25ph12 Privacy Policy

This Privacy Policy ("Policy") describes how 25ph12 ("we," "us," "our," "the Company") collects, processes, stores, and protects the personal information of individuals ("you," "Player," "User") who access or use the 25ph12 online gaming platform at 25ph12.org and all associated services (collectively, "the Platform").

This Policy applies to all personal data processed in connection with your use of 25ph12 — including data collected during account registration, identity verification (KYC), financial transactions, gaming activity, customer support interactions, and general browsing of the Platform.

This Policy is to be read in conjunction with the 25ph12 Terms and Conditions, available at terms-conditions. In the event of any inconsistency between this Policy and any other document, this Policy shall govern with respect to personal data processing matters.

For the purposes of the Philippine Data Privacy Act of 2012, 25ph12 is the personal information controller ("PIC") in respect of all personal data processed in connection with the Platform. This means 25ph12 determines the purposes and means of processing your personal data.

A designated Data Protection Officer ("DPO") has been appointed by 25ph12 in accordance with the requirements of the National Privacy Commission. Inquiries regarding this Policy or the exercise of your data privacy rights may be directed to our DPO via the contact details set forth in Section 15 of this Policy.

25ph12 collects the following categories of personal data from Players. The specific data collected will depend on your level of account activity and the verification stage you have reached:

25ph12 does not collect or process special categories of sensitive personal data (e.g., racial or ethnic origin, health information, political opinions, religious beliefs) except where directly relevant to responsible gaming support and only with your explicit consent.

25ph12 collects personal data through the following channels:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, participate in promotions, or use responsible gaming tools;
• Automatically: Through cookies, log files, and similar tracking technologies when you access the Platform — including your IP address, device identifiers, browser information, and navigation behavior;
• From third-party identity verification providers: Where 25ph12 uses automated or manual KYC verification services to confirm the authenticity and validity of identity documents submitted by Players;
• From payment processors: Transaction confirmation data from GCash, Maya, and banking partners, limited to what is necessary to process and verify payments;
• From fraud prevention and AML screening services: Where legally required under PAGCOR regulations and Philippine AMLA obligations, 25ph12 may receive data from screening services used to verify player identity against regulatory watchlists.

25ph12 processes personal data for the following purposes:

• Account creation and management: To register, maintain, and administer your 25ph12 player account, including authentication and access control;
• Identity and age verification: To comply with PAGCOR's mandatory KYC requirements and to confirm that all Players are at least 21 years of age;
• Payment processing: To process deposits and withdrawals via GCash, Maya, and other approved Philippine payment channels, and to maintain transaction records;
• Platform operation and improvement: To deliver gaming services, detect and resolve technical issues, analyze platform usage, and develop and improve features;
• Fraud prevention and security: To detect and investigate suspicious activity, unauthorized account access, bonus abuse, money laundering, and other prohibited conduct;
• AMLA compliance: To fulfill 25ph12's obligations under the Anti-Money Laundering Act (Republic Act No. 9160, as amended), including mandatory transaction monitoring and reporting;
• Responsible gaming: To administer deposit limits, self-exclusion requests, cooling-off periods, and other responsible gaming tools, and to monitor for indicators of problem gambling;
• Customer support: To respond to your inquiries, complaints, and requests through live chat and email support;
• Marketing and promotions: Where you have given consent, to send you information about 25ph12 promotions, bonuses, and new games relevant to your interests. You may withdraw consent at any time through your account settings;
• Legal and regulatory compliance: To comply with applicable Philippine law, PAGCOR directives, NPC requirements, court orders, and other regulatory obligations.

Under the Philippine Data Privacy Act of 2012, 25ph12 relies on the following legal bases when processing your personal data:

• Performance of a contract: Processing necessary for the operation of your 25ph12 account and the delivery of gaming services you have subscribed to;
• Compliance with a legal obligation: Processing required to satisfy PAGCOR licensing conditions, AMLA reporting obligations, NPC compliance, and other applicable Philippine law;
• Legitimate interests: Processing carried out to protect the security of the Platform, prevent fraud and abuse, and improve services — where these interests are not overridden by your rights and freedoms;
• Consent: Processing for marketing communications and the use of non-essential cookies, where you have provided clear, informed, and freely given consent and retain the right to withdraw it at any time.

