Privacy Policy – phjil

1. Introduction

phjil ("we," "us," "our") operates the online casino and sports betting platform accessible at phjil.vip. In the course of providing our services to registered players and visitors across the Philippines — including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond — phjil necessarily processes certain personal data.

This Privacy Policy applies to all personal data processed by phjil in connection with your use of the Platform, including registration, identity verification, payment processing, gameplay activity, and communications with our support team. By registering a phjil account or using the Platform, you acknowledge that you have read and understood this Privacy Policy.

phjil operates under PAGCOR's regulatory framework, which imposes obligations on licensed operators regarding the handling of player data. Our privacy practices reflect both our PAGCOR compliance obligations and the broader requirements of the Philippine Data Privacy Act of 2012 (RA 10173).

2. Personal Data We Collect

2.1 Registration Data

When you create a phjil account, we collect the information you provide, which includes your Philippine mobile number, chosen username, and password (stored in hashed, non-recoverable form). Your mobile number serves as your primary account identifier and as the channel for SMS-based two-factor authentication.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR's KYC requirements and our anti-money laundering (AML) obligations, phjil collects identity verification documents prior to enabling withdrawal services. This includes:

• Full legal name as appearing on a government-issued Philippine identification document.
• Date of birth (used to verify the 21+ age requirement).
• Copy of a valid Philippine government-issued ID (PhilSys National ID, UMID, driver's license, or passport).
• Proof of address, where required for enhanced due diligence.
• Source of funds documentation, where required under phjil's AML risk framework.

2.3 Financial Data

phjil collects data necessary to process deposits and withdrawals, including your GCash or PayMaya registered mobile number, BPI, BDO, or Metrobank account details (where used for transactions), and transaction amounts and timestamps. phjil does not store full payment card numbers or GCash/PayMaya credentials — payment authentication is handled directly by the respective certified payment gateway.

2.4 Gameplay and Transaction Data

phjil records all wagering activity, game session logs, bet amounts, game outcomes, and account balance movements. This data is retained for regulatory audit purposes, dispute resolution, and responsible gaming monitoring, as required under PAGCOR's licensing conditions.

2.5 Technical and Usage Data

phjil automatically collects certain technical data when you access the Platform, including:

• IP address and approximate geographic location.
• Device type, operating system, and browser information.
• Session timestamps and duration.
• Pages visited and navigation patterns within the Platform.

3. How We Collect Personal Data

phjil collects personal data through the following methods:

• Direct provision: Information you actively provide during registration, KYC verification, payment setup, and customer support interactions.
• Automated collection: Technical and usage data collected automatically through server logs, session tracking, and standard web analytics mechanisms when you access the Platform.
• Payment processors: Transaction confirmation data received from GCash, PayMaya, and banking payment gateways when you initiate deposits or withdrawals.
• Identity verification services: Where phjil uses a third-party KYC verification provider to authenticate identity documents, that provider may return structured identity data to phjil for account verification purposes.

4. Purposes of Processing

phjil processes your personal data for the following purposes:

phjil does not use your personal data for unsolicited third-party marketing, nor does phjil sell player data to external advertisers.

5. Legal Basis for Processing

phjil processes personal data on the following legal bases under RA 10173 and its implementing rules:

• Contractual necessity: Processing required to create and maintain your phjil account, process wagers, and execute financial transactions.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, AML legislation, and applicable Philippine data protection regulations.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your data protection rights.
• Consent: Where phjil relies on consent as a legal basis (for example, for optional marketing communications), you retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

phjil does not sell, rent, or trade your personal data. We share your data only in the following limited circumstances:

6.1 Service Providers

phjil engages third-party service providers to assist in operating the Platform. These include payment gateway operators (GCash, PayMaya, and partner banks), KYC/identity verification providers, cloud infrastructure providers, and customer support tooling vendors. All third-party processors are contractually required to handle phjil player data in accordance with applicable Philippine data protection standards.

6.2 Regulatory Authorities

phjil will disclose player data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or any other competent Philippine government authority where required by law, regulatory directive, or court order. phjil will endeavor to notify affected players of such disclosures to the extent permitted by law.

