ph25 Privacy Policy

ph25 ("ph25," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the ph25 online gaming platform available at ph25.app (the "Platform"). This Privacy Policy ("Policy") describes how ph25 collects, uses, discloses, stores, and protects personal information in connection with your use of the Platform and all related services.

This Policy is issued in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). By registering for or using the ph25 Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with the ph25 Terms & Conditions, which are incorporated herein by reference. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

ph25 collects personal information from you in the following ways:

2.1 Information You Provide Directly

• Registration Data: When you create a ph25 account, we collect your full name, date of birth, email address, mobile number, and chosen username and password.
• Identity Verification (KYC) Documents: To comply with Philippine anti-money laundering regulations and to verify your age (21+), we may collect copies of government-issued identification documents such as a Philippine passport, driver's license, SSS ID, UMID, PhilHealth ID, or Voter's ID.
• Financial Information: When you make deposits or request withdrawals, we collect payment details such as your GCash number, PayMaya (Maya) account, or bank account details (bank name, account number). We do not store full payment card numbers.
• Communications: If you contact ph25 support via live chat or email, we retain records of those communications to assist you and improve our services.
• Responsible Gaming Preferences: If you set deposit limits, session reminders, or request self-exclusion, we record those preferences to enforce them on your account.

2.2 Information Collected Automatically

• Device & Technical Data: IP address, browser type and version, operating system, device identifiers, and screen resolution.
• Usage Data: Pages visited, games played, session duration, betting history, and navigation patterns within the Platform.
• Cookies and Similar Technologies: As described in Section 6 of this Policy.
• Location Data: General geographic location derived from your IP address, used to verify that you are accessing the Platform from a permitted jurisdiction.

ph25 uses the personal information we collect for the following purposes:

• Account Management: To create, maintain, and manage your ph25 account, including verifying your identity and age (21+).
• Service Delivery: To provide access to games, process deposits and withdrawals, and deliver the core features of the ph25 Platform.
• Regulatory Compliance: To comply with our obligations under Philippine law, including the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and applicable PAGCOR regulations. This includes conducting KYC checks and reporting suspicious transactions where required.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible Gaming: To enforce deposit limits, self-exclusion requests, and other responsible gaming tools you have activated on your account.
• Customer Support: To respond to your inquiries, resolve disputes, and improve our support services.
• Platform Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the ph25 Platform.
• Marketing Communications: With your consent, to send you promotional offers, bonus notifications, and updates about ph25. You may opt out of marketing communications at any time.
• Legal Proceedings: To establish, exercise, or defend legal claims where necessary.

ph25 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and ph25 (i.e., to provide the Platform services you have registered for).
• Legal Obligation: Processing is necessary to comply with applicable Philippine laws and regulations, including KYC, AML, and gaming regulatory requirements.
• Legitimate Interests: Processing is necessary for ph25's legitimate interests in operating a secure, fair, and compliant gaming platform, provided those interests are not overridden by your rights and interests.
• Consent: For marketing communications and certain non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.

ph25 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal information with the following categories of recipients, strictly as necessary:

• Payment Processors: GCash, PayMaya (Maya), and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers who assist ph25 in verifying your identity and age in compliance with Philippine regulations.
• Game Content Providers: Licensed game studios and live casino operators who supply game content to the ph25 Platform. These providers may receive limited technical data necessary to deliver their games.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law or regulation.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and fraud detection providers who process data on ph25's behalf under strict data processing agreements.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors where necessary for legal compliance or dispute resolution.

All third parties with whom ph25 shares personal data are required to handle that data in accordance with applicable Philippine data protection laws and ph25's data processing standards.

ph25 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit the ph25 website. We use the following types of cookies:

• Essential Cookies: Necessary for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings and responsible gaming limits.
• Analytics Cookies: Help ph25 understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymized where possible.
• Marketing Cookies: Used with your consent to deliver relevant promotional content. You may opt out of marketing cookies at any time via your browser settings.

You can control cookie settings through your browser. Note that disabling essential cookies may affect the functionality of the ph25 Platform.

ph25 retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law and regulation. Specifically:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AMLA record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• KYC Documents: Retained for the duration of your account and for five (5) years after account closure.
• Support Communications: Retained for two (2) years from the date of the communication.
• Marketing Preferences: Retained until you withdraw your consent or close your account.

After the applicable retention period, ph25 will securely delete or anonymize your personal data in accordance with our data disposal procedures.

ph25 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the ph25 Platform.
• Encryption of sensitive data at rest, including payment information and identity documents.
• Access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments.
• Incident response procedures for detecting and responding to data breaches.

As a data subject under the Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by ph25:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which this Policy fulfills.
• Right of Access: The right to request a copy of the personal data ph25 holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to ph25's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact ph25 support via live chat. ph25 will respond to all data subject requests within thirty (30) days, as required by the Data Privacy Act.

The ph25 Platform is strictly intended for persons aged 21 years and above. ph25 does not knowingly collect personal data from individuals under the age of 21. If ph25 becomes aware that personal data has been collected from a person under 21, that data will be deleted immediately and the associated account will be suspended.

If you are a parent or guardian and believe that your child has registered on ph25, please contact our support team immediately via live chat so we can take appropriate action.

The ph25 Platform may contain links to third-party websites or services (for example, payment provider portals). ph25 is not responsible for the privacy practices of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. This Policy applies solely to information collected by ph25 through the ph25 Platform.

ph25 reserves the right to update or amend this Privacy Policy at any time. When material changes are made, ph25 will update the "Last Updated" date at the top of this page and, where appropriate, notify registered players via the Platform or by email.

Your continued use of the ph25 Platform following the posting of any amendments constitutes your acceptance of the revised Policy. If you do not agree to the amended Policy, you must cease using the Platform and may close your account as described in the Terms & Conditions.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by ph25, please contact our Data Protection Officer via live chat, available 24/7 on the Platform. You may also reach us by email at the address listed in the footer of this page.

ph25 aims to respond to all privacy-related inquiries within five (5) business days. For urgent matters, live chat is the fastest way to reach our team.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been adequately addressed by ph25.