25php Casino Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") is issued by 25php Casino ("we," "us," "our," or the "Platform") and governs the collection, use, storage, disclosure, and protection of personal data belonging to users ("you," "your," or "Data Subject") who access or use the 25php Casino online gaming platform, website, and associated services accessible at 25php.cam.

This Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Republic of the Philippines, its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC). It also reflects our obligations under the regulations of the Philippine Amusement and Gaming Corporation (PAGCOR) with respect to the collection and handling of player data.

By registering an account, accessing the platform, or otherwise engaging with any service offered by 25php Casino, you acknowledge that you have read and understood this Privacy Policy and you consent to the processing of your personal data as described herein. If you do not agree with any aspect of this Policy, you must discontinue use of the platform immediately.

2. Data Controller and Data Protection Officer

25php Casino acts as the Personal Information Controller (PIC) for all personal data collected through the platform, as defined under Section 3(h) of the Data Privacy Act. As PIC, 25php Casino determines the purposes and means of processing your personal information.

In compliance with the DPA and NPC Circular No. 16-01, 25php Casino has designated a Data Protection Officer (DPO) who is responsible for ensuring compliance with applicable data privacy laws, handling data subject requests, and overseeing the platform's data protection program. The DPO may be contacted through the email address stated in Section 15 of this Policy.

Certain data processing activities may be carried out by third-party Personal Information Processors (PIPs) acting on our instructions — including payment processors, game providers, and cloud infrastructure providers — all of whom are required by contract to implement appropriate data protection measures consistent with Philippine law.

3. Categories of Personal Data We Collect

25php Casino collects the following categories of personal data, classified according to their nature and sensitivity:

3.1 Identity and Contact Data

Identity

• Full legal name as it appears on government-issued identification
• Date of birth (for 21+ age verification purposes)
• Gender
• Nationality and country of residence
• Government-issued ID type and number (Philippine passport, driver's license, UMID, PhilHealth ID, SSS ID, or other PAGCOR-accepted documents)
• Photograph or biometric image (as submitted during KYC verification)
• Mobile number (Philippine format)
• Email address
• Home and billing address

3.2 Financial and Payment Data

Financial

• GCash and Maya e-wallet account details (mobile number associated with wallet)
• Bank account details (bank name, account name, account number) for BPI, BDO, Metrobank, and other Philippine banking institutions
• Transaction history — deposits, withdrawals, and bonuses
• Source of funds documentation (where required by anti-money laundering regulations)

3.3 Technical and Device Data

Technical

• IP address and approximate geographic location derived from IP
• Device identifiers (device type, operating system, browser type and version)
• Session data (login timestamps, session duration, pages visited)
• Cookies and tracking pixels (as described in Section 10)
• Error logs and crash reports for technical debugging purposes

3.4 Gaming Activity Data

Gaming

• Game history — titles played, bets placed, wins and losses
• Sports betting selections, odds accepted, and settlement outcomes
• Bonus and promotion participation history
• Loyalty program points, tier status, and redemption history
• Responsible gaming settings — deposit limits, session limits, self-exclusion status
• Customer support interaction history

4. How We Collect Personal Data

25php Casino collects personal data through the following means:

• Direct Collection: Information you provide directly during account registration, KYC verification, payment processing, customer support interactions, or when completing forms on the platform.
• Automated Collection: Technical data collected automatically when you access and use the platform, including through cookies, web beacons, pixel tags, and server logs.
• Third-Party Sources: Identity verification data from KYC service providers; payment verification data from GCash, Maya, BPI, BDO, and other payment processors; fraud prevention signals from security service providers; and regulatory databases as permitted under Philippine law.
• Publicly Available Sources: Information from public government registries or databases where permitted under the DPA for identity verification or fraud prevention purposes.

