16phjoy Privacy Policy

This Privacy Policy ("Policy") sets out the basis on which 16phjoy ("we", "us", "our", or "16phjoy") collects, uses, discloses, and safeguards personal information about you ("User", "you", or "your") when you access or use the 16phjoy online gaming platform available at 16phjoy.net (the "Platform").

16phjoy is committed to processing your personal data lawfully, fairly, and transparently, in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC").

By registering for a 16phjoy account or otherwise using the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal information as described herein. If you do not agree to this Policy, you must discontinue use of the Platform.

16phjoy collects the following categories of personal data from users of the Platform:

16phjoy collects personal data through the following methods:

• Direct submission: Information you provide when you register for an account, complete identity verification, make a deposit or withdrawal, update your account profile, or contact our support team.
• Automated technologies: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access and interact with the Platform. Please refer to Section 7 (Cookies & Tracking) for full details.
• Third-party payment providers: Transaction confirmation data received from payment partners such as GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, and Mastercard when you initiate a deposit or withdrawal.
• Identity verification partners: Verification outcomes and data returned by our KYC/AML service providers when we carry out identity checks required by applicable regulations.
• Publicly available sources: In limited circumstances related to fraud prevention or AML compliance, we may cross-reference data against publicly available Philippine government records or sanction lists.

16phjoy processes your personal data only for specific, legitimate purposes. The table below sets out each processing purpose and the corresponding data categories used:

Under the Philippine Data Privacy Act, 16phjoy relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing is necessary to perform the contract between you and 16phjoy (i.e., to operate your account, process transactions, and deliver gaming services).
• Legal obligation: Processing is required to comply with applicable legal and regulatory obligations, including KYC, AML, age verification, and data retention requirements under Philippine law.
• Legitimate interests: Processing is necessary for the legitimate interests of 16phjoy, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided these interests are not overridden by your data protection rights.
• Consent: Where we rely on your consent as the legal basis (for example, for marketing communications), you have the right to withdraw that consent at any time without affecting any prior processing.

16phjoy does not sell, rent, or trade your personal information to third parties. We may share your data only in the following limited circumstances:

• Payment processors: We share the minimum necessary financial and identity data with payment service providers (GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, Visa, Mastercard) to process your deposits and withdrawals securely.
• KYC / AML service providers: We work with identity verification and anti-money-laundering service partners who process identity documents on our behalf under strict data processing agreements.
• Game providers: Certain technical data (such as session identifiers) may be shared with third-party game providers whose titles are hosted on the Platform, solely for the purpose of game delivery and fairness verification.
• Regulatory authorities: We may be required to disclose your personal data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), or other competent Philippine government authorities in response to lawful requests or as required by applicable law.
• Professional advisors: We may share data with legal, accounting, or auditing firms engaged by 16phjoy, subject to binding confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or restructuring of the 16phjoy business, personal data may be transferred to the acquiring entity, subject to the same protections described in this Policy.

All third parties with whom we share data are required to implement appropriate technical and organisational measures to protect your information, consistent with the requirements of the DPA.

16phjoy uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support security and fraud prevention. The following types of cookies are used:

• Essential cookies: Strictly necessary for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Allow the Platform to remember your preferences (such as language settings and game display options) to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how users interact with the Platform, enabling us to identify areas for improvement. This data does not identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and account takeover prevention.

Most web browsers allow you to control cookie settings through your browser preferences. You may refuse or delete cookies at any time; however, doing so may affect your ability to use certain features of the Platform. Continued use of the Platform with cookies enabled constitutes your consent to our use of cookies as described in this section.

16phjoy retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention guidelines apply:

• Active account data: Retained for the duration of your account's active status and for a period of at least five (5) years following account closure, in line with AML record-keeping requirements.
• Transaction records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and its implementing rules.
• KYC / identity documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later.
• Support communications: Chat logs and email correspondence are retained for up to three (3) years for quality assurance and dispute resolution purposes.
• Technical and usage data: Log files and usage data are retained for up to twelve (12) months, after which they are deleted or anonymised.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, unless ongoing retention is required by a specific legal obligation or active regulatory investigation.

16phjoy implements appropriate technical and organisational security measures designed to protect your personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transmission of personal and financial data is encrypted using Transport Layer Security (TLS) protocols.
• Account passwords are stored using industry-standard one-way hashing algorithms — plaintext passwords are never stored.
• Access to personal data within 16phjoy is restricted on a strict need-to-know basis, with access rights regularly reviewed and revoked for departed personnel.
• Our servers are hosted in secured data centre environments with physical and logical access controls, regular security patching, and intrusion detection systems.
• Regular internal security reviews and, where applicable, third-party penetration testing are conducted to identify and remediate vulnerabilities.

While 16phjoy takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You also play a role in keeping your account secure — please use a strong, unique password and never share your login credentials with anyone.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 16phjoy. You may exercise these rights by contacting our support team or Data Privacy Officer (see Section 14):

The 16phjoy Platform is strictly for adults aged 21 years and above, in accordance with Philippine gaming regulations. 16phjoy does not knowingly collect personal data from individuals under the age of 21.

If we discover or are notified that we have inadvertently collected personal data from a person under 21, we will immediately suspend the associated account, delete the personal data in question, and refund any real-money deposits to the payment method used, subject to verification.

If you are a parent or guardian and believe that your child has registered on the 16phjoy Platform, please contact us immediately at [email protected] so that we can take appropriate action promptly.

The 16phjoy Platform may contain links to third-party websites or services, such as payment provider portals, in connection with completing a transaction. These third-party sites operate independently of 16phjoy and are governed by their own privacy policies.

16phjoy is not responsible for the privacy practices, content, or security of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit in connection with the use of our Platform.

The inclusion of a link to a third-party site on the 16phjoy Platform does not constitute an endorsement or recommendation of that site or its privacy practices.

16phjoy reserves the right to update or modify this Privacy Policy at any time to reflect changes in applicable law or regulation, updates to our data processing activities, or improvements to our services.

When we make material changes to this Policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify registered users via their registered email address or through a prominent notice on the Platform.

Your continued use of the Platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this Policy periodically to stay informed about how 16phjoy protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 16phjoy, you may contact our Data Privacy Officer (DPO) and support team through the following channels:

• Email: [email protected]
• Live Chat: Available 24/7 through the Platform
• Service Area: Serving players across the Philippines, including Manila, Cebu, Davao, Quezon City, and Makati

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which is the regulatory body responsible for enforcing the Data Privacy Act of 2012.