phjyo Privacy Policy
At phjyo, the privacy and security of your personal information is something we take seriously. This Privacy Policy explains exactly what data we collect from Filipino players, how we use it, who we share it with, and what rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173).
This Privacy Policy ("Policy") describes how phjyo ("we," "us," "our," or "the Company"), the operator of the online gaming platform located at phjyo.net, collects, processes, stores, uses, and discloses personal information in connection with the operation of our platform and the provision of online gaming services to registered players in the Republic of the Philippines.
phjyo operates as a PAGCOR-regulated online gaming platform offering casino games, sports betting, live dealer games, bingo, fishing games, and related services. As part of our regulatory obligations under PAGCOR and our compliance with the Anti -Money Laundering Act (Republic Act No. 9160), we are required to collect and verify certain personal information from all registered players.
This Policy applies to all personal data collected through the phjyo website, mobile web platform, customer support channels, and any other digital touchpoints operated by phjyo. It applies to all current and former registered players, as well as prospective players who interact with our platform without completing registration.
This Policy should be read together with the phjyo Terms & Conditions, which govern the overall relationship between phjyo and its registered players.
For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, phjyo acts as the Personal Information Controller (PIC) in respect of the personal data it collects from players and site visitors.
phjyo has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Policy. If you have any questions, concerns, or requests relating to the processing of your personal data by phjyo, you may contact the DPO using the details provided in Section 14 of this Policy.
Where phjyo engages third-party service providers — such as game providers, payment processors, and identity verification services — to process personal data on its behalf, those third parties act as Personal Information Processors (PIPs) under binding data processing agreements that require them to process personal data solely on phjyo's instructions and in compliance with the Data Privacy Act.
phjyo collects the following categories of personal data, depending on how you interact with the platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number (PhilSys, passport, driver's license, SSS/GSIS, Voter's ID, PRC ID) | Registration & KYC verification |
| Contact Data | Email address, mobile number, residential address (city, province) | Registration |
| Financial Data | GCash account reference, Maya account reference, bank account name, BPI/BDO/Metrobank account details, transaction amounts, deposit and withdrawal history | Payment processing |
| Gaming Data | Game history, wager amounts, win/loss records, active bonus status, session duration, preferred games | Platform use |
| Technical Data | IP address, device type, browser type and version, operating system, screen resolution, time zone | Automatic collection |
| Usage Data | Pages visited, links clicked, time spent on pages, navigation paths, feature usage | Automatic collection |
| Communications Data | Live chat transcripts, support emails, dispute records, survey responses, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Self-exclusion requests, deposit limit settings, cooling-off period records, problem gambling flags | Responsible gaming tool usage |
phjyo does not intentionally collect sensitive personal information as defined under the Data Privacy Act (e.g., health data, religious beliefs, political affiliations) except where strictly required by PAGCOR regulations or applicable law, in which case such collection will be clearly disclosed at the point of collection.
phjyo collects personal data through the following channels and mechanisms:
- Direct submission: Information you provide when creating an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or participating in promotions;
- Automated technical collection: Technical and usage data collected automatically when you access the phjyo platform, through server logs, session tracking, and browser-based mechanisms (see Section 9 on Cookies);
- Payment processors: Transaction confirmation data received from GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, and other payment intermediaries when you make a deposit or withdrawal;
- Identity verification providers: Confirmation of identity document authenticity and biometric liveness check results from third-party KYC service providers engaged by phjyo;
- PAGCOR and regulatory sources: Regulatory data or instructions received from PAGCOR in connection with player compliance, self-exclusion registers, or AML monitoring;
- Third-party game providers: Game session data and RNG outcome records transmitted from game providers whose content is hosted on the phjyo platform.
phjyo processes your personal data on the following lawful bases under the Data Privacy Act of 2012:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact | Contract performance |
| KYC identity verification and age verification (21+) | Identity, Government ID | Legal obligation (PAGCOR, RA 9160) |
| Processing deposits and withdrawals | Financial, Identity | Contract performance |
| AML monitoring and suspicious transaction reporting | Financial, Identity, Gaming | Legal obligation (RA 9160) |
| Delivering gaming services and game history | Gaming, Technical | Contract performance |
| Fraud detection and platform security | Technical, Financial, Identity | Legitimate interest |
| Customer support and dispute resolution | Communications, Identity | Contract performance / Legitimate interest |
| Responsible gaming tool management | Responsible Gaming, Identity | Legal obligation / Legitimate interest |
| Personalized promotions and marketing communications | Contact, Gaming, Usage | Consent (opt-in) |
| Platform analytics and performance improvement | Usage, Technical | Legitimate interest |
| Compliance with PAGCOR reporting requirements | Identity, Financial, Gaming | Legal obligation |
phjyo does not sell, rent, or trade your personal data to third parties for their own independent marketing or commercial purposes. Your personal data may be shared with the following categories of recipients strictly on a need-to-know basis and for the purposes described in this Policy:
- Payment processors and e-wallet providers (GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, 7-Eleven CLiQQ): to facilitate deposit and withdrawal transactions and confirm payment authentication;
- Identity verification and KYC service providers: to verify the authenticity of government-issued identification documents and perform biometric liveness checks in compliance with PAGCOR KYC requirements;
- Game content providers: game session identifiers and wager data are transmitted to game providers to facilitate gameplay, but phjyo minimizes the personal data shared with game providers to the minimum necessary;
- PAGCOR (Philippine Amusement and Gaming Corporation): phjyo is required to submit player transaction data, suspicious activity reports, and other compliance-related information to PAGCOR as part of its license obligations;
- Anti-Money Laundering Council (AMLC) of the Philippines: phjyo is required under Republic Act No. 9160 to file covered transaction reports and suspicious transaction reports with the AMLC where applicable thresholds or indicators are met;
- Law enforcement and regulatory authorities: phjyo will disclose personal data to Philippine law enforcement agencies, courts, or government authorities where required to do so by law, court order, or regulatory direction;
- Fraud prevention and security services: technical and identity data may be shared with fraud detection partners to identify and prevent fraudulent activity, account takeovers, and platform abuse;
- Professional advisors: legal counsel, auditors, and compliance consultants engaged by phjyo may access relevant personal data on a strictly confidential basis as necessary for their professional services.
