Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how 30phjoy ("30phjoy," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of players and visitors who access the 30phjoy website and gaming platform (collectively, the "Platform").

30phjoy is committed to protecting the privacy and personal data of all users in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). This Policy also reflects our obligations under PAGCOR's data governance framework and the Anti-Money Laundering Act (AMLA) of the Philippines.

By registering an account with 30phjoy, accessing the Platform, or otherwise providing us with your personal information, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the 30phjoy Platform.

This Policy should be read together with the 30phjoy Terms & Conditions, which govern your use of the Platform as a whole.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, 30phjoy acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform. This means that 30phjoy determines the purposes and means of processing your personal information.

Where 30phjoy engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, and customer support platforms — those providers act as Personal Information Processors (PIPs) and are contractually bound to process your data only in accordance with 30phjoy's instructions and this Privacy Policy.

If you have any questions or concerns about how 30phjoy processes your personal data, or if you wish to exercise any of your data subject rights, please contact our Data Protection Officer using the details provided in Section 15 of this Policy.

3. Personal Data We Collect

30phjoy collects the following categories of personal data from players and Platform visitors:

Identity & Contact Information

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (for age verification — players must be 21 years of age or older)
• Residential address in the Philippines (city, province, postal code)
• Valid Philippine mobile number
• Email address
• Government-issued ID type and number (e.g., PhilSys National ID, passport, driver's licence, SSS/GSIS card)

Financial Information

• GCash or PayMaya account number (mobile number associated with the e-wallet)
• Bank account details for bank transfer transactions (account name, account number, bank name)
• Debit card details where applicable (card number is tokenised and never stored in full)
• Transaction history, including deposit amounts, withdrawal amounts, and dates

Gaming Activity Data

• Game history, including games played, wager amounts, wins, and losses
• Session duration and login timestamps
• Bonus and promotion usage history
• Responsible gaming tool settings (deposit limits, self-exclusion status)

Technical & Device Data

• IP address and approximate geolocation (to verify Philippine residency)
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform usage logs and error reports

Communications Data

• Records of your communications with 30phjoy customer support, including live chat transcripts and email correspondence
• Survey responses and feedback submissions where voluntarily provided

4. How We Collect Your Data

30phjoy collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically — through cookies, session tokens, and server logs when you access and use the Platform. See Section 8 for more detail on cookies.
• From third-party verification providers — when we conduct identity verification and fraud screening using licensed KYC and anti-fraud service providers.
• From payment processors — when you make a deposit or withdrawal, our payment partners share transaction confirmation data with us.
• From regulatory bodies — PAGCOR and the AMLC may share information with us as part of our regulatory compliance obligations.

5. How We Use Your Personal Data

30phjoy uses the personal data we collect for the following purposes:

30phjoy will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a separate legal basis for the new processing activity.

6. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 30phjoy processes your personal data on the following legal bases:

• Consent — for marketing communications and non-essential cookies, where you have given us your explicit consent. You may withdraw consent at any time by contacting our support team or updating your account preferences.
• Contractual necessity — for processing required to fulfil our obligations under the 30phjoy Terms & Conditions, including account management, payment processing, and the provision of gaming services.
• Legal obligation — for processing required to comply with applicable Philippine law, including PAGCOR licensing requirements, the Anti-Money Laundering Act, and the Data Privacy Act itself.
• Legitimate interests — for fraud prevention, platform security, and the improvement of our services, where such interests are not overridden by your rights and freedoms.

7. Sharing Your Personal Data

30phjoy does not sell, rent, or trade your personal data to any third party for commercial purposes. We share your personal data only in the following limited circumstances:

• Payment processors — GCash, PayMaya, and our banking partners receive the minimum data necessary to process your deposits and withdrawals securely.
• KYC and identity verification providers — licensed third-party providers assist us in verifying your identity and age in compliance with PAGCOR and AMLA requirements.
• Game software providers — game providers may receive anonymised session data necessary to deliver and maintain their games on the 30phjoy Platform.
• Regulatory and law enforcement authorities — PAGCOR, the AMLC, the National Privacy Commission, and other Philippine government agencies may receive your data where we are legally required to disclose it.
• Customer support platforms — our live chat and ticketing system providers process communications data on our behalf under strict data processing agreements.
• Professional advisers — our lawyers, auditors, and compliance consultants may access personal data on a need-to-know basis and are bound by professional confidentiality obligations.

All third parties with whom 30phjoy shares personal data are required to implement appropriate technical and organisational security measures and to process your data only in accordance with our instructions and applicable Philippine law.

8. Cookies & Tracking Technologies

The 30phjoy Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyse Platform usage. A cookie is a small text file placed on your device when you visit the Platform.

30phjoy uses the following categories of cookies:

• Strictly necessary cookies — essential for the Platform to function. These include session authentication tokens and security cookies. They cannot be disabled.
• Functional cookies — remember your preferences, such as language settings and responsible gaming tool configurations, to personalise your experience.
• Analytics cookies — collect anonymised data about how players use the Platform, helping us identify areas for improvement. These are only set with your consent.
• Marketing cookies — used to deliver relevant promotional content within the 30phjoy Platform. These are only set with your explicit consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling strictly necessary cookies may affect the functionality of the 30phjoy Platform, including your ability to log in and play games.

9. Data Retention

30phjoy retains your personal data for as long as is necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLA requirements.
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming activity logs — retained for a minimum of two (2) years from the date of the activity, or longer where required for dispute resolution or regulatory purposes.
• Customer support communications — retained for two (2) years from the date of the last communication, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records — retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, 30phjoy will securely delete or anonymise your personal data in accordance with our data disposal procedures.

10. Data Security

30phjoy implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 30phjoy Platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that only authorised 30phjoy personnel can access personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure.
• Multi-factor authentication for internal systems that process personal data.
• Staff training on data privacy obligations and secure data handling practices.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 30phjoy will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 30phjoy:

• Right to be informed — the right to know what personal data 30phjoy collects about you and how it is used, as described in this Privacy Policy.
• Right of access — the right to request a copy of the personal data 30phjoy holds about you.
• Right to rectification — the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal and regulatory retention obligations.
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) if you believe that 30phjoy has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. We will respond to all valid data subject requests within fifteen (15) business days of receipt. We may request proof of identity before processing your request to protect against unauthorised access to your data.

12. Children & Minors

The 30phjoy Platform is strictly intended for adults who are 21 years of age or older, in accordance with Philippine gaming regulations. 30phjoy does not knowingly collect personal data from individuals under the age of 21.

If 30phjoy becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, forfeit any associated balances in accordance with our Terms & Conditions, and securely delete the personal data of the underage individual from our systems.

If you are a parent or guardian and believe that your child has registered an account with 30phjoy, please contact our support team immediately so that we can take appropriate action.

13. Cross-Border Data Transfers

Some of the third-party service providers used by 30phjoy — including game software providers and certain technical infrastructure providers — may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, 30phjoy ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under the Philippine Data Privacy Act.
• Transfers only to countries or organisations that the National Privacy Commission has determined provide an adequate level of data protection.
• Binding corporate rules where applicable within corporate group structures.

By using the 30phjoy Platform, you consent to the transfer of your personal data to third-party processors outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

14. Changes to This Privacy Policy

30phjoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The date of the most recent revision is displayed at the top of this Policy. We encourage you to review this Privacy Policy periodically to stay informed about how 30phjoy protects your personal data. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 30phjoy handles your personal data, please contact our Data Protection Officer:

Email: [email protected]

General Support: [email protected]

We will acknowledge all privacy-related enquiries within three (3) business days and aim to resolve them within fifteen (15) business days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.