25ph Privacy Policy
Your privacy matters to 25ph. This Privacy Policy explains what personal information we collect when you use the 25ph platform, how we use and protect it, and what rights you have as a data subject under Philippine law.
How 25ph Approaches Your Data
These six principles govern every data processing decision at 25ph. They reflect the requirements of Republic Act No. 10173 (Data Privacy Act of 2012) and our own commitment to treating player data with respect.
Purpose Limitation
25ph collects personal data for specific, legitimate purposes only — operating your casino account, processing payments, fulfilling KYC and AML obligations, and improving the platform. We do not repurpose your data for unrelated activities without your explicit consent.
Data Minimisation
We collect only the minimum personal information needed to deliver 25ph services safely and in compliance with applicable regulations. If a piece of information isn't necessary for account operation, compliance, or service delivery, we don't ask for it.
Accuracy
25ph takes reasonable steps to keep personal data accurate and up to date. You are responsible for keeping your registered information current through your account settings. Outdated information may affect payment processing and identity verification.
Security by Design
Personal data held by 25ph is protected by technical and organizational measures including 256-bit SSL encryption, access controls, and regular security assessments. Our data handling practices align with the security requirements of the Philippine Data Privacy Act of 2012.
Defined Retention Periods
25ph does not hold personal data indefinitely. Retention periods are tied to specific purposes — regulatory and AML obligations, for example, require longer retention than transactional data. Once a retention period lapses, data is securely deleted or anonymized.
Your Rights Are Enforceable
Under the Philippine Data Privacy Act of 2012, you have the right to access, correct, object to, and erase your personal data where legally permitted. 25ph provides practical mechanisms for exercising these rights and responds to valid requests within the statutory timeframe.
Scope of This Policy: This Privacy Policy applies to all personal data collected by 25ph in connection with the online casino platform accessible at https://25ph.cam, including data collected through account registration, gameplay, payment transactions, customer support interactions, and your use of the 25ph website. It should be read alongside the 25ph Terms & Conditions.
01 Personal Data We Collect
1.1 Registration and Account Data
When you create a 25ph account, we collect the information you provide during the registration process, including: full legal name as it appears on a valid Philippine government-issued identification document; date of birth; registered Philippine mobile number; email address; residential address; and the credentials you choose for your account (username and password, stored in encrypted form).
1.2 Identity Verification Data (KYC)
To meet our Know Your Customer (KYC) obligations under Philippine anti-money laundering regulations and PAGCOR licensing requirements, 25ph may request copies of: a valid government-issued photo identification document (e.g., Philippine passport, driver's license, UMID, SSS ID, PhilHealth ID, Postal ID); and, where required, a proof of residential address (e.g., utility bill, barangay clearance, bank statement). Biometric data embedded in government-issued IDs is processed only to the extent necessary for identity confirmation and is not separately stored.
1.3 Payment and Transaction Data
When you make deposits or request withdrawals through the 25ph platform, we collect payment-related information including: the payment method type used (e.g., GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, InstaPay); the mobile number or account identifier associated with your payment method; transaction amounts, timestamps, and reference numbers; and, where applicable, partial card numbers for card-based transactions. Full card numbers are not stored on 25ph systems.
1.4 Gaming Activity Data
The 25ph platform automatically records data related to your gameplay activity, including: games played; bet amounts and outcomes; session durations and timestamps; bonus activations and wagering progress; and responsible gaming tool settings such as deposit limits and self-exclusion status. This data is used for operational, compliance, and player protection purposes.
1.5 Technical and Device Data
When you access the 25ph platform through a browser or mobile application, we automatically collect certain technical information, including: IP address; browser type, version, and language settings; operating system and device type; referring URL; and pages accessed and time spent on those pages. This information is used for security monitoring, fraud prevention, and platform optimization.
1.6 Customer Support Data
When you contact 25ph customer support through live chat or email, we collect and retain records of those communications, including the content of your messages, the nature of the query or complaint, and the resolution provided. This is necessary for quality assurance, dispute resolution, and regulatory record-keeping.
| Data Category | Examples | Primary Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, ID document | Account registration, KYC/AML compliance |
| Contact Data | Mobile number, email, address | Account management, communication, OTP delivery |
| Financial Data | GCash number, transaction records, partial card details | Payment processing, fraud prevention |
| Gaming Data | Bets placed, game history, session logs | Service delivery, responsible gaming, compliance |
| Technical Data | IP address, device type, browser | Security monitoring, platform optimization |
| Communications Data | Support chat logs, email correspondence | Dispute resolution, quality assurance |
02 How We Collect Personal Data
25ph collects personal data through the following channels:
- Direct collection: Information you provide when registering a 25ph account, completing KYC verification, making deposits or withdrawals, updating your account profile, or contacting customer support.
