joinph Privacy Policy

This Privacy Policy ("Policy") describes how joinph collects, uses, stores, processes, and discloses personal data obtained from individuals ("you" or "Data Subject") who access or use the joinph online gaming platform at joinph.win ("Platform"), including registered Members and visitors who have not yet created an account.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission of the Philippines ("NPC"). Where joinph's operations intersect with PAGCOR regulations, personal data processing also complies with applicable PAGCOR guidelines on player data.

By accessing joinph.win, creating a joinph Account, or using any feature of the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, you should not create an account or use the Platform.

For the purposes of the Data Privacy Act of 2012, joinph is the Personal Information Controller ("PIC") in respect of personal data collected through the Platform. As PIC, joinph determines the purposes and means of processing your personal data and is responsible for ensuring that processing is conducted lawfully and securely.

joinph has appointed a Data Protection Officer ("DPO") who oversees compliance with this Policy and with the DPA. The DPO may be contacted at the details provided in Section 15 of this Policy.

joinph collects the following categories of personal data from Members and Platform users:

joinph collects personal data through the following methods:

• Direct Provision by You: Information you provide when registering your joinph Account, completing KYC verification, making deposits or withdrawal requests, or contacting our support team.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 10).
• Payment Processors: Transaction reference data received from our Philippine payment processing partners (GCash, Maya, BPI, BDO, InstaPay) to confirm payment completion and support withdrawal processing.
• Third-Party Game Providers: Aggregated game session data from licensed game providers such as JILI Gaming, PG Soft, and other software providers whose games are available on the Platform, for the purpose of calculating game history and winnings.
• Identity Verification Services: Where joinph uses a third-party KYC service provider to verify the authenticity of identity documents submitted during account verification.
• Publicly Available Sources: In limited circumstances, publicly available information to supplement KYC or fraud investigation processes, strictly in accordance with DPA requirements.

Under the Data Privacy Act of 2012, joinph processes your personal data on the following legal bases:

• Consent (Section 12(a) DPA): Where you have provided your freely given, specific, informed consent — for example, when consenting to this Privacy Policy upon registration, or when opting into marketing communications.
• Contractual Necessity (Section 12(b) DPA): Processing necessary for the performance of the joinph Terms & Conditions to which you are a party — including account management, game delivery, payment processing, and customer support.
• Legal Obligation (Section 12(c) DPA): Processing required for compliance with applicable Philippine laws and PAGCOR regulations, including anti-money laundering obligations under RA 9160 (AMLA), KYC requirements, and mandatory regulatory reporting.
• Legitimate Interests (Section 12(f) DPA): Processing necessary for the legitimate interests of joinph, provided such interests are not overridden by your rights — including fraud detection, platform security, and service improvement analytics.
• Vital Interests (Section 12(e) DPA): In exceptional circumstances, to protect the vital interests of Data Subjects or other natural persons.

joinph uses your personal data for the following purposes:

• Account Registration & Management: Creating and maintaining your joinph Account, verifying your identity and age, and managing your account settings and preferences.
• Platform Delivery: Providing access to all joinph games, betting markets, live dealer services, and other Platform features you are entitled to use as a registered Member.
• Payment Processing: Processing your deposits via GCash, Maya, GrabPay, BPI, BDO, and InstaPay, and routing your withdrawal requests to your registered payment method.
• Regulatory Compliance: Meeting joinph's obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine law — including suspicious transaction reporting to the Anti-Money Laundering Council (AMLC) where legally required.
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling indicators, administering self-exclusion and cooling-off requests, and complying with responsible gaming obligations under PAGCOR's framework.
• Customer Support: Responding to your inquiries, resolving disputes, processing complaints, and maintaining records of support interactions for quality and compliance purposes.
• Security & Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, bonus abuse, collusion, and other prohibited conduct on the Platform.
• Platform Improvement: Analyzing aggregated and anonymized usage data to improve the Platform's features, user interface, and overall performance.
• Marketing Communications: Where you have opted in, sending you personalized promotional offers, game recommendations, and Platform updates via SMS or in-Platform notifications. You may opt out at any time.

joinph does not sell, rent, or trade your personal data. We share personal data only in the following limited circumstances, and only to the extent necessary for the stated purpose:

• Payment Service Providers: GCash (Mynt / Globe Fintech Innovations), Maya Philippines (formerly PayMaya), GrabPay Philippines, BPI, BDO, and other licensed Philippine payment processors, solely for the purpose of processing your transactions.
• Game Software Providers: Licensed game providers (including JILI Gaming and other certified providers) receive the minimum session data required to deliver games and verify game outcomes — no personal identity data is shared with game providers beyond a pseudonymous session identifier.
• Identity Verification Providers: Third-party KYC service providers engaged by joinph to verify the authenticity of government-issued identity documents, operating under strict data processing agreements compliant with the DPA.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and Philippine law enforcement agencies, where disclosure is required by law or a valid legal order.
• Fraud Prevention Networks: Industry fraud prevention services to identify and block fraudulent accounts, shared only where permitted by applicable law and necessary to protect joinph's Members and operations.
• Professional Advisers: Legal counsel, auditors, and compliance consultants engaged by joinph, subject to professional confidentiality obligations.

