ph2227 Privacy Policy

1 Introduction

ph2227 ("we," "us," or "our") operates the online gaming platform accessible at https://ph2227.net (the "Platform"), serving registered players across the Philippines. We are committed to protecting the privacy and personal data of every player who registers with, accesses, or uses the ph2227 Platform.

This Privacy Policy is issued in compliance with the Philippines Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as applicable PAGCOR regulatory requirements governing online gaming operators in the Philippines.

This Policy explains:

• What personal data ph2227 collects from you and how;
• The purposes for which we process your personal data;
• How we protect, retain, and — where applicable — share your data;
• The rights you have as a data subject under Philippine law, and how to exercise them.

By registering an account on ph2227 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with its terms, please discontinue use of the Platform and close your account.

2 Personal Data We Collect

ph2227 collects the following categories of personal data from players:

2.1 Registration & Identity Data

• Full legal name;
• Date of birth (to verify the 21+ age requirement under PAGCOR rules);
• Gender;
• Email address;
• Mobile phone number;
• Residential address (including city — Manila, Cebu, Davao, Quezon City, Makati, or other Philippine locations);
• Username and encrypted password.

2.2 KYC Verification Data

• Scanned copy or photograph of a valid Philippine government-issued photo ID (e.g., passport, driver's licence, PhilSys National ID, UMID, SSS ID, Voter's ID);
• Proof of address document (e.g., recent utility bill or bank statement), where required;
• Selfie photograph for identity verification, where required by our compliance team.

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records;
• Payment method details (e.g., GCash account reference, PayMaya reference, BPI/BDO/Metrobank account name — we do not store full bank account numbers);
• Account balance history;
• Bonus and promotion redemption records.

2.4 Gaming Activity Data

• Game session logs (game type, duration, wager amounts, outcomes);
• Bet history across all game categories (slots, live casino, sports betting, sabong, bingo, fishing games);
• Responsible gaming settings you have configured (deposit limits, session reminders, cooling-off periods).

2.5 Technical & Device Data

• IP address;
• Device type, operating system, and browser version;
• Cookie identifiers and session tokens;
• Time zone and approximate geolocation (country/region level);
• Platform access logs and timestamps.

2.6 Communications Data

• Records of your communications with ph2227's customer support team (emails, live chat transcripts);
• Survey responses and feedback you voluntarily submit.

3 How We Collect Your Data

ph2227 collects personal data through the following means:

• Direct submission: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or filling in any forms on the Platform;
• Automated collection: Technical data collected automatically when you access and use the Platform, including through cookies, server logs, and analytics tools;
• Third-party verification services: Identity data confirmed through licensed KYC and AML verification partners operating under equivalent data protection standards;
• Payment processors: Transaction confirmation data received from GCash, PayMaya, BPI, BDO, Metrobank, and other Philippine payment providers when you initiate deposits or withdrawals.

4 How We Use Your Personal Data

ph2227 processes your personal data for the following specific purposes:

ph2227 does not use automated decision-making or profiling that produces significant legal effects on players without human review.

5 Legal Basis for Processing

Under the Philippines Data Privacy Act of 2012, ph2227 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to fulfil our obligations to you as an account holder on the ph2227 Platform — including account creation, game access, and payment processing;
• Legal obligation: Processing required to comply with Philippine laws and regulations, including PAGCOR licensing conditions, the Anti-Money Laundering Act (RA 9160 as amended), and the Data Privacy Act (RA 10173);
• Legitimate interests: Processing carried out for purposes that are in our legitimate interest as an operator — such as fraud prevention, platform security, and service improvement — provided such interests are not overridden by your rights;
• Consent: Processing for optional purposes such as marketing communications, where we will always ask for your explicit opt-in consent and honour any withdrawal of that consent.

6 Data Sharing & Disclosure

ph2227 does not sell, rent, or trade your personal data to third parties. We share personal data only in the following limited circumstances:

6.1 Regulatory Authorities

ph2227 is required by law to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities where legally mandated — for example, in response to an official investigation, court order, or regulatory inquiry.

6.2 KYC and Payment Service Providers

We engage licensed third-party service providers to assist with identity verification and payment processing. These include KYC verification platforms and Philippine e-wallet and banking partners (GCash, PayMaya, BPI, BDO, Metrobank). These providers are contractually bound to process your data only for the specific purposes for which they are engaged and to maintain equivalent data protection standards.

