226phjoy Privacy Policy

1. Introduction

226phjoy ("226phjoy," "we," "us," "our") is committed to protecting the privacy and personal data of all players and visitors to the 226phjoy platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of the 226phjoy website and gaming services.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR"), as enforced by the National Privacy Commission ("NPC"). By registering a 226phjoy account or using any 226phjoy service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

This Privacy Policy should be read together with the 226phjoy Terms & Conditions, which govern your use of the platform. Capitalized terms not defined in this Privacy Policy have the meanings given to them in the Terms & Conditions.

2. Personal Data We Collect

226phjoy collects personal data from you in the following categories:

2.1 Registration & Identity Data

When you create a 226phjoy account, we collect: full legal name, date of birth, gender, nationality, Philippine mobile number, email address, and username. This information is required to create and manage your account and to verify your identity.

2.2 KYC & Verification Documents

To comply with Philippine anti-money laundering regulations and PAGCOR requirements, 226phjoy may collect copies of government-issued identification documents (such as a Philippine passport, driver's license, SSS/UMID card, or PhilSys ID), proof of address documents, and proof of payment method ownership. These documents are processed solely for identity verification and regulatory compliance purposes.

2.3 Financial & Transaction Data

226phjoy collects data related to your deposits, withdrawals, and gaming transactions, including: GCash account details, PayMaya/Maya account details, bank account information (account name, account number, bank name), transaction amounts, dates, and reference numbers. We do not store full debit card numbers — card data is tokenized by our payment processor.

2.4 Gaming Activity Data

We collect records of your gaming activity on the 226phjoy platform, including: games played, wagers placed, wins and losses, session duration, bonus usage, and responsible gaming tool settings. This data is used to operate the platform, detect fraud, and comply with regulatory reporting obligations.

2.5 Technical & Device Data

When you access the 226phjoy platform, we automatically collect: IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and referring URL. This data is used for security monitoring, fraud detection, and platform optimization.

2.6 Communications Data

If you contact 226phjoy support via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments, for quality assurance, dispute resolution, and regulatory compliance purposes.

Data Category	Examples	Primary Purpose
Identity Data	Name, DOB, mobile number, email	Account creation, KYC
Verification Documents	Government ID, proof of address	AML compliance, KYC
Financial Data	GCash, bank account, transactions	Payment processing
Gaming Activity	Bets, wins, session data	Platform operation, compliance
Technical Data	IP address, device, browser	Security, fraud detection
Communications	Support chat, email records	Support, dispute resolution

3. How We Use Your Personal Data

226phjoy uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your 226phjoy player account, including processing your registration, verifying your identity, and managing your account settings.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers, and to maintain accurate financial records of all transactions.
• Regulatory Compliance: To comply with Philippine gaming regulations, PAGCOR requirements, anti-money laundering (AML) obligations under Republic Act No. 9160 (as amended), and tax reporting requirements.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, money laundering, and other illegal conduct on the 226phjoy platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce self-exclusion requests, and administer responsible gaming tools such as deposit limits and session controls.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the 226phjoy platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out mechanism.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 226phjoy processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you (the Terms & Conditions), including account management, payment processing, and game operation.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate Interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing & Disclosure

226phjoy does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

5.1 Service Providers

226phjoy engages trusted third-party service providers to assist in operating the platform, including payment processors (GCash, PayMaya, banking partners), KYC/identity verification providers, game content providers, cloud hosting providers, and customer support software providers. All service providers are contractually bound to process your data only on 226phjoy's instructions and in accordance with applicable data protection law.

5.2 Regulatory Authorities

226phjoy is required by Philippine law to disclose certain player data to regulatory authorities including PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement agencies, where required by applicable law or a valid legal order.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of 226phjoy's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Privacy Policy. You will be notified of any such transfer in advance.

6. Data Retention

226phjoy retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law:

• Account and KYC data: Retained for a minimum of five (5) years from account closure, as required by AML regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by AML and tax regulations.
• Gaming activity records : Retained for a minimum of three (3) years from the date of the activity, for regulatory reporting and dispute resolution purposes.
• Support communications: Retained for a minimum of two (2) years from the date of the communication, for quality assurance and dispute resolution purposes.
• Marketing consent records: Retained for the duration of your account and for three (3) years following account closure, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, 226phjoy will securely delete or anonymize your personal data in accordance with its data disposal procedures, unless further retention is required by law or a valid legal order.

7. Data Security

226phjoy implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and 226phjoy servers.
• AES-256 encryption for sensitive data stored in 226phjoy databases, including KYC documents and financial records.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Multi-factor authentication (MFA) for all 226phjoy staff accessing systems that contain personal data.
• Regular security audits, vulnerability assessments, and penetration testing of the 226phjoy platform.
• Comprehensive data breach response procedures, including NPC notification within 72 hours of discovering a breach that poses a real risk to data subjects.

While 226phjoy takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own 226phjoy account credentials. If you suspect unauthorized access to your account, contact 226phjoy support immediately.

8. Cookies & Tracking Technologies

226phjoy uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:

8.1 Strictly Necessary Cookies

These cookies are essential for the 226phjoy platform to function and cannot be disabled. They include session cookies that maintain your login state, security cookies that protect against cross-site request forgery (CSRF), and load-balancing cookies. No consent is required for strictly necessary cookies.

8.2 Performance & Analytics Cookies

These cookies collect anonymized information about how players use the 226phjoy platform — such as which pages are visited most frequently and how long sessions last — to help us improve platform performance and user experience. These cookies require your consent.

8.3 Functional Cookies

These cookies remember your preferences, such as your preferred language, display settings, and responsible gaming tool configurations, to provide a more personalized experience on the 226phjoy platform.

8.4 Marketing Cookies

With your consent, 226phjoy may use cookies to deliver relevant promotional content and measure the effectiveness of marketing campaigns. You may withdraw consent for marketing cookies at any time through your browser settings.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the 226phjoy platform.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 226phjoy:

• Right to be Informed: The right to be informed of how your personal data is collected, used, and processed — which this Privacy Policy fulfills.
• Right of Access: The right to request a copy of the personal data 226phjoy holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data held by 226phjoy.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 226phjoy's legal retention obligations.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, and to transmit it to another data controller where technically feasible.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact 226phjoy's Data Protection Officer using the contact details provided in Section 13 of this Privacy Policy. 226phjoy will respond to all data subject requests within thirty (30) days of receipt, in accordance with the DPA's IRR.

10. Children & Minors

The 226phjoy platform is strictly intended for persons aged 21 years and above. 226phjoy does not knowingly collect personal data from any person under the age of 21. If 226phjoy becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be permanently closed.

If you are a parent or guardian and believe that a minor has registered a 226phjoy account or provided personal data to 226phjoy, please contact our support team immediately so that appropriate action can be taken.

11. International Data Transfers

226phjoy primarily stores and processes personal data within the Philippines. In certain circumstances, personal data may be transferred to and processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game content providers operating internationally.

Where personal data is transferred outside the Philippines, 226phjoy ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that impose data protection standards equivalent to those required by the Philippine Data Privacy Act of 2012. 226phjoy will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

12. Updates to This Privacy Policy

226phjoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, 226phjoy will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The most current version of this Privacy Policy will always be available at /privacy-policy on the 226phjoy website. The effective date at the top of this document indicates when the current version came into force. Your continued use of the 226phjoy platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13. Contact & Data Protection Officer

226phjoy has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

If you are not satisfied with 226phjoy's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines:

This Privacy Policy was last reviewed and updated on January 1, 2026. 226phjoy reserves the right to update this policy at any time in accordance with Section 12 above.