ph25 Privacy Policy

1 Introduction

ph25 Casino ("ph25", "we", "us", "our") is committed to protecting the privacy and personal data of all players and visitors who use the ph25 platform at ph25.net. This Privacy Policy describes how we collect, use, store, share, and protect your personal information in connection with your use of our online gaming services.

This policy applies to all personal data collected through the ph25 website, mobile platform, customer support channels, and any other touchpoints through which you interact with ph25. It should be read alongside our Terms & Conditions, which govern your use of the ph25 platform as a whole.

By registering an account on ph25 or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, please discontinue use of the ph25 platform.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, ph25 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes from players and visitors.

As the Personal Information Controller, ph25 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable data protection law.

ph25 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection regulations. Contact details for the DPO are provided in Section 16 of this policy.

3 Personal Data We Collect

ph25 collects the following categories of personal data from players and platform visitors:

4 How We Collect Your Data

ph25 collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the ph25 platform, including through cookies, web beacons, and server logs. See Section 8 for more details on cookies.
• Third-party sources: Identity verification data from KYC service providers; fraud and risk data from payment processors; publicly available information used to verify your identity or comply with AML obligations.
• Referral data: If you arrive at ph25 through a referral link or affiliate programme, ph25 may receive limited data about the referral source. This does not include any personal data about the referring party beyond a referral identifier.

5 How We Use Your Personal Data

ph25 uses the personal data it collects for the following purposes:

• Account management: To create, maintain, and administer your ph25 player account, including processing deposits and withdrawals in Philippine Peso (₱).
• Identity and age verification: To verify that you are at least 21 years of age and to confirm your identity in compliance with KYC requirements.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Regulatory compliance: To comply with anti-money laundering (AML) obligations, tax reporting requirements, and other applicable Philippine laws and regulations.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats to the ph25 platform.
• Responsible gaming: To monitor gameplay patterns and identify players who may be exhibiting signs of problem gambling, and to administer self-exclusion and account restriction requests.
• Customer support: To respond to your enquiries, resolve disputes, and provide technical assistance.
• Platform improvement: To analyse usage patterns and improve the functionality, performance, and user experience of the ph25 platform.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.
• Legal proceedings: To establish, exercise, or defend legal claims in connection with your use of the ph25 platform.

6 Legal Basis for Processing

ph25 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform the contract between you and ph25, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and tax obligations.
• Legitimate interests: Processing carried out for ph25's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, particularly in relation to marketing communications and the use of non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing and Disclosure

ph25 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML service providers engaged by ph25 to verify your identity and comply with regulatory obligations.
• Game providers: Software providers whose games are hosted on the ph25 platform may receive limited technical data (such as session identifiers) necessary to deliver game content. These providers do not receive your full personal profile.
• Regulatory and law enforcement authorities: Philippine government agencies, including the National Privacy Commission, relevant gaming regulators, and law enforcement bodies, where disclosure is required by law or court order.
• Professional advisers: Legal, accounting, and auditing firms engaged by ph25 in connection with the operation of its business, subject to strict confidentiality obligations.
• Business successors: In the event of a merger, acquisition, or sale of ph25's business or assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

8 Cookies and Tracking Technologies

ph25 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. The following types of cookies are used:

• Essential cookies: Strictly necessary for the operation of the ph25 platform, including session management, login authentication, and security functions. These cookies cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the ph25 platform, including pages visited, session duration, and navigation paths. This data helps ph25 improve the platform experience.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of ph25's marketing campaigns. These cookies are only placed with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the ph25 platform. For essential cookies, no opt-out is available as they are required for the platform to operate.

9 Data Retention

ph25 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account data: Retained for the duration of your active account relationship with ph25, and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC verification documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a specific regulatory obligation or legal proceeding.
• Customer support records: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution or legal purposes.
• Marketing data: Retained until you withdraw consent or opt out of marketing communications, after which it will be deleted or anonymised within thirty (30) days.
• Technical and usage data: Retained in aggregated, anonymised form for analytics purposes. Identifiable technical data is retained for up to twelve (12) months.

Upon expiry of the applicable retention period, ph25 will securely delete or anonymise your personal data in accordance with its data disposal procedures.

10 Data Security

ph25 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the ph25 platform.
• Encryption at rest for sensitive personal data stored on ph25's servers, including financial data and identity documents.
• Access controls limiting access to personal data to authorised ph25 personnel on a strict need-to-know basis, with role-based permissions and multi-factor authentication for administrative access.
• Regular security audits and penetration testing conducted by independent security professionals to identify and remediate vulnerabilities.
• Intrusion detection systems and real-time monitoring to detect and respond to security incidents promptly.
• Staff training on data protection obligations and security best practices, conducted on a regular basis.

While ph25 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your ph25 account credentials and for notifying ph25 immediately if you suspect any unauthorised access to your account.

11 Children's Privacy and Age Restriction

The ph25 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. ph25 does not knowingly collect personal data from individuals under the age of 21.

ph25 employs age verification procedures during account registration to prevent underage access to the platform. If ph25 becomes aware that personal data has been collected from an individual under the age of 21, it will immediately suspend the associated account, delete the personal data in question, and return any deposited funds to the payment source.

12 Exercising Your Data Rights

To exercise any of the data rights described in this Privacy Policy, you may submit a request to ph25 through the following channels:

• By emailing our Data Protection Officer at the address provided in Section 16.
• By contacting ph25 customer support via live chat, available 24/7 on the ph25 platform.
• By submitting a written request through your ph25 account settings where the relevant functionality is available.

ph25 will respond to all data rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case ph25 will notify you of the extension and the reasons for it.

ph25 may request proof of identity before processing a data rights request to ensure that personal data is not disclosed to or altered by an unauthorised party. ph25 will not charge a fee for processing data rights requests unless the request is manifestly unfounded or excessive.

13 International Data Transfers

ph25 primarily processes personal data within the Philippines. However, some of ph25's third-party service providers, including game software providers and cloud infrastructure partners, may be located outside the Philippines.

Where personal data is transferred outside the Philippines, ph25 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act of 2012. These safeguards may include:

• Contractual clauses requiring the recipient to process personal data in accordance with Philippine data protection standards.
• Transfers to countries or organisations that have been assessed as providing an adequate level of data protection by the National Privacy Commission.
• Other legally recognised transfer mechanisms as approved by the National Privacy Commission from time to time.

14 Third-Party Links and Services

The ph25 platform may contain references to third-party services, such as payment providers and game software suppliers. This Privacy Policy applies solely to personal data collected and processed by ph25 directly.

ph25 is not responsible for the privacy practices of third-party service providers. When you interact with a third-party service in connection with your use of ph25 (for example, when completing a payment via GCash or BPI), that provider's own privacy policy will govern the collection and use of your data by that provider. ph25 encourages you to review the privacy policies of any third-party services you use.

15 Updates to This Privacy Policy

ph25 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance. The most current version of this policy will always be available on this page, with the effective date clearly indicated at the top.

• For material changes that significantly affect how ph25 processes your personal data, ph25 will provide at least fourteen (14) days' advance notice via email or an in-platform notification.
• For minor or administrative updates, ph25 may update the policy without advance notice. The updated policy will take effect immediately upon publication.
• Your continued use of the ph25 platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

ph25 recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being protected and used.

16 Contact Us and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or ph25's handling of your personal data, please contact our Data Protection Officer or customer support team using the details below.

If you are not satisfied with ph25's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.

For more information about your rights and responsible gaming tools available on ph25, please visit our Responsible Gaming page or our FAQ page.