2phcom Privacy Policy

1. Overview & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by 2phcom (hereinafter "2phcom," "the Platform," "we," "us," or "our") in connection with the operation of the online gaming platform accessible at https://2phcom.cam and any associated mobile applications, subdomains, or digital services offered under the 2phcom brand.

2phcom is committed to protecting the privacy of all registered players and visitors in full compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC). We are also guided by PAGCOR's data handling requirements as a condition of our operating license.

By registering an account, accessing the 2phcom platform, or using any of our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue your use of 2phcom immediately and contact us to request account closure.

2. Data Controller

The data controller responsible for your personal data is 2phcom, the operator of the online gaming platform at https://2phcom.cam, duly licensed by the Philippine Amusement and Gaming Corporation (PAGCOR). As data controller, 2phcom determines the purposes and means of processing your personal information and is responsible for ensuring that processing activities comply with applicable Philippine data privacy laws.

For all privacy-related inquiries, data subject requests, and complaints, please contact our Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

2phcom collects the following categories of personal data in connection with account registration, gameplay, financial transactions, and customer support interactions:

3.1 Identity and Registration Data

• Full legal name as it appears on a government-issued Philippine identification document
• Date of birth (for age verification — players must be 21 years of age or older)
• Gender
• Nationality
• Government-issued ID type and number (e.g., Philippine passport, driver's license, SSS ID, UMID, PhilSys ID)
• Profile username and encrypted password

3.2 Contact Data

• Residential or correspondence address (including barangay, city/municipality, province, and postal code)
• Valid email address
• Mobile phone number (Philippine mobile number preferred)

3.3 Financial and Transaction Data

• GCash or PayMaya account details (mobile number linked to e-wallet)
• Bank account name, account number, and bank name for bank transfer withdrawals (BPI, BDO, Metrobank, UnionBank, and other Philippine banks)
• Deposit and withdrawal history including amounts in Philippine Peso (PHP), timestamps, and payment method used
• Source of funds documentation where required by PAGCOR anti-money laundering regulations

3.4 Gaming Activity Data

• Game session history, wager amounts, wins, and losses
• Game type preferences (slots, live dealer, bingo, sports betting, sabong)
• Bonus and promotion usage history
• Responsible gaming settings and limit configurations

3.5 Technical and Device Data

• IP address and approximate geographic location at time of login
• Device type, operating system, and browser information
• Session duration and login timestamps
• Cookie and tracking data (see Section 10)

3.6 Communications Data

• Records of live chat and email communications with 2phcom customer support
• Feedback, complaints, and dispute records
• Marketing communication preferences and opt-in/opt-out records

4. How We Collect Personal Data

2phcom collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, participate in promotions, contact customer support, or update your account preferences.
• Automatically through the Platform: Technical data including IP addresses, device information, and session data is collected automatically when you access or use the 2phcom platform, via server logs, cookies, and similar tracking technologies.
• From third-party identity verification providers: 2phcom may use third-party KYC and identity verification services to validate the accuracy of identity documents and confirm age eligibility in compliance with PAGCOR requirements.
• From payment processors: Transaction confirmation data is received from GCash, PayMaya, and participating Philippine banks to verify deposit and withdrawal status.
• From PAGCOR and regulatory authorities: In limited circumstances, 2phcom may receive player-related information from PAGCOR, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities in connection with regulatory compliance.

5. Purposes of Processing

2phcom processes your personal data for the following specific, legitimate purposes:

6. Legal Basis for Processing

Under the Philippine Data Privacy Act and applicable NPC regulations, 2phcom relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account management, financial transactions, and game service delivery.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, Anti-Money Laundering Act (Republic Act No. 9160, as amended), National Internal Revenue Code obligations, and National Privacy Commission requirements.
• Legitimate Interests: Processing for fraud detection, platform security, multi-account prevention, and service improvement, where our legitimate business interests do not override your fundamental privacy rights.
• Consent: Processing for marketing communications and optional platform personalization features, where you have given clear, specific, and informed consent. You may withdraw this consent at any time through your account settings or by contacting our support team.

7. Sharing & Disclosure of Personal Data

2phcom does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We disclose personal data only in the following circumstances and only to the extent necessary:

7.1 Service Providers and Processors

We engage carefully selected third-party service providers who process personal data on our behalf under strict data processing agreements, including: KYC identity verification providers, payment processors (GCash, PayMaya, participating Philippine banks), game software providers, IT infrastructure and hosting providers, and customer support platform operators. All such processors are contractually bound to handle your data securely and only for the purposes specified by 2phcom.

7.2 Regulatory and Law Enforcement Authorities

2phcom is required to disclose player data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government authorities when required by law, court order, or lawful regulatory demand. We will, where legally permissible, notify you of such disclosures.

