Privacy Policy — 22php Casino

22php Casino ("22php," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with our online gaming platform at 22php.vip (the "Platform"). This Privacy Policy describes the types of personal data we collect, the purposes for which we process it, the legal basis for processing, how long we retain it, and the rights available to you as a data subject under Philippine law.

This Privacy Policy applies to all registered players of 22php Casino, visitors to the 22php.vip website, and any individual whose personal data is processed by 22php in connection with the provision of our gaming services. By registering for and using the 22php Casino platform, you consent to the collection and processing of your personal data as described in this Policy.

22php Casino collects personal data through several channels: directly from you during registration and account management, automatically through your use of the Platform, and from third-party service providers such as payment processors and identity verification services. The categories of personal data we collect include:

• Identity Data: Full legal name, date of birth, gender, and government-issued identification number (e.g., PhilSys ID number, passport number, or LTO driver's license number).
• Contact Data: Philippine mobile number, and email address where provided during registration or account updates.
• Financial Data: GCash account reference, PayMaya (Maya) account reference, bank account details (BPI, BDO, Metrobank) where provided for deposits or withdrawals, and transaction history within the 22php platform.
• Technical Data: IP address, device type, browser type and version, operating system, mobile network carrier (Globe, Smart, DITO), session duration data, and cookie identifiers.
• Usage Data: Game history, bet amounts, win/loss records, session logs, and in-platform navigation data.
• KYC Documentation: Photographs or scanned images of government-issued identification documents submitted for Know Your Customer (KYC) verification.
• Communications Data: Records of your interactions with 22php Casino's customer support team via live chat, including the content of support conversations.

22php Casino processes personal data for the following purposes:

• Account Management: Creating, maintaining, and administering your 22php Casino player account, including authentication and account security.
• Game Service Delivery: Enabling your access to and participation in all gaming products available on the 22php platform, including live casino, slots, bingo, and EVO Live.
• Payment Processing: Processing GCash, PayMaya, and bank transfer deposits and withdrawals in Philippine Peso.
• Identity Verification (KYC): Verifying your identity and age (21+) as required by PAGCOR and applicable Philippine anti-money laundering regulations (Republic Act No. 9160, as amended).
• Regulatory Compliance: Meeting our obligations under Philippine gaming law, PAGCOR licensing requirements, anti-money laundering (AML) regulations, and National Privacy Commission directives.
• Customer Support: Responding to your support queries, resolving disputes, and maintaining records of player communications.
• Responsible Gaming: Monitoring gaming behaviour to identify players who may be exhibiting signs of problem gambling, and administering self-exclusion and account limit tools.
• Security and Fraud Prevention: Detecting, investigating, and preventing fraudulent transactions, unauthorized access, and other prohibited conduct on the 22php platform.
• Platform Improvement: Analysing aggregate usage data to improve the performance, functionality, and user experience of the 22php Casino platform for Filipino players.

22php Casino processes your personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Consent: Where you have provided explicit consent to a specific processing activity, such as receiving promotional communications from 22php Casino.
• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you accepted upon registration, including delivering gaming services, processing payments, and managing your account.
• Legal Obligation: Processing necessary to comply with Philippine law, including PAGCOR regulatory requirements, Anti-Money Laundering Act (AMLA) obligations, and KYC requirements.
• Legitimate Interests: Processing for purposes of fraud prevention, platform security, and improving our services, where such interests are not overridden by your fundamental rights and freedoms.

22php Casino does not sell your personal data. We may share your personal data with the following categories of third parties in the circumstances described below:

• Game Providers: Third-party game software providers (including JILI, Evolution Gaming, PG Soft, and Pragmatic Play) receive limited technical data necessary to deliver their games within the 22php platform. These providers are bound by contractual data processing obligations.
• Payment Service Providers: GCash (G-Xchange Inc.), PayMaya (Maya Philippines Inc.), and banking partners (BPI, BDO, Metrobank) receive the financial and identity data necessary to process your deposit and withdrawal transactions.
• Identity Verification Providers: Third-party KYC and identity verification services may process government-issued ID data on behalf of 22php Casino for the purpose of age and identity verification.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities may receive player data where required by law, court order, or regulatory direction.
• Professional Advisers: Legal, audit, and compliance professionals engaged by 22php Casino may access personal data to the extent necessary for the provision of their professional services, subject to professional confidentiality obligations.

