2ph85 Privacy Policy – How We Protect Your Personal Data

1 Who We Are — The Data Controller

2ph85 is the data controller responsible for the personal information collected through the website https://2ph85.click and all associated platform features. 2ph85 operates under a Philippine Amusement and Gaming Corporation (PAGCOR) authorization and is fully subject to the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

As data controller, 2ph85 determines the purposes and means of processing your personal data. We have appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act and handling data subject requests. Contact details for the DPO are provided in Section 14 of this policy.

This Privacy Policy applies to all personal data collected through the 2ph85 platform — including the website, any associated applications, customer support interactions, and marketing communications.

2 Personal Data We Collect

The table below lists the categories of personal data that 2ph85 may collect, along with examples within each category:

2ph85 does not intentionally collect sensitive personal information beyond what is required for identity verification and AML compliance. We do not collect data related to religion, political affiliation, health records, or sexual orientation.

3 How We Collect Your Data

2ph85 collects personal data through the following means:

• Direct Collection: When you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account profile — you provide data to us directly.
• Automated Collection: When you access and use the 2ph85 platform, technical data (IP address, device information, session data) is automatically collected by our systems for security, fraud prevention, and platform optimization purposes.
• Third-Party Payment Providers: When you process a deposit or withdrawal through GCash, Maya, or a bank, transaction confirmation data is received by 2ph85 from the payment provider to verify and record the transaction.
• Identity Verification Services: 2ph85 may use third-party KYC service providers to verify your identity documents. These providers process your ID data on 2ph85's behalf under strict data processing agreements.
• Cookies and Tracking Technologies: As described in Section 8, 2ph85 uses cookies and similar technologies to collect usage and session data when you browse the platform. See Section 8 for full details and opt-out options.

4 Why We Use Your Personal Data

2ph85 uses your personal data for the following specific purposes:

• Account Registration & Management: To create and maintain your 2ph85 account, verify your identity, and manage your profile settings.
• Processing Transactions: To process deposits, withdrawals, and bet settlements accurately and securely in Philippine Pesos.
• Regulatory Compliance: To comply with PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and Know Your Customer (KYC) obligations. This includes filing mandatory reports with the Anti-Money Laundering Council (AMLC) where required.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, collusion, and other prohibited activities on the platform.
• Responsible Gaming Monitoring: To monitor gaming behavior patterns for indicators of problem gambling and provide appropriate interventions, limit tools, or support referrals as required under PAGCOR responsible gaming guidelines.
• Customer Support: To respond to your inquiries, resolve complaints, and provide assistance with account or payment issues.
• Platform Improvement: To analyze how players use 2ph85 features, identify areas for improvement, and optimize game availability and user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest. You can opt out at any time (see Section 12).
• Legal Proceedings: To establish, exercise, or defend legal claims involving 2ph85 and/or its players where necessary.

2ph85 will not use your personal data for any purpose not listed above without first obtaining your explicit consent or having a clear legal basis to do so.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, 2ph85 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to perform the contract between you and 2ph85 — including account creation, transaction processing, and game access.
• Legal Obligation: Processing required to comply with Philippine law — including PAGCOR requirements, AML obligations, tax reporting, and AMLC reporting.
• Legitimate Interests: Processing for 2ph85's legitimate business interests — including fraud prevention, platform security, and responsible gaming monitoring — where these interests are not outweighed by your privacy rights.
• Consent: Processing for marketing communications and optional analytics features, where you have given explicit, freely-given, specific consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6 Who We Share Your Data With

2ph85 does not sell your personal data. We share data only in the following circumstances, and only to the extent necessary for the stated purpose:

• Philippine Regulatory Authorities: PAGCOR (gaming regulator), AMLC (anti-money laundering), BIR (tax authority), and other government bodies as required by law. These disclosures are mandatory and not subject to player consent.
• Payment Service Providers: GCash, Maya, BDO, BPI, UnionBank, GrabPay, Coins.ph, Visa, and Mastercard — for the purpose of processing deposits and withdrawals. These providers receive only the minimum data required to complete transactions.
• Identity Verification Partners: Third-party KYC providers who verify government ID documents and perform liveness checks on 2ph85's behalf. These providers operate under data processing agreements and are prohibited from using your data for any other purpose.
• Game Providers: Licensed gaming studios (including JDB, Jili Games, PG Soft, Evolution, and others) may receive your player ID (not your personal identity) for the purpose of game session management, RTP reporting, and dispute resolution.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on 2ph85's behalf under strict data processing agreements.
• Legal & Professional Advisors: Lawyers, accountants, and other professional advisors who provide services to 2ph85 under confidentiality obligations.
• Law Enforcement: Philippine law enforcement agencies when legally required by court order, warrant, or other lawful process.

7 Data Retention

2ph85 retains your personal data only for as long as necessary for the purpose it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your active account and for 5 years following account closure, as required by PAGCOR and AML regulations.
• Transaction Records: Retained for a minimum of 5 years from the date of each transaction, in line with AMLA requirements.
• Identity Verification Documents: Retained for the duration of your account and for 5 years post-closure. High-risk account KYC documents may be retained for up to 10 years as required by AML compliance.
• Customer Support Communications: Retained for 2 years from the date of last communication.
• Marketing Consent Records: Retained for 3 years from the date consent was given or until consent is withdrawn, whichever is earlier.
• Security & Fraud Logs: Retained for 2 years from the date of the relevant event or investigation.

