This Privacy Policy ("Policy") explains how p22ph ("we", "us", "our") collects, processes, stores, and protects the personal data of players and visitors ("you", "your") in connection with your use of the p22ph website and gaming platform at p22ph.best. This Policy is effective from 15 June 2025 and supersedes all previous privacy notices. By using p22ph, you acknowledge that you have read and understood this Policy.
Introduction
p22ph is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is the foundation of any relationship, and we take our obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) seriously. This Policy is not legal boilerplate that nobody reads — it's a genuine explanation of what we do with your information and why.
As a PAGCOR-licensed online gaming operator serving players across the Philippines, p22ph is required to collect certain personal and financial information for identity verification, fraud prevention, anti-money laundering compliance, and regulatory reporting. This Policy explains all of that in plain language, covers what we collect voluntarily versus what is mandated, and tells you clearly what rights you have over your own data.
If you have questions about anything in this Policy that isn't clear, our support team is available 24/7 in English and Tagalog and will always be happy to explain. Walang tinatago si p22ph pagdating sa inyong personal na data.
Data Controller
For the purposes of the Philippine Data Privacy Act of 2012, p22ph is the Personal Information Controller responsible for the personal data collected through this platform. This means p22ph determines the purposes and means of processing your personal data and is accountable for its proper handling.
p22ph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Policy. The DPO can be contacted through the support contact details provided in Section 14 of this Policy. Any formal data privacy concerns or complaints may also be escalated to the National Privacy Commission (NPC) of the Philippines.
p22ph — Protecting Filipino player data from Tagaytay to every corner of the Philippines
Personal Data We Collect
p22ph collects different categories of personal data depending on how you interact with the platform. Here is a clear breakdown:
| Category | Data Collected | Required? |
|---|---|---|
| Registration Data | Full legal name, date of birth, email address, Philippine mobile number, residential address | Required |
| Identity Verification (KYC) | Government-issued ID (type, number, expiry), selfie photo, proof of payment method ownership | Required for withdrawal |
| Financial Data | GCash/Maya account details (name & number only), bank account details (name & number), transaction history | Required |
| Gaming Activity | Bet history, game session logs, win/loss records, bonus usage, VIP Club activity | Automatic |
| Technical Data | IP address, device type, browser type, operating system, session timestamps, cookies | Automatic |
| Communications Data | Support chat and email records, survey responses, promotional opt-in preferences | Where applicable |
p22ph does not collect sensitive personal information as defined under RA 10173 (such as health data, political affiliations, or biometric data beyond standard photo ID) except where specifically required for regulatory compliance. We do not collect credit card numbers in full — card transactions are handled by certified payment processors and p22ph receives only a tokenised reference.
How We Collect Your Data
p22ph collects your personal data through the following means:
- Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in promotions on p22ph.
- Automatically through the platform: Technical and gaming activity data is collected automatically when you log in and interact with any part of the p22ph platform — including browsing the lobby, placing bets, and joining live casino tables.
- From third-party service providers: Identity verification services, payment processors, and fraud prevention providers may share data with p22ph as part of the verification and transaction process.
- Cookies and similar technologies: As described in Section 10, p22ph uses cookies and similar tracking technologies to support platform functionality and security.
p22ph will never ask you to provide your complete password, credit card PIN, or GCash MPIN through any communication channel. If you receive a message claiming to be from p22ph and asking for this information, treat it as fraudulent and contact our support team immediately.
Why We Use Your Data
p22ph uses your personal data only for defined, legitimate purposes. Here is a full list of how your data is used on the platform:
- Account management: Creating, maintaining, and securing your p22ph player account.
- Identity verification (KYC): Confirming your identity and age before releasing withdrawals, in compliance with PAGCOR requirements and Philippine anti-money laundering laws (RA 9160, as amended).
- Payment processing: Facilitating deposits and withdrawal transactions through your chosen Philippine payment methods.
- Fraud prevention and security: Detecting and preventing unauthorised access, duplicate accounts, bonus abuse, money laundering, and other prohibited activities.
- Regulatory compliance: Meeting p22ph's obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act (AMLA), and the Philippine Data Privacy Act.
