26joinph Privacy Policy

1. Who We Are

26joinph (referred to in this Policy as "we," "us," "our," or "the Platform") operates the online gaming platform accessible at https://26joinph.vip. We are the personal information controller responsible for the personal data you provide to us or that we collect in connection with your use of the Platform.

26joinph operates within the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) for online gaming in the Philippines. As a personal information controller, we are subject to the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

We have appointed a Data Protection Officer (DPO) who is responsible for overseeing our data protection practices and serving as the primary point of contact for data privacy matters. Contact details for our DPO are provided in Section 14 of this Policy.

2. Personal Data We Collect

Depending on how you interact with the 26joinph Platform, we may collect the following categories of personal data:

We do not collect sensitive personal information as defined under the Data Privacy Act (such as health data, political affiliations, or religious beliefs) unless specifically required by law or with your explicit consent.

3. How We Collect Your Data

26joinph collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or updating your profile;
• Automated collection: Technical data collected automatically through cookies, web beacons, log files, and similar tracking technologies when you access the Platform;
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from payment processors; publicly available information used for compliance screening;
• Regulatory sources: Information received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities in connection with our legal obligations.

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• Account management: To create, maintain, and administer your 26joinph account, including verifying your identity and eligibility;
• Service delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver all Platform features;
• Legal compliance: To fulfill our obligations under the Data Privacy Act, Anti-Money Laundering Act, PAGCOR regulations, and other applicable Philippine laws — including KYC verification, transaction monitoring, and suspicious activity reporting;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other illegal or prohibited activities;
• Responsible gaming: To monitor gaming patterns, enforce self-exclusion requests, apply deposit and loss limits, and identify players who may need responsible gaming support;
• Customer support: To respond to your inquiries, resolve disputes, and improve our support services;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time;
• Platform improvement: To analyze usage patterns, conduct research, and improve the functionality, performance, and user experience of the Platform.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 26joinph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account and deliver the services you have registered for;
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, anti-money laundering requirements, and tax obligations;
• Legitimate interests: Processing necessary for our legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, where these interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

26joinph does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, and banking partners require certain personal and financial data to process your transactions securely;
• KYC and identity verification providers: Third-party services that assist us in verifying your identity and screening against sanctions and watchlists;
• Game software providers: Game providers may receive anonymized or pseudonymized gaming data necessary to deliver their games and maintain RNG certification;
• IT and security service providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: PAGCOR, the AMLC, the National Privacy Commission, and other competent Philippine authorities, where disclosure is required by law or court order;
• Professional advisors: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations.

All third-party service providers who process personal data on our behalf are required to implement appropriate technical and organizational security measures and to process data only in accordance with our instructions.

7. Cookies & Tracking Technologies

The 26joinph Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze Platform usage. The following types of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — including session authentication, security tokens, and load balancing. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and display options to personalize your experience;
• Analytics cookies: Collect anonymized data about how players use the Platform to help us improve performance and usability;
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and unauthorized access attempts.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. We do not use third-party advertising or behavioral tracking cookies.

8. Data Retention

26joinph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by Philippine anti-money laundering regulations;
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLC record-keeping requirements;
• Gaming history: Retained for three (3) years from the date of each gaming session, or longer if required for dispute resolution or regulatory purposes;
• Support communications: Retained for two (2) years from the date of the last communication;
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted within 30 days.

When personal data is no longer required, it is securely deleted or anonymized in accordance with our data disposal procedures.

9. Data Security

26joinph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including financial information and government ID data;
• Multi-factor authentication for account access and administrative systems;
• Regular security audits, penetration testing, and vulnerability assessments;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• 24/7 security monitoring and intrusion detection systems;
• Regular staff training on data protection and information security.

10. Your Data Privacy Rights

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 26joinph:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Privacy Policy;
• Right of access: The right to request a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all verified requests within 15 business days. We may need to verify your identity before processing your request.

Please note that certain rights may be limited where processing is required for compliance with legal obligations, the performance of a contract, or the establishment, exercise, or defense of legal claims.

11. Children's Privacy

The 26joinph Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing online casino gaming. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21, we will immediately close the associated account, delete the personal data, and refund any deposits made, subject to verification. If you believe a minor has registered on our Platform, please contact us immediately at the details provided in Section 14.

12. Cross-Border Data Transfers

Some of our service providers and technology partners may be located outside the Philippines. Where 26joinph transfers your personal data to recipients in other countries, we ensure that appropriate safeguards are in place to protect your data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law;
• Transfers only to countries or organizations that the National Privacy Commission has recognized as providing adequate data protection;
• Your explicit consent, where required for specific transfers.

We will not transfer your personal data internationally in a manner that undermines your rights under the Data Privacy Act of 2012.

13. Changes to This Privacy Policy

26joinph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players by email and/or by posting a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy will be revised with each update. We encourage you to review this Policy periodically. Your continued use of the Platform after any amendment constitutes your acknowledgment of the revised Policy.

14. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by 26joinph, please contact our Data Protection Officer:

• Data Protection Officer: 26joinph DPO
• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 via the Platform
• Response Time: Within 15 business days for data privacy requests

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through their official government channels.