28phjoy Privacy Policy – How We Protect Your Data

This Privacy Policy explains how 28phjoy collects, uses, stores, and protects the personal information of everyone who visits, registers with, or transacts on the 28phjoy platform. It applies whether you access 28phjoy through a mobile browser, a desktop browser, or any other interface we make available.

28phjoy operates in the Philippines and is committed to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. We also observe the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

By creating a 28phjoy account or continuing to use the platform after this policy has been updated, you acknowledge that you have read and understood how your data is handled. If any part of this policy is unclear, reach out to our support team before registering – not after a concern arises. This Privacy Policy should be read together with the Terms and Conditions and Responsible Gaming guidelines, which form part of the full agreement between you and 28phjoy.

28phjoy collects personal data in two main categories: information you provide directly, and information generated automatically when you use the platform.

Information you provide directly:

• Identity data: Your full legal name, date of birth, and government-issued ID number (collected during KYC verification).
• Contact data: Mobile number, email address, and residential address.
• Payment data: GCash or Maya account reference, bank account or card details used for deposits and withdrawals. 28phjoy does not store complete card numbers; these are processed by our PCI-compliant payment partners.
• Account credentials: Username and encrypted password. 28phjoy never stores your password in plain text.
• Communications: The content of messages you send to 28phjoy support, including complaint and query records.
• Document uploads: Copies of identity documents, proof of address, or payment ownership documents submitted for verification.

Information collected automatically:

• Technical data: IP address, device type, operating system, browser version, and screen resolution.
• Usage data: Pages visited, games played, bet amounts, session duration, and navigation patterns within the 28phjoy platform.
• Transaction data: Full record of all deposits, withdrawals, wagers, wins, and losses associated with your account.
• Cookie and tracking data: Session identifiers and preference cookies as described in Section 8.

28phjoy collects personal data through the following channels:

• Direct input: Information you enter into registration forms, KYC submission screens, payment fields, and support chat windows on the 28phjoy platform.
• Automated systems: Technical and usage data collected through server logs, session analytics, and platform monitoring tools that run automatically when you access 28phjoy.
• Payment processors: Confirmation references and transaction identifiers received from GCash, Maya, banks, and card networks when you make a deposit or request a withdrawal.
• Verification partners: Identity confirmation data returned by third-party KYC service providers when your documents are verified.
• Cookies and similar technologies: Session and preference data collected through cookies placed on your device as described in Section 8.

28phjoy does not purchase personal data from third-party data brokers or marketing lists. Every piece of data we hold about you was provided by you or generated by your direct interaction with the 28phjoy platform.

28phjoy uses your personal data only for purposes that are directly related to running your account, operating the platform legally, and improving your experience. Here is a clear breakdown of how each category of data is used:

28phjoy does not use your personal data for targeted third-party advertising, profiling for sale to external marketers, or any purpose unrelated to operating your account and the platform.

Under the Philippine Data Privacy Act of 2012, 28phjoy processes personal data based on the following legal grounds:

• Contract performance: Processing necessary to operate your 28phjoy account, execute transactions, and fulfill the obligations described in our Terms and Conditions.
• Legal obligation: Processing required to comply with Philippine gaming regulations, anti-money laundering laws, tax reporting requirements, and NPC guidelines.
• Legitimate interests: Processing carried out to prevent fraud, maintain platform security, and improve service quality – provided these interests do not override your fundamental rights.
• Consent: Where required by law, 28phjoy obtains your explicit consent before processing data for purposes not covered by the above grounds, such as optional marketing communications. You may withdraw consent at any time.

28phjoy does not sell, rent, or trade your personal data to any third party. We share data only in the following limited and necessary circumstances:

• Payment processors: GCash, Maya, BDO, BPI, UnionBank, InstaPay, PESONet, Visa and Mastercard processing partners receive only the transaction reference data required to complete your deposit or withdrawal. 28phjoy does not forward full account credentials to these parties.
• KYC and identity verification providers: Documents submitted for identity verification are passed to regulated KYC partners for confirmation. These partners are contractually bound to use your data only for the stated verification purpose.
• Game providers: Game session data is shared with 28phjoy's certified game providers in order to deliver game results and maintain accurate records. No additional personal data is shared beyond what is operationally required.
• Regulatory and law enforcement authorities: 28phjoy is legally required to disclose data to Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), and law enforcement agencies when required by valid legal process or regulatory obligation.
• Internal group entities: Where 28phjoy operates as part of a corporate group, data may be shared with group entities for compliance consolidation, but only under equivalent data protection standards.

28phjoy retains your personal data for as long as your account is active and for the period required by Philippine law after account closure. The specific retention periods depend on the category of data:

• Account and identity data: Retained for a minimum of five (5) years after account closure, as required by anti-money laundering regulations and gaming authority guidelines.
• Transaction records: Retained for a minimum of five (5) years. Certain financial records may be retained longer if required by specific regulatory obligations.
• Support communications: Retained for up to three (3) years after the final interaction, to support dispute resolution and continuous service improvement.
• Cookie and session data: Session cookies expire when you close your browser. Persistent preference cookies are retained for up to twelve (12) months unless cleared by you sooner.

