Privacy Policy

1 Introduction

12ph22 ("we," "us," or "our") operates the online gaming platform accessible at 12ph22.club. We are committed to protecting the personal data of all registered players and visitors. This Privacy Policy has been prepared in accordance with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

This Policy applies to all personal information collected through the 12ph22 website, its associated game lobby, payment systems, promotional communications, customer support interactions, and any other services operated under the 12ph22 brand.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, the data controller responsible for the personal information processed through 12ph22 is the operator of the 12ph22 platform. Our designated Data Privacy Officer (DPO) is the primary point of contact for all data privacy matters, including requests to exercise your rights under applicable law.

3 Personal Data We Collect

12ph22 collects the following categories of personal data in connection with your account and use of the platform:

3.1 Registration and Identity Data

• Full legal name as it appears on government-issued identification;
• Date of birth (used to verify compliance with the 21+ age requirement);
• Registered Philippine mobile number;
• Email address (where provided);
• Residential address in the Philippines;
• Government-issued identification number and document images (collected during KYC/AML verification processes).

3.2 Financial and Transaction Data

• GCash account number or registered Maya mobile number linked to your 12ph22 account;
• Bank account details (BPI, BDO, Metrobank, etc.) where applicable to deposit or withdrawal transactions;
• Transaction history including deposit amounts, withdrawal requests, timestamps, and payment references;
• Wagering history, game results, and account balance records.

3.3 Technical and Usage Data

• IP address and approximate geographic location at login;
• Device type, operating system, browser type and version;
• Session duration, pages visited, game sessions initiated, and features accessed;
• Login timestamps and authentication records;
• Cookie identifiers and similar tracking technologies (see Section 9).

3.4 Communications Data

• Content of messages submitted through live chat support;
• Records of SMS communications and OTP delivery logs;
• Feedback, complaints, and dispute records submitted to 12ph22.

4 How We Collect Your Data

12ph22 collects personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, or participate in a promotional offer;
• Automatically — through cookies, log files, and analytics tools when you access and navigate the 12ph22 platform (see Section 9 for details);
• From payment processors — GCash, Maya, BPI, BDO, Metrobank, and other payment service providers may share transaction confirmation data with 12ph22 for the purpose of reconciling deposits and withdrawals;
• From identity verification services — where third-party KYC providers are engaged to verify your identity documents, they may share the results of that verification with 12ph22;
• From regulatory and law enforcement authorities — where required by law, we may receive information from the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities.

5 Purposes of Data Processing

12ph22 processes your personal data only for specific, declared, and legitimate purposes. These include:

1. Account management — creating, maintaining, and administering your 12ph22 player account;
2. Age and identity verification — confirming that you meet the 21+ age requirement and verifying your identity in compliance with PAGCOR and AML requirements;
3. Payment processing — facilitating GCash, Maya, bank, and other Philippine payment method transactions for deposits and withdrawals;
4. Anti-money laundering compliance — monitoring transaction patterns and reporting suspicious activities to the AMLC as required under Republic Act No. 9160 and its amendments;
5. Fraud prevention and security — detecting, investigating, and preventing fraudulent activity, cheating, and unauthorized account access;
6. Responsible gaming — monitoring wagering behaviour to identify potential gambling-related harm and administering self-exclusion and limit-setting tools;
7. Customer support — responding to queries, complaints, and account-related requests;
8. Regulatory compliance — meeting obligations under applicable Philippine gaming regulations and responding to lawful requests from regulatory authorities;
9. Platform improvement — analysing aggregated usage data to improve the 12ph22 platform experience, fix technical issues, and develop new features;
10. Marketing communications — sending promotional offers and updates to players who have consented to receive marketing communications from 12ph22. You may opt out of marketing communications at any time.

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 12ph22 processes personal data on one or more of the following lawful bases:

• Consent — where you have given explicit consent for processing, particularly for marketing communications and non-essential cookies;
• Contract performance — processing necessary to provide the services you have contracted for, including account operation, game access, and payment processing;
• Legal obligation — processing required to comply with applicable Philippine laws, including the Data Privacy Act, the Anti-Money Laundering Act, and PAGCOR regulatory requirements;
• Legitimate interests — processing for fraud prevention, platform security, responsible gaming monitoring, and platform analytics, where these interests are not overridden by your privacy rights;
• Protection of vital interests — in limited circumstances where processing is necessary to protect your wellbeing, such as in responsible gaming intervention scenarios.

