22ph1 Privacy Policy
At 22ph1, your personal data is treated with the same care we put into every part of the platform. This Privacy Policy explains exactly what information we collect, why we collect it, how we use it, and what rights you hold as a Filipino player under Republic Act No. 10173 — the Data Privacy Act of 2012.
Our Privacy Commitments
Six core principles that define how 22ph1 handles your personal information — from registration to your last transaction.
Data Minimization
22ph1 only collects personal data that is strictly necessary for the purposes outlined in this Privacy Policy. We do not collect data for its own sake. If a piece of information is not needed to operate your account, verify your identity, process payments, or meet legal obligations, we do not ask for it.
Bank-Grade Encryption
All data transmitted between your device and the 22ph1 platform is protected by 256-bit SSL/TLS encryption — the same standard used by major Philippine banks including BPI and BDO. Personal data stored on our servers is encrypted at rest and access is restricted to authorized personnel only on a strict need-to-know basis.
No Data Selling
22ph1 does not sell, rent, or trade your personal information to third-party advertisers or data brokers under any circumstances. Your data belongs to you. We share it only with the service providers and regulatory bodies explicitly listed in this Privacy Policy, and only to the extent necessary for those specific purposes.
DPA 2012 Compliance
22ph1 operates in full compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and the implementing rules and regulations issued by the National Privacy Commission (NPC). We maintain a Data Protection Officer (DPO) and conduct regular internal privacy audits to ensure ongoing compliance with all applicable Philippine data protection standards.
Player Control Over Data
You have meaningful control over the personal data 22ph1 holds about you. You may request access to your data, request corrections, withdraw consent for marketing communications, or request deletion of your account data — all subject to our legal retention obligations. Requests are handled within the timeframes prescribed by Philippine data privacy regulations.
Transparent Breach Notification
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 22ph1 will notify affected players and the National Privacy Commission within the timeframes mandated by the Data Privacy Act. We maintain an incident response plan and conduct breach simulation drills to ensure our team is prepared to act quickly and transparently.
Contents
- 1. About This Policy
- 2. Data Controller
- 3. Data We Collect
- 4. How We Collect Data
- 5. Why We Use Your Data
- 6. Legal Basis for Processing
- 7. Data Sharing
- 8. Cookies and Tracking
- 9. Data Retention
- 10. Data Security
- 11. Your Rights
- 12. Children's Privacy
- 13. Marketing Communications
- 14. Cross-Border Transfers
- 15. Changes to This Policy
- 16. Contact Our DPO
This Privacy Policy describes the personal data processing practices of 22ph1 ("the Company," "we," "us," or "our") in connection with your use of the 22ph1 platform, including our website, mobile interface, games, sportsbook, and all related services (collectively, the "Platform"). By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle your data, please discontinue use of the Platform and contact us to request account closure.
01 About This Policy
This Privacy Policy sets out the basis on which 22ph1 collects, stores, uses, and discloses personal data about players and visitors to our Platform. It applies to all personal data we receive from you directly, as well as data generated through your use of the Platform — including gameplay activity, transaction records, device information, and communication history with our support team.
This Policy should be read alongside the 22ph1 Terms and Conditions, which govern the overall relationship between you and the Company. In the event of any conflict between this Policy and the Terms and Conditions with respect to data privacy matters, this Privacy Policy shall prevail.
This Policy is written to comply with the requirements of Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations (IRR), and all relevant issuances of the National Privacy Commission of the Philippines.
02 Data Controller
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, 22ph1 acts as the Personal Information Controller (PIC) in respect of the personal data it processes about players and Platform visitors. As PIC, 22ph1 determines the purposes and means of processing your personal data.
22ph1 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with data privacy obligations, handling data subject requests, and serving as the point of contact with the National Privacy Commission. You may contact our DPO using the details provided in Section 16 of this Policy.
Role: Data Protection Officer, 22ph1
Email: [email protected]
Subject line: "DPO — Privacy Request"
Response time: Within 15 working days of receiving your request, as required by the Data Privacy Act IRR.
