hpjoy Privacy Policy
This Privacy Policy explains how hpjoy collects, uses, stores, discloses, and protects the personal data of players and visitors on our PAGCOR-regulated platform. We are committed to handling your information responsibly and in compliance with applicable Philippine data protection law.
How hpjoy Handles Your Data
Six core data protection principles guide every decision hpjoy makes about your personal information. These principles are not optional — they are built into how the platform operates.
Transparency
hpjoy is clear and open about what data we collect, why we collect it, and how it is used. This Privacy Policy is written in plain language so every Filipino player can understand it, not just lawyers.
Purpose Limitation
We only collect personal data for specific, legitimate purposes directly related to operating the hpjoy platform — such as account registration, payment processing, KYC verification, and customer support. We do not repurpose your data without your consent.
Data Minimisation
hpjoy collects only the minimum amount of personal information necessary to deliver our services safely and in compliance with PAGCOR regulations. We do not ask for data we do not need.
Accuracy
We take reasonable steps to ensure the personal data we hold about you is accurate, up to date, and complete. You can review and update your profile information at any time through your hpjoy Account settings.
Security
hpjoy implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction — including TLS encryption and secure data storage practices.
Storage Limitation
Personal data is retained only for as long as it is necessary for the purpose it was collected, or as required by applicable Philippine law and PAGCOR regulatory obligations. Data no longer needed is securely deleted or anonymised.
NOTICE: By registering an Account on hpjoy or by continuing to use the hpjoy platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must discontinue use of the platform immediately.
1. Data Controller
For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, hpjoy is the data controller responsible for the personal data collected through the hpjoy platform at hpjoy.net. As a PAGCOR-regulated online gaming operator serving players across the Philippines — including Metro Manila, Cebu, Davao, and the rest of the archipelago — hpjoy is committed to handling your personal data in full compliance with RA 10173 and applicable PAGCOR data governance requirements.
Questions or concerns regarding this Privacy Policy or the way hpjoy processes personal data should be directed to our Data Protection Officer (DPO). Contact details are provided in Section 14 of this Policy.
2. Data We Collect
hpjoy collects the following categories of personal data, depending on how you interact with the platform:
2.1 Registration and Identity Data
- Full legal name as it appears on your government-issued Philippine ID
- Date of birth (to verify the minimum age requirement of 21 years)
- Residential address (city, province, postal code)
- Email address and mobile phone number
- Username and encrypted password credentials
2.2 Identity Verification (KYC) Data
- Copies of government-issued photo identification (e.g., Philippine passport, driver's licence, SSS ID, UMID, PhilSys national ID)
- Proof of address documentation where required
- Selfie or live photograph for identity matching purposes
- Source of funds declarations where required by PAGCOR AML obligations
2.3 Financial and Transaction Data
- Deposit and withdrawal transaction records, including amounts and timestamps
- GCash wallet reference numbers, PayMaya account details, or bank account details (BDO, BPI, Metrobank) used for transactions
- Betting history: bet amounts, odds accepted, game types, and outcomes
- Account balance and bonus credit history
2.4 Technical and Usage Data
- IP address and approximate geographic location at time of login
- Device type, operating system, and browser information
- Session duration and page interaction logs
- Clickstream and navigation data within the platform
- Error logs and crash reports
2.5 Communications Data
- Records of live chat conversations and email correspondence with hpjoy customer support
- Feedback, survey responses, and complaint records
- Preferences for marketing communications
3. How We Collect Your Data
hpjoy collects personal data through the following means:
| Collection Method | Examples |
|---|---|
| Direct input by you | Account registration form, KYC document uploads, live chat messages, support emails |
| Automated collection | Cookies, session tracking, server logs, device fingerprinting |
| Payment processors | Transaction reference data from GCash, PayMaya, BDO, BPI, and Metrobank integrations |
| Third-party KYC providers | Identity verification results from PAGCOR-compliant KYC service providers |
| Regulatory bodies | Information shared by PAGCOR or law enforcement under applicable Philippine law |
4. How We Use Your Data
hpjoy uses the personal data we collect for the following purposes:
4.1 Account Management and Service Delivery
To create and maintain your hpjoy Account; to process deposits and withdrawals via your nominated Philippine payment method; to verify your identity in compliance with PAGCOR KYC requirements; to deliver the sports betting, casino, bingo, and slot services you have requested; and to respond to your customer support enquiries.
4.2 Regulatory Compliance and Anti-Money Laundering
hpjoy is subject to PAGCOR anti-money laundering (AML) obligations and the requirements of Philippine AML legislation, including Republic Act No. 9160 as amended. We use your personal and financial data to screen transactions for suspicious activity, file mandatory reports where required, and cooperate with regulatory investigations. This processing is a legal obligation and cannot be opted out of while you hold an active hpjoy Account.
