Privacy Policy – joan365

1. Introduction

This Privacy Policy ("Policy") describes how joan365 ("joan365", "we", "us", "our") collects, processes, stores, and protects the personal data of users ("Player", "User", "you") who access or use the joan365 online casino and sports betting platform at joan365.one and all associated interfaces (the "Platform").

Joan365 is committed to handling your personal data responsibly and in compliance with applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as the directives of the National Privacy Commission (NPC) of the Philippines.

By registering an account, logging in, or otherwise using the joan365 Platform, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, you must not use joan365.

2. Personal Data We Collect

Joan365 collects personal data through multiple channels — directly from you during registration and account use, automatically through your use of the Platform, and in some cases from third parties where permitted by law. The categories of data we collect include:

2.1 Registration Data

• Full legal name as it appears on a government-issued ID
• Date of birth (for age verification — 21+ requirement)
• Philippine mobile number
• Email address
• Username and encrypted password
• Preferred language and currency (PHP)

2.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, driver's licence, UMID, PhilSys National ID)
• Proof of address documentation
• Selfie or live photograph (where required for identity matching)
• Source of funds documentation (where required under AMLA obligations)

2.3 Financial Data

• GCash mobile number or Maya account identifier
• Bank account details (BPI, BDO, Metrobank, or other linked institution)
• Transaction records including deposit amounts, withdrawal requests, game wagers, and balances — all denominated in Philippine Peso (PHP)

2.4 Usage and Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser
• Session timestamps and duration
• Pages visited, games played, and betting history
• Cookies and similar tracking technologies (see Section 6)

2.5 Communications Data

• Contents of live chat conversations with joan365 support
• Email correspondence submitted to support channels
• Feedback, survey responses, and complaint records

3. How We Use Your Personal Data

Joan365 uses your personal data for the following purposes:

• Account creation and authentication: To register your account, verify your identity, and authenticate your login sessions including OTP delivery to your Philippine mobile number.
• Service delivery: To provide access to joan365 games, process bets, calculate outcomes, and manage your PHP wallet including GCash and bank deposits and withdrawals.
• Age and identity verification: To confirm that you meet the mandatory 21+ age requirement under PAGCOR regulations and to conduct KYC checks as required by Philippine law.
• Regulatory compliance: To comply with PAGCOR licensing conditions, Anti-Money Laundering Act (AMLA) obligations, and National Privacy Commission requirements, including mandatory reporting where required.
• Responsible gaming: To monitor for signs of problem gambling, enforce self-exclusion requests, apply account limits, and adhere to joan365's responsible gaming obligations.
• Fraud prevention and security: To detect, investigate, and prevent fraud, account compromise, money laundering, and other prohibited activities on the Platform.
• Customer support: To respond to your enquiries, complaints, and support requests submitted through live chat or email.
• Communications: To send transactional notifications (deposit confirmations, withdrawal updates, OTP codes), and where you have opted in, promotional communications about joan365 bonuses and offers.
• Platform improvement: To analyse aggregate usage patterns and improve the joan365 user experience, game lobby, and payment flows.

4. Legal Basis for Processing

Joan365 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Consent: Where you have expressly consented to a specific processing activity, such as receiving promotional communications.
• Contractual necessity: Where processing is necessary to perform our obligations under the joan365 Terms & Conditions, including account management, game provision, and financial transaction processing.
• Legal obligation: Where processing is required to comply with Philippine law, including PAGCOR licensing conditions, AMLA obligations, and NPC directives.
• Legitimate interests: Where processing is necessary for joan365's legitimate business interests, including fraud prevention, security monitoring, and Platform analytics, provided such interests are not overridden by your rights and freedoms.

5. Data Sharing and Disclosure

Joan365 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following limited circumstances:

5.1 Service Providers

Joan365 engages third-party service providers who process data on our behalf, including KYC and identity verification providers, payment processors (GCash, Maya, BPI, BDO, Metrobank, InstaPay), fraud detection services, cloud infrastructure providers, and customer support platform operators. All such providers are contractually required to process data solely on joan365's instructions and to maintain appropriate security standards.

5.2 Game Providers

Game providers (including JILI, Pragmatic Play, Playtech, PG Soft, and others) may receive technical data necessary to facilitate game sessions, such as session tokens and bet amounts. These providers do not receive your full personal profile.