After the applicable retention period, your data will be securely deleted or anonymised so that it can no longer be associated with you. Anonymised, aggregated data may be retained indefinitely for statistical and platform improvement purposes without being considered personal data.

28phjoy uses cookies and similar tracking technologies to keep your session active, remember your preferences, and monitor platform performance. Here's what that means in practice:

• Session cookies: Required for the 28phjoy platform to function. These keep you logged in while you navigate between games and pages. They expire when you close your browser tab or log out.
• Preference cookies: Remember settings like your language and display preferences so you don't have to re-select them each time you visit 28phjoy.
• Analytics cookies: Collect anonymised data on how players navigate the platform. This helps 28phjoy identify technical problems and usability improvements. No personally identifiable information is included in analytics reports.
• Security cookies: Help 28phjoy detect anomalous login patterns and protect your account from unauthorised access attempts.

28phjoy does not use third-party advertising cookies or allow external ad networks to place tracking technologies on our platform.

You can manage cookies through your browser settings. Note that disabling session or security cookies may affect your ability to log in or use certain 28phjoy features. Disabling analytics cookies will not affect your ability to play.

28phjoy is strictly an adult gaming platform intended for users aged 21 years and above. We do not knowingly collect personal data from anyone under this age. If we discover that a registered account belongs to a person under 21, the account will be immediately suspended, data associated with the account will be deleted in line with our standard procedures, and any funds held will be returned subject to identity verification.

If you are a parent or guardian and believe that a minor has created a 28phjoy account using your contact details or payment information, please contact our support team immediately at support@28phjoy.click. We will investigate and act within 48 hours of receiving a verified report.

28phjoy implements a range of technical and organisational security measures to protect your personal data from unauthorised access, alteration, disclosure, or destruction. Key measures include:

• SSL/TLS encryption: All data transmitted between your device and the 28phjoy platform is encrypted using current Transport Layer Security standards.
• Password hashing: Your account password is stored as a cryptographic hash. 28phjoy staff cannot view your password in plain text, and support agents will never ask for it.
• Access controls: Personal data access within 28phjoy is limited on a strict need-to-know basis. Only authorised personnel with specific role requirements can access identifiable user data.
• Payment data security: Card and e-wallet payment processing is handled by PCI DSS-compliant partners. 28phjoy does not store complete payment card numbers on its own servers.
• Intrusion monitoring: 28phjoy systems are monitored for unusual access patterns and potential security incidents around the clock.

Despite these measures, no internet transmission or digital storage system is completely immune to security risks. 28phjoy encourages all players to take their own account security steps – using a strong unique password, enabling two-factor authentication if offered, and logging out on shared devices.

In the event of a data breach that is likely to affect your rights and freedoms, 28phjoy will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, as required under the Data Privacy Act.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 28phjoy. To exercise any of these rights, contact our Data Protection Officer at support@28phjoy.click with your account details and a clear description of your request.

28phjoy's primary operations and data storage are based in the Philippines. In limited circumstances, data may be processed by service providers located in other countries – for example, where a certified game provider or KYC partner operates infrastructure outside the Philippines.

When such transfers occur, 28phjoy ensures that appropriate safeguards are in place, including contractual clauses that require the receiving party to apply equivalent data protection standards to those required under Philippine law. 28phjoy does not transfer data to countries that do not provide an adequate level of data protection without implementing such safeguards.

If you have specific questions about where your data is stored or processed, contact the 28phjoy Data Protection Officer at support@28phjoy.click.

The 28phjoy platform does not contain outbound links to external third-party websites for browsing or marketing purposes. All links within the 28phjoy interface direct you to other sections of the 28phjoy platform itself.

However, the payment channels you use to fund or withdraw from your 28phjoy account – such as GCash, Maya, or your banking app – are separate platforms governed by their own privacy policies. 28phjoy is not responsible for the data practices of these external payment services. Before using any payment provider, we encourage you to review that provider's privacy policy.

28phjoy may update this Privacy Policy from time to time to reflect changes in the platform, applicable regulations, or our data handling practices. The effective date displayed at the top of this page always reflects the most current version.

When material changes are made – changes that meaningfully affect how your data is used or your rights as a data subject – registered 28phjoy players will be notified by email or through an in-platform notice prior to the changes taking effect. For minor clarifications and corrections, the page will simply be updated without a separate notification.

Continued use of your 28phjoy account after a policy update takes effect constitutes acceptance of the revised policy. If you do not agree with any update, please close your account before the new version takes effect and contact support to request data deletion in accordance with Section 11.

28phjoy has designated a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have any questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, contact the 28phjoy DPO directly:

• Email: support@28phjoy.click
• Subject line: "Data Privacy Request – [Your Account Username]"
• Response time: Within 15 business days for data subject requests; within 24 hours for general privacy queries
• Availability: 24 hours a day, 7 days a week for general support; data subject requests reviewed during Philippine business hours

If your concern is not resolved to your satisfaction through the 28phjoy internal process, you have the right to escalate to the National Privacy Commission of the Philippines. The NPC handles complaints from Filipino data subjects and can be reached through their official government portal.

For questions about your 28phjoy account, transactions, or platform features, visit the FAQ page or contact general support at the same email address above.