playojo Privacy Policy

1Introduction

This Privacy Policy ("Policy") is published by playojo ("playojo," "we," "us," or "our"), the operator of the online gaming platform at playojo.bio (the "Platform"), in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal data collected from or about Filipino players, website visitors, and any other individuals who interact with the playojo Platform, whether through our website, mobile browser, or any other supported access channel. It describes the categories of personal data we process, the purposes for which we process it, the parties with whom we may share it, the measures we take to keep it secure, and the rights available to you as a data subject under Philippine law.

By registering a playojo account, logging in to the Platform, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your personal data as described in this Policy, please do not use the playojo Platform. For questions, concerns, or the exercise of your data subject rights, please contact our Data Protection Officer at the details provided in Section 14.

2Data We Collect

playojo collects only the personal data that is necessary to provide you with a secure, compliant, and enjoyable gaming experience on the Platform. The categories of personal data we collect are described below.

2.1 Registration and Identity Data

• Full legal name as it appears on your Philippine government-issued identification
• Date of birth (used to verify that you meet the 21-year minimum age requirement)
• Gender (optional, for personalisation purposes)
• Residential address within the Philippines (city, province, barangay, ZIP code)
• Email address
• Mobile phone number registered in the Philippines
• Username and encrypted password

2.2 KYC and Verification Data

• Scanned or photographed copies of valid Philippine government-issued photo ID (e.g., PhilSys National ID, SSS, GSIS, Driver's License, Passport, or PRC ID)
• Proof of address documents (e.g., utility bill, bank statement, barangay certificate)
• Proof of payment method ownership (e.g., GCash or Maya account screenshot showing your registered name)
• Source of funds declaration where applicable under PAGCOR Anti-Money Laundering thresholds
• Selfie or live photograph for identity liveness checks where required

2.3 Financial and Transaction Data

• Deposit amounts, timestamps, and payment method references
• Withdrawal requests, processed amounts, and destination payment method identifiers
• Account balance history and bonus credit records
• Transaction reference numbers from GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and other supported Philippine payment channels

2.4 Gaming Activity Data

• Game session history, including games played, stake amounts, outcomes, and duration
• Sports betting selections, odds accepted, and settlement results
• Bonus and promotion participation records
• Responsible gaming tool usage (deposit limits set, session time reminders, cooling-off periods, self-exclusion requests)

2.5 Technical and Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Session logs including login timestamps, logout events, and session duration
• Cookie identifiers and similar tracking data (see Section 7)

2.6 Communications Data

• Content of messages sent to playojo customer support via email or live chat
• Promotional communication preferences (opt-in and opt-out records)
• Survey or feedback responses submitted voluntarily

3How We Collect Your Data

playojo collects your personal data through the following channels and methods:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, respond to surveys, or update your account profile settings.
• Automatically through the Platform — when you browse or interact with the website, your device and browser transmit technical data including your IP address, device identifiers, and session activity. This data is captured automatically through our servers and logging systems.
• Through cookies and similar technologies — playojo uses cookies, local storage, and related tracking technologies to remember your preferences, maintain your login session, analyse site performance, and detect fraud. See Section 7 for full details.
• From payment processors — when you deposit or withdraw using GCash, Maya, or other Philippine payment methods, the payment provider may share transaction confirmation data and your registered name with playojo for the purpose of reconciling your account and complying with AML obligations.
• From identity verification services — playojo may use third-party KYC and identity verification providers to assist in validating the documents you submit. These providers process your data under strict confidentiality agreements and are bound by Philippine data protection obligations.
• From publicly available sources and regulatory bodies — in certain circumstances required by PAGCOR regulations or Philippine AML law, playojo may verify or supplement your information using publicly available records or information provided by regulatory authorities.

4How We Use Your Personal Data

playojo uses your personal data for the following purposes. We process only the data that is adequate, relevant, and limited to what is necessary for each stated purpose.

playojo does not use your personal data to make fully automated decisions that produce legal effects or similarly significant effects on you without human review, except where expressly permitted by applicable Philippine law and where you have been informed in advance.

