ph2222 Privacy Policy

01 Introduction

ph2222 ("ph2222," "we," "us," or "our") operates the online casino and sports betting platform accessible at ph2222.asia and all associated subdomains. We are committed to protecting the privacy and personal data of every player who registers with or uses the ph2222 platform.

This Privacy Policy explains what personal information we collect from players in the Philippines, how we use and protect it, who we share it with, how long we retain it, and what rights you have as a data subject under Philippine law. This policy applies to all personal data processed in connection with your use of ph2222, whether you access the platform from Metro Manila, Cebu, Davao, or anywhere else across the archipelago.

By registering for a ph2222 account or continuing to use our platform, you confirm that you have read and understood this Privacy Policy. This Privacy Policy is incorporated into and must be read together with the ph2222 Terms & Conditions.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the data controller responsible for your personal information is:

ph2222 has designated a Data Protection Officer (DPO) in compliance with Section 21 of RA 10173. The DPO is responsible for overseeing ph2222's data protection program and ensuring compliance with applicable privacy regulations. To reach our DPO, contact us through the support channels listed in Section 15.

03 Data We Collect

ph2222 collects the following categories of personal data in connection with your account and your use of the platform:

ph2222 does not collect special categories of personal data (as defined under RA 10173 and its IRR) unless required by law, and does not knowingly collect data from individuals under 21 years of age.

04 How We Collect Your Data

ph2222 collects personal data through the following methods:

• Direct Provision: Information you voluntarily provide when registering, completing KYC, making deposits or withdrawal requests, contacting support, or updating your account profile;
• Automated Collection: Technical data collected automatically when you access the ph2222 platform, including through cookies, web beacons, and server logs (see Section 8 for details);
• Third-Party Verification: Identity and age verification data returned by KYC service providers processing your submitted documents;
• Payment Processors: Transaction confirmation data from GCash, PayMaya, and Philippine banking partners in connection with your deposits and withdrawals;
• Security and Fraud Prevention Systems: Device fingerprinting and risk-scoring data generated by ph2222's security infrastructure to detect and prevent unauthorized account access and fraudulent activity.

05 Purpose of Processing

ph2222 processes your personal data for the following specific, legitimate purposes:

• Account Operation: Creating, maintaining, securing, and closing your ph2222 account;
• Service Delivery: Enabling access to games, processing wagers, crediting winnings, and delivering all features of the ph2222 platform;
• Financial Processing: Processing PHP deposits via GCash, PayMaya, BPI, BDO, and Metrobank; processing withdrawal requests; maintaining accurate transaction records;
• Identity and Age Verification: Confirming that you are who you say you are and that you meet the 21+ age requirement for gambling in the Philippines;
• Legal and Regulatory Compliance: Meeting obligations under RA 10173, RA 9160 (Anti-Money Laundering Act), PAGCOR operating guidelines, and other applicable Philippine law;
• Fraud Prevention and Security: Detecting, investigating, and preventing unauthorized account access, bonus abuse, money laundering, and other prohibited conduct;
• Responsible Gaming: Monitoring player activity to identify potential problem gambling patterns and applying responsible gaming tools where appropriate;
• Customer Support: Responding to enquiries, resolving disputes, and providing assistance through live chat and email channels;
• Platform Improvement: Analyzing aggregated usage data to improve platform performance, game selection, and user experience;
• Marketing Communications: Sending promotional communications regarding bonuses, new games, and platform updates — only where you have provided explicit consent and have not withdrawn it.

06 Legal Basis for Processing

Under RA 10173 and its Implementing Rules and Regulations, ph2222 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing necessary to perform our contract with you — the ph2222 Terms & Conditions — including account management, game access, and payment processing;
• Legal Obligation: Processing required to comply with applicable Philippine law, including AML reporting obligations under RA 9160, KYC requirements, and PAGCOR regulatory obligations;
• Legitimate Interests: Processing necessary for ph2222's legitimate interests — specifically fraud prevention, platform security, and responsible gaming monitoring — where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications, which requires your explicit prior consent. You may withdraw marketing consent at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Disclosure

ph2222 does not sell, rent, or trade your personal data to any third party. We share personal data only in the following limited circumstances and only to the extent necessary for the stated purpose:

• Game Providers: Game studios supplying titles to the ph2222 lobby (such as Pragmatic Play, PG Soft, and JILI) may receive limited technical identifiers necessary to authenticate your session and record game outcomes. These providers operate under contractual data processing agreements;
• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive transaction data necessary to process your deposits and withdrawals. These entities are independently regulated financial institutions with their own privacy obligations;
• KYC Verification Providers: Identity document verification and liveness-check service providers process your KYC documents solely for identity and age verification. All such providers are bound by confidentiality agreements and data processing terms;
• Fraud Prevention Services: Anti-fraud and security service providers may process technical data (such as IP addresses and device fingerprints) to assist in detecting prohibited conduct;
• Legal and Regulatory Disclosure: ph2222 will disclose personal data to competent Philippine government authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and law enforcement agencies — when required to do so by applicable law, court order, or legitimate regulatory request;
• Business Transfers: In the event of a merger, acquisition, or sale of all or substantially all of ph2222's assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom ph2222 shares personal data are required by contract to process such data only in accordance with ph2222's instructions and applicable Philippine privacy law.