5. Legal Basis for Processing Personal Data

25php Casino processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual Necessity (Section 12(b), DPA): Processing necessary for the performance of the contract between you and 25php Casino — including account management, payment processing, game delivery, and customer support.
• Legal Obligation (Section 12(c), DPA): Processing required to comply with applicable laws and regulatory requirements, including PAGCOR licensing conditions, Republic Act No. 9160 (Anti-Money Laundering Act), and NPC directives.
• Legitimate Interests (Section 12(f), DPA): Processing for the legitimate interests of 25php Casino in preventing fraud, ensuring platform security, analyzing platform performance, and improving user experience — where such interests do not override your fundamental rights and freedoms.
• Consent (Section 12(a), DPA): Processing for marketing communications and non-essential cookies, where your freely given, specific, informed, and unambiguous consent has been obtained. You may withdraw consent at any time without prejudice to the lawfulness of processing conducted prior to withdrawal.

6. How We Use Your Personal Data

25php Casino uses collected personal data for the following purposes:

• Creating, managing, and maintaining your player account on the 25php Casino platform
• Verifying your identity and confirming your eligibility to play (including 21+ age verification as required by PAGCOR)
• Processing deposits and withdrawals through GCash, Maya, BPI, BDO, and other Philippine payment channels
• Delivering real-money and free-play games from our certified provider library
• Administering bonuses, promotions, and loyalty program rewards
• Providing customer support and responding to inquiries, complaints, and disputes
• Conducting fraud detection, security monitoring, and anti-money laundering screening as mandated by Philippine law
• Complying with PAGCOR reporting requirements and other regulatory obligations
• Enforcing our Terms & Conditions and responsible gaming policies
• Sending transactional communications — deposit confirmations, withdrawal notifications, security alerts, and account updates
• Sending marketing communications (with your consent, and subject to your right to opt out at any time)
• Analyzing platform usage patterns to improve game selection, interface design, and overall player experience
• Detecting and preventing problem gambling behaviors in accordance with our responsible gaming obligations

7. Data Sharing and Disclosure

25php Casino does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients only where lawfully justified:

• Payment Service Providers: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), BPI, BDO, and other Philippine financial institutions, solely for the purpose of processing deposits and withdrawals.
• Game Providers: Licensed game developers including Pragmatic Play, PG Soft, NetEnt, Microgaming, and other certified providers, to the extent necessary to deliver gaming services and maintain RNG certification compliance.
• Identity Verification Providers: Third-party KYC and biometric verification services engaged by 25php Casino to fulfill PAGCOR and AMLC player identification requirements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies where disclosure is required by law, court order, or regulatory directive.
• Fraud Prevention and Security Services: Third-party security providers engaged to detect fraud, unauthorized access, and suspicious activity on the platform.
• Cloud and Infrastructure Providers: Hosting and cloud service providers who process data on our behalf under strict data processing agreements consistent with the DPA.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to applicable professional confidentiality obligations.

All third parties with whom 25php Casino shares personal data are contractually required to implement appropriate organizational and technical security measures and to process such data solely for the purposes specified in their agreements with us.

8. Data Retention

25php Casino retains personal data for the period necessary to fulfill the purposes for which it was collected, as follows:

• Active Account Data: Retained for the duration of your account relationship with 25php Casino plus a minimum of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements under RA 9160.
• KYC and Identity Documents: Retained for a minimum of five (5) years from the date of account closure or the last transaction, whichever is later, as required by PAGCOR and AMLC regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction in compliance with AMLC record-keeping requirements.
• Gaming Activity Logs: Retained for three (3) years from the date of each gaming session for dispute resolution and regulatory audit purposes.
• Marketing Consent Records: Retained for the duration of your account plus three (3) years, to demonstrate compliance with consent requirements.
• Customer Support Records: Retained for three (3) years from the date of each interaction.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved disposal procedures, unless continued retention is required by a court order, regulatory directive, or ongoing legal proceedings.

9. Data Security Measures

25php Casino implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• AES-256 encryption for personal data stored at rest in our databases
• Multi-factor authentication requirements for account access and administrative systems
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular security penetration testing conducted by independent third-party security specialists
• 24/7 security monitoring with automated alerts for suspicious access patterns or potential breaches
• Secure development lifecycle (SDLC) practices for all platform features and updates
• Employee data protection training and confidentiality obligations

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 25php Casino will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected data subjects without undue delay, in accordance with NPC Circular 16-03 on Personal Data Breach Management.

