phjion Privacy Policy

01Introduction

phjion ("phjion," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the phjion online gaming platform. We understand that Filipino players trust us with sensitive personal and financial information, and we take that responsibility seriously.

This Privacy Policy describes how phjion collects, uses, stores, shares, and protects your personal data when you access or use the phjion platform at phjion.net. It also explains your rights under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and how you can exercise those rights.

This Privacy Policy is effective as of the date indicated above and supersedes all previous versions. We encourage you to review this Policy periodically to stay informed about how phjion handles your personal data.

02Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, phjion is the Personal Information Controller responsible for the personal data collected through the phjion platform.

phjion has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. Contact details for our DPO are provided in Section 15 of this Policy.

Where phjion engages third-party service providers to process personal data on our behalf, those providers act as Personal Information Processors and are contractually bound to process data only in accordance with phjion's instructions and applicable Philippine data protection law.

03Personal Data We Collect

phjion collects the following categories of personal data from users of the platform:

phjion does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by applicable law or regulation (for example, problem gambling self-declaration for responsible gaming purposes).

04How We Collect Your Data

phjion collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the phjion platform, including through cookies, web beacons, log files, and similar tracking technologies (see Section 8).
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; payment confirmation data from GCash, Maya, and partner banks.
• Regulatory sources: Information received from PAGCOR or other Philippine regulatory authorities in connection with licensing compliance or investigations.

05How We Use Your Personal Data

phjion uses your personal data for the following purposes:

• Account management: To create, maintain, and manage your phjion account, including verifying your identity and eligibility to use the platform.
• Service delivery: To provide access to games, process deposits and withdrawals, apply bonuses, and deliver the full range of phjion services.
• Regulatory compliance: To comply with PAGCOR licensing requirements, Philippine anti-money laundering laws (AMLA), and KYC obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal conduct.
• Responsible gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion.
• Customer support: To respond to your inquiries, resolve disputes, and improve our support services.
• Platform improvement: To analyze usage patterns, conduct research, and improve the functionality, security, and user experience of the phjion platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent and in accordance with applicable law. You may opt out at any time.
• Legal obligations: To comply with court orders, regulatory investigations, or other legal processes requiring disclosure of personal data.

06Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phjion processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account registration, game access, and payment processing.
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR regulations, AMLA requirements, and tax obligations.
• Legitimate interests: Processing necessary for phjion's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07Data Sharing & Disclosure

phjion may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• KYC and identity verification providers: To verify your identity and age in compliance with PAGCOR and AMLA requirements.
• Payment processors: GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process deposits and withdrawals.
• Fraud prevention and AML screening services: To detect and prevent money laundering, fraud, and other financial crimes.
• Game software providers: Game providers may receive anonymized or pseudonymized session data necessary to deliver game services. They do not receive your full identity data.
• IT and cloud infrastructure providers: Hosting, database, and security service providers who process data on phjion's behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities where required by law.
• Legal and professional advisors: Lawyers, auditors, and compliance consultants bound by professional confidentiality obligations.

All third-party processors engaged by phjion are contractually required to implement appropriate technical and organizational security measures and to process personal data only in accordance with phjion's documented instructions.

08Cookies & Tracking Technologies

phjion uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, responsible gaming limits, and display options to personalize your experience.
• Analytics cookies: Collect anonymized data about how users interact with the phjion platform to help us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the phjion platform. phjion does not use third-party advertising or retargeting cookies.

09Data Retention

phjion retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following retention guidelines:

• Active account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and Philippine AMLA obligations.
• KYC and identity documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Support communications: Retained for three (3) years from the date of the last communication.
• Marketing consent records: Retained until consent is withdrawn and for one (1) year thereafter as evidence of consent.
• Technical and log data: Retained for up to twelve (12) months for security and fraud prevention purposes.

When personal data is no longer required, phjion will securely delete or anonymize it in accordance with our data destruction procedures.

10Data Security

phjion implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the phjion platform is protected by 256-bit SSL/TLS encryption.
• Encryption at rest: Sensitive personal and financial data stored on phjion servers is encrypted using AES-256 encryption.
• Access controls: Personal data is accessible only to phjion staff and authorized processors who have a legitimate need to access it. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Regular security audits: phjion conducts regular penetration testing, vulnerability assessments, and security audits of its platform and infrastructure.
• Incident response: phjion maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, phjion will notify the National Privacy Commission and affected users within the timeframes required by Philippine law.

11Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phjion:

• Right to be informed: The right to know whether phjion holds personal data about you and to receive clear information about how it is processed — which this Privacy Policy provides.
• Right of access: The right to request a copy of the personal data phjion holds about you, along with information about how it is used.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held by phjion.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phjion's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phjion has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. phjion will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request.

12Children's Privacy

phjion employs age verification procedures during account registration to prevent underage access. If phjion becomes aware that personal data has been collected from an individual under the age of 21 without verifiable parental consent, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to phjion, please contact our Data Protection Officer immediately at the details provided in Section 15.

13Cross-Border Data Transfers

phjion's primary data processing infrastructure is located within the Philippines. In certain circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where phjion uses internationally hosted cloud infrastructure or game software providers based abroad.

Where such transfers occur, phjion ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring overseas recipients to apply data protection standards equivalent to those required under Philippine law.
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission.
• Your explicit consent where required by applicable law.

You may request information about the specific safeguards applied to cross-border transfers of your personal data by contacting our Data Protection Officer.

14Updates to This Privacy Policy

phjion reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, phjion will:

• Update the "Last Updated" date at the top of this Privacy Policy.
• Notify registered users via email or through a prominent notice on the phjion platform at least seven (7) days before the changes take effect, where practicable.
• Where required by law, seek your renewed consent before processing your data under the revised terms.

Your continued use of the phjion platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this Policy regularly.

15Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by phjion, please contact our Data Protection Officer:

If you are not satisfied with phjion's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through their official channels.

For responsible gaming concerns, including self-exclusion requests, please visit our Responsible Gaming page or contact support directly.