Privacy Policy — joan356 Online Casino Philippines

1 Introduction

joan356 ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every Filipino player who uses our online casino and sports betting services. This Privacy Policy ("Policy") sets out in plain, transparent language how joan356 collects, processes, stores, shares, and protects your personal data when you interact with our platform.

This Policy is governed by and drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where joan356 processes personal data of individuals located in other jurisdictions, we also observe applicable data protection frameworks relevant to those locations.

We believe you have the right to know exactly what happens with your personal information. Whether you're playing from Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the Philippines — your data deserves the same level of care and respect.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, joan356 acts as the Personal Information Controller (PIC) in respect of the personal data you provide to us or that we collect about you through your use of the platform.

As Personal Information Controller, joan356 determines the purpose and means of processing your personal data. We are responsible for ensuring that your data is handled lawfully, fairly, and transparently, and that adequate security measures are in place to protect it from unauthorized access, disclosure, alteration, or destruction.

Where joan356 engages third-party service providers (such as payment processors, game software providers, or cloud hosting partners) to process personal data on our behalf, those third parties act as Personal Information Processors (PIPs) and are contractually bound to process your data only in accordance with joan356's instructions and this Policy.

3 Personal Data We Collect

joan356 collects personal data that is necessary, adequate, and relevant to the specific purposes described in this Policy. The categories of personal data we may collect include:

3.1 Registration and Identity Data

• Full legal name (as it appears on your Philippine government-issued ID)
• Date of birth and age verification data
• Gender (optional, where provided)
• Philippine residential address (including barangay, city/municipality, province)
• Valid email address
• Mobile number registered in the Philippines
• Username and encrypted account password

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, UMID, SSS ID, PhilHealth ID, driver's licence)
• Proof of address documents (e.g., utility bills, bank statements dated within 90 days)
• Source of funds documentation where required under AML obligations
• Facial biometric data collected solely for identity verification matching, processed by our KYC service provider and not retained beyond the verification process

3.3 Financial and Transaction Data

• GCash or PayMaya wallet numbers registered to your joan356 account
• BPI, BDO, or Metrobank account details used for deposits and withdrawals
• Transaction histories including deposit amounts, withdrawal requests, and processing dates
• Bonus and promotional credit histories
• Wagering and betting histories

3.4 Technical and Usage Data

• IP address and geolocation data (country and region level)
• Device type, operating system, and browser information
• Session logs including login and logout timestamps
• Pages visited, games played, and features used within the platform
• Cookies and similar tracking technologies (see Section 11)

3.5 Communication Data

• Records of communications with joan356 customer support, including live chat transcripts, email correspondence, and support ticket histories
• Survey responses and feedback you choose to submit to joan356
• Your marketing communication preferences

4 How We Collect Your Data

joan356 collects personal data through the following channels and methods:

4.1 Direct Collection

The majority of personal data joan356 holds about you is provided directly by you — for example, when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact customer support, or participate in a promotion.

4.2 Automated Collection

When you use the joan356 website or mobile platform, we automatically collect certain technical data about your device, browser, and session activity through cookies, web beacons, server logs, and similar tracking technologies. This data helps us maintain platform security, detect fraudulent activity, and improve the user experience for Filipino players.

4.3 Third-Party Sources

joan356 may receive data about you from trusted third-party sources in limited circumstances, including:

• KYC / Identity Verification Providers: Third-party identity verification services may return verification results and flags to joan356 based on the documents you submit.
• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank may share transaction confirmation data with joan356 to facilitate the processing of your deposits and withdrawals.
• Fraud Prevention Services: Risk management and anti-fraud service providers may share information about known fraud indicators associated with specific IP addresses, devices, or payment methods.

5 How We Use Your Personal Data

joan356 uses the personal data we collect for the following specific purposes:

• Account Management: To create, verify, maintain, and manage your joan356 player account, including processing your registration, authenticating your logins, and administering your account settings.
• Identity Verification (KYC): To verify your identity, age (21+ requirement), and address as required by responsible gaming obligations and anti-money laundering (AML) best practices.
• Transaction Processing: To process your deposits, withdrawals, and bonus credits accurately and promptly via your chosen Philippine payment method (GCash, PayMaya, BPI, BDO, Metrobank).
• Platform Operation and Improvement: To operate, maintain, and continuously improve the joan356 platform, including personalising your gaming experience, recommending relevant games, and fixing technical issues.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorised account access, bonus abuse, money laundering, and other prohibited activities on the joan356 platform.
• Customer Support: To respond to your enquiries, resolve complaints, and provide technical assistance via our 24/7 Philippine support team.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform news — but only where you have provided your consent to receive such communications. You may withdraw this consent at any time.
• Legal Compliance: To comply with applicable Philippine laws and regulations, including the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and PAGCOR-aligned responsible gaming requirements.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour and to administer the responsible gaming tools available in your account, such as deposit limits, session alerts, and self-exclusion requests.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, joan356 processes your personal data on the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and joan356 — i.e., to operate your account, process transactions, and deliver gaming services as described in our Terms and Conditions.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including KYC/AML obligations, PAGCOR-aligned responsible gaming requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for joan356's legitimate interests in operating a secure, fair, and commercially viable gaming platform — for example, fraud detection, platform security, and service analytics — provided those interests are not overridden by your rights and freedoms.
• Consent: Where processing is not covered by the above bases — particularly for direct marketing communications and the use of non-essential cookies — joan356 will seek your explicit consent, and you retain the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Personal Data

joan356 does not sell, rent, or trade your personal data. We share it only in the circumstances described below, and only to the extent strictly necessary for the relevant purpose:

7.1 Service Providers and Processors

joan356 engages carefully selected third-party service providers who process personal data on our behalf as Personal Information Processors. These include cloud hosting providers, KYC and identity verification platforms, payment gateway operators (for GCash, PayMaya, BPI, BDO, and Metrobank integrations), customer support software providers, fraud detection services, and game software providers. All processors are contractually bound to process your data only as instructed by joan356 and to maintain appropriate security standards.

7.2 Legal and Regulatory Authorities

joan356 may disclose personal data to Philippine government authorities, law enforcement agencies, courts, or regulators where required to do so by law, court order, or regulatory directive — including the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and PAGCOR in its regulatory capacity.

7.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of joan356's business, your personal data may be transferred to the relevant successor entity as part of that transaction, subject to the same protections as described in this Policy. You will be notified of any such transfer in advance.

7.4 Protection of Rights

joan356 may share personal data where we reasonably believe disclosure is necessary to protect the rights, property, or safety of joan356, our players, or the public — for example, in cases of suspected fraud, abuse, or threat to platform integrity.

8 Data Retention

joan356 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer.

Upon expiry of the applicable retention period, joan356 will securely delete or anonymise your personal data in a manner that prevents any reconstruction or identification. Anonymised, aggregated data (from which no individual can be identified) may be retained indefinitely for platform analytics and improvement purposes.

9 Data Security

joan356 implements robust technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security framework includes:

• Encryption in Transit: All data transmitted between your device and joan356 servers is encrypted using TLS (Transport Layer Security) protocols.
• Encryption at Rest: Sensitive personal data, including financial information and KYC documents, is encrypted at rest using AES-256 encryption standards.
• Access Controls: Access to personal data within joan356 is governed by a strict role-based access control policy. Employees may only access personal data where it is genuinely necessary for their specific job function.
• Two-Factor Authentication: joan356 supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised access.
• Regular Security Audits: joan356 conducts periodic security assessments and vulnerability testing to identify and remediate potential weaknesses in our systems.
• Staff Training: All joan356 staff who handle personal data receive regular privacy and data security training.

9.1 Data Breach Response

In the unlikely event of a personal data breach that is reasonably likely to result in serious harm to affected individuals, joan356 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03. Affected players will also be notified directly without undue delay, together with guidance on protective steps they can take.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you — as a data subject — have the following rights in respect of your personal data held by joan356. These rights apply to all joan356 players across the Philippines:

• Right to Be Informed: You have the right to be informed about the collection and processing of your personal data — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data joan356 holds about you, together with information about how it is being processed.
• Right to Rectification: If any personal data joan356 holds about you is inaccurate or incomplete, you have the right to request correction. You can update many details directly within your account settings.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to joan356's legal retention obligations under Philippine law.
• Right to Object: You have the right to object to the processing of your personal data where joan356 relies on legitimate interests as the legal basis, including the right to object to direct marketing communications at any time.
• Right to Data Portability: You have the right to receive a copy of the personal data you have provided to joan356 in a structured, commonly used, machine-readable format.
• Right to Damages: You have the right to seek compensation from joan356 for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe joan356 has not handled your personal data in accordance with the Data Privacy Act of 2012.

To exercise any of the rights listed above, please contact the joan356 Data Protection Officer using the details in Section 15. joan356 will respond to all data subject rights requests within 30 calendar days of receipt, or within the period permitted by applicable law for complex requests.

11 Cookies & Tracking Technologies

joan356 uses cookies and similar tracking technologies on its website and mobile platform to improve your experience, maintain your session, and gather analytics data. The types of cookies we use are:

11.1 Strictly Necessary Cookies

These cookies are essential for the joan356 platform to function. They enable core features such as account login session management, security token validation, and shopping cart functionality on our deposit pages. You cannot opt out of strictly necessary cookies while using the joan356 platform.

11.2 Performance and Analytics Cookies

These cookies collect anonymised information about how players use the joan356 platform — such as which games are most popular, how long sessions last, and which pages are visited most frequently. This data helps us improve the platform for all Filipino players. These cookies require your consent and can be disabled via your browser settings.

11.3 Functional Cookies

These cookies remember your preferences — such as your chosen language settings, preferred game categories, and notification preferences — so that joan356 can deliver a more personalised experience on your next visit.

11.4 Managing Cookies

You can control and manage cookies through your browser settings at any time. Please be aware that disabling certain cookies may affect the functionality of the joan356 platform. Most modern browsers provide options to block, delete, or receive warnings before a cookie is stored on your device.

12 Minors & Age Verification

joan356 is strictly an adult platform. In accordance with Philippine gaming regulations and PAGCOR-aligned standards, joan356 enforces a minimum age of 21 years for all account holders. joan356 does not knowingly collect personal data from individuals under the age of 21.

Age verification is a mandatory step of the joan356 registration and KYC process. All players are required to provide documentary proof of age before their account is fully activated and before any withdrawal is processed. joan356 uses a combination of self-declaration, document verification, and third-party age verification tools to enforce this requirement.

If you are a parent or guardian and believe that a person under 21 in your care has registered a joan356 account, please contact our support team immediately at support@joan356 .net so we can investigate and take appropriate action without delay.

13 International Data Transfers

joan356 is a Philippines-focused platform and processes the majority of personal data within the Philippines or in jurisdictions that maintain adequate data protection standards. However, given the global nature of our technology partners — including cloud hosting providers, game software suppliers, and KYC service providers — your personal data may in some circumstances be transferred to, stored in, or processed in countries outside the Philippines.

Where such international transfers occur, joan356 ensures that appropriate safeguards are in place to protect your personal data to a standard that is at least equivalent to the protections afforded under the Data Privacy Act of 2012. These safeguards may include:

• Data processing agreements incorporating the standard contractual clauses approved or recognised by the National Privacy Commission
• Transfers to jurisdictions that the NPC has determined provide an adequate level of data protection
• Binding corporate rules where applicable within our group of companies

If you would like further information about any specific international transfer of your personal data, or to obtain a copy of the safeguards we have put in place, please contact our Data Protection Officer using the details in Section 15.

14 Amendments to This Policy

joan356 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, regulatory guidance from the National Privacy Commission, or the evolution of our platform and services.

When joan356 makes material changes to this Privacy Policy — that is, changes that meaningfully affect how your personal data is collected, used, or shared — we will:

• Post the updated Privacy Policy on the joan356 website with a revised "Last Updated" date prominently displayed at the top of the document
• Send a notification to your registered email address summarising the key changes at least 7 days before the amended Policy takes effect
• Display a notice on the joan356 platform prompting you to review the updated Policy upon your next login

Your continued use of the joan356 platform after the effective date of any amended Privacy Policy constitutes your acknowledgment and acceptance of the updated terms. If you do not agree with any changes to this Policy, you have the right to close your joan356 account and request deletion of your personal data, subject to our legal retention obligations.

For non-material changes — such as minor clarifications, typographical corrections, or updated contact details — joan356 may update this Policy without advance notice, though the revised date will always reflect the most recent update.

15 Contact Us & Data Protection Officer

joan356 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please do not hesitate to reach out:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that your personal data rights have been violated and that joan356 has not adequately addressed your concern. The NPC can be reached via their official government website and contact channels.

joan356 is committed to resolving all data privacy concerns fairly and promptly. We will always aim to resolve your concern at the first point of contact — but we fully respect your right to escalate to the NPC where you feel that is necessary.