Plain language summary: phjilion collects your personal data to operate your account, verify your identity, process payments, and comply with Philippine gaming and financial laws. We don't sell your data to third parties for marketing. You have the right to access, correct, and request deletion of your data at any time. This page tells you everything.
1. Who We Are and What This Policy Covers
phjilion is the online gaming platform operated at phjilion.net, offering casino games, card games, sports betting, and related entertainment services to players in the Philippines. References to "phjilion," "we," "us," or "our" throughout this Privacy Policy refer to the operator of the phjilion platform.
This Privacy Policy explains what personal data phjilion collects from you, why we collect it, how we use it, who we may share it with, how long we keep it, and what rights you have over it. It applies to all phjilion services — the website at phjilion.net, any mobile application or progressive web app, customer support interactions, marketing communications, and any other service where phjilion is the data controller.
This Policy is intended to comply fully with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission ("NPC").
By registering an account at phjilion, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how phjilion processes personal data, please do not create an account or use the Platform.
2. Personal Data We Collect
phjilion collects the minimum personal data necessary to operate the Platform and comply with our legal obligations. We do not collect data "just in case" — every category of data listed below has a specific, documented purpose.
| Data Category |
Specific Examples |
Why We Collect It |
| Identity Data |
Full legal name, date of birth, gender, nationality |
Account registration, age verification, KYC compliance |
| Contact Data |
Mobile number, email address |
Account communications, OTP delivery, support |
| Verification Documents |
Government-issued ID (UMID, PhilSys, driver's license, passport), selfie photos |
KYC/AML compliance required by Philippine gaming regulations |
| Financial Data |
GCash number, Maya account, bank account details, transaction history |
Processing deposits and withdrawals, fraud prevention |
| Gaming Activity Data |
Bets placed, games played, win/loss records, session times |
Account operation, responsible gaming, regulatory reporting |
| Technical Data |
IP address, device type, browser, operating system, login timestamps |
Security monitoring, fraud detection, platform optimisation |
| Communications Data |
Support chat transcripts, emails, feedback |
Customer service, dispute resolution, quality improvement |
| Marketing Preferences |
Communication opt-in/opt-out status, preferred contact method |
Sending relevant promotions and updates (only where consented) |
Sensitive personal information: Government-issued IDs submitted for KYC verification at phjilion are classified as sensitive personal information under the DPA. This data is handled with additional security controls, accessed only by authorised compliance personnel, and never used for any purpose beyond identity verification and regulatory compliance.
3. How We Collect Your Personal Data
phjilion collects personal data through the following channels:
- Account registration: When you create your phjilion account, you provide your name, date of birth, mobile number, and email address directly.
- KYC verification: When you submit identity documents for account verification, we collect the information contained in those documents.
- Deposits and withdrawals: Payment transactions provide us with your payment method details and transaction records.
- Platform use: As you use phjilion — playing games, placing bets, navigating the site — we collect technical and gaming activity data automatically through server logs, session tracking, and similar technologies.
- Customer support: When you contact phjilion support by chat or email, the content of those communications is collected and retained.
- Cookies and similar technologies: Our website uses cookies and similar tracking tools. Full details are in Section 8 below.
- Third-party sources: In limited circumstances — for example, during fraud screening or identity verification — phjilion may receive data from trusted third-party verification providers. This data is only used for the specific verification purpose and is subject to the same protections as data collected directly.
4. Why We Use Your Personal Data
phjilion processes your personal data on the following legal bases under the Philippine Data Privacy Act:
- Contractual necessity: Processing required to fulfil the contract between you and phjilion — operating your account, processing your bets, paying out your winnings.
- Legal obligation: Processing required by Philippine gaming regulations, Anti-Money Laundering Act (AMLA) compliance, and tax reporting obligations.
- Legitimate interest: Processing necessary for phjilion's legitimate business interests, such as fraud detection, platform security, and product improvement — where these interests do not override your privacy rights.
- Consent: For marketing communications and non-essential cookies, where your consent is the legal basis for processing. You may withdraw consent at any time.
5. Who We Share Your Personal Data With
phjilion does not sell your personal data to third parties. We do not share your personal data with advertisers, data brokers, or unrelated businesses for their marketing purposes. Data sharing is limited to the following categories of recipients, each with a documented purpose:
5.1 Payment Service Providers
To process your GCash, Maya, BDO, BPI, and other payment transactions, phjilion shares the minimum necessary financial data with your payment provider. These providers are bound by their own privacy obligations and are not permitted to use your data for purposes beyond the payment transaction.
5.2 Identity Verification Providers
phjilion uses licensed third-party KYC verification providers to cross-reference the identity documents you submit. These providers receive only the data necessary to complete verification and are contractually prohibited from using that data for any other purpose.
5.3 Regulatory Authorities
phjilion is required by Philippine law to share certain data with regulatory authorities on request or in prescribed circumstances. This includes the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC). phjilion has no discretion over legally mandated disclosures.
5.4 Technology and Infrastructure Providers
Cloud hosting, game software providers, and fraud detection services may process phjilion player data as part of providing services to phjilion. These are data processors acting on phjilion's instructions under data processing agreements that require GDPR-equivalent data protection standards.
5.5 Professional Advisers
Lawyers, auditors, and compliance advisers engaged by phjilion may access limited personal data in the course of providing professional services. All such access is subject to professional confidentiality obligations.
No data sales, ever: phjilion has never sold player personal data and will never do so. Our business model is based on providing gaming services, not on monetising user data. This is a commitment, not just a policy — it's reflected in our contracts with all third parties who handle phjilion player data.
6. How Long We Keep Your Personal Data
phjilion retains personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Specific retention periods are as follows:
- Account data (active accounts): For the duration of your account plus 5 years after closure, to comply with AMLA and gaming regulatory requirements.
- KYC / identity documents: 5 years from the date of submission or account closure, whichever is later, as required by AMLA.
- Transaction records: 5 years from the date of each transaction.
- Gaming activity logs: 3 years from the date of each session.
- Customer support communications: 2 years from the date of the interaction.
- Marketing consent records: Until you withdraw consent, plus 1 year thereafter as evidence of the consent history.
- Technical/device logs: 90 days on a rolling basis, unless a specific security incident requires extended retention.
When retention periods expire, phjilion securely deletes or anonymises the relevant data. Anonymised data — from which you cannot be identified — may be retained indefinitely for statistical and platform improvement purposes.
7. How We Protect Your Personal Data
phjilion implements technical and organisational security measures appropriate to the sensitivity of the data we hold. These measures include:
- Encryption in transit: All data transmitted between your device and phjilion's servers is encrypted using TLS 1.2 or higher. The phjilion website enforces HTTPS at all times.
- Encryption at rest: Sensitive personal data — including identity documents and payment information — is encrypted in storage using AES-256 or equivalent.
- Access controls: Personal data is accessible only to phjilion staff who require it for their specific job function. Access is controlled through role-based permissions and logged for audit purposes.
- Two-factor authentication: All phjilion staff accounts that can access player personal data require multi-factor authentication.
- Penetration testing: phjilion conducts regular security assessments and penetration testing of its platform and data infrastructure.
- Data breach response: phjilion maintains a documented data breach response procedure. In the event of a breach that affects your personal data, you will be notified within the timeframe required by the NPC — which is generally within 72 hours of our becoming aware of the breach.
While phjilion takes security seriously, no online platform can guarantee absolute security. You also have a role to play — keep your phjilion login credentials secure, use a strong and unique password, and enable two-factor authentication on your account. If you suspect unauthorised access, contact phjilion support immediately.
8. Cookies and Similar Technologies
phjilion uses cookies — small text files placed on your device — and similar technologies to operate the Platform, remember your preferences, and analyse usage patterns. Here's what we use and why:
8.1 Essential Cookies
These cookies are strictly necessary for the Platform to function. They maintain your logged-in session, enable payment processing, and ensure security features work correctly. You cannot opt out of essential cookies — without them, phjilion cannot operate.
8.2 Functional Cookies
These cookies remember your preferences — such as your preferred language, game display settings, or last-used payment method — so you don't have to reset them every visit. They're not strictly necessary but significantly improve your experience at phjilion.
8.3 Analytics Cookies
phjilion uses analytics tools to understand how players use the Platform — which pages are visited most, where players encounter difficulties, how long sessions last. This data is used in aggregate and pseudonymised form to improve phjilion. Analytics cookies require your consent and can be disabled.
8.4 Managing Your Cookie Preferences
You can manage your cookie preferences through the phjilion cookie settings panel, accessible from the footer of the website. You can also control cookies through your browser settings — consult your browser's help documentation for instructions. Note that disabling essential cookies will prevent you from logging in and using the Platform.
9. Your Privacy Rights Under Philippine Law
Under the Data Privacy Act of 2012, you have the following rights regarding your personal data held by phjilion. These rights can be exercised by contacting our Data Protection Officer at the details in Section 13.
Right to Access
Request a copy of the personal data phjilion holds about you, and information about how it is being used. phjilion will respond within 15 business days.
Right to Rectification
Request correction of inaccurate or incomplete personal data. For account details, you can update many fields directly in your phjilion account settings.
Right to Erasure
Request deletion of your personal data where there is no longer a lawful basis for phjilion to hold it. Note that some data must be retained to comply with Philippine AMLA and gaming regulations.
Right to Object
Object to processing based on legitimate interest — including direct marketing. Where you object to marketing, we will stop immediately. Other objections are assessed case by case.
Right to Data Portability
Request a structured, machine-readable copy of the personal data you provided to phjilion, to transfer to another service if you choose.
Right to Lodge a Complaint
If you believe phjilion has violated your data privacy rights, you may lodge a complaint with the Philippine National Privacy Commission (NPC) through its official channels.
To exercise any of the rights above, contact phjilion's Data Protection Officer at privacy@phjilion.net. Please include your registered phjilion email address and a clear description of your request. phjilion will acknowledge your request within 3 business days and resolve it within the timeframes required by the NPC.
10. Children's Privacy
phjilion is strictly an adult platform. We do not knowingly collect personal data from persons under 18 years of age. Age verification is required during registration, and phjilion may request additional proof of age before activating an account or processing withdrawals.
If phjilion discovers that personal data has been collected from a person under 18, that account will be closed immediately, all collected data will be deleted, and any funds deposited will be returned through the original payment method following verification.
If you are a parent or guardian and believe your child has created a phjilion account, please contact us immediately at support@phjilion.net.
11. Cross-Border Data Transfers
To provide the Platform, phjilion may process some personal data on servers or through service providers located outside the Philippines. Where this occurs, phjilion ensures that appropriate safeguards are in place — including data processing agreements that require the receiving party to maintain data protection standards consistent with the Philippine Data Privacy Act.
phjilion does not transfer personal data to countries that do not provide an adequate level of data protection without ensuring contractual protections are in place. Transfers to cloud infrastructure providers use standard contractual clauses or equivalent protections.
12. Changes to This Privacy Policy
phjilion reviews and updates this Privacy Policy periodically to reflect changes to our practices, technology, legal requirements, or business operations. When we make material changes — those that significantly affect your rights or how we handle your data — we will notify you by email and via an in-platform notification at least 7 days before the changes take effect.
The "last updated" date at the top of this page always reflects the most recent revision. The current version of this policy is always available at phjilion.net/privacy-policy. Your continued use of phjilion after the effective date of any changes constitutes acceptance of the updated Policy.
phjilion has appointed a Data Protection Officer (DPO) as required by the Philippine Data Privacy Act. The DPO is responsible for overseeing phjilion's compliance with the DPA and for handling data subject requests and complaints.
You can contact phjilion's Data Protection Officer and privacy team through the following channels:
For formal data subject access requests — requests to access, correct, delete, or port your data — please email the DPO with the subject line "Data Subject Request" and include your registered phjilion email address. phjilion will acknowledge your request within 3 business days.
If you are not satisfied with phjilion's response to a privacy complaint, you have the right to escalate to the National Privacy Commission of the Philippines. Information on filing a complaint with the NPC is available through official Philippine government channels.
