This Privacy Policy describes how 23ph collects, uses, stores, discloses, and protects the personal data of our Members in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Your privacy matters to us — this document explains exactly what we do with your information and your rights as a data subject under Philippine law.
This Privacy Policy applies to all personal data processed by 23ph in connection with the operation of the 23ph Platform at 23ph.asia, including registration, account management, gaming activities, financial transactions, marketing communications, and customer support interactions.
23ph acts as the Personal Information Controller within the meaning of the Philippine Data Privacy Act of 2012 with respect to the personal data of its Members. Where 23ph engages third-party service providers to process personal data on its behalf — including payment processors, identity verification providers, and gaming software suppliers — such providers act as Personal Information Processors under instructions from 23ph and are bound by appropriate data processing agreements.
This Policy should be read in conjunction with the 23ph Terms & Conditions. By registering a 23ph Account or using the Platform, you confirm that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.
When you register a 23ph Account, we collect: your full legal name, date of birth, Philippine mobile number, email address (where provided), and nationality. This data is used to establish and verify your identity as required by PAGCOR regulations and Philippine AML law.
For compliance with Know Your Customer (KYC) requirements under PAGCOR regulations and the Anti-Money Laundering Act (Republic Act No. 9160, as amended), 23ph collects copies of government-issued Philippine identification documents — which may include your Philippine passport, driver's license, PhilSys National ID, SSS, UMID, or PRC ID — along with proof of address documentation where required.
23ph collects details of payment methods linked to your Account, including GCash account numbers, Maya account details, and Philippine bank account numbers (BPI, BDO, Metrobank, and others) used for deposits and withdrawals. Full payment card numbers, if ever applicable, are handled exclusively by PCI-DSS compliant payment processors and are not stored on 23ph systems.
We collect records of all financial transactions (deposits, withdrawals, bonuses) and gaming activity (game sessions, bet amounts, wins, losses, game types played) associated with your 23ph Account. This data is retained for regulatory compliance, dispute resolution, and responsible gaming monitoring purposes.
We automatically collect certain technical data when you access the 23ph Platform, including: IP address, device type and operating system, browser type and version, session timestamps, pages visited, and referring URLs. This data is used for security monitoring, fraud prevention, and Platform optimization.
Records of your communications with 23ph — including live chat transcripts, support ticket records, and any correspondence submitted through the Platform — are retained for quality assurance, dispute resolution, and regulatory compliance purposes.
23ph collects personal data through the following means:
23ph processes your personal data for the following purposes:
23ph processes your personal data on the following legal bases under the Philippine Data Privacy Act:
23ph does not sell, rent, or otherwise commercially transfer your personal data to third parties. We share personal data only in the following circumstances:
We share data with carefully selected third-party service providers who process it on our behalf under contractual obligations consistent with this Privacy Policy, including: payment processors (GCash/Mynt, PayMaya/Voyager Innovations, and Philippine banking partners), KYC verification providers, gaming software suppliers, cloud hosting providers, and customer support platform providers.
23ph is required to disclose Member data to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine regulatory and law enforcement authorities where required by applicable law, court order, or regulatory directive.
In the event of a merger, acquisition, or sale of 23ph's business or assets, Member data may be transferred to the acquiring entity subject to the same privacy protections described in this Policy. Members will be notified of any such transfer.
We may disclose your personal data to third parties with your explicit prior consent for specific purposes not otherwise described in this Policy.
Certain personal data processed by 23ph may be transferred to, stored, or processed in countries outside the Republic of the Philippines — for example, where third-party gaming software providers or cloud infrastructure partners operate servers in other jurisdictions. Where such transfers occur, 23ph ensures that appropriate safeguards are in place consistent with the requirements of the Philippine Data Privacy Act and NPC regulations, including the use of standard contractual clauses or transfer to jurisdictions with adequate data protection standards.
Members who wish to obtain information about the specific safeguards applicable to their personal data in the context of international transfers may contact the 23ph Data Protection Officer.
23ph retains personal data for as long as is necessary to fulfill the purposes for which it was collected and to comply with applicable legal and regulatory obligations. Specific retention periods include:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved disposal procedures.
The 23ph Platform uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you across sessions, maintain your logged-in state, remember your preferences, and analyze Platform usage patterns.
You may manage cookie preferences through your browser settings. Disabling certain cookies may affect Platform functionality, including your ability to maintain a login session.
23ph implements technical and organizational measures appropriate to the sensitivity of the personal data we process and the risks of accidental or unauthorized access, disclosure, alteration, or destruction. Our security measures include:
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 23ph:
To exercise any of these rights, contact the 23ph Data Protection Officer via the support channel. We will respond to verified requests within fifteen (15) business days. Complex or high-volume requests may require up to thirty (30) business days with notification of the extension.
The 23ph Platform is strictly restricted to individuals aged twenty-one (21) years and above. 23ph does not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from a person under 21 years of age, we will promptly delete the Account and all associated personal data and, where required, report the matter to PAGCOR.
Parents or guardians who believe a minor may have registered a 23ph Account should contact our Data Protection Officer immediately to request removal of the Account and deletion of all associated data.
With your consent, 23ph may send you marketing communications regarding promotional offers, bonuses, new game launches, and platform updates via SMS to your registered Philippine mobile number and/or email. Each marketing message will include a clear opt-out mechanism.
You may withdraw your consent to marketing communications at any time by: (a) following the unsubscribe instructions in any marketing message; (b) adjusting your communication preferences in your 23ph Account Settings; or (c) contacting 23ph support directly. Withdrawal of marketing consent does not affect your ability to use the Platform or receive transactional communications related to your Account.
The 23ph Platform may contain links to third-party websites or services — for example, links to PAGCOR's official website for responsible gaming resources. 23ph is not responsible for the privacy practices of third-party websites. We encourage Members to review the privacy policies of any third-party site they visit through links on the 23ph Platform. This Privacy Policy applies exclusively to personal data processed by 23ph in connection with the 23ph Platform.
23ph reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes will be communicated to Members via SMS to their registered Philippine mobile number and a prominent notice on the Platform at least seven (7) days before the updated Policy takes effect.
The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. We encourage Members to review this Policy periodically. Continued use of the 23ph Platform following notification of an amendment constitutes acceptance of the updated Privacy Policy.
For questions about this Privacy Policy, to exercise your data subject rights, or to contact the 23ph Data Protection Officer, please use the following channels:
23ph is PAGCOR-regulated and fully compliant with the Philippine Data Privacy Act. Your personal information is never sold and always protected. Ready to explore the platform?
21+ only · Philippine residents only · PAGCOR-regulated · Play responsibly