Privacy Policy – How 24ph Collects, Uses & Protects Your Data

24ph is an online casino and sports betting platform accessible at https://24ph.club, operated for the benefit of Filipino players and users within jurisdictions where online gaming is legally permitted. As the data controller for personal information collected through the 24ph platform, we are responsible for determining the purposes and means by which your personal data is processed.

This Privacy Policy applies to all personal data collected through the 24ph website, mobile web interface, customer support channels, and any associated services provided under the 24ph brand. By registering an account or using any 24ph service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

24ph collects personal data in two principal ways: information you provide directly, and information collected automatically as you use the platform.

Information you provide directly:

• Registration data: Full legal name, date of birth, nationality, residential address, email address, and mobile phone number;
• Identity verification documents: Government-issued Philippine ID (e.g., PhilSys, passport, driver's license, UMID), selfie photographs, and supporting proof-of-address documents submitted during KYC;
• Payment information: GCash account details, Maya account details, bank account numbers (BPI, BDO, UnionBank), and transaction reference numbers. 24ph does not store full card numbers — payment tokenization is managed by our certified payment processors;
• Communications: Records of your interactions with 24ph customer support, including live chat transcripts and email correspondence.

Information collected automatically:

• IP address and approximate geographic location (region/city level);
• Device type, operating system, and browser version;
• Session duration, pages visited, game activity logs, and bet history;
• Cookie identifiers and similar tracking technologies as described in Section 6.

24ph processes your personal data for the following purposes:

• Account management: Creating and maintaining your 24ph account, authenticating your identity at login, and enabling account recovery;
• Service delivery: Processing deposits and withdrawal requests, crediting bonus funds, and enabling access to the full 24ph game lobby;
• Legal compliance: Fulfilling KYC (Know Your Customer) and AML (Anti-Money Laundering) obligations required under Philippine financial regulations;
• Age verification: Confirming that all 24ph account holders are at least twenty-one (21) years of age in accordance with applicable gaming regulations;
• Fraud prevention and security: Detecting, investigating, and preventing unauthorized account access, fraudulent transactions, and bonus abuse;
• Responsible gaming: Monitoring account activity to identify patterns that may indicate problem gambling behavior, and enforcing self-exclusion requests made by Players;
• Customer support: Responding to your inquiries, resolving disputes, and managing complaints;
• Platform improvement: Analyzing aggregated usage data (in anonymized form) to improve 24ph's interface, game selection, and overall player experience;
• Marketing communications: Sending promotional offers, bonus notifications, and platform updates to Players who have not opted out of marketing communications. You may opt out at any time via your account notification settings.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), 24ph processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill the agreement between you and 24ph, including account creation, payment processing, and game access;
• Legal obligation: Processing necessary to comply with Philippine law, including KYC/AML regulations, age verification requirements, and responses to lawful government requests;
• Legitimate interests: Processing necessary for fraud detection, platform security, and responsible gaming monitoring — activities that protect both 24ph and the broader player community;
• Consent: For marketing communications and the use of non-essential cookies, where your consent is obtained and may be withdrawn at any time.

As an online gaming platform operating in the Philippines, 24ph is obligated to conduct identity verification (Know Your Customer, or KYC) on all account holders prior to processing withdrawal requests and as part of ongoing AML compliance obligations. KYC verification involves the collection and review of government-issued identification documents and, where required, proof of address and source-of-funds documentation.

KYC documents submitted to 24ph are:

• Processed by authorized 24ph personnel and/or certified third-party identity verification providers operating under equivalent data protection obligations;
• Stored in encrypted form on secure servers;
• Retained for the duration of your account's active status plus an additional period of five (5) years following account closure, as required by Philippine AML regulations;
• Never sold or shared with third parties for commercial purposes.

Failure to complete KYC verification when requested may result in restrictions on your ability to withdraw funds from your 24ph account. 24ph will always provide advance notice of KYC requirements and allow a reasonable timeframe for document submission.

24ph uses cookies and similar tracking technologies to operate the platform effectively and to improve the user experience. A cookie is a small text file stored in your browser when you visit 24ph.

Types of cookies used by 24ph:

• Strictly necessary cookies: Required for platform functionality — including session management, login authentication, and security features. These cannot be disabled without affecting your ability to use 24ph;
• Functional cookies: Remember your preferences such as language settings and previously selected payment methods to make future sessions more convenient;
• Analytical cookies: Collect anonymized data about how Players navigate 24ph to help us identify areas for improvement. No personally identifiable information is collected through analytical cookies;
• Marketing cookies: Used to deliver relevant promotional offers and to measure the effectiveness of 24ph marketing campaigns. Consent for marketing cookies may be managed via your browser settings.

