25ph2 Privacy Policy

This Privacy Policy describes how 25ph2 — accessible at https://25ph2.net — collects, uses, stores, shares, and protects personal information provided by or collected about players, visitors, and all other users of the 25ph2 platform. It applies to all interactions you have with 25ph2, including account registration, deposits and withdrawals, gameplay, customer support communications, promotional participation, and general browsing of our website.

25ph2 is committed to handling your personal data responsibly and transparently, in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable PAGCOR data governance standards. Where relevant, 25ph2 also complies with internationally recognized data protection principles to ensure your information is treated with the highest standard of care.

By registering an account with 25ph2, using the platform, or submitting personal information to us in any way, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please do not use the 25ph2 platform.

25ph2 collects personal information from you directly when you register, play, or contact us, and also automatically through your use of the platform. The categories of personal data we collect include:

25ph2 does not knowingly collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where strictly required by law (for example, responsible gaming assessments may involve voluntary disclosure of health-related information).

25ph2 uses your personal data for the following specific, legitimate purposes:

• Account Management: To create, verify, and maintain your 25ph2 player account, including processing your registration, verifying your identity and age (21+), and managing your account settings and preferences.
• Service Delivery: To operate the 25ph2 platform and provide you with access to all casino games, sports betting markets, bingo, and other features available to registered Filipino players.
• Financial Transactions: To process your deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, Coins.ph, 7-Eleven Cliqq, USDT, and other supported payment channels, and to maintain accurate transaction records.
• Legal & Regulatory Compliance: To fulfill our obligations under PAGCOR licensing conditions, Philippine AML laws (Republic Act No. 9160, as amended), the Data Privacy Act of 2012, and other applicable Philippine regulations — including mandatory reporting to AMLC where required.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, collusion, bonus abuse, money laundering, and other prohibited conduct on the 25ph2 platform.
• Responsible Gaming: To monitor gameplay patterns for indicators of problem gambling behavior, enforce self-exclusion requests, and implement responsible gaming limits set by you or required by PAGCOR.
• Customer Support: To respond to your queries, complaints, and support tickets, and to maintain records of communications for training and quality assurance purposes.
• Marketing & Promotions: To send you promotional offers, bonus notifications, and platform updates via email or SMS — but only where you have opted in to receive such communications. You may opt out at any time through your account settings or by contacting support.
• Platform Improvement: To analyze usage data and player behavior in aggregate (anonymized where possible) to improve the performance, design, and features of the 25ph2 platform.

Under the Data Privacy Act of 2012 (RA 10173), 25ph2 processes your personal data on the following legal grounds:

• Consent: Where you have given clear, specific, and informed consent to the processing of your personal data for a particular purpose — such as receiving marketing communications or participating in optional responsible gaming assessments.
• Contractual Necessity: Processing that is necessary to perform the contract between you and 25ph2 — that is, to provide you with the online casino and betting services you have registered to use, including account management, gameplay, and financial transactions.
• Legal Obligation: Processing required to comply with 25ph2's legal obligations under Philippine law, including PAGCOR licensing conditions, AML reporting duties under RA 9160, and tax-related obligations.
• Legitimate Interests: Processing necessary for 25ph2's legitimate business interests — including fraud prevention, platform security, responsible gaming monitoring, and business analytics — provided these interests are not overridden by your fundamental rights and freedoms.

Where 25ph2 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred before the withdrawal, and does not affect processing conducted on other legal grounds such as contractual necessity or legal obligation.

25ph2 does not sell, rent, or trade your personal information to third parties for commercial purposes. We share your data only in the following limited and necessary circumstances:

• Licensed Game Providers: Third-party game studios and live casino operators whose games are hosted on the 25ph2 platform may receive limited technical data (such as player session tokens) necessary to deliver their games. These providers are contractually prohibited from using your data for any purpose other than game delivery.
• Payment Processors: GCash, Maya, BPI, BDO, Metrobank, and other payment providers receive the financial information necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Philippine financial regulations.
• KYC & Identity Verification Providers: Accredited identity verification service providers may process your KYC documents on 25ph2's behalf to fulfill PAGCOR and AML verification requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies may receive personal data where 25ph2 is legally required to disclose it — for example, through mandatory suspicious transaction reports (STRs) or covered transaction reports (CTRs).
• Law Enforcement: Philippine law enforcement agencies may receive personal data in response to a lawful court order, warrant, or other legally mandated process. 25ph2 will notify you of such disclosures to the extent permitted by law.
• Professional Advisors: Legal, accounting, and auditing firms engaged by 25ph2 may access limited personal data as necessary to provide their professional services, subject to strict confidentiality obligations.

25ph2 uses cookies and similar tracking technologies to operate the platform effectively, remember your preferences, and analyze how Filipino players use our site. Here is a breakdown of the cookie categories we use:

• Strictly Necessary Cookies: These cookies are essential for the 25ph2 platform to function. They enable you to log in, navigate between pages, and maintain your session securely. These cookies cannot be disabled without rendering the platform non-functional.
• Functional Cookies: These cookies remember your preferences — such as your preferred language, currency display settings, and game lobby filters — to deliver a more personalized experience when you return to 25ph2.
• Analytics Cookies: 25ph2 uses anonymized analytics tools to understand aggregate traffic patterns, popular game categories, and platform performance. Analytics data is processed in aggregated form and is not used to identify individual players.
• Security Cookies: These cookies support fraud detection and account security functions, including session integrity checks and device fingerprinting used to detect unauthorized account access.

You can manage cookie preferences through your browser settings at any time. Disabling non-essential cookies will not prevent you from using the core 25ph2 platform, though some personalization features may not function as intended. Note that strictly necessary and security cookies cannot be disabled as they are required for the platform to operate safely.

25ph2 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data in transit between your device and 25ph2 servers is encrypted using industry-standard 256-bit SSL/TLS protocols.
• Encryption at Rest: Sensitive personal data — including KYC documents, financial account details, and passwords — is encrypted when stored on 25ph2 servers using strong encryption algorithms.
• Access Controls: Access to personal data within 25ph2 is strictly limited to authorized personnel who require access to perform their job functions. Role-based access controls and multi-factor authentication are enforced for all internal systems.
• Regular Security Audits: 25ph2 conducts periodic security assessments, vulnerability scans, and penetration testing to identify and remediate potential weaknesses in our infrastructure.
• Secure Data Centers: 25ph2 player data is stored on servers located in secure data center facilities with physical access controls, redundant power supplies, and environmental protections.
• Staff Training: All 25ph2 staff with access to personal data receive regular data protection training and are bound by confidentiality obligations as a condition of their engagement.

While 25ph2 takes all reasonable steps to protect your personal data, no security system is completely impenetrable. In the event of a personal data breach that poses a risk to your rights and freedoms, 25ph2 will act in accordance with RA 10173 breach notification requirements.

25ph2 retains your personal data only for as long as is necessary to fulfill the specific purpose for which it was collected, subject to minimum retention periods required by Philippine law. The key retention periods applicable to 25ph2 player data are:

• Account & Identity Data: Retained for the duration of your active account relationship with 25ph2, plus a minimum of five (5) years after account closure — as required by PAGCOR licensing conditions and Philippine AML record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act (RA 9160, as amended) and PAGCOR requirements.
• KYC Documents: Retained for the period of the account relationship plus five (5) years post-closure, or longer if required by ongoing regulatory or legal proceedings.
• Communications & Support Records: Retained for three (3) years from the date of the communication, to support complaint handling, dispute resolution, and service quality review.
• Analytics & Usage Data: Aggregated and anonymized after thirteen (13) months, after which individual-level usage data is deleted.
• Marketing Preference Data: Retained until you withdraw consent for marketing communications, after which your data is removed from active marketing lists within thirty (30) days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that makes re-identification permanently impossible. Where data forms part of an ongoing regulatory investigation, legal proceeding, or unresolved dispute, retention may be extended until resolution.

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 25ph2:

• Right to Be Informed: You have the right to be informed about how your personal data is collected and processed — which is the primary purpose of this Privacy Policy.
• Right to Access: You may request a copy of the personal data that 25ph2 holds about you, along with information about how it is being used and with whom it has been shared.
• Right to Rectification: If any personal data we hold about you is inaccurate, incomplete, or outdated, you may request that we correct it. Some corrections (such as name changes) may require supporting documentation.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purpose for which it was collected, you have withdrawn consent, or the processing was unlawful. This right is subject to legal retention obligations — 25ph2 may be required to retain certain data even after an erasure request.
• Right to Object: You may object to the processing of your personal data where 25ph2 relies on legitimate interests as the legal basis, and where you believe your fundamental rights override those interests. You may also object to direct marketing processing at any time without providing justification.
• Right to Data Portability: You may request a copy of the personal data you have provided to 25ph2 in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Lodge a Complaint: If you are not satisfied with how 25ph2 has handled your personal data, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

25ph2 is strictly an adult online gambling platform. In accordance with Philippine law and PAGCOR licensing requirements, the 25ph2 platform is only available to individuals who are at least 21 years of age. The collection of personal data from individuals under the age of 21 is strictly prohibited.

25ph2 employs age verification procedures during the registration process to prevent minors from accessing the platform. If 25ph2 discovers that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account.

As an online gaming platform, 25ph2 may utilize technology infrastructure, cloud services, and third-party service providers whose servers are located outside the Philippines. In cases where your personal data is transferred to or accessed from a country outside the Philippines, 25ph2 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173.

Safeguards employed for cross-border data transfers include:

• Data processing agreements with all third-party processors that include binding data protection obligations consistent with RA 10173 requirements.
• Transfers to jurisdictions recognized by the National Privacy Commission as providing an adequate level of data protection, where available.
• Encryption of personal data in transit for all cross-border transfers, regardless of destination.
• Contractual clauses that prohibit third-party processors from using 25ph2 player data for any purpose other than the specific service being provided to 25ph2.

25ph2 does not transfer personal data to jurisdictions subject to international sanctions or where data protection standards are materially inadequate without implementing additional protective measures. If you have questions about the specific countries where your data may be processed, contact our DPO at [email protected].

25ph2 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, PAGCOR regulatory requirements, or platform features. When material changes are made to this policy, 25ph2 will:

• Post the updated Privacy Policy on this page with a revised effective date clearly indicated at the top of the document.
• Send a notification to your registered email address summarizing the key changes, at least 14 days before the updated policy takes effect (except where immediate changes are required by law or regulatory direction).
• Display a prominent notice on the 25ph2 platform informing logged-in players of the policy update on their next login session.

Your continued use of the 25ph2 platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of and consent to the updated terms. If you do not agree with the updated policy, you must discontinue use of the 25ph2 platform and may request account closure by contacting support.

This Privacy Policy was last updated and became effective on January 1, 2026. All prior versions of the 25ph2 Privacy Policy are superseded by this version from the effective date above.

25ph2 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact the 25ph2 DPO through the following channel:

Email: [email protected] — Please use the subject line "Privacy / DPO Request" for all data protection-related communications. Our DPO is available Monday to Sunday and aims to respond to all privacy-related queries within 72 hours, with a full substantive response provided within 15 business days.

If you are not satisfied with 25ph2's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing RA 10173. Information on how to file a complaint with the NPC is available through official Philippine government channels.