03 Personal Data We Collect
22ph1 collects the following categories of personal data from players and Platform visitors:
3.1 Identity and Registration Data
- Full legal name, date of birth, gender, and nationality
- Username and password (stored in hashed, non-reversible form)
- Government-issued ID type and ID number (submitted during KYC verification)
- Selfie or photograph submitted for identity verification purposes
- Residential address (barangay, city/municipality, province, region)
3.2 Contact Data
- Email address registered to your 22ph1 account
- Mobile number registered to your 22ph1 account
3.3 Financial Data
- GCash or PayMaya mobile number and account name
- Bank account name and account number (for BPI, BDO, or Metrobank withdrawals)
- Transaction history including deposit amounts, withdrawal requests, dates, and payment method used
- Cryptocurrency wallet addresses where applicable
3.4 Gaming and Behavioral Data
- Game session records including games played, wager amounts, win/loss outcomes, and session duration
- Sports bets placed, odds accepted, markets selected, and settlement results
- Bonus and promotion redemption history
- Responsible gaming preferences, deposit limits, and self-exclusion records
3.5 Technical and Device Data
- IP address and approximate geolocation derived from IP data
- Device type, operating system, browser type and version
- Session timestamps, login history, and page navigation patterns
- Cookies and similar tracking technologies as described in Section 8
3.6 Communications Data
- Records of live chat conversations with 22ph1 customer support
- Email correspondence sent to or received from 22ph1
- Feedback, complaints, and dispute records
Certain data we collect — including government ID numbers, financial account details, and records of problem gambling disclosures made through our responsible gaming tools — may constitute sensitive personal information under the Data Privacy Act of 2012. 22ph1 applies heightened safeguards to such data and processes it only where there is a lawful basis to do so, as described in Section 6 of this Policy.
04 How We Collect Your Data
22ph1 collects personal data through the following channels:
- Direct submission — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a promotion.
- Automated collection — through cookies, log files, and analytics tools as you navigate and interact with the Platform. See Section 8 for details on cookies.
- Third-party payment processors — transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processors when you complete a deposit or withdrawal.
- Identity verification providers — results of identity and age verification checks conducted through our KYC service partners.
- Fraud and AML detection systems — risk signals and data points generated by our anti-fraud and anti-money laundering monitoring tools in connection with your account activity.
05 Why We Use Your Personal Data
22ph1 uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity data, contact data, login credentials |
| Identity and age verification (KYC) | Identity data, government ID, selfie/photo |
| Processing deposits and withdrawals | Financial data, identity data, contact data |
| Providing casino, bingo, and sports betting services | Gaming data, financial data, technical data |
| Fraud detection and anti-money laundering compliance | All categories as necessary |
| Responsible gaming monitoring and enforcement | Gaming data, identity data, responsible gaming preferences |
| Customer support and dispute resolution | Communications data, identity data, gaming and financial data |
| Platform security and abuse prevention | Technical data, identity data, gaming data |
| Legal and regulatory compliance | All categories as required by law |
| Sending promotional and bonus communications (with consent) | Contact data, gaming data (for personalization) |
| Platform improvement and analytics | Technical data, behavioral data (aggregated/anonymized where possible) |
06 Legal Basis for Processing
Under the Data Privacy Act of 2012, 22ph1 processes your personal data on the following legal bases:
- Contractual necessity — processing required to perform our obligations under the Terms and Conditions, including account management, game provision, and payment processing.
- Legal obligation — processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (RA 9160), PAGCOR regulations, and National Privacy Commission requirements.
- Legitimate interests — processing for fraud prevention, platform security, responsible gaming enforcement, and internal analytics, where such interests are not overridden by your data protection rights.
- Consent — processing for marketing communications and non-essential cookies, where we have obtained your explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
07 Data Sharing and Disclosure
22ph1 does not sell your personal data. We share personal data only in the following circumstances and only to the minimum extent necessary:
7.1 Service Providers
We engage trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), KYC and identity verification providers, game software suppliers (such as JILI Games and Pragmatic Play), customer support platform operators, and cloud hosting providers. These providers process your data only on our instructions and are bound by data processing agreements that require them to maintain standards consistent with the Data Privacy Act.
