joinph Privacy Policy

This Privacy Policy ("Policy") applies to all personal data collected by joinph ("we," "us," or "our") through the joinph online gaming platform accessible at joinph.app, including its mobile-optimized interface and all related services. It applies to all registered users and visitors of the platform.

This Policy should be read together with our Terms and Conditions, which govern your use of the joinph platform. By registering an account or using the joinph platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein.

joinph acts as the personal information controller in respect of the personal data you provide to us. We are committed to processing your data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

joinph collects the following categories of personal data from users of the platform:

joinph does not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect data relating to your racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law.

joinph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting our support team, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the joinph platform, including through cookies, log files, and similar tracking technologies. See Section 9 for more details.
• Third-party sources: Identity verification data from licensed KYC service providers; fraud prevention data from anti-money laundering screening services; payment data from GCash, Maya, and banking partners (limited to transaction confirmation references — joinph does not store full payment credentials).

joinph uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your joinph account, including verifying your identity and age (21+ requirement) and processing your login credentials.
• Transaction processing: To process deposits, withdrawals, and bonus credits, and to maintain accurate financial records of your account activity.
• Regulatory compliance: To fulfill our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including KYC verification and suspicious transaction reporting.
• Platform security: To detect, investigate, and prevent fraud, unauthorized access, bonus abuse, and other prohibited conduct as defined in our Terms and Conditions.
• Customer support: To respond to your inquiries, complaints, and support requests in a tim ely and effective manner.
• Responsible gaming: To monitor gaming patterns and identify players who may be at risk, and to administer self-exclusion and deposit limit requests in accordance with our responsible gaming obligations.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent to receive such communications. You may withdraw this consent at any time.
• Platform improvement: To analyze aggregated, anonymized usage data to improve the joinph platform, fix technical issues, and develop new features.

joinph processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your joinph account, process transactions, and deliver the gaming services you have registered for.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC directives.
• Legitimate interests: Processing necessary for joinph's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

joinph does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya / Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) — solely to process your deposits and withdrawals.
• Identity verification providers: Licensed KYC and AML screening service providers engaged to verify your identity and comply with anti-money laundering regulations.
• Game providers: Third-party game studios and platform providers whose games are available on joinph — limited to the technical data necessary to deliver the game experience and maintain game integrity.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or regulatory directive.
• IT and security service providers: Cloud hosting, cybersecurity, and platform infrastructure providers engaged by joinph under strict data processing agreements that prohibit them from using your data for any purpose other than providing services to joinph.

joinph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under the Anti-Money Laundering Act.
• KYC and identity documents: Retained for the period required by applicable regulations, typically five (5) years from the end of the business relationship.
• Support communications: Retained for three (3) years from the date of the last communication, unless a longer period is required for dispute resolution purposes.
• Marketing consent records: Retained until you withdraw your consent, plus a reasonable period thereafter to demonstrate compliance.

When personal data is no longer required, joinph will securely delete or anonymize it in accordance with our internal data disposal procedures.

joinph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the joinph platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that joinph staff can only access personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the joinph platform.
• Incident response procedures to detect, contain, and report personal data breaches in accordance with NPC notification requirements.

While joinph takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your joinph account credentials and for notifying us immediately if you suspect unauthorized access to your account.

joinph uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyze platform usage. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in during your visit. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalized experience.
• Analytics cookies: Used to collect aggregated, anonymized data about how users interact with the joinph platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the joinph platform. joinph does not use cookies to serve third-party advertising or to track your activity on other websites.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by joinph:

• Right to be informed: The right to know what personal data joinph collects about you, how it is used, and with whom it is shared — as set out in this Policy.
• Right of access: The right to request a copy of the personal data joinph holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data joinph holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to joinph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on joinph's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe joinph has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 13. joinph will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

The joinph platform is strictly intended for individuals aged 21 years and above. joinph does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the joinph platform.

If joinph becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the joinph platform, please contact our support team immediately so that we can investigate and take appropriate action.

Parents and guardians are encouraged to monitor the online activities of minors in their care and to make use of parental control tools available on their devices and internet service providers to prevent access to online gaming platforms.

joinph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will notify registered users by email or by posting a prominent notice on the joinph platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how joinph protects your personal data. Your continued use of the joinph platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

If you have any concerns about changes to this Policy, you may contact our Data Protection Officer or close your account in accordance with the Terms and Conditions.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way joinph handles your personal data, please contact our Data Protection Officer:

Data Protection Officer — joinph
Email: [email protected]

For general support inquiries unrelated to data privacy, you may also reach our support team at: [email protected]

If you are not satisfied with joinph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official channels.