phpjj Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the collection, processing, storage, and disclosure of personal data by phpjj, a PAGCOR-licensed online casino platform operating in the Philippines. This policy applies to all users who access phpjj services through our website, mobile applications, or any other digital platform operated by phpjj.

phpjj acts as the Data Controller for all personal information collected through our services. As Data Controller, we determine the purposes and means of processing your personal data and bear responsibility for protecting your information in accordance with Philippine law.

By creating an account, accessing phpjj services, or providing personal information to phpjj, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use phpjj services.

2. Information We Collect

2.1 Personal Information Provided by You

When you register for a phpjj account or use our services, we collect the following personal information:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., passport number, driver's license number, UMID number).
• Contact Information: Email address, mobile phone number, residential address, and postal code.
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers.
• Financial Information: Bank account details, GCash account information, Maya account information, payment method details, transaction history, deposit amounts, and withdrawal amounts.
• Verification Documents: Copies of government-issued photo identification, proof of address documents (utility bills, bank statements), selfie photographs, and other documents required for identity verification and regulatory compliance.
• Communication Data: Content of emails, live chat conversations, customer support tickets, and other communications with phpjj staff.

2.2 Information Collected Automatically

When you access phpjj services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, device identifiers (IMEI, MAC address), screen resolution, and language settings.
• Connection Information: IP address, internet service provider, connection type (WiFi, mobile data), and approximate geographic location based on IP address.
• Usage Information: Pages visited, games played, time spent on platform, click patterns, navigation paths, session duration, bet amounts, game outcomes, and feature usage patterns.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies to enhance user experience and analyze platform usage.

2.3 Information from Third Parties

phpjj may receive information about you from third-party sources, including payment processors (GCash, Maya, banks) who confirm payment transactions, identity verification services that validate your identification documents, fraud prevention services that assess transaction risk, and marketing partners through which you discovered phpjj. This information is used to verify your identity, prevent fraud, and improve our services.

3. How We Use Your Information

3.1 Legal Bases for Processing

phpjj processes your personal data based on the following legal grounds under the Philippine Data Privacy Act:

• Consent: You have provided explicit consent for specific data processing activities.
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to provide gaming services to you.
• Legal Obligation: Processing is required to comply with PAGCOR regulations, anti-money laundering laws, tax obligations, and other legal requirements.
• Legitimate Interest: Processing is necessary for phpjj's legitimate business interests, such as fraud prevention, security, and service improvement, provided these interests do not override your fundamental rights and freedoms.

3.2 Purposes of Data Processing

phpjj uses your personal information for the following purposes:

• Account Management: Creating and maintaining your phpjj account, authenticating your identity, and managing account settings and preferences.
• Service Provision: Processing deposits and withdrawals, enabling gameplay, tracking game history, calculating winnings and losses, and providing customer support.
• Regulatory Compliance: Verifying your age (21+ requirement), confirming your identity and address, preventing underage gambling, detecting and preventing money laundering, reporting to PAGCOR and other regulatory authorities, and maintaining records as required by law.
• Fraud Prevention and Security: Detecting suspicious activities, preventing account takeovers, protecting against cheating and collusion, securing financial transactions, and maintaining platform integrity.
• Marketing and Communications: Sending promotional offers, bonuses, and tournament announcements (with your consent), providing account notifications and service updates, and conducting customer satisfaction surveys.
• Platform Improvement: Analyzing usage patterns to improve user experience, developing new features and games, testing platform performance, and conducting research and analytics.
• Legal Proceedings: Establishing, exercising, or defending legal claims, complying with court orders or legal processes, and protecting phpjj's rights and property.

4. Data Sharing and Disclosure

4.1 Third Parties We Share Data With

phpjj may share your personal information with the following categories of third parties:

• Payment Processors: GCash, Maya, Philippine banks, and other payment service providers to process deposits and withdrawals.
• Gaming Providers: Third-party game developers and suppliers whose games are offered on phpjj platform, limited to data necessary for game functionality.
• Identity Verification Services: Specialized services that verify identification documents and detect fraudulent documents.
• Technology Service Providers: Cloud hosting providers, customer support platforms, email service providers, analytics tools, and security services that support phpjj operations.
• Regulatory Authorities: PAGCOR, Anti-Money Laundering Council (AMLC), Bureau of Internal Revenue (BIR), and other Philippine government agencies as required by law.
• Professional Advisors: Lawyers, accountants, auditors, and consultants who provide professional services to phpjj under confidentiality obligations.

4.2 Data Transfer Safeguards

All third parties with whom phpjj shares your personal data are required to maintain confidentiality and security. We enter into data processing agreements with service providers that establish appropriate safeguards for your information. Third parties are prohibited from using your data for purposes other than those specified by phpjj.

4.3 International Data Transfers

phpjj primarily stores and processes personal data within the Philippines. In cases where data must be transferred internationally (e.g., to cloud service providers with servers outside the Philippines), phpjj ensures that adequate data protection measures are in place through contractual clauses, certification schemes, or other mechanisms recognized under Philippine data protection law.

4.4 No Selling of Personal Data

phpjj does not sell, rent, or trade your personal information to third parties for their marketing purposes. Your data is shared only as necessary to provide phpjj services and fulfill our legal obligations.