5Legal Bases for Processing

Under the Data Privacy Act of 2012 and its Implementing Rules, playojo relies on the following legal bases when processing your personal data:

• Performance of a contract — The majority of data processing described in this Policy is necessary to fulfil playojo's contractual obligations to you under our Terms and Conditions, including providing gaming services, processing payments, and managing your account.
• Compliance with a legal obligation — playojo is required by PAGCOR regulations, the Anti-Money Laundering Act (AMLA) of the Philippines, and the Data Privacy Act itself to process certain categories of personal data, including KYC documents, transaction records, and gaming activity logs, for specific retention periods.
• Legitimate interests — playojo processes certain technical and device data and gaming behaviour data for fraud detection, platform security, and responsible gaming monitoring purposes, which represent legitimate interests that are balanced against your privacy rights.
• Consent — Where playojo processes your personal data for optional purposes such as sending promotional communications, we rely on your freely given, specific, and informed consent. You may withdraw consent for marketing communications at any time through your account settings or by contacting support.

6Data Sharing and Disclosure

playojo does not sell, rent, or trade your personal data to third-party advertisers or data brokers. We may share your personal data only in the following circumstances and only with parties who are contractually obligated to handle it in accordance with applicable Philippine data protection law:

6.1 Regulatory and Law Enforcement Bodies

playojo is legally required to share certain player data with PAGCOR as part of its licensing obligations, and with the Anti-Money Laundering Council (AMLC) of the Philippines where transaction activity triggers mandatory reporting thresholds under the AMLA. playojo will also disclose personal data in response to a valid court order, subpoena, or lawful request from Philippine law enforcement authorities.

6.2 Payment Service Providers

In order to process your deposits and withdrawals, playojo shares the minimum necessary transaction and identity data with the relevant Philippine payment service providers, including GCash, Maya, BPI, BDO, Metrobank, and others as needed. These providers are independent data controllers for their own services and are subject to their own privacy policies and the Data Privacy Act.

6.3 KYC and Identity Verification Providers

playojo may engage accredited third-party identity verification service providers to assist with KYC document review and liveness verification. These providers process your submitted documents and biometric data solely for the purpose of identity verification on playojo's behalf and under data processing agreements that impose equivalent data protection obligations.

6.4 Game Content Providers

Certain games available on the playojo Platform are provided by third-party game studios and aggregators. These providers may receive anonymised or pseudonymised session data necessary to render and settle game rounds. They do not receive your full name, payment data, or KYC documents.

6.5 IT and Infrastructure Providers

playojo uses cloud hosting and managed security service providers to operate the Platform. These providers may process your personal data as data processors acting under playojo's instruction and are bound by confidentiality obligations and data processing agreements aligned with the Data Privacy Act.

7Cookies and Tracking Technologies

The playojo Platform uses cookies and similar client-side technologies to deliver a secure, personalised, and high-performance gaming experience. The following types of cookies are used:

playojo does not use third-party advertising or behavioural tracking cookies. You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the Platform from functioning correctly, including your ability to log in and play.

8Data Retention

playojo retains your personal data only for as long as is necessary to fulfil the purposes described in this Policy or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in accordance with PAGCOR record-keeping requirements and AMLA obligations for covered persons.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLA reporting and record-keeping requirements.
• Gaming activity logs: Retained for a minimum of three (3) years from the date of each session, to support dispute resolution, responsible gaming monitoring, and regulatory audits.
• Communications and support records: Retained for two (2) years from the date of the last communication, or longer if the communication relates to an active dispute or regulatory matter.
• Technical and device data: Retained for up to thirteen (13) months for analytics purposes and up to six (6) months for security and fraud detection purposes.
• Marketing consent records: Retained for the duration of your account plus two (2) years post-closure to demonstrate consent compliance.

When personal data is no longer required for any legal, regulatory, or business purpose, playojo will securely delete or anonymise it in accordance with our internal data destruction procedures.

9Data Security

playojo implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• Encryption in transit: All data transmitted between your browser or device and the playojo Platform is encrypted using TLS 1.2 or higher (256-bit SSL encryption).
• Encryption at rest: Sensitive personal data stored in playojo's databases, including KYC documents and financial records, is encrypted at the storage layer.
• Password hashing: Account passwords are hashed using an industry-standard one-way hashing algorithm. playojo staff cannot view your plaintext password at any point.
• Access controls: Access to systems containing personal data is restricted on a strict need-to-know basis. All staff with access to personal data undergo data privacy training aligned with NPC guidelines.
• Intrusion detection and monitoring: playojo's infrastructure is monitored continuously for anomalous activity, attempted intrusions, and DDoS attacks.
• Incident response: playojo maintains a documented personal data breach response procedure. In the event of a breach that is likely to result in a risk to your rights and freedoms, playojo will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects within a reasonable period in accordance with NPC breach notification guidelines.

