Privacy Policy

1. Introduction and Scope

This Privacy Policy governs the manner in which 2ph58 (hereinafter "we," "us," "our," or "the Company") collects, uses, maintains, and discloses personal information obtained from users (hereinafter "you," "your," or "User") of the 2ph58 website, mobile applications, and related services (collectively, "the Platform").

2ph58 operates as a licensed online gaming platform under the regulatory authority of the Philippine Amusement and Gaming Corporation (PAGCOR). As such, we are subject to the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as well as PAGCOR's data protection requirements and anti-money laundering regulations enforced by the Anti-Money Laundering Council (AMLC).

This Privacy Policy applies to all personal information collected through the Platform, whether accessed via desktop computers, mobile devices, or any other means. By accessing or using the Platform, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy.

2. Data Controller Information

For the purposes of applicable data protection laws, 2ph58 acts as the data controller with respect to the personal information processed through the Platform. As data controller, we determine the purposes and means of processing your personal data.

2.1 Company Details

The entity responsible for data processing under this Privacy Policy is:

• Business Name: 2ph58
• Principal Office: Metro Manila, Philippines
• Licensing Authority: Philippine Amusement and Gaming Corporation (PAGCOR)
• Data Protection Contact: [email protected]
• Customer Support: [email protected]

2.2 Data Protection Officer

In compliance with the Data Privacy Act of 2012, 2ph58 has designated a Data Protection Officer (DPO) who is responsible for overseeing our data protection strategy and implementation. The DPO ensures compliance with applicable privacy laws and serves as the point of contact for data subjects exercising their privacy rights.

You may contact our Data Protection Officer regarding any privacy concerns, data subject requests, or inquiries about our data processing activities by emailing [email protected] or through the contact methods provided in Section 12 of this Privacy Policy.

3. Information We Collect

2ph58 collects various categories of personal information necessary to provide our gaming services, comply with legal and regulatory obligations, and ensure the security and integrity of the Platform. The types of information we collect include:

3.1 Information You Provide Directly

When you register an account, make transactions, or communicate with us, you provide the following information voluntarily:

• Identity Information: Full legal name, date of birth, nationality, gender, and government-issued identification numbers (passport, driver's license, national ID).
• Contact Information: Residential address, email address, mobile telephone number, and alternative contact details.
• Account Credentials: Username, password, security questions and answers, and two-factor authentication settings.
• Financial Information: Bank account details, e-wallet account information (GCash, PayMaya), credit/debit card numbers, transaction history, deposit and withdrawal records.
• Verification Documents: Copies of government-issued IDs, proof of address (utility bills, bank statements), proof of payment method ownership, and selfie photographs for identity verification purposes.
• Communication Content: Messages, emails, live chat transcripts, and any other communications you send to our customer support team.

3.2 Information Collected Automatically

When you access and use the Platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (IMEI, MAC address), and mobile network information.
• Usage Data: Pages visited, games played, bet history, session duration, click patterns, features used, and interaction with Platform elements.
• Location Data: IP address, approximate geographic location derived from IP address, GPS coordinates (with permission on mobile devices), and timezone information.
• Cookies and Similar Technologies: Session cookies, persistent cookies, pixel tags, web beacons, and local storage data (see Section 10 for detailed information).
• Transaction Logs: Date, time, and details of all deposits, withdrawals, bets placed, wins, losses, and bonus usage.

3.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Processors: Transaction verification, payment method validation, and fraud detection information from banks, GCash, PayMaya, and other payment service providers.
• Identity Verification Services: Enhanced due diligence information, watchlist screening results, and identity verification status from third-party KYC providers.
• Regulatory Authorities: Self-exclusion lists, sanctions lists, and other information provided by PAGCOR, AMLC, or law enforcement agencies.
• Game Providers: Gameplay data, game outcomes, and technical logs from third-party software providers whose games are featured on the Platform.

