222ph Privacy & Data Protection Policy

1. Information We Collect

To provide you with secure, compliant, and personalized gaming services, 222ph collects various categories of personal information. The data we collect falls into the following categories:

1.1 Registration and Account Information

When you create a 222ph account, we collect personal identification information necessary for account creation, verification, and regulatory compliance:

• Identity Data: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (passport, driver's license, national ID, or SSS/TIN numbers).
• Contact Information: Email address, mobile phone number, residential address, and postal code.
• Account Credentials: Username, password (stored in encrypted hash format), and security questions/answers.
• Verification Documents: Copies of government-issued IDs, proof of address (utility bills, bank statements), and selfie photographs for identity verification purposes.

1.2 Financial and Transaction Information

To process deposits, withdrawals, and maintain transaction records as required by anti-money laundering regulations, we collect:

• Payment Information: Bank account details, GCash or PayMaya account information, transaction IDs, and payment method preferences.
• Transaction History: Complete records of deposits, withdrawals, wagers, winnings, bonuses claimed, and account balance movements.
• Source of Funds Documentation: Bank statements, proof of income, or other documents verifying the legitimate origin of funds, particularly for large transactions.

1.3 Gaming Activity and Behavioral Data

To enhance your gaming experience, prevent fraud, and comply with responsible gaming obligations, we track:

• Gameplay Records: Games played, bet amounts, win/loss ratios, session durations, game preferences, and betting patterns.
• Promotional Engagement: Bonuses claimed, wagering progress, promotional email interactions, and marketing preferences.
• Responsible Gaming Data: Deposit limits set, self-exclusion requests, reality check acknowledgments, and cooling-off period activations.

1.4 Technical and Device Information

For security, fraud prevention, and service optimization, we automatically collect technical data when you access 222ph:

• Device Data: Device type, operating system, browser type and version, screen resolution, and unique device identifiers.
• Connection Data: IP address, internet service provider, geolocation data (country, region, city), and connection timestamps.
• Usage Analytics: Pages visited, features used, navigation paths, session duration, and referral sources.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, local storage data, and similar technologies (see Cookie Policy section).

1.5 Communications and Support Records

When you contact 222ph customer support or communicate with us, we retain:

• Support Interactions: Live chat transcripts, email correspondence, phone call recordings (with your consent), and support ticket history.
• Feedback and Surveys: Customer satisfaction ratings, survey responses, and product feedback.
• Marketing Communications: Email opens, click-through rates, and unsubscribe requests.

2. How We Use Your Information

222ph processes your personal data for specific, legitimate purposes in accordance with the Data Privacy Act. Your information is used for:

2.1 Service Delivery and Account Management

• Creating, maintaining, and authenticating your 222ph account.
• Processing deposits, withdrawals, and financial transactions.
• Providing access to games, features, and personalized content.
• Managing bonuses, promotions, and loyalty rewards.
• Responding to customer support inquiries and resolving disputes.

2.2 Legal and Regulatory Compliance

• Verifying your identity and age to comply with PAGCOR regulations requiring players to be 21 years or older.
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as mandated by law.
• Maintaining transaction records and reporting suspicious activities to relevant authorities.
• Responding to legal requests, court orders, or government investigations.
• Complying with tax reporting obligations and financial audit requirements.

2.3 Fraud Prevention and Security

• Detecting and preventing fraudulent transactions, collusion, bonus abuse, and multi-accounting.
• Monitoring gameplay for patterns indicative of problem gambling or underage access attempts.
• Protecting against unauthorized account access, hacking attempts, and cyber threats.
• Conducting security audits and vulnerability assessments.

2.4 Responsible Gaming Support

• Implementing deposit limits, wagering limits, and session time controls.
• Processing self-exclusion requests and cooling-off period activations.
• Identifying at-risk gambling behavior and providing intervention resources.
• Maintaining records of responsible gaming tool usage for regulatory reporting.

2.5 Marketing and Product Improvement

• Sending promotional offers, bonus notifications, and product updates (with your consent).
• Personalizing game recommendations and tailored promotional content based on your preferences.
• Conducting market research, customer surveys, and usability testing.
• Analyzing user behavior to improve website functionality, game offerings, and customer experience.

3. Legal Basis for Processing

Under the Data Privacy Act, 222ph must have a valid legal basis for processing your personal data. We process your information based on:

• Consent: You have explicitly agreed to the processing of your personal data for specific purposes (e.g., marketing communications, optional data collection).
• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms and Conditions and provide services you have requested.
• Legal Obligation: We must process your data to comply with Philippine law, PAGCOR regulations, AML/KYC requirements, and court orders.
• Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, security, service improvement) provided these interests do not override your fundamental rights.

4. Data Sharing and Third-Party Disclosures

222ph does not sell your personal information. However, we may share your data with trusted third parties under strictly controlled circumstances:

4.1 Service Providers and Business Partners

We engage third-party service providers to support our operations. These parties process your data solely on our behalf and are bound by strict confidentiality agreements:

• Payment Processors: GCash, PayMaya, and banking partners to facilitate deposits and withdrawals.
• Identity Verification Services: Third-party KYC/AML verification providers to authenticate your identity.
• Game Providers: Licensed software providers (slots, live dealers, bingo) whose games you access through our platform.
• Cloud Infrastructure: Hosting and data storage providers maintaining our servers and databases.
• Customer Support Tools: Live chat platforms and CRM systems used to manage customer interactions.
• Marketing Platforms: Email service providers and analytics tools (with your consent for marketing purposes).

4.2 Legal and Regulatory Authorities

We disclose personal information when required by law or to protect our legal rights:

• PAGCOR and Gaming Regulators: Providing player data, transaction records, and compliance reports as required by licensing conditions.
• Law Enforcement: Responding to valid legal requests, subpoenas, court orders, or investigations into suspected criminal activity.
• Anti-Money Laundering Council (AMLC): Reporting suspicious transactions and high-value cash transactions as mandated by law.
• National Privacy Commission: Cooperating with investigations and audits related to data protection compliance.

4.3 Business Transfers

In the event of a merger, acquisition, corporate reorganization, or sale of assets, your personal data may be transferred to the acquiring entity. We will notify you of any such transfer and provide options regarding your data.

5. Data Retention and Deletion

222ph retains your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law:

• Active Accounts: Personal data is retained for the duration your account remains active and for a reasonable period thereafter to handle potential disputes or regulatory inquiries.
• Closed Accounts: After voluntary account closure, personal data is retained for 7 years to comply with PAGCOR record-keeping requirements and potential legal obligations.
• Transaction Records: Financial transaction data is retained for 10 years in accordance with Philippine anti-money laundering laws and tax regulations.
• Marketing Data: If you unsubscribe from marketing communications, we will cease promotional messaging immediately but retain a record of your unsubscribe request to honor your preferences.

Once retention periods expire and there is no legal obligation to retain data, we securely delete or anonymize your personal information using industry-standard data destruction methods.

6. Your Data Protection Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal data:

• Right to Access: Request a copy of all personal data we hold about you, including information about how we process it.
• Right to Rectification: Correct inaccurate or incomplete personal information in your account.
• Right to Erasure: Request deletion of your personal data, subject to legal retention obligations.
• Right to Object: Object to processing of your data for direct marketing purposes or based on legitimate interests.
• Right to Data Portability: Receive your personal data in a structured, machine-readable format and transfer it to another service provider.
• Right to Withdraw Consent: Withdraw consent for processing based on consent at any time (this does not affect the lawfulness of processing prior to withdrawal).
• Right to Lodge a Complaint: File a complaint with the National Privacy Commission if you believe your data protection rights have been violated.

To exercise any of these rights, contact our Data Protection Officer at [email protected] or through the contact form in your account dashboard. We will respond to your request within 15 working days as required by the Data Privacy Act.

7. Cookies and Tracking Technologies

222ph uses cookies and similar technologies to enhance your browsing experience, analyze site usage, and deliver personalized content. Cookies are small text files stored on your device that allow us to recognize you on return visits.

Types of Cookies We Use:

• Essential Cookies: Required for website functionality, account authentication, and security. These cannot be disabled without affecting site performance.
• Performance Cookies: Collect anonymous data about how you use our website to help us improve navigation and user experience.
• Functional Cookies: Remember your preferences (language, currency, display settings) to provide a personalized experience.
• Marketing Cookies: Track your activity across websites to deliver relevant advertisements and measure campaign effectiveness (requires your consent).

You can control cookie preferences through your browser settings. However, disabling essential cookies may prevent you from accessing certain features of our platform. For detailed information, refer to our separate Cookie Policy.

8. Data Security Measures

222ph implements comprehensive technical and organizational security measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption: All data transmission uses 256-bit SSL/TLS encryption. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Role-based access restrictions, multi-factor authentication for staff, and comprehensive audit logging.
• Network Security: Firewalls, intrusion detection systems, DDoS protection, and regular vulnerability scanning.
• Secure Development: Regular security code reviews, penetration testing, and adherence to OWASP security guidelines.
• Employee Training: Mandatory data protection and security training for all staff handling personal data.
• Incident Response: Documented procedures for detecting, responding to, and reporting security breaches.

In the unlikely event of a data breach affecting your personal information, we will notify you and the National Privacy Commission within 72 hours as required by law.

9. International Data Transfers

222ph primarily stores data within Philippine data centers. However, some service providers (cloud infrastructure, game providers) may process data outside the Philippines. When we transfer data internationally, we ensure adequate protection through:

• Binding contractual clauses requiring recipients to maintain Philippine Data Privacy Act standards.
• Ensuring recipient countries have adequate data protection laws recognized by the National Privacy Commission.
• Obtaining explicit consent for transfers where required by law.

10. Children's Privacy

222ph services are strictly prohibited for individuals under 21 years of age. We do not knowingly collect personal information from minors. If we discover that we have inadvertently collected data from someone under 21, we will immediately delete such information and permanently close the associated account. Parents or guardians who believe a minor has provided information to 222ph should contact us immediately at [email protected].

11. Changes to This Privacy Policy

222ph reserves the right to update this Privacy Policy to reflect changes in our practices, legal requirements, or regulatory guidance. Material changes will be communicated via email and prominent website notice at least 30 days before taking effect. Continued use of our services after changes become effective constitutes acceptance of the updated Privacy Policy. We recommend reviewing this policy periodically to stay informed about how we protect your data.

12. Contact Information

For questions about this Privacy Policy, to exercise your data protection rights, or to file a privacy-related complaint, please contact:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 on our website
• Mailing Address: 222ph Data Protection Officer, [Business Address], Philippines

You also have the right to lodge a complaint with the National Privacy Commission:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center, Vicente Sotto St., Pasay City, Metro Manila, Philippines
• Email: [email protected] | Hotline: (+632) 8234-2228