Privacy Policy

1. Introduction

joan365 ("joan365," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the joan365 online casino platform, accessible at joan365.co ("the Platform"). This Privacy Policy ("Policy") describes the types of personal information we collect, the purposes for which we process it, the circumstances under which we may share it, and the rights available to you under applicable Philippine data protection law.

This Policy applies to all registered and unregistered users of joan365, including players based in Metro Manila, Cebu, Davao, and all other regions of the Philippines. It applies to data collected through the Platform, our customer support channels, and any other interactions you have with joan365.

By registering an account or continuing to use joan365, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and request account closure via our support team.

2. Data Controller

For purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, joan365 acts as the Personal Information Controller with respect to the personal data of users of the Platform. joan365 determines the purposes and means of processing your personal information in connection with your use of the Platform and related services.

joan365 has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with RA 10173 and for addressing user inquiries and complaints regarding personal data. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Registration & KYC Data

When you register an account on joan365, we collect:

• Full legal name as it appears on a government-issued Philippine ID
• Date of birth (to verify compliance with the 21+ age requirement)
• Registered Philippine mobile number (used for OTP-based authentication)
• Email address
• Residential address
• Copies of government-issued identification documents (Philippine National ID, passport, driver's license, SSS ID, PhilHealth ID, or UMID)
• Selfie or live photo for biometric identity verification, where required

3.2 Financial & Transaction Data

In connection with deposits, withdrawals, and bonus transactions on joan365, we collect:

• GCash account number or registered mobile number (for GCash transactions)
• Maya account details (for Maya/PayMaya transactions)
• Bank account name, number, and branch (for BPI, BDO, UnionBank transfers)
• Transaction amounts, timestamps, reference numbers, and payment method identifiers
• Source of funds declarations, where required for AML compliance

3.3 Technical & Usage Data

joan365 automatically collects the following technical data when you use the Platform:

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser version
• Session duration, pages visited, games played, and betting history
• Login timestamps and authentication events
• Cookies and similar tracking technology data (see Section 10)

3.4 Communications Data

When you contact joan365 customer support via live chat or email, we retain records of those communications, including the content of messages, timestamps, and the identity of the support agent who handled your inquiry.

4. Purposes of Processing

joan365 processes your personal data for the following specific purposes:

• Account registration and management: To create, maintain, and administer your joan365 account, including authentication and access control.
• Identity verification (KYC): To comply with PAGCOR Know Your Customer requirements and verify that you meet the 21+ age eligibility criterion.
• Payment processing: To process deposits and withdrawals through your selected payment method (GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, USDT TRC20, or Coins.ph).
• Anti-money laundering (AML) compliance: To monitor transactions for suspicious activity and comply with reporting obligations to the Anti-Money Laundering Council (AMLC) under Republic Act No. 9160, as amended.
• Regulatory compliance: To fulfil joan365's obligations to PAGCOR as a licensed online gaming operator, including periodic reporting and audit requirements.
• Customer support: To respond to inquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyze usage patterns, identify bugs, and develop new features based on how Filipino players interact with joan365.
• Marketing communications: To send promotional offers, bonus notifications, and platform updates where you have opted in to receive such communications. You may opt out at any time via your Account Settings.
• Responsible gaming: To monitor gameplay patterns and identify potential indicators of problem gambling, consistent with joan365's obligations under PAGCOR's responsible gaming framework.
• Fraud prevention and security: To detect and prevent unauthorized account access, collusion, bonus abuse, and other prohibited conduct described in the joan365 Terms & Conditions.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, joan365 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform the contract between joan365 and you — including account registration, gameplay, and payment processing.
• Legal obligation: Processing required to comply with applicable laws, including PAGCOR licensing conditions, AML regulations (RA 9160), and tax reporting obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for optional purposes such as marketing communications and analytics, where we have obtained your explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

joan365 does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:

• Payment service providers: GCash (Globe Fintech Innovations Inc.), Maya (PayMaya Philippines Inc.), BPI, BDO Unibank, UnionBank of the Philippines, and other payment processors, solely to execute your financial transactions.
• Game content providers: Licensed game studios (such as JILI Technology, Pragmatic Play, and Evolution Gaming) operating under data processing agreements with joan365, solely to the extent required for game delivery and fairness auditing.
• KYC and identity verification providers: Regulated third-party identity verification services engaged by joan365 to perform document verification and biometric checks.
• Regulatory and government authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, when required by law or upon valid legal process (subpoena, court order, or regulatory directive).
• Professional advisors: Legal counsel, auditors, and compliance consultants engaged by joan365, subject to professional confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of joan365 or a substantial portion of its assets, your personal data may be transferred to the successor entity, subject to continued compliance with this Privacy Policy.

