24phjoin Privacy Policy

24phjoin ("the Company," "we," "us," or "our") operates the online gaming platform accessible at https://24phjoin.app and through the 24phjoin mobile application. As a data controller, 24phjoin is responsible for the personal data of all registered players and visitors to the platform.

This Privacy Policy has been prepared in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC"). It sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by 24phjoin.

This Policy should be read together with the 24phjoin Terms & Conditions, which are incorporated herein by reference. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

24phjoin collects the following categories of personal data from players and platform visitors:

2.1 Identity and Registration Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (for age verification — you must be 21 years or older);
• Gender;
• Nationality and country of residence;
• Government-issued identification number (e.g., Philippine passport number, SSS number, PhilHealth ID number, or driver's license number).

2.2 Contact Data

• Email address;
• Philippine mobile number;
• Residential address (province, city or municipality, barangay, and postal code).

2.3 Financial Data

• GCash or PayMaya mobile wallet number;
• Bank account details (BPI, BDO, Metrobank, or other supported banks) for withdrawal purposes;
• Transaction history, including deposit amounts, withdrawal amounts, and dates;
• Bonus and promotional credit history.

2.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, and outcomes;
• Login and logout timestamps;
• Responsible gaming settings, including deposit limits and self-exclusion status.

2.5 Technical and Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Cookies and similar tracking technologies (see Section 9);
• Platform usage data and clickstream information.

2.6 Communications Data

• Records of your communications with 24phjoin customer support, including live chat transcripts and email correspondence;
• Survey responses and feedback submitted through the platform.

24phjoin collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions;
• Automated collection: Technical and device data collected automatically when you access the 24phjoin platform, through cookies, server logs, and similar technologies;
• Third-party sources: Identity verification data obtained from KYC service providers; fraud prevention data from anti-money laundering screening services; and payment confirmation data from GCash, PayMaya, and banking partners;
• Regulatory sources: Data received from PAGCOR or other regulatory authorities in connection with licensing, compliance, or investigation requirements.

24phjoin processes your personal data for the following specific, legitimate purposes:

Under the Data Privacy Act of 2012, 24phjoin processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions, including account management, payment processing, and game provision;
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160), and the Data Privacy Act (RA 10173);
• Legitimate interests: Processing necessary for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms;
• Consent: Processing for optional purposes such as personalized marketing communications, where we have obtained your explicit consent. You may withdraw consent at any time by updating your communication preferences in your account settings.

24phjoin does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

6.1 Service Providers

Third-party vendors engaged by 24phjoin to provide services on our behalf, including KYC and identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), cloud hosting providers, and customer support platform operators. All service providers are bound by data processing agreements that prohibit them from using your data for any purpose other than providing services to 24phjoin.

6.2 Regulatory and Law Enforcement Authorities

24phjoin may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 24phjoin's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer in advance.

24phjoin retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and anti-money laundering regulations;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• Gaming activity logs: Retained for three (3) years from the date of the session;
• Customer support communications: Retained for two (2) years from the date of the last communication;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 24phjoin's data disposal procedures.

24phjoin implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the 24phjoin platform is protected using TLS 1.2 or higher encryption;
• Encryption at rest: Sensitive personal data, including identity documents and financial account details, is stored using AES-256 encryption;
• Access controls: Access to personal data is restricted to authorized 24phjoin personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication;
• Regular security audits: The 24phjoin platform undergoes regular penetration testing and security audits by independent third-party security firms;
• Incident response: 24phjoin maintains a documented data breach response plan, including procedures for notifying affected players and the NPC within the timeframes required by law.

The 24phjoin platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of the platform, including session management and security. These cannot be disabled;
• Functional cookies: Used to remember your preferences, such as language settings and responsible gaming limits;
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the platform, helping us improve our services. No personally identifiable information is included in analytics reports;
• Marketing cookies: Used to deliver relevant promotional content within the 24phjoin platform, based on your gaming activity and preferences. These are only activated with your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 24phjoin platform. For strictly necessary cookies, no opt-out is available as they are required for the platform to function.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 24phjoin:

The 24phjoin platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online gaming. 24phjoin does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data in question, and take appropriate action in accordance with our legal obligations. If you believe that a minor has registered on the 24phjoin platform, please notify us immediately through our customer support channels.

24phjoin reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email or through a prominent notice on the platform at least seven (7) days before the changes take effect.

The effective date at the top of this Policy will be updated to reflect the date of the most recent revision. Your continued use of the 24phjoin platform after the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 24phjoin, please contact our Data Protection Officer (DPO) through the following channels:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that your data privacy rights have been violated. Information on how to file a complaint is available on the NPC's official website.