wjph Privacy Policy

1 Introduction

wjph ("wjph", "we", "us", "the Company") is committed to protecting the privacy and personal data of all players, visitors, and users of the wjph online gaming platform accessible at https://wjph.app and all associated subdomains and mobile applications (collectively, the "Platform").

This Privacy Policy explains how wjph collects, uses, stores, shares, and protects personal data in the course of providing online casino, sports betting, and related gaming services to players in the Philippines. It also sets out your rights as a data subject under Philippine law and how you may exercise those rights.

This Privacy Policy should be read together with the wjph Terms & Conditions, available at wjph.app/terms-conditions, which govern your use of the Platform. In the event of any conflict between this Privacy Policy and the Terms & Conditions on matters relating to data privacy, this Privacy Policy shall prevail.

2 Data Controller

wjph is the personal information controller in respect of all personal data collected through the Platform. For the purposes of the Data Privacy Act of 2012 and the implementing rules issued by the National Privacy Commission (NPC) of the Philippines, wjph is responsible for determining the purposes and means of processing your personal data.

wjph operates under a licence issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to both PAGCOR's operational requirements and the NPC's data privacy regulations. Our data processing activities are registered with the National Privacy Commission as required by applicable regulations.

3 Personal Data We Collect

wjph collects the following categories of personal data in the course of providing the Platform and its services:

3.1 Registration & Identity Data

• Full legal name as it appears on your government-issued identification
• Date of birth (to verify minimum age eligibility of 21 years)
• Mobile number and email address
• Username and encrypted password
• Residential address (province, city/municipality, barangay)

3.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PSA National ID, DFA Passport, LTO Driver's License, UMID, PhilHealth ID, GSIS eCard, Voter's ID)
• Proof of address documentation (e.g., utility bills, bank statements)
• Selfie or live photograph for identity confirmation where required

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, timestamps, and payment method identifiers
• GCash or Maya wallet reference numbers (we do not store full wallet credentials)
• Bank account name and last digits where relevant to withdrawal processing
• Running account balance history

3.4 Gaming & Behavioural Data

• Game session records, including games played, bet amounts, outcomes, and session durations
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)
• Bonus and promotion participation history
• Customer support interaction records

3.5 Technical & Device Data

• IP address and approximate geolocation (used to verify Philippine residency requirement)
• Device type, operating system, and browser version
• Session logs, login timestamps, and access records
• Cookie identifiers and similar tracking data (see Section 9)

4 How We Collect Your Data

wjph collects personal data through the following methods:

• Directly from you — when you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, participate in promotions, or update your account profile.
• Automatically — through cookies, session tracking, server logs, and analytics tools when you access and use the Platform. This includes data about your device, browser, IP address, and in-session behaviour.
• From third parties — from payment processors (such as GCash, Maya, BPI, BDO, Metrobank) in connection with deposit and withdrawal transactions; from identity verification service providers used to assist with KYC processing; and from PAGCOR or other regulatory bodies where required by law.

5 Purpose & Legal Basis for Processing

wjph processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

1. Account registration and authentication — necessary for the performance of the contract between you and wjph.
2. Identity verification and KYC compliance — required by our PAGCOR licence and the Anti-Money Laundering Act (AMLA), constituting a legal obligation.
3. Processing deposits and withdrawals — necessary for the performance of the contract and for compliance with financial regulations.
4. Delivery of gaming services — including game functionality, live dealer services, sports betting, and bonus systems — necessary for contract performance.
5. Fraud detection and platform security — based on wjph's legitimate interest in maintaining a secure, fair, and compliant gaming environment.
6. Responsible gaming monitoring — required under PAGCOR's responsible gaming framework and based on legitimate interest in protecting player welfare.
7. Customer support — necessary for contract performance and legitimate operational interest.
8. Regulatory reporting to PAGCOR and AMLC — mandatory legal obligations under our operating licence and AMLA compliance requirements.
9. Platform improvement and analytics — based on wjph's legitimate interest in improving platform performance and player experience.
10. Marketing and promotional communications — with your consent, where you have opted in to receive such communications from wjph.

6 Sharing Your Personal Data

wjph does not sell, rent, or trade your personal data. We may share your personal data with third parties only in the following limited circumstances:

• Payment processors and e-wallet providers — including GCash, Maya, BPI, BDO, Metrobank, and other providers listed in our cashier, for the purpose of processing your deposits and withdrawal requests.
• KYC and identity verification providers — third-party services engaged by wjph to assist in verifying the identity of account holders as required by our PAGCOR licence.
• PAGCOR and other regulatory authorities — wjph is required to provide account, transaction, and gaming data to PAGCOR and other competent regulatory bodies upon lawful request or as part of routine licensing compliance reporting.
• Anti-Money Laundering Council (AMLC) — wjph is required under the Anti-Money Laundering Act to report covered transactions and suspicious transactions to the AMLC. Such reporting may include personal and financial data relating to the relevant account holder.
• Law enforcement and courts — where wjph is required by a court order, subpoena, or lawful request from a Philippine law enforcement agency to disclose personal data.
• IT and platform service providers — cloud hosting, cybersecurity, and infrastructure providers engaged by wjph who process data strictly on our behalf and under binding data processing agreements that prohibit independent use of the data.
• Game content providers — third-party game studios whose products are integrated into the wjph platform may receive limited session and bet data required for game functionality and audit purposes.

