phjoh Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how phjoh ("phjoh," "we," "us," or "our") collects, uses, stores, and discloses personal information about individuals ("you," "your," or "Player") who access or use the phjoh platform available at phjoh.cam and its associated services (collectively, the "Platform").

phjoh operates in the Philippines and serves Filipino players nationwide — from Metro Manila to Cebu, Davao, Quezon City, and beyond. As an operator serving Philippines-based users, phjoh is committed to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) that govern how personal data must be handled by organizations operating in the Philippines.

By registering for a phjoh account, logging in to an existing account, or continuing to use the Platform after this Policy has been updated and made available to you, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the Platform and contact our support team to request account closure.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, phjoh is the personal information controller responsible for the personal data collected through the Platform. phjoh determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out in accordance with applicable Philippine data protection law.

phjoh has designated a Data Protection Officer (DPO) responsible for overseeing data privacy compliance across the Platform. The DPO may be contacted using the details provided in Section 16 of this Policy. If you have any concern about how your personal data is being handled by phjoh, you may direct your inquiry to the DPO in the first instance before escalating to the National Privacy Commission.

3 Personal Data We Collect

phjoh collects the following categories of personal data from Platform users. The specific data points collected in each category depend on the features you use and the services you access on the Platform:

phjoh does not collect sensitive personal information beyond what is required for age verification and identity confirmation. Specifically, phjoh does not collect health data, religious affiliation, political opinions, or similar categories of sensitive personal information unless directly required by a specific regulatory obligation.

4 How We Collect Your Data

phjoh collects personal data through the following channels and mechanisms:

• Directly from you: When you complete the phjoh registration form, submit KYC verification documents, make a deposit or withdrawal, contact customer support, or update your account profile settings.
• Automatically through Platform use: phjoh's systems automatically record technical data including IP addresses, device identifiers, browser information, and session activity logs each time you access the Platform. This data is collected through standard web server logging and analytics tools.
• Through cookies and similar technologies: phjoh uses cookies and similar tracking technologies to maintain session state, remember user preferences, and analyze Platform usage patterns. See Section 7 for full details on phjoh's cookie practices.
• From payment processors: When you complete a deposit or withdrawal transaction through GCash, Maya, BPI, BDO, or another supported payment method, phjoh receives transaction confirmation data and tokenized payment account references from the relevant payment processor. phjoh does not receive or store your full payment credentials.
• From third-party verification services: phjoh may use third-party KYC and identity verification service providers to verify the authenticity of documents submitted during the verification process. These providers share verification outcomes with phjoh in accordance with their own data processing agreements.

5 Purpose & Legal Basis for Processing

phjoh processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations to you under the phjoh Terms & Conditions, including account management, game provision, payment processing, and customer support. Without this processing, phjoh cannot operate your account.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and any lawful order or request from a Philippine regulatory authority or court.
• Legitimate interests: Processing carried out for phjoh's legitimate business interests, including fraud prevention, platform security, abuse detection, and internal analytics to improve Platform performance — where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, informed, and specific consent, particularly for marketing communications. Where phjoh relies on consent as a legal basis, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.

phjoh processes your personal data for the following specific purposes: operating and maintaining your player account; verifying your identity and age in accordance with the 21+ age requirement; processing deposits and withdrawals through Philippine payment systems; detecting and preventing fraud, money laundering, and other prohibited activity; complying with PAGCOR licensing requirements and AMLA reporting obligations; providing customer support; sending you relevant account notifications; and, where you have consented, sending you promotional communications about phjoh offers and promotions.

6 Data Sharing & Disclosure

phjoh does not sell, rent, or trade your personal data to third-party marketing organizations. phjoh may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment processors: GCash (Mynt/Globe Fintech), Maya Philippines, BPI, BDO, UnionBank, Coins.ph, and other payment service providers as necessary to process your deposits and withdrawals. These processors receive only the transaction data necessary to complete the payment.
• KYC and identity verification providers: Third-party services engaged by phjoh to verify the authenticity of identity documents and confirm player age eligibility. These providers are bound by data processing agreements prohibiting secondary use of your data.
• Game content providers: Game studios and live dealer operators supplying content to the Platform may receive session-level data necessary to operate their games within phjoh. These providers do not receive your full registration profile.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or any other Philippine government body with lawful authority to request player data. phjoh will comply with all lawful data requests from competent authorities.
• Technology and infrastructure providers: Cloud hosting, cybersecurity, fraud detection, and platform maintenance providers engaged by phjoh to support the technical operation of the Platform. These providers operate under strict data processing agreements and are not permitted to use your data for their own purposes.
• Legal and professional advisors: Where necessary to obtain legal, accounting, or compliance advice, phjoh may share limited personal data with professional advisors who are bound by professional confidentiality obligations.

7 Cookies & Tracking Technologies

phjoh uses cookies and similar technologies (such as local storage and session tokens) to operate the Platform effectively. The following categories of cookies are used on phjoh:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in to your phjoh account, security tokens that protect against cross-site request forgery, and cookies that maintain your language and currency preferences. These cannot be disabled without breaking core Platform functionality.
• Analytics cookies: Used to understand how players navigate the Platform — which pages are most visited, where users drop off during registration, and how game categories perform in terms of engagement. This data is aggregated and anonymized where possible. You may opt out of analytics cookies via the phjoh cookie preference center.
• Functional cookies: Store your Platform preferences such as display settings, notification preferences, and last-visited game categories to improve your experience on repeat visits.

phjoh does not use third-party advertising cookies or allow external advertising networks to place tracking cookies on the Platform. You can review and adjust your cookie preferences at any time through the phjoh privacy settings within your account dashboard.

8 Data Retention

phjoh retains your personal data for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal and regulatory retention requirements. The following retention periods apply as a general guide:

• Active account data: Retained for the duration of your active phjoh account relationship plus a minimum of five (5) years after account closure, in accordance with AMLA record-keeping requirements.
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification, as required by PAGCOR licensing conditions and AMLA obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction in accordance with AMLA and gaming regulatory requirements.
• Customer support records: Retained for three (3) years from the date of the last support interaction, to support dispute resolution and quality assurance.
• Marketing consent records: Retained for as long as you maintain a marketing preference with phjoh, plus three (3) years after consent withdrawal, as evidence of the consent or withdrawal.
• Technical and log data: Retained for a rolling period of twelve (12) months, after which it is deleted or anonymized for aggregate analytics purposes.

Where personal data is no longer required for any lawful purpose, phjoh will delete or securely anonymize it in accordance with phjoh's data disposal procedures.

9 Data Security

phjoh implements technical and organizational security measures proportionate to the sensitivity of your personal data and the risks associated with its processing. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phjoh Platform, ensuring that your login credentials, payment details, and personal data cannot be intercepted in transit.
• Secure password hashing using industry-standard algorithms. phjoh stores a hashed and salted version of your password — not the password itself — meaning that even phjoh's own technical team cannot retrieve your actual password from the database.
• Payment data tokenization: phjoh stores only a payment reference token provided by the payment processor, not your actual GCash account number or bank credentials. This limits the data exposed in the event of any security incident affecting phjoh's systems.
• Access controls: Access to systems containing personal data is restricted to authorized phjoh personnel on a need-to-know basis. All internal access is logged and audited.
• Regular security assessments and penetration testing of the Platform's technical infrastructure.
• Two-factor authentication (2FA) available for player accounts via SMS OTP, providing an additional layer of protection against unauthorized account access.

While phjoh implements these measures diligently, no online platform can guarantee absolute security against all possible threats. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phjoh will notify the National Privacy Commission and affected players in accordance with the timeframes and procedures required by the Data Privacy Act of 2012 and NPC Circular No. 16-03.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjoh. You may exercise these rights at any time by contacting phjoh's Data Protection Officer using the contact details in Section 16:

• Right to be informed: The right to know how your personal data is being collected, used, and shared — which is the purpose of this Privacy Policy.
• Right of access: The right to obtain confirmation of whether phjoh holds personal data about you and to receive a copy of that data in a structured, commonly used format.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update most profile information directly through your phjoh account settings; for data that cannot be self-corrected, please contact support.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, or where you withdraw consent and there is no other legal basis for processing. Note that this right may be limited where phjoh has a legal obligation to retain the data (e.g., AMLA record-keeping requirements).
• Right to data portability: The right to receive your personal data in a commonly used, machine-readable format and to transmit it to another data controller where technically feasible.
• Right to object: The right to object to processing of your personal data on the basis of legitimate interests, or to object to direct marketing at any time.
• Right to withdraw consent: Where phjoh processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission if you believe that phjoh has not handled your personal data in accordance with the Data Privacy Act of 2012.

phjoh will respond to all data subject rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case phjoh will notify you of the extension and the reason for it within the initial thirty-day period.

11 Minors & Age Policy

phjoh is strictly intended for users aged 21 years and above, in accordance with PAGCOR regulations governing online casino-style gaming in the Philippines. phjoh does not knowingly collect personal data from individuals under 21 years of age.

Where phjoh discovers or has reasonable grounds to believe that a registered account belongs to a person under 21 years of age, phjoh will immediately suspend the account, conduct verification procedures, and permanently close the account if the age verification confirms the user is underage. Any remaining real money balance will be returned to the verified funding source, and any bonus funds will be forfeited. The matter may also be reported to relevant regulatory authorities in accordance with applicable legal requirements.

If you are a parent or guardian and believe that your child under 21 years of age has registered for a phjoh account, please contact our Data Protection Officer immediately using the details in Section 16 so that phjoh can investigate and take appropriate action.

12 International Data Transfers

phjoh's primary data processing infrastructure is located within the Philippines. However, certain third-party service providers engaged by phjoh — including cloud infrastructure providers, game content studios, and KYC verification services — may process or store data in jurisdictions outside the Philippines.

Where phjoh transfers personal data to processors or sub-processors located outside the Philippines, phjoh ensures that such transfers are carried out in compliance with Section 21 of the Data Privacy Act of 2012 and applicable NPC guidelines, which require that the receiving jurisdiction or organization provides an adequate level of protection for personal data comparable to Philippine standards. phjoh implements appropriate safeguards for international transfers, including data processing agreements incorporating standard contractual clauses where required.

13 Marketing Communications

With your consent, phjoh may send you promotional communications regarding phjoh bonuses, new game launches, platform updates, and special events. You may provide or withdraw marketing consent at any time through your phjoh account notification settings.

phjoh uses the following channels for marketing communications, subject to your preferences: SMS to your registered Philippine mobile number; email to your registered address; and in-platform notifications within your logged-in account. phjoh does not engage in cold-calling or unsolicited direct marketing via channels not associated with your phjoh account.

Withdrawal of marketing consent will not affect your ability to receive transactional communications related to your account, such as deposit confirmations, withdrawal notifications, security alerts, and required regulatory communications. These transactional messages are sent on the basis of contractual necessity and are not subject to marketing opt-out preferences.

14 Third-Party Links & Services

The phjoh Platform may contain references to third-party services such as payment processors accessible through the cashier interface. phjoh is not responsible for the privacy practices of third-party organizations, and the collection and use of your personal data by those organizations is governed by their own privacy policies, not this Policy.

phjoh encourages you to review the privacy policies of any third-party payment service providers you use in connection with your phjoh account, including GCash (Mynt Technologies), Maya Philippines, BPI, BDO, and any other payment method you choose to use for deposits and withdrawals.

15 Changes to This Privacy Policy

phjoh reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or Platform features. The "Last Updated" date at the top of this Policy indicates when the most recent changes were made.

Where changes to this Policy are material — meaning they meaningfully affect how your personal data is processed or your rights as a data subject — phjoh will notify you by posting a prominent notice on the Platform and, where practicable, sending a notification to your registered email address or mobile number.

Your continued use of the phjoh Platform after the effective date of any updated Policy constitutes your acknowledgment of the changes. If you do not agree with the updated Policy, you must discontinue use of the Platform and may request account closure in accordance with the phjoh Terms & Conditions.

16 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or phjoh's handling of your personal data, please contact phjoh's Data Protection Officer:

If you are not satisfied with phjoh's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012 in the Philippines. The NPC's contact details and complaint procedures are available through official Philippine government channels.