- Platform improvement: Analysing anonymised usage patterns and game performance data to improve the p22ph experience for Filipino players.
- Customer support: Responding to your enquiries, resolving disputes, and providing assistance in English and Tagalog.
- Responsible gaming: Monitoring gaming activity to identify patterns consistent with problem gambling and reaching out to players who may benefit from responsible gaming tools.
- Promotions and communications: Sending you relevant bonus offers, platform updates, and promotions where you have opted in to receive these. You can withdraw this consent at any time.
- VIP Club management: Tracking qualifying activity for VIP tier upgrades, cashback calculations, and reward delivery.
p22ph — Trusted by Filipino players from Intramuros to every region in the Philippines, with privacy protection built in
Legal Basis for Processing
Under the Philippine Data Privacy Act, p22ph processes your personal data on the following legal grounds:
- Contractual necessity: Processing your registration data, payment information, and gaming activity is necessary to provide the p22ph service under our Terms and Conditions — the contract between you and p22ph.
- Legal obligation: Identity verification, transaction monitoring, and regulatory reporting are required by PAGCOR licensing conditions, the AMLA, and other Philippine laws. p22ph cannot waive these obligations.
- Legitimate interest: Fraud prevention, platform security, and analytical improvement of the p22ph service represent legitimate interests that do not override your data protection rights.
- Consent: Where p22ph processes data for marketing communications or non-essential cookies, this is based on your explicit consent, which you can withdraw at any time through your account settings or by contacting support.
Sharing Your Data With Third Parties
p22ph does not sell, rent, or share your personal data with third parties for their own marketing or commercial purposes. We share your data only in the following defined circumstances:
- Payment processors: GCash, Maya, banking partners, and card processing services receive only the transactional data necessary to process your deposit or withdrawal. They are not permitted to use your data for any other purpose.
- KYC and identity verification providers: Third-party identity verification services receive your submitted ID documents and photo for the purpose of completing your verification. All such providers are bound by confidentiality and data protection obligations.
- Live casino game providers: Providers such as Evolution Gaming, Pragmatic Play, and SA Gaming receive your game session data in the normal course of providing live casino services. These are licensed operators operating under their own applicable privacy frameworks.
- PAGCOR and regulatory authorities: p22ph is required to provide transaction reports, player data, and other records to PAGCOR and, where applicable, to the Anti-Money Laundering Council (AMLC) under Philippine law. These disclosures are made only as legally required.
- Fraud prevention services: Technical and transactional data may be shared with fraud prevention platforms to detect and prevent fraudulent activity on p22ph.
- Professional advisors: Legal, accounting, and auditing professionals may access data under confidentiality obligations in the course of providing professional services to p22ph.
Any service provider that receives personal data from p22ph is required to process it only for the stated purpose, under confidentiality obligations, and in compliance with applicable data protection laws. p22ph remains responsible for ensuring appropriate data protection standards apply to all such engagements.
Data Security
Protecting your personal data is a core operational responsibility at p22ph. We implement multiple layers of technical and organisational security measures to guard against unauthorised access, loss, alteration, or destruction of your data:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the p22ph platform
- Encrypted storage of all sensitive personal and financial data in p22ph's database systems
- Multi-factor authentication available for player account login
- Role-based access controls limiting internal staff access to personal data on a need-to-know basis
- Continuous monitoring of platform systems for unauthorised access attempts and anomalous activity
- Regular security audits of platform infrastructure and third-party integrations
- Staff training on data protection obligations and incident response procedures
In the event of a data breach that poses a risk to your rights and interests as a data subject, p22ph will notify you and the National Privacy Commission (NPC) within the timeframes required by the Philippine Data Privacy Act and its Implementing Rules and Regulations.
While p22ph takes all reasonable precautions to protect your data, no digital platform can guarantee absolute security. You can strengthen your own account security by using a strong, unique password and enabling two-factor authentication in your p22ph account settings.
Data Retention
p22ph retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by Philippine law and PAGCOR regulations. The following retention periods apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & registration data | Duration of account + 7 years after closure | PAGCOR & AMLA compliance |
| KYC / identity documents | Duration of account + 7 years after closure | AMLA requirement |
| Transaction records | 7 years from transaction date | AMLA & tax obligations |
| Gaming activity logs | 3 years from session date | PAGCOR regulatory records |
| Support communications | 2 years from last contact | Dispute resolution |
| Technical / session logs | 90 days | Security monitoring |
| Marketing consent records | Until consent withdrawn + 1 year | Consent evidence |
After these retention periods expire, p22ph will securely delete or anonymise your personal data so that it can no longer be linked to you as an individual. Where data is anonymised rather than deleted, it may be used for aggregated statistical analysis without any privacy impact.
p22ph — Secure mobile gaming with full data protection for Filipino players in Puerto Princesa and across the archipelago
Cookies and Tracking Technologies
p22ph uses cookies — small text files stored on your device by your browser — and similar tracking technologies to operate the platform effectively. Here is a breakdown of how cookies are used on p22ph:
- Essential cookies: Required for core platform functionality including your login session, security token maintenance, and game state preservation. These cannot be disabled without affecting your ability to use p22ph.
- Functional cookies: Remember your preferences such as language settings, preferred payment method, and game lobby filters between sessions.
- Analytical cookies: Help p22ph understand how players navigate and use the platform so we can improve the experience. Data collected is aggregated and anonymised — it does not identify individual players.
- Security cookies: Used to detect and prevent fraudulent login attempts, detect unusual activity patterns, and protect your account from unauthorised access.
p22ph does not use advertising cookies, third-party marketing trackers, or cross-site tracking technologies. You will not see p22ph's advertising following you across the web as a result of visiting our platform.
You can manage cookie preferences through your browser settings. Note that disabling essential cookies will prevent you from logging in or playing on p22ph. For standard analytical cookies, you can opt out without affecting your ability to play.
Your Data Rights as a Filipino Player
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by p22ph. These rights are real and enforceable — contact our support team or DPO to exercise any of them:
Request a copy of all personal data p22ph holds about you, along with information about how it is being processed.
Request correction of any inaccurate, incomplete, or outdated personal data held by p22ph about you.
Request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for specific purposes, including direct marketing communications. Your objection will be respected promptly.
Request your personal data in a structured, commonly used, machine-readable format for transfer to another controller where technically feasible.
Request that p22ph restricts the processing of your data in specific circumstances, such as while a correction request is being verified.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe p22ph has violated your data privacy rights.
Claim compensation from p22ph for damages suffered as a result of a violation of your data protection rights under RA 10173.
To exercise any of these rights, contact the p22ph Data Protection Officer via the details in Section 14. We will respond to verified data subject requests within 30 days of receipt. Complex requests may take up to 60 days — we will notify you of any extension within the initial 30-day period.
Children's Privacy
p22ph's gaming services are strictly for individuals aged 21 years and older. p22ph does not knowingly collect or process personal data from persons under the age of 21. If p22ph discovers that an account has been created by or on behalf of an underage individual, that account will be immediately closed and any personal data associated with it will be deleted, subject only to any statutory retention obligations arising from the account's activity.
If you are a parent or guardian and believe that your child has registered on p22ph, please contact our support team immediately at support@p22ph.best. We will investigate and take appropriate action promptly.
Policy Updates
p22ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform functionality. When we make significant changes, we will notify registered players via email and/or on-platform notification at least 7 days before the changes take effect. Minor clarifications may be updated without advance notice.
The effective date at the top of this Policy reflects when the current version was last updated. We recommend reviewing this Policy periodically to stay informed about how p22ph protects your data. Continued use of p22ph after a Policy update takes effect constitutes acceptance of the updated Policy.
Contact Us — Data Privacy Questions
For any questions, concerns, or requests related to this Privacy Policy or your personal data held by p22ph, please contact us through the following channels:
- Email (General Support): support@p22ph.best — available 24/7 in English and Tagalog
- Email (Data Privacy Officer): dpo@p22ph.best — for formal data subject requests and privacy complaints
If you are not satisfied with p22ph's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information about the NPC complaint process is available on the NPC's official website.
Our Data Protection Officer reviews all formal data privacy requests personally and will provide a substantive written response within 30 days. We're here to help — no concern about your data is too small to raise with us. Ang inyong privacy ay importante sa amin.