This Privacy Policy explains how p22ph collects, uses, processes, stores, and protects the personal data of players and visitors in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and PAGCOR's player data requirements.
View your data
Correct inaccuracies
Request deletion
Opt out of processing
Export your data
Protected at all times
p22ph ("p22ph," "we," "us," "our") operates the online gaming platform accessible at p22ph.app ("Platform"). We are committed to protecting the privacy and personal data of every player, registered account holder, and site visitor who interacts with the p22ph Platform.
This Privacy Policy ("Policy") describes how p22ph collects, uses, processes, discloses, stores, and safeguards personal data in compliance with:
This Policy applies to all personal data processed by p22ph in connection with the Platform — whether you access p22ph from Metro Manila, Cebu City, Davao, or any other location in the Philippines. It covers data collected through the website, any mobile browser experience, account registration, gameplay, payment processing, customer support interactions, and marketing communications.
By registering or using the p22ph Platform, you acknowledge that you have read this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and contact support to close your account.
p22ph is the Personal Information Controller (PIC) within the meaning of the Data Privacy Act of 2012 with respect to all personal data collected and processed through the Platform. As PIC, p22ph determines the purposes and means of processing your personal data and is responsible for ensuring that all processing activities comply with applicable Philippine data privacy law.
Where p22ph engages third-party service providers to process personal data on its behalf — including payment processors, game software providers, fraud detection services, and customer support platforms — those providers operate as Personal Information Processors (PIPs) under binding data processing agreements that impose data protection obligations consistent with this Policy and applicable law.
p22ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act. Contact details for the DPO are provided in Section 15 of this Policy.
p22ph collects the following categories of personal data, depending on your interaction with the Platform:
| Data Category | Examples | Required? |
|---|---|---|
| Identity | Name, DOB, government ID | Mandatory (KYC) |
| Contact | Mobile number, email, address | Mandatory |
| Financial | GCash, bank account, transactions | Mandatory (payments) |
| Gaming Activity | Bets, results, session logs | Automatic (platform use) |
| Technical | IP, device, browser | Automatic (platform use) |
| Communications | Support tickets, chat logs | When support is used |
p22ph collects personal data through the following channels:
Under the Data Privacy Act of 2012, p22ph processes personal data on the following legal grounds:
You may withdraw consent at any time by contacting p22ph's Data Protection Officer. Note that withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal, and p22ph may continue processing on other legal grounds (e.g., legal obligation for AML record-keeping) even after consent is withdrawn.
p22ph uses collected personal data for the following purposes:
Creating, verifying, maintaining, and securing your p22ph account; processing password resets; managing two-factor authentication; and communicating account-related notifications to your registered mobile number and email address.
Verifying your identity and age eligibility (21+ requirement) in compliance with PAGCOR's player registration and KYC requirements; conducting enhanced due diligence where triggered by transaction thresholds or risk indicators.
Processing deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, InstaPay, and PESONet; reconciling your p22ph wallet balance; maintaining transaction records required by PAGCOR and AML regulations.
Delivering and personalizing casino games, live dealer tables, sports betting markets, bingo rooms, and other Platform features; enforcing game rules; detecting and preventing cheating, collusion, and bot activity.
Detecting and preventing unauthorized account access, fraudulent transactions, money laundering, bonus abuse, and other prohibited conduct as defined in the p22ph Terms & Conditions; monitoring login patterns and flagging anomalous activity.
Monitoring gaming behavior for indicators of problem gambling; enforcing player-set deposit limits, session timers, and self-exclusion elections; maintaining the PAGCOR self-exclusion registry as required under licensing conditions.
Responding to support inquiries, complaints, and dispute escalations; maintaining records of support interactions for quality assurance, training, and dispute resolution purposes.
Fulfilling reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities as required by law; responding to lawful orders from courts and law enforcement agencies.
Sending promotional offers, bonus notifications, game announcements, and other marketing communications where you have provided consent. You may opt out of marketing communications at any time by following the unsubscribe instructions in any marketing email, or by contacting support.
p22ph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following circumstances:
p22ph engages carefully selected service providers who process personal data on our behalf under binding data processing agreements. Categories of PIPs include payment processors (GCash/PayMaya integration providers), game software providers (live casino and RNG game studios), KYC and identity verification platforms, fraud detection and AML screening services, customer support platform providers, and cloud infrastructure and hosting providers. These providers may only process your data for the specific purposes authorized by p22ph and may not use it for their own purposes.
p22ph will disclose personal data to PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), law enforcement agencies, and courts of competent jurisdiction when required to do so by applicable Philippine law, lawful order, regulatory direction, or legal process. Such disclosures are made only to the extent strictly necessary to fulfill the applicable legal obligation.
In the event of a merger, acquisition, restructuring, or sale of all or part of p22ph's business, player personal data may be transferred to the acquiring entity. p22ph will provide reasonable notice to affected players before personal data is transferred under such circumstances, and the acquiring entity will be required to honor the commitments of this Privacy Policy.
No Sale of Data: p22ph does not sell your personal data to data brokers, advertising networks, or any third party for commercial purposes unrelated to the provision of the p22ph Platform services.
p22ph uses cookies and similar tracking technologies (including session tokens, local storage, and analytics pixels) on the Platform. The following categories of cookies are used:
You may control or disable non-essential cookies through your browser settings. Disabling analytics or functional cookies will not prevent you from using the Platform but may affect certain personalization features. Disabling strictly necessary cookies will impair your ability to log in and use Platform services.
