This Privacy Policy describes how 25ph12 collects, uses, stores, discloses, and protects personal information provided by users of the 25ph12 Platform. We are committed to handling your personal data responsibly and in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and all applicable regulations issued by the National Privacy Commission (NPC).
25ph12 ("25ph12," "we," "us," or "our") operates the online gaming platform accessible at 25ph12.vip, including all associated subdomains, mobile browser interfaces, and related digital services (collectively, the "Platform"). This Privacy Policy applies to all personal information collected from individuals who visit, register on, or otherwise interact with the Platform ("you," "User," or "Player").
By registering an account on 25ph12, accessing the Platform, submitting identity documentation, or using any service offered by 25ph12, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, storage, and disclosure of your personal information as described herein.
This Policy should be read together with our Terms & Conditions, which govern your overall use of the 25ph12 Platform. Defined terms used but not defined in this Policy carry the meaning given to them in the Terms & Conditions.
Philippine Law: This Privacy Policy is drafted in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines. Your rights under Philippine law are set out in Section 13 of this Policy.
For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, 25ph12 acts as the Personal Information Controller ("PIC") in respect of personal data collected through the Platform. As PIC, 25ph12 determines the purposes for which and the means by which personal information is processed.
Where 25ph12 engages third-party service providers to process personal data on its behalf — for example, payment processors, identity verification providers, and cloud hosting services — those providers act as Personal Information Processors ("PIP") and are bound by data processing agreements that require them to process personal information only as instructed by 25ph12 and in compliance with applicable Philippine data privacy law.
25ph12 has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data privacy legislation. Contact details for the 25ph12 DPO are provided in Section 16 of this Policy.
25ph12 collects the following categories of personal information in connection with the operation of the Platform and the provision of gaming services to Filipino players:
Identity & Contact Information
Identity Verification (KYC) Documents
Financial & Transaction Data
Gaming & Behavioral Data
Technical & Device Data
Communications Data
25ph12 collects personal information through the following channels:
| Collection Method | Examples |
|---|---|
| Direct Submission | Registration form, KYC document upload, support chat, email correspondence |
| Automated Collection | Cookies, server logs, session tracking, device fingerprinting during Platform use |
| Payment Providers | Transaction confirmation data from GCash, Maya, BPI, BDO, and other payment processors |
| Identity Verification Providers | Results of automated ID verification checks against government databases |
| Fraud Prevention Services | Device risk scores, IP reputation data, and behavioral anomaly signals |
| Public Sources | Publicly available sanctions lists, PAGCOR self-exclusion registries |
25ph12 processes personal information for the following purposes:
Under the Data Privacy Act of 2012, 25ph12 processes personal information on the following legal bases:
25ph12 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may disclose personal information to the following categories of recipients, strictly for the purposes described in Section 5:
All third-party recipients of personal data from 25ph12 are required to maintain appropriate technical and organizational security measures and to process personal information only for the purposes specified by 25ph12.
Some of the third-party service providers engaged by 25ph12 may process personal data outside the Republic of the Philippines. Where such international transfers occur, 25ph12 takes appropriate steps to ensure that your personal information receives a level of protection consistent with the Data Privacy Act of 2012, including:
By using the 25ph12 Platform, you acknowledge that your personal information may be transferred to and processed in countries outside the Philippines in connection with the services described in this Policy.
25ph12 retains personal information for as long as necessary to fulfill the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account & identity records | Duration of account + 5 years after closure | PAGCOR / AMLA regulatory requirement |
| KYC documents | Duration of account + 5 years after closure | AMLA / NPC requirement |
| Transaction records | Duration of account + 5 years after closure | AMLA / BIR requirement |
| Gameplay history | 2 years from date of activity | Dispute resolution / regulatory audit |
| Support communications | 2 years from date of communication | Dispute resolution / legitimate interests |
| Cookie & technical logs | Up to 13 months from collection | Security / fraud prevention |
Upon expiry of the applicable retention period, personal information is securely deleted or anonymized in accordance with 25ph12's data disposal procedures. Where personal information must be retained beyond standard periods due to an ongoing legal dispute, regulatory investigation, or audit, retention will continue until resolution of the relevant matter.
25ph12 implements appropriate technical and organizational security measures to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
Your Responsibility: While 25ph12 takes comprehensive steps to protect your data, the security of your account also depends on your own practices. Use a strong, unique password for your 25ph12 account, enable two-factor authentication, and never share your login credentials with any other person.
25ph12 uses cookies and similar tracking technologies on the Platform. Cookies are small text files placed on your device when you visit the Platform. They serve several important functions:
You may control cookie settings through your browser's privacy settings. Note that disabling essential cookies will impair your ability to log in and use core Platform features. 25ph12 does not use third-party advertising cookies or behavioral advertising tracking technologies.
