Section 1
Introduction
This Privacy Policy applies to all personal data collected and processed by 22winph through the website https://22winph.best and all associated services offered under the 22winph brand. References to "22winph," "we," "us," or "our" throughout this document refer to the operator of the 22winph platform.
22winph is committed to handling the personal data of its players — who are primarily based in the Philippines — with care, transparency, and in accordance with applicable data protection law, including the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.
By registering a 22winph account, you acknowledge that you have read this Privacy Policy and consent to the collection and processing of your personal data as described. If you do not agree with any part of this policy, you should not register or continue using 22winph.
This Privacy Policy should be read alongside the 22winph Terms and Conditions. Together, these two documents describe the full relationship between 22winph and its registered players.
A straightforward commitment: 22winph does not sell your personal data to advertisers, data brokers, or any unrelated third party. Your data exists to make 22winph work properly for you — not to generate separate revenue from your information.
Section 2
Personal Data We Collect
22winph collects personal data in the categories set out below. The specific data collected depends on how you interact with the platform.
| Category | Examples | When Collected |
| Identity data | Full legal name, date of birth, nationality, government-issued ID details | Registration and KYC verification |
| Contact data | Email address, mobile number, residential address | Registration and account updates |
| Financial data | Payment method details (GCash, Maya, bank account references), transaction history in PHP | Deposits and withdrawals |
| Account activity data | Bet history, game session records, login timestamps, account preferences | Ongoing platform use |
| Technical data | IP address, device type, browser, operating system, session cookies | Every visit to the 22winph platform |
| Communications data | Support chat or email records, feedback, complaints | When you contact 22winph support |
| Verification documents | Scanned or photographed government ID, proof of address, selfie where required | KYC and withdrawal verification |
22winph does not intentionally collect sensitive personal data such as health information, religious beliefs, or political affiliations unless it is directly necessary for a legally required process — for instance, a responsible gaming referral that requires disclosure of health-related information at a player's specific request.
Section 3
How We Collect Your Data
22winph collects personal data through the following channels:
- Direct collection: Information you provide when you register, update your account, complete identity verification, make a deposit or withdrawal, place a bet, play a game, or contact customer support.
- Automated collection: Technical data gathered automatically when you access the 22winph platform, including device identifiers, IP address, browser type, session duration, pages visited, and cookie data.
- Third-party sources: Identity and age verification data from third-party KYC providers. Fraud and risk screening data from anti-money laundering (AML) service partners. Payment confirmation data from GCash, Maya, bank payment gateways, and card processors.
Where 22winph collects data from third-party sources, those providers are bound by their own privacy obligations and data sharing agreements with 22winph. Player data received from third parties is used only for the specific purpose for which it was obtained — typically verification or fraud prevention — and is not used for broader profiling.
Section 4
Why We Use Your Personal Data
22winph uses your personal data for the following specific purposes. Against each purpose, we have noted the relevant legal basis as described in Section 5.
- Account creation and management — to register your 22winph account, verify your identity and age, and maintain accurate records of your account status and preferences.
- Processing PHP transactions — to accept deposits from and send withdrawals to your registered payment method (GCash, Maya, bank transfer, card, etc.) accurately and securely.
- Bet and game settlement — to correctly record, process, and settle all bets placed at the 22winph sportsbook and all game sessions played on the platform.
- Customer support — to identify your account when you contact 22winph, understand your query, and provide accurate assistance.
- Fraud prevention and security — to detect unusual account activity, identify potential unauthorised access, and protect both the player and the platform from fraudulent use.
- Anti-money laundering (AML) compliance — to carry out the Know Your Customer (KYC) checks and transaction monitoring required by applicable law.
- Responsible gaming — to monitor gaming patterns where flagged by platform tools, support self-exclusion requests, and comply with responsible gaming obligations.
- Platform improvement — to analyse aggregate, anonymised patterns in how players use 22winph in order to improve the platform experience.
- Legal and regulatory compliance — to respond to lawful requests from regulatory bodies, law enforcement, or courts in the Philippines and applicable jurisdictions.
- Marketing communications — where you have opted in to receive promotional messages from 22winph, to send relevant offers and updates. See Section 14 for more on marketing preferences.
Section 5
Legal Basis for Processing
22winph processes your personal data under the following legal bases, consistent with the Philippine Data Privacy Act and other applicable data protection law:
- Contractual necessity: Processing required to fulfil the contract between you and 22winph — including account management, transaction processing, and bet settlement.
- Legitimate interests: Processing necessary for 22winph's legitimate business interests where these are not overridden by your rights — including fraud detection, platform security, and aggregate analytics.
- Legal obligation: Processing required to comply with applicable law — including KYC, AML obligations, tax reporting, and responses to lawful regulatory or law enforcement requests.
- Consent: Processing based on your freely given, specific, informed consent — primarily for marketing communications. You may withdraw consent at any time as described in Section 14.
Where 22winph relies on consent as the legal basis for any processing, withdrawing that consent will not affect the legality of any processing already carried out before the withdrawal.
Section 6
Payment Data
22winph processes all player transactions in Philippine pesos (PHP). The payment channels supported — including GCash, Maya, GrabPay, Coins.ph, InstaPay, PESONet, BDO, BPI, UnionBank, and Visa/Mastercard — each operate under their own privacy policies governing how they handle payment data on their own systems.
