Privacy Policy – 22php Casino

1. Overview and Data Controller

22php Casino ("22php," "we," "us," or "our") operates as the data controller for all personal information collected through the 22php platform. We are committed to processing your personal data lawfully, fairly, and transparently in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Privacy Policy describes the types of personal data we collect from users ("you," "your") of the 22php Casino website and services, the purposes for which we process that data, the parties with whom we may share it, and the rights available to you as a data subject under Philippine law.

If you have any questions about how 22php handles your personal data, please contact our Data Protection Officer using the details provided in Section 13 of this Policy.

2. Personal Data We Collect

When you register for and use a 22php account, we collect the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued identification number (e.g., Philippine National ID, passport, driver's license, SSS/GSIS number).
• Contact Data: Email address, mobile number, and residential address (including city, province, and postal code within the Philippines).
• Financial Data: GCash account details, Maya/PayMaya account details, bank account information (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), debit card details, transaction history, deposit and withdrawal records.
• Account Data: Username, encrypted password, account preferences, bonus history, and gaming activity records.
• Technical Data: IP address, browser type and version, device identifiers, operating system, time zone, and access logs.
• Usage Data: Pages visited, games played, session duration, click-through data, and in-platform behavior analytics.
• Communications Data: Records of your correspondence with 22php support, including chat logs and email exchanges.

3. How We Collect Your Data

22php collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification (KYC), making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Cookies, web beacons, server logs, and similar tracking technologies that collect technical and usage data as you navigate the 22php platform.
• Third-party sources: Identity verification providers, payment processors, fraud prevention services, and publicly available sources, where permitted by law.

4. Purposes of Processing

22php processes your personal data for the following purposes:

• To create, manage, and maintain your 22php account
• To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations
• To process deposits, withdrawals, and other financial transactions
• To detect, prevent, and investigate fraud, money laundering, and other illegal activities
• To comply with anti-money laundering (AML) and know-your-customer (KYC) obligations
• To provide customer support and respond to your inquiries
• To send you service-related communications, including account notifications and security alerts
• To send promotional communications about 22php offers and bonuses (where you have consented)
• To improve the 22php platform through analytics and user experience research
• To enforce our Terms & Conditions and other applicable policies
• To comply with applicable Philippine laws and regulatory requirements

5. Legal Basis for Processing

22php processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the 22php Terms & Conditions, including account management and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6. Data Sharing and Disclosure

22php does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, Maya, and partner banks, for the purpose of processing your financial transactions.
• Identity verification providers: Third-party KYC service providers engaged to verify your identity and age.
• Fraud prevention services: Providers of anti-fraud and AML screening tools.
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers operating under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or court order.
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers engaged by 22php are contractually required to process your personal data only for the specified purpose and in accordance with applicable data protection laws.

7. Data Retention

22php retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements. Specifically:

• Account data is retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction.
• Communications data is retained for a minimum of two (2) years from the date of the communication.
• Technical and usage data collected via cookies is retained in accordance with our Cookie Policy (see Section 9).

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with 22php's data disposal procedures.

8. Security Measures

22php implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 22php platform
• Encrypted storage of sensitive personal and financial data at rest
• Multi-factor authentication options for account access
• Regular security audits and penetration testing
• Strict access controls limiting employee access to personal data on a need-to-know basis
• Incident response procedures for detecting and responding to data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 22php will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the requirements of the Data Privacy Act of 2012.

9. Cookies and Tracking Technologies

22php uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. The types of cookies we use include:

• Strictly necessary cookies: Essential for the operation of the 22php platform, including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences and settings to provide a personalized experience.
• Analytics cookies: Collect anonymized data about how users interact with the 22php platform to help us improve our services.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 22php platform.

10. Your Data Subject Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 22php:

• Right to be informed: The right to know how your personal data is being collected and processed.
• Right of access: The right to obtain a copy of your personal data held by 22php.
• Right to rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to erasure: The right to request deletion of your personal data, subject to applicable legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact 22php's Data Protection Officer using the contact details in Section 13. We will respond to all verified requests within thirty (30) days.

11. Minors and Age Restriction

The 22php Casino platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. 22php does not knowingly collect personal data from individuals under the age of 21.

If 22php becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 22php platform, please contact us immediately at the details provided in Section 13.

12. Changes to This Privacy Policy

22php reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, we will notify registered users via email or a prominent notice on the 22php platform prior to the changes taking effect.

The "Effective Date" at the top of this Policy indicates when the current version was last updated. Your continued use of the 22php platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 22php Casino, please contact our Data Protection Officer:

Data Protection Officer – 22php Casino

Email: [email protected]

We are available 24 hours a day, 7 days a week. All data privacy inquiries and requests will be acknowledged promptly and handled in accordance with the Data Privacy Act of 2012 and its Implementing Rules and Regulations.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with our response to your data privacy concern.