6.3 Game Content Providers

Game outcome and session data may be shared with licensed third-party game providers to enable the delivery of games on the ph2227 Platform. These providers do not receive identity-level personal data (e.g., your name or ID) — only pseudonymous player session identifiers.

6.4 Legal Proceedings

ph2227 may disclose personal data where necessary to establish, exercise, or defend legal claims involving the Platform or a player account.

7 Cookies & Tracking Technologies

ph2227 uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function — these include session authentication tokens and security cookies. These cannot be disabled without impairing platform functionality.
• Performance & analytics cookies: Used to understand how players navigate and use the Platform, allowing us to identify areas for improvement. Data collected is aggregated and anonymised where possible.
• Functional cookies: Remember your preferences such as language settings and responsible gaming configuration.
• Marketing cookies: Used only where you have provided explicit consent to receive personalised promotional communications from ph2227.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use the Platform. ph2227 does not use cross-site tracking cookies that follow you outside of the ph2227 Platform.

8 Data Retention

ph2227 retains personal data for as long as necessary to fulfil the purposes for which it was collected, and in any case for the minimum periods required by Philippine law:

• Account and KYC data: Retained for a minimum of five (5) years from the date of account closure, in compliance with the Anti-Money Laundering Act (RA 9160 as amended) and PAGCOR record-keeping requirements;
• Transaction and financial records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity logs: Retained for a minimum of two (2) years for dispute resolution and responsible gaming monitoring purposes;
• Customer support communications: Retained for two (2) years from the date of the interaction;
• Marketing consent records: Retained for the duration of the consent and for one (1) year following withdrawal of consent, to evidence compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with industry best practices and NPC guidelines.

9 Data Security

ph2227 implements a multi-layered security framework to protect your personal data against unauthorised access, disclosure, alteration, or destruction:

• TLS/SSL encryption for all data in transit between your device and ph2227's servers;
• AES-256 encryption for sensitive data at rest in our database systems;
• Access controls: Player personal data is accessible only to ph2227 staff who need it to perform their specific job functions, governed by role-based access controls and audit logging;
• Two-factor authentication (2FA) for internal system access by ph2227 staff;
• Regular penetration testing and security audits conducted by independent third parties;
• Incident response procedures in place to detect, contain, and notify in the event of a data breach, in compliance with NPC notification requirements.

While ph2227 takes all reasonable and appropriate technical and organisational measures to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your ph2227 account credentials confidential and for notifying us immediately if you suspect unauthorised access to your account.

10 Your Rights as a Data Subject

Under the Philippines Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by ph2227:

To exercise any of the above rights, please contact ph2227's Data Protection Officer by email at [email protected] with the subject line "Data Subject Request." We will respond within fifteen (15) business days as required by the Data Privacy Act.

Please note that certain rights are subject to limitations — for example, we cannot erase data that we are legally required to retain for AML or PAGCOR compliance purposes.

11 Children's Privacy — 21+ Platform

If ph2227 discovers that personal data has been collected from a person under the age of 21, the account will be immediately suspended, all associated data will be deleted, and any funds deposited will be returned to the originating payment method following verification.

Age is verified through the KYC process, which requires submission of a valid Philippine government-issued photo ID. Attempting to circumvent the age verification process is a serious violation of ph2227's Terms & Conditions and may be reported to relevant authorities.

12 Third-Party Links

The ph2227 Platform may contain references to third-party game providers or payment services. While ph2227 only works with reputable, regulated partners, we do not control and are not responsible for the privacy practices of any third-party service.

This Privacy Policy applies solely to the ph2227 Platform at https://ph2227.net. We encourage you to review the privacy policies of any third-party service you interact with in connection with your ph2227 account — particularly your chosen payment provider (GCash, PayMaya, BPI, BDO, or Metrobank).

13 Updates to This Privacy Policy

ph2227 reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or our data processing practices. The most current version will always be published at https://ph2227.net/privacy-policy.

For material changes — those that significantly affect your rights or the way we use your data — ph2227 will notify registered players by email or through an in-platform notification at least fourteen (14) days before the change takes effect.

Your continued use of the ph2227 Platform after the effective date of any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you may close your account by contacting our support team.

14 Contact Us & Data Protection Officer

ph2227 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippines Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact us:

Data Protection Officer — ph2227
Email: [email protected]
Subject line: "Privacy Policy Enquiry" or "Data Subject Request"

Our support team and DPO are available 24 hours a day, 7 days a week. We aim to acknowledge all privacy-related communications within 24 hours and to resolve the majority of requests within 15 business days.