4.3 Responsible Gaming Monitoring
hpjoy uses betting history, session data, and account activity to identify players who may be exhibiting signs of problem gambling. This allows us to trigger responsible gaming interventions — such as proactive communications, deposit limit suggestions, or cooling-off period offers — in fulfilment of our PAGCOR responsible gaming obligations. Visit our Responsible Gaming page for more information.
4.4 Fraud Prevention and Security
To detect, investigate, and prevent fraudulent activity, bonus abuse, multi-account violations, and security incidents. This includes automated monitoring of login patterns, IP addresses, device fingerprints, and betting behaviour to identify anomalies that may indicate account compromise or platform abuse.
4.5 Platform Improvement
Aggregated and anonymised usage data is analysed to understand how players interact with the hpjoy platform, improve existing features, and develop new betting markets and game offerings. This analysis does not involve profiling individual players for commercial purposes without their consent.
4.6 Marketing Communications
Where you have given your consent, hpjoy may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new game launches, and special events. You may withdraw your consent to marketing communications at any time by updating your notification preferences in your Account settings or by contacting customer support.
5. Legal Basis for Processing
hpjoy processes your personal data on the following legal bases under Republic Act No. 10173 (Data Privacy Act of 2012):
- Contractual necessity: Processing required to create your Account, deliver gaming services, and process financial transactions.
- Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other Philippine statutory requirements.
- Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring — where these interests do not override your fundamental rights.
- Consent: Processing for direct marketing communications and certain non-essential cookies, where you have provided freely given, specific, and informed consent.
Your right to withdraw consent: Where hpjoy processes your data on the basis of consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
6. Sharing Your Personal Data
hpjoy does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:
6.1 Service Providers
hpjoy engages trusted third-party service providers who process personal data on our behalf under strict data processing agreements. These include payment gateway operators (GCash, PayMaya, BDO, BPI, Metrobank), KYC and identity verification providers, cloud hosting and infrastructure providers, customer support platform vendors, and cybersecurity and fraud detection services. All service providers are contractually obligated to process data only for the purposes specified by hpjoy and to maintain appropriate security standards.
6.2 Regulatory and Law Enforcement Authorities
hpjoy is required by Philippine law to share player data with PAGCOR and other competent authorities — including the Anti-Money Laundering Council (AMLC) and law enforcement agencies — when legally required to do so. Such disclosures are made strictly in accordance with applicable legal requirements and hpjoy's PAGCOR licensing conditions.
6.3 Business Transfers
In the event of a merger, acquisition, or sale of all or part of hpjoy's business assets, personal data held by hpjoy may be transferred to the acquiring entity as part of the transaction. Players will be notified of any such transfer and the privacy practices of the new controller via their registered email address.
6.4 With Your Consent
hpjoy will share your personal data with any other third party only where you have provided explicit consent to such sharing.
7. Data Retention
hpjoy retains personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by PAGCOR regulations and applicable Philippine law. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and identity data | Duration of account + 5 years after closure | PAGCOR AML obligations |
| KYC documents | 5 years from date of submission | RA 9160 AML requirements |
| Transaction records | 5 years from transaction date | PAGCOR and tax law |
| Betting history | 3 years from bet settlement | Legitimate interest / dispute resolution |
| Support communications | 2 years from last interaction | Legitimate interest |
| Technical/usage logs | 12 months on a rolling basis | Security and fraud prevention |
| Marketing preferences | Until consent withdrawn or account closed | Consent |
Upon expiry of the applicable retention period, personal data is securely deleted, destroyed, or anonymised in a manner that prevents re-identification.
8. Data Security
hpjoy implements a range of technical and organisational security measures designed to protect your personal data against unauthorised access, loss, misuse, alteration, or destruction. These measures include:
- Encryption in transit: All data transmitted between your browser or device and the hpjoy platform is encrypted using Transport Layer Security (TLS 1.2 or higher).
- Encryption at rest: Sensitive personal data stored in hpjoy databases is encrypted using industry-standard algorithms.
- Access controls: Access to personal data is restricted on a strictly need-to-know basis. hpjoy staff and contractors are granted only the minimum level of data access necessary to perform their roles.
- Password protection: Account passwords are stored as salted cryptographic hashes — hpjoy staff cannot view your password in plain text.
- Security monitoring: hpjoy maintains continuous monitoring of its infrastructure for anomalous activity, intrusion attempts, and security events.
- Incident response: hpjoy maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to your rights, hpjoy will notify affected players and the National Privacy Commission (NPC) as required by RA 10173.
Whilst hpjoy takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own Account credentials and for notifying hpjoy immediately if you suspect unauthorised access.
