Privacy Policy
At 48phjoy, your personal information is handled with the same care and discretion we bring to every aspect of our platform. This Privacy Policy explains exactly what data we collect from Filipino players, why we collect it, how it is used, and the rights you hold under Philippine data protection law.
Your Privacy, Our Responsibility
Six principles that guide how 48phjoy handles every piece of personal data entrusted to us by our players.
All personal data transmitted between your device and 48phjoy's servers is protected using industry-standard TLS encryption. Data stored on our systems is encrypted at rest using AES-256 — the same standard used by major Philippine banks and financial institutions.
48phjoy operates in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations. We are registered with the National Privacy Commission (NPC) and maintain a designated Data Protection Officer (DPO) as required by law.
48phjoy does not sell, rent, or trade your personal information to any third party for commercial marketing purposes — ever. Data shared with third parties is limited strictly to regulated service providers who are contractually bound to handle it with the same standards we apply internally.
We follow the principle of data minimization — collecting only the personal information that is strictly necessary to deliver our services, meet regulatory requirements, and keep your account secure. We do not collect data for its own sake.
As a 48phjoy player, you have the right to access, correct, and request deletion of your personal data, subject to legal retention requirements. You can also withdraw consent for marketing communications at any time through your account settings or by contacting our support team.
Certain data is collected and retained because Philippine law requires it — including PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA). These legal obligations exist to protect all players and maintain the integrity of the platform. We are transparent about what is legally required versus what is optional.
Definitions
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below. These definitions are consistent with those used in Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, as well as the relevant provisions of PAGCOR's regulatory framework.
- "48phjoy," "we," "us," "our" — the 48phjoy online casino and sports betting platform, accessible at https://48phjoy.app, operated under PAGCOR oversight.
- "Personal Data" — any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained, or when put together with other information would directly and certainly identify an individual.
- "Sensitive Personal Information" — personal data about an individual's race, ethnic origin, marital status, age, color, religious, philosophical or political affiliations, health, education, genetic or sexual life, financial information, and any information issued by government authorities (e.g., SSS, PhilHealth, Passport, Driver's License numbers).
- "Processing" — any operation or set of operations performed on personal data, including collection, recording, organization, storage, updating, retrieval, use, disclosure, or destruction.
- "Data Subject" — any natural person whose personal data is processed by 48phjoy, including registered players, prospective players, and visitors to the platform.
- "Data Protection Officer" (DPO) — the designated individual within 48phjoy responsible for ensuring compliance with the Data Privacy Act of 2012 and this Privacy Policy.
- "National Privacy Commission" (NPC) — the Philippine government body tasked with administering and implementing the Data Privacy Act of 2012.
- "KYC" — Know Your Customer verification procedures required by PAGCOR and Philippine AML regulations before account activation or withdrawal processing.
- "Consent" — any freely given, specific, informed indication of will by which the data subject agrees to the collection and processing of their personal data.
Data We Collect
48phjoy collects personal data through several channels — directly from you when you register or interact with our platform, automatically through your use of the platform, and from third-party sources where legally permitted. The following table provides a comprehensive overview of the categories of personal data we collect and the primary source of each.
| Category | Specific Data Points | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government ID type and number | Provided by you during registration / KYC |
| Contact Data | Email address, Philippine mobile number, residential address (barangay, city/municipality, province) | Provided by you during registration |
| KYC Documents | Scanned or photographed government-issued ID (SSS, PhilHealth, UMID, Driver's License, Passport), selfie verification image, proof of address | Provided by you during KYC verification |
| Financial Data | GCash account number, Maya account details, BPI/BDO/Metrobank account information, deposit and withdrawal transaction records | Provided by you; generated by platform transactions |
| Gaming Activity Data | Game session logs, bet amounts, game outcomes, win/loss history, bonus usage records, sports betting selections | Automatically generated by platform activity |
| Technical Data | IP address, device type and model, browser type and version, operating system, session timestamps, geolocation data (country/region level) | Automatically collected via platform access |
| Communication Data | Live chat transcripts, support ticket content, email correspondence with 48phjoy support | Generated through customer support interactions |
| Marketing Preferences | Opt-in/opt-out status for promotional SMS, email, and push notifications | Provided by you; updated via account settings |
You are not obligated to provide personal data beyond what is required for registration and KYC. However, failure to provide mandatory data may limit or prevent access to certain platform features, including the ability to make withdrawals. Optional data fields are clearly marked during the registration process.
How We Use Your Data
48phjoy uses the personal data we collect for the following specific purposes. We do not use your data for any purpose that is incompatible with the original purpose for which it was collected without first obtaining your consent or having another lawful basis for doing so.