3.4 Sensitive Personal Information

Under Philippine law, certain categories of personal information are classified as "sensitive" and receive heightened protection. 2ph58 may process the following sensitive personal information where necessary:

• Government-issued identification numbers (contained in verification documents)
• Financial account information (bank accounts, e-wallet details)
• Biometric data (facial recognition from selfie verification, where applicable)

We only collect and process sensitive personal information where you have given explicit consent, where required by law or regulation, or where necessary to fulfill our contractual obligations to you.

4. How We Use Your Information

2ph58 uses the personal information we collect for the following purposes, all of which are necessary for the operation of a licensed online gaming platform:

4.1 Account Administration and Service Provision

• Creating, maintaining, and managing your player account
• Authenticating your identity when you log in
• Processing deposits, withdrawals, and other financial transactions
• Enabling gameplay and delivering gaming services
• Providing customer support and responding to your inquiries
• Managing bonus offers, promotions, and loyalty programs
• Sending transactional communications (account notifications, transaction confirmations)

4.2 Legal and Regulatory Compliance

• Verifying your identity and age to comply with PAGCOR age restrictions (21+)
• Conducting Know Your Customer (KYC) and Enhanced Due Diligence (EDD) procedures
• Screening against sanctions lists and politically exposed persons (PEP) databases
• Detecting, preventing, and investigating money laundering and terrorist financing
• Reporting suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Maintaining records required by PAGCOR regulations and Philippine gaming laws
• Cooperating with law enforcement requests and regulatory inquiries
• Enforcing our Terms and Conditions and other legal agreements

4.3 Fraud Prevention and Security

• Detecting and preventing fraudulent activity, collusion, and bonus abuse
• Monitoring for unusual betting patterns or account activity
• Protecting against unauthorized access and cybersecurity threats
• Verifying the authenticity of transactions and payment methods
• Investigating suspected Terms and Conditions violations
• Maintaining the integrity and fairness of gaming outcomes

4.4 Platform Improvement and Analytics

• Analyzing usage patterns to improve Platform functionality and user experience
• Conducting market research and customer preference analysis
• Testing new features, games, and services
• Optimizing Platform performance, speed, and reliability
• Developing new products and services tailored to user needs

4.5 Marketing and Communications (With Consent)

• Sending promotional emails about new games, bonuses, and special offers (opt-in required)
• Delivering personalized marketing content based on your gameplay preferences
• Conducting surveys and requesting feedback to improve our services
• Administering contests, tournaments, and promotional campaigns

You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in our emails or by adjusting your communication preferences in your account settings. Opting out of marketing communications will not affect transactional or service-related messages.

4.6 Responsible Gaming

• Identifying signs of problem gambling behavior
• Implementing self-exclusion and account limitation tools
• Providing access to responsible gaming resources and support
• Complying with PAGCOR responsible gaming requirements

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, 2ph58 must have a lawful basis for processing your personal information. We process your data on the following legal grounds:

5.1 Consent

You have provided explicit, freely-given consent for us to process your personal information for specific purposes. This includes consent given during account registration, consent to receive marketing communications, and consent to use cookies and tracking technologies.

You have the right to withdraw your consent at any time. However, withdrawal of consent does not affect the lawfulness of processing conducted prior to withdrawal and may impact our ability to provide certain services to you.

5.2 Contractual Necessity

Processing is necessary to fulfill our contractual obligations to you under the Terms and Conditions you agreed to when creating your account. This includes processing required to:

• Create and maintain your player account
• Process deposits and withdrawals
• Enable gameplay and deliver gaming services
• Provide customer support

5.3 Legal Obligation

Processing is necessary for compliance with legal obligations imposed on 2ph58 by Philippine law, PAGCOR regulations, and AMLC directives. This includes:

• Age verification and identity authentication requirements
• Anti-money laundering (AML) and counter-terrorism financing (CTF) obligations
• Record-keeping requirements mandated by gaming regulations
• Cooperation with law enforcement and regulatory authorities
• Tax reporting obligations

5.4 Legitimate Interests

Processing is necessary for the legitimate interests of 2ph58 or third parties, provided these interests are not overridden by your fundamental rights and freedoms. Legitimate interests include:

• Fraud detection and prevention
• Platform security and cybersecurity protection
• Internal business analytics and service improvement
• Enforcing Terms and Conditions and legal agreements
• Protecting against legal liability and defending legal claims

5.5 Vital Interests

In rare circumstances, processing may be necessary to protect vital interests, such as preventing imminent harm or responding to emergency situations affecting player safety.

