p2222 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") describes how p2222 ("p2222," "we," "us," or "the Company"), the operator of the online gaming platform at p2222.pro ("the Platform"), collects, uses, stores, discloses, and otherwise processes personal data about individuals who register accounts, visit, or interact with the Platform.

This Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations, as enforced by the National Privacy Commission ("NPC") of the Philippines. It is also consistent with the data-handling obligations imposed on p2222 by the Philippine Amusement and Gaming Corporation ("PAGCOR") as a condition of p2222's operating license.

This Policy applies to all personal data p2222 processes in connection with the Platform, regardless of whether you access the Platform via a desktop browser, mobile browser, or any other means. It applies to players, prospective players, and any other individual whose personal data p2222 may process in the course of operating the Platform.

---

2 Data Controller Details

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal data is the legal entity operating the p2222 Platform. p2222 is a PAGCOR-licensed online gaming operator serving players in the Philippines.

All data privacy inquiries, access requests, correction requests, and complaints may be directed to p2222's designated Data Protection Officer ("DPO"). Contact details for the DPO are provided in Section 14 of this Policy. The DPO is responsible for overseeing p2222's compliance with the Data Privacy Act and the policies of the National Privacy Commission.

---

3 Data We Collect

p2222 collects the following categories of personal data in connection with your use of the Platform:

3.1 Identity & Contact Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify you are 21 years of age or older)
• Residential address (province, city or municipality, barangay)
• Email address and mobile phone number
• Nationality and country of residence

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification documents (e.g., Philippine passport, PhilSys national ID, UMID, driver's license, PRC ID)
• Proof of address documents (e.g., utility bills, bank statements, barangay certificate)
• Source of funds documentation for high-value accounts, as required by PAGCOR and AMLC regulations

3.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts, dates, and payment method references
• GCash or Maya account reference numbers (not full credentials)
• Bank account details used for withdrawals (account name and last four digits, for matching purposes)
• Bonus and promotional transaction history

3.4 Gaming & Betting Data

• Game session history, bet placement records, and wagering activity
• Game preferences and platform navigation patterns
• Responsible gaming settings (deposit limits, session timers, self-exclusion status)

3.5 Technical & Usage Data

• IP address and approximate geolocation derived therefrom
• Device type, operating system, and browser information
• Session timestamps, page views, and click-stream data
• Login history and security event logs

3.6 Communications Data

• Records of your communications with p2222 customer support, including live chat transcripts and email correspondence
• Survey responses, feedback submissions, and promotion opt-in records

Data Category	Primary Purpose	Regulatory Basis
Identity & Contact	Account creation, age verification, communications	PAGCOR licensing, DPA RA 10173
KYC Documents	Identity verification, fraud prevention	PAGCOR, AMLA RA 9160
Financial & Transaction	Payment processing, AML monitoring	AMLA, BSP regulations
Gaming & Betting	Service delivery, responsible gaming	PAGCOR licensing conditions
Technical & Usage	Security, fraud detection, platform improvement	Legitimate interest
Communications	Customer support, dispute resolution	Contractual obligation

---

4 How We Collect Your Data

p2222 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting customer support, or participating in a promotion.
• Automated collection: Technical and usage data collected automatically when you access and interact with the Platform, including through cookies, session tokens, and server logs. See Section 8 for more detail on cookies.
• Third-party sources: Identity verification data from PAGCOR-accredited KYC service providers; fraud risk signals from payment processors; and, where legally required, data from AMLC (Anti-Money Laundering Council) or other Philippine government agencies.
• Payment providers: Transaction reference data from GCash, Maya, BPI, BDO, Metrobank, and other payment partners when you make deposits or request withdrawals via their networks.