10. Cookies and Tracking Technologies

25php Casino uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files placed on your device when you visit our website. We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the 25php Casino platform. These cookies enable core functions such as session management, authentication, and security features. These cannot be disabled without impacting platform functionality.
• Functional Cookies: Remember your preferences and settings (language, display preferences, responsible gaming settings) to provide a personalized experience.
• Analytics Cookies: Collect anonymized data about how players use the 25php Casino platform to help us improve features, identify technical issues, and understand which games are most popular.
• Marketing Cookies (with consent only): Used to deliver relevant promotional content and to measure the effectiveness of marketing campaigns. These are only deployed with your prior consent.

You can manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair the functionality of the 25php Casino platform. For detailed information about specific cookies used, their duration, and how to opt out, please refer to our Cookie Settings panel accessible from the platform's footer.

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by 25php Casino:

• Right to be Informed (Section 16(a), DPA): The right to be informed whether your personal data is being processed, including the identity of the Personal Information Controller and the purposes of processing.
• Right of Access (Section 16(b), DPA): The right to reasonable access to your personal data, including the sources from which it was obtained, recipients of the data, and the manner of processing.
• Right to Rectification (Section 16(c), DPA): The right to dispute and request correction of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data.
• Right to Erasure or Blocking (Section 16(d), DPA): The right to request suspension, withdrawal, or deletion of your personal data from our filing systems, subject to applicable legal retention requirements.
• Right to Object (Section 16(e), DPA): The right to object to processing of your personal data, including processing for direct marketing purposes, at any time.
• Right to Data Portability (Section 18, DPA): The right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer as described in Section 15 of this Policy. We will respond to all legitimate data subject requests within fifteen (15) business days of receipt. We may require proof of identity before processing your request to ensure we do not disclose personal data to unauthorized parties.

12. Children's and Minors' Privacy

The 25php Casino platform is strictly intended for adults aged twenty-one (21) years and above, in compliance with PAGCOR's minimum age requirements for online gambling in the Philippines. We do not knowingly collect personal data from individuals under the age of 21.

If we discover or have reason to believe that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, void any transactions conducted through that account, and permanently delete the associated personal data from our systems. Any funds deposited by underage individuals will be returned through the original payment method to the extent technically feasible.

If you are a parent or guardian and believe that your minor child has provided personal data to 25php Casino, please contact our Data Protection Officer immediately at the contact details provided in Section 15.

13. Cross-Border Data Transfers

Certain personal data processed by 25php Casino may be transferred to, stored in, or processed in countries outside the Republic of the Philippines, specifically in connection with our game provider partnerships and cloud infrastructure services. All such cross-border data transfers are conducted in compliance with Section 21 of the Data Privacy Act and NPC guidelines on cross-border data flows.

We ensure that any jurisdiction to which data is transferred provides an adequate level of data protection, or alternatively that appropriate safeguards — such as contractual data processing agreements based on NPC-approved standard clauses — are in place prior to any such transfer. By using the 25php Casino platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where such transfers are necessary for the performance of services you have requested.

14. Changes to This Privacy Policy

25php Casino reserves the right to amend, update, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, business practices, or platform features. The revised Policy will be posted to this page with an updated "Last Updated" date at the top of the document.

Where changes are material — particularly where they affect your rights or the legal basis for processing your data — we will provide advance notice through a prominent notice on the platform or via email to your registered address at least seven (7) calendar days before the changes take effect, where reasonably practicable.

Continued use of the 25php Casino platform following the effective date of any revised Privacy Policy constitutes your acceptance of those changes. If you do not agree with any changes, you must cease using the platform and contact our Data Protection Officer to request account closure and data deletion.

15. Contact the Data Protection Officer

For all privacy-related inquiries, data subject rights requests, complaints, or concerns regarding the handling of your personal data by 25php Casino, you may contact our designated Data Protection Officer through the following channels:

• Email: [email protected] (please include "Data Privacy Request" or "DPO Inquiry" in the subject line)
• Live Chat: Available 24/7 through the 25php Casino platform — ask to be connected to the Data Protection team
• Response Time: All formal DPO inquiries and data subject rights requests are acknowledged within 48 hours and resolved within 15 business days

If you are not satisfied with the response from our Data Protection Officer, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for administering and implementing the Data Privacy Act of 2012. NPC contact details and complaint procedures are published at the NPC's official government website.