ph221 Privacy Policy

1. Who We Are

ph221 ("ph221," "we," "us," or "our") is a Philippine-facing online casino and sports betting platform accessible at https://ph221.net. ph221 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) and is registered with the National Privacy Commission (NPC) of the Philippines as a personal information controller.

As a personal information controller under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), ph221 determines the purposes and means by which your personal data is processed in connection with your use of our Platform.

This Privacy Policy applies to all registered players, visitors to the ph221 website, and any individual whose personal information is processed by ph221 in connection with the services we offer. By accessing or using ph221, you acknowledge that you have read and understood this Privacy Policy.

2. Personal Data We Collect

ph221 collects personal data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed. The categories of personal data we may collect include:

2.1 Identity & Contact Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used for mandatory age verification — 21+ requirement)
• Residential address (Barangay, City/Municipality, Province)
• Valid email address
• Mobile phone number
• Nationality and citizenship status

2.2 Identity Verification (KYC) Documents

• Copies of government-issued photo identification (e.g., Philippine Passport, SSS ID, UMID, PhilSys National ID, driver's license, voter's ID)
• Proof of residential address documents (e.g., utility bills, barangay certification)
• Proof of payment method ownership where required for withdrawal processing
• Selfie photographs submitted for liveness and document-matching verification

2.3 Financial Data

• GCash mobile number and account reference
• PayMaya (Maya) account reference
• BPI, BDO, or Metrobank account details provided for withdrawal processing
• Transaction history, including deposit amounts, withdrawal amounts, and timestamps

2.4 Gaming & Behavioural Data

• Game play history, bet amounts, wins, and losses across all ph221 products
• Sports betting selections, stake amounts, and settlement outcomes
• Session durations, login and logout timestamps
• Responsible gaming tool usage (deposit limits set, cool-off periods activated, self-exclusion requests)

2.5 Technical & Device Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser version
• Cookie identifiers and session tokens
• Referring URL and pages visited within the ph221 Platform

3. How We Collect Your Data

ph221 collects personal data through the following channels and methods:

ph221 does not collect personal data from third-party social media platforms or purchase marketing lists containing Filipino consumer data. All data collected by ph221 is obtained directly from you or generated through your interaction with our Platform.

4. How We Use Your Personal Data

ph221 uses the personal data we collect for the following purposes:

• Account Creation and Management: To open, maintain, and administer your ph221 player account, including processing your registration, verifying your identity, and enabling secure login.
• Age Verification: To confirm that you meet the minimum age requirement of 21+ as mandated by Philippine gambling regulations before allowing participation in real-money gaming.
• Payment Processing: To facilitate deposits via GCash, PayMaya, BPI, BDO, and Metrobank, and to process withdrawal requests to your verified payment methods in Philippine Peso (₱).
• Regulatory Compliance (KYC/AML): To fulfil our obligations under the Philippine Anti-Money Laundering Act (AMLA, RA 9160 as amended) and PAGCOR licensing requirements, including transaction monitoring and suspicious activity reporting to the AMLC.
• Responsible Gaming: To monitor gaming patterns for signs of problem gambling, to apply account-level limits and cool-off periods you have requested, and to fulfil our duty-of-care obligations to players.
• Customer Support: To respond to your inquiries, resolve complaints, and maintain records of support interactions for quality assurance purposes.
• Platform Security and Fraud Prevention: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, and other prohibited conduct as defined in our Terms & Conditions.
• Service Improvement and Analytics: To analyse Platform usage in aggregate, improve game offerings, optimise the user interface, and develop new features for Filipino players.
• Promotional Communications: Where you have opted in, to send you personalised bonus offers, reload promotions, VIP tier updates, and other marketing communications relevant to your ph221 activity. You may opt out at any time.
• Legal Obligations: To comply with applicable Philippine laws, court orders, and requests from competent authorities including PAGCOR, AMLC, and the NPC.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, ph221 processes your personal data on the following legal bases:

• Contractual Necessity: Processing that is necessary to perform our contract with you as a registered ph221 player — including account management, payment processing, and game access.
• Legal Obligation: Processing required to comply with Philippine law, including AMLA transaction monitoring, PAGCOR licensing conditions, NPC data breach notification requirements, and tax reporting obligations.
• Legitimate Interests: Processing for ph221's legitimate business interests, including fraud prevention, Platform security, responsible gaming monitoring, and internal analytics — provided these interests are not overridden by your data protection rights.
• Consent: For non-essential marketing communications and optional personalisation features, ph221 relies on your explicit consent. You may withdraw this consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. Sharing Your Personal Data

ph221 does not sell, rent, or trade your personal data to any third party for commercial purposes. We may share your personal data only in the following circumstances:

• Payment Service Providers: GCash (Mynt / Globe Fintech), PayMaya (Maya Bank), BPI, BDO, and Metrobank receive the minimum transaction data necessary to process your deposits and withdrawals.
• KYC and Identity Verification Partners: Accredited third-party identity verification providers may process copies of your ID documents and selfie photographs to complete the KYC verification process on ph221's behalf.
• Game Content Providers: Third-party game studios whose content appears on ph221 may receive anonymised session and bet data for game performance monitoring. No personally identifiable information is shared with game studios.
• Regulatory Authorities: ph221 is legally required to share transaction records and player information with PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission (NPC) upon lawful request or where mandatory reporting thresholds are triggered.
• Legal and Law Enforcement: ph221 may disclose personal data to Philippine law enforcement agencies or courts where required by a valid court order, subpoena, or applicable Philippine law.
• Professional Advisors: ph221's lawyers, accountants, and auditors may access limited personal data where strictly necessary for the provision of professional services, subject to strict confidentiality obligations.

7. Cookies & Tracking Technologies

ph221 uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the ph221 website. The categories of cookies we use are:

ph221 does not use third-party advertising cookies or retargeting pixels. You can manage or delete cookies at any time through your browser's privacy settings. Note that disabling strictly necessary or responsible gaming cookies may impair your ability to use certain Platform features.

8. Data Retention

ph221 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Active Account Data: Retained for the duration of your active ph221 account relationship plus a minimum of five (5) years following account closure, as required under PAGCOR licensing conditions and AMLA record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years from the date of last transaction, in compliance with AMLA and PAGCOR requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years, consistent with the AMLA record-keeping period and Bureau of Internal Revenue (BIR) requirements.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required due to an ongoing complaint or legal proceeding.
• Marketing Consent Records: Retained for the duration of your account or until you withdraw consent, plus an additional three (3) years for compliance documentation purposes.
• Technical Logs (IP, session data): Retained for twelve (12) months for security and fraud investigation purposes, then deleted or anonymised.

Upon expiry of the applicable retention period, ph221 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures. Where data cannot be immediately deleted due to backup or archival systems, ph221 will ensure it is isolated and protected until it can be permanently destroyed.

9. Data Security

ph221 implements technical and organisational measures appropriate to the risk of processing your personal data. These measures include:

• TLS Encryption: All data transmitted between your browser or app and ph221 servers is encrypted using Transport Layer Security (TLS 1.2 or higher).
• At-Rest Encryption: Sensitive personal data and KYC documents stored on ph221 servers are encrypted using AES-256 encryption.
• Access Controls: Access to personal data within ph221 is restricted on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and background screening.
• Two-Factor Authentication (2FA): ph221 offers 2FA for player accounts and enforces 2FA for all internal staff accounts with access to player data.
• Regular Security Audits: ph221 conducts periodic penetration testing and vulnerability assessments of its Platform infrastructure.
• Data Breach Response Plan: ph221 maintains a documented personal data breach response procedure consistent with NPC Circular requirements, including notification to affected players and the NPC within prescribed timeframes.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph221:

• Right to be Informed: You have the right to be told how your personal data is being collected and used — which is the primary purpose of this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data ph221 holds about you, along with information about how it is processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data ph221 holds about you. You may update many details directly through your account dashboard.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations under AMLA and PAGCOR regulations.
• Right to Object: You have the right to object to the processing of your personal data where ph221 relies on legitimate interests as its legal basis, and where you believe the processing impacts your fundamental rights.
• Right to Data Portability: You may request a machine-readable copy of personal data you have provided to ph221, for the purpose of transmitting it to another service provider.
• Right to Damages: You have the right to be compensated for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe ph221 has violated your data privacy rights.

To exercise any of the above rights, please contact ph221's Data Protection Officer through the customer support channels described in Section 13. ph221 will respond to valid data rights requests within fifteen (15) working days as required under NPC regulations.

11. Children & Minors

The ph221 Platform is strictly intended for individuals who are at least 21 years of age 21+, consistent with the minimum age for participation in online gambling activities in the Philippines as regulated by PAGCOR.

ph221 does not knowingly collect personal data from individuals under the age of 21. Age verification is a mandatory step in the ph221 registration and KYC process. If ph221 discovers that personal data has been collected from a person under 21, that account will be immediately suspended, all data will be securely deleted, and any funds returned to the originating payment source.

If you are a parent or guardian and believe that a minor under your care has registered on ph221 or provided their personal data to us, please contact our support team immediately at [email protected] so that we can take prompt action.

12. Changes to This Privacy Policy

ph221 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC regulations, or PAGCOR requirements. When material changes are made, ph221 will:

• Update the "Last Updated" date at the top of this Privacy Policy page.
• Post a prominent notice on the ph221 Platform informing registered players of the key changes.
• Where appropriate, send a notification to the email address registered on your account.

Your continued use of the ph221 Platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. We encourage you to review this Privacy Policy periodically. If you do not agree with a revised version, you should discontinue using the Platform and request account closure.

13. Contact Us / Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your data rights under RA 10173, or want to raise a privacy-related concern, please contact ph221's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly within your ph221 account dashboard. This is the fastest way to reach our support team for urgent account-related privacy matters.
• Email: [email protected] — for formal data rights requests, please include your full name, registered email address, and a clear description of your request. ph221 will acknowledge receipt within three (3) working days and respond fully within fifteen (15) working days.

If you are not satisfied with ph221's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

This Privacy Policy was last reviewed and updated in January 2026. It supersedes all previous versions of the ph221 Privacy Policy.