22phmaya Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes how 22phmaya ("we," "us," or "our") collects, uses, discloses, and safeguards the personal information of users ("you" or "Player") who access or use the 22phmaya platform, including our website at 22phmaya.vip and any related services, features, or content (collectively, the "Platform").

22phmaya is committed to protecting the privacy and security of your personal data. We process personal information in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

By registering for an account or using the 22phmaya Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2. Personal Data We Collect

22phmaya collects the following categories of personal data from players and platform visitors:

We do not intentionally collect sensitive personal information beyond what is necessary for identity verification and regulatory compliance. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by law.

3. How We Collect Your Data

22phmaya collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Data collected automatically when you use the Platform, including through cookies, web beacons, log files, and similar tracking technologies that record your interactions with the Platform.
• Third-Party Sources: Data received from payment processors (such as GCash and PayMaya/Maya), identity verification service providers, fraud prevention services, and analytics providers, where permitted by applicable law.
• Publicly Available Sources: In limited circumstances, we may collect data from publicly available sources to verify information you have provided or to comply with our legal obligations.

4. How We Use Your Personal Data

22phmaya uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your 22phmaya player account, including processing your registration and verifying your identity.
• Service Delivery: To provide you with access to the games, features, and services available on the 22phmaya Platform.
• Financial Transactions: To process deposits, withdrawals, and other financial transactions, and to maintain accurate records of all account activity.
• Legal & Regulatory Compliance: To comply with our obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Security & Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the Platform.
• Marketing Communications: To send you promotional offers, bonuses, and updates about 22phmaya, where you have consented to receive such communications. You may opt out at any time.

5. Legal Basis for Processing

22phmaya processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to provide the services described in our Terms & Conditions, including account management, game access, and financial transaction processing.
• Legal Obligation: Processing is necessary to comply with our legal and regulatory obligations, including KYC/AML requirements, PAGCOR reporting obligations, and tax compliance.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as marketing communications and non-essential cookies — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6. Sharing Your Personal Data

22phmaya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya/Maya, and Philippine banking partners, for the purpose of processing deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers who assist us in verifying your identity and age in compliance with regulatory requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulation.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and fraud detection providers who process data on our behalf under strict data processing agreements.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors where necessary for legal proceedings, compliance audits, or dispute resolution.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of 22phmaya's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are required to process it in accordance with applicable data protection laws and our data processing agreements. We do not permit third-party service providers to use your personal data for their own purposes.

7. Cookies & Tracking Technologies

22phmaya uses cookies and similar tracking technologies to enhance your experience on the Platform. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences (such as language settings and game preferences) to provide a more personalized experience.
• Analytics Cookies: Help us understand how players use the Platform by collecting aggregated, anonymized usage data. This information is used to improve Platform performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only set with your consent.

8. Data Retention

22phmaya retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

• Active Account Data: Retained for the duration of your account relationship with 22phmaya and for a period of at least five (5) years after account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Identity Verification Documents: Retained for the duration of the account relationship and for five (5) years after account closure.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications or request deletion, whichever is earlier.

When personal data is no longer required, 22phmaya will securely delete or anonymize it in accordance with our data retention and disposal procedures.

9. Data Security

22phmaya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 22phmaya Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Multi-factor authentication options for player accounts;
• Regular security assessments, penetration testing, and vulnerability scanning;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Staff training on data protection and information security best practices;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

10. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 22phmaya:

• Right to Access: You have the right to request a copy of the personal data 22phmaya holds about you and information about how it is processed.
• Right to Correction: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another data controller.
• Right to Damages: You have the right to claim compensation for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of your personal data.
• Right to Complain: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 15. We will respond to all verified requests within thirty (30) days, as required by the Data Privacy Act.

11. Minors & Age Restriction

The 22phmaya Platform is strictly intended for individuals who are at least 21 years of age, in accordance with Philippine gambling regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that we have inadvertently collected personal data from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 22phmaya Platform, please contact us immediately at the details provided in Section 15.

12. International Data Transfers

22phmaya primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, and processed in, countries outside the Philippines — for example, where we use cloud infrastructure or service providers with operations in other jurisdictions.

Where such transfers occur, 22phmaya ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to process personal data to standards equivalent to those required under Philippine law. We will not transfer your personal data to a country that does not provide an adequate level of data protection without your consent or without implementing appropriate safeguards.

13. Third-Party Links & Services

The 22phmaya Platform may contain references to third-party payment services (such as GCash and PayMaya/Maya) that have their own privacy policies. 22phmaya is not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you use in connection with your 22phmaya account.

This Policy applies solely to personal data collected and processed by 22phmaya through the Platform. It does not apply to data collected by third parties through their own platforms or services.

14. Changes to This Privacy Policy

22phmaya reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or Platform features. When material changes are made, we will notify registered players via the email address associated with their account and/or by posting a prominent notice on the Platform.

The "Last Updated" date at the top of this page will always reflect the date of the most recent revision. Your continued use of the 22phmaya Platform after any changes to this Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically to stay informed about how we protect your data.

15. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 22phmaya, please contact our Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with our response to your data rights request.