Privacy Policy – 25ph9 Casino

1. Data Controller Identity

25ph9 Casino, operating the online gaming platform accessible at https://25ph9.club ("25ph9," "we," "us," "our"), is the Personal Information Controller (PIC) of the personal data collected and processed in connection with your use of the 25ph9 platform. As a PAGCOR-regulated online gaming operator serving Filipino players across the Philippines, 25ph9 processes personal data strictly within the bounds of applicable Philippine data protection law, principally Republic Act No. 10173 (the Data Privacy Act of 2012, "DPA") and its Implementing Rules and Regulations.

2. Personal Data We Collect

2.1 Registration and Account Data

When you create a 25ph9 account, we collect: your legal full name, date of birth, Philippine mobile number, email address, and account credentials (encrypted password). Age and identity verification may additionally require a government-issued identification document (e.g., Philippine passport, SSS UMID, PhilHealth ID, driver's license) and a selfie for biometric matching.

2.2 Financial and Transaction Data

To process deposits, withdrawals, and comply with Anti-Money Laundering (AML) obligations under Republic Act No. 9160, we collect: GCash wallet numbers, Maya account details, bank account numbers (BPI, BDO, UnionBank, Metrobank), transaction amounts, timestamps, and reference numbers. Cryptocurrency wallet addresses are collected for USDT TRC20 transactions.

2.3 Gaming Activity Data

We collect records of your gaming sessions, including games played, bet amounts, winnings and losses, session durations, and responsible gaming limit settings. This data is used for regulatory reporting to PAGCOR and for player protection purposes.

2.4 Technical and Device Data

When you access 25ph9, we automatically collect: your IP address, browser type and version, operating system, device identifiers, and pages visited. This data is used for security monitoring, fraud prevention, and platform optimisation.

2.5 Communications Data

Records of your communications with 25ph9 customer support — including live chat transcripts, email correspondence, and support ticket records — are retained for service quality and dispute resolution purposes.

3. Purposes and Legal Bases for Processing

25ph9 processes your personal data for the following purposes, each supported by a lawful basis under the Philippine Data Privacy Act:

• Account registration and management — necessary for the performance of the contract between you and 25ph9;
• Age and identity verification — legal obligation under PAGCOR regulations mandating a minimum age of 21+ for all registered players;
• Payment processing and fraud prevention — necessary for contract performance and compliance with AML obligations under Republic Act No. 9160;
• Gaming activity monitoring and responsible gaming enforcement — legal obligation under PAGCOR's Responsible Gaming Framework;
• Customer support — legitimate interest in providing responsive player services;
• Marketing communications (where you have opted in) — your consent, which you may withdraw at any time;
• Regulatory reporting to PAGCOR and other competent Philippine authorities — legal obligation;
• Security and fraud detection — legitimate interest in protecting the integrity of the 25ph9 platform and its players.

4. Disclosure and Sharing of Personal Data

25ph9 does not sell, rent, or trade your personal data to any third party for commercial purposes. Your personal data may be disclosed to the following categories of recipients solely to the extent necessary for the purposes described in Section 3:

• PAGCOR and other Philippine regulatory authorities — pursuant to mandatory regulatory reporting and audit obligations;
• Anti-Money Laundering Council (AMLC) — where required by Republic Act No. 9160 and its amendments;
• Payment service providers (GCash / Maya / BPI / BDO / UnionBank / Metrobank) — strictly for processing deposits and withdrawals in your name;
• Identity verification and KYC service providers — to comply with PAGCOR's Know Your Customer requirements;
• Game software providers — limited technical data necessary to deliver game content and verify fair play;
• Fraud detection and cybersecurity service providers — for platform security and account protection purposes;
• Law enforcement and Philippine courts — where required by a valid legal order, warrant, or applicable Philippine law.

All third-party service providers engaged by 25ph9 are contractually bound to process personal data only on 25ph9's instructions and in compliance with the Philippine Data Privacy Act.

5. Data Retention Periods

25ph9 retains personal data for as long as your account remains active and for a minimum period thereafter as required by applicable Philippine law and PAGCOR regulations. Specific retention periods are as follows:

• Account and identity verification records: Retained for a minimum of five (5) years following account closure, in accordance with AML retention requirements under Republic Act No. 9160;
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity logs: Retained for three (3) years from the date of the session;
• Customer support communications: Retained for two (2) years from the date of the last communication;
• Marketing consent records: Retained until withdrawal of consent plus one (1) year for compliance documentation purposes.

At the conclusion of applicable retention periods, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

6. Security Measures

25ph9 implements technical and organisational measures appropriate to the risk level of processing your personal data. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and the 25ph9 platform;
• Bcrypt hashing of account passwords — plaintext passwords are never stored;
• Two-factor authentication (2FA) available on all accounts via SMS OTP or authenticator app;
• Role-based access controls limiting employee access to personal data on a strictly need-to-know basis;
• Regular penetration testing and security audits conducted by independent third-party cybersecurity firms;
• Incident response procedures compliant with the National Privacy Commission's mandatory breach notification requirements (72-hour notification timeline for high-risk breaches).

7. Cookies and Tracking Technologies

25ph9 uses cookies and similar tracking technologies to ensure the platform functions correctly, to remember your preferences, and to monitor platform performance. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function, including session management and security tokens. These cannot be disabled without rendering the platform inoperable.
• Functional Cookies: Remember your language preferences, responsible gaming limit settings, and other personalisation choices.
• Analytics Cookies: Collect aggregated, anonymised data about how players use the 25ph9 platform to support performance improvements.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access core 25ph9 gaming services. 25ph9 does not use cookies to serve third-party advertising.

8. Data of Minors

The 25ph9 platform is strictly intended for adults aged 21+ in accordance with PAGCOR regulations. 25ph9 does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a minor, the relevant account will be immediately terminated and the data securely deleted in accordance with our retention policy, except where legal obligations require otherwise. If you believe a minor has registered on the 25ph9 platform, please notify us immediately at [email protected].

9. Exercising Your Rights

To exercise any of your data rights under the Philippine Data Privacy Act — including rights to access, correction, erasure, portability, or to object to processing — submit a written request to 25ph9's Data Protection Officer at [email protected], using the subject line "Data Privacy Rights Request." Please include your registered 25ph9 mobile number or email address and a brief description of the right you wish to exercise.

25ph9 will respond to all verified rights requests within fifteen (15) working days. In cases of complex requests requiring additional investigation, we will notify you of the extended timeline within the initial 15-day period. We may require additional identity verification before processing rights requests to protect against unauthorised access to your personal data.

10. Cross-Border Data Transfers

Some of 25ph9's third-party service providers — including game software providers and cloud infrastructure partners — may process personal data on servers located outside the Philippines. Where such cross-border data transfers occur, 25ph9 ensures that adequate safeguards are in place, including contractual obligations requiring the recipient to apply data protection standards substantially equivalent to those required by the Philippine Data Privacy Act. Cross-border transfers of your personal data are made only where necessary and are not undertaken for commercial data-sharing purposes.

11. Changes to This Privacy Policy

25ph9 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or PAGCOR regulatory requirements. Where changes are material, 25ph9 will notify registered players via email or a prominent notice on the platform at least fourteen (14) days prior to the changes taking effect. The current version of this Privacy Policy is always available at https://25ph9.club/privacy-policy. Your continued use of the 25ph9 platform following the effective date of any revision constitutes your acknowledgement of the updated Policy.

12. Contact and Data Protection Officer

25ph9 has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. For all data privacy matters, including rights requests, complaints, or general enquiries about how 25ph9 handles your personal data, please contact our DPO at:

If you are not satisfied with our response to a data privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines at privacy.gov.ph.