5. Data Security and Protection

5.1 Technical Security Measures

phpjj implements robust technical security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmitted between your device and phpjj servers is protected by 256-bit SSL/TLS encryption. Passwords are hashed and salted using industry-standard algorithms.
• Secure Servers: Personal data is stored on secure servers with firewalls, intrusion detection systems, and regular security monitoring.
• Access Controls: Strict access controls limit employee access to personal data on a need-to-know basis. All access is logged and monitored.
• Regular Audits: phpjj conducts regular security audits and vulnerability assessments to identify and address potential security weaknesses.
• DDoS Protection: Advanced DDoS mitigation systems protect against distributed denial-of-service attacks.

5.2 Organizational Security Measures

phpjj maintains organizational policies and procedures to ensure data security:

• Comprehensive employee training on data privacy and security best practices.
• Confidentiality agreements requiring employees to protect user information.
• Incident response procedures to quickly address potential data breaches.
• Regular review and updates of security policies to address emerging threats.
• Designated Data Protection Officer responsible for overseeing complia nce with data protection regulations.

5.3 Data Breach Notification

In the unlikely event of a data breach that may compromise your personal information, phpjj will notify affected users and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by the Philippine Data Privacy Act. Notifications will include the nature of the breach, the types of data affected, steps phpjj is taking to address the breach, and recommended actions you should take to protect yourself.

6. Data Retention and Deletion

6.1 Retention Periods

phpjj retains your personal data only for as long as necessary to fulfill the purposes for which it was collected and to comply with legal obligations:

• Account Information: Retained for the duration of your active account plus five (5) years after account closure to comply with PAGCOR record-keeping requirements.
• Transaction Records: Retained for ten (10) years after the transaction date as required by Philippine anti-money laundering regulations and tax laws.
• Identity Verification Documents: Retained for five (5) years after account closure or as required by regulatory authorities.
• Communication Records: Retained for three (3) years to support customer service quality and resolve disputes.
• Marketing Consent Records: Retained until you withdraw consent, plus three (3) years to demonstrate compliance with consent requirements.

6.2 Secure Data Deletion

When personal data is no longer required, phpjj employs secure deletion methods including overwriting data on storage media, cryptographic erasure of encryption keys, and physical destruction of hardware containing sensitive data where appropriate. Deletion is performed in a manner that prevents recovery of the data.

7. Your Privacy Rights

7.1 Rights Under Philippine Data Privacy Act

As a data subject under Philippine law, you have the following rights regarding your personal data:

• Right to Information: The right to be informed about the collection and processing of your personal data.
• Right to Access: The right to obtain confirmation that phpjj is processing your data and to access your personal information.
• Right to Rectification: The right to correct inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data when it is no longer necessary for the purposes collected, subject to legal retention requirements.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and transmit it to another data controller.
• Right to Object: The right to object to processing of your data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: The right to withdraw previously given consent for data processing, where consent is the legal basis for processing.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

7.2 Exercising Your Rights

To exercise any of your privacy rights, please contact phpjj customer support via email or live chat. Include your full name, account username, and specific details of your request. phpjj will verify your identity before processing rights requests and will respond within fifteen (15) business days. There is no charge for exercising your rights, though phpjj may charge a reasonable fee for manifestly unfounded or excessive requests.

8. Cookies and Tracking Technologies

8.1 Types of Cookies Used

phpjj uses cookies and similar tracking technologies to enhance your experience and analyze platform usage:

• Essential Cookies: Required for basic platform functionality, including maintaining your login session, processing transactions, and ensuring security. These cookies cannot be disabled.
• Functional Cookies: Remember your preferences and settings, such as language selection, display options, and favorite games.
• Analytics Cookies: Collect anonymous usage statistics to help phpjj understand how users interact with the platform and identify areas for improvement.
• Marketing Cookies: Track your activity across websites to deliver relevant promotional offers (used only with your consent).

8.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to refuse cookies or delete existing cookies. However, disabling essential cookies will prevent you from using phpjj services. Disabling functional or analytics cookies may limit your experience but will not prevent access to core gaming features.

9. Children's Privacy

phpjj services are not intended for individuals under twenty-one (21) years of age. We do not knowingly collect personal information from minors. If phpjj becomes aware that we have inadvertently collected personal data from an individual under 21, we will immediately delete such information and close any associated account. Parents or guardians who believe their child has provided personal information to phpjj should contact customer support immediately.

10. Third-Party Links and Services

phpjj platform may contain links to third-party websites or integrate with third-party services. This Privacy Policy applies only to phpjj services. phpjj is not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party sites you visit. phpjj does not endorse or assume responsibility for the content or privacy practices of third parties.

11. Changes to Privacy Policy

phpjj reserves the right to modify this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Material changes will be communicated to users via email or prominent notice on the phpjj website. Your continued use of phpjj services following notification of changes constitutes acceptance of the updated Privacy Policy. We recommend reviewing this policy periodically to stay informed about how we protect your information.

12. Contact Information and Data Protection Officer

phpjj has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with Philippine data protection laws and handling privacy-related inquiries.

For privacy-related questions, concerns, or requests to exercise your data protection rights, please contact:

Data Protection Officer, phpjj
Available via phpjj customer support channels
Response time: Within 15 business days

If you believe phpjj has not adequately addressed your privacy concerns, you have the right to file a complaint with the National Privacy Commission of the Philippines.