secure configuration, malware protection, backups, vulnerability management, and additional account verification. No system is completely secure, so users should also protect devices and credentials.

Organisational Safeguards

Access should follow job need and least-privilege principles. Personnel and service providers should receive appropriate privacy and security instructions, accept confidentiality duties, and follow documented procedures for access, retention, deletion, incident reporting, and periodic review.

Personal Data Breach Response

PHJoin should assess, contain, document, and investigate a suspected breach. When Philippine law requires notification, the National Privacy Commission and affected data subjects should be notified within the applicable 72-hour period after knowledge of or reasonable belief in a notifiable breach, subject to the legal conditions and any permitted delay. Notices should explain the incident, likely impact, protective steps, and contact point.

Retention and Secure Disposal

Personal data is retained for the shortest period reasonably needed for the stated purpose, account administration, gaming and AML obligations, payment reconciliation, fraud prevention, complaints, legal claims, audits, or another applicable requirement. Different records therefore have different retention periods.

• Active account records: kept while necessary to provide and secure the account.
• Closed or inactive account records: retained only for outstanding transactions, exclusion controls, disputes, or required legal and regulatory periods.
• Financial and verification records: kept for the applicable gaming, AML, tax, accounting, and claims period.
• Marketing records: removed or suppressed after an effective opt-out, except for the minimum record needed to honour that choice.

When retention is no longer justified, records should be deleted, anonymised, or securely destroyed. A deletion request may be limited when retention is required by law, needed for legal claims, or necessary to protect another person’s rights.

Cookies and Similar Technologies

Cookie Categories

PHJoin may use essential cookies for sign-in, security, and site operation; preference cookies for language or display choices; analytics cookies for performance and usage measurement; and marketing cookies for consent-based advertising or campaign measurement.

Managing Cookies

Use any cookie control displayed on the site and the privacy settings in your browser. Blocking essential storage may prevent login, security checks, or other account functions. Deleting cookies can sign you out and remove saved preferences.

Other Technologies

Similar processing may use local storage, session storage, pixels, software-development kits, log files, and fraud-prevention signals. Their purpose, provider, and duration should be included in a cookie notice or relevant account disclosure when required.

Age Eligibility and Underage Data

Gaming services in the Philippines are intended only for eligible adults aged 21 or older, subject to applicable restrictions. PHJoin may process date of birth and identity information to assess eligibility and meet Know Your Customer obligations.

PHJoin does not knowingly offer gaming accounts to underage users. If an underage person appears to have registered, contact [email protected]. The account may be restricted while the report is investigated, and data will be handled according to legal retention and safeguarding duties.

Parents and guardians should supervise device use, protect payment credentials, and use available content or access controls. Do not submit a minor’s identification through ordinary email unless a verified privacy representative gives a secure method and explains why it is needed.

Contact, Complaints, and Policy Updates

For a privacy question, request, or complaint, email [email protected] or [email protected]. State the issue and the right you wish to exercise, but do not send passwords, one-time codes, or full payment credentials.

If you believe your Philippine data privacy rights have been violated and the issue is not resolved, you may review the complaint process of the National Privacy Commission. This policy does not limit any right available under applicable law.