7.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of 2phcom's assets to another entity, your personal data may be transferred as part of that transaction. You will be notified of any such transfer and any material changes to the applicable privacy policy.

8. Data Retention

2phcom retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations. The following general retention periods apply:

• Active account data: Retained for the duration of your active account relationship with 2phcom.
• Closed account data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act (AMLA).
• Financial transaction records: Retained for a minimum of five (5) years in compliance with AMLA requirements and PAGCOR financial record-keeping obligations.
• KYC documentation: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by applicable law.
• Customer support communications: Retained for three (3) years from the date of the interaction, unless a longer retention period is warranted by an ongoing dispute or regulatory inquiry.
• Marketing communication records: Retained until you withdraw consent or opt out, plus a reasonable period sufficient to demonstrate compliance with opt-out requests.

Following the expiry of applicable retention periods, personal data is securely deleted or anonymized so that it can no longer be attributed to an identifiable individual.

9. Data Security

2phcom implements a comprehensive range of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the 2phcom platform.
• PCI-DSS-compliant payment processing — financial credentials are handled exclusively by certified payment processors and are never stored directly on 2phcom servers.
• Bcrypt password hashing — passwords are never stored in plain text; only cryptographic hashes are retained.
• Two-factor authentication (2FA) available for all 2phcom accounts as an additional layer of access security.
• Role-based access controls ensuring that 2phcom staff access only the minimum personal data necessary to perform their functions.
• Regular security audits and penetration testing by qualified cybersecurity professionals.
• Intrusion detection systems and real-time monitoring for suspicious activity across the platform.

While 2phcom employs rigorous security measures, no online platform can guarantee absolute security. In the unlikely event of a personal data breach that is likely to result in harm to data subjects, 2phcom will notify the National Privacy Commission within 72 hours of discovery, and will notify affected data subjects as required by Philippine law.

10. Cookies & Tracking Technologies

2phcom uses cookies and similar tracking technologies to deliver and improve our services, maintain your session, analyze platform usage, and where applicable, support targeted marketing communications. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for core platform functionality including maintaining your login session, processing transactions, and applying security measures. These cannot be disabled without affecting platform functionality.
• Performance and Analytics Cookies: Collect anonymized usage data to help us understand how Filipino players interact with 2phcom, identify performance issues, and prioritize improvements.
• Functional Cookies: Remember your platform preferences including language settings, display options, and responsible gaming configuration.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing communications, where you have consented to receive marketing from 2phcom.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookie categories may affect the functionality of the 2phcom platform. Your device's browser documentation explains how to manage cookie settings for your specific browser.

11. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012 and NPC regulations, you have the following rights with respect to your personal data held by 2phcom. You may exercise any of these rights by contacting our Data Protection Officer as described in Section 15:

2phcom will respond to verified data subject requests within fifteen (15) business days of receipt. In complex cases, we may extend this period by a further thirty (30) business days and will notify you accordingly. We may require identity verification before processing data subject requests to prevent unauthorized disclosure.

12. Children & Minors

The 2phcom platform is strictly intended for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gaming in the Philippines. 2phcom does not knowingly collect, process, or retain personal data from individuals below the age of 21. Age verification is a mandatory step in the 2phcom account registration process.

If 2phcom becomes aware that personal data has been collected from a person below the age of 21 without the verification process having correctly identified their age, we will immediately close the account, void all associated transactions, return any deposits where legally permissible, and delete all associated personal data. Parents or guardians who believe a minor may have created a 2phcom account should contact our support team immediately.

13. International Data Transfers

Some of 2phcom's third-party service providers — including game software providers, cloud infrastructure providers, and analytics platforms — may be located outside of the Philippines. Where personal data is transferred to recipients in countries outside the Philippines, 2phcom ensures that appropriate safeguards are in place to protect your data, including contractual clauses approved by the National Privacy Commission, binding corporate rules, or adequacy determinations where applicable.

All international data transfers undertaken by 2phcom comply with the cross-border data transfer provisions of the Philippine Data Privacy Act and applicable NPC circulars. If you have questions about specific transfer mechanisms used for any particular service provider, please contact our Data Protection Officer.

14. Changes to This Privacy Policy

2phcom reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or NPC guidance. Material changes to this Policy will be communicated to registered players via email notification or a prominent notice on the 2phcom platform prior to the effective date of the amendment, where reasonably practicable.

The "Effective Date" at the top of this page reflects when the current version of this Policy came into force. We encourage you to review this Privacy Policy periodically. Your continued use of the 2phcom platform following the effective date of any amendments constitutes your acceptance of the revised Policy.

15. Contact & Complaints

For all privacy-related inquiries, data subject requests (including access, correction, deletion, and objection requests), or concerns about how 2phcom handles your personal data, please contact our Data Protection Officer:

If you are not satisfied with 2phcom's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at https://www.privacy.gov.ph (note: this is an external government website and is referenced here only for your information).