- Automated collection: Technical data collected automatically through cookies, log files, and similar technologies when you access the 25ph website or platform interface. See Section 9 for details on cookies and tracking technologies.
- Third-party sources: Identity and sanctions screening data received from licensed KYC verification service providers operating in the Philippines; fraud prevention data from payment processors; and publicly available information used for identity verification purposes.
- Regulatory sources: Information received in connection with PAGCOR compliance obligations, Philippine Anti-Money Laundering Council (AMLC) requirements, or lawful requests from Philippine law enforcement authorities.
03 How 25ph Uses Your Personal Data
3.1 Account Operations
We use your personal data to create, maintain, and operate your 25ph account — including processing deposits and withdrawals, verifying your identity during login (including OTP delivery to your registered Philippine mobile number), maintaining your gaming history and wallet balance, and providing access to all 25ph services.
3.2 Regulatory and Legal Compliance
25ph processes personal data as required to comply with applicable Philippine laws and regulations, including: the Anti-Money Laundering Act (AMLA) and its implementing rules; PAGCOR licensing conditions and reporting obligations; the Philippine Data Privacy Act of 2012 (RA 10173); and any lawful order, subpoena, or regulatory directive issued by a competent Philippine authority.
3.3 Fraud Prevention and Security
Technical and identity data is used to detect and prevent fraudulent activity, unauthorized account access, money laundering, and abuse of the 25ph platform. This includes monitoring unusual login patterns, cross-referencing payment method details, and screening against sanctions and politically exposed persons (PEP) lists as required under Philippine AML regulations.
3.4 Responsible Gaming
Gaming activity data, including bet patterns, session frequency, deposit volumes, and use of responsible gaming tools, is analyzed to identify players who may be exhibiting signs of problem gambling. This data is used to trigger responsible gaming interventions as required under 25ph's player welfare obligations and PAGCOR standards.
3.5 Platform Improvement and Analytics
Aggregated and anonymized technical and gaming data is used to analyze platform performance, identify areas for improvement, optimize the 25ph user interface, and develop new features. No individual player is identified in this analytical process.
3.6 Marketing Communications
With your prior consent, 25ph may use your contact details to send promotional communications about bonuses, new games, sports betting markets, and other 25ph services. You may withdraw marketing consent at any time by updating your communication preferences in your account settings or by contacting 25ph customer support. Withdrawal of marketing consent does not affect the lawfulness of prior processing.
04 Legal Basis for Processing
25ph processes personal data only where a valid legal basis exists under the Philippine Data Privacy Act of 2012. The applicable legal bases for our processing activities are:
- Contractual necessity: Processing required to perform the contract between 25ph and the player — i.e., to operate your account, process your transactions, and deliver gaming services.
- Legal obligation: Processing required to comply with applicable Philippine laws, including KYC, AML, and PAGCOR regulatory obligations.
- Legitimate interests: Processing for fraud prevention, platform security, and aggregated analytics where such interests are not overridden by your data protection rights.
- Consent: Processing for marketing communications, certain cookie categories, and any additional processing activities for which 25ph has obtained your prior explicit consent. Consent may be withdrawn at any time without affecting prior processing.
05 Sharing and Disclosure of Personal Data
5.1 No Sale of Personal Data
25ph does not sell, rent, or commercially trade your personal data to any third party for their own marketing or commercial purposes. Your personal information is not a commodity at 25ph.
5.2 Service Providers
25ph engages third-party service providers who process personal data on our behalf, subject to contractual data processing agreements consistent with the requirements of RA 10173. These include: identity verification and KYC service providers; payment processors and e-wallet providers (including GCash and PayMaya operators); IT infrastructure and cloud service providers; customer support platform operators; and fraud detection and cybersecurity services.
5.3 Regulatory and Law Enforcement Disclosure
25ph may disclose personal data to PAGCOR, the Philippine Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities where required by law, court order, or regulatory directive. Such disclosures are made in strict compliance with applicable legal requirements and with appropriate documentation.