When data is no longer required, 2ph85 securely destroys it using industry-standard data deletion methods. Aggregated and fully anonymized data (which cannot be linked back to any individual) may be retained indefinitely for statistical and platform improvement purposes.

8 Cookies & Tracking Technologies

2ph85 uses cookies and similar tracking technologies on its platform. A cookie is a small text file stored on your device when you visit a website. 2ph85 uses the following categories of cookies:

• Essential Cookies: Required for the platform to function — these include session cookies that keep you logged in, security tokens, and load-balancing cookies. These cannot be disabled without breaking core platform functionality.
• Analytics Cookies: Used to understand how players navigate and use the 2ph85 platform — such as which pages are visited most, how long players spend on each section, and where navigation friction occurs. This data is aggregated and used to improve the platform. You may opt out of analytics cookies through your browser settings.
• Fraud Prevention Cookies: Used by our security systems to identify anomalous access patterns and suspicious behavior. These are essential for platform integrity and cannot be disabled.
• Preference Cookies: Used to remember your language, display, and notification preferences so you don't have to reset them each visit.

2ph85 does not use third-party advertising or behavioral tracking cookies. You can manage cookie preferences through your browser settings at any time. Note that disabling essential cookies will affect platform functionality.

9 How We Protect Your Data

2ph85 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and 2ph85 servers uses TLS 1.2+ (256-bit SSL). You can verify this by checking for the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive stored data — including payment details, government ID references, and identity verification records — is encrypted at rest using AES-256 encryption.
• Password Security: 2ph85 never stores your plain-text password. Passwords are hashed using a modern cryptographic hashing algorithm with individual salts before storage.
• Access Controls: Internal access to personal data is restricted based on role and the minimum data required for each role's function. All internal data access is logged.
• Infrastructure Security: 2ph85 platform servers are hosted in secure, access-controlled data centers with physical security measures, network firewalls, intrusion detection systems, and regular vulnerability scanning.
• Incident Response: 2ph85 maintains a documented data breach response plan. In the event of a data breach affecting your personal data, 2ph85 will notify affected players and the National Privacy Commission within the timeframes required by the Data Privacy Act.

No security system is impenetrable. While 2ph85 takes every reasonable measure to protect your data, we cannot guarantee absolute security. You also play a role in keeping your account secure — see your account settings for tips on using strong passwords and enabling two-factor authentication.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by 2ph85. These rights may be exercised by contacting our Data Protection Officer (see Section 14):

To exercise any of the above rights, please submit a written request to the 2ph85 Data Protection Officer at privacy@2ph85.click or through the live chat support function. We will verify your identity before processing any data subject request and will respond within 15 business days.

11 Children's Privacy

The 2ph85 platform is strictly for adults aged 21 years and above. 2ph85 does not knowingly collect personal data from any person under 21 years of age. If we become aware that personal data has been collected from a minor, the associated account will be immediately closed and the data deleted to the extent permitted by law.

If you are a parent or guardian and believe your child has registered an account on 2ph85, please contact us immediately at support@2ph85.click. We will investigate and take appropriate action within 24 hours.

12 Marketing Communications

2ph85 may send you promotional communications — including bonus offers, game announcements, and platform updates — through the following channels: SMS to your registered mobile number, email to your registered address, and in-platform notifications.

Marketing communications from 2ph85 are sent only where:

• You have explicitly opted in to marketing communications during registration or through your account settings, or
• You are an existing 2ph85 player and the communication relates to similar services you have already used (legitimate interest basis), provided you have not opted out.

How to opt out: You can unsubscribe from 2ph85 marketing communications at any time by:

• Clicking the "Unsubscribe" link in any 2ph85 marketing email
• Updating your communication preferences in your 2ph85 account settings under "Notifications"
• Contacting 2ph85 customer support through live chat and requesting removal from marketing lists

Opting out of marketing communications does not affect transactional communications — you will still receive account security alerts, withdrawal confirmations, and other essential account notifications regardless of your marketing preferences.

13 Changes to This Privacy Policy

2ph85 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable Philippine law. When material changes are made:

• The "Last Updated" date at the top of this page will be revised.
• A notification will be displayed on the 2ph85 platform to all logged-in players.
• For significant changes affecting your rights, an email notification will be sent to your registered address where possible.

Your continued use of 2ph85 following the posting of an updated Privacy Policy constitutes your acceptance of the changes. If you do not agree with any changes, you should stop using the platform and may request account closure and deletion of your personal data (subject to legal retention requirements).

We recommend reviewing this Privacy Policy periodically. Previous versions of this policy are available upon request from the Data Protection Officer.

14 Contact Us & Data Protection Officer

For all data privacy-related inquiries, requests to exercise your rights, or to report a suspected data privacy issue, please contact the 2ph85 Data Protection Officer (DPO):