1.Introduction
This Privacy Policy ("Policy") describes how joinph ("we," "us," "our") collects, processes, stores, and protects the personal information of users ("you," "your") who access or use the joinph platform at https://joinph.co and all associated services, mobile interfaces, and features (collectively, the "Platform").
joinph is committed to protecting the privacy and personal data of all users in accordance with the Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations, administered by the National Privacy Commission (NPC) of the Philippines. We are also bound by the data handling requirements prescribed by PAGCOR in connection with our online gaming operations.
By registering for a joinph account or using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the joinph Platform or register for an Account.
2.Data Controller
For the purposes of the Data Privacy Act of 2012, joinph is the personal information controller responsible for the personal data collected through the joinph Platform. joinph determines the purposes for which, and the manner in which, your personal data is processed.
joinph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with applicable data privacy laws and this Policy. Inquiries directed to the DPO may be submitted via the contact information provided in Section 15 of this Policy.
3.Personal Data We Collect
joinph collects the following categories of personal information, depending on your interaction with the Platform:
3.1 Registration and Account Data
- Full legal name
- Date of birth
- Philippine mobile number
- Email address (if provided)
- Username and encrypted password
- Preferred language and communication settings
3.2 KYC and Identity Verification Data
- Government-issued photo identification (e.g., PSA National ID, passport, UMID card, driver's license)
- Selfie photograph for identity matching purposes
- Proof of address documentation (where required)
- Source of funds documentation (for high-value account activity as required by PAGCOR)
3.3 Financial and Transaction Data
- GCash account number or mobile number used for transactions
- Bank account details (where applicable for withdrawal processing)
- Deposit history, withdrawal history, and transaction timestamps
- Cryptocurrency wallet addresses (where applicable)
3.4 Gaming Activity Data
- Games played, bets placed, win/loss records
- Session duration, game preferences, and betting patterns
- Responsible gaming settings and self-exclusion records
- Bonus and loyalty program activity
3.5 Technical and Device Data
- IP address and approximate geolocation
- Device type, operating system, and browser type
- Session identifiers and authentication tokens
- Platform interaction logs and error reports
3.6 Communications Data
- Customer support chat transcripts
- Emails or messages sent to joinph support
- Survey responses and feedback submissions
4.How We Collect Personal Data
joinph collects personal data through the following means:
- Directly from you — when you register for an Account, complete KYC verification, make deposits or withdrawals, contact customer support, or respond to surveys.
- Automatically — through cookies, session tracking technologies, server logs, and analytics tools as you use the Platform. See Section 8 for details on cookies.
- From third-party service providers — such as payment processors (GCash, Maya, BPI, BDO), identity verification services, fraud detection systems, and game software providers, where they provide data in the course of delivering their services to joinph.
- From PAGCOR and regulatory bodies — where data sharing is required by law or regulation for compliance purposes.
5.How We Use Your Personal Data
joinph processes your personal data for the following purposes:
- Account Management: Creating, maintaining, and securing your joinph Account, including authentication, password recovery, and account communications.
- KYC and Regulatory Compliance: Verifying your identity and age (21+), meeting PAGCOR-mandated player registration requirements, and fulfilling anti-money laundering (AML) obligations under Philippine law.
- Payment Processing: Facilitating deposits to and withdrawals from your joinph wallet via GCash, Maya, and other supported payment channels.
- Service Delivery: Providing access to all games, betting markets, and Platform features associated with your joinph Account.
- Responsible Gaming: Monitoring gaming activity for indicators of problem gambling, enforcing self-exclusion requests, and implementing deposit or session limits you have configured.
- Fraud Prevention and Security: Detecting and preventing unauthorized Account access, fraudulent transactions, bonus abuse, multi-accounting, and other prohibited conduct.
- Customer Support: Responding to your inquiries, resolving disputes, and improving our support processes based on interaction data.
- Marketing Communications: Sending you promotional offers, loyalty program updates, and Platform notifications — only where you have consented or where permitted under applicable law. You may opt out at any time.
- Analytics and Improvement: Understanding how users interact with the Platform to improve game selection, user experience, and technical performance.
- Legal Obligations: Retaining records and providing data to PAGCOR, the NPC, law enforcement, or courts where required by applicable Philippine law.
6.Legal Basis for Processing
Under the Data Privacy Act of 2012, joinph processes your personal data on the following legal bases:
- Contractual necessity — Processing required to fulfil the agreement between you and joinph when you register for and use an Account.
- Legal obligation — Processing required to comply with PAGCOR regulations, AML/KYC laws, and other applicable Philippine legal requirements.
- Consent — Where you have given explicit consent, such as for optional marketing communications. Consent may be withdrawn at any time without affecting the lawfulness of processing carried out before withdrawal.
- Legitimate interests — Processing necessary for joinph's legitimate interests, including fraud prevention, security, and service improvement, where such interests are not overridden by your rights and interests.
7.Data Sharing and Disclosure
joinph does not sell your personal data to third parties. We may share your personal data in the following limited circumstances:
- Payment Processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other payment service providers receive the minimum transaction data necessary to process your deposits and withdrawals.
- Identity Verification Providers: Third-party KYC service providers who assist with document verification and identity matching as part of our PAGCOR compliance obligations.
- Game Software Providers: JILI, PG Soft, Pragmatic Play, and other game studios receive anonymized session and gaming data as necessary to deliver their game software on the Platform.
- Regulatory Authorities: PAGCOR, the National Privacy Commission, law enforcement agencies, and courts of the Philippines, where disclosure is required by law, regulation, or legal process.
- Fraud and Security Services: Fraud detection, anti-money laundering screening, and cybersecurity service providers who assist in protecting the Platform and its users.
- Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of joinph's business assets, your personal data may be transferred as part of that transaction. You will be notified before your data becomes subject to a materially different Privacy Policy.
All third parties with whom joinph shares personal data are required to maintain appropriate technical and organizational measures to protect your data and to process it only for the specified purposes.
8.Cookies and Tracking Technologies
The joinph Platform uses cookies and similar tracking technologies (including session identifiers, local storage, and analytics pixels) for the following purposes:
- Essential cookies: Required for the Platform to function, including maintaining your login session, remembering your language and display preferences, and enabling secure transactions. These cannot be disabled without impairing Platform functionality.
- Analytics cookies: Used to understand aggregate usage patterns on the Platform — which games are most popular, how users navigate between sections, and where technical errors occur. Data collected via analytics cookies is aggregated and does not personally identify individual users.
- Security cookies: Used for fraud detection, login anomaly identification, and protecting against automated abuse of the Platform.
joinph does not use third-party advertising or behavioral tracking cookies. You may manage cookie preferences through your browser settings, though disabling essential cookies will impair your ability to log in and use the joinph Platform.
9.Data Retention
joinph retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in accordance with applicable legal and regulatory retention requirements:
- Active Account data is retained for the duration of your Account's existence on the Platform.
- KYC documentation and transaction records are retained for a minimum of five (5) years after Account closure, in compliance with PAGCOR and Philippine AML regulations.
- Customer support communications are retained for three (3) years to support dispute resolution and service quality review.
- Gaming activity logs are retained for five (5) years for regulatory audit purposes.
- Marketing consent records are retained for the duration of your consent or until withdrawal, plus such additional period as required to demonstrate compliance.
Following the expiration of applicable retention periods, personal data is securely deleted or anonymized in accordance with joinph's data destruction procedures.
10.Data Security
joinph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and the joinph Platform
- Encryption of sensitive personal data at rest in our databases
- Role-based access controls limiting joinph employee access to personal data on a strict need-to-know basis
- Multi-factor authentication for internal systems and administrative access
- Regular security audits, vulnerability assessments, and penetration testing
- Incident response procedures and breach notification protocols in compliance with NPC requirements
While joinph applies industry-standard security measures, no data transmission over the internet or electronic storage system is completely secure. You are responsible for maintaining the security of your own Account credentials, including your password and any two-factor authentication codes.
11.Your Data Privacy Rights
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by joinph:
- Right to be informed — to know what personal data joinph collects, how it is used, and to whom it is disclosed.
- Right of access — to request a copy of the personal data joinph holds about you.
- Right to rectification — to request correction of inaccurate or incomplete personal data.
- Right to erasure — to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
- Right to object — to object to the processing of your personal data for direct marketing purposes or where processing is based on joinph's legitimate interests.
- Right to data portability — to receive your personal data in a structured, commonly used, machine-readable format.
- Right to withdraw consent — to withdraw consent to processing at any time where processing is based on your consent, without affecting prior lawful processing.
- Right to lodge a complaint — to submit a complaint to the National Privacy Commission (NPC) of the Philippines if you believe joinph has violated your data privacy rights.
To exercise any of these rights, contact joinph's Data Protection Officer using the details in Section 15. joinph will respond to verified data subject requests within fifteen (15) business days in accordance with NPC guidelines.
12.Children's Privacy
The joinph Platform is strictly for individuals who are at least 21 years of age, as required by PAGCOR regulations governing online gambling in the Philippines. joinph does not knowingly collect or process personal data from persons under the age of 21.
If joinph becomes aware that personal data has been collected from a person under 21 years of age, that Account will be immediately and permanently closed, all associated funds will be forfeited in accordance with our Terms and Conditions, and all personal data associated with the Account will be deleted from our active systems subject to applicable legal retention obligations.
If you believe that a person under 21 has registered for a joinph Account, please report this to joinph support immediately at [email protected].
13.Third-Party Links and Services
The joinph Platform may include references to third-party services — for example, payment providers such as GCash or Maya. Once you leave the joinph Platform and access a third-party website or application, this Privacy Policy no longer applies. joinph is not responsible for the privacy practices of third-party services.
We encourage you to review the privacy policies of any third-party services you use in connection with your joinph Account, particularly your chosen payment provider. The data you share directly with GCash, Maya, or your bank is governed by their respective privacy policies, not by this Policy.
14.Changes to This Privacy Policy
joinph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify you via the mobile number or email address associated with your Account, or through a prominent notice on the Platform, at least seven (7) days before the changes take effect.
The "Last Updated" date at the top of this page indicates when this Policy was most recently revised. We encourage you to review this Policy periodically. Your continued use of the joinph Platform after the effective date of any revision constitutes your acknowledgment of the updated Policy.
15.Contact the joinph Data Protection Officer
For any data privacy inquiries, requests to exercise your rights under the Data Privacy Act of 2012, or formal complaints regarding joinph's handling of your personal data, please contact:
- Data Protection Officer, joinph
- Email: [email protected]
- Subject line: "Data Privacy Request – [Your Full Name]"
- Response time: Within 15 business days for formal data subject requests
You also have the right to submit a complaint directly to the National Privacy Commission of the Philippines if you are unsatisfied with joinph's response to your data privacy concern.