phjewel Privacy Policy

Welcome to the phjewel Privacy Policy. phjewel ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who registers and plays on our platform at https://phjewel.app. This Privacy Policy describes how phjewel collects, uses, stores, shares, and protects your personal information when you access or use our website, games, and related services.

This policy applies to all players based in the Philippines and is written in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By registering for a phjewel account or continuing to use our platform, you acknowledge that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree with any part of this policy, please discontinue use of the platform and contact our support team to close your account.

For the purposes of the Philippine Data Privacy Act of 2012, phjewel is the Personal Information Controller (PIC) in respect of the personal data collected through the phjewel platform. As the PIC, phjewel determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

phjewel has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact the DPO directly for any privacy-related concerns using the contact details provided in Section 15 of this policy.

phjewel collects the following categories of personal data from players. We only collect data that is necessary for the specific purposes described in this policy:

phjewel collects your personal data through the following means:

• Direct collection: Information you provide when registering for an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the platform, including through cookies, web beacons, server logs, and similar tracking technologies (see Section 10 for details).
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance partners; payment transaction data from GCash, PayMaya, and banking partners.
• Publicly available sources: In limited circumstances, phjewel may verify information against publicly available government databases or records as part of its regulatory compliance obligations.

phjewel does not purchase personal data lists from data brokers or any third-party marketing data providers.

phjewel uses your personal data for the following specific purposes:

• Account registration and management: To create, verify, and maintain your phjewel account, including processing your login credentials and account settings.
• Identity verification (KYC): To verify your identity and age (21+) as required by Philippine gaming regulations and our AML compliance obligations before processing withdrawals or as otherwise required.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Game provision and fairness: To deliver game services, record game outcomes, resolve disputes, and ensure the integrity of all gaming activity on the platform.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, money laundering, and other prohibited conduct.
• Regulatory compliance: To comply with PAGCOR licensing requirements, AML obligations, tax reporting requirements, and any other applicable Philippine laws and regulations.
• Customer support: To respond to your inquiries, resolve complaints, and provide technical assistance through live chat and email.
• Responsible gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of problem gambling.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns, conduct A/B testing, and improve the performance, design, and features of the phjewel platform.

Under the Philippine Data Privacy Act of 2012, phjewel processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your account, process payments, and deliver gaming services.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AML laws (Republic Act No. 9160 as amended), and tax obligations.
• Legitimate interests: Processing necessary for phjewel's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional analytics. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phjewel does not sell your personal data. We share your data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive the financial data necessary to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party identity verification services receive your identity documents and personal details to complete the KYC process on our behalf.
• AML and fraud screening providers: Compliance technology partners receive transaction data and identity information to screen against sanctions lists and detect suspicious activity.
• Game software providers: Game providers may receive your player ID and gaming session data to deliver their games and resolve technical disputes. They do not receive your full identity or financial data.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies may receive data as required by law or upon lawful request.
• Law enforcement: Philippine law enforcement agencies may receive data in response to a valid court order, subpoena, or other lawful legal process.
• Professional advisors: Legal counsel, auditors, and accountants may access limited personal data under strict confidentiality obligations in connection with their professional services to phjewel.

All third parties with whom phjewel shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are bound by data processing agreements that restrict their use of your data to the specified purpose only.

phjewel retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine AML and tax record-keeping requirements.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the matter is subject to ongoing legal proceedings.
• Marketing preferences and consent records: Retained for the duration of your account and for one (1) year after account closure as evidence of consent.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it may be anonymized and retained for analytical purposes.

When personal data is no longer required, phjewel will securely delete or anonymize it in accordance with our data disposal procedures. Anonymized data that can no longer be linked to an individual may be retained indefinitely for statistical and analytical purposes.

phjewel implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• TLS 1.3 encryption for all data in transit between your device and phjewel servers.
• AES-256 encryption for sensitive personal data stored in our databases.
• Role-based access controls ensuring that only authorized personnel can access personal data, and only to the extent required for their specific job function.
• Multi-factor authentication for all phjewel staff accessing internal systems that contain personal data.
• Regular penetration testing and security audits conducted by independent third-party security firms.
• Intrusion detection and prevention systems monitoring for unauthorized access attempts in real time.
• Secure data backup procedures with encrypted off-site backups to ensure data availability and integrity.

While phjewel takes all reasonable steps to protect your data, no internet transmission or electronic storage system is 100% secure. You are responsible for keeping your account login credentials confidential and for notifying phjewel immediately if you suspect unauthorized access to your account.

phjewel uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyze usage patterns, and support security functions. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, preferred game categories, and display options to personalize your experience.
• Analytics cookies: Collect anonymized data about how players use the platform — which pages are visited most, where players drop off, and how features are used. This data helps us improve the platform.
• Security cookies: Used to detect and prevent fraudulent activity, identify suspicious login patterns, and protect your account from unauthorized access.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phjewel platform. Strictly necessary cookies cannot be disabled as they are required for the platform to operate.

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phjewel. You may exercise any of these rights by contacting our Data Protection Officer using the details in Section 15:

phjewel will respond to all data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case we will notify you of the extension and the reason for it. Please note that certain rights may be limited where phjewel has a legal obligation to retain or process your data — for example, AML record-keeping requirements may prevent immediate erasure of financial transaction records.

phjewel strictly prohibits access to and use of its platform by individuals under the age of 21 years, as required by applicable Philippine gaming regulations. phjewel does not knowingly collect personal data from individuals under 21.

If phjewel discovers or has reasonable grounds to believe that personal data has been collected from a person under 21, we will immediately:

• Suspend the relevant account pending investigation.
• Delete all personal data associated with the underage individual from our systems, subject to any mandatory legal retention obligations.
• Cancel any pending withdrawals and forfeit any balance in accordance with applicable regulations.
• Report the matter to the relevant regulatory authority where required by law.

phjewel primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where a game software provider or KYC technology partner operates infrastructure in another jurisdiction.

Where such international transfers occur, phjewel ensures that appropriate safeguards are in place to protect your personal data, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission.
• Implementing contractual clauses in data processing agreements with international service providers that require them to protect your data to the same standard as required under Philippine law.
• Conducting due diligence on international service providers to verify their data security practices before engaging their services.

phjewel will not transfer your personal data to any jurisdiction where doing so would violate applicable Philippine data protection law or expose your data to a materially lower standard of protection than that provided under the Data Privacy Act of 2012.

phjewel reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify you by:

• Sending a notification to your registered email address at least fourteen (14) days before the changes take effect.
• Displaying a prominent notice on the phjewel platform when you next log in.
• Updating the "Last updated" date at the top of this Privacy Policy page.

Your continued use of the phjewel platform after the effective date of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with the changes, you must stop using the platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how phjewel protects your personal data. The most current version of this policy will always be available at https://phjewel.app/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or phjewel's handling of your personal data, please contact our Data Protection Officer:

If you are not satisfied with phjewel's response to your privacy concern, or if you believe that phjewel has violated your rights under the Philippine Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and enforcing the Data Privacy Act.

You may reach the National Privacy Commission through their official government website or by visiting their offices in Manila. phjewel fully cooperates with NPC investigations and takes all regulatory inquiries seriously.