Last updated: June 2026 | Effective upon account registration | Governed by Philippine Data Privacy Act (RA 10173)
Your privacy matters to 25ph. This Privacy Policy explains what personal data we collect from you as a Filipino player, how we use it, who we may share it with, and how we keep it secure. 25ph processes personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules of the National Privacy Commission (NPC). By registering an account or using any 25ph service, you acknowledge and consent to the data practices described in this Policy.
This Privacy Policy applies to all personal data collected by 25ph through its website (25ph.vu), mobile browser platform, customer support channels, and any other touchpoints through which Filipino players interact with the 25ph brand. It covers data collected from prospective players, registered account holders, and visitors to the 25ph website who have not yet registered.
This Policy should be read alongside the 25ph Terms & Conditions and the Responsible Gaming Policy, both of which contain related provisions concerning data handling.
25ph is the data controller responsible for personal data collected through the 25ph platform. 25ph operates as a PAGCOR-licensed online gaming entity serving players in the Republic of the Philippines. As data controller, 25ph determines the purposes and means of processing your personal data and is responsible for ensuring that processing complies with the Philippine Data Privacy Act of 2012 (RA 10173).
25ph has appointed a Data Protection Officer (DPO) as required under RA 10173 and the NPC's implementing rules. Contact details for the DPO are provided at Section 13 of this Policy.
25ph collects personal data through the following means: registration forms, identity verification (KYC), payment transactions, gameplay activity, customer support interactions, and automated data collection through cookies and analytics. The categories of data we collect include:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, government ID number (PhilSys, Passport, Driver's License, UMID, SSS ID, Voter's ID), selfie/photo | Provided by you during registration and KYC |
| Contact Data | Philippine mobile number (Globe/Smart/Dito), email address | Provided by you during registration |
| Financial Data | GCash account linked, Maya account linked, BPI/BDO/Metrobank account references, deposit and withdrawal history, transaction amounts in PHP | Provided during payment setup and transaction processing |
| Account & Gaming Data | Username, account balance, bet history, game session data, bonus usage, login timestamps, responsible gaming settings | Generated through Platform use |
| Technical Data | IP address, device type, operating system, browser type, mobile network carrier, session duration, pages visited | Collected automatically via cookies and server logs |
| Communication Data | Live chat transcripts, support ticket content, email correspondence | Generated through support interactions |
25ph does not intentionally collect sensitive personal information such as health data, biometric data, or political opinions unless directly relevant to a specific regulatory requirement (e.g., disability-related responsible gaming accommodations). Where such data is collected, explicit separate consent will be obtained.
25ph processes your personal data only for specified, legitimate purposes. The primary purposes for which we use your data are:
25ph does not use automated decision-making that produces legal or similarly significant effects on players without human review, except where required for real-time fraud prevention or regulatory compliance.
Under RA 10173, 25ph processes your personal data on the following legal bases:
25ph retains personal data only for as long as necessary for the purposes stated in this Policy, subject to longer retention periods required by law. The general retention schedule is:
Upon expiry of the applicable retention period, data will be securely deleted or anonymised in a manner that renders it irrecoverable and unattributable to any individual.
25ph implements technical and organisational security measures appropriate to the risk level of the personal data processed. These include:
In the event of a personal data breach that is likely to result in harm to affected players, 25ph will notify the National Privacy Commission within 72 hours of becoming aware of the breach and will communicate with affected players as required by law.
As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by 25ph. You may exercise these rights by contacting the 25ph Data Protection Officer at the details provided in Section 13.
Know what data we collect, why, and how it is used — as set out in this Policy.
Request a copy of the personal data 25ph holds about you.
Correct inaccurate or incomplete personal data in your 25ph account.
Request deletion of data no longer necessary for the purpose collected, subject to legal retention obligations.
Object to processing based on legitimate interests, including marketing communications.
Receive your data in a structured, machine-readable format where technically feasible.
Lodge a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.
Withdraw consent for marketing processing at any time, without affecting prior lawful processing.
25ph will respond to verified data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days with notification to you.
The 25ph platform is strictly for individuals who are 21 years of age or older, as mandated by PAGCOR regulations governing casino-style online gaming in the Philippines. 25ph does not knowingly collect personal data from individuals under the age of 21. If 25ph discovers or is notified that personal data has been collected from a person under 21, it will immediately suspend the associated account, delete the collected data to the extent permitted by law, and report the matter to PAGCOR as required under its license conditions.
If you are a parent or guardian and believe a person under 21 has registered at 25ph, please contact [email protected] immediately.
Some of 25ph's third-party service providers — including certain game providers and cloud infrastructure operators — may process personal data in jurisdictions outside the Philippines. Where such cross-border transfers occur, 25ph ensures that appropriate safeguards are in place as required by the NPC's rules on cross-border data transfers, including contractual data processing agreements that impose data protection standards equivalent to those required under RA 10173.
25ph does not transfer personal data to countries that the NPC has determined provide inadequate data protection without implementing appropriate additional safeguards.
25ph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to registered players via on-platform notification and/or email at least seven (7) days before taking effect. The "Last Updated" date at the top of this page will be revised accordingly.
Continued use of the 25ph platform following notification of a Policy update constitutes your acknowledgement of the revised Policy. If you do not accept the revised Policy, you must cease using the Platform and may request account closure in accordance with the 25ph Terms & Conditions.
For all data privacy enquiries, rights requests, and complaints relating to 25ph's handling of your personal data, please contact the 25ph Data Protection Officer through the following channels:
Data Protection Officer – 25ph
Email (DPO): [email protected] (subject line: "Data Privacy Request")
Live Chat: Available 24/7 on the 25ph platform — request to speak with the Data Privacy team
Regulatory Authority: National Privacy Commission of the Philippines (privacy.gov.ph)
Please include your full name, registered mobile number (to verify account ownership), a clear description of your request or concern, and any supporting documentation. 25ph may require identity verification before processing sensitive data rights requests.
Six ways 25ph safeguards the personal data of Filipino players.
25ph processes all personal data under the Philippine Data Privacy Act of 2012 — the same law protecting your data with BPI, BDO, and GCash. Not a foreign privacy framework applied loosely to Filipino players, but the actual law of the Republic.
Every piece of data you transmit to 25ph — login credentials, GCash details, personal ID uploads — travels over TLS-encrypted connections. The same technology securing Philippine online banking protects your data on 25ph.
25ph does not sell your personal data to advertisers, data brokers, or third-party marketers. Your mobile number, betting history, and GCash details are used to run your 25ph account — nothing else. That's it.
25ph has appointed a DPO as required by the NPC. If you have a data rights request or concern about how your personal information is handled, there's a designated person responsible for addressing it — not just a generic inbox.
Access, rectify, delete, or port your data. Object to marketing. Withdraw consent. These rights exist on paper for every Philippine data subject — at 25ph, you can actually exercise them by contacting support.
In the unlikely event of a data breach, 25ph commits to notifying the NPC within 72 hours and informing affected players promptly — as required by law. No covering it up, no months of silence. Transparency when it matters most.
25ph takes your data privacy as seriously as your payout speed. PAGCOR-licensed, RA 10173 compliant, and transparent about every data practice. Questions before joining? Our team is available 24/7.