37phjoy Privacy Policy

1 Who We Are and How to Contact Us

37phjoy ("we," "us," or "our") is the operator of the online gaming platform accessible at https://37phjoy.app. We are the data controller responsible for the personal data collected through the 37phjoy platform.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our Data Privacy Officer (DPO) using the details below:

2 Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected by 37phjoy through:

• The 37phjoy website and any associated mobile interfaces;
• Account registration and KYC verification processes;
• Deposits, withdrawals, and payment transactions;
• Customer support interactions via chat, email, or phone;
• Participation in promotions, tournaments, and loyalty programs;
• Cookies and similar tracking technologies used on the platform.

This Policy does not apply to third-party websites or services that may be linked from the 37phjoy platform. 37phjoy is not responsible for the privacy practices of third-party game providers, payment processors, or any other external services.

3 Personal Data We Collect

37phjoy collects the following categories of personal data from players:

37phjoy does not intentionally collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (e.g., responsible gaming assessments).

4 How We Collect Your Data

37phjoy collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions;
• Automated collection: Technical and usage data collected automatically when you access the platform, including through cookies, web beacons, and server logs;
• Third-party sources: Identity verification data from KYC service providers; fraud signals from payment processors; and publicly available information used to verify your identity or detect suspicious activity.

5 How We Use Your Personal Data

37phjoy uses your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your 37phjoy account;
• Identity verification: Confirming your age (21+), identity, and eligibility to use the platform in compliance with Philippine gaming regulations;
• Payment processing: Facilitating deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank;
• Customer support: Responding to your inquiries, resolving disputes, and improving our support services;
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behavior and applying player protection tools where appropriate;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, and unauthorized account access;
• Legal compliance: Meeting our obligations under Philippine law, including the Data Privacy Act of 2012, Anti-Money Laundering Act, and applicable PAGCOR regulations;
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have given your consent, and always with an easy opt-out option;
• Platform improvement: Analyzing usage data to improve game selection, interface design, and overall player experience.

37phjoy will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

6 Legal Bases for Processing

Under the Philippine Data Privacy Act of 2012 (RA 10173), 37phjoy processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to when registering your account (e.g., account management, payment processing);
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations (e.g., KYC verification, anti-money laundering reporting);
• Legitimate interests: Processing necessary for 37phjoy's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing based on your freely given, specific, and informed consent, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Data with Third Parties

37phjoy does not sell your personal data. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the purpose of processing your financial transactions;
• KYC and identity verification providers: Third-party services that assist in verifying your identity and age in compliance with Philippine regulations;
• Game providers: Licensed game studios (e.g., PG Soft, Pragmatic Play, Jili Games) that supply the games available on the 37phjoy platform. These providers may receive limited technical data necessary to deliver their games;
• IT and cloud service providers: Infrastructure and hosting partners who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: The National Privacy Commission (NPC), PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where disclosure is required by law.

8 Cookies and Tracking Technologies

37phjoy uses cookies and similar tracking technologies to operate and improve the platform. The following types of cookies are used:

• Essential cookies: Required for the platform to function correctly, including maintaining your login session and remembering your preferences. These cannot be disabled without affecting platform functionality;
• Analytics cookies: Used to collect aggregated, anonymized data about how players use the platform, helping us identify areas for improvement;
• Security cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification;
• Preference cookies: Used to remember your language, display, and notification preferences across sessions.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 37phjoy platform. 37phjoy does not use third-party advertising cookies or behavioral tracking cookies for cross-site advertising purposes.

9 Data Retention

37phjoy retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with anti-money laundering regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship;
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution;
• Marketing consent records: Retained until you withdraw consent, plus one (1) year for compliance documentation purposes.

When personal data is no longer required, 37phjoy will securely delete or anonymize it in accordance with our data disposal procedures.

10 Security Measures

37phjoy implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• TLS 1.3 encryption for all data in transit between your device and our servers;
• AES-256 encryption for sensitive data stored in our databases;
• Role-based access controls (RBAC) ensuring that only authorized personnel can access personal data, and only to the extent necessary for their role;
• Multi-factor authentication (MFA) for all internal systems and administrative access;
• Regular security audits and penetration testing conducted by independent third-party security firms;
• 24/7 intrusion detection and monitoring of our platform infrastructure;
• Segregated data environments separating player data from operational systems.

While 37phjoy takes all reasonable precautions to protect your data, no electronic system is completely immune to security risks. In the event of a data breach that poses a risk to your rights and freedoms, 37phjoy will notify you and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required by the Data Privacy Act.

11 Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 37phjoy:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as described in this Privacy Policy;
• Right of access: The right to request a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Privacy Officer at [email protected]. We will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request.

12 Children's Privacy

The 37phjoy platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. 37phjoy does not knowingly collect personal data from individuals under the age of 21.

If 37phjoy becomes aware that personal data has been collected from a person under 21 years of age, the account will be immediately suspended, all data will be deleted, and any deposits will be returned at 37phjoy's discretion. If you believe a minor has registered on the platform, please contact our support team immediately at [email protected].

13 Changes to This Privacy Policy

37phjoy reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect.

The effective date at the top of this page will always reflect the date of the most recent revision. We encourage you to review this Privacy Policy periodically. Your continued use of the 37phjoy platform after the effective date of any changes constitutes your acceptance of the revised Policy.

14 Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of the Philippines, including but not limited to the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

Any disputes arising from or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts and regulatory bodies of the Philippines, including the National Privacy Commission (NPC) for data privacy matters.

For further information about your rights under Philippine data privacy law, you may visit the official website of the National Privacy Commission.