7.2 Regulatory and Law Enforcement Authorities
22ph1 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine government authorities where required to do so by law, court order, or regulatory direction. We will notify you of such disclosures where permitted by law.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of the Company or its assets, your personal data may be transferred to the acquiring entity as part of the transaction. We will notify you before your data is transferred to and becomes subject to a different privacy policy.
7.4 With Your Consent
We may share your data with third parties not described above if you give us explicit consent to do so. You may withdraw such consent at any time by contacting our DPO.
22ph1 does not share your personal data with third-party advertisers, data brokers, or marketing companies for their own promotional purposes. Any marketing communications you receive from 22ph1 relate solely to 22ph1 products and services, and only if you have opted in.
08 Cookies and Tracking Technologies
22ph1 uses cookies and similar tracking technologies on the Platform to enable core functionality, improve your experience, and gather analytics data. The following types of cookies may be used:
- Strictly necessary cookies — essential for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session. These cookies cannot be disabled without impairing Platform functionality.
- Functional cookies — remember your preferences such as language settings, preferred game categories, and responsible gaming limits you have set.
- Analytics cookies — collect anonymized data about how players navigate and use the Platform, helping us identify areas for improvement. This data does not identify you personally.
- Security cookies — used for fraud detection and to identify unusual login patterns or suspicious activity on your account.
Non-essential cookies (functional and analytics) are only placed with your consent, which you may provide or withdraw through the cookie preferences tool accessible on the Platform. Withdrawing consent for non-essential cookies will not affect your ability to use core Platform features.
22ph1 does not use third-party advertising cookies or permit external advertisers to place tracking cookies on the Platform.
09 Data Retention
22ph1 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
- Account and identity data — retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
- Transaction records — retained for a minimum of five (5) years in compliance with AML obligations and tax record-keeping requirements under Philippine law.
- KYC documents — retained for five (5) years from the date of submission or the date of account closure, whichever is later.
- Customer support communications — retained for two (2) years from the date of the most recent communication in a support thread, or longer if the communication relates to a dispute or legal matter that remains unresolved.
- Gaming and behavioral data — retained for two (2) years for analytics and responsible gaming purposes, after which it is anonymized or deleted.
- Marketing consent records — retained for the duration of your account plus three (3) years, to demonstrate compliance with consent requirements.
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with our data disposal procedures.
10 Data Security
22ph1 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data in transit between your device and the Platform
- Encryption of sensitive data at rest, including financial data and government ID information
- Strict role-based access controls limiting staff access to personal data on a need-to-know basis
- Multi-factor authentication requirements for all internal systems that process personal data
- Regular penetration testing and security audits conducted by independent third-party specialists
- A formal incident response plan and data breach notification procedure aligned with NPC requirements
- Staff training on data protection obligations and security best practices, conducted at onboarding and annually thereafter
While 22ph1 employs industry-leading security practices, no data transmission over the internet is completely risk-free. You are responsible for maintaining the confidentiality of your own account credentials. If you suspect your account has been compromised, contact 22ph1 support immediately.
11 Your Data Subject Rights
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 22ph1. To exercise any of these rights, contact our DPO at the details in Section 16. We will respond within 15 working days of receiving your request.
Right to Access
Request a copy of the personal data 22ph1 holds about you, including what data we have, why we hold it, and who we have shared it with.
Right to Rectification
Request correction of inaccurate or incomplete personal data about you. Some corrections may require identity verification before they can be applied.
Right to Erasure
Request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to our legal retention obligations.
Right to Object
Object to processing of your personal data for direct marketing purposes or where processing is based on legitimate interests, on grounds relating to your particular situation.
Right to Portability
Receive your personal data in a structured, commonly used, machine-readable format, and transmit that data to another service provider where technically feasible.
