Privacy Policy – How 22php Protects Your Personal Data

22php ("the Platform," "we," "us," or "our") takes the privacy of its users seriously. This Privacy Policy explains how we collect, process, store, share, and protect personal information belonging to all individuals who register for and use the 22php platform, including registered players, visitors to the 22php website, and anyone who contacts our customer support team.

This Policy is part of the overall legal framework governing your use of 22php and should be read alongside our Terms and Conditions. Both documents together define the full scope of your relationship with 22php.

22php is committed to protecting your privacy not just because it's legally required, but because we believe Filipino players deserve transparency about how their information is handled. We're not in the business of data brokering or selling user profiles to advertisers. Your information is used to run the platform you signed up for — no more, no less.

When you create a 22php account, we collect the information you provide during the registration process. This includes:

• Full legal name
• Date of birth (to verify you are 18 years of age or older)
• Philippine mobile number
• Email address
• Preferred username and password (stored in hashed form only — we never store your password in plain text)
• Country and region of residence

Before processing your first withdrawal, 22php is required to verify your identity. For this purpose, we collect:

• Copy of a valid Philippine government-issued photo ID (PhilSys National ID, UMID, passport, driver's licence, SSS/GSIS card, or voter's ID)
• A recent selfie or live photo for facial matching purposes
• Proof of address where required by our compliance obligations (e.g., recent utility bill or bank statement showing your name and address)

Identity documents are processed through a secure, certified KYC (Know Your Customer) verification system. We retain these documents as required by applicable anti-money laundering (AML) regulations.

Every financial transaction on 22php is logged for security and regulatory purposes. Transaction data includes:

• Deposit and withdrawal amounts, dates, and times
• Payment method used (e.g., GCash number, Maya account reference, bank name — we do not store full card numbers or full bank account numbers)
• Transaction status and reference numbers
• Associated bonus or promotional reference codes

22php records all gameplay and betting activity associated with your account, including:

• Games played, bet amounts, win/loss outcomes, and session duration
• Sports betting selections, stake amounts, and settlement outcomes
• Bonus claims and wagering progress
• Responsible gaming tool settings and usage history

This data is used to maintain your account history, resolve disputes, detect fraud, and monitor for responsible gaming indicators. You can review your full gameplay history in your account dashboard at any time.

When you access 22php, our systems automatically collect certain technical information, including:

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session start and end times, pages visited, and actions taken
• Connection type and network provider

This technical data helps us optimise platform performance for Philippine mobile users, detect unauthorised account access, and investigate security incidents.

22php collects personal data through the following methods:

• Directly from you: Information you enter during account registration, KYC submission, payment processing, support conversations, and promotional opt-ins.
• Automatically during platform use: Technical and device data collected by our servers and analytics systems whenever you access 22php.
• From payment processors: Transaction confirmation data received from GCash, Maya, BDO, BPI, UnionBank, and other payment partners when you make deposits or withdrawals.
• From identity verification partners: Results and confidence scores from our certified KYC verification provider when you submit identity documents.
• From fraud prevention systems: Risk signals and device fingerprinting data from our fraud detection tools, used to protect your account and the platform.
• Through cookies and similar tracking technologies: See Section 8 for full details on our cookie usage.

22php shares personal data with the following categories of third-party service providers who support platform operations. All such parties are bound by data processing agreements and are permitted to use your data only for the specific purpose for which it was shared:

• Payment processors: GCash, Maya, BDO, BPI, UnionBank, and other Philippine payment partners, for processing your deposit and withdrawal transactions.
• Game providers: NetEnt, Pragmatic Play, Playtech, Microgaming, and other certified game developers whose software is accessed through 22php. Game providers receive only session and gameplay tokens necessary to deliver the game experience — not your full personal profile.
• Identity verification providers: Certified KYC and AML compliance services that process your identity documents to verify your account.
• Fraud prevention and security services: Third-party systems that analyse device and behavioural signals to detect and prevent unauthorised account access and financial fraud.
• Cloud infrastructure providers: Hosting and data storage services used to run the 22php platform securely.
• Analytics platforms: Aggregate, anonymised usage data may be shared with analytics providers to help improve platform performance. No individually identifiable data is included in these shares.

22php may disclose your personal data to regulatory authorities, law enforcement agencies, or courts where required to do so by applicable Philippine law or by the terms of our gaming licence. This includes but is not limited to: responding to lawful requests from the Anti-Money Laundering Council (AMLC), PAGCOR, or Philippine law enforcement. Such disclosures are made only to the extent required by law and are not within our discretion to refuse.

To be completely clear about the limits of how 22php handles your data:

• We will never sell your personal information to third-party advertisers or data brokers.
• We will never share your data with other gambling platforms for cross-marketing purposes without your explicit consent.
• We will never share your government-issued ID or KYC documents with parties other than our certified identity verification provider and regulatory authorities where legally required.
• We will never transfer your data to overseas parties in ways that reduce your privacy protections below what you are entitled to under Philippine data protection law.

