108ph22 Privacy Policy

This Privacy Policy ("Policy") describes how 108ph22 ("the Platform", "we", "us", "our") collects, uses, stores, and protects personal information provided by or relating to players, visitors, and other individuals ("you", "your") who access or use the 108ph22 website and associated services at 108ph22.net and its subdomains.

108ph22 is committed to compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, administered by the National Privacy Commission (NPC) of the Philippines. All personal data processing activities described in this Policy are carried out in accordance with the principles of transparency, legitimate purpose, and proportionality as mandated by RA 10173.

This Policy applies to all personal data processed in connection with your use of the 108ph22 Service, regardless of whether you access it from Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the Philippines or abroad.

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection legislation, the data controller responsible for your personal information is:

The data controller determines the purposes and means by which your personal data is processed. Any queries, concerns, or formal data requests related to this Policy should be directed to the contact details above or to our designated Data Protection Officer (DPO), as described in Section 14 of this Policy.

108ph22 collects personal data through several channels: directly from you when you register, transact, or contact us; automatically when you browse or use the platform; and from third parties such as payment processors and identity verification providers. The categories of personal data we collect are set out below.

3.1 Registration & Identity Data

• Full legal name as it appears on a government-issued ID;
• Date of birth (for age verification — players must be 21 or older);
• Residential address, including city, province, and postal code;
• Nationality and country of residence;
• Username and encrypted password;
• Government-issued ID type and reference number (collected during KYC verification).

3.2 Contact Data

• Email address;
• Mobile phone number (for account security and notifications).

3.3 Financial & Transaction Data

• GCash or PayMaya account reference (partial, masked);
• BPI, BDO, or Metrobank account details (partial, masked) provided for withdrawal processing;
• Deposit and withdrawal history, transaction reference numbers, amounts in Philippine Peso (PHP/₱), and timestamps;
• Bonus crediting and wagering activity records.

3.4 Gaming Activity Data

• Game history, bet records, win/loss records, and session timestamps;
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status);
• Bonus claims, promotion participation records.

3.5 Technical & Device Data

• IP address and approximate geolocation (country/city level);
• Browser type and version, operating system, device type;
• Cookie identifiers and similar tracking technology data (see Section 6);
• Login timestamps and session duration logs.

3.6 Communications Data

• Records of live chat, email, or support ticket exchanges between you and the 108ph22 support team;
• Records of complaints, disputes, and their resolution.

108ph22 processes your personal data only for specific, documented purposes. The table below maps each category of use to the data it involves:

108ph22 does not use your personal data to make fully automated decisions that produce significant legal or similarly significant effects without human oversight, except where required to comply with AML screening obligations under Philippine law.

Under the Philippine Data Privacy Act of 2012, 108ph22 relies on the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the player account agreement — including account creation, deposit and withdrawal processing, and game delivery — is carried out on the basis that it is necessary for the performance of a contract to which you are a party;
• Legal obligation: 108ph22 is subject to KYC, AML, and record-keeping obligations under Philippine gaming and financial regulations. Processing for these purposes is carried out to comply with applicable legal requirements;
• Legitimate interests: Processing for fraud prevention, platform security, abuse detection, and service improvement is carried out on the basis of 108ph22's legitimate interests, where those interests are not overridden by your rights and freedoms;
• Consent: Processing for direct marketing communications and the use of non-essential cookies is carried out on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without detriment to your account (see Section 12).

108ph22 uses cookies and similar technologies (pixel tags, local storage) to operate the platform, improve your experience, and — with your consent — deliver relevant promotions. Cookies are small text files placed on your device when you visit the 108ph22 website.

Cookie categories we use:

• Strictly Necessary Cookies: Required for the platform to function — session authentication, account security tokens, load balancing. These cannot be disabled without breaking core site functionality;
• Functional Cookies: Remember your preferences such as language settings and responsible gaming reminder intervals, enabling a more personalized experience;
• Analytics Cookies: Collect aggregated, anonymized data on how players navigate the platform, which pages are most visited, and where errors occur. Used exclusively to improve platform performance;
• Marketing Cookies: Used with your consent to track engagement with promotional content and measure the effectiveness of marketing campaigns. These do not share identifiable data with external advertising networks.

You can manage your cookie preferences at any time via your browser settings or the cookie preference center on the 108ph22 platform. Please note that disabling strictly necessary cookies will affect your ability to log in and use certain platform features.

108ph22 does not sell, rent, or trade your personal data. We share personal data only in the limited circumstances described below, and only with parties who are contractually bound to protect your data in accordance with standards equivalent to this Policy.