Right to Complain
Lodge a complaint directly with the National Privacy Commission of the Philippines if you believe 22ph1 has handled your personal data in a manner that violates the Data Privacy Act.
The right to erasure is not absolute. 22ph1 is required by PAGCOR regulations and the Anti-Money Laundering Act to retain certain records — including transaction history and KYC documents — for a minimum of five years. Erasure requests covering data subject to these legal retention requirements will be partially fulfilled; we will delete all data not subject to legal retention and inform you of what data must be kept and why.
12 Children's Privacy and Age Restrictions
The 22ph1 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online gaming. 22ph1 does not knowingly collect, store, or process personal data from individuals under the age of 21.
Age verification is conducted as part of the account registration and KYC process. Where 22ph1 discovers or has reasonable grounds to believe that an account holder is under 21 years of age, the account will be immediately suspended and any personal data collected in connection with that account will be securely deleted, except where retention is required to report the incident to the relevant authorities.
If you are a parent or guardian and believe that your child under the age of 21 has registered an account on 22ph1, please contact us immediately at [email protected] so we can take prompt action.
13 Marketing Communications
22ph1 may send you promotional communications about bonuses, new games, special events, and Platform updates. We will only send you marketing communications if you have given us your explicit consent to do so at registration or through your account settings.
Marketing communications from 22ph1 may be delivered via:
- Email to your registered email address
- SMS to your registered mobile number
- Push notifications through the 22ph1 mobile interface (if enabled on your device)
- In-Platform notifications displayed when you are logged in
You may opt out of marketing communications at any time by:
- Clicking the "Unsubscribe" link in any marketing email from 22ph1
- Adjusting your notification preferences in your account settings
- Contacting customer support or our DPO with an opt-out request
Opting out of marketing communications will not affect transactional messages — such as deposit confirmations, withdrawal notifications, and security alerts — which are sent as a necessary part of operating your account.
14 Cross-Border Data Transfers
In the course of operating the Platform, some of your personal data may be processed by our service providers in countries outside the Philippines — for example, where our game software providers or cloud infrastructure providers maintain data centers in other jurisdictions.
Where such cross-border transfers occur, 22ph1 ensures that appropriate safeguards are in place to protect your personal data in accordance with the standards required by the Data Privacy Act of 2012 and the implementing rules of the National Privacy Commission. These safeguards may include:
- Data processing agreements incorporating NPC-approved standard contractual clauses
- Transfers to countries that the NPC has recognized as providing an adequate level of data protection
- Binding corporate rules applicable to transfers within the corporate group of a service provider
For more information about the specific safeguards applicable to any cross-border transfer of your data, please contact our DPO.
15 Changes to This Privacy Policy
22ph1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable Philippine law or NPC guidance, or other operational reasons. When material changes are made to this Policy, we will:
- Update the "Last Updated" date at the top of this page
- Display a prominent notice on the Platform informing logged-in players of the update
- Send a notification to your registered email address where the changes materially affect how we process your personal data
Your continued use of the Platform after the effective date of an amended Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this page periodically to stay informed about how 22ph1 protects your personal information. The current version of the Privacy Policy is always accessible at this URL.
16 Contact Our Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or the personal data 22ph1 holds about you, please contact our Data Protection Officer:
Email: [email protected]
Subject line: "DPO — Privacy Request"
Language: English or Filipino accepted
Response time: Within 15 working days as required by the Data Privacy Act IRR
If you are not satisfied with our response to your privacy request or complaint, you have the right to escalate the matter directly to the National Privacy Commission of the Philippines. The NPC's official complaint procedures and contact details are available on their official government website.
For general account support, game-related questions, or payment inquiries, please contact our customer support team via the live chat feature on the 22ph1 Platform, available 24 hours a day, 7 days a week.
Play with Confidence at 22ph1
Your data is protected, your identity is verified, and your winnings are real. Join hundreds of thousands of Filipino players who trust 22ph1 for slots, live casino, bingo, and PBA sports betting — all in Philippine Peso with GCash and PayMaya support.