pg22 Privacy
Policy

1. Introduction

pg22 is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA"), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission of the Philippines.

This Policy applies to all personal data collected from registered players, visitors to the pg22 website, and any other individuals whose data is processed in connection with pg22's operations. It covers data collected through the pg22 website at https://pg22.cam, any associated mobile interfaces, and interactions with pg22 customer support channels.

As a PAGCOR-regulated online gaming platform serving Filipino players, pg22 is also subject to data processing requirements imposed by PAGCOR as a condition of its operating license. Compliance with those requirements may create additional obligations around data collection, retention, and disclosure that are incorporated into this Policy.

2. Data Controller Information

The data controller responsible for personal data processed through the pg22 platform is the entity operating pg22 under PAGCOR's regulatory framework. For all data privacy inquiries, requests, and complaints, the designated Data Protection Officer (DPO) of pg22 may be contacted as follows:

• Platform: pg22 (https://pg22.cam)
• Data Protection Officer contact: [email protected]
• Subject line for DPO matters: "DATA PRIVACY REQUEST – [your registered mobile number]"
• Response time: Within 15 business days of receipt of a verified request

pg22 has registered as a personal information controller with the National Privacy Commission of the Philippines as required under RA 10173 and its Implementing Rules.

3. Personal Data We Collect

pg22 collects the following categories of personal data in connection with your use of the platform:

pg22 does not collect sensitive personal information beyond what is necessary for identity verification purposes. Specifically, pg22 does not collect racial or ethnic origin, political opinion, religious beliefs, or health data except where health or mental wellbeing information is voluntarily disclosed in the context of a responsible gaming request.

4. How We Collect Your Data

pg22 collects personal data through the following channels:

4.1 Direct Collection

Data you provide directly when: registering an account; completing KYC identity verification; making a deposit or requesting a withdrawal; contacting customer support; participating in promotions or surveys; or setting responsible gaming preferences.

4.2 Automated Collection

Data collected automatically during platform use, including: IP address and geolocation data; device and browser information captured through standard server logs; session activity and game interaction data captured through our platform backend; and cookies and similar tracking technologies (see Section 11).

4.3 Third-Party Sources

pg22 may receive data about you from: KYC and identity verification service providers; payment processors including GCash, PayMaya, BPI, and BDO for transaction confirmation; fraud prevention and anti-money laundering (AML) screening services; and PAGCOR's player registration systems where applicable under regulatory requirements.

5. How We Use Your Personal Data

pg22 uses the personal data it collects for the following specific purposes:

• Account creation and management: To register your account, verify your identity, maintain your account balance, and process your gaming activity.
• Age and identity verification: To verify that you are 21 years of age or older, as required by PAGCOR regulations and the terms of pg22's operating license.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, and other accepted Philippine payment methods, and to maintain accurate financial records.
• Regulatory compliance: To fulfil reporting obligations to PAGCOR, comply with the Anti-Money Laundering Act (AMLA) of the Philippines, and respond to lawful requests from Philippine government authorities.
• Responsible gaming: To monitor gaming activity for signs of problem gambling, administer self-exclusion requests, apply deposit and loss limits, and send responsible gaming communications.
• Fraud and AML screening: To detect, prevent, and investigate unauthorized access, fraudulent transactions, and money laundering activity.
• Customer support: To respond to your inquiries, resolve complaints, and maintain records of support interactions.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw consent at any time.
• Platform improvement: To analyze aggregate usage patterns, improve the game lobby, and optimize platform performance — using anonymized or pseudonymized data where possible.

6. Legal Basis for Processing

Under RA 10173 and its Implementing Rules, pg22 processes your personal data on the following legal grounds:

• Consent: Where you have given explicit consent, including for marketing communications, optional analytics, and disclosure in situations not covered by other grounds. You may withdraw consent at any time.
• Contractual necessity: Where processing is necessary to perform the contract between you and pg22 — specifically, to operate your account, process your bets and payouts, and provide the gaming services you have signed up for.
• Legal obligation: Where processing is required to comply with Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act itself, and applicable tax and financial reporting requirements.
• Legitimate interests: Where processing is necessary for pg22's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement — provided those interests are not overridden by your rights and freedoms.

7. Sharing Your Personal Data

pg22 does not sell, rent, or trade your personal data. We share personal data with third parties only in the following circumstances and only to the extent necessary:

7.1 Service Providers

pg22 engages the following categories of service providers who process personal data on our behalf under strict data processing agreements:

• KYC and identity verification providers — to verify your age and identity at registration and for ongoing compliance.
• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard for deposit and withdrawal processing.
• Game content providers — Ezugi Live and slot game studios receive game session data necessary to operate their respective game products.
• AML and fraud screening providers — to screen transactions against sanctions lists and fraud databases as required under Philippine AML regulations.
• Cloud and hosting infrastructure providers — for secure data storage and platform hosting.

