ph22277 Privacy
Policy

1. Introduction

ph22277 ("we", "us", "our") is a PAGCOR-regulated online gaming platform accessible at https://ph22277.net, serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and the wider Philippines. We are committed to protecting the privacy and personal data of every registered player and site visitor in accordance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR) as enforced by the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data. It also explains the rights afforded to you as a data subject under Philippine law and how you may exercise those rights. We encourage you to read this document carefully. If you have any questions, you may contact our Data Protection Officer (DPO) using the details provided in Section 13 of this Policy.

This Privacy Policy is incorporated by reference into the ph22277 Terms and Conditions. In the event of any conflict between this Privacy Policy and the Terms and Conditions on matters relating to personal data, this Privacy Policy shall prevail.

2. Personal Data We Collect

ph22277 collects personal data in several ways: directly from you when you register, verify your identity, make a deposit or withdrawal, contact support, or use the platform; automatically through your device and browser when you access the site; and from third-party sources such as payment processors and identity verification service providers.

2.1 Registration Data

When you create a ph22277 account, we collect your full legal name, date of birth, residential address in the Philippines, email address, and mobile number. This information is required to verify your eligibility, including the 21+ age requirement mandated by PAGCOR for online casino-style gaming.

2.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and the Philippine Anti-Money Laundering Act (R.A. 9160, as amended), ph22277 conducts Know Your Customer (KYC) verification. This requires submission of a government-issued photo ID (such as a Philippine passport, SSS card, PhilHealth card, UMID, or driver's licence), a selfie or live photo for liveness detection, and proof of address (such as a utility bill or bank statement not older than three months). For enhanced due diligence at higher transaction thresholds, we may request additional documentation including proof of source of funds.

2.3 Financial and Transaction Data

ph22277 records all deposit and withdrawal transactions associated with your account, including the payment method used (e.g., GCash, PayMaya, BPI, BDO, Metrobank, UnionBank), transaction amounts in Philippine Peso (₱), transaction timestamps, and reference numbers. We do not store full bank account numbers or GCash PINs — payment credentials are handled by our certified payment processor partners.

2.4 Gaming Activity Data

We collect records of your gaming activity on ph22277, including games played, wager amounts, game outcomes, session durations, bonus usage, and responsible gaming tool settings. This data is used for account management, player protection, regulatory reporting, and personalisation of your gaming experience.

2.5 Technical and Device Data

When you access ph22277, we automatically collect certain technical data including your IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited, and session timestamps. This data is used for platform security, fraud detection, and analytics.

2.6 Communications Data

If you contact ph22277 customer support via live chat, email, or any other channel, we retain records of those communications, including the content of messages, timestamps, and any attachments provided, for quality assurance, dispute resolution, and regulatory record-keeping purposes.

3. How We Use Your Personal Data

ph22277 processes your personal data for the following specific purposes:

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, ph22277 processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and ph22277 — specifically, to operate your account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with PAGCOR licensing obligations, the Anti-Money Laundering Act, the Data Privacy Act itself, and other applicable Philippine statutes and regulations.
• Legitimate Interests: Processing is necessary for ph22277's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your rights and freedoms as a data subject.
• Consent: Where required by the DPA — particularly for optional marketing communications and certain cookie categories — ph22277 will request your explicit consent, which you may withdraw at any time without affecting the lawfulness of prior processing.

5. Sharing Your Personal Data

ph22277 does not sell or rent your personal data to any third party. We share personal data only in the following limited circumstances:

5.1 Service Providers and Processors

We engage carefully selected third-party service providers who process personal data on our behalf, including: payment processors (GCash/Mynt, PayMaya/Voyager Innovations, BPI, BDO, Metrobank, UnionBank); identity verification and KYC service providers; cloud hosting and infrastructure providers; and customer support platform operators. All processors are bound by data processing agreements requiring them to handle your data only on our instructions and in compliance with Philippine data protection law.

5.2 Game Providers

Certified game providers — including JILI, Pragmatic Play, PG Soft, Evolution Gaming, Habanero, and Spadegaming — may receive limited technical data necessary to deliver their game content, such as a pseudonymous player session identifier. Game providers are contractually prohibited from using this data for any purpose other than delivering the contracted game service.

5.3 Regulatory and Law Enforcement Authorities

ph22277 is required by law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities when required by valid legal process, regulatory directive, or court order. We will notify you of such disclosures where permitted by law.

5.4 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of the ph22277 business, your personal data may be transferred to the successor entity. We will notify you prior to your personal data becoming subject to a materially different Privacy Policy as a result of such a transfer.

6. Cookies and Tracking Technologies

ph22277 uses cookies and similar tracking technologies to operate the platform, enhance your experience, and analyse site performance. A cookie is a small text file stored on your device when you visit our website.

You may manage your cookie preferences through the cookie settings panel accessible via the footer of the ph22277 website. Note that disabling optional cookies may affect certain non-essential features of the platform. You may also manage cookies directly through your browser settings, though this may impact your overall browsing experience.

7. Data Retention

ph22277 retains your personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account Data: Retained for the duration of your active account plus five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the AMLA retention mandate.
• KYC and Identity Documents: Retained for five (5) years from the date of submission or the date of last transaction, whichever is later, as required by the AMLA implementing rules.
• Financial Transaction Records: Retained for five (5) years from the date of each transaction, as mandated by AMLA and PAGCOR regulations.
• Gaming Activity Logs: Retained for two (2) years from the date of each gaming session for responsible gaming monitoring and dispute resolution purposes.
• Support Communications: Retained for two (2) years from the date of each interaction for quality assurance and dispute resolution.
• Marketing Consent Records: Retained for the duration of your opt-in consent plus one (1) year following withdrawal of consent, as evidence of lawful marketing communication.
• Technical/Device Logs: Retained for ninety (90) days on a rolling basis, unless flagged for a security investigation.

Where retention beyond these periods is required by a court order, regulatory directive, or ongoing investigation, ph22277 will retain the relevant data until that requirement is satisfied and will note the extended retention in its ROPA.

8. Security Measures

ph22277 implements a layered set of technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• Encryption in Transit: All data exchanged between your device and ph22277 servers is encrypted using TLS 1.2 or higher.
• Encryption at Rest: Sensitive personal data stored in our databases is encrypted at rest using AES-256 or equivalent.
• Password Security: Account passwords are never stored in plain text. ph22277 uses a strong one-way hashing algorithm with per-user salt to store credentials.
• Access Controls: Access to personal data within ph22277 is restricted on a strict need-to-know basis. Internal staff access is logged, monitored, and reviewed regularly.
• Two-Factor Authentication: ph22277 supports and encourages the use of OTP-based two-factor authentication for player accounts.
• Penetration Testing: Our platform undergoes regular third-party penetration testing and vulnerability assessments.
• Incident Response: ph22277 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in harm to affected individuals, ph22277 will notify the National Privacy Commission within 72 hours of discovery, and affected players within a reasonable time thereafter, as required by NPC Circular 16-03.

While ph22277 takes all reasonable steps to protect your personal data, no internet transmission or electronic storage system is completely secure. You are also responsible for maintaining the security of your own account credentials.

9. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph22277:

• Right to Be Informed: You have the right to know what personal data ph22277 collects about you, the purpose of collection, and how it is being processed. This Privacy Policy fulfils that obligation.
• Right of Access: You may request a copy of the personal data ph22277 holds about you at any time. We will provide this within thirty (30) days of a verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to have it corrected. Basic account details such as email address and mobile number may be updated directly through your account settings.
• Right to Erasure ("Right to Be Forgotten"): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, and where no overriding legal obligation requires its retention. Note that regulatory retention requirements under PAGCOR and AMLA will apply.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing based on legitimate interests, subject to applicable legal exceptions.
• Right to Data Portability: You may request a machine-readable copy of the personal data you have provided to ph22277 for portability to another service provider, where technically feasible.
• Right to Lodge a Complaint: If you believe ph22277 has not handled your personal data in accordance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission at privacy.gov.ph.

To exercise any of the above rights, please contact the ph22277 Data Protection Officer using the details in Section 13. We will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days with prior notice to you.

10. Minors and Age Restrictions

ph22277 is strictly an adult platform. In accordance with PAGCOR regulations and Philippine law, online casino-style gaming is permitted only for individuals aged 21 years and above. ph22277 does not knowingly collect personal data from any person under the age of 21.

During registration, all applicants are required to declare their date of birth, and KYC verification independently confirms age eligibility through government-issued identification. Any account found to belong to a player under 21 years of age will be immediately suspended, all balances will be frozen, and the matter will be reported to PAGCOR in accordance with our regulatory obligations.

11. Cross-Border Data Transfers

ph22277 primarily processes and stores personal data within the Philippines. However, certain third-party service providers — including cloud infrastructure providers and international game studios — may process data in other jurisdictions. Where personal data is transferred outside the Philippines, ph22277 ensures that such transfers comply with Section 21 of the Data Privacy Act and the NPC's rules on cross-border data flows, including:

• Ensuring the recipient country or organisation affords a comparable level of data protection to that provided under Philippine law;
• Entering into data transfer agreements with the recipient that incorporate the NPC's standard contractual clauses or equivalent safeguards; and
• Obtaining your consent where required as the lawful basis for the specific transfer.

A list of the countries to which ph22277 transfers personal data, and the safeguards in place for each, is available upon written request to the ph22277 Data Protection Officer.

12. Updates to This Privacy Policy

ph22277 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform services. When we make material changes to this Policy, we will:

• Update the "Last Updated" date at the top of this page;
• Display a prominent notice on the ph22277 platform for at least fourteen (14) days following the change; and
• Where required by the Data Privacy Act, obtain fresh consent from affected data subjects before processing their data under the new terms.

Your continued use of the ph22277 platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the changes. We recommend reviewing this Policy periodically. If you disagree with any amendments, you have the right to close your account and request erasure of your personal data, subject to applicable legal retention requirements.

13. Contact Our Data Protection Officer

ph22277 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, please contact the ph22277 DPO through any of the following channels:

You also have the right to escalate unresolved privacy concerns to the National Privacy Commission of the Philippines. The NPC accepts complaints from data subjects through its official website. ph22277 cooperates fully with all NPC investigations and regulatory processes.