All third parties with whom phjyo shares personal data are required to maintain appropriate technical and organizational security measures and to process personal data solely for the specified purposes. Where required by law, phjyo enters into formal data processing agreements with these third parties.
phjyo retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:
- Account and identity data: Retained for the duration of your active account and for a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and AML obligations under RA 9160;
- Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and BSP regulations applicable to payment intermediaries;
- Gaming history: Retained for a minimum of three (3) years after the game session date, or longer where required for dispute resolution or PAGCOR audit purposes;
- Customer support and communications records: Retained for three (3) years from the date of the last interaction or the resolution of any associated dispute;
- Responsible gaming records (self-exclusion, limit settings): Retained for a minimum of five (5) years after the expiry or lifting of any self-exclusion or restriction, to prevent circumvention;
- Marketing consent records: Retained for three (3) years from the date of consent or until consent is withdrawn, whichever is earlier.
Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with phjyo's data disposal procedures, unless retention is required for an ongoing legal proceeding, regulatory investigation, or dispute.
The security measures implemented by phjyo include, but are not limited to:
- Encryption in transit: All data transmitted between your device and the phjyo platform is encrypted using TLS 1.2 or higher (HTTPS). phjyo does not transmit sensitive data over unencrypted connections;
- Encryption at rest: Sensitive personal data stored in phjyo's databases — including identity documents, payment method references, and account credentials — is encrypted at rest using AES-256 encryption;
- Access controls: Access to personal data within phjyo's systems is restricted on a strict need-to-know basis. All staff and contractors with access to player data are subject to confidentiality obligations and regular security training;
- Two-factor authentication (2FA): phjyo supports and encourages players to enable 2FA on their accounts. All internal administrative access to player data systems requires multi-factor authentication;
- Penetration testing and vulnerability assessments: phjyo conducts regular third-party security assessments to identify and remediate vulnerabilities in its platform and infrastructure;
- Incident response: phjyo maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to the rights and freedoms of players, phjyo will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected players without undue delay, in accordance with NPC Circular No. 16-03.
While phjyo takes all reasonable precautions to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying phjyo immediately if you suspect unauthorized access to your account.
phjyo uses cookies and similar tracking technologies on its platform. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies help phjyo recognize your device, maintain your logged-in session, remember your preferences, and analyze how the platform is used.
phjyo uses the following categories of cookies:
- Strictly necessary cookies: These cookies are essential for the phjyo platform to function. They maintain your login session, enable secure payment processes, and support platform security features. These cookies cannot be disabled;
- Functional cookies: These cookies remember your preferences — such as your preferred language, display settings, or default deposit method — to provide a more personalized experience. These cookies are active by default but can be disabled;
- Analytics cookies: phjyo uses first-party analytics to understand how players navigate the platform, which games are most popular, and where technical errors occur. This data is used in aggregate and anonymized form to improve platform performance;
- Marketing and attribution cookies: Where you have consented to receiving personalized promotions, phjyo may use cookies to identify your preferences and serve relevant bonus offers. These cookies are activated only with your consent.
You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair the functionality of the phjyo platform. Detailed instructions for managing cookies are available in the help documentation of your specific browser (Chrome, Safari, Firefox, etc.).
Under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phjyo. These rights may be subject to limitations where processing is required to fulfill legal obligations or legitimate interests that override your individual rights.
Your Rights Under RA 10173
As a Filipino player on phjyo, the Data Privacy Act of 2012 gives you meaningful control over how your personal data is collected, used, and stored. Here are the six core rights available to you.
Right to Be Informed
You have the right to be informed whether phjyo holds any personal data about you, and to receive clear information about what data is held, why it is processed, how long it is kept, and with whom it is shared. This Privacy Policy fulfills that obligation — and you may request a summary at any time by contacting our DPO.