9. Cookies & Tracking Technologies
hpjoy uses cookies and similar tracking technologies on the hpjoy.net platform. Cookies are small text files placed on your device that help us deliver a functional, personalised, and secure browsing experience.
9.1 Types of Cookies We Use
- Strictly necessary cookies: Required for the platform to function. These include session management cookies that keep you logged in and security cookies that help prevent cross-site request forgery. These cannot be disabled.
- Functional cookies: Remember your preferences such as language settings, preferred deposit method, and display options to improve your experience across sessions.
- Analytics cookies: Collect anonymised data about how players navigate the platform to help hpjoy understand usage patterns and improve the service. Analytics data is aggregated and not linked to individual identities.
- Security and fraud detection cookies: Assist in identifying and preventing suspicious activity, duplicate account creation, and platform abuse.
9.2 Managing Cookies
You may configure your browser to refuse or delete cookies. However, disabling strictly necessary cookies will prevent you from logging in to your hpjoy Account and using the platform. Instructions for managing cookies are available through your browser's help documentation. hpjoy does not respond to Do Not Track (DNT) signals at this time.
10. Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by hpjoy. To exercise any of these rights, please contact the hpjoy Data Protection Officer using the contact details in Section 14.
Jump to Section
Data Protection at a Glance
Related Legal Pages
Privacy Questions?
Our Data Protection Officer is available to answer any questions about how hpjoy handles your personal data. Reach out via live chat or email.
Go to hpjoy LoginYour Data Subject Rights
The Philippine Data Privacy Act gives you meaningful control over your personal information. Here is what you are entitled to as an hpjoy player.
Right to Access
You may request a copy of the personal data hpjoy holds about you, along with information about how it is being processed. We will respond to verified access requests within fifteen (15) business days.
Right to Correction
If you believe any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic profile information directly in your Account settings.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for the purposes collected, subject to hpjoy's legal retention obligations under PAGCOR regulations and Philippine AML law.
Right to Object
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, though such objections may be overridden where compelling grounds exist.
Right to Data Portability
Where processing is carried out by automated means and based on your consent or a contract, you may request a copy of your personal data in a structured, machine-readable format for transfer to another service.
Right to Complain
If you believe hpjoy has not handled your personal data in accordance with RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
11. Minors
The hpjoy platform is strictly intended for use by individuals aged twenty-one (21) years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. hpjoy does not knowingly collect or process personal data from individuals under the age of 21. If you believe a minor has registered an Account on hpjoy or that we have inadvertently collected data from a minor, please notify us immediately at the contact details provided in Section 14. Upon verification, we will promptly close the Account and delete the associated personal data.
21+ ONLY: Creating an hpjoy Account while under the age of 21 is a violation of our Terms and Conditions and applicable PAGCOR regulations. Any personal data collected as a result of underage registration will be deleted upon discovery.
12. International Data Transfers
hpjoy primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to a third-party service provider located outside the Philippines — for example, a cloud infrastructure provider or a KYC verification platform — hpjoy will ensure that such transfers are carried out only to countries or organisations that provide an adequate level of data protection, or subject to appropriate contractual safeguards as required by the National Privacy Commission (NPC) of the Philippines.
All international data transfers made by hpjoy are subject to the requirements of RA 10173 and the NPC's applicable cross-border data transfer guidelines. Players may request information about the specific safeguards in place for international transfers by contacting our Data Protection Officer.
13. Changes to This Privacy Policy
hpjoy reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or the features and services offered on the platform. Where changes are material, hpjoy will notify registered players via their registered email address and/or by displaying a prominent notification on the platform prior to the changes taking effect.
The "Last Updated" date at the top of this Policy indicates when the most recent revisions were made. Your continued use of the hpjoy platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how hpjoy protects your personal data.
14. Contact Us / Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by hpjoy, please contact our Data Protection Officer through the following channels:
- Live Chat: Available 24/7 directly within the hpjoy platform — this is the fastest way to reach us for urgent data-related queries.
- Email: — please include "Privacy Policy" or "Data Request" in the subject line of your email so our team can route your query to the DPO promptly.
hpjoy aims to respond to all data subject requests within fifteen (15) business days of receipt. Where a request is complex or involves a large volume of data, we may extend this period by a further fifteen (15) business days, in which case we will notify you of the extension and the reasons for it.
If you are not satisfied with our response to a data-related concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.
This Privacy Policy was last reviewed and updated in January 2026. The version displayed on this page supersedes all previous versions of the hpjoy Privacy Policy.
Your Data Is Safe With hpjoy
hpjoy is built on transparency and trust. With PAGCOR regulation, RA 10173 compliance, and GCash-ready payouts, your information and your money are in good hands. Ready to place your bets?
21+ only. PAGCOR regulated. Play responsibly.