Privacy Policy of p22ph Online Casino

1. Introduction and Scope

p22ph takes the privacy and security of your personal data seriously. This Privacy Policy applies to all personal information collected through the p22ph website, mobile applications, customer support channels, and any other services offered by the platform.

By registering for and using the p22ph platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any provision of this Policy, you should discontinue use of the platform immediately.

This Policy is incorporated by reference into our Terms & Conditions and forms part of the binding agreement between you and p22ph.

2. Personal Data We Collect

2.1 Registration and Account Data

When you register an account on p22ph, we collect the following personal information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — you must be 21 or older);
• Email address and mobile phone number;
• Residential address (city, province, and ZIP code in the Philippines);
• Chosen username and account credentials (passwords are stored in hashed, non-reversible format).

2.2 Identity Verification (KYC) Data

In compliance with anti-money laundering regulations and PAGCOR-aligned operating standards, we collect the following identity verification documents:

• Copies of government-issued photo identification (Philippine National ID, UMID, Driver's License, Passport, SSS/GSIS ID, Voter's ID, or PRC ID);
• Proof of billing address (utility bill, bank statement, or barangay certificate);
• Live selfie or selfie with ID photograph for biometric matching purposes.

2.3 Financial and Transaction Data

We collect financial information necessary to process deposits and withdrawals, including:

• GCash mobile number and account name;
• Maya account details;
• Bank account name, number, and bank branch (for bank transfer transactions);
• Transaction history, deposit amounts, withdrawal amounts, and timestamps;
• Payment method preferences.

p22ph does not store complete credit or debit card numbers. Payment processing is handled by certified third-party payment processors, and only tokenized references are retained on our systems.

2.4 Gaming Activity Data

As part of our service delivery, responsible gaming obligations, and platform integrity monitoring, we collect:

• Game history (games played, bets placed, outcomes, session durations);
• Sports betting history (events wagered on, bet amounts, odds accepted, outcomes);
• Bonus and promotion usage history;
• Responsible gaming settings, including any deposit limits or self-exclusion requests you have set.

2.5 Technical and Device Data

When you access the p22ph platform, we automatically collect the following technical data:

• IP address and approximate geographic location (city/region level);
• Device type, operating system, and browser version;
• Session timestamps, login history, and access logs;
• Referring URLs and navigation paths within the platform.

2.6 Communications Data

When you contact our Customer Support team, submit feedback, or participate in surveys or promotions, we retain:

• Content of your messages, emails, and live chat transcripts;
• Support ticket history and resolutions;
• Records of any complaints or dispute submissions.

3. How We Collect Your Data

p22ph collects personal data through the following means:

• Directly from you — through account registration forms, KYC submission portals, deposit and withdrawal requests, customer support interactions, and voluntary surveys;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access the platform;
• From third parties — from payment processors (GCash, Maya, BPI, BDO) for transaction verification; from identity verification service providers during KYC processing; and from fraud detection partners for platform security purposes.

4. How We Use Your Personal Data

p22ph processes your personal data for the following purposes:

4.1 Service Delivery

• Creating and maintaining your account;
• Processing deposits and withdrawals via GCash, Maya, BPI, BDO, and other supported payment methods in Philippine Peso;
• Delivering gaming services, sports betting, and promotional offers;
• Responding to customer support inquiries and resolving disputes.

4.2 Legal and Regulatory Compliance

• Verifying your identity and age (21+ requirement) as required under PAGCOR-aligned standards;
• Complying with Anti-Money Laundering (AML) obligations under the AMLA (Republic Act No. 9160, as amended);
• Responding to lawful requests from Philippine government authorities and regulatory bodies;
• Maintaining records as required by applicable Philippine law.

4.3 Platform Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent activity, collusion, and bonus abuse;
• Monitoring for suspicious transaction patterns as part of AML compliance;
• Enforcing the one-account-per-person policy and detecting duplicate registrations.

4.4 Responsible Gaming

• Monitoring gaming activity for signs of problem gambling behavior;
• Applying self-imposed deposit limits, session limits, and self-exclusion settings;
• Reaching out to players who may benefit from responsible gaming resources.

4.5 Marketing and Communications

With your consent, we may use your contact information to send you promotional offers, bonus notifications, and updates about p22ph services. You may withdraw this consent at any time by contacting support or updating your account preferences.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, p22ph processes your personal data based on one or more of the following lawful grounds:

• Consent — you have given clear consent for processing for one or more specific purposes (e.g., marketing communications);
• Contractual necessity — processing is necessary to fulfill our obligations under the Terms & Conditions agreement with you;
• Legal obligation — processing is necessary to comply with applicable Philippine law, including AML regulations and tax reporting obligations;
• Legitimate interests — processing is necessary for our legitimate interests in preventing fraud, maintaining platform security, and improving our services, where those interests are not overridden by your rights and freedoms.