5.4 Business Transfers
In the event of a merger, acquisition, or sale of all or substantially all of 25ph's assets, personal data held by 25ph may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy terms of the acquiring entity prior to any change in data controller identity.
Our Commitment: In all cases where 25ph shares personal data with third parties, we require those parties to process your data only as instructed by 25ph, for specified purposes only, and in accordance with the security standards required under the Philippine Data Privacy Act of 2012. We do not permit our service providers to use your personal data for their own purposes.
06 Data Retention
25ph retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to any longer retention period required by law. The following general retention guidelines apply:
| Data Category | Retention Period | Reason |
|---|---|---|
| Account & Identity Data | Duration of account + 5 years post-closure | AML and PAGCOR regulatory requirements |
| KYC Documents | Duration of account + 5 years post-closure | AMLA record-keeping obligations |
| Transaction Records | Duration of account + 5 years post-closure | Financial audit and AML obligations |
| Gaming History | Duration of account + 2 years post-closure | Dispute resolution, responsible gaming records |
| Support Communications | 3 years from last interaction | Dispute resolution and quality assurance |
| Technical / Log Data | 12 months | Security monitoring, fraud investigation |
| Marketing Consent Records | 3 years from consent withdrawal | Evidence of lawful processing basis |
Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized data — which cannot be linked back to an individual — may be retained for analytical purposes beyond these periods.
07 Security Measures
7.1 Technical Safeguards
25ph implements a comprehensive set of technical security measures to protect personal data, including: 256-bit SSL/TLS encryption for all data transmitted between your browser and 25ph servers; encryption of sensitive data fields at rest in our database systems; multi-factor authentication controls for administrative access to data systems; and regular vulnerability assessments and penetration testing of the 25ph platform infrastructure.
7.2 Organizational Safeguards
Access to personal data within 25ph is restricted to staff members who have a legitimate operational need for that access. All staff with access to personal data are trained on their obligations under the Philippine Data Privacy Act of 2012 and 25ph's internal data handling policies. Access logs are maintained and reviewed regularly.
7.3 Data Breach Response
In the event of a personal data breach that poses a real risk to your rights and freedoms, 25ph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required under RA 10173 and NPC Circular 16-03. Affected individuals will be notified without undue delay where required by law or where early notification would assist in mitigating harm.
Your Responsibility: The security of your 25ph account also depends on steps you take to protect your login credentials. Use a strong, unique password for your 25ph account. Never share your password or OTP codes with anyone — including persons claiming to be 25ph staff. 25ph support staff will never ask for your password.
08 Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by 25ph:
8.1 Right to Be Informed
You have the right to be informed about what personal data 25ph holds about you, the purposes for which it is processed, how long it is retained, and with whom it is shared. This Privacy Policy fulfills 25ph's primary obligation to inform you. You may request additional specific information by contacting the 25ph Data Protection Officer (DPO).
8.2 Right of Access
You have the right to request a copy of the personal data 25ph holds about you. Subject to identity verification, 25ph will provide this information within fifteen (15) calendar days of receipt of a valid access request. Information will be provided in a reasonably accessible format.
8.3 Right to Rectification
If any personal data 25ph holds about you is inaccurate or incomplete, you have the right to request correction. For most account data fields (name, address, mobile number), corrections can be initiated directly within your account profile settings. For information embedded in KYC documentation, please contact 25ph customer support with the relevant updated documentation.
8.4 Right to Erasure
You have the right to request the deletion of your personal data where: (a) the data is no longer necessary for the purpose for which it was collected; (b) you withdraw consent and there is no other legal basis for processing; or (c) the data has been unlawfully processed. The right to erasure is not absolute — it does not apply where 25ph is required to retain data to comply with AMLA, PAGCOR, or other applicable legal obligations.
8.5 Right to Object
You have the right to object to the processing of your personal data for direct marketing purposes at any time. Objections to other forms of processing based on legitimate interests may also be raised, and 25ph will cease such processing unless it has compelling legitimate grounds that override your interests. To exercise the right to object to marketing, update your communication preferences in your account settings or contact 25ph support.
8.6 Right to Data Portability
Where processing is carried out by automated means on the basis of your consent or contractual necessity, you have the right to receive your personal data in a structured, commonly used, and machine-readable format. Requests for data portability should be directed to the 25ph DPO.
