Introduction
This Privacy Policy ("Policy") describes how 25ph8 ("we", "us", "our", "the Platform") collects, processes, stores, and protects the personal information of all users who access and interact with the 25ph8 online casino and sports betting platform at 25ph8.net, including all associated pages, mobile interfaces, and related services (collectively, the "Platform").
At 25ph8, the privacy and security of your personal data is not just a legal obligation — it is a core value. We understand that Filipino players entrust us with sensitive personal and financial information, and we take that responsibility seriously. Every data practice described in this Policy has been designed to align with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).
This Policy applies to all personal data collected from registered players, unregistered visitors, and any other individuals who interact with the 25ph8 Platform. By accessing or using the 25ph8 Platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described herein. If you do not agree with this Policy, please do not use the Platform.
This Policy should be read alongside the 25ph8 Terms & Conditions and our Responsible Gaming Policy, both of which form part of the broader agreement between you and 25ph8.
Table of Contents
Personal Data We Collect
25ph8 collects personal data through several channels: directly from you when you register or interact with the Platform, automatically through your use of the Platform, and occasionally from trusted third-party sources. The categories of personal data we collect are described in the table below.
| Data Category | Specific Data Points Collected |
|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government-issued ID number (passport, driver's license, SSS, UMID, PhilSys National ID) |
| Contact Data | Email address, Philippine mobile number, residential address (barangay, city/municipality, province), region |
| Account Data | Username, encrypted password hash, account creation date, account preferences, communication preferences |
| Financial Data | GCash / PayMaya account numbers, bank account details (BPI, BDO, Metrobank), cryptocurrency wallet addresses, deposit and withdrawal history, transaction amounts in PHP |
| KYC Verification Data | Copies of government-issued IDs, selfie / liveness verification images, proof of address documents, source of funds declarations |
| Gaming Activity Data | Game session history, wager amounts, win/loss records, bonus usage, game preferences, responsible gaming settings |
| Technical Data | IP address, device type, operating system, browser type and version, screen resolution, session duration, referring URL |
| Communication Data | Live chat transcripts, support ticket content, email correspondence with our team, survey responses |
Special Categories of Data: 25ph8 does not intentionally collect sensitive personal data such as health records, political opinions, or religious beliefs. To the extent that any such information is incidentally disclosed during support communications, it will be treated with the highest level of protection and will not be used for any processing purpose beyond resolving the specific support matter.
How We Use Your Data
25ph8 uses your personal data only for the purposes described below. We do not use your data for any purpose that is incompatible with these stated purposes without first obtaining your consent or establishing a new valid legal basis.
We use your identity, contact, and account data to create and manage your 25ph8 account, authenticate your identity at login, personalize your Platform experience, and communicate important account-related updates such as password changes, security alerts, and policy amendments.
Financial data is used to process your deposits and withdrawal requests via GCash, PayMaya, BPI, BDO, Metrobank, or cryptocurrency channels. All financial data is processed using industry-standard encryption and is shared only with the relevant payment service provider necessary to complete your transaction. 25ph8 does not store full payment credentials beyond what is required for transaction reconciliation.
Identity and KYC verification data is used to verify that you meet the eligibility requirements for using the 25ph8 Platform, including the minimum age of 21. This data is also used to comply with our anti-money laundering (AML) and counter-terrorism financing (CTF) obligations under Philippine law, including the Anti-Money Laundering Act (AMLA) as amended. We may be legally required to share specific transaction or identity data with regulatory bodies including PAGCOR and the Anti-Money Laundering Council (AMLC).
Gaming activity data and account interaction patterns are analyzed to identify players who may be exhibiting signs of problem gambling. This enables 25ph8 to proactively offer responsible gaming tools such as deposit limits, loss limits, session time reminders, and self-exclusion options. This processing is carried out in the legitimate interest of protecting the welfare of our players and in compliance with responsible gaming requirements.
Communication data — including live chat transcripts and support ticket records — is retained to provide effective customer support, resolve disputes, investigate complaints, and maintain a record of interactions for quality assurance purposes. Support records may be reviewed by our compliance team in the event of a formal dispute or regulatory inquiry.
With your consent, we may use your contact data and gaming activity data to send you personalized promotional offers, bonus notifications, and Platform updates via email or SMS. You may withdraw consent for marketing communications at any time by updating your communication preferences in your account settings or by contacting our support team via live chat. Withdrawing marketing consent does not affect your ability to use the Platform.
Technical data — including device information, session data, and behavioral patterns — is used in aggregated and anonymized form to analyze Platform performance, identify usability issues, optimize game loading speeds, and improve the overall player experience. This analytics processing does not result in decisions that affect individual players.
Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, 25ph8 must have a valid legal basis for each category of personal data processing. The legal bases we rely upon are as follows:
- Contractual Necessity. Processing required to fulfill our obligations under the 25ph8 Terms & Conditions — including account management, payment processing, and game access — is carried out on the basis of contractual necessity. Without this processing, we cannot provide the Platform services.
- Legal Obligation. Certain processing activities — including KYC verification, AML reporting, and age verification — are carried out to comply with mandatory obligations under Philippine law, including RA 10173, the AMLA, and applicable PAGCOR regulations.
- Legitimate Interests. We process certain technical and gaming activity data based on our legitimate interests in operating a secure, fair, and commercially sustainable platform — provided those interests are not overridden by your fundamental rights and freedoms.
- Consent. Where processing is not required by contract or law — particularly for marketing communications and optional analytics — we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without penalty.
Data Sharing & Disclosure
25ph8 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We share personal data only in the limited circumstances described below, and only to the extent strictly necessary for the stated purpose.
Financial transaction data is shared with our authorized payment partners — including GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processing partners — solely for the purpose of processing deposits and withdrawals. Each payment partner operates under their own privacy policy and applicable regulatory framework. 25ph8 performs due diligence to ensure all payment partners maintain adequate data protection standards.
The 25ph8 Platform integrates games from licensed third-party game providers. These providers may receive limited technical session data — such as player session tokens and game round identifiers — necessary to deliver game content and verify the integrity of game outcomes. Game providers do not receive your full identity data, financial data, or KYC documents.
25ph8 is legally obligated to disclose certain personal and transactional data to Philippine regulatory authorities — including PAGCOR, the AMLC, and the National Privacy Commission — upon receipt of a valid legal order, regulatory direction, or as required by mandatory reporting obligations under Philippine law. We will notify you of such disclosures to the extent permitted by law.
To complete KYC verification, we may engage licensed identity verification service providers who process your submitted ID documents and liveness check data on our behalf. These providers act as data processors under a binding data processing agreement with 25ph8 and may not use your KYC data for any purpose other than identity verification on our behalf.
In the event of a merger, acquisition, restructuring, or sale of assets involving 25ph8, your personal data may be transferred to the acquiring or successor entity as part of that transaction. We will provide advance notice of any such transfer and ensure that the receiving entity commits to maintaining the same level of data protection described in this Policy.
Data Retention
25ph8 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, to comply with legal and regulatory obligations, and to resolve disputes or enforce our agreements. The key retention periods applied by 25ph8 are as follows:
| Data Category | Retention Period |
|---|---|
| Account & Identity Data | Duration of active account plus 5 years after account closure, as required by Philippine AML regulations |
| KYC Documents | 5 years from date of submission or from account closure, whichever is later |
| Financial Transaction Records | 5 years from the date of each transaction, as required by the AMLA and PAGCOR regulations |
| Gaming Activity Logs | 3 years from the date of each session, or longer if required in connection with an active dispute or investigation |
| Customer Support Records | 2 years from the date of resolution of each support interaction |
| Marketing Consent Records | Until consent is withdrawn, plus 1 year to maintain a record of the withdrawal |
| Technical & Log Data | 90 days for routine logs; up to 1 year for security-related logs flagged during investigation |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be linked back to you as an individual. Anonymized, aggregated data may be retained indefinitely for analytical and statistical purposes without identifying you personally.
Data Security
25ph8 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security framework includes the following controls:
- Encryption in Transit. All data transmitted between your device and the 25ph8 Platform is protected using TLS 1.2 or higher encryption. Our HTTPS implementation ensures that your login credentials, financial data, and personal information cannot be intercepted in transit.
- Encryption at Rest. Sensitive data stored in 25ph8 systems — including KYC documents, financial records, and account credentials — is encrypted at rest using AES-256 encryption. Password hashes are stored using a one-way hashing algorithm with individual salting.
- Access Controls. Access to systems containing personal data is restricted to authorized 25ph8 staff with a verified business need. Access is governed by role-based access controls, multi-factor authentication, and regular access reviews. All access events are logged.
- Fraud Detection Systems. 25ph8 operates continuous real-time monitoring systems to detect suspicious login attempts, unusual transaction patterns, and other indicators of account compromise or fraudulent activity. Anomalies trigger automated alerts and, where appropriate, temporary account restrictions pending investigation.
- Third-Party Security Audits. Our platform infrastructure and data handling practices are subject to periodic independent security assessments. Findings from security reviews are tracked and remediated in accordance with a risk-based priority framework.
- Incident Response. In the event of a personal data breach that poses a risk to your rights, 25ph8 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected individuals within the timeframes prescribed by the Data Privacy Act and its Implementing Rules.