3.1 Account Creation and Management
Identity data, contact data, and KYC documents are used to create and maintain your 48phjoy account, verify your eligibility to participate (including the 21+ age requirement under Philippine law), and authenticate your identity during login and sensitive account operations.
3.2 Transaction Processing
Financial data is used to process your GCash, Maya, BPI, BDO, Metrobank, InstaPay, QR Ph, GrabPay, and 7-Eleven CLiQQ deposit and withdrawal transactions. All payment processing is handled through regulated third-party payment service providers operating under Bangko Sentral ng Pilipinas (BSP) oversight.
3.3 Regulatory Compliance
Identity data, KYC documents, financial data, and gaming activity data are processed to fulfill our obligations under PAGCOR's licensing conditions, Republic Act No. 9160 (Anti-Money Laundering Act, as amended), and other applicable Philippine laws. This includes filing Covered Transaction Reports (CTRs) and Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) where legally required.
3.4 Responsible Gaming
Gaming activity data, deposit and withdrawal records, and session logs are analyzed by 48phjoy's responsible gaming systems to identify betting patterns that may indicate problem gambling behavior. This analysis enables us to proactively offer responsible gaming tools and, where necessary, impose restrictions to protect player welfare — consistent with our PAGCOR regulatory obligations.
3.5 Fraud Prevention and Security
Technical data, financial data, gaming activity data, and identity data are used by 48phjoy's fraud detection systems to identify and prevent unauthorized account access, bonus abuse, multi-accounting, money laundering, and other prohibited activities described in our Terms and Conditions.
3.6 Customer Support
Communication data and account data are used by 48phjoy's support team to respond to your inquiries, resolve disputes, and provide assistance with account-related issues through live chat and email.
3.7 Platform Improvement
Aggregated and anonymized gaming activity data and technical data are used to analyze platform performance, identify areas for improvement, and develop new features. This analysis is conducted at the aggregate level and does not involve profiling of individual players for non-essential purposes.
3.8 Marketing Communications
Where you have provided your consent to receive marketing communications, your contact data and marketing preferences are used to send you information about 48phjoy promotions, bonuses, new game launches, and special offers tailored to Philippine players. You may withdraw your marketing consent at any time without affecting your access to the platform.
Legal Basis for Processing
Under the Data Privacy Act of 2012, 48phjoy is required to have a lawful basis for each type of personal data processing it conducts. The following table sets out the legal basis for each primary processing purpose described in Section 3.
| Processing Purpose | Legal Basis (DPA 2012) |
|---|---|
| Account creation and management | Performance of a contract (Section 12(b), DPA 2012) |
| Transaction processing | Performance of a contract (Section 12(b), DPA 2012) |
| Regulatory compliance (PAGCOR, AMLA, KYC) | Compliance with a legal obligation (Section 12(c), DPA 2012) |
| Responsible gaming monitoring | Legitimate interests / Legal obligation (Section 12(c) & (f), DPA 2012) |
| Fraud prevention and security | Legitimate interests (Section 12(f), DPA 2012) |
| Customer support | Performance of a contract (Section 12(b), DPA 2012) |
| Platform improvement (aggregated/anonymized) | Legitimate interests (Section 12(f), DPA 2012) |
| Marketing communications | Consent (Section 12(a), DPA 2012) |
Where our processing is based on your consent (specifically marketing communications), you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to the withdrawal. Withdrawing consent for marketing does not affect your ability to use the 48phjoy platform.
Data Sharing
48phjoy does not sell, rent, or trade your personal data. We share your personal data only in the specific circumstances described below, and only to the extent necessary for each purpose.
5.1 Regulated Service Providers
48phjoy engages third-party service providers to support platform operations. These providers are contractually bound to process personal data only on 48phjoy's instructions and in compliance with the Data Privacy Act of 2012. Categories of third-party service providers include:
- Payment processors: GCash (GXchange Inc.), Maya (Voyager Innovations Inc.), BSP-regulated banks (BPI, BDO, Metrobank), InstaPay network operators — for deposit and withdrawal transaction processing.
- KYC verification providers: Third-party identity verification platforms used to validate government-issued IDs and conduct liveness checks during player verification.
- Fraud detection and cybersecurity providers: Vendors providing real-time transaction monitoring and account security services.
- Cloud infrastructure providers: Data center and hosting services used to operate the 48phjoy platform, subject to strict data processing agreements.
- Customer support platforms: Live chat and ticketing system providers used to manage player support interactions.
5.2 Regulatory and Law Enforcement Authorities
48phjoy is required by Philippine law to disclose personal data to the following authorities where legally mandated:
- PAGCOR — player account data, KYC records, and gaming activity data as required by PAGCOR's licensing conditions and audit procedures.
