phjoy Privacy Policy

phjoy ("we", "us", "our") is committed to protecting the personal data of all users who register and play on phjoy.vu. This Privacy Policy describes how we collect, process, store, share, and protect personal information in connection with your use of the phjoy website, mobile platform, games, sports betting services, and payment facilities. It applies equally to all registered accounts, guest visitors, and any person whose data is processed by phjoy.

This Privacy Policy should be read alongside phjoy's Terms & Conditions and Responsible Gaming policy, both of which are available on this site. If you have questions about how we handle your data, please contact us at [email protected]. That address is displayed as plain text only and is not a clickable link.

phjoy collects personal data through several touchpoints — primarily during account registration, during active gameplay and betting, and through your ongoing use of the platform. The categories of personal data we collect are set out below.

phjoy processes your personal data only for specific, lawful purposes. We do not use your data for purposes incompatible with those originally disclosed. The primary purposes for which we process your data are:

• Account creation and maintenance — creating your player account, verifying your identity, and managing your account settings and preferences.
• Platform operation — enabling gameplay, processing bets, managing real-money deposits and withdrawals via bKash, Nagad, Rocket, and bank transfer, and resolving disputes.
• Responsible gaming compliance — monitoring play patterns to detect signs of problem gambling, enforcing deposit limits and self-exclusion requests, and conducting age verification checks.
• Security and fraud prevention — detecting and preventing fraud, money laundering, multi-account abuse, and other prohibited conduct as defined in the Terms & Conditions.
• Customer support — responding to queries, processing complaints, and communicating account-related decisions to you via your registered mobile number.
• Marketing and promotions — where you have not opted out, sending you relevant bonus offers, seasonal promotions (such as BPL and Eid offers), and platform updates via your registered mobile number.

phjoy will never sell your personal data to third parties for their own marketing purposes. Any sharing of your data with third parties is limited to what is described in Section 4 of this policy.

phjoy processes personal data on the following legal bases. Where more than one basis applies to a particular processing activity, we will rely on the most appropriate basis for that activity.

• Contractual necessity — processing required to provide the services you have registered for, including account management, payment processing, and gameplay.
• Legal obligation — processing required to comply with applicable laws and regulations, including anti-money-laundering obligations, age verification requirements, and reporting duties.
• Legitimate interests — processing carried out for fraud prevention, platform security, responsible gaming monitoring, and improving the phjoy user experience, where such interests are not overridden by your rights.
• Consent — where we rely on consent as the basis for processing (for example, for optional marketing communications), you may withdraw your consent at any time by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

phjoy does not sell, rent, or trade your personal data. We share your data with third parties only in the following limited circumstances, and only to the extent necessary for the specified purpose:

• Payment processors — phjoy shares transaction data with bKash, Nagad, Rocket, Upay, and banking partners solely to process deposits and withdrawals. These processors handle your payment data under their own privacy frameworks and applicable financial regulations.
• Game content providers — game session data may be shared with providers including Pragmatic Play, Evolution Gaming, PG Soft, and Spribe to the extent required to operate and verify game outcomes. These providers are contractually bound to keep such data confidential.
• Regulatory and law enforcement authorities — where phjoy is legally required to disclose data to government authorities, law enforcement agencies, or financial intelligence units in connection with anti-money-laundering investigations or other legal obligations.
• Professional advisers — phjoy's legal, accounting, and audit advisers may access personal data on a confidential, need-to-know basis where required to provide professional services to phjoy.

All third parties with whom phjoy shares personal data are required by contract to implement appropriate technical and organisational security measures and to process such data only for the purposes for which it was disclosed.

phjoy retains personal data only for as long as is necessary to fulfil the purposes for which it was collected or to comply with applicable legal, regulatory, or contractual obligations. For active player accounts, we retain personal data for the lifetime of the account and for a period of five years following permanent account closure, in line with standard financial record-keeping requirements applicable to online payment platforms operating in Bangladesh.

Transaction records are retained for a minimum of five years following the transaction date for anti-money-laundering compliance purposes. Where data is retained solely for legal compliance, it will be held securely and will not be used for any other purpose. When the retention period expires, data is securely deleted or anonymised.

phjoy employs industry-standard technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, alteration, or disclosure. These measures include SSL/TLS encryption for all data transmitted between your device and phjoy servers, secure data storage with access controls restricted to authorised personnel only, OTP-based authentication for withdrawals and sensitive account changes, regular security reviews and vulnerability assessments of the phjoy platform, and strict access logging and monitoring for all systems that process personal data.

While phjoy takes data security seriously and invests in protecting the personal information of all users, no security system is entirely infallible. In the event of a data breach that is likely to result in a high risk to your rights, phjoy will notify affected users without undue delay through their registered mobile contact. You can reduce risk on your side by using a strong, unique password for your phjoy account and by never sharing your login credentials with anyone.

As a user of phjoy, you have the following rights in relation to your personal data. To exercise any of these rights, please contact us at [email protected] with your registered mobile number and a clear description of your request.

phjoy will aim to respond to all data rights requests within 30 days of receipt. Where a request is complex or where a large volume of requests has been received, we may extend this period by a further 30 days and will inform you of the extension. phjoy does not charge a fee for handling data rights requests unless a request is manifestly unfounded or excessive.

phjoy uses cookies and similar tracking technologies to operate the platform, maintain your login session, remember your preferences, and analyse aggregate usage patterns. Cookies are small text files stored on your device by your browser. The types of cookies phjoy uses are:

• Essential cookies — strictly necessary for the platform to function. These include session authentication cookies that keep you logged in, security tokens, and cookies required for payment processing. These cannot be disabled without breaking core platform functionality.
• Preference cookies — used to remember your language setting, display preferences, and other choices you make on phjoy. These improve your experience by saving you from re-entering preferences on each visit.
• Analytics cookies — used to collect anonymised information about how users interact with phjoy, including which pages are visited most frequently and how long users spend on each section. This data is used only in aggregate form to improve platform design and performance.

You may disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phjoy platform. phjoy does not use third-party advertising cookies or cross-site tracking technologies for the purpose of serving targeted advertisements to users.

phjoy is strictly for adults aged 21 and above. We do not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and believe that a minor has registered on phjoy or provided personal data to us, please contact [email protected] immediately. Upon confirmation, we will delete the minor's account and all associated personal data without delay. phjoy employs age verification at registration to minimise the risk of underage access, but strongly encourages parents and guardians in Bangladesh to make use of parental controls on shared devices to prevent unauthorised access to online gaming platforms.

phjoy reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform functionality. When material changes are made to this policy, we will update the effective date at the top of this page and, where appropriate, notify registered users via their registered mobile number.

Your continued use of phjoy after any update to this Privacy Policy constitutes your acceptance of the revised policy. We encourage you to review this page periodically. The current version of this Privacy Policy is always available at phjoy.vu/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or to how phjoy handles your personal data, please reach out to our support team. We are committed to responding to all privacy-related enquiries promptly and in good faith.