Privacy Policy

226phfun ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of all users ("you," "the Player," or "the Data Subject") who access and use the 226phfun online gaming platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data.

This policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It applies to all personal data processed by 226phfun in connection with the operation of the Platform, whether collected online, through customer support interactions, or through any other means.

This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy. By registering an account or using the 226phfun Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

226phfun acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes. Where we engage third-party service providers to process data on our behalf, those providers act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to handle your data in accordance with this policy and applicable law.

226phfun collects the following categories of personal data in connection with the operation of the Platform:

We collect only the personal data that is necessary for the purposes described in this policy. We do not collect sensitive personal information (such as health data, religious beliefs, or political opinions ) unless required for regulatory compliance purposes, in which case we will obtain your explicit consent.

226phfun collects personal data through the following means:

• Direct Interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies. See Section 7 for more detail on our use of cookies.
• Third-Party Sources: Identity and fraud-check data received from KYC verification providers, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), and fraud prevention services. We may also receive data from publicly available sources where permitted by law.
• Regulatory Sources: Information received from Philippine regulatory authorities, law enforcement agencies, or other government bodies in connection with our legal compliance obligations.

226phfun uses your personal data for the following purposes:

• Account Management: To register and maintain your player account, verify your identity and age (21+ requirement), and manage your account settings and preferences.
• Service Delivery: To provide access to games, process deposits and withdrawals, administer bonuses and promotions, and deliver customer support.
• Legal and Regulatory Compliance: To comply with our obligations under the Philippine Data Privacy Act, anti-money laundering (AML) regulations, applicable gaming regulations, and any other legal requirements. This includes reporting obligations to Philippine regulatory authorities.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the Platform.
• Responsible Gaming: To monitor gaming behaviour, identify players who may be at risk of problem gambling, and administer responsible gaming tools such as deposit limits and self-exclusion.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the 226phfun Platform.
• Marketing Communications: To send you promotional offers, newsletters, and updates about 226phfun products and services, where you have consented to receive such communications. You may opt out at any time by contacting our support team.
• Dispute Resolution: To investigate and resolve complaints, disputes, and legal claims involving your account or use of the Platform.

Under the Philippine Data Privacy Act of 2012, 226phfun processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — namely, to operate your player account and deliver the services described in our Terms & Conditions.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including AML obligations, gaming regulations, and tax reporting requirements.
• Legitimate Interests: Processing necessary for our legitimate business interests, including fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — for example, for marketing communications or the processing of sensitive personal information. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

226phfun does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• KYC and Identity Verification Providers: Third-party services that assist us in verifying your identity and age in compliance with regulatory requirements.
• Fraud Prevention and AML Services: Providers that help us detect and prevent fraudulent activity and money laundering on the Platform.
• IT and Platform Service Providers: Cloud hosting, data storage, analytics, and customer support technology providers who process data on our behalf under binding data processing agreements.
• Regulatory and Law Enforcement Authorities: Philippine gaming regulators, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), law enforcement agencies, and courts, where we are required by law to disclose your data or where disclosure is necessary to protect our legal rights.
• Professional Advisers: Lawyers, auditors, and other professional advisers where necessary for the conduct of our business, subject to confidentiality obligations.

All third-party service providers who process personal data on behalf of 226phfun are required to implement appropriate technical and organisational security measures and to process data only in accordance with our instructions and applicable law.

226phfun uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support security and fraud prevention functions. The following types of cookies may be used:

• Strictly Necessary Cookies: Essential for the Platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game preferences, and display options to personalise your experience.
• Analytics Cookies: Collect anonymised data about how players use the Platform, which pages are visited most frequently, and where errors occur. This data helps us improve the Platform.
• Security and Fraud Prevention Cookies: Help us identify suspicious activity, detect bots, and protect the integrity of the Platform and your account.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary cookies cannot be disabled as they are essential to the operation of the service.

226phfun retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general guide, the following retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and applicable gaming regulations.
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Customer Support Records: Retained for three (3) years from the date of the interaction, or longer if the matter is subject to ongoing dispute or legal proceedings.
• Marketing Consent Records: Retained until you withdraw your consent, plus a reasonable period thereafter to demonstrate compliance.

When personal data is no longer required, 226phfun will securely delete or anonymise it in accordance with our data disposal procedures.

226phfun implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that only authorised personnel with a legitimate business need can access personal data.
• Regular security audits, vulnerability assessments, and penetration testing of our systems.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

While 226phfun takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You also play an important role in keeping your account secure — please use a strong, unique password and never share your login credentials with anyone.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by 226phfun:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data we hold about you, along with information about how it is being used.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 226phfun has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to all verified requests within thirty (30) days, or within such other timeframe as required by applicable law.

The 226phfun Platform is strictly intended for adults aged 21 years and older. 226phfun does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the account registration and KYC process.

If we become aware that personal data has been collected from a person under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered an account on the Platform, please contact our support team immediately.

226phfun primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud hosting providers, game software providers, and analytics platforms — may process data in other countries.

Where personal data is transferred outside the Philippines, 226phfun ensures that appropriate safeguards are in place to protect your data, including:

• Transferring data only to countries or organisations that provide an adequate level of data protection as determined by the NPC.
• Implementing standard contractual clauses or binding corporate rules with recipient organisations.
• Obtaining your explicit consent for the transfer where required by applicable law.

By using the 226phfun Platform, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

226phfun reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed of how 226phfun protects your personal data. Your continued use of the Platform following the posting of any changes constitutes your acceptance of the revised policy.

226phfun has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 directly on the Platform
• Response Time: We aim to respond to all data privacy inquiries within 30 days

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available through official Philippine government channels.