- Anti-Money Laundering Council (AMLC) — Covered Transaction Reports and Suspicious Transaction Reports as required by Republic Act No. 9160 (AMLA, as amended).
- National Privacy Commission (NPC) — data breach notifications and compliance documentation as required by the Data Privacy Act of 2012.
- Philippine National Police (PNP) or other law enforcement agencies — in response to a valid court order, subpoena, or lawful law enforcement request.
5.3 Business Transfers
In the event of a merger, acquisition, business transfer, or restructuring involving 48phjoy, personal data held by 48phjoy may be transferred to the acquiring entity, subject to the acquiring entity agreeing to be bound by this Privacy Policy or a substantially equivalent data protection commitment. Players will be notified of any such transfer in advance where it is reasonably practicable to do so.
48phjoy has never sold player personal data to a third party for commercial advertising or marketing purposes, and we commit to maintaining this position. Any future change to this practice would require explicit advance notice and, where legally required, renewed consent from affected data subjects.
Cookies & Tracking Technologies
6.1 What Are Cookies
Cookies are small text files placed on your device when you access the 48phjoy platform. They allow our systems to recognize your device, maintain your session, remember your preferences, and collect usage data to improve the platform experience.
6.2 Types of Cookies We Use
| Cookie Type | Purpose | Can Be Disabled? |
|---|---|---|
| Strictly Necessary | Session management, login authentication, security tokens, fraud prevention | No — required for platform function |
| Functional | Remembering your language preference, game lobby view settings, notification preferences | Yes — via browser settings |
| Analytics | Aggregated data on platform usage patterns, page performance, error tracking — used to improve 48phjoy services | Yes — via cookie preference center |
| Responsible Gaming | Session duration tracking for time reminder features; deposit and session limit enforcement | No — required for player protection |
6.3 Managing Your Cookie Preferences
You can manage non-essential cookie preferences through the Cookie Preference Center accessible from the footer of the 48phjoy platform. You may also configure your browser to block or delete cookies; however, disabling strictly necessary cookies will prevent you from logging in and using core platform features. 48phjoy does not use third-party advertising cookies or cross-site tracking pixels.
Data Retention
48phjoy retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by Philippine law. The following retention periods apply:
| Data Category | Retention Period | Legal Basis for Retention |
|---|---|---|
| KYC documents and identity data | Minimum 5 years after account closure | PAGCOR licensing requirements; AMLA record-keeping obligations |
| Financial transaction records | Minimum 5 years after transaction date | AMLA (RA 9160, as amended); BIR record-keeping requirements |
| Gaming activity logs | 3 years after account closure | PAGCOR audit requirements; dispute resolution |
| Customer support communications | 3 years from the date of the interaction | Dispute resolution; regulatory compliance |
| Marketing preference records | Duration of account plus 1 year | Evidence of consent management compliance (DPA 2012) |
| Technical / session logs | 90 days (rolling) | Security monitoring; fraud detection |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with NPC-recommended data disposal procedures. Where data cannot be immediately deleted due to ongoing legal proceedings or regulatory investigations, deletion is deferred until those proceedings are concluded.
Philippine law — particularly the AMLA and PAGCOR regulations — requires 48phjoy to retain certain data (especially KYC documents and transaction records) for mandatory minimum periods regardless of a player's deletion request. We will always inform you of any legal obligation that prevents immediate deletion when you submit a data deletion request.
Data Security
48phjoy implements a comprehensive, multi-layered security framework to protect the personal data of all players. Our security program is designed in alignment with the NPC's guidelines on data security and international best practices for online gaming platforms operating in the Philippines.
8.1 Technical Safeguards
- Transport Layer Security (TLS 1.3): All data transmitted between your device and 48phjoy's servers is encrypted in transit.
- AES-256 Encryption at Rest: Sensitive data stored on 48phjoy's systems — including KYC documents, financial records, and account credentials — is encrypted at rest.
- Password Hashing: Account passwords are hashed using industry-standard bcrypt algorithms. 48phjoy never stores passwords in plain text.
- Two-Factor Authentication (2FA): SMS OTP-based two-factor authentication is available and strongly recommended for all 48phjoy accounts.
- Intrusion Detection Systems: Real-time monitoring systems detect and respond to unauthorized access attempts and anomalous activity on the platform.
- Web Application Firewall (WAF): Our platform is protected by a WAF that filters and monitors HTTP traffic to prevent common web-based attacks.
8.2 Organizational Safeguards
- Access to personal data is restricted on a strict need-to-know basis. 48phjoy staff are granted access only to data necessary for their specific roles.
- All 48phjoy staff with access to personal data complete mandatory data privacy training annually.
- Third-party service providers are subject to data processing agreements and security assessments before being granted access to any 48phjoy player data.