22php applies industry-standard technical and organisational security measures to protect personal data from unauthorised access, loss, destruction, or disclosure. The measures in place include:

• TLS encryption: All data in transit between your device and 22php's servers is encrypted using Transport Layer Security (TLS). This includes login sessions, account actions, and payment flows.
• Password hashing: Your account password is stored using a one-way cryptographic hash. Even 22php staff cannot see your password — only a hashed version is stored, and the original cannot be recovered from it.
• Access controls: Internal access to personal data at 22php is restricted on a need-to-know basis. Support staff, for example, can access the information needed to help with your query but not your full financial history or KYC documents unless specifically required.
• Two-factor authentication (2FA): 22php supports 2FA for account logins where available. We strongly recommend enabling this feature in your account settings.
• Fraud monitoring: Automated systems monitor login attempts, payment patterns, and gameplay behaviour for signs of account compromise or fraudulent activity.
• Regular security reviews: 22php conducts regular internal reviews of data security practices and engages third-party security audits periodically.

While 22php takes security seriously and invests in appropriate safeguards, no digital system is completely impervious to risk. If you suspect your account has been compromised, contact support at support@22php.best immediately.

22php retains personal data only for as long as it is necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. The following retention principles apply:

• Active account data: Retained for as long as your account is active and in use. If your account becomes inactive but is not closed, we may contact you before applying a dormancy process.
• Transaction and financial records: Retained for a minimum of 5 years from the date of the transaction, as required under Philippine AML regulations.
• KYC and identity verification documents: Retained for a minimum of 5 years from account closure, as required by applicable compliance obligations.
• Gameplay logs and betting history: Retained for a minimum of 3 years from the date of the activity, for dispute resolution, audit, and responsible gaming monitoring purposes.
• Customer support communications: Retained for 2 years from the date of the conversation, unless the matter relates to an unresolved dispute.
• Marketing opt-in records: Retained for as long as your consent remains active. Opt-out records are retained to ensure we do not inadvertently contact you again after you have unsubscribed.

When data reaches the end of its retention period and there is no longer a legal or operational basis for keeping it, 22php deletes or anonymises it in a secure manner.

22php uses cookies and similar tracking technologies to make the platform function correctly, keep you logged in between sessions, understand how the site is being used, and prevent fraud. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: These are essential for the platform to work. They handle your login session, security tokens, language preferences, and cart state for deposits. You cannot opt out of these without effectively disabling your 22php account.
• Functional Cookies: These remember your preferences — such as your preferred game category view or responsible gaming settings — so you don't have to re-enter them every session.
• Analytics Cookies: These help us understand how players navigate 22php so we can improve the experience. Analytics data is aggregated and does not identify you personally.
• Security and Fraud Prevention Cookies: These cookies support our fraud detection systems by tracking device characteristics and session behaviour patterns.

You can manage cookie preferences through your web browser settings. Most browsers allow you to block or delete specific types of cookies. Please note that blocking strictly necessary cookies will prevent 22php from functioning correctly for you — you will not be able to log in or play games without them.

22php does not use third-party advertising cookies or allow ad networks to track your browsing behaviour across other websites via cookies placed on 22php.

22php's services are strictly for individuals aged 18 years and above. We do not knowingly collect personal data from anyone under the age of 18. Date of birth is collected during registration specifically to verify minimum age, and identity verification is used to confirm this where required.

If 22php becomes aware that personal data has been collected from a person under 18, the associated account will be immediately closed, all funds will be returned to the payment source where technically possible, and the personal data will be securely deleted in accordance with our data retention schedule.

If you are a parent or guardian and believe your child has created a 22php account without your knowledge, please contact us at support@22php.best immediately. We will investigate and take appropriate action as a priority.

22php may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or the services we offer. When material changes are made, we will notify registered players via the email address on file and/or a prominent notice on the platform before the changes take effect.

The "Last Updated" date shown at the top of this page indicates when the current version of the Privacy Policy was published. We recommend reviewing this page periodically. Continued use of 22php after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms.

If you disagree with any changes to this Privacy Policy, you should stop using 22php and contact support to request account closure. Your data will be handled in accordance with the retention schedules outlined in Section 7 following account closure.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data, please contact us through the following channels:

• Email: support@22php.best — please include "Privacy Request" in your subject line for faster routing to the correct team.
• Live Chat: Available 24/7 via the chat function on the 22php platform. For privacy requests, ask the agent to escalate to the Privacy team if your query requires detailed investigation.

We aim to acknowledge all privacy-related correspondence within 24 hours and to fully resolve requests within 30 days. For straightforward queries — such as updating your email address or opting out of marketing — resolution is typically same-day through live chat or within a few hours by email.

If you feel that 22php has not adequately addressed your privacy concern after going through our internal process, you may also raise the matter with the relevant Philippine regulatory authority responsible for data protection.