PH222 Privacy Policy: How We Respect and Protect Data

When you register on PH222, we collect your full name, mobile number, date of birth, and the IP address used during sign-up. Your name and phone number are required to create your account and verify your identity. Your date of birth is checked against the minimum age requirement of 21 years. Your IP address is logged to enforce the one-account-per-household policy and to detect suspicious login activity. None of this information is optional during registration because we are required by PAGCOR to verify every player before they can deposit or play.

When you make a deposit or request a withdrawal, we collect your payment details. For GCash and Maya transactions, this means your registered mobile number and transaction reference. For bank transfers, this includes your account name and bank details. We do not store full card numbers or bank account passwords. Payment data is used solely to process your transactions and to match your withdrawal account to your registered name. We do not use it for any other purpose.

If you contact our support team through Live Chat or email, we keep a record of that conversation. This helps us follow up on unresolved issues and improve our support quality. Chat logs are stored for 12 months and then deleted. If you request a copy of your support history, we can provide it within five business days.

All data transmitted between your device and PH222 servers is encrypted using 128-bit SSL. This means that anyone intercepting the connection between you and our site sees only scrambled data, not your actual credentials or payment details. SSL is active on every page of the platform, not just the login and payment screens. You can confirm this by checking for the padlock icon in your browser’s address bar at all times while on ph222.org.ph.

Player passwords are stored using one-way hashing. This means that even PH222 staff cannot see your actual password. When you log in, the system hashes what you type and compares it to the stored hash. If the two match, you get in. Nobody on our team has access to your raw password, which is why we cannot tell you what it is if you forget it. We can only reset it. This is the correct way to handle passwords and it is how all secure platforms work.

We conduct regular internal security reviews and work with third-party auditors to test our systems for vulnerabilities. If a data breach occurs that affects your personal information, we will notify you directly via your registered mobile number within 72 hours of confirming the breach. We will also report it to the National Privacy Commission as required under the Data Privacy Act of 2012. We have never had a confirmed breach, but we keep the process ready because it is the responsible thing to do.