You can manage or disable non-essential cookies at any time through your browser's privacy settings. Note that disabling certain cookies may affect the functionality of the 24ph platform.

24ph does not sell your personal data to third parties. We may share your personal data in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, and other payment providers receive the minimum data necessary to process your deposit or withdrawal transactions;
• Identity verification providers: Certified KYC and AML compliance services that assist 24ph in verifying player identities and detecting fraudulent activity;
• Game providers: Third-party game studios may receive anonymized session data for the purpose of game performance monitoring. No personally identifiable information is shared with game providers;
• Legal authorities: 24ph will disclose personal data to law enforcement agencies, courts, regulators (including PAGCOR), or other government authorities when required by law, court order, or lawful regulatory direction;
• Business transfers: In the event of a merger, acquisition, or asset sale, personal data held by 24ph may be transferred to the acquiring entity, subject to equivalent data protection commitments.

All third-party service providers engaged by 24ph are required to process personal data only as instructed by 24ph and in accordance with data protection obligations equivalent to those set out in this Privacy Policy.

24ph retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention periods:

• Active account data: Retained for the duration of your account's active status;
• Account closure data: Following account closure, core account data (name, email, transaction history) is retained for a minimum of five (5) years in compliance with Philippine AML and gaming record-keeping requirements;
• KYC documents: Retained for five (5) years from the date of account closure;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing consent records: Retained for two (2) years from the date consent was last confirmed or updated.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 24ph's data disposal procedures.

Specific security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and 24ph servers — the same standard used by major Philippine banks including BPI and BDO;
• Encrypted storage of passwords and sensitive account data using industry-standard hashing algorithms;
• Role-based access controls restricting employee access to personal data on a strict need-to-know basis;
• Regular security assessments and vulnerability scanning of 24ph infrastructure;
• Optional two-factor authentication (2FA) available to all Players to add a second layer of login protection;
• Automated session timeout after a defined period of inactivity to protect Players using shared devices.

While 24ph takes all reasonable precautions to secure your data, no online platform can guarantee absolute security against all threats. In the unlikely event of a data breach that poses a risk to your rights and interests, 24ph will notify affected Players and the National Privacy Commission (NPC) in accordance with the requirements of the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012, all 24ph account holders located in the Philippines have the following rights with respect to their personal data:

To exercise any of the above rights, contact 24ph via live chat support or email [email protected]. 24ph will respond to data subject requests within thirty (30) days of receipt, as required by the Data Privacy Act.

If you are a parent or guardian and believe that a minor has created a 24ph account, please contact 24ph support immediately via live chat so that the account can be reviewed and closed as appropriate.

Some of 24ph's third-party service providers — including identity verification platforms and game studios — may process data in countries outside the Philippines. Where such transfers occur, 24ph ensures that:

• The recipient country provides an adequate level of data protection, or
• Appropriate contractual safeguards (such as standard data protection clauses) are in place to protect your personal data to a standard equivalent to that required under Philippine law.

Cross-border transfers are limited to the minimum personal data necessary for the specific processing purpose. 24ph does not transfer your full KYC documentation to any jurisdiction without your explicit knowledge and a documented legal basis.

24ph reserves the right to update this Privacy Policy at any time. Material changes — those that significantly affect how your personal data is collected, used, or shared — will be communicated to registered Players via email notification to their registered address and/or a prominent notice on the 24ph platform at least fourteen (14) days before the revised policy takes effect.

The current version of this Privacy Policy is always available on this page and is identified by its effective date. Your continued use of the 24ph platform after a revised policy takes effect constitutes your acceptance of the updated terms. If you do not agree with the changes, you may close your account by contacting 24ph support.

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 24ph, you may contact us through the following channels:

• Live Chat Support: Available 24/7 within the 24ph platform after logging in — the fastest channel for urgent data privacy matters;
• Email: [email protected] (plain text only — not a clickable link).

24ph has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012. The DPO can be reached via the email address above, marked clearly as "Attention: Data Protection Officer." 24ph aims to respond to all formal data privacy inquiries within thirty (30) days of receipt.

If you believe that 24ph has not adequately addressed your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.