22phjoy Privacy Policy

1 Introduction

22phjoy is committed to protecting the privacy and personal data of all users of our platform. We recognise that the personal information you share with us is important, and we take our responsibility as a personal information controller seriously.

This Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal data collected through the 22phjoy website, mobile platform, and any related services.

By registering an account with 22phjoy, accessing our platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.

2 Personal Data We Collect

22phjoy collects the following categories of personal data from Players and platform users:

Identity and Contact Information

• Full legal name as it appears on your government-issued identification;
• Date of birth (for age verification purposes — you must be 21 or older);
• Residential address, city, and province;
• Email address and mobile phone number;
• Government-issued identification number (e.g., passport number, driver's licence number, PhilSys ID number).

Financial Information

• Payment method details (e.g., GCash account number, Maya account details, bank account information) — stored only to the extent necessary to process transactions;
• Transaction history, including deposits, withdrawals, and gaming activity;
• Source of funds information where required for anti-money laundering compliance.

Technical and Usage Data

• IP address, device type, operating system, and browser type;
• Pages visited, features used, and time spent on the platform;
• Login timestamps and session data;
• Geolocation data (city/region level) where permitted by your device settings.

Communications Data

• Records of your communications with 22phjoy customer support;
• Feedback, survey responses, and promotional opt-in preferences.

3 How We Collect Your Data

22phjoy collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the 22phjoy platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment data from payment processors such as GCash and Maya.

4 How We Use Your Personal Data

22phjoy uses the personal data we collect for the following purposes:

• Account management: To create, maintain, and manage your 22phjoy player account;
• Identity and age verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with KYC requirements;
• Transaction processing: To process deposits, withdrawals, and gaming transactions on your account;
• Legal and regulatory compliance: To comply with applicable Philippine laws, including anti-money laundering (AML) obligations, gaming regulations, and NPC requirements;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct on the platform;
• Customer support: To respond to your enquiries, complaints, and support requests;
• Platform improvement: To analyse usage patterns and improve the features, performance, and user experience of the 22phjoy platform;
• Marketing communications: To send you promotional offers, bonuses, and platform updates where you have consented to receive such communications. You may opt out of marketing communications at any time by contacting our support team;
• Responsible gaming: To monitor gaming behaviour and provide responsible gaming tools, including deposit limits, cooling-off periods, and self-exclusion, where appropriate.

5 Legal Basis for Processing

22phjoy processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform our obligations under the Terms & Conditions you agreed to when registering your 22phjoy account, including account management and transaction processing;
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including KYC, AML, and gaming regulatory requirements;
• Legitimate interests: Processing is necessary for the legitimate interests of 22phjoy, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and freedoms;
• Consent: Where we rely on your consent as the legal basis for processing — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

22phjoy does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

Service Providers

We engage trusted third-party service providers to assist in operating the 22phjoy platform, including KYC and identity verification providers, payment processors (such as GCash and Maya), IT infrastructure and hosting providers, customer support platforms, and fraud prevention and security services. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data privacy laws.

Regulatory and Law Enforcement Authorities

22phjoy may disclose your personal data to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts where required to do so by law, court order, or regulatory direction. This includes disclosures required under AML regulations and gaming licensing requirements.

Business Transfers

In the event of a merger, acquisition, or sale of all or part of 22phjoy's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any changes to this Privacy Policy that may result.

7 Cookies and Tracking Technologies

22phjoy uses cookies and similar tracking technologies to enhance your experience on the platform, analyse usage patterns, and support security functions. The following types of cookies may be used:

• Strictly necessary cookies: Essential for the operation of the 22phjoy platform, including maintaining your login session and enabling secure transactions. These cannot be disabled;
• Functional cookies: Used to remember your preferences and settings, such as language and display options, to personalise your experience;
• Analytical cookies: Used to collect aggregated, anonymised data about how Players use the platform, helping us identify areas for improvement;
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

Managing Cookies

You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 22phjoy platform. Strictly necessary and security cookies cannot be disabled as they are essential to the safe operation of the platform.

8 Data Retention

22phjoy retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with AML and gaming regulatory requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later;
• Customer support communications: Retained for a period of three (3) years from the date of the communication;
• Marketing preferences: Retained until you withdraw your consent or request deletion.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures.

9 Data Security

22phjoy implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 22phjoy platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Multi-factor authentication requirements for account access and administrative systems;
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC requirements.

While 22phjoy takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your 22phjoy login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10 Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 22phjoy:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as described in this Policy;
• Right of access: The right to request a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you;
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

11 Children's Privacy and Age Restriction

The 22phjoy platform is strictly intended for individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered an account with 22phjoy or provided us with personal data, please contact our support team immediately at [email protected] so that we can take appropriate action.

12 Third-Party Links

The 22phjoy platform may contain links to third-party websites or services for informational purposes. This Privacy Policy applies solely to the 22phjoy platform and does not govern the data practices of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit, as 22phjoy has no control over and accepts no responsibility for their content or data practices.

13 Updates to This Privacy Policy

22phjoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered Players by email or through a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the 22phjoy platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms.

14 Contact Our Data Privacy Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 22phjoy, please contact our designated Data Privacy Officer:

For responsible gaming support, self-exclusion requests, or gaming-related concerns, please visit our Responsible Gaming page.