6. Information Sharing and Disclosure

2ph58 does not sell, trade, or rent your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under limited circumstances:

6.1 Service Providers and Business Partners

We engage trusted third-party service providers to perform functions on our behalf. These service providers have access to personal information only as necessary to perform their services and are contractually obligated to maintain confidentiality and security. Categories of service providers include:

• Payment Processors: Banks, GCash, PayMaya, and other financial institutions that process deposits and withdrawals
• Identity Verification Services: KYC/AML verification providers that authenticate identity documents and screen against sanctions lists
• Game Providers: Third-party software developers whose games are featured on the Platform (limited technical data only)
• Cloud Hosting Providers: Infrastructure providers that host our servers and databases (with appropriate security measures)
• Customer Support Tools: Live chat, email, and ticketing system providers
• Analytics Services: Web analytics and business intelligence platforms (with anonymized or pseudonymized data where possible)

6.2 Regulatory and Law Enforcement Authorities

We may disclose your personal information to regulatory authorities, law enforcement agencies, and government bodies when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory directives
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Cooperate with PAGCOR investigations and regulatory audits
• Respond to law enforcement requests in criminal investigations
• Protect our legal rights, property, or safety, or those of our users or the public

6.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, personal information may be transferred to the acquiring entity or successor organization, subject to continued compliance with this Privacy Policy or a comparable privacy policy.

6.4 With Your Consent

We may share your personal information with third parties not described above when we have obtained your explicit consent to do so.

6.5 Aggregated and Anonymized Data

We may share aggregated statistical data or anonymized information that does not identify you personally with third parties for research, marketing, analytics, or other purposes. Such data cannot be used to re-identify you.

7. Data Security Measures

2ph58 takes the security of your personal information seriously and implements comprehensive technical, organizational, and administrative measures to protect against unauthorized access, alteration, disclosure, or destruction of your data.

7.1 Technical Security Controls

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols (minimum TLS 1.2). Sensitive data at rest, including passwords and financial information, is encrypted using AES-256 encryption.
• Secure Authentication: Password hashing using bcrypt or similar cryptographic algorithms, optional two-factor authentication (2FA), and session management controls to prevent unauthorized access.
• Network Security: Firewalls, intrusion detection and prevention systems (IDS/IPS), DDoS protection, and regular security monitoring to defend against cyber threats.
• Database Security: Access controls limiting database access to authorized personnel only, database activity monitoring, and regular security audits.
• Secure Development Practices: Code reviews, security testing, vulnerability assessments, and penetration testing to identify and remediate security weaknesses.

7.2 Organizational Security Measures

• Access Controls: Role-based access control (RBAC) ensuring employees and contractors only access personal information necessary for their job functions.
• Employee Training: Mandatory data protection and security awareness training for all staff handling personal information.
• Confidentiality Agreements: All employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure of personal information.
• Vendor Management: Due diligence assessments and contractual data protection obligations imposed on third-party service providers.
• Incident Response Plan: Documented procedures for detecting, responding to, and recovering from data security incidents.

7.3 Compliance and Auditing

2ph58 undergoes regular security audits and assessments by independent third parties to verify compliance with industry standards and regulatory requirements. We maintain certifications and comply with PAGCOR information security standards.

7.4 Your Security Responsibilities

While we implement robust security measures, the security of your account also depends on your actions. You are responsible for:

• Maintaining the confidentiality of your account credentials (username and password)
• Using a strong, unique password that is not used for other accounts
• Enabling two-factor authentication if available
• Not sharing your account with others
• Logging out after each session, especially on shared or public devices
• Promptly notifying us of any suspected unauthorized access to your account

7.5 Data Breach Notification

In the event of a data security incident that compromises the security, confidentiality, or integrity of your personal information, 2ph58 will notify affected users within seventy-two (72) hours of becoming aware of the breach, in accordance with the Data Privacy Act of 2012. We will also notify the National Privacy Commission (NPC) as required by law.

8. Data Retention

2ph58 retains your personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements.

8.1 Retention Periods

The specific retention period for each category of personal information varies based on the purpose for which it was collected and applicable legal requirements:

• Account Information: Retained for the duration of your account's active status, plus seven (7) years after account closure to comply with PAGCOR record-keeping requirements and potential legal claims.
• Transaction Records: Retained for a minimum of ten (10) years after the transaction date, as required by Anti-Money Laundering regulations and PAGCOR directives.
• Identity Verification Documents: Retained for seven (7) years after account closure or relationship termination, in accordance with KYC/AML regulations.
• Communication Records: Retained for three (3) years to facilitate dispute resolution and customer support quality assurance.
• Marketing Consent Records: Retained until consent is withdrawn, plus three (3) years to demonstrate compliance with consent requirements.
• Technical Logs: Retained for one (1) year for security monitoring and troubleshooting purposes.

8.2 Account Closure and Data Deletion

Upon voluntary account closure or after a period of twelve (12) months of inactivity (dormant account), you may request deletion of your personal information, subject to the retention requirements outlined above. Certain information must be retained to comply with legal obligations even after account closure.

To request account closure and data deletion, contact our Data Protection Officer at [email protected]. We will process your request within thirty (30) days, subject to verification of your identity and completion of any outstanding obligations (pending withdrawals, disputes, or investigations).

8.3 Anonymization

Where possible, 2ph58 may anonymize or pseudonymize personal information after the primary retention period expires, allowing us to retain data for statistical and analytical purposes without identifying individuals.

9. Your Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal information:

9.1 Right to Be Informed

You have the right to be informed about the collection and processing of your personal information, including the purposes, legal basis, recipients, and retention periods. This Privacy Policy serves as our primary means of fulfilling this obligation.

9.2 Right to Access

You have the right to request access to the personal information we hold about you. You may request a copy of your data by logging into your account and accessing your profile, or by submitting a formal data subject access request to [email protected]. We will respond within fifteen (15) days of verifying your identity.

9.3 Right to Rectification

You have the right to request correction of inaccurate, incomplete, or outdated personal information. You may update most account information directly through your account settings. For changes to identity information or other data that cannot be self-updated, contact customer support or email [email protected].

9.4 Right to Erasure ("Right to Be Forgotten")

You have the right to request deletion of your personal information under certain circumstances, including when the data is no longer necessary for the purposes for which it was collected or when you withdraw consent. However, this right is subject to legal exceptions, including retention requirements imposed by gaming regulations, AML laws, and legitimate legal claims.

9.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that data to another service provider. To exercise this right, submit a data portability request to [email protected] specifying the data you wish to receive.

9.6 Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes. You may opt out of marketing communications at any time by clicking the "Unsubscribe" link in emails or adjusting your communication preferences in your account settings.

9.7 Right to Restrict Processing

You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of your data or object to processing. During the restriction period, we will store your data but not actively process it except with your consent or for specific legal purposes.

9.8 Right to Lodge a Complaint

If you believe your privacy rights have been violated or have concerns about our data processing practices, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center (PICC)
• Vicente Sotto Street, Pasay City, Metro Manila 1307
• Email: [email protected]
• Website: www.privacy.gov.ph

9.9 Exercising Your Rights

To exercise any of the above rights, contact our Data Protection Officer at [email protected] or through the methods provided in Section 12. We will respond to your request within fifteen (15) days after verifying your identity. Complex requests may require additional time, and we will notify you if an extension is necessary.

There is no fee for exercising your privacy rights unless your request is clearly unfounded, excessive, or repetitive, in which case we may charge a reasonable administrative fee or refuse to comply with the request.

10. Cookies and Tracking Technologies

2ph58 uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver personalized content.

10.1 What Are Cookies?

Cookies are small text files stored on your device by your web browser when you visit a website. Cookies enable the website to remember your preferences, maintain your login session, and track your interactions with the site.

10.2 Types of Cookies We Use

We use the following categories of cookies:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, authentication, and security features. These cookies cannot be disabled without severely impacting functionality.
• Performance and Analytics Cookies: Collect information about how users interact with the Platform, such as pages visited, session duration, and error messages. This data helps us improve Platform performance and user experience.
• Functionality Cookies: Remember your preferences and settings (language, timezone, display preferences) to provide a more personalized experience.
• Marketing and Advertising Cookies: Track your browsing behavior to deliver targeted advertisements and measure the effectiveness of marketing campaigns. These cookies are only used with your consent.

10.3 Third-Party Cookies

Some cookies are placed by third-party service providers, including analytics providers, payment processors, and advertising networks. These third parties have their own privacy policies governing their use of cookies and tracking technologies.

10.4 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to block or delete cookies, or to receive a warning before a cookie is stored. Please note that disabling cookies may impact your ability to use certain features of the Platform.

Browser-specific cookie management instructions:

• Google Chrome: Settings → Privacy and Security → Cookies and other site data
• Mozilla Firefox: Settings → Privacy & Security → Cookies and Site Data
• Safari: Preferences → Privacy → Manage Website Data
• Microsoft Edge: Settings → Cookies and site permissions

10.5 Do Not Track Signals

Some browsers support "Do Not Track" (DNT) signals that request websites not to track user activity. Currently, there is no universally accepted standard for how websites should respond to DNT signals. 2ph58 does not currently respond to DNT signals, but we provide you with control over cookies as described above.

11. International Data Transfers

2ph58 primarily operates within the Philippines and stores data on servers located in the Philippines or in data centers within Southeast Asia. However, some of our service providers may be located outside the Philippines, which may result in international data transfers.

11.1 Transfers to Third Countries

When we transfer your personal information to countries outside the Philippines, we ensure that adequate safeguards are in place to protect your data in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03 on Cross-Border Processing. These safeguards include:

• Transferring data only to countries with adequate data protection laws as recognized by the NPC
• Implementing Standard Contractual Clauses (SCCs) or other approved transfer mechanisms
• Ensuring service providers are certified under recognized data protection frameworks
• Obtaining your explicit consent for data transfers where required

11.2 Data Storage Locations

Our primary data storage infrastructure is located in secure data centers within the Philippines and Southeast Asia. Cloud service providers used by 2ph58 maintain certifications for ISO 27001, SOC 2, and other international security standards.

11.3 Your Rights Regarding International Transfers

You have the right to inquire about international data transfers and to request information about the safeguards in place to protect your data. Contact our Data Protection Officer at [email protected] for more information about international data transfers.

12. Changes to This Privacy Policy

2ph58 reserves the right to update, modify, or replace this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. Material changes to this Privacy Policy will be communicated to users through one or more of the following methods:

• Email notification to the address on file in your account
• Prominent notice displayed on the Platform homepage
• In-account notification upon your next login
• Push notification via mobile application (if applicable)

The "Last Updated" date at the top of this Privacy Policy indicates when the document was most recently revised. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

Your continued use of the Platform following the posting of changes to this Privacy Policy constitutes your acceptance of such changes. If you do not agree to the modified Privacy Policy, you must discontinue use of the Platform and may request account closure and data deletion in accordance with Section 8.2.

Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us:

• Data Protection Officer: [email protected]
• Customer Support: [email protected] (available 24/7)
• Live Chat: Available within your 2ph58 account dashboard
• Mailing Address: Metro Manila, Philippines (full address available upon request)

We are committed to addressing your privacy concerns promptly and transparently. All privacy-related inquiries will receive a response within fifteen (15) business days.