All third parties with whom joinph shares personal data are required to process such data only for the specific purposes for which it was shared, in accordance with the DPA's requirements for Data Sharing Agreements under Section 20 thereof.

joinph retains personal data only for as long as necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your joinph Account and for a period of five (5) years following permanent Account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Transaction and Gaming Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA record-keeping obligations and PAGCOR audit requirements.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of Account closure, or longer where required by a specific legal obligation or regulatory order.
• Support Communication Records: Live chat transcripts and email support correspondence retained for three (3) years from the date of the communication, for dispute resolution and compliance purposes.
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your Account plus three (3) years, to demonstrate compliance with consent requirements.
• Technical Logs: Server and access logs retained for a maximum of twelve (12) months in standard rotation, except where logs are required for security investigation purposes.

Following the expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidance on data disposal.

joinph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, alteration, disclosure, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and the joinph Platform is encrypted using TLS 1.2 or higher (HTTPS). All payment-related communications use end-to-end encryption.
• Encryption at Rest: Sensitive personal data stored on joinph's servers, including identity verification data and financial records, is encrypted at rest using industry-standard AES-256 encryption.
• Password Security: Account passwords are stored using one-way cryptographic hashing with salt. joinph staff cannot access your plain-text password under any circumstances.
• Access Controls: Access to personal data is restricted to authorized joinph staff on a strict need-to-know basis. Role-based access controls and audit logs are in place to prevent unauthorized internal access.
• Multi-Factor Authentication: OTP-based two-factor authentication is available and recommended for all joinph Accounts, and is required for certain high-risk operations including large withdrawals.
• Security Audits: joinph's platform and data infrastructure undergo regular security assessments and penetration testing by qualified security professionals.
• Incident Response: joinph maintains a data breach response plan. In the event of a personal data breach affecting your rights and freedoms, joinph will notify the NPC within 72 hours and will notify affected Data Subjects as required by NPC Circular 16-03.

joinph uses cookies and similar tracking technologies on the Platform. A cookie is a small text file placed on your device by a website to enable certain functionality and to collect usage information.

joinph uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication tokens that keep you logged in to your joinph Account during a session. These cannot be disabled without affecting Platform functionality.
• Functional Cookies: Store your preferences such as language settings, game display preferences, and your last-visited section of the Platform to improve your experience.
• Analytics Cookies: Used to collect anonymized data about how visitors use the Platform — which pages are visited most, how long sessions last, and where navigation errors occur. This data helps joinph improve the Platform.
• Security Cookies: Used to detect fraudulent login attempts, recognize suspicious patterns, and protect your joinph Account from unauthorized access.

You may control cookie settings through your browser's privacy controls. Blocking strictly necessary cookies may prevent you from logging in or using core Platform features. joinph does not use third-party advertising cookies or cross-site tracking cookies for targeted advertising.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by joinph. You may exercise any of these rights by contacting the joinph Data Protection Officer at the details in Section 15:

joinph will respond to all valid Data Subject requests within fifteen (15) business days of receipt, as required by the DPA IRR. Identity verification may be required before processing your request.

The joinph Platform is strictly restricted to persons who are 21 years of age or older, in accordance with PAGCOR's minimum gambling age requirement. joinph does not knowingly collect personal data from individuals under 21 years of age.

If joinph discovers or has reason to believe that an Account has been created by a person under 21, the Account will be immediately suspended, all personal data collected will be securely deleted in accordance with our data retention procedures, and any deposits will be returned in compliance with PAGCOR rules.

Parents and guardians are encouraged to ensure that minors do not have access to devices or accounts through which the joinph Platform could be accessed. If you believe joinph may have inadvertently collected data from a person under 21, please contact the DPO immediately at the details in Section 15.

The joinph Platform may contain references or redirects to third-party game providers' content interfaces. joinph is not responsible for the privacy practices of third-party software or service providers whose products are accessed through the Platform. Game session interfaces rendered by third-party providers (such as JILI Gaming's game engine) are subject to those providers' own privacy and data handling practices.

joinph's Privacy Policy applies solely to data collected and processed directly by joinph through joinph.win. We recommend reviewing the privacy policies of any third-party services you interact with.

joinph reserves the right to amend this Privacy Policy at any time. When material changes are made, joinph will notify registered Members by SMS to their registered Philippine mobile number and/or by displaying a prominent notice on the Platform prior to the changes taking effect. The amended Policy will be effective from the date stated in the update notice.

The most current version of this Privacy Policy is always available at joinph.win/privacy-policy. The version currently published supersedes all prior versions. Your continued use of the joinph Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy.

If the changes materially affect how joinph processes personal data in a way that requires fresh consent under the DPA, joinph will obtain your renewed consent before processing your data under the new terms.

For all privacy-related matters, including Data Subject access requests, rectification requests, erasure requests, objections to processing, and data breach reports, please contact joinph's Data Protection Officer through the following channels:

• Email: [email protected] — use the subject line "Privacy / DPO Request" to ensure your message is routed to the DPO. Standard response time is within 15 business days.
• Live Chat: Available 24/7 within the joinph Platform. For urgent data privacy concerns — particularly suspected data breaches or unauthorized account access — live chat is the fastest channel, with responses typically within 5 minutes.

If you are not satisfied with joinph's response to a privacy concern, or if you believe joinph has violated your rights under the Data Privacy Act, you have the right to file a complaint directly with the National Privacy Commission of the Philippines through their official channels.