22phbet
Privacy Policy

1. Introduction

22phbet ("we", "us", "our") is an online gaming platform operating at https://22phbet.net, offering sports betting, live casino, slot games, bingo, and related gaming services to eligible Filipino players. This Privacy Policy describes how 22phbet collects, processes, stores, shares, and protects the personal information of players, visitors, and prospective users ("you", "your") who interact with our platform.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations ("IRR") issued by the National Privacy Commission ("NPC"). It is also consistent with applicable PAGCOR framework guidelines on player data governance.

By accessing the 22phbet website, creating an account, or using any of our services, you acknowledge that you have read this Privacy Policy and agree to the collection and processing of your personal data as described herein. If you do not agree, you should discontinue use of the platform immediately and contact our support team to request account closure.

2. Scope & Applicability

This Privacy Policy applies to all personal data collected and processed by 22phbet in connection with:

• Registration and maintenance of player accounts;
• Use of any game, betting market, or casino product available on the platform;
• All deposit and withdrawal transactions processed through 22phbet;
• Communications between you and 22phbet support via live chat, email, Messenger, or Viber;
• Promotional programmes, loyalty rewards, and bonus participation;
• Visits to https://22phbet.net, including pages visited while not logged in; and
• KYC identity verification and anti-money-laundering compliance activities.

This Policy does not apply to the privacy practices of third-party payment processors, game software providers, or other external services that may be accessible through the 22phbet platform. Those entities operate under their own separate privacy policies, and 22phbet encourages you to review them independently.

3. Personal Data We Collect

22phbet collects the following categories of personal data, depending on your level of engagement with the platform:

3.1 Identity & Contact Information

• Full legal name (as it appears on your government-issued ID);
• Date of birth (to verify the 21+ age requirement);
• Residential address, including city, province, and postal code;
• Philippine mobile number;
• Email address; and
• Scanned copies or photographs of government-issued identification documents submitted during KYC (e.g., PhilSys National ID, Passport, UMID, Driver's License).

3.2 Financial Information

• GCash or Maya mobile wallet account number (last 4 digits retained for reconciliation);
• Bank account details for BPI, BDO, or Metrobank withdrawal requests;
• Visa/Mastercard token references (full card numbers are never stored by 22phbet — card data is handled exclusively by our PCI-DSS compliant payment processor);
• Transaction history, including deposit amounts, withdrawal requests, and transaction reference numbers.

3.3 Gaming & Behavioural Data

• Betting history, wager amounts, game preferences, and session durations;
• Bonus redemptions and wagering requirement progress;
• Responsible gaming tool activations (deposit limits, cool-off requests, self-exclusion);
• Device type, operating system, and browser version;
• IP address and geolocation data (country/region level) at login and during sessions.

3.4 Communications Data

• Content of support chat sessions and email correspondence;
• Feedback and complaint records;
• Marketing preference selections (opt-in / opt-out status for SMS, email, and push notifications).

4. How We Collect Your Data

22phbet collects personal data through the following channels:

• Directly from you — when you register an account, complete KYC, make a deposit, request a withdrawal, contact support, or participate in a promotion;
• Automatically — when you visit or use the platform, through cookies, server logs, and session tracking technologies (see Section 7);
• From payment processors — transaction confirmation data, payment method tokens, and fraud-screening results returned by GCash, Maya, BPI, BDO, Metrobank, GrabPay, and card networks;
• From identity verification providers — where 22phbet uses a third-party KYC/AML screening service to validate government-issued documents, the result and any risk flags generated are shared with 22phbet; and
• From regulatory bodies — PAGCOR or law enforcement agencies may share information with 22phbet where required for compliance or investigation purposes.

5. Purpose & Legal Basis for Processing

Under RA 10173, personal data may only be processed if there is a lawful basis for doing so. The table below summarises the primary purposes for which 22phbet processes your personal data and the corresponding legal basis under the DPA:

Where processing is based on consent (e.g., marketing emails or SMS), you may withdraw that consent at any time by updating your communication preferences within your account settings or by contacting 22phbet support. Withdrawal of consent does not affect the lawfulness of any processing carried out prior to withdrawal.

6. Data Sharing & Disclosure

22phbet does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to binding confidentiality and data processing obligations:

6.1 Payment Service Providers

GCash, Maya, GrabPay, BPI, BDO, Metrobank, 7-Eleven CLiQQ, and card network processors receive only the transaction data necessary to execute your deposit or withdrawal request. These providers are independently regulated and maintain their own privacy and security programmes.

6.2 Game Content Providers

Third-party game studios and platform providers whose titles are accessible through 22phbet may receive a pseudonymised player identifier and session token necessary to load and record game sessions. They do not receive your full identity or financial information unless otherwise stated in game-specific terms.

6.3 KYC / AML Service Providers

22phbet engages accredited identity verification and anti-money-laundering screening providers to assist with KYC obligations. These providers process your identity documents under strict contractual data processing agreements and are prohibited from using your data for any purpose other than the verification service.

6.4 Regulatory & Law Enforcement Authorities

22phbet is legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities upon lawful request, court order, or as required by applicable law. Such disclosures are made without prior notice to the affected player where the law so requires.

6.5 Corporate Transactions

In the event of a merger, acquisition, or sale of all or substantially all of 22phbet's assets, personal data held by the platform may be transferred to the successor entity. Players will be notified of any such transfer via the email address on file prior to the transfer taking effect, and your rights under this Policy will remain intact.

7. Cookies & Tracking Technologies

22phbet uses cookies and similar tracking technologies to operate the platform, maintain session security, and analyse aggregate usage patterns. The following cookie categories are used:

• Strictly Necessary Cookies: Required for the platform to function — including login session management, CSRF protection tokens, and load balancing. These cannot be disabled without breaking core functionality.
• Functional Cookies: Remember your language preference, game display settings, and responsible gaming tool configurations across sessions.
• Analytics Cookies: Aggregate, anonymised data on how players navigate the platform. Used to identify usability improvements. No individual player is identified through analytics data.
• Security & Fraud Detection Cookies: Device fingerprinting tokens used to detect suspicious login activity, account takeover attempts, and multi-accounting across the platform.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging into your 22phbet account. 22phbet does not use third-party advertising cookies or behavioural tracking cookies for cross-site ad targeting.

8. Data Retention

22phbet retains personal data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by applicable Philippine law. The general retention periods applicable to each data category are as follows:

• Account & Identity Data: Retained for the duration of the active account relationship and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLC record-keeping requirements;
• KYC Documents: Retained for a minimum of five (5) years from the date of submission or from the date of the last transaction, whichever is later;
• Transaction Records: Retained for five (5) years in compliance with AMLC and Bureau of Internal Revenue (BIR) requirements;
• Support Communications: Retained for two (2) years from the date of the last communication in the relevant thread;
• Marketing Preference Records: Retained for the duration of the account and for one (1) year after account closure to demonstrate lawful processing; and
• Analytics Data: Aggregated and anonymised within 90 days of collection. Anonymised data does not constitute personal data and may be retained indefinitely.

Upon expiry of the applicable retention period, personal data is securely deleted using methods that render recovery impossible, or anonymised such that it can no longer be linked to any identifiable individual.

9. Data Security

22phbet implements a layered information security programme designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 22phbet servers;
• AES-256 encryption for sensitive data fields (passwords, document references) stored in our database;
• Role-based access controls ensuring that only authorised 22phbet personnel with a legitimate business need can access personal data;
• Multi-factor authentication (MFA) required for all internal staff accessing player data systems;
• Regular penetration testing and vulnerability assessments conducted by independent third-party security firms;
• Intrusion detection and prevention systems (IDS/IPS) monitoring all production infrastructure in real time; and
• Mandatory data privacy and security training for all 22phbet employees upon onboarding and annually thereafter.

10. Your Data Rights

Under the Data Privacy Act of 2012 and its IRR, you have the following rights with respect to your personal data held by 22phbet. You may exercise any of these rights by submitting a written request to our Data Protection Officer (see Section 14).

11. Minors & Age Policy

Age verification is a mandatory step in the 22phbet KYC process. Any account found to have been registered by a person under the age of 21 will be immediately suspended, all wagering activity will be voided, and any deposited funds (net of any promotional credits) will be returned to the source payment method after completion of a mandatory review. The registration information associated with underage accounts will be retained only to the extent necessary to fulfil this compliance obligation and will then be deleted.

If you have reason to believe that a minor has accessed or registered on the 22phbet platform using false information, please notify us immediately at [email protected]. We take such reports seriously and will act promptly.

12. Cross-Border Data Transfers

22phbet's primary data processing infrastructure is hosted within the Asia-Pacific region. However, certain service providers (including KYC vendors, game content providers, and analytics platforms) may process personal data in jurisdictions outside the Philippines. Where such transfers occur, 22phbet ensures that:

• The receiving country or organisation provides an adequate level of data protection as recognised by the NPC or the relevant standard;
• Appropriate contractual safeguards (such as standard contractual clauses or binding corporate rules) are in place between 22phbet and the receiving entity; or
• The transfer is necessary for the performance of the contract between you and 22phbet (e.g., processing a payment through an international card network).

You may request details of the specific safeguards in place for any particular cross-border transfer by contacting our Data Protection Officer.

13. Updates to This Privacy Policy

22phbet may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. When we make material changes, we will:

• Update the "Last Reviewed" date at the top of this Policy;
• Notify registered players via the email address on file at least seven (7) days before the updated Policy takes effect; and
• Display a prominent notice on the 22phbet platform for at least fourteen (14) days following the effective date of the change.

Your continued use of the 22phbet platform after the updated Privacy Policy takes effect constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the platform and may request account closure by contacting our support team.

Minor changes — such as typographical corrections, clarifications that do not alter the substance of the Policy, or updates to contact details — may be made without advance notice, though the "Last Reviewed" date will always be updated to reflect the most recent revision.

14. Contact & Data Protection Officer

22phbet has appointed a Data Protection Officer ("DPO") in accordance with Section 21 of the Data Privacy Act of 2012. The DPO is responsible for overseeing 22phbet's compliance with RA 10173 and serving as the primary point of contact for data privacy inquiries, requests, and complaints from players and the National Privacy Commission.

To exercise any of your rights under Section 10 of this Policy, or to raise any concern about how 22phbet handles your personal data, please contact us using the details below:

If you are not satisfied with our response to your privacy inquiry or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines. The NPC may be contacted through its official website and offices in Pasay City, Metro Manila.