pgjoy Privacy Policy

pgjoy ("we", "us", "our", or the "Company") is committed to protecting the privacy and personal data of every player who accesses or uses the pgjoy platform available at pgjoy.net (the "Platform"). This Privacy Policy describes in detail the types of personal information we collect, the purposes for which it is processed, the parties with whom it may be shared, and the rights available to you as a data subject under Philippine law.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (the "DPA"), and its Implementing Rules and Regulations as issued by the National Privacy Commission of the Philippines. Where applicable, it also reflects the data handling standards required by the Philippine Amusement and Gaming Corporation (PAGCOR) for licensed online gaming operators.

By creating a pgjoy account, accessing the Platform, or submitting any personal information to pgjoy, you acknowledge that you have read, understood, and consented to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the Platform and contact our support team to close your account.

For the purposes of the Philippine Data Privacy Act of 2012, pgjoy acts as the Personal Information Controller (PIC) in respect of all personal data collected through the Platform. As PIC, pgjoy determines the purposes and means of processing your personal information and is responsible for ensuring that such processing complies with the DPA and all applicable regulations.

pgjoy has designated a Data Protection Officer (DPO) who oversees compliance with data privacy obligations and serves as the primary point of contact for data subject inquiries and complaints. You may reach the DPO through the contact details provided in Section 15 of this Privacy Policy.

pgjoy collects the following categories of personal data in connection with the provision of its services:

pgjoy does not intentionally collect sensitive personal information as defined under Section 3(l) of the DPA, such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where disclosure is required for responsible gaming intervention purposes and with your explicit consent.

pgjoy collects personal data through the following methods:

• Direct collection: Information you provide when registering an account, completing identity verification, submitting a support request, or responding to a survey or promotion.
• Automated collection: Technical and usage data collected automatically through cookies, server logs, and session tracking technologies as you navigate and interact with the Platform.
• Payment processors: Transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and other payment partners when you make deposits or withdrawals.
• Identity verification providers: Enhanced identity data received from third-party KYC and document verification services used to confirm your identity and age in compliance with PAGCOR requirements.
• Fraud prevention services: Device fingerprinting and risk-scoring data received from security service partners used to detect and prevent unauthorized account access and fraudulent activity.

pgjoy processes your personal data on the following lawful bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to create and maintain your pgjoy account, process deposits and withdrawals, settle bets, and deliver the services described in the Terms & Conditions.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) reporting obligations, Know Your Customer (KYC) requirements, and orders from competent Philippine regulatory authorities.
• Legitimate interest: Processing necessary to prevent fraud, secure the Platform, monitor for prohibited conduct, and improve service quality, provided that such interests do not override your fundamental rights.
• Consent: Processing for marketing communications, optional analytics, and any other purpose for which you have provided explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

pgjoy uses the personal data it holds about you for the following purposes:

• To register, verify, and maintain your pgjoy account, including enforcing the 21+ age requirement mandated by PAGCOR.
• To process deposits, withdrawals, and bet settlements through your chosen payment methods (GCash, Maya, BPI, BDO, Metrobank, Coins.ph, USDT, 7-Eleven).
• To deliver customer support in English and Filipino (Tagalog) via live chat and email.
• To send transactional communications, including account verification emails, deposit confirmations, withdrawal notifications, and security alerts.
• To send promotional communications, bonus offers, and event notifications — only where you have provided explicit opt-in consent.
• To detect, investigate, and prevent fraudulent transactions, collusion, bonus abuse, money laundering, and other prohibited conduct in accordance with Section 9 of the Terms & Conditions.
• To comply with PAGCOR regulatory reporting, AMLA suspicious transaction reporting, and NPC data breach notification obligations.
• To monitor player behaviour for responsible gaming purposes, including identifying signs of problem gambling and activating protective measures where appropriate.
• To maintain platform security, investigate unauthorized access, and conduct internal audits.
• To analyse platform usage patterns and improve the quality, performance, and personalization of the pgjoy experience for Filipino players.

pgjoy does not sell, rent, or trade your personal information to third parties. We may share your personal data only in the following limited circumstances:

• Payment service providers: GCash (Mynt), Maya (Voyager Innovations), BPI, BDO, Metrobank, Coins.ph, and cryptocurrency network processors, strictly to the extent necessary to facilitate your deposit and withdrawal transactions.
• Identity verification and KYC providers: Third-party document verification partners engaged to confirm your identity and age in accordance with PAGCOR requirements and AMLA obligations.
• Fraud prevention and cybersecurity services: Security partners engaged to protect the Platform and detect unauthorized access, money laundering, and fraudulent activity.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law, regulation, or lawful order.
• Professional advisers: Lawyers, auditors, and accountants bound by professional confidentiality obligations, where necessary for legal proceedings or compliance audits.
• Business transfers: In the event of a merger, acquisition, or sale of all or substantially all of pgjoy's assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.

pgjoy uses cookies and similar tracking technologies to ensure the Platform functions correctly and to improve your experience as a Filipino player. The following categories of cookies are used:

• Strictly necessary cookies: Essential for platform operation. These cookies maintain your login session, preserve your language and currency preferences, and protect against cross-site request forgery. They cannot be disabled without impairing Platform functionality.
• Performance and analytics cookies: Used to measure how players navigate and use the Platform, identify performance bottlenecks, and improve page load speeds and responsiveness. Data collected is aggregated and does not identify individual users.
• Functional cookies: Remember your optional preferences such as notification settings, game view preferences, and responsible gaming tool configurations.
• Security cookies: Support fraud detection and session integrity monitoring by storing anonymized device fingerprint attributes during your session.

pgjoy does not use third-party advertising cookies, retargeting pixels, or social media tracking technologies that share your browsing behaviour with external advertising networks.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. For guidance on managing cookies in the most popular browsers used in the Philippines, please visit your browser's official help centre.

pgjoy retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by applicable Philippine law and regulation. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification. Where data must be retained beyond the standard period due to an ongoing regulatory investigation or legal proceeding, such data is preserved until the matter is concluded.

pgjoy implements a layered set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and pgjoy servers.
• AES-256 encryption at rest for all stored identity documents, financial data, and account credentials.
• Multi-factor authentication (MFA) for all administrative access to systems that process personal data.
• One-time password (OTP) verification on login and withdrawal transactions to prevent unauthorized account access.
• Session fingerprinting to detect and terminate sessions originating from unrecognized devices or locations.
• Role-based access controls limiting employee access to personal data to those with a documented business need.
• Regular penetration testing and security audits conducted by qualified cybersecurity professionals.
• Data breach response plan aligned with NPC notification requirements, including 72-hour breach notification where required.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to the personal data pgjoy holds about you. These rights may be exercised by contacting pgjoy through the channels listed in Section 15:

pgjoy will respond to all verified data subject requests within fifteen (15) business days of receipt. Where a request is complex or where a high volume of requests are received simultaneously, this period may be extended by a further fifteen (15) business days with prior notice to you.

pgjoy strictly prohibits the use of its Platform by persons under the age of 21 years old, in accordance with PAGCOR regulations governing online gambling in the Philippines. pgjoy does not knowingly collect personal data from minors.

All account registrations are subject to mandatory age verification. Where pgjoy discovers or has reasonable grounds to believe that an account has been registered by a person under 21, the account will be suspended immediately, all funds will be held pending investigation, and the matter will be referred to the appropriate regulatory authority.

pgjoy primarily stores and processes personal data on servers located within or accessible from the Philippines. Where the engagement of certain third-party service providers — such as global KYC verification platforms or cybersecurity monitoring services — requires personal data to be transferred outside the Philippines, pgjoy ensures that such transfers are subject to appropriate safeguards consistent with Section 21 of the Data Privacy Act of 2012.

These safeguards include:

• Data processing agreements with receiving parties that impose obligations equivalent to those under Philippine data privacy law.
• Transfer only to jurisdictions or organizations that maintain an adequate level of data protection as assessed by the National Privacy Commission.
• Standard contractual clauses approved for cross-border data transfers where no adequacy decision is in place.

Details of specific cross-border transfers and the safeguards applied may be requested by contacting pgjoy's Data Protection Officer.

pgjoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine law, PAGCOR regulatory requirements, the services we offer, or our data processing practices. The most current version will always be published at pgjoy.net/privacy-policy with the revised effective date clearly noted at the top of the document.

Where changes are material — meaning they significantly affect your rights or the way we process your personal data — pgjoy will notify registered players by email to the address on file and/or through a prominent notice within the Platform at least seven (7) calendar days before the changes take effect. Your continued use of the Platform after the effective date of any updated Privacy Policy constitutes acceptance of the revised terms.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about how pgjoy handles your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the pgjoy Platform
• Response time: Within 3–5 minutes for live chat; within 24 hours for email inquiries

If you are not satisfied with pgjoy's response to your privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. The NPC can be reached through its official website and handles complaints from Filipino data subjects regarding violations of the Data Privacy Act of 2012.