7.2 Regulatory Authorities

pg22 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government bodies where required by applicable law, court order, or regulatory direction.

7.3 Business Transfers

In the event of a merger, acquisition, or transfer of pg22's business or assets, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the applicable privacy policy of the new entity in advance.

8. International Data Transfers

Some of pg22's service providers, including certain game content providers and cloud infrastructure partners, may process personal data outside the Philippines. Where such transfers occur, pg22 ensures that adequate safeguards are in place in accordance with NPC guidelines, including standard contractual clauses or equivalent data transfer agreements that provide protections equivalent to those under RA 10173.

pg22 does not transfer personal data internationally for any purpose beyond those described in this Policy, and all international transfers are subject to the same purpose limitation and security requirements that apply to data processed within the Philippines.

9. Data Retention

pg22 retains personal data for as long as your account is active and for a period thereafter as required by applicable law and PAGCOR's regulatory requirements. Specific retention periods are as follows:

When the applicable retention period expires and no legal obligation requires continued storage, pg22 will securely delete or anonymize your personal data in accordance with NPC-approved data disposal procedures.

10. Security Measures

pg22 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and pg22's servers;
• Encryption of sensitive data at rest, including KYC documents and payment information;
• Strict access controls limiting personal data access to authorized personnel with a legitimate business need;
• Two-factor authentication (2FA) requirements for administrative access to systems holding personal data;
• Regular security audits and penetration testing of the pg22 platform;
• Staff training on data protection obligations and security protocols;
• Incident response procedures aligned with RA 10173's data breach notification requirements.

In the event of a personal data breach that is likely to result in harm to affected individuals, pg22 will notify the National Privacy Commission within 72 hours of discovery and will notify affected data subjects without undue delay, in accordance with RA 10173's breach notification obligations.

11. Cookies & Tracking Technologies

pg22 uses cookies and similar technologies on the platform to support core functionality, improve user experience, and fulfil security and analytics purposes. The following categories of cookies are used:

11.1 Strictly Necessary Cookies

These cookies are essential for the pg22 platform to function and cannot be disabled. They include session authentication cookies, security tokens, and cookies that maintain your logged-in state. No consent is required for strictly necessary cookies.

11.2 Functional Cookies

These cookies remember your preferences (such as language settings and game lobby layout) to improve your experience. They do not track your activity across other websites.

11.3 Analytics Cookies

pg22 uses analytics tools to understand how players use the platform — which game categories are most accessed, where navigation drop-offs occur, and how promotional content performs. This data is analyzed in aggregate and pseudonymized form. You may opt out of analytics cookies through your browser settings without affecting platform functionality.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of some platform features. pg22 does not use advertising or cross-site tracking cookies.

12. Your Data Rights

Under the Philippine Data Privacy Act (RA 10173), you have the following rights as a data subject. These rights may be exercised by contacting pg22's Data Protection Officer at [email protected] with subject line "DATA PRIVACY REQUEST":

pg22 will respond to all verified data rights requests within 15 business days. Some requests may be subject to identity verification before processing. Certain rights may be limited where legal obligations require continued processing.

13. Children's Privacy

14. Changes to This Privacy Policy

pg22 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — such as changes to the categories of data collected, the purposes of processing, or third parties with whom data is shared — pg22 will provide advance notice through the platform, via email to your registered address, or by prominent display on the pg22 website.

The effective date of the current version is displayed at the top of this page. Your continued use of the pg22 platform after the effective date of any revised policy constitutes your acceptance of the updated terms. If you do not agree with the revised policy, you must cease using the platform and may request account closure.

For minor changes — such as corrections to formatting, clarifications of existing practices, or updates to contact information — pg22 may update the policy without prior notice, with the change reflected immediately on publication.

15. Contact the Data Protection Officer

For all data privacy inquiries, requests to exercise your data rights, concerns about data handling practices, or to report a suspected data privacy incident involving your pg22 account, please contact pg22's designated Data Protection Officer:

• Email: [email protected]
• Subject line: "DATA PRIVACY REQUEST – [your registered mobile number]"
• Live Chat: Available 24/7 via the support icon on the pg22 platform
• Languages: English and Filipino (Tagalog)
• Response time: Within 15 business days for formal data rights requests

If you are not satisfied with pg22's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines, which is the independent government body responsible for enforcing RA 10173.