8.7 Filing a Complaint with the NPC
If you believe that 25ph has processed your personal data in a manner that violates your rights under RA 10173, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file an NPC complaint is available on the NPC's official website. We encourage you to contact the 25ph DPO first so that we have the opportunity to address your concern directly.
Exercising Your Rights: To submit any data subject rights request, contact the 25ph Data Protection Officer using the contact details in Section 12 of this Policy. We will respond within the timeframe required by applicable law and verify your identity before processing any request to protect against unauthorized access to your data.
09 Cookies and Tracking Technologies
9.1 What Are Cookies
Cookies are small text files placed on your device by a website when you visit it. 25ph uses cookies and similar tracking technologies (such as web beacons and local storage) to operate the platform, personalize your experience, and analyze usage patterns.
9.2 Categories of Cookies Used by 25ph
- Essential Cookies: Required for the 25ph platform to function correctly. These include session authentication cookies that keep you logged in during an active session, security tokens, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
- Functional Cookies: Remember your preferences — such as your preferred language, responsible gaming settings, and lobby view configuration — to provide a more consistent experience across sessions.
- Analytics Cookies: Collect anonymized data about how visitors interact with the 25ph platform, including which pages are visited most frequently and where users experience technical difficulties. This data is used to improve the platform and is not linked to individual player identities.
- Marketing Cookies: Used only with your prior consent to track visits to the 25ph platform and deliver relevant promotional content. You may withdraw consent for marketing cookies at any time through the cookie preference settings accessible on the 25ph website.
9.3 Managing Cookies
You may manage cookie preferences at the browser level by adjusting your browser's privacy settings to block or delete cookies. Note that disabling essential cookies will impair your ability to use the 25ph platform. For cookies beyond the essential category, 25ph provides a cookie preference interface accessible from the site footer. Your cookie preferences are recorded and honored across 25ph sessions.
10 Minors and the 21+ Age Requirement
The 25ph platform is strictly for persons aged 21 years and above, in compliance with PAGCOR regulations governing casino-style online gambling in the Philippines. 25ph does not knowingly collect personal data from individuals under the age of 21.
If 25ph becomes aware that it has inadvertently collected personal data from a person under the age of 21, that data will be deleted immediately and the relevant account will be closed. If you believe that a minor's personal data has been provided to 25ph, please contact the 25ph Data Protection Officer at the address provided in Section 12 of this Policy so that we can take prompt corrective action.
Age verification is a condition of account activation at 25ph — not an optional step — and is conducted as part of the standard KYC onboarding process. Any account found to belong to a person under 21 will be permanently closed in accordance with the 25ph Terms & Conditions.
11 Changes to This Privacy Policy
25ph reserves the right to amend this Privacy Policy from time to time to reflect changes in applicable Philippine data protection law, regulatory guidance from the National Privacy Commission, or our own data processing practices. Where amendments are material — meaning they significantly affect how your personal data is processed or your rights as a data subject — 25ph will notify you through one or more of the following channels: a prominent notice displayed upon your next login to 25ph; an email to your registered email address; or a notice on this page at https://25ph.cam/privacy-policy.
The date of the most recent revision is shown at the top of this page. Your continued use of the 25ph platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy. If you do not agree with the revised terms, you should cease using the platform and may request account closure by contacting 25ph customer support.
12 Contact — Data Protection Officer
25ph has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have questions about this Policy, wish to exercise any of your data subject rights, or wish to report a potential data privacy concern, please contact the 25ph DPO using the details below.
Data Protection Officer
25ph Online Casino Platform
Philippines
Email (plain text — not a clickable link): [email protected] with the subject line "Data Privacy — Attn: DPO"
For general account queries and support (not data privacy matters), please use the 25ph live chat function, which is available 24 hours a day, seven days a week, with a target response time under five minutes.
Response Timeframes: 25ph will acknowledge data subject rights requests within three (3) business days of receipt and will provide a substantive response within fifteen (15) calendar days, as required under RA 10173. Complex requests may require additional time; in such cases, we will notify you of the extended timeframe and the reason for it.
Your Data Is Safe at 25ph
25ph handles your personal data in line with the Philippine Data Privacy Act of 2012. Log in now and enjoy a platform where your privacy and your winnings are both taken seriously.
Play responsibly · 21+ only · PAGCOR licensed platform · RA 10173 compliant