ph22app Privacy Policy

ph22app collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

ph22app does not intentionally collect sensitive personal information beyond what is strictly required for identity verification, anti-money laundering compliance, and responsible gaming obligations. Where sensitive personal information is collected (such as government ID numbers for KYC purposes), we apply enhanced security controls and limit access strictly to authorised compliance personnel.

ph22app collects personal data through the following channels:

• Direct Submission: When you register for a ph22app account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion, you provide us with personal data directly.
• Automated Collection: When you use the ph22app platform, we automatically collect technical data including your IP address, device identifiers, browser type, and session activity through cookies and similar tracking technologies. See Section 8 for full details.
• Third-Party Sources: We may receive identity verification information from KYC service providers, fraud detection and AML screening services, and payment processors acting on our behalf. We may also receive information from PAGCOR or other regulatory bodies where required by law.
• Payment Providers: When you transact via GCash, Maya, BPI, BDO, Metrobank, UnionBank, or other supported payment methods, our payment processor partners share transaction reference data with ph22app to confirm successful deposits and withdrawals.

ph22app processes your personal data for the following specific, declared, and legitimate purposes:

• Account Registration & Management: To create and maintain your ph22app account, verify your identity, and ensure compliance with the 21+ age requirement mandated by PAGCOR.
• Service Delivery: To provide you with access to ph22app's gaming products including slots, live casino, sports betting, bingo, and sabong.
• Payment Processing: To process deposits and withdrawals in Philippine Pesos through your chosen payment method, and to maintain accurate financial records.
• PAGCOR Regulatory Compliance: To fulfil ph22app's obligations under PAGCOR's licensing conditions, including anti-money laundering (AML) reporting, Know Your Customer (KYC) verification, and responsible gaming record-keeping.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, bonus abuse, and other prohibited conduct on the platform.
• Responsible Gaming: To administer deposit limits, session time limits, cooling-off periods, and self-exclusion requests in accordance with our Responsible Gaming commitments.
• Customer Support: To respond to your enquiries, resolve disputes, and communicate service-related updates.
• Marketing Communications: To send you promotional offers and ph22app updates where you have given your consent to receive such communications. You may withdraw this consent at any time.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve the performance, features, and user experience of the ph22app platform.

ph22app will not process your personal data for purposes that are incompatible with those listed above without obtaining your prior consent or as otherwise required by Philippine law.

Under the Philippine Data Privacy Act of 2012, ph22app relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing is necessary to perform the contract between you and ph22app (i.e., the Terms and Conditions governing your use of the platform). This covers account creation, payment processing, and game service delivery.
• Legal Obligation: Processing is necessary to comply with PAGCOR regulations, AML laws, tax reporting requirements, and other applicable Philippine legislation. ph22app cannot waive these legal obligations at your request.
• Legitimate Interests: Processing is necessary for ph22app's legitimate interests in preventing fraud, ensuring platform security, and conducting internal analytics — provided these interests are not overridden by your data privacy rights.
• Consent: For marketing communications and certain non-essential cookies, ph22app relies on your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

ph22app does not sell, rent, or trade your personal data to any third party. We share your personal data only in the following limited circumstances:

• Payment Processors: We share necessary financial data with payment service providers (GCash, Maya, BPI, BDO, Metrobank, UnionBank, Coins.ph, Visa/Mastercard, and USDT TRC20 processors) to process your deposits and withdrawals. These providers are bound by strict data processing agreements.
• KYC & Identity Verification Providers: We may share your identity documents with third-party KYC service providers to verify your identity in accordance with PAGCOR requirements and Philippine AML regulations.
• Game Content Providers: Aggregated, anonymised game session data may be shared with game software providers to support game integrity, RNG certification, and platform performance monitoring. Individually identifiable data is not shared with game providers without necessity.
• Fraud Prevention & AML Services: We may share data with fraud detection and anti-money laundering screening services to protect the platform and its players from criminal activity.
• Regulatory Authorities: ph22app is required by law to share player data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies upon lawful request or as required by our licensing conditions.
• Professional Advisors: We may share data with our legal advisors, auditors, and accountants where strictly necessary for the provision of professional services to ph22app, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of ph22app's business or assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

All third parties with whom ph22app shares personal data are required to maintain appropriate security measures and to process your data only for the purposes specified in their data processing agreements with ph22app.

ph22app retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. Our general retention periods are as follows:

Upon expiry of the applicable retention period, ph22app will securely delete or anonymise your personal data in a manner that makes re-identification impossible. Where data cannot be immediately deleted due to ongoing legal proceedings or regulatory investigations, it will be retained only until those matters are concluded.

ph22app takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure:

• Encryption: All data in transit is protected using TLS 1.2 or higher. Sensitive data at rest, including KYC documents and financial records, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted on a strict need-to-know basis. ph22app employees access only the data necessary to perform their specific job functions. All access is logged and audited.
• Two-Factor Authentication: Player accounts support two-factor authentication (2FA) to provide an additional layer of security against unauthorised access.
• Penetration Testing: ph22app conducts regular security assessments and penetration testing of its platform to identify and remediate vulnerabilities before they can be exploited.
• Data Breach Response: ph22app maintains a formal data breach response plan. In the event of a personal data breach that is likely to result in harm to affected players, ph22app will notify the National Privacy Commission and affected players within the timeframes prescribed by the Data Privacy Act and its implementing rules.
• Staff Training: All ph22app personnel who handle personal data receive regular training on data privacy obligations, security best practices, and the requirements of RA 10173.

ph22app uses cookies and similar tracking technologies to operate the platform, enhance your experience, and gather analytics data. A cookie is a small text file stored on your device when you visit a website.

You may manage your cookie preferences through your browser settings at any time. Note that disabling essential cookies will affect your ability to log in and use the ph22app platform. ph22app does not use cookies for cross-site behavioural advertising without your explicit consent.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph22app:

• Right to Be Informed: You have the right to be informed about how ph22app collects, uses, and processes your personal data. This Privacy Policy fulfils that obligation.
• Right to Access: You may request a copy of all personal data ph22app holds about you. ph22app will respond to verified access requests within fifteen (15) working days.
• Right to Rectification: If any personal data ph22app holds about you is inaccurate or incomplete, you have the right to request correction. You may update certain information (such as your email address and contact number) directly through your ph22app account settings.
• Right to Erasure (Right to Be Forgotten): You may request the deletion of your personal data where ph22app no longer has a lawful basis for retaining it. Note that some data may be retained as required by PAGCOR regulations and Philippine law even after account closure.
• Right to Object: You have the right to object to ph22app processing your personal data for direct marketing purposes or on the basis of legitimate interests. Objections to marketing can be actioned via your account communication preferences.
• Right to Data Portability: Where technically feasible and where processing is based on consent or contract, you may request a copy of your personal data in a structured, machine-readable format.
• Right to Lodge a Complaint: If you believe ph22app has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (www.privacy.gov.ph).

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 12. ph22app may require you to verify your identity before processing a data subject request to protect against fraudulent access to your records.

ph22app is strictly an adults-only platform. In compliance with PAGCOR regulations, ph22app requires all players to be at least twenty-one (21) years of age. We do not knowingly collect personal data from any person under the age of 21.

• Age verification is conducted during the account registration process and as part of the KYC documentation review.
• Where ph22app discovers or has reason to believe that a registered account is operated by a person under 21 years of age, that account will be immediately suspended, all balances will be returned to the verified payment source, and the account will be permanently closed.
• Personal data collected from an account subsequently found to belong to a minor will be securely deleted, except where retention is required to fulfil legal obligations such as reporting to PAGCOR.

ph22app reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or PAGCOR regulatory obligations. When material changes are made to this policy, ph22app will:

• Update the "Last Updated" date displayed at the top of this page.
• Notify registered players via email and/or a notification within the ph22app platform.
• Where required by law, seek fresh consent from affected players before implementing changes that alter the basis on which we process their personal data.

Your continued use of ph22app following the publication of a revised Privacy Policy constitutes your acknowledgement of the updated policy. If you do not agree with any changes made to this Privacy Policy, you should discontinue use of ph22app and may close your account in accordance with the Terms and Conditions.

ph22app has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012 and its implementing rules. If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact our DPO:

For complaints that cannot be resolved directly with ph22app, you may escalate your concern to the National Privacy Commission of the Philippines. For responsible gaming matters, please visit our Responsible Gaming page. For full platform terms, visit our Terms & Conditions page.