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum payment data necessary to process your deposits and withdrawals. Each provider operates under their own applicable data protection obligations;
• Identity Verification Providers: Third-party KYC service providers receive identity data solely to perform age and identity verification checks required by Philippine gaming regulations;
• Technology Providers: Cloud hosting, cybersecurity, and platform infrastructure providers may process certain technical and account data as data processors acting strictly on 108ph22's instructions under data processing agreements;
• Game Providers: Game software providers may receive anonymized or pseudonymized gameplay data to support game performance monitoring and RTP auditing;
• Regulatory Authorities: PAGCOR and other applicable Philippine regulatory, tax, and law enforcement authorities may receive data where we are legally required to disclose it, including for AML reporting obligations under the Anti-Money Laundering Act (AMLA);
• Legal Proceedings: Personal data may be disclosed to courts, arbitral bodies, or legal advisors where necessary for the establishment, exercise, or defense of legal claims.

108ph22 retains personal data only for as long as necessary for the purpose for which it was collected, subject to any overriding legal, regulatory, or contractual retention obligations. Our general retention schedule is as follows:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized such that it can no longer be linked to any individual. Where complete deletion is not immediately technically feasible (e.g., backup archives), data is isolated and protected until it can be permanently removed.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 108ph22. These rights can be exercised by contacting our Data Protection Officer using the details in Section 14.

• Right to be Informed: You have the right to be informed of how your personal data is being processed, including the purposes, the legal basis, and the retention period — all of which are set out in this Policy;
• Right of Access: You may request a copy of the personal data 108ph22 holds about you, along with supplementary information about how it is processed. We will respond within 15 business days of receiving a valid request;
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. Basic contact and address data can often be updated directly via your account settings;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to 108ph22's overriding legal obligations under AMLA and PAGCOR regulations to retain certain records;
• Right to Data Portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request that we provide your data in a structured, commonly used, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests (including profiling) and to direct marketing communications at any time. Objections to direct marketing are honored immediately;
• Right to File a Complaint: If you believe your data protection rights have been violated, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

108ph22 implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Encryption in Transit: All data transmitted between your device and 108ph22 servers is encrypted using TLS 1.2 or higher;
• Encryption at Rest: Sensitive data fields — including passwords, payment account references, and KYC documents — are encrypted at rest using AES-256 encryption;
• Access Controls: Access to personal data within 108ph22's systems is strictly role-based. Only employees whose job function requires access to specific data categories are granted access, and all access is logged and audited;
• Two-Factor Authentication: 108ph22 offers two-factor authentication (2FA) for player accounts to provide an additional layer of login security;
• Regular Security Audits: 108ph22 engages independent security firms to conduct penetration testing and vulnerability assessments on a regular basis;
• Incident Response Plan: In the event of a personal data breach, 108ph22 has a documented incident response procedure. Affected individuals and the National Privacy Commission will be notified within the timeframes required by RA 10173.

The 108ph22 platform is strictly intended for adults aged 21 years and above in accordance with Philippine gaming regulations. 108ph22 does not knowingly collect, process, or retain personal data from any individual under the age of 21.

During the registration process, all applicants are required to confirm their date of birth. Where there is reasonable doubt about a player's age, 108ph22 will suspend the account and request documentary proof of age before allowing access to any real-money features. Any account found to belong to a person under 21 will be immediately closed, all balances will be forfeited, and the matter may be referred to the relevant Philippine regulatory authority.

108ph22 may send you promotional emails, SMS notifications, or in-platform messages about bonuses, new games, special events, and VIP offers — but only where you have given your prior consent to receive such communications. Consent is collected at the point of account registration and can be updated at any time.

Opting out: You may withdraw your consent to marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email;
• Updating your notification preferences in your 108ph22 account settings;
• Contacting our support team and requesting to be removed from all marketing lists.

Opting out of marketing communications does not affect your ability to use the 108ph22 platform or to receive essential service notifications (such as deposit confirmations, withdrawal updates, and security alerts).

108ph22 does not use personal data to run behavioral advertising through third-party networks. Any personalization of promotional offers is based solely on your activity within the 108ph22 platform and is carried out by 108ph22 directly.

108ph22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The "Effective Date" at the top of this Policy will be updated whenever a material change is made.

Where a change materially affects your rights or the way we process your personal data, we will provide advance notice via your registered email address or through a prominent notice on the 108ph22 platform before the change takes effect. For non-material changes (such as formatting updates or clarifications that do not alter the substance of the Policy), the updated Policy will be published without prior notice.

Current version: 1.0 | Effective Date: 1 January 2026 | Previous versions available upon request.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way 108ph22 processes your personal data, please contact us through any of the following channels:

All data subject requests will be acknowledged within 3 business days and resolved within 15 business days of receipt, in accordance with NPC guidelines. Complex requests may require additional time, in which case we will inform you of the expected resolution timeline.

If you are not satisfied with our response, you have the right to escalate your concern directly to the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

For responsible gaming concerns or to set up self-exclusion tools, please visit the Responsible Gaming page or contact our support team directly.