Privacy Policy

1. Introduction and Scope

This Privacy Policy (hereinafter "Policy") describes how phjon (hereinafter "phjon," "we," "us," or "the Platform") collects, uses, stores, discloses, and protects the personal data of individuals who register accounts, visit the phjon website at phjon.net, or otherwise interact with the phjon online gaming platform and its associated services.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and applicable circulars and advisories issued by the National Privacy Commission (NPC) of the Philippines. It is also informed by the data handling requirements imposed on phjon as a PAGCOR-regulated online gaming operator.

By registering a phjon account or continuing to use the phjon Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you should not use the phjon Platform and should contact our support team to arrange account closure.

2. Who We Are

phjon is a PAGCOR-regulated online gaming platform operating under the authority of the Philippine Amusement and Gaming Corporation. phjon serves Filipino players across the Philippines, offering slots, live casino, sports betting, sabong, bingo, and fishing games accessible via desktop and mobile devices, with all transactions processed in Philippine Peso (PHP).

For the purposes of the Data Privacy Act of 2012, phjon acts as the Personal Information Controller (PIC) in respect of the personal data of its registered players and website visitors. Where phjon engages third-party service providers to process personal data on its behalf — such as KYC verification providers, payment processors, and analytics partners — those providers act as Personal Information Processors (PIPs) under written data processing agreements that require them to handle your data in accordance with this Policy and applicable Philippine law.

If you have any questions about phjon's role as a Personal Information Controller, or wish to exercise any of your data subject rights described in Section 10 of this Policy, please contact the phjon Data Protection Officer at [email protected].

3. Data We Collect

phjon collects the following categories of personal data in connection with your use of the Platform:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued identification.
• Date of birth (used to verify that you meet the 21-year minimum age requirement under PAGCOR regulations).
• Residential address, including barangay, city or municipality, province, and postal code.
• Email address and mobile number registered to your phjon account.
• Username and hashed account password.
• Nationality and, where applicable, Tax Identification Number (TIN).

3.2 KYC Verification Documents

• Scanned or photographed copies of government-issued photo identification (SSS ID, UMID, PhilHealth ID, driver's licence, or Philippine passport).
• Proof of residential address (utility bills, bank statements, or barangay certificate issued within the last three months).
• Proof of payment method ownership (e.g., screenshot of GCash wallet displaying your registered name and mobile number).
• Selfie photograph or live biometric verification image where required for identity confirmation.

3.3 Financial and Transaction Data

• Deposit and withdrawal amounts, dates, and reference numbers.
• Payment method identifiers (GCash number, PayMaya account, BPI/BDO/Metrobank account details — stored in tokenised form only; full account numbers are not retained by phjon).
• Wagering history, including game titles, bet amounts, outcomes, and timestamps.
• Bonus and promotional credit activity.
• Account balance history and transaction logs.

3.4 Technical and Usage Data

• IP address and approximate geolocation derived from IP.
• Device type, operating system, browser type and version.
• Session logs, including login timestamps, pages visited, and session duration.
• Game interaction logs, including rounds played, features triggered, and session statistics.
• Cookie identifiers and similar tracking technologies as described in Section 8.

3.5 Communications Data

• Records of communications between you and the phjon customer support team via Live Chat, Viber, Messenger, or email, including the content of those communications.
• Feedback, survey responses, and promotional opt-in or opt-out preferences.
• Responsible gaming self-assessments, deposit limit settings, and self-exclusion requests.

4. How We Collect Your Data

phjon collects personal data through the following channels:

• Directly from you — when you register a phjon account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey or promotion.
• Automatically through platform use — technical and usage data is collected automatically via server logs, cookies, and analytics tools as you interact with the phjon website and games.
• From third-party verification providers — where phjon engages a KYC or identity verification partner to cross-check the documents you submit against authoritative data sources, that partner may return verification results and data flags to phjon.
• From payment processors — when you initiate a deposit or withdrawal through GCash, PayMaya, BPI, BDO, or Metrobank, the relevant payment provider shares transaction confirmation and reference data with phjon to enable settlement and reconciliation.
• From PAGCOR and regulatory sources — phjon may receive information from PAGCOR or other competent authorities in connection with regulatory compliance obligations, including exclusion register checks.

5. Why We Use Your Data

phjon uses the personal data it collects for the following purposes:

phjon will not use your personal data for any purpose that is incompatible with the purposes listed above without first seeking your consent or establishing an alternative lawful basis for the new processing activity.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, phjon's processing of your personal data is grounded in one or more of the following lawful bases:

• Consent — You have given your freely given, specific, and informed consent to the processing of your personal data, as provided at the time of account registration. You may withdraw consent at any time by contacting phjon support, subject to the limitations described in Section 10.
• Contractual Necessity — Processing is necessary for the performance of the contract between you and phjon (i.e., the phjon Terms and Conditions), including account management, payment processing, and delivery of gaming services.
• Legal Obligation — Processing is required for phjon's compliance with applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act itself.
• Legitimate Interests — Processing is necessary for the purposes of the legitimate interests pursued by phjon, including fraud prevention, platform security, responsible gaming monitoring, and the improvement of phjon's services — provided that such interests are not overridden by your fundamental rights and freedoms.

7. Sharing Your Data

phjon does not sell your personal data. We share your data only in the following circumstances and only to the extent necessary for each stated purpose:

• PAGCOR and Regulatory Authorities: phjon is legally required to report certain player information, transaction data, and suspicious activity reports to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities. Compliance with these requirements is mandatory and not subject to your consent.
• KYC and Identity Verification Partners: phjon engages accredited third-party KYC providers to assist with the verification of player identity documents. These providers process your data solely for verification purposes under phjon's instruction and are contractually bound to handle your data in accordance with the DPA.
• Payment Processors: Transaction data is shared with GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers as necessary to process your deposits and withdrawals. Each payment provider operates under its own privacy policy and regulatory obligations.
• Game Content Providers: Anonymised game session data may be shared with phjon's game content providers for statistical and audit purposes. No directly identifiable personal data is shared with game providers beyond what is necessary for game delivery and certification compliance.
• Technology and Infrastructure Partners: phjon uses cloud hosting, database, and cybersecurity service providers to operate its platform. These providers process data on phjon's behalf as Personal Information Processors and are subject to written data processing agreements.
• Legal and Law Enforcement: phjon may disclose your personal data to courts, law enforcement agencies, or other public authorities where required to do so by law, court order, or in connection with legal proceedings to which phjon is a party.

Where phjon transfers personal data to service providers located outside the Philippines, phjon will ensure that appropriate safeguards are in place in accordance with NPC guidelines on cross-border data transfers, including contractual data transfer agreements that impose DPA-equivalent protections on the recipient.

8. Cookies and Tracking Technologies

The phjon website uses cookies and similar tracking technologies to operate the Platform effectively, maintain your session state, prevent fraud, and — where you have given consent — improve your experience through analytics and personalisation.

The following types of cookies are used on the phjon Platform:

• Strictly Necessary Cookies: These cookies are required for the phjon Platform to function. They manage your login session, maintain your account balance display, and protect against cross-site request forgery (CSRF) attacks. These cookies cannot be disabled without preventing your use of the Platform.
• Functional Cookies: These cookies remember your preferences — such as your preferred language and last visited game category — to provide a more personalised experience on phjon. You may disable these cookies, but some Platform features may not work as expected.
• Analytics Cookies: With your consent, phjon uses analytics tools to collect anonymised data about how players use the Platform — which game categories are most popular, how players navigate between pages, and where technical errors occur. This data helps phjon improve the Platform for all Filipino players.
• Security and Fraud Prevention Cookies: phjon uses device fingerprinting and behavioural analytics cookies to detect suspicious access patterns, multi-account activity, and automated bot traffic. These cookies are essential to platform integrity and responsible gaming compliance.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging into your phjon account. For detailed information on managing cookies in popular browsers used in the Philippines, please consult the help documentation for Chrome, Firefox, Safari, or your browser of choice.