5.3 Regulatory and Law Enforcement

Joan365 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or courts where required by applicable Philippine law or binding legal process.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, player data may be transferred to the successor entity, subject to the same privacy protections as described in this Policy.

6. Cookies and Tracking Technologies

Joan365 uses cookies and similar technologies (including local storage and session tokens) to operate the Platform, authenticate sessions, remember your preferences, and analyse usage patterns. The types of cookies used include:

• Strictly necessary cookies: Required for the Platform to function, including session management and login authentication. These cannot be disabled.
• Functional cookies: Remember your preferences such as language and game filters to improve your experience on joan365.
• Analytics cookies: Collect aggregate, anonymised data about how players use the Platform to help joan365 identify improvements.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect Platform functionality. Joan365 does not use advertising cookies or share data with ad networks.

7. Data Retention

Joan365 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law. Specifically:

• Account and KYC data is retained for a minimum of 5 years following account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
• Transaction records are retained for a minimum of 5 years.
• Communications data (support chat logs, emails) is retained for 2 years from the date of the communication.
• Technical and usage data is retained for 12 months and then aggregated or deleted.

At the end of the applicable retention period, personal data is securely deleted or anonymised.

8. Data Security

Joan365 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the joan365 Platform.
• Encrypted storage of passwords — joan365 never stores plaintext passwords.
• OTP-based two-factor authentication for account logins from new devices.
• Role-based access controls restricting employee access to personal data on a need-to-know basis.
• Regular security assessments and penetration testing of Platform infrastructure.
• Segregation of player funds from operational accounts.

While joan365 implements industry-standard security practices, no system is completely immune to security incidents. In the event of a data breach affecting your rights and freedoms, joan365 will notify the National Privacy Commission and affected players within 72 hours of becoming aware of the breach, as required under the Data Privacy Act of 2012.

9. Your Data Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by joan365:

• Right to be informed: The right to know what personal data joan365 holds about you and how it is processed — which this Policy addresses.
• Right of access: The right to request a copy of the personal data joan365 holds about you.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly through your joan365 account settings.
• Right to erasure: The right to request deletion of your personal data, subject to joan365's legal retention obligations under AMLA and PAGCOR regulations, which may override erasure requests.
• Right to object: The right to object to certain processing activities, including direct marketing communications. You may unsubscribe from promotional emails at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact joan365 support. We will respond to all data rights requests within 30 days. Verification of your identity will be required before any data is disclosed or deleted.

10. Children and Minors

Joan365 does not knowingly collect personal data from individuals under 21 years of age. The Platform is strictly restricted to players aged 21 and above in accordance with PAGCOR regulations. If joan365 discovers that personal data has been collected from a person under the age of 21, that data will be deleted immediately and the associated account will be permanently closed. If you believe that a minor has registered on joan365, please contact our support team immediately.

11. Cross-Border Data Transfers

Some of joan365's service providers and game partners (such as game studios and cloud infrastructure providers) may be located outside the Philippines. Where personal data is transferred internationally, joan365 ensures that appropriate safeguards are in place, including contractual clauses requiring the recipient to maintain data protection standards equivalent to those under Philippine law. Joan365 does not transfer personal data to jurisdictions that lack adequate data protection frameworks without implementing appropriate protective measures.

12. Third-Party Links

The joan365 Platform does not contain links to external third-party websites. All navigation within joan365 remains on the Platform. This Policy does not govern the data practices of any third-party services you access independently outside of joan365.

13. Changes to This Policy

Joan365 may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or regulatory requirements. Where material changes are made, joan365 will notify registered players via email or a prominent notice on the Platform before the changes take effect. The "Effective Date" at the top of this document indicates when the current version came into force. Your continued use of joan365 following notification of changes constitutes acceptance of the revised Policy.

14. Contact & Data Protection Enquiries

If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact the joan365 data protection team. Our support team is available 24/7 via live chat on the Platform.

Written enquiries regarding data privacy may be directed to: [email protected] (plain text — not a clickable link). Please include "Privacy Enquiry" in your subject line. We aim to respond to all data privacy correspondence within 5 business days.

Complaints that are not resolved to your satisfaction may be escalated to the National Privacy Commission of the Philippines (NPC).