- 48phjoy maintains a formal Incident Response Plan that is regularly tested and updated.
8.3 Data Breach Response
In the event of a personal data breach, 48phjoy will comply with the NPC's mandatory breach notification requirements, including notifying the NPC within 72 hours of becoming aware of a breach that poses a real risk to data subjects. Affected players will be notified promptly where the breach is likely to result in a high risk to their rights and freedoms. All breach incidents are documented and investigated in accordance with our Incident Response Plan.
Your Rights as a Data Subject
Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by 48phjoy. These rights may be exercised by submitting a written request to our Data Protection Officer at the contact details provided in Section 13.
You have the right to be informed about the collection and processing of your personal data before it is collected, including the purposes, scope, and methods of processing.
You have the right to reasonable access to your personal data held by 48phjoy, including the purposes of processing, recipients of disclosure, and retention period.
You have the right to have inaccurate or incomplete personal data corrected or updated. Supporting documentation may be required to process correction requests.
You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements.
You have the right to object to the processing of your personal data for direct marketing purposes. You may also object to processing based on legitimate interests in certain circumstances.
You have the right to receive a copy of your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller.
You have the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal data in violation of the DPA 2012.
You have the right to file a complaint with the National Privacy Commission (NPC) if you believe 48phjoy has violated your rights under the Data Privacy Act of 2012.
48phjoy will respond to all data subject rights requests within thirty (30) days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by an additional thirty (30) days, with written notice to you of the extension and the reasons for it.
Children & Minors
The 48phjoy platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law governing casino-style gambling. 48phjoy does not knowingly collect personal data from individuals under the age of 21.
48phjoy employs age verification measures during the registration process — including date of birth collection at registration and mandatory KYC document verification — to prevent minors from accessing the platform. Any account found to belong to a person under 21 will be immediately suspended, all funds will be handled in accordance with applicable PAGCOR regulations, and the personal data associated with that account will be securely deleted or retained only to the extent required by law.
If you believe a minor has registered on the 48phjoy platform, please contact our Data Protection Officer immediately at the details provided in Section 13. We take underage gambling seriously and will act promptly on all such reports. Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gambling platforms.
Cross-Border Data Transfers
48phjoy's primary operations and data storage are based in the Philippines. In limited circumstances, personal data may be processed or stored outside the Philippines — for example, by cloud infrastructure or KYC verification service providers whose servers are located in other jurisdictions.
Where personal data is transferred outside the Philippines, 48phjoy ensures that such transfers are carried out in compliance with Section 21 of the Data Privacy Act of 2012 and the NPC's rules on cross-border data transfers. Specifically, 48phjoy will only transfer personal data to a foreign country or international organization where:
- The foreign country or organization has been assessed as providing an adequate level of protection for personal data; or
- Appropriate safeguards are in place, such as contractual clauses approved by the NPC or equivalent binding data protection commitments; or
- The transfer is necessary for the performance of your contract with 48phjoy (e.g., processing an international payment); or
- You have given your explicit consent to the transfer after being informed of the possible risks.
Upon request, 48phjoy can provide further information about the specific safeguards applicable to any cross-border data transfers affecting your personal data. Please contact our Data Protection Officer at the details provided in Section 13.
Policy Updates
48phjoy may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. When we make material changes to this Privacy Policy, we will notify registered players by:
- Posting a prominent notice on the 48phjoy platform for a minimum of 30 days prior to the changes taking effect;
- Sending an email notification to the registered email address on your account; and
- Updating the "Last Updated" date at the top of this Privacy Policy.
For non-material changes — such as corrections of typographical errors, clarifications that do not alter the substantive rights or obligations described in this Policy, or updates to contact details — we may update the Policy without prior notice, though the "Last Updated" date will always be revised accordingly.
Your continued use of the 48phjoy platform after the effective date of a revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any changes to this Privacy Policy, you should discontinue use of the platform and may request account closure by contacting our support team.
Previous versions of this Privacy Policy are archived and available upon request by contacting our Data Protection Officer. We maintain a complete version history in compliance with NPC documentation requirements.
Contact & Data Protection Officer
If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 48phjoy, please contact our Data Protection Officer using the details below. All data subject rights requests should be submitted in writing to ensure proper documentation and timely handling.
48phjoy Data Protection Office
Email: [email protected]
Response time: Within 30 calendar days of receipt
National Privacy Commission (NPC)
5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila
You have the right to lodge a complaint directly with the NPC.
Ready to Experience 48phjoy?
Join thousands of Filipino players enjoying live baccarat, slots, bingo, and sports betting — all on a PAGCOR-regulated platform that takes your privacy seriously. For players 21 and above only.