10Your Rights as a Data Subject

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by playojo. These rights may be exercised by submitting a written request to our Data Protection Officer at [email protected]:

• Right to be informed: You have the right to be informed of how your personal data is collected, processed, and used — which is the primary purpose of this Privacy Policy.
• Right to access: You may request a copy of the personal data playojo holds about you, along with information about the purposes for which it is processed and the recipients with whom it has been shared.
• Right to rectification: If any personal data playojo holds about you is inaccurate or incomplete, you have the right to request correction. Some corrections may require re-submission of KYC documents for verification.
• Right to erasure or blocking: You may request the deletion or blocking of personal data that is no longer necessary, was collected or processed unlawfully, or where you have validly withdrawn consent. This right is subject to playojo's legal retention obligations under PAGCOR and AMLA requirements.
• Right to data portability: Where technically feasible, you may request that certain personal data you provided to playojo be provided to you in a structured, commonly used, and machine-readable format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests, subject to the specific circumstances of your request.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
• Right to lodge a complaint: If you believe playojo has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through official NPC channels.

playojo will respond to data subject rights requests within fifteen (15) business days of receipt. Where a request requires additional time due to its complexity or volume, we will notify you of the extended timeline within the initial 15-day window.

11Children's Privacy and the 21+ Requirement

The playojo Platform is strictly restricted to persons who are twenty-one (21) years of age or older, in accordance with applicable Philippine gaming laws and PAGCOR regulations. playojo does not knowingly collect personal data from anyone under the age of 21.

All persons registering a playojo account are required to self-declare their date of birth at registration and to submit valid Philippine government-issued identification confirming their age as part of the KYC verification process. Where playojo identifies or reasonably suspects that an account holder is under 21 years of age, the account will be immediately suspended, all activity will be reviewed, any winnings will be forfeited, and deposits will be returned to the verified payment source where possible.

If a parent or guardian believes that a minor has registered or attempted to register a playojo account, they are encouraged to contact our support team immediately at [email protected]. playojo takes underage access extremely seriously and will take prompt remedial action upon receiving such a report.

12Cross-Border Data Transfers

playojo primarily processes and stores personal data within data centres located in the Asia-Pacific region. In certain circumstances, personal data may be transferred to or accessed by system components or service providers located outside the Philippines — for example, where a game content provider or cloud infrastructure partner operates servers in another jurisdiction.

Where cross-border transfers occur, playojo ensures that appropriate safeguards are in place in compliance with Section 21 of the Data Privacy Act and relevant NPC issuances. These safeguards include contractual data transfer agreements that impose data protection obligations on the recipient equivalent to those required under Philippine law. playojo will not transfer your personal data to a jurisdiction that does not provide an adequate level of protection without first obtaining your consent or implementing the contractual safeguards described above.

13Updates to This Privacy Policy

playojo reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR requirements, or NPC guidance. When material changes are made, playojo will notify registered players by email and by displaying a prominent notice on the Platform, with a minimum of seven (7) days' notice before the updated Policy takes effect — except where immediate changes are required to comply with a legal or regulatory obligation.

The date at the top of this Policy ("Effective Date") indicates when the current version came into force. Your continued use of the playojo Platform after the effective date of any updated Policy constitutes your acknowledgement of the changes. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Previous versions of this Privacy Policy are available upon request by contacting our Data Protection Officer.

14Contact Us and Our Data Protection Officer

playojo has designated a Data Protection Officer (DPO) in accordance with Section 21 of the Data Privacy Act of 2012 and NPC Circular No. 16-01. If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or wish to lodge a privacy concern or complaint, please contact our DPO:

This Privacy Policy was last reviewed and updated effective January 1, 2026. playojo is committed to maintaining your trust by handling your personal data transparently, securely, and in full compliance with Philippine law.