25ph12 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data with the following categories of recipients only to the extent strictly necessary:

• PAGCOR and regulatory authorities: As required by our license conditions, including mandatory reporting of certain transactions and player information to PAGCOR and other competent Philippine government agencies;
• Anti-money laundering authorities: The Anti-Money Laundering Council (AMLC) and other bodies as required under Philippine AMLA obligations;
• Payment service providers: GCash, Maya, BPI, BDO, Metrobank, and other payment processors, solely to execute deposit and withdrawal transactions on your behalf;
• KYC and identity verification providers: Third-party service providers engaged to assist with document verification and age confirmation, who are contractually bound to process data solely for this purpose;
• Technology and infrastructure providers: Cloud hosting, platform development, and security service providers who access data solely to provide services to 25ph12 under strict data processing agreements;
• Game software providers: Where required for the operation of third-party game software integrated into the Platform, limited to session and wager data necessary for game operation;
• Law enforcement and courts: Where legally compelled by Philippine court order, subpoena, or law enforcement request.

25ph12 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following the closure of your account, as required by PAGCOR conditions and Philippine AMLA obligations;
• Transaction records: Financial transaction records are retained for a minimum of five (5) years following each transaction, consistent with AMLA and BSP requirements;
• Gaming activity logs: Retained for three (3) years following your last gaming session, or longer where required for ongoing investigations or regulatory inquiries;
• Customer support communications: Retained for two (2) years from the date of the most recent interaction;
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, to demonstrate compliance;
• Technical and log data: Retained for ninety (90) days, unless extended for security investigation purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with 25ph12's data destruction procedures.

25ph12 uses cookies and similar technologies on the Platform to improve user experience, maintain session security, and gather analytical information. The following types of cookies are used:

• Strictly necessary cookies: Required for the basic operation of the Platform, including maintaining your logged-in session and remembering your security preferences. These cannot be disabled without affecting core Platform functionality;
• Functional cookies: Remember your preferences such as language settings and responsible gaming configurations;
• Performance and analytics cookies: Collect anonymized information about how visitors use the Platform to help us identify areas for improvement. No personally identifiable information is collected through these cookies;
• Security cookies: Used to detect fraudulent activity, protect against unauthorized account access, and support our compliance obligations.

You may control non-essential cookies through your browser settings. Disabling strictly necessary cookies will impair your ability to use the Platform. 25ph12 does not use third-party advertising cookies.

25ph12 employs technical and organizational security measures appropriate to the risk level of the personal data processed. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmissions between your device and the 25ph12 Platform;
• Encryption of stored sensitive personal data, including KYC documents and financial information, at rest;
• Role-based access controls that limit employee and contractor access to personal data strictly to what is required for their function;
• Two-factor authentication (2FA) available for all Player accounts;
• Automated anomaly detection systems that flag unusual login activity and potential unauthorized access;
• Regular penetration testing and vulnerability assessments by qualified security professionals;
• Internal data privacy and security training for all staff with access to personal data.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 25ph12. Requests to exercise these rights may be submitted via live chat or to the DPO contact details in Section 15. 25ph12 will respond within fifteen (15) business days of receiving a valid request.

The 25ph12 Platform is strictly intended for individuals aged 21 years or older. 25ph12 does not knowingly collect, process, or retain personal data from individuals under the age of 21. The collection of data from minors is prohibited by PAGCOR regulations and by the Terms and Conditions of 25ph12.

Age verification is conducted during the KYC process for all accounts. Where 25ph12 discovers that an account has been created by or on behalf of a person under 21, the account will be immediately closed, all real-money activity associated with the account will be voided, and any deposited funds will be returned to the verified payment source.

Any person who has reason to believe that a minor has registered on the 25ph12 Platform is encouraged to contact 25ph12's support team immediately via live chat or at the email address in Section 15.

Where 25ph12 uses technology or infrastructure providers whose servers are located outside the Philippines — such as international cloud hosting platforms or game software providers — your personal data may be transferred to and processed in countries other than the Philippines.

All such cross-border transfers are conducted in accordance with Section 21 of the Philippine Data Privacy Act and the NPC's rules on cross-border data transfers. 25ph12 ensures that adequate data protection standards are maintained through contractual safeguards, including data processing agreements that incorporate appropriate transfer mechanisms. 25ph12 does not transfer personal data to jurisdictions that do not provide an adequate level of protection without the implementation of appropriate safeguards.

25ph12 reserves the right to update or modify this Privacy Policy at any time. Where changes are material — meaning they significantly affect the way we process your personal data or alter your rights — we will provide advance notice to registered Players via email or a prominent notice on the Platform, no less than fourteen (14) days before the changes take effect.

Non-material changes — such as clarifications of existing practices, corrections of typographical errors, or updates reflecting minor operational changes — may take effect immediately upon publication. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.

Your continued use of the 25ph12 Platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with any changes, you may close your account in accordance with the 25ph12 Terms and Conditions.

For all inquiries relating to this Privacy Policy, requests to exercise your data privacy rights under the Philippine Data Privacy Act, or to report a suspected data privacy concern, please contact the 25ph12 Data Protection Officer:

If you believe that 25ph12 has not handled your personal data in accordance with the Philippine Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact details for the NPC are publicly available through official Philippine government channels.