Third-Party Scripts: p22ph does not load third-party advertising tracking scripts or social media pixels on the Platform. Cookies on p22ph.app are limited to those necessary for Platform operation, security, and analytics.
p22ph retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods required by applicable Philippine law:
| Data Type | Retention Period | Legal Basis |
|---|---|---|
| Account & KYC records | Minimum 5 years after account closure | PAGCOR licensing, RA 9160 |
| Financial transaction records | Minimum 5 years from transaction date | RA 9160 (AMLA), BIR requirements |
| Game activity logs | 3 years from session date | PAGCOR audit requirements |
| Customer support records | 3 years from last interaction | Dispute resolution, legitimate interest |
| Marketing preferences | Until opt-out or account closure | Consent |
| Technical/security logs | 12 months from creation | Security, fraud prevention |
| Self-exclusion records | Permanent / per PAGCOR registry | PAGCOR responsible gaming requirements |
Following the expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with p22ph's data disposal procedures. Data subject to ongoing legal proceedings, regulatory investigations, or audit requirements is retained until those proceedings are concluded.
p22ph implements a layered information security framework consistent with industry standards and the security requirements of the Data Privacy Act of 2012. Security measures include:
No security system is impenetrable. While p22ph takes all reasonable measures to protect your data, we cannot guarantee absolute security. You are encouraged to protect your account by enabling two-factor authentication, using a strong unique password, and notifying support immediately upon discovering any unauthorized account access.
Under the Data Privacy Act of 2012 and applicable NPC regulations, you have the following rights with respect to your personal data held by p22ph:
To exercise any of the above rights, submit a written request to p22ph's Data Protection Officer using the contact details in Section 15. p22ph will respond to verified data subject requests within fifteen (15) business days of receipt, or within the timeframe prescribed by applicable NPC regulation. p22ph may require identity verification before processing a data subject rights request.
The p22ph Platform is strictly prohibited for persons under the age of 21 years, in compliance with PAGCOR's age eligibility requirements for online gaming in the Philippines. p22ph does not knowingly collect personal data from persons under 21 years of age.
If p22ph discovers or has reasonable grounds to suspect that personal data has been collected from a person under 21, p22ph will immediately suspend the associated account, notify the relevant parent or guardian where practicable, delete or block the personal data without undue delay, and report the matter to PAGCOR as required under licensing conditions.
If you are under 21 years of age, do not attempt to register on or access the p22ph Platform. If you believe a minor has accessed p22ph using your details or another person's credentials, please contact p22ph support immediately at [email protected]
In the course of providing the Platform services, personal data may be transferred to and processed in countries outside the Philippines — primarily in connection with cloud infrastructure hosting, game software provider operations, and international payment processing networks.
Where personal data is transferred outside the Philippines, p22ph ensures that appropriate safeguards are in place consistent with the Data Privacy Act of 2012 and applicable NPC standards, including:
Players may request information about the specific cross-border transfer safeguards applicable to their data by contacting p22ph's Data Protection Officer.
p22ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or our data processing practices. Where material changes are made, p22ph will provide reasonable advance notice to registered players via email to the registered email address and/or a prominent notification within the Platform, no less than seven (7) calendar days before the amended Policy takes effect.
Continued use of the p22ph Platform following the effective date of an amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the amended Policy, you must cease using the Platform and request account closure before the effective date. The most current version of this Privacy Policy is always accessible at p22ph.app/privacy-policy.
For any data privacy inquiries, data subject rights requests, or complaints related to p22ph's handling of your personal data, please contact p22ph's Data Protection Officer:
p22ph Data Protection Officer
Email: [email protected]
Subject line: "Data Privacy Request – [Your Name]"
All data subject rights requests must be submitted in writing with sufficient information to verify your identity. p22ph will acknowledge receipt within three (3) business days and provide a substantive response within fifteen (15) business days.
If you are not satisfied with p22ph's response to a data privacy complaint, you have the right to file a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC complaints process is available on the NPC's official government website.
For issues specifically related to responsible gaming, self-exclusion, or problem gambling support, please visit the p22ph Responsible Gaming page.
Our Data Commitments
Privacy protection at p22ph is built into the platform architecture — not layered on afterward as a compliance exercise. Here's what that looks like in practice.
p22ph's data practices are built around RA 10173 — the Philippine Data Privacy Act of 2012. A dedicated Data Protection Officer oversees compliance and handles all data subject requests within mandated timeframes.
All data in transit uses TLS 1.3. Sensitive fields at rest use AES-256 encryption. Your password is never stored in readable form — only as a hashed, salted value that cannot be reversed even if a database were ever compromised.
p22ph does not sell, rent, or trade player personal data to data brokers, advertising networks, or any third party for commercial purposes. Your data exists only to deliver and secure the p22ph Platform experience.
GCash, PayMaya, and Philippine bank payment data is processed through licensed payment infrastructure. p22ph stores only the minimum payment reference data needed for AML compliance — not full card or account numbers.
Your data subject rights under RA 10173 are enforceable. p22ph responds to access, rectification, erasure, and portability requests within 15 business days. If unsatisfied, the NPC provides a formal complaints pathway.
p22ph enforces the 21+ age requirement through identity verification. If data from a person under 21 is detected, it is deleted immediately and the matter is reported to PAGCOR — no exceptions, no delays.
Your privacy is protected by Philippine law, enforced by a dedicated Data Protection Officer, and built into every layer of the p22ph Platform. PAGCOR-licensed, GCash-ready, and secure for Filipino players nationwide.