ph25 Privacy Policy

This Privacy Policy is issued by ph25 (the "Platform", "we", "us", "our") and applies to all personal information collected from individuals who access, register, or interact with the ph25 platform at ph25.asia. It covers all services provided through ph25, including casino games, live dealer tables, sports betting, bingo, poker, account management, promotions, and customer support interactions.

ph25 is committed to processing personal data lawfully, transparently, and in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as administered by the National Privacy Commission (NPC) of the Philippines. Where applicable, ph25 also complies with the data handling requirements established under the PAGCOR regulatory framework.

By registering an account on ph25 or by continuing to use the ph25 platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with any aspect of this policy, you must cease using the ph25 platform.

ph25 collects the following categories of personal data from players and platform users. The specific data collected at any time depends on the nature of your interaction with the ph25 platform:

ph25 does not collect sensitive personal information beyond what is strictly necessary for identity verification, regulatory compliance, and fraud prevention. We do not collect biometric data unless specifically required and disclosed for a particular verification process.

ph25 collects personal data through the following primary methods:

• Direct Submission: Information you provide when registering an account, completing KYC verification, initiating a deposit or withdrawal, participating in a promotion, or contacting ph25 customer support;
• Automated Collection: Technical and usage data collected automatically when you access the ph25 platform through cookies, browser storage, server logs, and similar tracking technologies;
• Payment Processors: Transaction confirmation data received from GCash, PayMaya, and banking partners when you initiate deposits or withdrawals. ph25 does not store full payment credentials — payment processing is handled by certified third-party processors;
• Identity Verification Services: Information returned by third-party KYC and anti-money laundering screening services used to verify the identity of Account holders in compliance with PAGCOR requirements;
• Public Sources: In limited circumstances for fraud prevention or compliance screening, ph25 may cross-reference information against publicly available databases or regulatory watchlists.

ph25 processes your personal data only where a valid legal basis exists under the Data Privacy Act of 2012. The following table outlines the primary purposes for which ph25 processes personal data and the corresponding legal basis for each:

ph25 does not sell, rent, or trade your personal information to third parties for commercial marketing purposes. Your data may be shared with the following categories of recipients, strictly for the purposes set out in this Privacy Policy:

1. Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other banking or e-wallet providers necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and are bound by applicable financial data protection regulations;
2. KYC and Compliance Providers: Third-party identity verification and anti-money laundering screening services engaged by ph25 to fulfill its regulatory obligations under the PAGCOR framework and Philippine anti-money laundering laws;
3. Game Content Providers: Software providers whose games are available on the ph25 platform may receive limited technical session data necessary to deliver and audit their games. No personal identity data beyond an anonymised player reference is shared for this purpose;
4. PAGCOR and Regulatory Authorities: ph25 is legally required to report certain player data and transaction records to PAGCOR and other competent Philippine authorities upon their lawful request;
5. Law Enforcement and Courts: Where required by court order, law enforcement directive, or applicable Philippine law, ph25 may disclose personal data to the relevant authorities;
6. Technical Service Providers: Cloud hosting, cybersecurity, platform maintenance, and analytics vendors engaged by ph25 under strict data processing agreements that prohibit secondary use of personal data.

All third-party data processors engaged by ph25 are required to implement appropriate technical and organizational security measures and to process personal data only in accordance with ph25's documented instructions.

ph25 uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and improve the overall user experience. The following categories of cookies may be in use on ph25.asia:

You may control cookie preferences through your browser settings. Note that disabling strictly necessary or functional cookies may impair your ability to access your ph25 Account or use certain platform features. ph25 does not use third-party advertising cookies or cross-site tracking cookies for commercial advertising networks.

ph25 retains personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy or as required by applicable law and regulatory obligations. The following retention periods apply as a general guide:

• Account and Identity Data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, as required for regulatory compliance and anti-money laundering record-keeping;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable Philippine financial record-keeping requirements;
• Gaming and Session Data: Retained for three (3) years from the date of the relevant gaming activity for dispute resolution, audit, and fraud prevention purposes;
• Customer Support Records: Retained for three (3) years from the date of the last support interaction;
• Technical and Usage Data: Retained in anonymised or aggregated form for up to twelve (12) months for analytics purposes.

Upon expiration of the applicable retention period, ph25 will securely delete or anonymise personal data in a manner that prevents its reconstruction or attribution to any individual.

ph25 implements a comprehensive set of technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. These measures include but are not limited to:

• End-to-end SSL/TLS encryption for all data in transit between user devices and ph25 servers;
• Encryption of sensitive data at rest, including payment references and identity document data;
• Role-based access controls limiting internal data access to authorized personnel with a legitimate operational need;
• Multi-factor authentication for ph25 administrative systems;
• Regular security audits, vulnerability assessments, and penetration testing;
• Intrusion detection and real-time monitoring of ph25 platform infrastructure;
• Formal incident response procedures for detecting, managing, and reporting data breaches in accordance with RA 10173 requirements.