Right of Access
You may request a copy of the personal data phjyo holds about you, including your account details, transaction history, game history, and KYC records. Access requests are processed within 15 business days. phjyo may charge a reasonable fee for repeat or excessive requests, consistent with NPC guidelines.
Right to Rectification
If you believe any personal data phjyo holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. Note that changes to identity data (full name, date of birth, ID number) require submission of updated government-issued documentation for verification purposes.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent. However, erasure requests cannot override phjyo's legal obligations to retain certain records for PAGCOR compliance, AML reporting, and audit purposes for the retention periods described in Section 7.
Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes, profiling, or processing based on legitimate interest. Where you object to marketing, phjyo will cease sending promotional communications within 5 business days. Objections to processing based on legal obligation cannot override those obligations.
Right to Data Portability
Where technically feasible, you may request that phjyo provide your personal data in a structured, commonly used, machine-readable format. This right applies to data you have directly provided to phjyo (e.g., account registration data, transaction history) and is subject to any applicable legal restrictions on disclosure.
Age verification is a mandatory component of the phjyo KYC process. All registered players are required to confirm their date of birth at registration and to provide a valid Philippine government-issued ID demonstrating that they are at least 21 years of age before any withdrawal is processed.
If phjyo becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will immediately suspend the associated account, delete or anonymize the personal data of the minor to the extent not required to be retained under applicable law, and notify PAGCOR in accordance with its regulatory obligations.
Parents and guardians are encouraged to monitor the online activities of minors and to use parental control software to prevent access to online gambling platforms. If you believe a minor may have accessed or registered on phjyo using your payment credentials or personal information, contact phjyo's 24/7 support team immediately.
Some of phjyo's third-party service providers — including game content providers and cloud infrastructure partners — may be located in jurisdictions outside the Republic of the Philippines. When personal data is transferred to these parties, phjyo ensures that appropriate safeguards are in place to protect the privacy and security of your data consistent with the requirements of the Data Privacy Act and the NPC's rules on cross-border data transfers.
These safeguards include:
- Entering into data processing agreements with overseas processors that incorporate the NPC's standard contractual clauses or equivalent data protection obligations;
- Conducting due diligence on the data protection standards of any overseas processor before engagement;
- Limiting the scope of data transferred to overseas processors to the minimum necessary for the service being provided;
- Monitoring ongoing compliance of overseas processors with their contractual data protection obligations.
phjyo does not transfer personal data to jurisdictions that do not offer an adequate level of data protection without implementing the safeguards described above. You may request information about the specific safeguards applicable to any cross-border data transfer involving your personal data by contacting phjyo's DPO.
phjyo may send you promotional communications — including bonus offers, game launch announcements, tournament invitations, and personalized promotions — via email or SMS, but only where you have given your prior consent to receive such communications at the time of registration or through your account communication preferences.
You can opt out of receiving marketing communications from phjyo at any time by:
- Clicking the "Unsubscribe" link included in any phjyo marketing email;
- Updating your communication preferences in your phjyo account settings;
- Contacting phjyo's customer support team via live chat or email and requesting removal from marketing lists.
Opting out of marketing communications does not affect your receipt of transactional and service-related messages — such as deposit confirmations, withdrawal notifications, account security alerts, and support responses — which are sent on the basis of contract performance and legitimate interest rather than consent.
phjyo does not engage in unsolicited bulk messaging, SMS spamming, or any form of electronic marketing that does not comply with the Cybercrime Prevention Act of 2012 (RA 10175) and applicable NPC guidance on electronic direct marketing.
If you have any questions, concerns, or complaints about how phjyo handles your personal data, or if you wish to exercise any of the data privacy rights described in Section 10, please contact phjyo's Data Protection Officer using the following details:
Live Chat: Available 24/7 via the phjyo platform
Jurisdiction: Republic of the Philippines
phjyo is committed to resolving all data privacy concerns promptly and fairly. If you are not satisfied with phjyo's response to your complaint or request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.
Information about filing a complaint with the NPC, including the NPC's complaint procedure and contact details, is available on the NPC's official website at privacy.gov.ph (reference only — not a clickable link per site policy).
phjyo reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidance, or phjyo's internal data processing practices. All updates to this Policy will be published on this page with a revised effective date.
Where changes to this Policy are material — meaning they significantly affect how phjyo processes your personal data or the rights available to you — phjyo will notify registered players via email to the address associated with their account at least 14 days before the changes take effect. Continued use of the phjyo platform after the effective date of any revised Policy constitutes your acknowledgment of the updated terms.
phjyo encourages you to review this Privacy Policy periodically to stay informed about how your personal data is being protected. The current version of this Policy is always available on this page at phjyo.net/privacy-policy.
Your Data is Safe at phjyo.
Now Let's Get You Playing.
phjyo is built on transparency, security, and trust — and that starts with how we handle your personal data. Now that you know exactly how phjyo protects your privacy, explore our full game library: slots, live casino, bingo, sabong, fishing games, and more. Instant GCash deposits. Fast withdrawals. PAGCOR-regulated. 21+ only.
PAGCOR Regulated | 21+ Only | Philippines