When you initiate a deposit or withdrawal through any of these channels, 22winph receives confirmation data from the payment processor — typically a reference number, amount, and timestamp — rather than full payment credentials. Full card numbers, GCash PINs, or bank login details are never visible to or stored by 22winph.
Transaction records — including amounts, dates, and payment channel references — are retained by 22winph for the periods required by applicable AML law and tax regulation. These records may be reviewed during account verification or in response to a regulatory inquiry.
All deposits and withdrawals on the 22winph platform must be made through a payment method held in your own name. Transactions involving third-party payment sources may be held pending investigation and the associated withdrawal request declined until the source of funds is satisfactorily established.
Section 7
Data Sharing
22winph shares personal data only where necessary and with parties bound by appropriate data protection obligations. The following categories of recipients may receive your personal data:
- Payment processors: GCash, Maya, GrabPay, Coins.ph, banks, and card network processors — for the purpose of processing your PHP deposits and withdrawals.
- KYC and identity verification providers: Third-party services used to verify your identity and age during account registration or withdrawal review.
- Fraud and AML screening partners: Services used to screen transactions and account behaviour against fraud and money laundering risk indicators.
- Platform technology providers: Hosting, cloud infrastructure, and customer support system providers who process data on behalf of 22winph under data processing agreements.
- Regulatory and law enforcement bodies: Government agencies, regulators, or courts in the Philippines or applicable jurisdictions — where 22winph is legally required to disclose data.
- Professional advisers: Legal, audit, or compliance advisers bound by professional confidentiality obligations where necessary in specific circumstances.
22winph does not share your personal data with advertising networks, data brokers, or any party whose primary purpose is to use your data for commercial profiling unrelated to your 22winph account.
Section 8
International Data Transfers
Some of the third-party service providers used by 22winph — including cloud hosting infrastructure, fraud screening, and KYC verification providers — may be located outside the Philippines. Where personal data is transferred outside the Philippines, 22winph ensures that appropriate safeguards are in place consistent with the requirements of the Philippine Data Privacy Act.
These safeguards may include contractual clauses that require the recipient to protect your personal data to a standard equivalent to that applicable in the Philippines, or reliance on the recipient's participation in a recognised data protection framework.
If you have questions about where your data is processed or the safeguards applicable to a specific transfer, please contact 22winph at support@22winph.best using the subject line "Data Transfer Enquiry."
Section 9
Data Retention
22winph retains personal data for as long as it is needed for the purposes described in this Privacy Policy and for any legally mandated minimum retention period. The following general retention periods apply:
- Account data: Retained for the duration of your active 22winph account plus a minimum of five years after account closure, consistent with AML record-keeping requirements applicable to the platform's operating jurisdiction.
- Transaction records: Retained for a minimum of five years from the date of the transaction, as required by applicable financial regulation.
- KYC and identity verification documents: Retained for the period required by the platform's AML compliance obligations — typically five years from the end of the customer relationship.
- Customer support records: Retained for three years from the date of the last interaction, unless a longer period is required by a specific regulatory or legal obligation arising from the support interaction.
- Marketing consent records: Retained for as long as the consent remains active and for a reasonable period after withdrawal, to demonstrate compliance with consent requirements.
- Technical and log data: Retained for up to twelve months in active logs, with anonymised aggregate data retained for longer periods for platform analytics.
When retention periods expire and there is no legal basis to continue holding the data, 22winph deletes or anonymises it in a manner that prevents recovery and re-identification.
Section 10
Security
22winph implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
- Encryption of personal data in transit using industry-standard protocols (HTTPS/TLS).
- Encryption of sensitive data at rest in databases and storage systems.
- Access controls limiting visibility of personal data to staff with a documented need for that access in the performance of their role.
- Regular security assessments and vulnerability reviews of the 22winph platform and its supporting infrastructure.
- Incident response procedures that activate when a potential data breach is identified, including notification obligations consistent with applicable law.
No platform connected to the internet can guarantee absolute security. 22winph takes reasonable and appropriate steps to protect your data, but players also have a responsibility to maintain the security of their own account credentials. Never share your 22winph password with anyone and contact support immediately if you suspect unauthorised access to your account.
In the event of a data security incident that affects your rights and freedoms, 22winph will notify affected players and the relevant data protection authority in accordance with its legal obligations and the timeframes required by applicable law.
Section 11
Cookies and Tracking Technologies
22winph uses cookies and similar tracking technologies on the platform. Cookies are small text files placed on your device when you visit the site. They serve a number of functions that are important to the 22winph user experience and to the platform's security obligations.
The categories of cookies used by 22winph include:
- Essential cookies: Required for the platform to function. These include session management cookies that keep you logged in during a gaming session and security tokens that protect against cross-site request forgery. These cannot be disabled without breaking core platform functionality.
- Functional cookies: Remember your preferences — such as language settings and display preferences — between visits so you do not have to reconfigure them each time.
- Analytics cookies: Collect anonymised data about how players navigate the 22winph platform, which pages are visited, and how long sessions last. This data helps 22winph improve the platform. Analytics cookies do not identify individual players.
- Security cookies: Used to detect unusual login patterns and protect accounts from credential-based attacks.
Most browsers allow you to control cookie acceptance through their settings. Disabling essential cookies will affect your ability to use the 22winph platform normally. Disabling analytics or functional cookies will not prevent you from betting or playing, but may affect your experience.
Section 12
Your Rights as a Data Subject
Under the Philippine Data Privacy Act and other applicable data protection law, you have the following rights regarding your personal data held by 22winph: