Privacy Policy for ph.join

ph.join ("we", "us", "our") operates the online gaming platform accessible at phjoin.top (the "Platform"). We are committed to protecting the personal data of all individuals who interact with our Platform, including registered users, visitors, and prospective members.

This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. It describes our practices regarding the collection, use, storage, disclosure, and protection of personal data in connection with your use of the ph.join Platform.

If you have questions about how ph.join handles your personal data, please refer to Section 14 of this Policy for contact details, including how to reach our designated Data Protection Officer (DPO).

ph.join collects personal data through several channels, including account registration forms, identity verification processes, payment transactions, platform usage, and direct communications with our support team. The categories of personal data we collect include:

ph.join does not collect sensitive personal information (as defined under the Data Privacy Act) unless it is strictly required for regulatory compliance, such as for anti-money laundering (AML) verification purposes, in which case such data is handled with heightened security measures.

ph.join uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your ph.join account, including processing your registration and verifying your identity.
• Service Delivery: To provide access to all games and features on the Platform, process deposits and withdrawals in Philippine Peso (₱), and deliver customer support.
• Identity Verification (KYC): To verify that you meet the minimum age requirement of 21 years and to comply with anti-money laundering regulations applicable in the Philippines.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other prohibited activities on the Platform.
• Responsible Gaming: To monitor gaming patterns and identify users who may be exhibiting signs of problem gambling, enabling us to offer appropriate support tools such as deposit limits and self-exclusion.
• Legal & Regulatory Compliance: To fulfill our obligations under Philippine law, including reporting requirements under the Anti-Money Laundering Act (AMLA) and PAGCOR regulations.
• Platform Improvement: To analyze usage patterns and technical performance data in order to improve the ph.join Platform, fix bugs, and develop new features.
• Communications: To send you transactional notifications (e.g., deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about ph.join offers and games.

ph.join processes your personal data on the following legal bases, as recognized under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and ph.join — specifically, to provide you with access to the Platform and its gaming services.
• Legal Obligation: Processing is required to comply with applicable Philippine laws and regulations, including KYC requirements, AML obligations, and PAGCOR licensing conditions.
• Legitimate Interests: Processing is necessary for ph.join's legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities — such as sending marketing communications or using non-essential cookies — ph.join relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

ph.join uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session security, and gather analytics data that helps us improve our services. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without affecting core Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how users interact with the Platform — such as pages visited, time spent, and navigation paths. This data helps ph.join identify areas for improvement.
• Preference Cookies: Used to remember your settings and preferences, such as language selection and display options, so you do not need to reconfigure them on each visit.
• Marketing Cookies: Used only where you have provided consent, to deliver relevant promotional content about ph.join games and offers.

You can manage your cookie preferences through your browser settings. Please note that disabling essential cookies may impair your ability to use certain features of the ph.join Platform, including logging in and accessing games.

ph.join does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: Financial service providers such as GCash, PayMaya, BPI, BDO, and Metrobank, to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers engaged to assist with age verification and identity authentication in compliance with regulatory requirements.
• Technology Service Providers: Cloud hosting, platform infrastructure, and software vendors who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: Government agencies, law enforcement bodies, and regulatory authorities (including PAGCOR and the Anti-Money Laundering Council) where disclosure is required by law or court order.
• Fraud Prevention Services: Third-party fraud detection and security monitoring services used to protect the integrity of the Platform and its users.

All third-party service providers engaged by ph.join are contractually required to process personal data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.

ph.join retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with ph.join, and for a period of five (5) years following account closure, in accordance with Philippine AML record-keeping requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act.
• Gaming History: Game logs and wagering records are retained for three (3) years from the date of the relevant gaming session.
• Communications Data: Customer support correspondence is retained for two (2) years from the date of the last interaction.
• Technical Logs: Server and access logs are retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph.join's data disposal procedures. Where data is anonymized rather than deleted, the resulting anonymized data may be retained indefinitely for analytical purposes, as it no longer constitutes personal data.

ph.join implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the ph.join Platform.
• Encryption at rest for all stored personal data and financial records.
• Role-based access controls ensuring that only authorized personnel can access personal data, limited to what is necessary for their specific function.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures to detect, contain, and report data breaches in accordance with the requirements of the National Privacy Commission (NPC).

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, ph.join will notify the National Privacy Commission and affected users in accordance with the timelines prescribed under the Data Privacy Act and its Implementing Rules.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph.join:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data ph.join holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that ph.join has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact ph.join's Data Protection Officer using the contact details provided in Section 14 of this Policy. We will respond to all verified requests within thirty (30) days, in accordance with the requirements of the Data Privacy Act.

The ph.join Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine regulations governing online gaming and casino-style gambling. ph.join does not knowingly collect personal data from individuals under the age of 21.

If ph.join becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. All funds associated with an underage account may be forfeited in accordance with applicable regulations.

ph.join primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where cloud infrastructure or technology partners operate internationally.

Where such transfers occur, ph.join ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required under the Philippine Data Privacy Act. These safeguards may include:

• Contractual clauses requiring the recipient to maintain data protection standards consistent with Philippine law.
• Transfers only to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules or equivalent mechanisms where data is transferred within a corporate group.

By using the ph.join Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards outlined above.

The ph.join Platform may integrate with or rely upon third-party services to deliver certain features, including payment processing, identity verification, and platform analytics. While ph.join carefully selects and vets all third-party service providers, we are not responsible for the privacy practices of those third parties.

Each third-party service provider engaged by ph.join is required to enter into a data processing agreement that obligates them to:

• Process personal data only on documented instructions from ph.join.
• Implement appropriate technical and organizational security measures.
• Not engage sub-processors without prior written authorization from ph.join.
• Delete or return all personal data upon termination of the service relationship.

ph.join does not embed third-party social media plugins, advertising networks, or external tracking scripts on the Platform that would allow third parties to collect your personal data without your knowledge.

ph.join reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is always displayed at the top of this page.

When material changes are made to this Privacy Policy, ph.join will notify registered users via the email address associated with their account and/or by displaying a prominent notice on the Platform. Your continued use of the ph.join Platform following the publication of any amendments constitutes your acknowledgment of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph.join, please contact our Data Protection Officer (DPO). The DPO is responsible for overseeing ph.join's compliance with the Philippine Data Privacy Act and for handling all data subject rights requests.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.

For responsible gaming concerns or to request self-exclusion, please visit the Responsible Gaming page. For a full overview of your legal rights and obligations as a ph.join user, please review our Terms & Conditions.