joan365 Privacy Policy

joan365 ("joan365," "we," "us," or "our") operates the online gaming platform accessible at joan365.app. We are committed to protecting the privacy and security of the personal information of all users ("you," "your," or "Player") who access or use our platform.

This Privacy Policy describes how joan365 collects, uses, discloses, stores, and protects your personal information when you visit our website, register an account, make deposits or withdrawals, participate in games, or otherwise interact with the joan365 platform. It also describes your rights as a data subject under Philippine law and how you can exercise those rights.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the joan365 platform. By registering an account or using the joan365 platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal information as described herein.

joan365 collects the following categories of personal data from players and platform visitors:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — you must be 21 or older);
• Nationality and country of residence;
• Email address;
• Mobile phone number;
• Residential address (barangay, city/municipality, province, ZIP code).

• Copies of government-issued photo identification (e.g., Philippine passport, driver's license, SSS ID, UMID, PhilSys National ID);
• Proof of address documents (e.g., utility bills, bank statements);
• Proof of payment method ownership (e.g., GCash account screenshots);
• Selfie or liveness verification images where required.

• Deposit and withdrawal amounts and history;
• Payment method details (GCash account number, bank account details, debit card details — stored in tokenized form only);
• Transaction timestamps and reference numbers;
• Account balance history.

• Game history, wager amounts, wins and losses;
• Session duration and frequency of play;
• Bonus and promotion usage;
• Responsible gaming tool settings (deposit limits, self-exclusion status).

• IP address and approximate geolocation;
• Device type, operating system, and browser type;
• Cookie identifiers and session tokens;
• Log data including pages visited, time spent, and click patterns.

• Customer support chat transcripts and email correspondence;
• Survey responses and feedback submissions;
• Marketing preferences and opt-in/opt-out records.

joan365 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you visit joan365.app, including cookies, log files, and analytics tools;
• Third-party sources: Identity verification data from KYC service providers; payment data from payment processors such as GCash, PayMaya, and banking partners; fraud prevention data from anti-fraud service providers;
• Regulatory sources: Information shared with us by PAGCOR or other regulatory authorities in connection with our licensing obligations.

joan365 uses your personal data for the following purposes:

joan365 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.

Under the Philippine Data Privacy Act of 2012, joan365 processes your personal data on the following legal bases:

• Consent: Where you have given clear, informed, and freely given consent to the processing of your personal data for a specific purpose, such as receiving marketing communications;
• Contract performance: Where processing is necessary for the performance of a contract to which you are a party, such as operating your joan365 account and processing your transactions;
• Legal obligation: Where processing is necessary for compliance with a legal obligation, including KYC/AML requirements under Philippine law and PAGCOR regulatory requirements;
• Legitimate interest: Where processing is necessary for the legitimate interests of joan365, such as fraud prevention, platform security, and improving our services, provided that such interests are not overridden by your rights and interests.

Where we rely on your consent as the legal basis for processing, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

joan365 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• KYC and identity verification providers;
• Payment processors (GCash, PayMaya, banking partners);
• Cloud hosting and infrastructure providers;
• Customer support platform providers;
• Analytics and fraud prevention service providers;
• Game software providers (limited to data necessary for game operation).

All third-party service providers are contractually required to process your personal data only on joan365's instructions and in compliance with the Data Privacy Act of 2012.

joan365 may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory requirement.

In the event of a merger, acquisition, or sale of all or substantially all of joan365's assets, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and your rights will be preserved.

joan365 uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The following types of cookies are used:

• Strictly necessary cookies: Essential for the operation of the joan365 platform, including session management, authentication, and security. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and responsible gaming tool configurations;
• Analytics cookies: Collect anonymized data about how you use the platform to help us improve our services;
• Security cookies: Used for fraud detection and prevention purposes.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the joan365 platform. joan365 does not use third-party advertising or tracking cookies.

joan365 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years after account closure, in compliance with Philippine AML regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing data: Retained until you withdraw your consent or opt out of marketing communications;
• Technical and log data: Retained for up to twelve (12) months.

Upon expiry of the applicable retention period, joan365 will securely delete or anonymize your personal data in accordance with our data disposal procedures.

joan365 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• TLS/SSL encryption for all data transmitted between your device and the joan365 platform;
• AES-256 encryption for sensitive data stored at rest;
• Tokenization of payment method details — joan365 never stores full card or bank account numbers;
• Multi-factor authentication (MFA) for account access;
• Regular security audits and penetration testing;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• 24/7 security monitoring and intrusion detection systems.

While joan365 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the security of your account credentials.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by joan365:

To exercise any of the above rights, please contact our Data Protection Officer at [email protected]. We will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further two (2) months, and you will be notified accordingly.

Please note that certain rights may be limited where joan365 is required to retain your data to comply with legal obligations (e.g., AML record-keeping requirements).

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to joan365, please contact us immediately at [email protected] so that we can take appropriate action.

Some of joan365's third-party service providers may be located outside the Philippines. Where personal data is transferred to a country that does not provide an equivalent level of data protection to the Philippines, joan365 will ensure that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission;
• Binding corporate rules where applicable;
• Transfers to countries recognized by the NPC as providing adequate data protection.

By using the joan365 platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

joan365 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or regulatory guidance. Any changes will be effective immediately upon posting to the joan365 platform.

We will notify you of material changes to this Privacy Policy by posting a prominent notice on the joan365 platform or by sending an email to your registered email address. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the joan365 platform following the posting of any changes constitutes your acceptance of the updated Privacy Policy. If you do not agree to the updated policy, you must cease using the platform and may request account closure.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

We aim to respond to all privacy-related inquiries within 15 business days. For data subject rights requests, the response period is 30 days as required by the Data Privacy Act of 2012.