While ph25 applies industry-standard security measures, no system is completely impenetrable. Players can strengthen the security of their ph25 Account by using a unique, strong password, enabling OTP verification, and never sharing account credentials with any third party.

Under the Data Privacy Act of 2012 (RA 10173) and its implementing rules, you have the following rights with respect to your personal data held by ph25. These rights may be exercised by contacting ph25 at the details set out in Section 15 of this Privacy Policy:

1. Right to Be Informed: You have the right to be informed of the fact that your personal data is being collected and processed, and the purposes for which it is processed;
2. Right to Access: You may request a copy of the personal data ph25 holds about you, along with information about how it is being used;
3. Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data ph25 holds about you. You may update many details directly in your ph25 Account settings;
4. Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes it was collected, subject to ph25's legal retention obligations;
5. Right to Object: You may object to the processing of your personal data for specific purposes, including direct marketing. Withdrawal of consent for marketing communications will be actioned promptly;
6. Right to Data Portability: Where technically feasible and legally permitted, you may request that ph25 provide your personal data in a structured, commonly used format;
7. Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe ph25 has not handled your personal data in accordance with RA 10173.

ph25 will respond to data subject rights requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days with notification to the requesting party. Identity verification may be required before requests are actioned.

ph25 takes the protection of minors seriously. Age verification is required at registration, and KYC documentation confirming date of birth must be submitted before real-money play and withdrawals are enabled. If ph25 becomes aware that personal data has been collected from an individual under the age of 21, that Account will be immediately suspended and all associated data will be deleted, subject to any retention obligations imposed by law.

If you have reason to believe that a minor is using or attempting to use the ph25 platform, please notify ph25 immediately via the contact details in Section 15. ph25 will investigate and take appropriate action without unreasonable delay.

The ph25 platform integrates with certain third-party services necessary to deliver its core functionality, including payment gateways (GCash, PayMaya, BPI, BDO, Metrobank), KYC verification providers, and game software providers. These third parties operate under their own privacy policies and data handling practices, which ph25 does not control.

ph25 requires all third-party data processors to:

• Process personal data only on documented instructions from ph25;
• Implement appropriate technical and organizational security measures;
• Assist ph25 in meeting its obligations under RA 10173;
• Delete or return personal data upon termination of the service agreement.

ph25 is not responsible for the privacy practices of third-party services accessed independently by players outside of the ph25 platform — for example, the GCash or PayMaya apps operated outside the context of a ph25 transaction.

ph25 primarily processes and stores personal data within the Philippines. Where data processing by certain third-party service providers involves transfer of personal data to servers or personnel located outside the Philippines, ph25 ensures that such transfers are subject to appropriate safeguards consistent with the requirements of RA 10173, including:

• Data processing agreements that impose obligations equivalent to those under Philippine data privacy law;
• Transfer to jurisdictions recognized as offering an adequate level of data protection;
• Application of standard contractual clauses or equivalent binding commitments.

ph25 does not transfer personal data internationally for commercial purposes beyond what is strictly required to deliver platform functionality and maintain regulatory compliance.

ph25 may update this Privacy Policy from time to time to reflect changes in its data processing practices, legal requirements, or platform functionality. When material changes are made, ph25 will:

• Update the Effective Date at the top of this document;
• Notify registered Account holders via their registered email address where the changes are material and likely to significantly affect their rights;
• Display a prominent notice on the ph25 platform for a reasonable period following any significant update.

Your continued use of the ph25 platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised policy, you should cease using the ph25 platform and request Account closure.

This Privacy Policy is governed by and construed in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its implementing rules and regulations, and all other applicable laws of the Republic of the Philippines.

Any dispute arising from this Privacy Policy or from ph25's processing of personal data shall be subject to the jurisdiction of the competent courts and regulatory authorities of the Philippines, including the National Privacy Commission where applicable.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph25, you may contact us through the following channel:

ph25 aims to respond to all privacy-related inquiries within thirty (30) calendar days. Where a request is complex or involves multiple data subjects, this period may be extended with prior written notification.

This Privacy Policy was last reviewed and updated on 1 January 2026. ph25 operates within the PAGCOR regulatory framework and in compliance with the Data Privacy Act of 2012 (RA 10173) of the Philippines. Gambling involves risk. Play responsibly. 21+