Privacy Policy — 24ph Online Casino

1 Introduction

24ph ("we," "us," "our," "the Platform") is committed to protecting the privacy and personal data of all users who access or register on the 24ph online casino platform at 24ph.net. This Privacy Policy ("Policy") describes our practices regarding the collection, use, storage, disclosure, and protection of your personal information.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC). By registering an account or using any service on 24ph, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Policy, 24ph acts as the Personal Information Controller (PIC) in respect of the personal data you provide when using the platform. As PIC, 24ph determines the purposes and means of processing your personal information.

Where 24ph engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data in accordance with this Policy and applicable Philippine law.

3 Personal Data We Collect

24ph collects the following categories of personal data:

We do not collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required by law or regulatory obligation, such as for enhanced KYC verification.

4 How We Collect Your Data

24ph collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the 24ph platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 10 for full details on our cookie practices.
• Third-party sources: Identity and fraud-check data received from KYC verification providers, payment processors, and, where permitted by law, publicly available sources or regulatory databases.

5 How We Use Your Personal Data

24ph uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your 24ph player account, including verifying your identity and age (21+ requirement).
• Payment processing: To process deposits and withdrawals via GCash, Maya, Philippine bank transfers, and debit cards, and to maintain accurate transaction records.
• Legal and regulatory compliance: To comply with anti-money laundering (AML) obligations, PAGCOR-aligned gaming regulations, the Data Privacy Act of 2012, and other applicable Philippine laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Responsible gaming: To monitor gaming behavior, enforce deposit limits and self-exclusion requests, and identify players who may need support.
• Customer support: To respond to your inquiries, resolve disputes, and improve our support services.
• Marketing and promotions: To send you relevant bonus offers, promotions, and platform updates, where you have provided consent. You may opt out at any time.
• Platform improvement: To analyze usage patterns, conduct research, and improve the features and performance of the 24ph platform.

6 Legal Basis for Processing

Under the Data Privacy Act of 2012, 24ph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, gaming regulations, and tax reporting requirements.
• Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Sharing Your Personal Data

24ph does not sell your personal data to third parties. We may share your data only in the following limited circumstances:

• Payment processors: GCash, Maya, and Philippine banking partners, solely to process your financial transactions.
• KYC and identity verification providers: Third-party providers engaged to verify your identity and age in compliance with regulatory requirements.
• Game software providers: Licensed game providers whose platforms are integrated into 24ph, to the extent necessary to deliver game services.
• Regulatory and law enforcement authorities: Philippine government agencies, the National Privacy Commission, PAGCOR, the Anti-Money Laundering Council (AMLC), or law enforcement bodies, where required by law or court order.
• Professional advisers: Lawyers, auditors, and consultants bound by confidentiality obligations, where necessary for legal or business purposes.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

All third parties with whom we share personal data are required to handle it in accordance with applicable data protection laws and our data processing agreements.

8 Data Retention

24ph retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AML and gaming regulatory requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• Support and communications data: Retained for up to three (3) years from the date of the last interaction, for dispute resolution and service improvement purposes.
• Technical and usage data: Retained for up to two (2) years, unless a longer period is required for security or fraud investigation purposes.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation.

When personal data is no longer required, 24ph will securely delete or anonymize it in accordance with our data disposal procedures.

9 Data Security

24ph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 24ph platform.
• Encryption of sensitive data at rest, including financial and identity information.
• Access controls limiting personal data access to authorized personnel on a need-to-know basis.
• Regular security assessments, vulnerability testing, and monitoring of our systems.
• Staff training on data protection obligations and security best practices.

While we take all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for maintaining the confidentiality of your account credentials.

10 Cookies & Tracking Technologies

The 24ph platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyze platform usage. The types of cookies we use include:

• Strictly necessary cookies: Essential for the platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and login state to provide a more personalized experience.
• Analytics cookies: Collect anonymized data about how players use the platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You may manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the 24ph platform. By continuing to use the platform after being informed of our cookie practices, you consent to our use of cookies as described above.

11 Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 24ph:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Policy.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another controller, where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the details in Section 15. We will respond to all verified requests within 15 business days, in accordance with NPC guidelines.

12 Minors

The 24ph platform is strictly intended for individuals aged 21 years and above, in accordance with Philippine gaming regulations. 24ph does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data, and, where applicable, return any deposited funds in accordance with our age verification procedures.

If you believe that a minor has registered on the 24ph platform, please contact our support team immediately so that we can take appropriate action.

13 Cross-Border Data Transfers

Some of the third-party service providers engaged by 24ph — including game software providers and certain technical infrastructure providers — may be located outside the Philippines. Where personal data is transferred to a country outside the Philippines, 24ph ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law.
• Transfers only to jurisdictions that the NPC has recognized as providing adequate data protection.
• Your explicit consent, where required by applicable law.

By using the 24ph platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

14 Changes to This Privacy Policy

24ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will update the effective date at the top of this page and, where practicable, notify registered players via email or in-platform notification.

Your continued use of the 24ph platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of how we protect your data.

15 Contact & Data Protection Officer

24ph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us:

• Data Protection Officer: 24ph Data Privacy Office
• Email: [email protected]
• Support: [email protected]
• Live Chat: Available 24/7 via the chat widget on the 24ph platform.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.