Your Privacy Matters to 12ph22. This Policy applies to all personal data processed by 12ph22 in connection with your use of our platform at https://12ph22.org. By registering an account or using 12ph22 in any way, you acknowledge that you have read and understood this Privacy Policy. We handle your data with care, in compliance with Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations.
1. Introduction
12ph22 ("the Platform", "we", "us", "our") is committed to protecting the privacy and personal data of all registered players and website visitors. As a PAGCOR-licensed online gaming operator serving players across the Philippines — from Metro Manila, Cebu, Davao, Quezon City, Makati, and all regions beyond — 12ph22 processes personal data as an ordinary and necessary part of providing its services.
This Privacy Policy ("Policy") describes what personal data 12ph22 collects, why we collect it, how we use and protect it, and what rights you have as a data subject under Philippine law. It applies to all services offered through the 12ph22 website and any associated interfaces, including the mobile-optimised platform.
2. Data Controller
For the purposes of the Data Privacy Act of 2012 and its Implementing Rules, the data controller responsible for your personal data is 12ph22, the operator of the platform at https://12ph22.org, operating under a PAGCOR license.
12ph22 has designated a Data Protection Officer (DPO) as required under Philippine data privacy regulations. The DPO is responsible for overseeing 12ph22's data protection practices and serving as the primary point of contact for data privacy inquiries and complaints. Contact details for the DPO are provided in Section 15 of this Policy.
3. Personal Data We Collect
12ph22 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:
3.1 Identity and Contact Data
- Full legal name (as it appears on your Philippine government-issued ID);
- Date of birth (used to verify the 21+ age requirement);
- Philippine mobile number;
- Email address (if provided);
- Residential address;
- Government-issued ID number and copies of ID documents (for KYC purposes).
3.2 Financial Data
- GCash account number or registered mobile number;
- PayMaya account details;
- Bank account details for BPI, BDO, Metrobank, and other linked Philippine bank accounts;
- Transaction history — deposit and withdrawal amounts, dates, and payment references;
- Records of wagering activity and game play history.
3.3 Technical and Usage Data
- IP address and approximate geographic location at the time of login and play;
- Device type, browser type, and operating system;
- Session duration, login timestamps, and platform navigation data;
- Game session logs, bet amounts, game outcomes, and session duration per game.
3.4 Communications Data
- Records of customer support interactions (live chat transcripts, email correspondence);
- Responses to surveys, promotions, or platform feedback forms;
- Any other voluntary communications you send to 12ph22.
| Data Category |
Examples |
Required for Account? |
| Identity & Contact |
Name, date of birth, mobile number, PH ID |
Yes — mandatory |
| Financial |
GCash number, bank account, transaction records |
Yes — for deposits/withdrawals |
| Technical & Usage |
IP address, device type, game logs |
Collected automatically |
| Communications |
Support chat history, feedback submissions |
When you contact us |
4. How We Collect Your Data
12ph22 collects personal data through the following means:
- Direct collection — data you provide when registering an account, completing KYC verification, making a deposit, requesting a withdrawal, or contacting customer support;
- Automated collection — technical and usage data collected automatically when you access and use the 12ph22 platform, through server logs, session tracking, and cookies;
- Third-party sources — identity verification data received from KYC service providers, fraud prevention databases, and payment processors in connection with account verification and transaction processing;
- Regulatory sources — data received from PAGCOR or other Philippine government authorities in connection with licensing compliance, responsible gaming reporting, or anti-money laundering obligations.
5. How We Use Your Personal Data
12ph22 uses your personal data for the following purposes:
- To create, verify, and maintain your 12ph22 player account;
- To verify your identity and age (21+ requirement) in compliance with PAGCOR regulations;
- To process deposits, withdrawals, and other financial transactions via GCash, PayMaya, and Philippine banking channels;
- To provide access to games, promotions, bonuses, and other platform features;
- To detect, prevent, and investigate fraud, money laundering, and other prohibited conduct as required under Philippine law (including RA 9160 and its amendments);
- To comply with PAGCOR reporting obligations, tax obligations, and other legal requirements;
- To provide customer support and respond to your inquiries;
- To send you transactional notifications (e.g., deposit confirmations, withdrawal processing updates, OTP codes);
- To enforce our Terms and Conditions and other applicable policies;
- To improve the 12ph22 platform through anonymised usage analytics;
- With your consent, to send you promotional communications about new games, bonuses, and platform features — you may withdraw this consent at any time.
6. Legal Basis for Processing
12ph22 processes your personal data on the following legal bases under the Data Privacy Act of 2012:
- Contractual necessity — processing required to fulfil our obligations under the Terms and Conditions you have agreed to, including account management, payment processing, and service delivery;
- Legal obligation — processing required to comply with PAGCOR licensing conditions, anti-money laundering regulations (RA 9160), tax regulations, and other applicable Philippine law;
- Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights;
- Consent — processing for marketing communications, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
7. Sharing Your Personal Data
12ph22 does not sell your personal data to third parties. We share your data only in the following circumstances and with the following categories of recipients:
- Payment service providers — GCash (GXI), PayMaya, BPI, BDO, Metrobank, and other Philippine financial institutions, for the purpose of processing deposits and withdrawals;
- KYC and identity verification providers — third-party identity verification services used to confirm your identity and satisfy PAGCOR KYC requirements;
- Game content providers — game software providers whose titles are available on 12ph22, where session data is technically shared to deliver gameplay;
- Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies, where required by law;
- Legal and professional advisers — lawyers, accountants, and auditors, subject to professional confidentiality obligations, where required for business or legal purposes;
- Law enforcement — Philippine National Police (PNP), National Bureau of Investigation (NBI), or other authorities, where required by valid legal process or court order.
All third-party data processors engaged by 12ph22 are contractually required to handle your data in compliance with the Data Privacy Act of 2012 and to use it only for the specific purpose for which it was shared.
8. Data Retention
12ph22 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:
- Account and identity data is retained for a minimum of five (5) years following account closure, as required by PAGCOR AML compliance obligations;
- Financial transaction records are retained for a minimum of five (5) years in accordance with BIR and AMLC requirements;
- Game session logs are retained for a minimum of two (2) years for dispute resolution and regulatory audit purposes;
- Customer support communications are retained for two (2) years from the date of the interaction;
- Marketing consent records are retained for the duration of your consent and for a reasonable period after withdrawal to demonstrate compliance.
After the applicable retention period, personal data is securely deleted or anonymised in accordance with 12ph22's data disposal procedures.
9. Data Security
12ph22 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and 12ph22 servers;
- Encryption at rest for sensitive personal and financial data stored in 12ph22 databases;
- Cryptographic hashing of passwords — 12ph22 staff cannot view your password in plain text;
- Multi-factor authentication for account access, including SMS OTP verification for login from new devices;
- Role-based access controls limiting employee access to personal data on a need-to-know basis;
- Regular security assessments and penetration testing of the 12ph22 platform;
- Automatic session timeout for inactive 12ph22 account sessions.
Notwithstanding these measures, no online platform can guarantee absolute security. In the event of a personal data breach that is likely to result in significant harm to affected individuals, 12ph22 will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03.
10. Cookies and Tracking Technologies
12ph22 uses cookies and similar tracking technologies on its platform for the following purposes:
- Strictly necessary cookies — required for the platform to function, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality;
- Functional cookies — remember your preferences, language settings, and previously visited game categories to improve your experience;
- Analytics cookies — anonymised data used to understand how players navigate the platform, which features are most used, and where improvements can be made. This data is not linked to individual player identities.
12ph22 does not use cookies to serve advertising to third-party platforms or to share your data with advertising networks. You may manage cookie preferences through your browser settings, though disabling certain cookies may affect your ability to use parts of the platform.
11. Your Rights as a Data Subject
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 12ph22:
- Right to be informed — you have the right to know what personal data 12ph22 holds about you and how it is used, as described in this Policy;
- Right of access — you may request a copy of the personal data 12ph22 holds about you;
- Right to rectification — you may request correction of inaccurate or incomplete personal data;
- Right to erasure — you may request deletion of your personal data where retention is no longer necessary, subject to 12ph22's legal retention obligations;
- Right to object — you may object to the processing of your personal data for direct marketing purposes at any time;
- Right to data portability — you may request a copy of your personal data in a commonly used, machine-readable format;
- Right to lodge a complaint — if you believe 12ph22 has handled your personal data in breach of the Data Privacy Act, you may file a complaint with the National Privacy Commission (NPC) of the Philippines.
To exercise any of the above rights, contact 12ph22's Data Protection Officer using the contact details in Section 15. 12ph22 will respond to verified requests within fifteen (15) business days in accordance with NPC guidelines.
12. Children's Privacy and Age Restriction
The 12ph22 platform is strictly restricted to persons who are at least 21 years of age in accordance with PAGCOR regulations and Philippine gambling law. 12ph22 does not knowingly collect personal data from persons under 21 years of age. If we become aware that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted in accordance with applicable law, and any deposited funds will be processed for return to the source payment method.
Parents or guardians who believe a minor may have created a 12ph22 account are encouraged to contact our support team immediately for expedited resolution.
13. Cross-Border Data Transfers
Certain third-party service providers used by 12ph22 — including game content providers and cloud infrastructure providers — may process your data on servers located outside the Philippines. Where such cross-border transfers occur, 12ph22 ensures that:
- The recipient country provides an adequate level of data protection as determined by the National Privacy Commission; or
- Appropriate contractual safeguards are in place, such as standard contractual clauses or binding corporate rules, to protect your personal data during transfer; and
- The transfer is limited to the minimum data necessary for the specific purpose.
14. Updates to This Privacy Policy
12ph22 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via in-platform notification or by email to your registered address at least fourteen (14) days before the changes take effect, where practicable.
The current version of this Policy, marked with the effective date, is always available at https://12ph22.org/privacy-policy. Continued use of the 12ph22 platform following the effective date of any update constitutes acceptance of the revised Policy.
15. Contact and Data Protection Officer
For all privacy-related inquiries, data subject rights requests, or complaints regarding 12ph22's handling of your personal data, you may contact us through the following channels:
- Live Chat: Available 24/7 via the support widget on the 12ph22 platform
- Email: [email protected] (plain text — not a clickable link)
Please mark your communication "Data Privacy Request" and include your registered 12ph22 username and a clear description of your request. 12ph22 is committed to responding within fifteen (15) business days of receipt of a verified request.
If you are dissatisfied with 12ph22's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for administering the Data Privacy Act of 2012.