---

5 How We Use Your Data

p2222 uses your personal data for the following purposes:

• Account management: Creating, maintaining, verifying, and securing your p2222 account; processing login and authentication events.
• Platform delivery: Providing access to casino games, sports betting markets, bingo, slots, and all other services available on the Platform.
• Age and identity verification: Confirming that you meet the 21-year minimum age requirement mandated by PAGCOR and applicable Philippine law.
• Payment processing: Processing your deposits via GCash, Maya, QR Ph, bank transfer, and other supported channels; processing withdrawal requests to your nominated account.
• Regulatory compliance: Meeting all obligations imposed by PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, including filing statutory reports and responding to lawful requests for information.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, collusion, bonus abuse, and other prohibited conduct described in p2222's Terms and Conditions.
• Responsible gaming: Monitoring gaming activity to identify patterns indicative of problem gambling; administering deposit limits, self-exclusion, and cool-off periods at your request; maintaining self-exclusion records.
• Customer support: Responding to your queries, complaints, and requests submitted via live chat, email, or other support channels.
• Platform improvement: Analysing aggregated, de-identified usage data to improve the design, performance, and content of the Platform.
• Marketing communications: Sending you promotional offers, bonus notifications, and newsletters where you have consented to receive such communications. You may withdraw this consent at any time.

---

6 Legal Bases for Processing

Under the Data Privacy Act of 2012, p2222 processes your personal data on the following legal bases:

• Contractual necessity: Processing necessary to perform the contract between you and p2222 — i.e., providing the Platform and its services to you as a registered player.
• Legal obligation: Processing necessary to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, AMLA requirements, and NPC directives.
• Legitimate interests: Processing necessary for p2222's legitimate interests in operating a secure, fair, and commercially viable gaming platform, where those interests are not overridden by your data protection rights. This includes fraud detection, security monitoring, and platform analytics.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for optional marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

---

7 Sharing Your Data

p2222 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and proportionate:

• PAGCOR and Philippine government authorities: As required by our operating license and applicable law, including mandatory reporting obligations to PAGCOR and the AMLC.
• Payment service providers: GCash, Maya, GrabPay, InstaPay, PesoNet, BPI, BDO, Metrobank, 7-Eleven CLiQQ, Visa, and Mastercard — for the purpose of processing your transactions. These providers are bound by their own privacy policies and applicable BSP regulations.
• KYC and identity verification providers: PAGCOR-accredited third-party providers engaged to verify your identity documents during the KYC process.
• IT infrastructure and security providers: Cloud hosting, data storage, cybersecurity, and fraud detection service providers engaged by p2222 under contractual data processing agreements that require them to handle your data in accordance with applicable Philippine privacy law.
• Game software providers: Third-party game content providers (such as JILI and other certified providers) whose games are hosted on the Platform may receive limited technical data necessary for game delivery and RNG certification. These providers do not receive your full identity data.
• Legal and professional advisers: Lawyers, auditors, and accountants engaged by p2222, subject to professional confidentiality obligations.
• Law enforcement and courts: Where p2222 is required to disclose your personal data by a valid court order, subpoena, or other lawful directive from a competent Philippine authority.

---

8 Cookies & Tracking Technologies

p2222 uses cookies and similar tracking technologies on the Platform to ensure its proper functioning, improve your experience, and support security and analytics operations. A cookie is a small text file placed on your device when you visit the Platform.

Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function correctly — including session management, login authentication, and security tokens. These cannot be disabled without impairing your ability to use the Platform.
• Functional cookies: Remember your preferences such as language settings and responsible gaming limit configurations to provide a more personalised experience.
• Analytics cookies: Collect anonymised data about how players navigate and use the Platform, helping p2222 identify areas for improvement. Analytics data is aggregated and does not identify individual players.
• Security and fraud prevention cookies: Help p2222 detect and prevent fraudulent activity, bot access, and account takeover attempts.

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform. p2222 does not use third-party advertising cookies or share cookie data with advertising networks.

---

9 Data Retention

p2222 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, and to comply with our legal, regulatory, and contractual obligations. The following retention guidelines apply:

• Active account data: Retained for the lifetime of your account and for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and AMLA obligations.
• KYC documents: Retained for a minimum of five (5) years from the date of submission or account closure, whichever is later, in accordance with AMLA requirements.
• Transaction records: Retained for a minimum of five (5) years as required by the Anti-Money Laundering Act of 2001 (RA 9160, as amended).
• Customer support records: Retained for two (2) years from the date of the last interaction, or longer if the communication relates to an ongoing dispute or regulatory investigation.
• Technical and usage logs: Retained for up to twelve (12) months for security and fraud detection purposes, after which they are anonymised or deleted.
• Marketing consent records: Retained until you withdraw consent, plus an additional period sufficient to demonstrate compliance with applicable regulations.

When personal data is no longer required and the applicable retention period has elapsed, p2222 will securely delete or anonymise such data in a manner that prevents reconstruction or identification.

---

10 Data Security

p2222 implements a comprehensive set of technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• Transport Layer Security (TLS 1.3) encryption for all data transmitted between your device and p2222's servers.
• Encryption at rest for all stored personal data and KYC documents.
• Role-based access controls ensuring that only authorised p2222 personnel with a legitimate need can access personal data.
• Multi-factor authentication requirements for p2222 staff accessing systems that contain personal data.
• Regular penetration testing and vulnerability assessments conducted by qualified cybersecurity professionals.
• Incident response procedures that include mandatory notification to the National Privacy Commission within 72 hours of discovering a personal data breach that poses a risk to the rights and freedoms of affected individuals.

While p2222 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own account credentials and for notifying p2222 immediately if you suspect any unauthorised access to your account.

---

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by p2222:

• Right to be informed: The right to be informed of the existence of processing of your personal data, including the identity of the data controller and the purposes of processing — which this Policy fulfils.
• Right of access: The right to request a copy of the personal data p2222 holds about you, together with information about how it is being processed.
• Right to correction: The right to request correction of any inaccurate, incomplete, outdated, false, or unlawfully obtained personal data p2222 holds about you.
• Right to erasure or blocking: The right to request the deletion or blocking of your personal data where it is no longer necessary for the purposes for which it was collected, where you withdraw consent, or where the processing is unlawful — subject to p2222's overriding legal and regulatory retention obligations.
• Right to object: The right to object to processing of your personal data where that processing is based on legitimate interests or where it is used for direct marketing purposes.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to have it transmitted to another data controller where technically feasible.
• Right to damages: The right to be indemnified for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data.
• Right to complain: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact p2222's Data Protection Officer using the contact details provided in Section 14. p2222 will respond to all valid data subject requests within thirty (30) calendar days of receipt, or within the timeframe specified by the NPC where different.

---

12 Children & Minors

The p2222 Platform is strictly intended for adults aged 21 years and above, in compliance with PAGCOR's minimum age requirements for online casino gaming in the Philippines. p2222 does not knowingly collect, store, or process personal data from individuals under the age of 21.

If p2222 discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the relevant account, delete or block the associated personal data, and report the matter to PAGCOR as required under our licensing conditions.

If you are the parent or guardian of a minor and believe they may have registered an account at p2222, please contact our Data Protection Officer immediately at the details provided in Section 14. p2222 takes the protection of minors extremely seriously and will act on all such reports without delay.

---

13 Updates to This Policy

p2222 reviews and updates this Privacy Policy periodically to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or PAGCOR regulatory requirements. When material changes are made to this Policy, p2222 will notify registered players by email to the address on file and by posting a prominent notice on the Platform, at least seven (7) days before the changes take effect.

The date of the most recent update is displayed at the top of this Policy. We encourage you to review this page periodically to stay informed about how p2222 protects your personal data. Your continued use of the Platform after the effective date of any updated Policy constitutes your acceptance of the changes.

---

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or p2222's personal data processing practices, please contact our designated Data Protection Officer:

• Role: Data Protection Officer, p2222
• Email: [email protected] — please mark your subject line as "Data Privacy Request"
• Response time: p2222 aims to acknowledge all data privacy requests within five (5) business days and to fully resolve them within thirty (30) calendar days.

If you are not satisfied with p2222's response to your data privacy request or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines. The NPC accepts complaints via its official website and offices in Pasay City, Metro Manila.