Privacy Policy

1. Introduction

24phjoin ("we," "us," or "our") is committed to protecting the privacy and personal data of every individual who accesses or uses the 24phjoin platform (the "Platform"). This Privacy Policy ("Policy") describes how we collect, use, store, share, and protect your personal information when you interact with our Platform, including when you register an account, make deposits or withdrawals, play games, or contact our support team.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC"). By using the 24phjoin Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

If you do not agree with any part of this Policy, please discontinue your use of the Platform and contact us to request account closure and data deletion where applicable.

2. Personal Data We Collect

24phjoin collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third parties where permitted by law. The categories of personal data we collect include:

Category	Examples	Collection Method
Identity Data	Full legal name, date of birth, government-issued ID number, nationality	Registration & KYC verification
Contact Data	Email address, mobile number, residential address	Registration form
Financial Data	GCash number, Maya account, bank account details (name, account number, bank)	Deposit & withdrawal forms
Transaction Data	Deposit history, withdrawal history, game wager records, bonus usage	Automatically recorded during Platform use
Technical Data	IP address, device type, browser type, operating system, session timestamps	Automatically collected via cookies and server logs
Usage Data	Pages visited, games played, session duration, click patterns	Analytics tools
Communications Data	Support chat transcripts, email correspondence, feedback submissions	Customer support interactions

We do not collect sensitive personal information (as defined under the DPA, such as health data, political opinions, or religious beliefs) unless strictly required for regulatory compliance and with your explicit consent.

3. How We Use Your Personal Data

24phjoin processes your personal data only for specific, legitimate purposes. The primary purposes for which we use your data are:

• Account Management: To create, maintain, and administer your 24phjoin account, including authentication and security.
• Transaction Processing: To process deposits, withdrawals, and game wagers accurately and securely.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR regulations and anti-money laundering (AML) requirements.
• Regulatory Compliance: To meet our obligations under Philippine gaming regulations, the DPA, and applicable AML/CTF laws.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the Platform.
• Responsible Gaming: To monitor gaming behavior and apply responsible gaming tools where appropriate, including deposit limits and self-exclusion.
• Marketing Communications: To send you promotional offers and updates about 24phjoin, where you have provided consent. You may opt out at any time.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, 24phjoin processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to operate your account and process transactions).
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including the DPA, PAGCOR regulations, and AML/CTF legislation.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent: For certain processing activities, such as marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

5.1 Third-Party Service Providers

24phjoin may share your personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors (such as GCash and Maya partner networks), identity verification providers, cloud hosting and infrastructure providers, customer support software vendors, and analytics platforms. All third-party providers are contractually required to process your data only on our instructions and in accordance with the DPA.

5.2 Regulatory and Law Enforcement Authorities

We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where we are legally required to do so, or where disclosure is necessary to prevent or investigate illegal activity.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify you of any such transfer and ensure that the receiving entity is bound by privacy obligations no less protective than those in this Policy.

5.4 No Sale of Personal Data

24phjoin does not sell, rent, lease, or otherwise commercially exploit your personal data to any third party for their own independent marketing or commercial purposes. Full stop.

6. Cookies & Tracking Technologies

6.1 What Are Cookies

Cookies are small text files placed on your device when you visit the 24phjoin Platform. They help us recognize your device, maintain your session, remember your preferences, and understand how you use the Platform.

6.2 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function. These cannot be disabled as they are required for account login, session management, and security. No consent is required for these cookies.
• Functional Cookies: Remember your preferences such as language settings and display options to provide a more personalized experience.
• Analytics Cookies: Help us understand how users interact with the Platform so we can improve performance and content. These are only placed with your consent.
• Marketing Cookies: Used to deliver relevant promotional content. These are only placed with your explicit consent and can be withdrawn at any time.

6.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 24phjoin Platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

7. Data Retention

24phjoin retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our standard retention periods are as follows:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Data: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLC regulations.
• Customer Support Records: Retained for three (3) years from the date of the interaction.
• Marketing Consent Records: Retained until you withdraw consent, plus one (1) year for audit purposes.
• Technical and Usage Data: Retained for up to twelve (12) months in identifiable form, after which it may be anonymized and retained for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

8. Data Security

24phjoin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and our servers.
• Secure password hashing using industry-standard algorithms — we never store passwords in plain text.
• Role-based access controls ensuring that only authorized personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits, vulnerability assessments, and penetration testing of our infrastructure.
• Two-factor authentication (2FA) options available to all registered 24phjoin users.
• Incident response procedures to detect, contain, and remediate data security incidents promptly.

While we take all reasonable precautions to protect your data, no system is completely immune to security risks. In the event of a data breach that is likely to result in a risk to your rights and freedoms, 24phjoin will notify you and the National Privacy Commission within the timeframes prescribed by the DPA.

9. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 24phjoin:

• Right to Be Informed: You have the right to know what personal data we collect about you and how it is processed — which is the purpose of this Policy.
• Right of Access: You may request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You may request that we provide your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 12 of this Policy. We will respond to all verified requests within fifteen (15) business days, as required by the DPA.

10. Children's Privacy and Age Restriction

The 24phjoin Platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact us immediately at the details provided in Section 12.

Parents and guardians are encouraged to use parental control tools and to monitor their children's online activity to prevent unauthorized access to gambling platforms.

11. Changes to This Privacy Policy

24phjoin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes, we will notify you by posting a prominent notice on the Platform and, where appropriate, by sending an email to your registered address.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how we protect your personal data. Your continued use of the Platform following the effective date of any revision constitutes your acceptance of the updated Policy.

12. Contact Us & Data Protection Officer

24phjoin has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channel:

• Email: [email protected]
• Subject Line: Data Privacy Request — [Your Full Name]
• Response Time: Within fifteen (15) business days of receiving your verified request.

If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines at [email protected] or by visiting their official office.