08 Cookies & Tracking Technologies

ph2222 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit ph2222.asia. The following categories of cookies are used:

• Essential Cookies: Required for the platform to function. These include session authentication cookies that keep you logged in to your ph2222 account during a session. Essential cookies cannot be disabled without impairing platform functionality;
• Security Cookies: Used to detect and prevent security threats, including CSRF protection tokens and fraud-detection identifiers;
• Functional Cookies: Store your preferences such as language settings, game lobby filters, and responsible gaming tool configurations;
• Analytics Cookies: Collect aggregated and anonymized data about how players navigate the platform, which pages are most visited, and where errors occur. This data is used solely to improve platform performance;
• Marketing Cookies: Used only with your prior consent to deliver relevant promotional communications based on your platform activity. You may withdraw consent for marketing cookies at any time through your Account Settings.

Most web browsers accept cookies by default. You may configure your browser to refuse or delete cookies; however, doing so may affect your ability to log in to your ph2222 account or access certain platform features.

09 Data Retention

ph2222 retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal obligations. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your ph2222 account and for five (5) years following permanent account closure;
• KYC and Identity Documents: Retained for a minimum of five (5) years after account closure in compliance with Philippine AML regulations under RA 9160 and AMLC requirements;
• Transaction Records: Retained for a minimum of five (5) years in compliance with financial record-keeping obligations under Philippine law;
• Customer Support Communications: Retained for three (3) years from the date of the interaction or the resolution of any related dispute, whichever is later;
• Marketing Data: Retained until you withdraw marketing consent or for two (2) years from your last interaction with a marketing communication, whichever is earlier;
• Security and Fraud Prevention Logs: Retained for the period required by applicable law or until the conclusion of any investigation or legal proceedings to which the data is relevant.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents reconstruction of the original data.

10 Security Measures

ph2222 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security: All data transmitted between your device and ph2222 servers is encrypted using TLS 1.2 or higher with 256-bit cipher suites;
• Encryption at Rest: Sensitive personal data stored in ph2222's databases is encrypted at rest using industry-standard algorithms;
• Password Hashing: Account passwords are hashed using bcrypt with unique per-account salts. ph2222 cannot and does not store or retrieve plain-text passwords;
• Two-Factor Authentication: Players may enable OTP-based 2FA on their ph2222 account. ph2222 strongly recommends enabling 2FA, particularly for accounts with linked GCash wallets;
• Access Controls: Access to personal data within ph2222's systems is restricted on a need-to-know basis and is subject to role-based access controls and audit logging;
• Security Auditing: ph2222 undergoes regular independent security assessments, including vulnerability scanning and penetration testing of platform infrastructure;
• Incident Response: ph2222 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, ph2222 will notify you and the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173), as a Filipino data subject you have the following rights with respect to your personal data held by ph2222. These rights may be exercised by contacting our support team as described in Section 15.

To exercise any of the above rights, contact ph2222 through the channels described in Section 15. ph2222 will respond to verified data subject requests within thirty (30) days of receipt, in accordance with NPC requirements.

12 Minors

The ph2222 platform is intended exclusively for individuals who are 21 years of age or older. ph2222 does not knowingly collect personal data from any person under the age of 21, and strict age verification is conducted as part of the KYC process for all accounts prior to withdrawal processing.

13 Third-Party Links

The ph2222 platform may contain references to third-party services — including game providers, payment processing partners, and other platforms. This Privacy Policy applies solely to personal data processed by ph2222 in connection with ph2222.asia and does not govern the privacy practices of any third-party operator, provider, or platform.

ph2222 is not responsible for the content or privacy practices of third-party services and encourages all players to review the privacy policies of any third-party platform before providing personal data to that platform.

14 Policy Amendments

ph2222 reserves the right to amend this Privacy Policy at any time to reflect changes in applicable law, NPC regulations, our data processing practices, or the operation of the platform. Material changes to this Privacy Policy will be communicated to registered players by email to their registered address and/or by prominent notice on ph2222.asia at least seven (7) days before the changes take effect.

The effective date of the current version of this Privacy Policy is displayed in the page header. Continued use of the ph2222 platform following the effective date of any amendment constitutes acceptance of the updated Privacy Policy. If you do not accept the changes, you may exercise your right to close your account in accordance with Section 4.3 of the Terms & Conditions.

The current version of this Privacy Policy will always be accessible at ph2222.asia/privacy-policy. ph2222 recommends reviewing this policy periodically.

15 Contact & Complaints

For all privacy-related enquiries, data subject rights requests, or complaints regarding ph2222's handling of your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 on ph2222.asia — the fastest way to reach our support team and request assistance with account or privacy matters;
• Email: [email protected] — for written privacy enquiries, data subject requests, and formal complaints. Reference "Privacy Request" in your subject line for faster routing;
• Response Time: ph2222 will acknowledge privacy requests within three (3) business days and resolve them within thirty (30) days, consistent with NPC guidelines.

If you are not satisfied with ph2222's response to your privacy complaint, you have the right to escalate your complaint directly to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing RA 10173.