22php Casino processes all financial transactions in Philippine Peso. The following applies specifically to the handling of payment-related data:

• 22php Casino does not store full GCash or PayMaya account credentials. Payment authentication is handled directly by the respective payment service providers through their secure APIs.
• Bank account details (account numbers, bank name) provided for withdrawal processing are stored in encrypted form and accessible only to authorised 22php payment processing personnel.
• Transaction records — including deposit amounts, withdrawal amounts, dates, and payment method references — are retained for a minimum of five (5) years to comply with AMLA record-keeping requirements.
• All payment processing between 22php Casino and its payment partners uses encrypted communication channels. 22php Casino is not responsible for the data handling practices of GCash, PayMaya, or banking institutions beyond the point at which data is transmitted to their systems.

22php Casino uses cookies and similar tracking technologies on the 22php.vip website and platform. Cookies are small data files placed on your device that help the platform function correctly and enable us to analyse platform usage.

• Essential Cookies: Required for the 22php platform to function, including session management, login state maintenance, and security. These cannot be disabled without impairing platform functionality.
• Analytics Cookies: Used to collect aggregate data about how Filipino players navigate and use the 22php platform. This data helps us improve performance and user experience. Analytics data is processed in aggregate and is not linked to individually identifiable players.
• Preference Cookies: Store your platform preferences, such as language settings and interface customisations, to improve your experience on return visits to 22php.vip.

You may manage cookie preferences through your browser settings. Disabling essential cookies may affect your ability to log in or use certain features of the 22php Casino platform. Most mobile browsers (Chrome on Android, Safari on iPhone) allow you to manage cookie permissions within the browser settings menu.

22php Casino retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your registration with 22php Casino and for a minimum of five (5) years following account closure.
• Transaction Records: Retained for a minimum of five (5) years as required under the Anti-Money Laundering Act and PAGCOR record-keeping obligations.
• KYC Documentation: Retained for a minimum of five (5) years following account closure or the completion of the relevant regulatory reporting period, whichever is later.
• Support Communications: Customer support records are retained for up to three (3) years following the resolution of the relevant matter.
• Technical and Usage Data: Retained in identifiable form for up to two (2) years; thereafter retained only in anonymised aggregate form.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with 22php Casino's data disposal procedures.

22php Casino implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Measures in place include:

• SSL/TLS encryption for all data in transit between your device and 22php.vip.
• Encryption at rest for sensitive personal data, including KYC documentation and financial account details.
• Role-based access controls limiting access to personal data to authorised 22php Casino personnel with a legitimate operational need.
• Two-factor authentication (SMS OTP) for player account access and for internal administrative systems handling personal data.
• Regular security assessments and vulnerability testing of the 22php platform and underlying infrastructure.

In the event of a personal data breach affecting your information, 22php Casino will notify affected players and the National Privacy Commission in accordance with the notification requirements under RA 10173 and NPC Circular No. 16-03.

Under the Data Privacy Act of 2012, registered players and data subjects have the following rights with respect to their personal data held by 22php Casino:

• Right to be Informed: The right to be notified of how your personal data is being collected, processed, and used — which this Privacy Policy addresses.
• Right of Access: The right to request a copy of the personal data 22php Casino holds about you, including a description of the data, the purposes for which it is processed, and the sources from which it was obtained.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data in your 22php Casino account.
• Right to Erasure or Blocking: The right to request deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 22php's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data, including for direct marketing purposes.
• Right to Data Portability: The right to receive a copy of your personal data in a commonly used electronic format where technically feasible.
• Right to Damages: The right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data by 22php Casino.

To exercise any of these rights, please contact the 22php Casino Data Protection Officer using the contact details in Section 13 of this Policy. We will respond to data subject requests within fifteen (15) business days of receipt, consistent with the timelines prescribed by the NPC.

22php Casino strictly prohibits access to its platform by individuals under 21 years of age, as required by PAGCOR regulations. 22php does not knowingly collect personal data from individuals under 21. If 22php Casino discovers that personal data has been collected from an individual below the minimum age, the account will be immediately suspended and the personal data deleted, subject to any mandatory regulatory retention obligations.

22php Casino may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC regulatory guidance. The "Last Updated" date at the top of this page indicates when the Policy was most recently revised.

Material changes to this Privacy Policy will be communicated to registered players via in-platform notification. Where required by the Data Privacy Act, material changes that affect your rights as a data subject will be subject to renewed consent. Your continued use of the 22php Casino platform following notification of any Policy update constitutes your acceptance of the revised terms.

22php Casino has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. To exercise your data subject rights, submit a privacy concern, or report a suspected data breach, please contact the 22php DPO through the following channels:

• In-Platform Live Chat: Available 24/7 within the 22php Casino platform for immediate assistance with privacy-related queries.
• Email (DPO): [email protected] — please include "Data Privacy Request" in your message subject for priority routing to the DPO team.

22php Casino is committed to resolving all privacy-related concerns in a timely and transparent manner. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) at www.privacy.gov.ph (reference only — not a hyperlink).