7 Data Sharing and Disclosure

7.1 Service Providers

12ph22 shares personal data with trusted third-party service providers who assist in operating the platform. These include payment processors (GCash / GXI, Maya / Paymaya Philippines Inc., BPI, BDO, Metrobank), identity verification providers, game software providers (such as JILI Games, PG Soft, and Pragmatic Play), cloud infrastructure providers, and customer support platform vendors. All service providers are contractually bound to process data only as instructed by 12ph22 and to implement appropriate security measures.

7.2 Regulatory and Law Enforcement Disclosure

12ph22 will disclose personal data to Philippine regulatory bodies, law enforcement agencies, and courts where required to do so by law, court order, or regulatory direction. This includes mandatory reporting to the Anti-Money Laundering Council (AMLC) under Republic Act No. 9160 and reporting to PAGCOR where required under gaming regulations.

7.3 No Sale of Personal Data

12ph22 does not sell, rent, or otherwise commercially transfer your personal data to third parties for their own independent marketing or commercial purposes. Any data sharing is strictly limited to the purposes described in this Policy.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of the 12ph22 business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and of any material change to data processing practices that results from it.

8 Data Retention

12ph22 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention guidelines apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

9 Cookies and Tracking Technologies

9.1 What We Use

12ph22 uses cookies, web beacons, local storage, and similar technologies to operate and improve the platform. Cookies are small text files placed on your device that allow us to recognise you across sessions, maintain your login state, remember your preferences, and collect analytics data.

9.2 Types of Cookies

• Strictly necessary cookies — required for the platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without breaking platform functionality.
• Functional cookies — remember your preferences such as language settings, game lobby layout, and responsible gaming tool configurations.
• Analytics cookies — collect aggregated, anonymised data about how players use the 12ph22 platform. This helps us identify areas for improvement and understand general usage patterns.
• Marketing cookies — used to deliver relevant promotional content to you on the 12ph22 platform. These are only placed with your consent.

9.3 Cookie Management

You may manage non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the 12ph22 platform. Your browser's help documentation provides instructions on how to manage and delete cookies specific to your browser type.

10 Data Security

12ph22 implements technical and organisational security measures designed to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 12ph22 platform;
• One-way cryptographic hashing of account passwords — your actual password is never stored;
• Two-factor authentication (2FA) available for all player accounts, with OTP delivered via SMS to your registered Philippine mobile number;
• Firewalls, intrusion detection systems, and regular security monitoring of platform infrastructure;
• Role-based access controls limiting internal access to personal data to authorised personnel with a demonstrated need;
• Regular security audits and vulnerability assessments of the 12ph22 platform and its underlying infrastructure;
• Secure, encrypted data storage with regular backups.

11 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 12ph22:

• Right to be informed — the right to know what personal data 12ph22 holds about you, the purposes for which it is processed, and with whom it is shared;
• Right of access — the right to request a copy of your personal data held by 12ph22 in a commonly used electronic format;
• Right to rectification — the right to request correction of inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data where it is no longer necessary for the purposes collected, subject to 12ph22's legal retention obligations;
• Right to data portability — the right to receive your personal data in a structured, machine-readable format;
• Right to object — the right to object to processing based on legitimate interests, including direct marketing;
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact 12ph22's Data Privacy Officer at the contact details provided in Section 15. We will respond to verified requests within fifteen (15) business days.

12 Children's Privacy and Underage Protection

The 12ph22 platform is strictly intended for individuals who are 21 years of age or older. 12ph22 does not knowingly collect personal data from persons under 21 years of age. If we discover that personal data has been collected from an individual under the age of 21, we will immediately close the associated account, delete the personal data collected, and return any deposited funds where legally permissible.

If you are a parent or guardian and believe that your child (under 21) has registered a 12ph22 account, please contact us immediately at the contact details in Section 15.

13 Third-Party Links and Services

The 12ph22 platform may contain references to third-party services, including payment providers (GCash, Maya, BPI, etc.) and game software providers. This Privacy Policy applies solely to data processing conducted by 12ph22 and does not extend to the data practices of third-party providers accessed through the platform. Players are encouraged to review the privacy policies of any third-party service before engaging with it.

12ph22 is not responsible for the data practices, security measures, or privacy policies of third-party service providers, even where those providers are integrated into the 12ph22 platform experience.

14 Changes to This Privacy Policy

12ph22 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players by SMS to their registered mobile number and by publishing a notice on the 12ph22 platform for a minimum of seven (7) days prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the 12ph22 platform after any amendment takes effect constitutes your acceptance of the updated Policy.

15 Contact Our Data Privacy Officer

For all privacy-related inquiries, data subject rights requests, or complaints, please contact 12ph22's designated Data Privacy Officer:

If you are not satisfied with 12ph22's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the regulatory authority responsible for enforcing the Data Privacy Act of 2012.