The 25ph12 Platform is strictly for adults who are 21 years of age or older, in accordance with PAGCOR age requirements for gambling in the Philippines. 25ph12 does not knowingly collect personal information from individuals under 21 years of age.
Where 25ph12 discovers or has reason to believe that personal information has been collected from a person under 21 years of age, we will take immediate steps to:
If you are a parent or guardian and believe that your child (under 21) has registered a 25ph12 account or provided personal information to 25ph12, please contact our support team immediately via live chat.
Under the Data Privacy Act of 2012, you have the following rights in respect of your personal information held by 25ph12. To exercise any of these rights, contact our Data Protection Officer as described in Section 16.
The right to be informed of how your personal data is being collected, processed, and used — as set out in this Privacy Policy.
The right to request a copy of the personal information that 25ph12 holds about you, including information about how it is being processed.
The right to request correction of inaccurate, incomplete, or outdated personal information in your 25ph12 account records.
The right to request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to mandatory legal retention requirements.
The right to object to processing of your personal data based on legitimate interests, including direct marketing. Where objection is upheld, 25ph12 will cease the relevant processing.
The right to receive a copy of your personal data in a structured, commonly used, machine-readable format where processing is based on consent or contract and carried out by automated means.
Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
The right to be indemnified for any damages sustained as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorized use of personal information.
25ph12 will respond to rights requests within 15 business days of receipt. Where a request is complex or there is a high volume of requests, we may extend this period by up to an additional 15 business days, with prior notice to you.
If you have a complaint or concern about the way 25ph12 handles your personal information, you should first contact the 25ph12 Data Protection Officer (see Section 16). We will acknowledge your complaint within 5 business days and work to resolve it within 30 calendar days.
If you are not satisfied with 25ph12's response to your complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, the independent government body responsible for enforcing the Data Privacy Act of 2012. The NPC accepts complaints from Philippine data subjects at its offices or through its official online portal.
National Privacy Commission: The NPC is the regulatory authority for personal data protection in the Philippines, established under Section 7 of the Data Privacy Act of 2012. It is empowered to receive and investigate complaints, impose sanctions, and issue binding orders on personal information controllers.
25ph12 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, regulatory requirements, or Platform services. Where changes are material, we will notify registered players by email to their registered address and/or through a prominent notice on the Platform at least seven (7) days before the amended Policy takes effect.
Continued use of the 25ph12 Platform after the effective date of an updated Privacy Policy constitutes your acceptance of the revised Policy. The current version of the Policy is always accessible at 25ph12.vip/privacy-policy and is identified by the "Last Updated" date at the top of the document.
Where changes to the Policy require a new legal basis for processing that was not covered by your prior consent — or where processing activities are substantially altered in a way that may affect your rights — 25ph12 will seek fresh consent from affected users before commencing the new processing activities.
For any privacy-related queries, rights requests, or complaints regarding 25ph12's handling of your personal information, you may contact our Data Protection Officer through the following channel:
Data Protection Officer — 25ph12
For privacy matters, please contact our support team via live chat on the Platform or send a written enquiry to:
[email protected] with the subject line "Privacy / DPO Request." Please include your full registered name, account email address, and a clear description of your request or concern. We will route your message to the Data Protection Officer directly.
All privacy-related communications are handled with strict confidentiality. 25ph12 does not share the contents of privacy requests with third parties except as required to fulfill the request or comply with applicable law.
Every connection between your browser and 25ph12 is protected by TLS 1.3 with 256-bit encryption — the same standard used by Philippine commercial banks and major fintech platforms like GCash.
25ph12 does not sell, rent, or trade your personal information to third parties for marketing purposes — ever. Your data is used only to provide and improve the 25ph12 service to you.
Identity documents submitted for KYC verification are processed and stored under strict data processing agreements, encrypted at rest, and retained only for as long as required by PAGCOR and AMLA regulations.
As a Filipino data subject, you have eight rights under the Data Privacy Act of 2012 — including access, rectification, erasure, and portability. 25ph12 responds to rights requests within 15 business days.
25ph12 collects only the personal information necessary to provide gaming services, comply with regulations, and protect your account security. We do not collect data beyond what is required for these purposes.
In the event of a personal data breach affecting your information, 25ph12 will notify you and the National Privacy Commission within the timeframes required by NPC Circular No. 16-03 and applicable regulations.
Over 800 games, instant GCash & Maya deposits, 256-bit security, and a platform that respects your privacy under Philippine law. For Filipino players 21 and older.
Already a member? Go to 25ph12 Login. | Review our Terms & Conditions. | Have questions? Visit our FAQ.