Privacy Policy

1. Introduction and Data Controller

This Privacy Policy ("Policy") governs the collection, processing, storage, use, disclosure, and protection of personal information by ph22ph ("we," "us," "our," or "the Company"), a gaming platform operating under license from the Philippine Amusement and Gaming Corporation (PAGCOR). We are committed to protecting your privacy and ensuring the security of your personal data in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

ph22ph acts as the Data Controller for all personal information collected through our website, mobile applications, and related services. Our Data Protection Officer oversees compliance with Philippine data privacy laws and serves as your primary contact for privacy-related concerns. By accessing or using ph22ph services, you acknowledge that you have read, understood, and consent to the collection and processing of your personal information as described in this Policy.

This Policy applies to all users of ph22ph services, including registered players, website visitors, and individuals who communicate with our customer support team. If you do not agree with the terms of this Policy, you must immediately discontinue use of ph22ph services.

2. Information We Collect

2.1 Personal Information You Provide

When you register an account with ph22ph, we collect the following personal information that you voluntarily provide:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers as required for age verification and regulatory compliance.
• Contact Information: Email address, mobile phone number, residential address, city, province, and postal code.
• Account Credentials: Username, password (stored in encrypted format), and security questions for account protection.
• Financial Information: Payment method details including GCash account number, PayMaya account number, bank account information, cryptocurrency wallet addresses, and transaction history.
• Verification Documents: Copies of government-issued identification (Philippine passport, driver's license, UMID, postal ID), proof of address documents (utility bills, bank statements), and selfie photographs for identity verification purposes.
• Communication Records: Content of emails, live chat messages, phone call recordings, and other communications you send to ph22ph customer support or compliance teams.

2.2 Information Automatically Collected

When you access or use ph22ph services, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers, and mobile network information.
• Connection Data: IP address, geographic location (country, city), internet service provider, and connection timestamps.
• Usage Data: Pages viewed, features accessed, games played, bet amounts, win/loss records, session duration, click patterns, and navigation paths through our website.
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar tracking technologies as described in our Cookie Policy.
• Transaction Data: Complete records of all deposits, withdrawals, bets placed, bonuses claimed, and account balance changes.

2.3 Information from Third-Party Sources

We may receive information about you from third-party service providers including payment processors, identity verification services, fraud prevention services, and regulatory databases. This information is used to verify your identity, prevent fraud, and comply with legal obligations under Philippine Anti-Money Laundering regulations.

3. How We Use Your Information

ph22ph processes your personal information for the following legitimate business purposes and legal obligations:

3.1 Account Management and Service Delivery

• Creating, maintaining, and administering your ph22ph account;
• Processing deposits, withdrawals, and other financial transactions;
• Providing access to games, betting services, and platform features;
• Managing bonuses, promotions, and loyalty rewards;
• Personalizing your gaming experience based on preferences and playing history;
• Communicating important account updates, security alerts, and service notifications.

3.2 Legal and Regulatory Compliance

• Verifying your identity, age (21+ requirement), and eligibility to use ph22ph services;
• Complying with PAGCOR licensing requirements and reporting obligations;
• Fulfilling Anti-Money Laundering (AML) and Know Your Customer (KYC) obligations under Philippine AMLA regulations;
• Detecting, preventing, and investigating fraud, money laundering, and other illegal activities;
• Responding to legal process, court orders, and government requests;
• Maintaining records as required by Philippine gaming and financial regulations.

3.3 Security and Risk Management

• Protecting your account from unauthorized access and fraudulent activity;
• Monitoring for suspicious transactions and account behavior patterns;
• Implementing responsible gaming measures and identifying problem gambling indicators;
• Enforcing our Terms & Conditions and investigating policy violations;
• Conducting security audits and penetration testing to protect our systems.

3.4 Marketing and Communications

• Sending promotional offers, bonuses, and game recommendations (with your consent);
• Conducting market research and customer satisfaction surveys;
• Analyzing user preferences to improve our services and develop new features;
• Sending newsletters and updates about ph22ph (you may opt out at any time).

4. How We Protect Your Information

ph22ph employs industry-leading security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction:

4.1 Technical Security Measures

• Encryption: All data transmission between your device and ph22ph servers is protected by 256-bit SSL/TLS encryption, the same technology used by major Philippine banks.
• Secure Storage: Personal data is stored on secure servers located in ISO 27001-certified data centers with 24/7 physical security, redundant power supplies, and disaster recovery systems.
• Password Protection: All passwords are hashed using advanced cryptographic algorithms (bcrypt with salt) and are never stored in plain text.
• Firewalls and Intrusion Detection: Multi-layered firewall protection and real-time intrusion detection systems monitor for suspicious activity and unauthorized access attempts.
• Two-Factor Authentication: Optional 2FA adds an extra security layer requiring SMS verification codes for login and withdrawals.

4.2 Organizational Security Measures

• Access Controls: Personal data is accessible only to authorized personnel who require it to perform their job functions, subject to strict confidentiality agreements.
• Employee Training: All ph22ph staff undergo mandatory data privacy and security training to ensure compliance with protection standards.
• Third-Party Audits: Independent security firms conduct regular penetration testing and vulnerability assessments of our systems.
• Data Minimization: We collect and retain only the minimum personal information necessary to provide our services and meet legal obligations.
• Incident Response: We maintain a comprehensive data breach response plan to quickly address any security incidents and notify affected users as required by law.

4.3 Payment Security

Financial transactions through ph22ph are processed using PCI DSS-compliant payment systems. We do not store complete credit card numbers or CVV codes on our servers. Payment information is tokenized and processed through secure third-party payment gateways including GCash, PayMaya, and licensed Philippine banks.

5. Data Retention and Deletion

ph22ph retains your personal information only for as long as necessary to fulfill the purposes described in this Policy and to comply with legal retention requirements:

5.1 Active Account Data

While your ph22ph account remains active, we retain all account information, transaction records, and communications to provide ongoing services, process withdrawals, and maintain accurate gaming records.

5.2 Closed Account Data

After you close your account, we retain personal data for up to 7 years to comply with Philippine Bureau of Internal Revenue tax requirements, PAGCOR record-keeping mandates, and anti-money laundering regulations. Account data is securely archived and not used for any other purpose except legal compliance.

5.3 Data Deletion Request

You have the right to request deletion of your personal information, subject to legal obligations. Contact our Data Protection Officer at [email protected] to submit a data deletion request. We will respond to your request within 30 days and explain any reasons we must retain certain information for legal compliance.

5.4 Communication Records

Emails, chat logs, and support ticket communications are retained for 2 years for customer service quality assurance and dispute resolution purposes.

6. Data Sharing and Third Parties

ph22ph does not sell, trade, or rent your personal information to third parties. However, we may share your data with trusted service providers and as required by law:

6.1 Service Providers

• Payment Processors: GCash, PayMaya, Philippine banks, and cryptocurrency processors require your financial information to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC (Know Your Customer) providers verify your identity documents to comply with PAGCOR regulations.
• Fraud Detection Services: Specialized security firms monitor transactions for fraudulent activity and money laundering.
• Cloud Infrastructure: Secure cloud providers host our servers and databases under strict data protection agreements.
• Email and Communication Services: Third-party email providers send support communications and account notifications.

6.2 Legal Obligations

We may disclose your personal information when required by law, including:

• Court orders, subpoenas, and legal requests from Philippine law enforcement agencies;
• PAGCOR compliance and audit investigations;
• Philippine National Bureau of Investigation (NBI) and Philippine National Police (PNP) inquiries;
• Bureau of Internal Revenue tax investigations;
• Anti-Money Laundering and Terrorist Financing Prevention Act (AMLA) compliance reporting;
• Other legitimate government requests authorized by Philippine law.

6.3 Data Transfer Agreements

All third-party service providers are contractually obligated to maintain the confidentiality and security of your personal information and use it only for authorized purposes. We verify that all service providers comply with Philippine Data Privacy Act standards.

7. Your Privacy Rights and Data Subject Access

Under Philippine Data Privacy Act of 2012, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request and receive a copy of all personal information we hold about you. Contact our Data Protection Officer to submit an access request, and we will provide your data in a clear, comprehensible format within 30 days.

7.2 Right to Rectification

If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction. You can update some information directly in your account settings, or contact customer support for assistance with other data.

7.3 Right to Erasure

You may request deletion of your personal data, subject to legal retention requirements. We will erase your information where there is no legitimate business need to retain it, except where Philippine law requires us to keep records for tax, regulatory, or legal purposes.

7.4 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another service provider, subject to technical feasibility.

7.5 Right to Object

You may object to the processing of your personal information for marketing purposes or other non-essential uses. We will respect your objection and cease processing your data for those purposes, except where legal obligations require continued processing.

7.6 How to Exercise Your Rights

To exercise any of these rights, submit a written request to our Data Protection Officer:

Email: [email protected]
Mailing Address: ph22ph Data Protection Officer, Makati, Manila, Philippines
Response Time: We will respond to your request within 30 days. If your request requires extended investigation, we will notify you within the initial 30-day period.

8. Cookies and Tracking Technologies

ph22ph uses cookies, web beacons, and similar technologies to enhance your browsing experience, remember your preferences, and analyze website usage patterns.

8.1 Types of Cookies We Use

• Essential Cookies: Required for basic website functionality, account login, and security features.
• Performance Cookies: Track page views, click patterns, and user interactions to help us improve website performance and user experience.
• Preference Cookies: Remember your language selection, display settings, and other user preferences across sessions.
• Marketing Cookies: Used for targeted advertising and tracking campaign effectiveness (used only with your consent).

8.2 Cookie Management

You can control cookie settings through your browser preferences. Most web browsers allow you to refuse cookies or alert you when a website sets a cookie. However, disabling essential cookies may prevent you from accessing certain ph22ph features. For more information on managing cookies, visit www.allaboutcookies.org.

8.3 Third-Party Analytics

ph22ph uses Google Analytics and similar services to analyze website traffic and user behavior. These services set their own cookies subject to their privacy policies. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

9. Security Incident Notification

In the unlikely event of a data breach or security incident that compromises the confidentiality of your personal information, ph22ph will:

• Immediately investigate the incident and assess the scope of the breach;
• Notify all affected users within 72 hours of discovery, as required by Philippine law;
• Provide details about the type of data compromised and recommended protective actions;
• Offer complimentary credit monitoring or identity theft protection services if applicable;
• File required reports with the National Privacy Commission (NPC) and PAGCOR;
• Implement corrective measures to prevent future incidents.

For incident-related inquiries, contact: [email protected]

10. Changes to This Privacy Policy

ph22ph may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by email or through prominent notice on our website.

• Last Updated: January 15, 2025
• Effective Date: January 20, 2025

Your continued use of ph22ph services after notification of changes constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.