9. Data Retention

phjon retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve any disputes or enforce phjon's agreements. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your phjon account and for a minimum of five years following account closure, in accordance with AMLC record-keeping requirements under the Anti-Money Laundering Act.
• KYC Documents: Retained for a minimum of five years following account closure or the completion of the transaction to which the KYC was related, whichever is later, as required by PAGCOR and AMLC.
• Transaction Records: Financial transaction logs are retained for a minimum of five years, consistent with AMLC and Bureau of Internal Revenue (BIR) record-keeping requirements applicable to gaming operators.
• Customer Support Communications: Records of support interactions are retained for three years following the resolution of the relevant matter, or for the duration of any related dispute or legal proceedings.
• Marketing Consent Records: Records of your marketing opt-in or opt-out are retained for as long as necessary to demonstrate compliance with applicable consent requirements, even after you have withdrawn consent.
• Technical and Usage Logs: Server logs and session data are retained for up to 12 months for security and fraud detection purposes, after which they are anonymised or deleted.

Upon expiry of the applicable retention period, phjon will securely delete or anonymise your personal data in accordance with NPC guidelines on data disposal. Data subject to ongoing legal proceedings or regulatory investigations will be retained until those proceedings are fully resolved.

10. Your Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phjon. These rights may be exercised by contacting phjon's Data Protection Officer at [email protected].

To exercise any of the above rights, send a written request to [email protected] with the subject line "Data Subject Rights Request." phjon will acknowledge your request within three business days and provide a substantive response within 15 business days. Identity verification will be required before any data is disclosed or modified.

11. Children and Minors

The phjon Platform is strictly intended for persons aged 21 years and above in accordance with PAGCOR regulations governing online gaming in the Philippines. phjon does not knowingly collect, process, or retain the personal data of persons below this age.

Age verification is applied at the point of account registration and at the point of first withdrawal. If phjon discovers that an account has been registered by or on behalf of a person below 21 years of age, the account will be immediately suspended, all balances will be frozen pending investigation, and any deposits made will be refunded to the originating payment method following verification of ownership. The matter will be reported to PAGCOR as required by applicable regulations.

If you believe that a person under the age of 21 has registered or is using a phjon account — including by accessing your own account without your authorisation — please contact phjon customer support immediately. Protecting minors from exposure to gambling services is a shared responsibility that phjon takes very seriously.

12. Security Measures

phjon implements a multi-layered security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. The key technical and organisational measures in place include:

• 256-bit SSL/TLS Encryption: All data transmitted between your browser or mobile app and phjon's servers is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Account passwords are stored using one-way cryptographic hashing with salting. phjon staff cannot view or retrieve your password in plain text.
• Payment Tokenisation: phjon does not store full payment account numbers. All payment method identifiers are tokenised and processed through certified payment gateways.
• Access Controls: Access to personal data within phjon's systems is restricted to authorised personnel on a strict need-to-know basis. All internal access to player data is logged and audited.
• Intrusion Detection and Monitoring: phjon's infrastructure is monitored 24/7 for suspicious access patterns, anomalous traffic, and potential security incidents.
• Regular Security Audits: phjon conducts periodic penetration testing and security audits of its platform infrastructure, engaging independent security professionals to identify and remediate vulnerabilities.
• Two-Factor Authentication: phjon offers optional two-factor authentication (2FA) for player accounts. Players are strongly encouraged to enable 2FA to add an additional layer of protection against unauthorised account access.

While phjon applies rigorous security measures, no online system can be guaranteed to be 100% secure. You are responsible for maintaining the security of your phjon account credentials and for notifying phjon immediately if you suspect any unauthorised access to your account.

13. Changes to This Policy

phjon reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR requirements. The most current version of this Policy will always be available at phjon.net/privacy-policy, with the date of last update displayed at the top of the document.

For material changes to this Policy — those that significantly affect your privacy rights or how phjon uses your personal data — phjon will notify you by email to your registered address and/or via an in-platform notification at least 14 days before the change takes effect. For minor or clarificatory amendments, phjon will update the Policy without advance notification.

Your continued use of the phjon Platform following the effective date of any update to this Policy constitutes your acknowledgement of the revised terms. If you do not agree to a material change, you have the right to close your phjon account prior to the effective date of the change by contacting our customer support team.

14. Contact and Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or phjon's handling of your personal data, please contact the phjon Data Protection Officer:

phjon will acknowledge all privacy-related enquiries within three business days and provide a substantive response within 15 business days. Where a request involves complex issues or a large volume of data, phjon will notify you of an extended response timeline.

If you are not satisfied with phjon's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the competent supervisory authority for data protection in the Philippines and may be reached through its official website and complaint channels.

This Privacy Policy was last reviewed and updated in January 2026. phjon reserves all rights not expressly granted under this Policy.