6.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or part of phjil's business assets, player data may be transferred to the relevant successor entity. Players will be notified of any such transfer and the privacy implications through the contact details associated with their phjil account.

6.4 Fraud Prevention

phjil may share data with industry fraud prevention databases or partner platforms solely where necessary to investigate confirmed or suspected fraudulent activity, in compliance with applicable privacy law.

7. Data Retention

phjil retains personal data for the periods described below, after which data is securely deleted or anonymized:

• Active account data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, to satisfy PAGCOR record-keeping and AML audit requirements.
• KYC documents: Retained for a minimum of five (5) years following the end of the account relationship, or such longer period as may be required by applicable Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years following each transaction, consistent with AMLC record-keeping requirements.
• Support communications: Retained for two (2) years following resolution of the relevant inquiry or complaint.
• Technical and usage logs: Retained for twelve (12) months from collection, after which they are aggregated or deleted.

8. Data Security

phjil implements technical and organizational measures appropriate to the sensitivity of the personal data it processes. These include:

• TLS/SSL encryption for all data in transit between your device and phjil's servers.
• Encryption at rest for sensitive data fields including KYC documents and payment identifiers.
• Hashed password storage using industry-standard algorithms — phjil staff cannot view your account password.
• Two-factor authentication (2FA) available on all player accounts via Philippine mobile SMS.
• Access controls restricting employee access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Incident response procedures for detecting and reporting data breaches in accordance with NPC notification requirements under RA 10173.

While phjil employs commercially reasonable security practices, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable 2FA on their phjil accounts.

9. Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to personal data phjil holds about you:

• Right to be Informed: The right to know what personal data phjil collects and how it is used — as described in this Policy.
• Right to Access: The right to request a copy of the personal data phjil holds about you.
• Right to Correction: The right to request correction of inaccurate or incomplete personal data in your phjil account records.
• Right to Erasure: The right to request deletion of your personal data, subject to phjil's legal retention obligations under PAGCOR and AML regulations.
• Right to Object: The right to object to processing based on legitimate interests, including for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another controller, where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phjil has processed your data unlawfully.

To exercise any of the above rights, please contact phjil's Data Privacy Officer at [email protected]. phjil will respond to verified data subject requests within 15 business days of receipt, consistent with NPC guidelines.

10. Cookies and Tracking Technologies

phjil uses cookies and similar technologies to operate the Platform and improve user experience. The categories of cookies used by phjil are as follows:

• Strictly Necessary Cookies: Required for account authentication, session management, and core Platform security functions. These cannot be disabled without impairing the Platform's basic functionality.
• Functional Cookies: Enable personalization features such as language preferences and game display settings.
• Analytics Cookies: Used in aggregated, anonymized form to understand how players navigate the Platform, enabling phjil to improve the user experience. No individual player is identified through analytics data.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to log in and use the phjil Platform.

11. Children's Privacy

The phjil Platform is strictly prohibited to individuals under 21 years of age. phjil does not knowingly collect personal data from individuals below this age threshold. If phjil becomes aware that personal data has been collected from an underage individual, the affected account will be immediately suspended and the data deleted, except where retention is required by law. Age verification is conducted as part of phjil's KYC process.

12. Cross-Border Data Transfers

phjil primarily stores and processes player data within infrastructure located in or serving the Philippines. Where phjil engages third-party service providers whose infrastructure may be located outside the Philippines — such as cloud computing or KYC verification services — phjil ensures that such transfers are governed by data processing agreements that provide an equivalent level of protection to that required under RA 10173. phjil does not transfer player data to jurisdictions that do not provide adequate data protection standards without appropriate contractual safeguards.

13. Changes to This Privacy Policy

phjil reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered players via their phjil account's registered mobile number or email address (where provided), with at least 7 days' advance notice before the updated Policy takes effect. The effective date at the top of this page will be updated accordingly. Continued use of the phjil Platform following the effective date of any updated Policy constitutes acceptance of the revised terms.

14. Contact – Data Privacy Officer

For questions, concerns, or requests relating to this Privacy Policy or phjil's processing of your personal data, please contact phjil's designated Data Privacy Officer: