Contents
- 1. Introduction
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Data Sharing & Disclosure
- 6. Cookies & Tracking
- 7. Data Security
- 8. Data Retention
- 9. Your Privacy Rights
- 10. Marketing Communications
- 11. Children's Privacy
- 12. International Transfers
- 13. Changes to This Policy
- 14. Contact & Data Officer
1. Introduction
22php ("we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy describes how we collect, use, disclose, and safeguard your data when you visit our website at https://22php.cam, register an account, or use our online casino and sports betting services.
This Privacy Policy applies to all Filipino players and users of the 22php platform. By creating an account or using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.
2. Data We Collect
22php collects and processes the following categories of personal information:
2.1 Information You Provide Directly
- Registration Data: Full legal name, date of birth, email address, mobile phone number, username, and password.
- Identity Verification Documents: Government-issued identification such as Philippine passport, driver's license, SSS ID, UMID, or other valid IDs; proof of address; selfie photos for verification purposes.
- Payment Information: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank, etc.), credit/debit card details, cryptocurrency wallet addresses.
- Transaction History: Records of all deposits, withdrawals, wagers, wins, losses, and bonus activity on your 22php account.
- Communications: Content of your communications with our customer support team via live chat, email, or other channels.
2.2 Information Collected Automatically
- Device Information: IP address, device type, operating system, browser type and version, screen resolution, device identifiers.
- Usage Data: Pages visited, games played, session duration, click patterns, referring URLs, time and date of access.
- Location Data: Approximate geographic location derived from your IP address (city/province level, not precise GPS coordinates).
- Cookies and Similar Technologies: Data collected via cookies, web beacons, and similar tracking technologies as described in Section 6.
2.3 Information from Third Parties
We may receive information about you from third-party service providers, including identity verification services, payment processors (GCash, PayMaya, banks), fraud prevention services, and PAGCOR where required by regulation.
3. How We Use Your Data
22php uses your personal information for the following purposes:
- Account Management: To create, maintain, and manage your 22php player account; to authenticate your identity when you log in.
- Service Delivery: To process deposits and withdrawals; to enable you to place wagers and participate in casino games, live dealer games, bingo, and sports betting; to credit winnings to your account.
- Verification and Compliance: To verify your age (21+), identity, and payment method ownership; to comply with PAGCOR regulations and anti-money laundering (AML) requirements; to prevent fraud, collusion, and other prohibited conduct.
- Customer Support: To respond to your inquiries, resolve technical issues, and provide assistance via live chat, email, or other support channels.
- Marketing and Promotions: To send you promotional offers, bonus notifications, newsletters, and other marketing communications (where you have opted in or as permitted by law).
- Platform Improvement: To analyze usage patterns, player behavior, and game performance to improve the 22php platform, enhance user experience, and develop new features.
- Legal Obligations: To comply with legal obligations, respond to lawful requests from PAGCOR or law enforcement, enforce our Terms and Conditions, and protect our rights and the rights of other players.
- Responsible Gaming: To monitor for signs of problem gambling behavior and to implement responsible gaming tools such as deposit limits, self-exclusion, and cool-off periods.
4. Legal Basis for Processing
Under the Data Privacy Act of 2012, 22php processes your personal data on the following legal grounds:
- Consent: You have provided explicit consent for us to process your personal data for specific purposes, such as receiving marketing communications.
- Contractual Necessity: Processing is necessary to perform our contract with you (i.e., to provide gaming services under our Terms and Conditions).
- Legal Obligation: Processing is required to comply with Philippine law, PAGCOR regulations, anti-money laundering requirements, tax obligations, or lawful requests from government authorities.
- Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, platform security, data analytics, and improving our services, provided such interests do not override your fundamental rights and freedoms.
5. Data Sharing & Disclosure
22php does not sell, rent, or lease your personal information to third parties. However, we may share your data with the following categories of recipients under specific circumstances:
5.1 Service Providers
We share data with trusted third-party service providers who perform services on our behalf, including:
- Payment processors (GCash, PayMaya, bank payment gateways, cryptocurrency payment providers)
- Identity verification and KYC service providers
- Game providers and live dealer studios
- Customer support software providers
- Cloud hosting and data storage providers
- Fraud detection and cybersecurity service providers
All service providers are contractually obligated to protect your data and use it only for the purposes we specify.
5.2 Regulatory and Legal Authorities
We may disclose your personal data to PAGCOR, the National Privacy Commission (NPC), law enforcement agencies, tax authorities, and courts of competent jurisdiction when required by Philippine law, regulation, or court order, or when necessary to prevent fraud, illegal activity, or to protect the rights and safety of 22php, our players, and the public.
5.3 Business Transfers
In the event of a merger, acquisition, reorganization, sale of assets, or similar corporate transaction involving 22php, your personal data may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Privacy Policy.
5.4 With Your Consent
We may share your data with third parties when you have provided explicit consent for us to do so.
6. Cookies & Tracking Technologies
22php uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content and promotions.
6.1 What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the website recognize your device on subsequent visits and remember your preferences.
6.2 Types of Cookies We Use
- Essential Cookies: Required for the platform to function properly. These enable you to log in, navigate the site, and use core features.
- Performance Cookies: Collect anonymous data about how you use the 22php platform, helping us identify and fix technical issues.
- Functional Cookies: Remember your preferences, such as language settings, username, and session information.
- Marketing Cookies: Track your activity across the 22php platform to deliver personalized promotional offers and measure the effectiveness of our marketing campaigns.
6.3 Managing Cookies
You can control and delete cookies through your browser settings. However, disabling essential cookies may prevent you from using certain features of the 22php platform. Most browsers allow you to block third-party cookies while still accepting first-party cookies from 22php.
7. Data Security
22php takes data security seriously and implements a range of technical and organizational measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction.
7.1 Security Measures
- SSL Encryption: All data transmitted between your device and 22php servers is encrypted using 256-bit SSL (Secure Socket Layer) technology.
- Password Hashing: Your password is stored in irreversibly hashed form using industry-standard cryptographic algorithms. 22php staff cannot view your password.
- Access Controls: Access to your personal data is restricted to authorized 22php personnel and service providers who require it to perform their duties.
- Firewall Protection: Our servers are protected by enterprise-grade firewalls and intrusion detection systems.
- Regular Audits: We conduct regular security audits and vulnerability assessments to identify and address potential security risks.
- Two-Factor Authentication: 22php supports and encourages the use of two-factor authentication (2FA) on player accounts for additional login security.
7.2 Security Breach Notification
In the event of a personal data breach that poses a risk to your rights and freedoms, 22php will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will inform affected players as soon as reasonably practicable, in accordance with the Data Privacy Act of 2012.
While we employ rigorous security measures, no method of data transmission or storage is completely impenetrable. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.
8. Data Retention
22php retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, regulatory obligations, or legitimate business needs.
- Active Accounts: Personal data associated with an active 22php account is retained for the duration of the account's existence plus a minimum of five (5) years following account closure, in compliance with AML record-keeping obligations under Philippine law.
- Transaction Records: Financial transaction records, including deposits, withdrawals, and wager history, are retained for a minimum of five (5) years from the date of each transaction.
- Identity Verification Documents: KYC documents are retained for a minimum of five (5) years following account closure or the date of the last transaction, whichever is later.
- Customer Support Records: Communications with our support team are retained for up to three (3) years to assist in resolving future disputes.
- Marketing Data: If you withdraw consent to receive marketing communications, your preferences will be updated immediately and marketing data will be suppressed, though basic account information will be retained for compliance purposes.
9. Your Privacy Rights
Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by 22php:
- Right to Be Informed: You have the right to be informed of how your personal data is collected, used, and shared, as described in this Privacy Policy.
- Right of Access: You may request a copy of the personal data we hold about you at any time, free of charge, subject to a reasonable request frequency.
- Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
- Right to Data Portability: You may request a copy of your personal data in a commonly used, structured, machine-readable format for transfer to another service provider.
- Right to Object: You have the right to object to processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
- Right to File a Complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.
To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified requests within 30 calendar days of receipt.
10. Marketing Communications
22php may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new games, tournaments, and other offers when you have opted in to receive such communications at registration or through your account settings.
You may withdraw your consent to receive marketing communications at any time by:
- Clicking the unsubscribe link included in any promotional email we send you.
- Updating your communication preferences in the Notification Settings section of your 22php account.
- Contacting our customer support team and requesting removal from marketing communications.
Please note that even if you opt out of marketing communications, we will still send you essential transactional messages related to your account, such as deposit confirmations, withdrawal notifications, identity verification requests, and security alerts. These communications are necessary for the operation of your 22php account and cannot be opted out of while your account remains active.
11. Children's and Minors' Privacy
If we become aware that personal data has been provided by or collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. All deposits associated with an underage account will be returned to the payment source after deducting any wagering activity, pending legal review.
Parents and guardians who believe a minor has registered on the 22php platform are strongly encouraged to contact our support team immediately at [email protected] so we can investigate and take appropriate action without delay.
12. International Data Transfers
22php primarily processes and stores your personal data within the Philippines. However, some of our third-party service providers — including cloud hosting providers, game studios, and payment processors — may be located in other countries. When your personal data is transferred internationally, 22php ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012.
Such safeguards may include contractual data protection clauses, adequacy assessments of the recipient country's data protection framework, and binding agreements requiring third parties to process your data only in accordance with our instructions and this Privacy Policy.
13. Changes to This Privacy Policy
22php may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. We will notify registered players of material changes via email or a prominent notice on the 22php platform at least 14 days before the updated policy takes effect.
The "Effective Date" at the top of this Privacy Policy indicates when the most recent version was last updated. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.
Your continued use of the 22php platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any material change to this Privacy Policy, you must discontinue use of the platform and contact us to close your account.
14. Contact & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or the way 22php handles your personal information, please reach out to our Data Protection Officer:
Data Protection Officer — 22php
Email: [email protected]
Live Chat: Available 24/7 via your 22php account dashboard.
We serve Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and the rest of the Philippines. All privacy inquiries will be acknowledged within 3 business days and resolved within 30 calendar days of receipt.
If you are not satisfied with our response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.