7. International Data Transfers

Some game content providers and technology partners engaged by joan365 may be located outside of the Philippines. Where personal data is transferred to entities in other jurisdictions, joan365 ensures that such transfers are made only to recipients in countries with adequate data protection frameworks, or subject to Standard Contractual Clauses or equivalent safeguards as recognized under Philippine law, and that such transfers comply with the requirements of the National Privacy Commission.

8. Data Retention

joan365 retains personal data for as long as your account remains active and for a minimum period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act of 2001 (RA 9160), as amended by RA 10365.

Specific retention periods by data category:

• KYC documents and identity verification records: 5 years post-account closure
• Transaction records: 5 years post-transaction, as required by AMLC
• Customer support communications: 2 years from the date of the interaction
• Technical logs and session data: 12 months from collection
• Marketing consent records: Duration of consent plus 1 year following opt-out

Data no longer required for the above purposes and for which no legal obligation to retain exists will be securely deleted or anonymized.

9. Security Measures

joan365 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure:

• Encryption: AES-256 encryption at rest for stored personal and financial data; TLS 1.3 for all data in transit between your device and joan365 servers.
• Access controls: Role-based access control (RBAC) limiting access to personal data to authorized personnel with a documented business need. All access is logged and audited.
• Authentication: Multi-factor authentication (MFA) required for all joan365 staff accessing systems containing personal data; OTP-based authentication available to users for account login.
• Penetration testing: Regular third-party security assessments and vulnerability testing of the joan365 Platform.
• Incident response: joan365 maintains a documented personal data breach response procedure. In the event of a breach likely to cause harm to data subjects, we will notify the National Privacy Commission (NPC) within 72 hours of discovery, and affected users without undue delay, in accordance with RA 10173.

10. Cookies & Tracking Technologies

joan365 uses the following categories of cookies and similar technologies on the Platform:

• Strictly necessary cookies: Required for the Platform to function, including session management, authentication tokens, and security cookies. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences such as language settings and last login method (e.g., GCash or username/password).
• Analytics cookies: Collect aggregated, anonymized data about how users interact with joan365 to improve the Platform. joan365 uses first-party analytics tools for this purpose.
• Marketing cookies: Used only where you have explicitly opted in to receive personalized promotional content from joan365. No third-party advertising networks are used.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies may prevent you from logging in to your joan365 account.

11. Your Rights Under the Data Privacy Act of 2012

As a data subject under Philippine Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by joan365:

• Right to be informed: The right to be notified of how your data is being collected and processed — which this Policy fulfils.
• Right of access: The right to request a copy of the personal data joan365 holds about you, along with information about how it is processed.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data in your joan365 account.
• Right to erasure / right to be forgotten: The right to request deletion of your personal data, subject to joan365's legal retention obligations described in Section 8.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to object: The right to object to the processing of your personal data for marketing or profiling purposes. This does not apply to processing required for joan365's regulatory compliance obligations.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe joan365 has processed your personal data in violation of RA 10173.

To exercise any of the above rights, submit a written request to joan365's Data Privacy Officer at the contact details provided in Section 14. We will respond within thirty (30) days of receiving a valid, complete request.

12. Minors

joan365 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly restricted to users aged 21 and above in compliance with PAGCOR regulations and Philippine law governing online gambling. If joan365 becomes aware that personal data has been collected from a minor, that data will be deleted immediately and the account suspended pending investigation. If you believe a minor has registered on joan365, please notify our Data Privacy Officer without delay.

13. Changes to This Privacy Policy

joan365 reserves the right to update or amend this Privacy Policy at any time. Material changes — including changes to the categories of data collected, the purposes of processing, or your rights — will be communicated to registered users via email or in-Platform notification at least seven (7) days prior to taking effect. The "Last Updated" date at the top of this Policy reflects the most recent revision. Your continued use of joan365 following the effective date of any change constitutes acceptance of the revised Policy.

14. Contact & Data Privacy Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by joan365, please contact our Data Privacy Officer:

• Email: [email protected]
• Subject line: Data Privacy Request – [Your Account Username]
• Live Chat: Available 24/7 on the joan365 Platform
• Response time: Within 30 days for formal data subject requests; within 24 hours for general support inquiries

For unresolved complaints, you may also file a complaint with the National Privacy Commission (NPC) of the Republic of the Philippines through their official government portal.