phone2 Privacy Policy

1. Introduction

phone2 ("phone2," "we," "us," or "our") operates the online casino and sports betting platform accessible at phone2.app. This Privacy Policy describes how phone2 collects, uses, discloses, stores, and protects personal information provided by users ("you," "Player," or "User") of the phone2 platform, including the website, mobile applications, and all associated services (collectively, the "Platform").

This Privacy Policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. It is also consistent with applicable PAGCOR guidelines on player data protection.

By registering for a phone2 account or using any part of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, please do not use the phone2 Platform.

---

2. Personal Data We Collect

phone2 collects personal data in the following categories, depending on how you interact with the Platform:

2.1 Registration and Identity Data

• Full legal name as it appears on your government-issued Philippine ID
• Date of birth (used to verify the 21+ age requirement)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address (province, city/municipality)

2.2 Identity Verification (KYC) Data

• Copies of government-issued Philippine identification documents (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID, Voter's ID)
• Proof of address documents (e.g., utility bill, bank statement)
• Selfie or facial image for liveness verification, where required

2.3 Financial and Transaction Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., GCash mobile number, PayMaya account reference, bank account name — but never full card numbers or PINs)
• Transaction amounts, timestamps, and reference numbers
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Game session logs, bet history, and win/loss records
• Game preferences and favorite categories
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

2.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Session duration and navigation patterns within the Platform
• Cookie identifiers and similar tracking data (see Section 6)

2.6 Communications Data

• Records of your communications with phone2 customer support
• Feedback, survey responses, and promotional opt-in preferences

---

3. How We Use Your Personal Data

phone2 uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Registration data, contact details
Age and identity verification (21+ compliance)	Date of birth, KYC documents
Processing deposits and withdrawals	Financial and transaction data
Fraud prevention and anti-money laundering (AML)	KYC data, transaction data, device data
Providing customer support	Communications data, account data
Personalizing your gaming experience	Gaming activity data, preferences
Sending promotional offers (with consent)	Contact details, opt-in preferences
Responsible gaming monitoring	Gaming activity, financial data
Platform security and technical maintenance	Technical and device data
Regulatory compliance and reporting	All categories as required by law

---

4. Legal Basis for Processing

phone2 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and phone2 (i.e., to provide the gaming services you have registered for).
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, Anti-Money Laundering Act (AMLA) requirements, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for phone2's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, phone2 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

---

5. Data Sharing and Disclosure

phone2 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, solely to facilitate deposits and withdrawals.
• KYC and Identity Verification Partners: Third-party identity verification services used to confirm your identity and age in compliance with PAGCOR and AMLA requirements.
• Game Software Providers: Licensed game developers and content providers whose games are available on the phone2 Platform, to the extent necessary to deliver game services.
• IT and Cloud Service Providers: Hosting, database, and infrastructure providers who process data on our behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government agencies, where disclosure is required by law or court order.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers who process personal data on behalf of phone2 are required to implement appropriate technical and organizational security measures and to process data only in accordance with phone2's instructions.

---

6. Cookies and Tracking Technologies

phone2 uses cookies, web beacons, pixel tags, and similar tracking technologies on the Platform. These technologies help us deliver a functional, personalized, and secure gaming experience.

Types of cookies used by phone2:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. They cannot be disabled without affecting core functionality.
• Performance and Analytics Cookies: Used to collect aggregated, anonymized data about how Players use the Platform, helping us identify and fix technical issues and improve navigation.
• Functional Cookies: Used to remember your preferences, such as language settings and game display options, to provide a more personalized experience.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content about phone2 games and offers. These cookies track your interactions with promotional materials.

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phone2 Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

---

7. Data Retention

phone2 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Account Data: Retained for the duration of your active phone2 account, plus a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of collection or the date of the last transaction, whichever is later, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Customer Support Communications: Retained for two (2) years from the date of the last communication.
• Marketing Preferences: Retained until you withdraw consent or request deletion, subject to applicable legal retention requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phone2's data disposal procedures.

---

8. Data Security

phone2 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS Encryption: All data transmitted between your device and the phone2 Platform is encrypted using industry-standard SSL/TLS protocols.
• Password Hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. phone2 staff cannot view your password in plain text.
• Access Controls: Access to personal data is restricted to authorized phone2 personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Firewalls and Intrusion Detection: The phone2 Platform is protected by enterprise-grade firewalls and continuous intrusion detection and prevention systems.
• Regular Security Audits: phone2 conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities.
• Data Minimization: phone2 collects only the personal data that is strictly necessary for the stated purposes and does not retain data beyond the required retention periods.

Despite these measures, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in serious harm to affected individuals, phone2 will notify the National Privacy Commission (NPC) and affected Players in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

---

9. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phone2:

• Right to Be Informed: You have the right to be informed of how your personal data is collected, used, and processed, which is the purpose of this Privacy Policy.
• Right to Access: You may request a copy of the personal data phone2 holds about you, along with information about how it is being processed.
• Right to Rectification: You may request correction of any inaccurate, incomplete, or outdated personal data in your phone2 account.
• Right to Erasure or Blocking: You may request deletion or blocking of your personal data where it is no longer necessary for the purpose it was collected, or where processing is unlawful, subject to phone2's legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

---

10. Children's Privacy and the 21+ Requirement

The phone2 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online gaming. phone2 does not knowingly collect personal data from individuals under the age of 21.

If phone2 discovers or has reason to believe that a registered user is under 21 years of age, the account will be immediately suspended, all associated balances will be frozen pending investigation, and any winnings may be forfeited. The personal data of underage users will be deleted as soon as practicable after discovery.

If you are a parent or guardian and believe that a minor under your care has registered on the phone2 Platform, please contact us immediately at [email protected] so we can take appropriate action.

---

11. International Data Transfers

phone2 primarily stores and processes personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to or accessed by service providers located outside the Philippines, including cloud infrastructure providers and game software developers.

Where such international transfers occur, phone2 ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require recipient organizations to maintain data protection standards equivalent to those required under Philippine law. phone2 will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards.

---

12. Updates to This Privacy Policy

phone2 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. When we make material changes to this Privacy Policy, we will:

• Post the updated Privacy Policy on this page with a revised "Last Updated" date.
• Send a notification to your registered phone2 mobile number or email address where the changes are significant.

Your continued use of the phone2 Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Privacy Policy periodically to stay informed about how phone2 protects your personal data.

---

13. Contact Us and Data Protection Officer

phone2 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:

You also have the right to file a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.