222ph Privacy Policy

1. Who We Are

This Privacy Policy is issued by 222ph ("222ph," "we," "us," or "our"), the operator of the online gaming platform accessible at 222ph.app. 222ph is committed to protecting the personal data of all users ("you," "Player," or "User") who access or use our Platform, in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines (the "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

For the purposes of the DPA, 222ph acts as the Personal Information Controller in respect of the personal data you provide to us or that we collect about you in connection with your use of the Platform.

By registering an account or continuing to use the 222ph Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

2. Personal Data We Collect

Depending on how you interact with the 222ph Platform, we may collect the following categories of personal data:

We do not collect sensitive personal information (as defined under the DPA) unless strictly required for identity verification or regulatory compliance, and only with your explicit consent where required by law.

3. How We Collect Your Data

222ph collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or responding to surveys.
• Automated technologies: As you navigate the Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies. See Section 9 for more details.
• Third-party sources: We may receive data about you from payment processors (e.g., GCash, Maya, BPI, BDO), identity verification providers, fraud prevention services, and PAGCOR or other regulatory bodies where required by law.
• Publicly available sources: In limited circumstances, we may supplement your data with information from publicly available Philippine government databases for identity verification purposes.

4. How We Use Your Personal Data

222ph uses the personal data we collect for the following purposes:

• Account management: To register and maintain your 222ph account, verify your identity, and manage your account preferences.
• Service delivery: To process deposits and withdrawals in Philippine Peso, provide access to games, and deliver customer support.
• Regulatory compliance: To comply with PAGCOR licensing requirements, anti-money laundering (AML) obligations, and the Data Privacy Act of 2012.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, unauthorized account access, and other prohibited conduct.
• Responsible gaming: To monitor gaming patterns, enforce deposit and loss limits, and identify players who may need responsible gaming support.
• Marketing and promotions: To send you relevant offers, bonuses, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.
• Platform improvement: To analyze usage patterns, conduct A/B testing, and improve the overall 222ph player experience.
• Legal proceedings: To establish, exercise, or defend legal claims where necessary.

We will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or as otherwise permitted by applicable law.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 222ph processes your personal data on the following legal bases:

• Consent: Where you have given clear, informed consent for a specific processing purpose, such as receiving marketing communications.
• Contractual necessity: Where processing is necessary to perform our obligations under the Terms and Conditions you agreed to upon registration — for example, processing your deposits and game wagers.
• Legal obligation: Where processing is required to comply with applicable Philippine law, including PAGCOR regulations, AML laws, and tax reporting obligations.
• Legitimate interests: Where processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and freedoms.

6. Sharing Your Personal Data

222ph does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, and other Philippine payment providers, to process your financial transactions.
• Game providers: Licensed third-party game suppliers who provide the games available on the 222ph Platform. These providers may receive anonymized or pseudonymized gaming data.
• Identity verification providers: Third-party KYC and AML service providers engaged to verify your identity and comply with regulatory requirements.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where required by law or regulatory directive.
• IT and security providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on our behalf under strict data processing agreements.
• Professional advisers: Lawyers, auditors, and consultants who require access to your data in the course of providing professional services to 222ph.

Any third party with whom we share your data is required to handle it in accordance with the Data Privacy Act of 2012 and to implement appropriate technical and organizational security measures. We do not permit our third-party service providers to use your personal data for their own purposes.

7. Data Retention

222ph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general rule, 222ph applies the following retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine AML regulations.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session.
• Support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing preferences: Retained until you withdraw your consent or request erasure, whichever is earlier.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized so that it can no longer be associated with you as an individual.

8. Data Security

222ph takes the security of your personal data seriously. We implement a range of technical and organizational measures designed to protect your data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the 222ph Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorized 222ph personnel can access personal data, and only to the extent necessary for their role.
• Regular security assessments, penetration testing, and vulnerability scanning of our platform infrastructure.
• Multi-factor authentication (MFA) requirements for internal systems that process personal data.
• Incident response procedures to detect, report, and address personal data breaches in accordance with NPC notification requirements.

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your 222ph account credentials confidential and for notifying us immediately at [email protected] if you suspect any unauthorized access to your account.

9. Cookies & Tracking Technologies

The 222ph Platform uses cookies and similar tracking technologies to enhance your experience, analyze platform usage, and support our security and fraud prevention measures. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that help detect fraudulent activity. These cannot be disabled.
• Functional cookies: Remember your preferences, such as language settings and game display options, to personalize your experience.
• Analytics cookies: Help us understand how players use the Platform — which pages are visited most, where players drop off, and how features are used. This data is aggregated and anonymized.
• Marketing cookies: Used to deliver relevant promotional content to you on the Platform. These are only set where you have consented to receive marketing communications.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 222ph Platform. For more information on managing cookies in popular Philippine mobile browsers, refer to your device's help documentation.

10. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 222ph. To exercise any of these rights, contact us at [email protected] with the subject line "Data Privacy Request."