2222ph Privacy Policy

1. About This Policy

1.1 This Policy applies to all personal data processed by 2222ph in connection with the operation of the online casino platform at 2222ph.co, including but not limited to account registration, financial transactions, gameplay activity, customer support interactions, and marketing communications.

1.2 This Policy is to be read alongside the 2222ph Terms & Conditions. In the event of any conflict between this Policy and the Terms & Conditions regarding privacy matters, this Policy shall prevail.

1.3 2222ph is committed to processing personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and any applicable guidelines issued by the National Privacy Commission (NPC) of the Philippines.

2. Data Controller

2.1 The data controller responsible for your personal information is 2222ph, operating under PAGCOR licensing in the Republic of the Philippines. For all data privacy matters, you may contact our designated Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 2222ph collects personal data from you directly when you register, deposit, withdraw, play, or contact support. We also collect data automatically through your interaction with the platform. The categories of data we collect include:

3.2 2222ph does not collect sensitive personal information beyond what is necessary for KYC compliance under PAGCOR anti-money laundering requirements and the DPA.

4. How We Use Your Personal Data

4.1 2222ph processes your personal data for the following purposes:

• Account creation and management — to register your 2222ph account, verify your identity, and administer your player profile;
• Transaction processing — to process deposits via GCash, PayMaya, BPI, BDO, and Metrobank, and to fulfil withdrawal requests;
• Regulatory compliance — to fulfil PAGCOR reporting requirements, conduct AML screening, and comply with any lawful order from Philippine regulatory authorities;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, account abuse, and money laundering;
• Customer support — to respond to your enquiries and resolve disputes via live chat and email;
• Platform improvement — to analyse aggregate gameplay and platform usage data to improve game selection, user experience, and technical performance;
• Responsible gaming — to monitor gameplay patterns and implement deposit limits, session controls, or self-exclusion measures where appropriate;
• Marketing communications — to send you relevant promotions, bonus offers, and platform updates, subject to your communication preferences.

5. Legal Bases for Processing

5.1 2222ph processes your personal data on the following legal bases under the DPA:

• Contractual necessity — processing required to perform the contract between you and 2222ph (account operation, transaction processing);
• Legal obligation — processing required to comply with PAGCOR regulations, AML obligations, and NPC requirements;
• Legitimate interests — processing conducted for fraud prevention, platform security, and service improvement, where those interests are not overridden by your privacy rights;
• Consent — processing for marketing communications, where you have given explicit consent. You may withdraw consent for marketing at any time through your account settings.

6. Sharing of Personal Data

6.1 2222ph does not sell or rent your personal data to third parties. We may share your data in the following limited circumstances:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency settlement providers, solely to process your financial transactions;
• Game providers: Licensed game studios and live dealer operators, to the extent necessary to deliver game services to your account;
• KYC / AML service providers: Identity verification and anti-money laundering screening partners operating under binding data processing agreements;
• Regulatory authorities: PAGCOR, the National Privacy Commission, law enforcement agencies, or courts of competent jurisdiction, where 2222ph is legally required to disclose;
• IT and security vendors: Infrastructure, cybersecurity, and platform hosting providers operating under strict confidentiality obligations.

6.2 All third-party recipients of your personal data are contractually required to process that data only for the specified purposes and to maintain security standards consistent with 2222ph's own obligations under the DPA.

7. Cookies and Tracking Technologies

7.1 The 2222ph platform uses cookies and similar tracking technologies to maintain session security, remember your preferences, and analyse platform usage. Categories of cookies used include:

• Essential cookies — required for login session management and platform security. Cannot be disabled without impairing platform functionality;
• Analytics cookies — used to collect aggregate, anonymised data on how players navigate the 2222ph platform, enabling ongoing performance improvements;
• Preference cookies — used to remember your language, display, and notification preferences between sessions.

7.2 You may manage your cookie preferences through your browser settings. Please note that disabling essential cookies will affect your ability to log in and use core 2222ph platform features.

8. Data Security

8.1 2222ph implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include SSL/TLS encryption for all data in transit, encrypted storage for sensitive data at rest, multi-factor authentication for administrative platform access, and regular third-party security audits.

8.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, 2222ph will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with the DPA and NPC Circular 16-03.

8.3 Notwithstanding the foregoing, no data transmission over the internet is completely secure. 2222ph cannot guarantee absolute security, and you transmit data to the platform at your own risk. You are responsible for keeping your own login credentials confidential.

9. Data Retention

9.1 2222ph retains personal data for the periods set out below, or longer where required by applicable law:

• Account and identity data: retained for the duration of the account relationship and for five (5) years following account closure, in accordance with PAGCOR AML record-keeping requirements;
• Transaction records: retained for five (5) years from the date of each transaction;
• Gameplay logs: retained for three (3) years from the date of each session;
• Support communications: retained for two (2) years from the date of resolution;
• Marketing data: retained until you withdraw consent or two (2) years of inactivity, whichever is earlier.

9.2 Upon expiry of the applicable retention period, 2222ph will securely delete or anonymise your personal data unless its further retention is required by law.

10. Your Rights Under the DPA

10.1 As a data subject under Republic Act No. 10173, you have the following rights in respect of your personal data held by 2222ph:

• Right to be informed — the right to know how your data is being processed;
• Right of access — the right to request a copy of the personal data 2222ph holds about you;
• Right to rectification — the right to have inaccurate or incomplete personal data corrected;
• Right to erasure — the right to request deletion of personal data where retention is no longer lawfully justified, subject to overriding legal obligations;
• Right to data portability — the right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to object — the right to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to withdraw consent — the right to withdraw consent for any processing based on consent, at any time, without affecting the lawfulness of prior processing.

10.2 To exercise any of the above rights, contact the 2222ph Data Protection Officer using the details in Section 14. 2222ph will respond to verified requests within thirty (30) calendar days.

11. Children and Minors

11.1 The 2222ph platform is strictly for persons aged twenty-one (21) years and above. 2222ph does not knowingly collect personal data from individuals under 21 years of age. If 2222ph becomes aware that personal data has been collected from a minor, that data will be deleted and the associated account will be closed immediately.

11.2 If you believe a minor has registered an account on 2222ph, please notify us immediately at the contact details in Section 14.

12. Cross-Border Data Transfers

12.1 Some of 2222ph's technology vendors and game providers are located outside the Philippines. Where personal data is transferred to recipients in other countries, 2222ph ensures that adequate safeguards are in place — including contractual data processing agreements — to protect your data to a standard equivalent to that required under the DPA.

12.2 By using the 2222ph platform, you acknowledge and consent to the transfer of your personal data to service providers located in other jurisdictions, where necessary to deliver the services you have requested.

13. Updates to This Policy

13.1 2222ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via the mobile number or email address registered to their account. The updated Policy will always be available at 2222ph.co/privacy-policy.

13.2 Your continued use of the 2222ph platform after the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact & Data Protection Officer

14.1 For all privacy-related enquiries, data subject requests, or to contact the 2222ph Data Protection Officer, please use the following:

Email: [email protected]

Subject line: Privacy Enquiry / Data Subject Request

Live Chat: Available 24/7 on the 2222ph platform — request to be escalated to the DPO team.

14.2 If you are not satisfied with 2222ph's handling of your personal data or any data subject request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.