Your Role in Security: While 25ph8 maintains robust platform-level security, your account security also depends on how you protect your login credentials. Use a strong, unique password for your 25ph8 account, enable two-factor authentication, and never share your credentials with anyone. If you suspect unauthorized account access, contact our support team via live chat immediately.
Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 25ph8. We are committed to honoring these rights within the timeframes prescribed by applicable law.
To exercise any of the rights listed above, please contact our Data Protection Officer via live chat on the Platform or by email at [email protected]. We will verify your identity before actioning any data subject request and will respond within the timeframes required by the Data Privacy Act — generally within 15 business days of receiving a complete and verified request.
Minors & Age Restriction
The 25ph8 Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine law governing online casino and sports betting activities. We do not knowingly collect, process, or retain personal data from any individual under the age of 21.
Age verification is a mandatory step in the 25ph8 account registration process. All players are required to confirm that they are 21 or older at the point of registration, and to submit valid government-issued identification as part of the KYC verification process. Accounts found to belong to individuals under the age of 21 will be immediately suspended, all associated balances will be frozen, and the matter will be escalated to our compliance team.
If you are a parent or guardian and believe that a minor in your care has registered on the 25ph8 Platform without your knowledge, please contact our support team via live chat immediately. We will investigate the matter urgently and take all necessary steps to close the account and prevent any further access.
Parental Controls. We strongly encourage parents and guardians to make use of available parental control software and internet filtering tools to prevent underage access to online gambling platforms. 25ph8 supports all efforts to keep gambling entertainment strictly within the adult population in the Philippines.
Changes to This Privacy Policy
25ph8 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, regulatory guidance from the National Privacy Commission, or operational changes to the Platform.
Material changes — defined as changes that meaningfully affect how we collect, use, or share your personal data, or that reduce your rights as a data subject — will be communicated to registered account holders via email to your registered address and/or via a prominent notice on the Platform at least seven (7) days before the change takes effect.
Non-material changes, such as typographical corrections or minor clarifications that do not alter the substance of your rights, may be published without prior notice and take effect immediately. The "Effective Date" displayed at the top of this Policy reflects the date of the most recent substantive revision.
Your continued use of the 25ph8 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment and acceptance of the revised Policy. We encourage you to review this page periodically to stay informed of any updates.
Contact Our Data Protection Team
If you have any questions, concerns, or requests relating to this Privacy Policy or the way 25ph8 handles your personal data, please reach out to our dedicated Data Protection team through any of the channels below.
For formal data subject requests (access, rectification, erasure, portability, objection) and privacy-related complaints, please write to us at: [email protected] — please use the subject line "Data Privacy Request" so your message reaches our Data Protection Officer promptly. We aim to acknowledge all formal privacy requests within 2 business days and to respond fully within 15 business days.
For general privacy inquiries or to get immediate assistance, our 24/7 live chat support team is available directly on the 25ph8 Platform. Live chat agents can escalate privacy-specific requests to our Data Protection Officer on your behalf. Live Chat: Available 24/7 on-site.
If you are not satisfied with our response to a privacy complaint, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines. The NPC is the regulatory body responsible for enforcing the Data Privacy Act of 2012 and protecting the data privacy rights of all Filipino citizens and residents.
How 25ph8 Protects Your Privacy
Beyond the legal requirements, 25ph8 has embedded six privacy-first principles into the design and operation of our Platform — because every Filipino player deserves to game with confidence.
Data Privacy by Design
Privacy protections are built into 25ph8's platform architecture from the ground up — not added as an afterthought. Every new feature is assessed for privacy impact before it goes live.
End-to-End Encryption
Your data is encrypted both in transit and at rest. TLS 1.2+ protects every connection, and AES-256 encryption secures stored sensitive records — from KYC documents to financial data.
Strict Access Controls
Only verified 25ph8 staff with a legitimate business need can access your personal data. Role-based permissions, MFA, and comprehensive access logs keep your information on a need-to-know basis.
DPA 2012 Compliance
Our data practices are fully aligned with the Philippine Data Privacy Act of 2012 (RA 10173) and the guidelines issued by the National Privacy Commission — protecting your rights under Philippine law.
Breach Notification
In the event of a data breach affecting your personal information, 25ph8 will notify both the NPC and affected players promptly — within the mandatory timelines set by the Data Privacy Act.
You Stay in Control
From marketing preferences to data access requests, you control how your personal data is used at 25ph8. Our support team can action your data rights requests around the clock via live chat.
Game with Confidence at 25ph8
Your privacy is protected at every step. Join thousands of Filipino players enjoying over 3,500 games on a platform built with security and transparency at its core. Must be 21 or older to register and play.