PH2225 Privacy Policy – Your Data Rights Philippines

2. Personal Data We Collect

PH2225 collects personal data in several ways — some you provide directly when you register or transact, and some is gathered automatically as you use the platform. Here is a breakdown of the categories of data we collect and why each category is necessary:

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you access PH2225, our systems automatically record certain technical and behavioural data to ensure the platform runs properly and to detect fraud:

• Device & technical data: IP address, browser type and version, operating system, device identifiers
• Usage data: Pages visited, games played, session duration, betting history, click patterns
• Location data: General geographic location derived from IP address (we do not access GPS location without permission)
• Cookies and tracking data: Session cookies, preference cookies, analytics identifiers — detailed in Section 5

3. How PH2225 Uses Your Personal Data

We only use personal data for specific, legitimate purposes. Hindi namin ginagamit ang inyong data para sa kahit anong bagay na hindi nakalista dito. The legal bases for processing under RA 10173 are noted alongside each purpose:

• Account creation and management — to set up and maintain your PH2225 account (legal basis: contractual necessity)
• Identity verification (KYC) — to confirm your age and identity as required by Philippine gaming regulations (legal basis: legal obligation)
• Payment processing — to handle deposits and withdrawals via GCash, Maya, bank transfer, and card (legal basis: contractual necessity)
• Fraud prevention and security — to detect suspicious activity, multi-accounting, and potential money laundering (legal basis: legitimate interest)
• Responsible gaming — to monitor gameplay patterns and enforce deposit limits or self-exclusion requests (legal basis: legitimate interest and legal obligation)
• Customer support — to respond to your queries, complaints, and requests (legal basis: contractual necessity)
• Marketing communications — to send promotional offers and platform updates, but only with your consent (legal basis: consent — you can opt out anytime)
• Platform improvement — to analyse how players use PH2225 and improve the overall experience (legal basis: legitimate interest)
• Regulatory compliance — to meet reporting obligations to Philippine gaming regulators and law enforcement (legal basis: legal obligation)

4. Sharing Your Personal Data

PH2225 will never sell your personal data to third parties for advertising or marketing purposes. Full stop. However, certain trusted service providers and regulatory bodies may receive limited data in order for us to operate legally and efficiently:

4.1 Authorised Third-Party Recipients

• Payment processors: GCash, Maya, GrabPay, Coins.ph, and accredited bank partners require transaction data to process your deposits and withdrawals
• Identity verification providers: Our KYC partner processes government ID scans and selfie data to confirm your identity — data is not retained by the provider beyond the verification period
• IT and hosting providers: Our cloud infrastructure and security vendors may access anonymised or encrypted technical data to maintain platform uptime
• Analytics providers: Aggregate, anonymised usage statistics are shared with analytics tools to help us understand platform performance

4.2 Legal and Regulatory Disclosure

PH2225 will disclose personal data to government authorities, regulators, or law enforcement agencies when we are legally required to do so — for example, in response to a lawful court order, a request from PAGCOR, or an anti-money laundering investigation under AMLC requirements. We will always inform you of such disclosures where permitted by law.

4.3 Business Transfers

In the unlikely event that PH2225 is involved in a merger, acquisition, or sale of assets, your personal data may be transferred to the acquiring entity. You will be notified via email before such a transfer takes place, and the acquiring entity will be required to honour the commitments in this Privacy Policy.

5. Cookies and Tracking Technologies

Like most online platforms, PH2225 uses cookies and similar technologies to make the platform work correctly and to understand how players use it. A cookie is a small text file stored on your device when you visit our site. Here's how we use them:

You can manage non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect how some features of PH2225 function. We do not use third-party advertising cookies or retargeting pixels on the PH2225 platform.

6. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have a full set of rights over your personal data. PH2225 is committed to honouring all of these rights. Here is what you can ask us to do, and how we handle each request:

To exercise any of these rights, send a request to our Data Protection Officer (DPO) at privacy@ph2225.net. Please include your full name, registered email address, and a brief description of your request. We will acknowledge your request within 3 business days and complete it within 15 business days wherever possible.

If you believe your privacy rights have been violated, you also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines.

7. How Long We Keep Your Data

PH2225 keeps personal data only for as long as it is genuinely needed, or as required by law. Here is how our data retention works across different categories:

• Account Data

  Retained for the duration of your active account, plus 5 years after account closure — as required by Philippine anti-money laundering regulations.

• Financial Transaction Records

  Retained for a minimum of 5 years in compliance with the Anti-Money Laundering Act (AMLA) and BSP regulations applicable to payment services.

• KYC Documents

  Retained for as long as your account is active plus 5 years after closure. Copies are securely deleted once the retention period expires.

• Customer Support Records

  Retained for 2 years from the date of the last interaction, to allow for follow-up or dispute resolution.

• Analytics Data

  Aggregate, anonymised analytics data may be retained indefinitely since it contains no personally identifiable information.

8. How We Protect Your Data

PH2225 takes data security seriously. We have implemented a layered set of technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction:

• TLS/SSL encryption for all data transmitted between your browser and our servers
• AES-256 encryption for sensitive data stored in our databases
• Multi-factor authentication (MFA) available for all player accounts
• Role-based access controls — only staff with a legitimate need can access specific categories of player data
• Regular security audits and penetration testing by independent cybersecurity firms
• Automated intrusion detection systems that monitor for unusual access patterns 24/7
• Data minimisation — we only retain data in systems where it is actively needed

While we do everything reasonable to protect your data, no online platform can guarantee 100% security. In the event of a data breach that is likely to affect your rights and freedoms, PH2225 will notify you and the National Privacy Commission within 72 hours of becoming aware of the incident, as required by the Data Privacy Act.

9. Children and Minors

PH2225 is strictly an adult platform. We do not knowingly collect personal data from individuals under 21 years of age. If we discover that a minor has registered on the platform, we will immediately close the account, delete all associated personal data, and return any deposits to the verified payment source.

Parents and guardians are responsible for ensuring that minors in their household cannot access PH2225. If you believe a minor is using the platform, report it immediately to support@ph2225.net.

10. Updates to This Privacy Policy

This Privacy Policy may be updated from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Display a notice on the PH2225 platform when you log in
• Where required by law, send you a direct notification via email or SMS

Continued use of PH2225 after a Privacy Policy update means you accept the revised terms. We recommend bookmarking this page and reviewing it periodically.

11. Contact Our Data Protection Officer

For any questions, requests, or concerns related to this Privacy Policy or your personal data, reach out to our designated Data Protection Officer (DPO):

We aim to acknowledge all privacy-related requests within 3 business days and to resolve them fully within 15 business days. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.