25ph11 Privacy Policy

Who We Are

25ph11 is an online gaming platform operated for the Philippine market, accessible at 25ph11.net. In the context of this Privacy Policy, references to "25ph11", "we", "us", or "our" refer to the entity responsible for the operation of the platform and for the processing of personal data collected through it.

25ph11 acts as the personal information controller for the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations issued by the National Privacy Commission (NPC). This means we determine the purposes and means of processing your personal data.

For all data protection queries, rights requests, and complaints, you may contact our designated Data Protection Officer at the email address set out in Section 13 of this policy.

Personal Data We Collect

25ph11 collects personal data across several categories depending on the services you access and the stage of your relationship with us. The categories of data we may collect include:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Nationality and country of residence;
• Username and account credentials (password stored in hashed form only);
• Contact email address and mobile number.

2.2 KYC Verification Data

• Scanned copy or photograph of a valid Philippine government-issued ID (e.g., PhilSys National ID, UMID, passport, driver's licence);
• Proof of address documents where required;
• Selfie or live photograph for biometric identity matching where applicable;
• Source-of-funds documentation for large or high-frequency transactions.

2.3 Financial and Transaction Data

• GCash mobile number or Maya account reference;
• Bank account details for BPI, BDO, or Metrobank withdrawals where applicable;
• Deposit and withdrawal history including amounts, timestamps, and payment method used;
• Bonus and promotional credit history.

2.4 Gaming Activity Data

• Game sessions played including game type, stake amounts, and outcomes;
• Sports betting selections and live betting activity;
• Bonus wagering progress and responsible gaming tool settings;
• Self-exclusion requests and their duration.

2.5 Technical and Device Data

• IP address at time of login and during active sessions;
• Device type, operating system, and browser version;
• Geolocation data (country/region level) derived from IP address;
• Session duration and page interaction data collected via cookies and analytics tools.

2.6 Communications Data

• Content of live chat conversations with 25ph11 support agents;
• Email correspondence submitted to [email protected];
• Feedback and survey responses submitted voluntarily.

How We Collect Your Data

25ph11 collects personal data through the following channels:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, or contacting support;
• Automated collection: Technical data collected automatically when you access and interact with the 25ph11 platform, including IP address, device data, and session activity via cookies and server logs;
• Payment processors: Transaction confirmation and status data shared by GCash, Maya, BPI, BDO, and other approved payment partners to reconcile your account balance;
• Identity verification services: Where 25ph11 uses a third-party KYC verification provider, that provider may share identity matching results and risk scores with us;
• Fraud prevention partners: Risk signals and device fingerprinting data from fraud detection services used to protect the platform and its players.

Purpose & Legal Basis for Processing

25ph11 processes your personal data for the purposes and on the legal bases set out in the table below. All processing is conducted in accordance with the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations.

Sharing Your Personal Data

25ph11 does not sell your personal data. We may share your information with the following categories of recipients strictly to the extent necessary for the purposes described in Section 4:

5.1 Payment Service Providers

We share transaction-related data with GCash, Maya, QR Ph, GrabPay, BPI, BDO, and 7-Eleven CLiQQ as required to process deposits and withdrawals. These providers act as independent data processors and are bound by their own privacy obligations.

5.2 KYC and Identity Verification Partners

Where 25ph11 uses a third-party identity verification service to conduct KYC checks, we share your identity documents and personal details with that provider for the sole purpose of verifying your identity and age. These providers are contractually prohibited from using your data for any other purpose.

5.3 Fraud Prevention and Risk Management Services

We may share technical identifiers (IP address, device fingerprint) and transaction risk signals with fraud prevention providers to protect the integrity of the platform and safeguard players from unauthorised account access.

5.4 Regulatory and Law Enforcement Authorities

25ph11 may disclose personal data to Philippine regulatory bodies, the National Privacy Commission, law enforcement agencies, or courts where required to do so by law, court order, or regulatory directive. We will notify you of such disclosures where we are legally permitted to do so.

5.5 Group Companies and Service Providers

We may share data with trusted technology service providers (such as hosting providers, customer support platforms, and analytics tools) that process data on our behalf under strict data processing agreements that prohibit independent use of your data.

Cookies & Tracking Technologies

The 25ph11 platform uses cookies and similar tracking technologies to provide core functionality, improve the user experience, and support security and analytics operations. The categories of cookies we use are:

• Strictly Necessary Cookies: Required for the platform to function correctly. These include session authentication cookies, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without impairing core functionality.
• Functional Cookies: Used to remember your preferences such as language settings, responsible gaming tool configurations, and game display options across sessions.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the platform, including pages visited, session duration, and feature usage. This data is used solely to improve the platform.
• Security Cookies: Used for fraud detection, bot prevention, and monitoring for suspicious login behaviour.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may result in degraded platform functionality or an inability to log in to your account. 25ph11 does not use cookies to serve third-party advertising.

Data Retention

25ph11 retains personal data for the periods set out below, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years after account closure, in compliance with Philippine anti-money laundering record-keeping requirements;
• KYC verification documents: Retained for a minimum of five (5) years from the date of verification or from the date of account closure, whichever is later;
• Transaction records: Retained for a minimum of five (5) years in accordance with financial record-keeping obligations;
• Gaming activity data: Retained for three (3) years from the date of activity to support responsible gaming monitoring, dispute resolution, and regulatory audits;
• Support communications: Retained for two (2) years from the date of the last communication in each support case;
• Technical and device data: Retained for twelve (12) months in rolling logs for security and fraud monitoring purposes.

Where data is retained beyond your account closure for legal compliance reasons, it will be held in restricted-access archives with access limited to compliance and legal personnel only.

Data Security

25ph11 implements a layered security framework to protect your personal data against unauthorised access, disclosure, alteration, and destruction. Our security measures include:

• Encryption in transit: All data exchanged between your device and the 25ph11 platform is encrypted using TLS 1.2 or higher;
• Encryption at rest: Stored personal data, including KYC documents and financial records, is encrypted using AES-256 standard encryption;
• Access controls: Access to personal data is restricted to authorised 25ph11 personnel on a strict need-to-know basis, enforced through role-based access control and multi-factor authentication;
• Password security: User passwords are never stored in plain text; all credentials are hashed using industry-standard one-way hashing algorithms;
• Regular security audits: The platform undergoes periodic penetration testing and vulnerability assessments conducted by qualified third-party security professionals;
• Incident response: 25ph11 maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within the timeframes required by Philippine law.

While we apply rigorous security measures, no online platform can guarantee absolute security. You are responsible for maintaining the security of your own account credentials. If you suspect your account has been compromised, contact support at [email protected] immediately.

Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you hold the following rights in relation to your personal data held by 25ph11:

• Right to be Informed: You have the right to know what personal data 25ph11 holds about you, how it is used, and with whom it is shared. This Privacy Policy fulfils that obligation.
• Right of Access: You may request a copy of the personal data 25ph11 holds about you. We will provide this within thirty (30) calendar days of receiving a valid request.
• Right to Rectification: If any personal data held by 25ph11 is inaccurate, incomplete, or outdated, you have the right to request its correction. Many details can be updated directly in your account settings.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 25ph11's legal retention obligations. Note that data subject to regulatory retention requirements cannot be deleted on request.
• Right to Data Portability: You may request that personal data you have provided to 25ph11 be transmitted to you in a structured, commonly used, machine-readable format.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest, subject to 25ph11 demonstrating compelling legitimate grounds.
• Right to Damages: You have the right to claim compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, or unlawfully obtained personal data used by 25ph11.
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe 25ph11 has processed your data in a manner that violates the Data Privacy Act.

Children & Minors

The 25ph11 platform is strictly restricted to individuals who are 21 years of age or older. We do not knowingly collect personal data from individuals under the age of 21. Age is verified at registration through date-of-birth submission and, where required, through KYC document review.

If 25ph11 becomes aware that personal data has been collected from an individual under the age of 21, that account will be closed immediately, all associated data will be deleted as soon as legally permissible, and any balance will be dealt with in accordance with our Terms & Conditions.

If you are a parent or guardian and have reason to believe that a minor in your care has registered on the 25ph11 platform, please contact us immediately at [email protected] so we can take prompt action.

Cross-Border Data Transfers

Some of the third-party service providers used by 25ph11 — including game studios, KYC verification platforms, and cloud infrastructure providers — may process personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, 25ph11 ensures that appropriate safeguards are in place in accordance with the requirements of the Philippine Data Privacy Act and NPC guidelines, including:

• Contractual clauses that bind the recipient to data protection standards equivalent to those applicable in the Philippines;
• Verification that the recipient country or organisation provides an adequate level of data protection as recognised by the NPC;
• Where required, notification to the NPC of cross-border data transfers involving sensitive personal information.

By using the 25ph11 platform, you acknowledge and consent to the transfer of your personal data to service providers outside the Philippines where necessary to deliver the services you have requested, subject to the safeguards described above.

Updates to This Privacy Policy

25ph11 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory guidance from the National Privacy Commission. The effective date at the top of this page will be updated whenever a revision is made.

For material changes that significantly affect your rights or the way your data is processed, 25ph11 will notify registered players by email to the address on file no less than fourteen (14) days before the changes take effect. For minor or clarificatory changes, notification will be provided via a platform notice on your next login.

Your continued use of the 25ph11 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not accept the revised policy, you must stop using the platform and may request account closure by contacting our support team.

Contact & Complaints

For all data protection matters — including rights requests, questions about this Privacy Policy, or concerns about how 25ph11 has handled your personal data — please contact our Data Protection Officer through the following channels:

• Email: [email protected] — please include "Privacy / DPO" in the subject line
• Live Chat: Available 24 hours a day, 7 days a week inside your 25ph11 account dashboard

We aim to respond to all data-related queries within ten (10) business days and to resolve formal complaints within thirty (30) calendar days. Where a complaint cannot be resolved to your satisfaction, you have the right to escalate the matter to the National Privacy Commission of the Philippines through the NPC's official channels.

Our support team is available around the clock to assist 25ph11 players across Manila, Quezon City, Makati, Cebu, Davao, and all regions of the Philippines.