6. Disclosure and Sharing of Personal Data

p22ph does not sell your personal data to any third party. We disclose your data only in the following circumstances:

6.1 Service Providers and Data Processors

We share data with trusted third-party service providers who process data on our behalf, under contractual obligations to maintain equivalent privacy protections. These include:

• Payment processors (GCash, Maya, BPI, BDO, Metrobank, and CLiQQ);
• Identity verification and KYC solution providers;
• Cloud hosting and server infrastructure providers;
• Fraud detection and cybersecurity vendors;
• Customer support platform providers.

6.2 Regulatory and Legal Disclosure

We may disclose your personal data to government authorities, law enforcement agencies, or regulatory bodies (including PAGCOR, the AMLC, and the NPC) when required by law, court order, or regulatory directive.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your personal data may be transferred to the successor entity. You will be notified of any such transfer and the applicable privacy protections.

7. Data Retention

p22ph retains your personal data for as long as necessary to fulfill the purposes described in this Policy or as required by applicable law. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by AML regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity logs: Retained for two (2) years from the date of the activity;
• Customer support records: Retained for two (2) years from the date of the interaction;
• Marketing consent records: Retained until consent is withdrawn or the account is closed, plus one (1) additional year.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with the NPC's guidelines on data disposal.

8. Security Measures

p22ph implements technical and organizational security measures appropriate to the sensitivity of the personal data we process. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• AES-256 encryption for personal data stored in our databases;
• Access controls — personal data is accessible only to authorized personnel on a strict need-to-know basis;
• Two-factor authentication (2FA) options for player accounts;
• Regular security audits and penetration testing;
• Intrusion detection systems and 24/7 security monitoring;
• Secure data disposal procedures for decommissioned storage media.

9. Cookies and Tracking Technologies

9.1 What We Use

The p22ph platform uses the following types of cookies and tracking technologies:

• Essential cookies: Required for platform functionality, session management, and security. These cannot be disabled without impacting the core service;
• Analytics cookies: Used to understand how players navigate and interact with the platform, helping us improve user experience;
• Preference cookies: Store your language, display preferences, and responsible gaming settings;
• Security cookies: Used to detect and prevent fraudulent activity and unauthorized access.

9.2 Managing Cookies

You can manage cookie preferences through your browser settings. Please note that disabling essential cookies may impair the functionality of the p22ph platform, including your ability to log in or place bets.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by p22ph:

• Right to be Informed — to be notified of the nature and extent of personal data processing before it occurs;
• Right to Access — to obtain a copy of the personal data we hold about you;
• Right to Rectification — to request correction of inaccurate or incomplete personal data;
• Right to Erasure — to request deletion of your personal data where there is no longer a lawful basis for processing (subject to legal retention obligations);
• Right to Object — to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to Data Portability — to receive your personal data in a structured, commonly used format and, where technically feasible, to have it transmitted to another controller;
• Right to Lodge a Complaint — to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of the rights above, please contact our Data Protection Officer (DPO) at the details provided in Section 13 of this Policy. We will respond to all verified requests within fifteen (15) business days.

11. Minors and Age Restrictions

The p22ph platform is strictly intended for individuals aged 21 years and older in accordance with the age restrictions applicable under PAGCOR-aligned responsible gaming standards. We do not knowingly collect personal data from persons under the age of 21.

If we discover that personal data has been collected from a minor, we will immediately close the associated account and permanently delete the data. If you are a parent or guardian and believe your child has registered on our platform, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

p22ph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, applicable law, or the services we offer. Material changes will be communicated to registered players via email notification or through a prominent notice on the platform prior to the changes taking effect.

The most current version of this Privacy Policy is always available at p22ph.cam/privacy-policy. Continued use of the platform following the effective date of any revised Policy constitutes your acceptance of the updated terms.

13. Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Privacy / DPO Inquiry
• Support Hours: Monday to Sunday, 8:00 AM – 11:00 PM PHT
• Response Time: Within 15 business days for formal data subject requests

You also have the right to escalate concerns to the National Privacy Commission (NPC) of the Republic of the Philippines if you believe your data privacy rights have been violated. The NPC may be reached through official government channels.