All third-party data processors engaged by wjph are required to implement appropriate technical and organizational security measures and to process personal data only for the specified purposes and in accordance with applicable Philippine data privacy law.

7 Data Retention

wjph retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and registration data — retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements.
• KYC documents — retained for a minimum of five (5) years following the completion of the KYC process or account closure, as required under AMLA regulations.
• Transaction and financial records — retained for a minimum of five (5) years following each transaction, as required by AMLA and PAGCOR financial record-keeping obligations.
• Gaming session records — retained for a minimum of three (3) years for dispute resolution, responsible gaming monitoring, and regulatory audit purposes.
• Customer support records — retained for three (3) years following the resolution of each support interaction.
• Marketing consent records — retained for the duration of your account and for a period sufficient to demonstrate the lawfulness of marketing activities conducted.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents re-identification, unless a longer retention period is required by applicable law or regulatory obligation.

8 Security Measures

wjph implements a comprehensive set of technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• TLS (Transport Layer Security) encryption for all data in transit between your device and wjph servers.
• AES-256 encryption for sensitive data at rest, including stored passwords (which are hashed using industry-standard algorithms and never stored in plain text) and payment-related identifiers.
• Multi-factor authentication options for player accounts, including SMS OTP verification.
• Role-based access controls ensuring that wjph staff can only access personal data relevant to their specific job function.
• Regular penetration testing and vulnerability assessments conducted by independent cybersecurity specialists.
• 24/7 monitoring of platform infrastructure for anomalous activity, intrusion attempts, and data security incidents.
• Mandatory data privacy and security training for all wjph personnel with access to personal data.

8.1 Data Breach Notification

In the event of a personal data breach that is likely to result in serious harm to affected individuals, wjph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, as required under the Data Privacy Act. Affected data subjects will be notified without undue delay where the breach is likely to give rise to a high risk to their rights and freedoms.

9 Cookies & Tracking Technologies

wjph uses cookies and similar technologies (including local storage objects and session tokens) to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies — required for core platform functions such as account authentication, session management, and security. These cannot be disabled without significantly impairing platform functionality.
• Functional cookies — used to remember your language preference, display settings, and responsible gaming tool configurations between sessions.
• Analytics cookies — used to collect aggregated, anonymized data about how players navigate the Platform, which pages are most visited, and how long sessions last. This data is used exclusively for internal platform improvement purposes.
• Responsible gaming cookies — used to track session duration and trigger session time reminders where you have enabled this feature in your account settings.

wjph does not use cookies for third-party advertising or cross-site tracking. You may manage or disable non-essential cookies through your browser settings; however, disabling strictly necessary cookies will prevent you from logging in and using the Platform.

10 Minors & Age Restriction

The wjph platform is strictly intended for adults who are at least 21 years of age, in accordance with Philippine regulations governing casino-style gambling activities. wjph does not knowingly collect personal data from individuals under the age of 21.

During registration, all applicants are required to confirm that they are at least 21 years old. wjph's KYC process includes verification of date of birth against government-issued identification documents. Any account found to have been registered by a person under the age of 21 will be immediately suspended, all balances withheld pending investigation, and the matter reported to PAGCOR.

If you believe that a person under 21 years of age has registered an account with wjph, please contact our support team immediately so that appropriate action can be taken.

11 Your Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by wjph:

To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 14. wjph will respond to all valid data subject requests within thirty (30) days of receipt. We may need to verify your identity before processing your request.

12 Cross-Border Data Transfers

wjph's primary data processing operations are located within the Philippines. In certain limited cases, personal data may be transferred to or accessed by service providers located outside the Philippines — for example, cloud infrastructure providers or game studio partners with servers in other jurisdictions.

Any cross-border transfer of personal data by wjph is subject to the following safeguards in accordance with Section 21 of the Data Privacy Act:

• The recipient country is recognized as providing an adequate level of data protection; or
• wjph has entered into binding contractual obligations with the recipient that require them to process personal data to a standard equivalent to that required under Philippine law; or
• The transfer is necessary for the performance of a contract with you or for the implementation of pre-contractual measures taken at your request.

wjph will not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent, except where required by applicable law.

13 Changes to This Privacy Policy

wjph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance from the NPC or PAGCOR, or changes to our data processing practices. The most current version of this Privacy Policy will always be accessible at wjph.app/privacy-policy.

Where changes are material — that is, where they significantly affect how we collect or use your personal data or your rights as a data subject — wjph will provide notice via the Platform or by email to your registered address at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how wjph protects your data.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by wjph, you may contact us through the following channels:

• Data Protection Officer (DPO): wjph has appointed a dedicated Data Protection Officer who oversees compliance with the Data Privacy Act and serves as the primary point of contact for data subject requests and privacy inquiries.
• Email: [email protected] — mark your subject line with "Privacy Request" or "DPO Inquiry" to ensure it is routed to the correct team. We aim to respond to all privacy-related emails within five (5) business days.
• 24/7 Live Chat: Available directly on the wjph Platform for general privacy queries and immediate account-related data requests.

If you are not satisfied with wjph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines: