27phjoy Privacy Policy

Introduction

27phjoy ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all users ("you," "your," or "the Player") who access and use the 27phjoy online gaming platform. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable PAGCOR data governance requirements.

This Privacy Policy describes the types of personal information we collect from you when you use 27phjoy, the purposes for which we use that information, the circumstances under which we may share it with third parties, the security measures we employ to protect it, and the rights you have with respect to your personal data.

By registering an account on 27phjoy, accessing any game or service, or otherwise interacting with the platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection, use, and processing of your personal data as described herein. If you do not agree with any part of this policy, you should discontinue use of the platform immediately.

This policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete framework governing your use of 27phjoy.

Personal Data We Collect

27phjoy collects personal data from you in several ways: directly when you provide it to us during registration or account management, automatically when you use the platform, and from third parties such as payment processors and identity verification services. The categories of personal data we collect include:

We do not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (for example, information related to responsible gaming self-exclusion requests).

How We Use Your Personal Data

27phjoy uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your 27phjoy player account, including processing your registration, verifying your identity through KYC procedures, and managing your account settings and preferences.
• Service Delivery: To provide you with access to all 27phjoy games, features, and services, including processing deposits and withdrawals, crediting bonuses, and delivering customer support.
• Regulatory Compliance: To comply with our obligations under PAGCOR regulations, the Philippine Data Privacy Act, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws. This includes conducting identity verification, transaction monitoring, and reporting to regulatory authorities where required.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the platform.
• Responsible Gaming: To monitor gaming behavior for signs of problem gambling, to enforce self-exclusion requests, and to provide responsible gaming tools and interventions in accordance with PAGCOR guidelines.
• Communications: To send you transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts) and, where you have opted in, promotional communications about 27phjoy offers and updates.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the 27phjoy platform.
• Legal Claims: To establish, exercise, or defend legal claims in connection with your use of the platform.

27phjoy will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 27phjoy processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide the gaming services you have registered for and to manage your account.
• Legal Obligation: Processing is necessary to comply with our legal obligations under Philippine law, including PAGCOR regulations, AMLA requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for our legitimate interests in operating a secure, fair, and compliant gaming platform, including fraud prevention, security monitoring, and platform improvement, provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending promotional communications or using non-essential cookies — we rely on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

27phjoy does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya, and accredited Philippine banks require certain personal and financial data to process your deposits and withdrawals. These processors are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC and AML service providers assist us in verifying your identity and screening for prohibited persons. These providers process only the minimum data necessary for verification purposes.
• Game Content Providers: Third-party game studios and software providers may receive anonymized or pseudonymized usage data to facilitate game delivery and technical support. They do not receive your personally identifiable information.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies may receive your data where we are legally required to disclose it.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Legal and Professional Advisors: Lawyers, auditors, and other professional advisors who require access to your data in connection with legal proceedings or compliance reviews, subject to professional confidentiality obligations.

Any third party that receives your personal data from 27phjoy is required to handle it in accordance with applicable Philippine data protection law and is prohibited from using it for any purpose other than the specific purpose for which it was shared.

Cookies & Tracking Technologies

27phjoy uses cookies and similar tracking technologies to enhance your experience on the platform, to ensure the platform functions correctly, and to gather analytics data that helps us improve our services. The types of cookies we use include:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: These cookies remember your preferences (such as language settings and display preferences) to provide a more personalized experience.
• Analytics Cookies: These cookies collect anonymized information about how you use the platform — such as which pages you visit most frequently and how long you spend on each page — to help us improve the platform's performance and usability.
• Security Cookies: These cookies help us detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 27phjoy platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

Data Security

27phjoy implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the 27phjoy platform is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal and financial data stored on our servers is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized 27phjoy personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: We offer two-factor authentication (2FA) for player accounts and require it for all internal administrative access to systems containing personal data.
• Regular Security Audits: Our platform undergoes regular penetration testing and security audits conducted by independent cybersecurity professionals.
• Incident Response: We maintain a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) and affected players in accordance with the timelines prescribed by the Data Privacy Act.

While 27phjoy takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

Data Retention

27phjoy retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized so that it can no longer be associated with you. Where deletion is not immediately possible due to technical constraints, we will ensure the data is isolated and protected from further processing until deletion can be completed.

Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 27phjoy:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right of Access: You have the right to request a copy of the personal data we hold about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update most account information directly through your 27phjoy account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR regulations and the AMLA.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days in accordance with the Data Privacy Act. We may need to verify your identity before processing your request.

Children's Privacy

The 27phjoy platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 27phjoy platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control tools and to monitor their children's online activity to prevent underage access to gambling platforms.

Changes to This Privacy Policy

27phjoy reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this policy, we will notify registered players via email or through a prominent notice on the platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this policy indicates when the most recent changes were made. Your continued use of the 27phjoy platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically to stay informed about how 27phjoy protects your personal data. The current version will always be available at 27phjoy.app/privacy-policy.

Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 27phjoy, please contact our designated Data Protection Officer:

You also have the right to escalate unresolved privacy concerns to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act.