Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how 2026ph ("we," "us," "our," or "the Company"), a Philippine-based online gaming platform operating under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR), collects, processes, uses, shares, and protects the personal information of our users ("you," "your," "User," or "Player"). This Policy applies to all personal data collected through our website at https://2026ph.cam, mobile applications, customer support channels, and any other services we provide (collectively, the "Platform").

By registering an account, accessing the 2026ph Platform, or using any of our services, you acknowledge that you have read, understood, and consent to the collection and processing of your personal information as described in this Privacy Policy. If you do not agree with any provision of this Policy, you must immediately cease using the Platform and refrain from providing any personal information.

We are committed to transparency in our data practices and compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all circulars, advisories, and orders issued by the National Privacy Commission (NPC). This Policy is designed to inform you of your rights as a data subject and our obligations as a personal information controller.

2. Personal Information We Collect

2.1 Information You Provide Directly

When you register for a 2026ph account or use our services, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, place of birth, nationality, gender, and government-issued identification numbers (passport number, driver's license number, PhilSys ID number, or other valid Philippine ID)
• Contact Information: Email address, mobile phone number, residential address, postal code, and billing address
• Account Credentials: Username, password, security questions and answers, two-factor authentication settings, and PIN codes
• Financial Information: Bank account details, e-wallet account numbers (GCash, PayMaya), payment card information (card number, expiration date, CVV), cryptocurrency wallet addresses, transaction history, deposit and withdrawal records, and payment method verification documents
• Identification Documents: Copies of government-issued IDs, proof of address documents (utility bills, bank statements), selfies or photographs for identity verification, and source of funds documentation
• Communication Data: Messages, emails, chat transcripts, phone call recordings, and any other communications with our customer support team or other users (where applicable)
• Marketing Preferences: Your consent to receive promotional emails, SMS messages, push notifications, and other marketing communications

2.2 Information Collected Automatically

When you access or use the 2026ph Platform, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system and version, browser type and version, device identifiers (IMEI, MAC address, advertising ID), screen resolution, and device settings
• Connection Data: IP address, internet service provider (ISP), connection type, network information, and approximate geographic location based on IP address
• Usage Data: Pages visited, features used, games played, bet amounts, win/loss records, session duration, clickstream data, referral sources, search queries, and interaction patterns
• Cookies and Tracking Technologies: We use cookies, web beacons, pixel tags, local storage, and similar technologies to collect information about your browsing behavior, preferences, and interactions with the Platform. For more information, please see Section 8 (Cookies and Tracking Technologies).

2.3 Information from Third Parties

We may receive personal information about you from third-party sources, including:

• Payment Processors and Financial Institutions: Transaction verification, payment authentication, fraud detection alerts, and account status information
• Identity Verification Services: Age verification results, document authentication reports, biometric verification data, and identity fraud risk assessments
• Game Providers: Gameplay statistics, bonus redemption data, and game-specific user behavior
• Affiliate Partners and Marketing Services: Referral information, campaign tracking data, and marketing performance metrics
• Social Media Platforms: If you choose to link your 2026ph account with social media accounts, we may receive profile information, contact lists (with your consent), and activity data from those platforms
• Publicly Available Sources: Information from public records, sanctions lists, politically exposed persons (PEP) databases, and adverse media screening for anti-money laundering (AML) and compliance purposes

3. How We Use Your Personal Information

3.1 Legal Basis for Processing

Under the Data Privacy Act of 2012, we process your personal information based on one or more of the following lawful grounds:

• Consent: You have given explicit consent for us to process your personal data for specific purposes
• Contract Performance: Processing is necessary to fulfill our contractual obligations to you (account registration, gameplay, payment processing)
• Legal Obligation: We are required by law to process your data (age verification, AML/CTF compliance, tax reporting, regulatory audits)
• Legitimate Interests: Processing is necessary for our legitimate business interests, provided such interests are not overridden by your privacy rights (fraud prevention, service improvement, security monitoring)

3.2 Purposes of Data Processing

We use your personal information for the following purposes:

• Account Management: Creating, maintaining, and managing your 2026ph account; authenticating your identity; processing account updates; and handling account closure requests
• Service Provision: Enabling gameplay across all gaming products (slots, live casino, sports betting, bingo, etc.); processing bets and wagers; calculating and crediting winnings; managing bonuses and promotions; and providing customer support
• Payment Processing: Processing deposits and withdrawals; verifying payment methods; detecting and preventing payment fraud; reconciling financial transactions; and generating transaction records
• Compliance and Legal Obligations: Verifying age and identity (21+ requirement); conducting Know Your Customer (KYC) and Customer Due Diligence (CDD) checks; monitoring and reporting suspicious transactions (Anti-Money Laundering Act compliance); complying with PAGCOR regulations; responding to law enforcement requests; maintaining audit trails; and enforcing our Terms & Conditions
• Security and Fraud Prevention: Detecting and preventing fraudulent activities, account takeovers, bonus abuse, collusion, and other violations; monitoring for unusual betting patterns; protecting against unauthorized access; and conducting security audits
• Responsible Gaming: Monitoring gameplay patterns for signs of problem gambling; implementing deposit limits, loss limits, and self-exclusion measures; providing reality checks and session reminders; and offering access to responsible gaming resources
• Communication: Sending transactional emails (account confirmations, withdrawal notifications, security alerts); providing customer support responses; sending promotional communications (with your consent); and conducting user surveys
• Service Improvement and Analytics: Analyzing user behavior to improve platform functionality; optimizing game offerings; personalizing user experience; conducting market research; and developing new features and services
• Marketing and Advertising: Delivering targeted advertisements and promotions; measuring marketing campaign effectiveness; sending personalized offers (with your consent); and managing affiliate partnerships

4. How We Share Your Personal Information

4.1 Third-Party Service Providers

We share your personal information with trusted third-party service providers who assist us in operating the 2026ph Platform and providing our services. These service providers are contractually obligated to protect your data and use it only for the purposes we specify. Categories of third-party service providers include:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment gateways that process your deposits and withdrawals
• Identity Verification Services: Third-party KYC/AML providers that verify your identity, age, and address
• Game Providers: Third-party game developers and live casino studios that power our gaming content (Evolution Gaming, Pragmatic Play, etc.)
• Cloud Infrastructure Providers: Hosting services, content delivery networks (CDNs), and data storage providers
• Customer Support Tools: Live chat platforms, helpdesk software, and call center services
• Marketing and Analytics Providers: Email marketing platforms, SMS gateways, analytics tools (Google Analytics), and advertising networks
• Fraud Prevention Services: Risk assessment tools, device fingerprinting services, and fraud detection platforms

4.2 Regulatory and Legal Disclosures

We may disclose your personal information to regulatory authorities, law enforcement agencies, and other government bodies when required by law or when we believe disclosure is necessary to:

• Comply with PAGCOR regulations, audits, and reporting requirements
• Respond to lawful requests, court orders, subpoenas, or legal processes
• Comply with the Anti-Money Laundering Act (AMLA) and Terrorism Financing Prevention Act
• Report suspicious transactions to the Anti-Money Laundering Council (AMLC)
• Cooperate with tax authorities for tax reporting and compliance purposes
• Protect the rights, property, or safety of 2026ph, our users, or the public

4.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to a successor entity or third party. We will notify you of any such change in ownership or control of your personal data and provide you with choices regarding your information.

4.4 No Sale of Personal Data

We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. Any sharing of data with third parties is solely for the purposes described in this Privacy Policy and subject to strict confidentiality and data protection obligations.

5. Data Security Measures

We implement industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security practices include:

• Encryption: All sensitive data (passwords, financial information, personal details) is encrypted using SSL/TLS protocols during transmission and AES-256 encryption at rest
• Access Controls: Role-based access controls ensure that only authorized personnel can access personal information on a need-to-know basis
• Network Security: Firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and DDoS protection safeguard our infrastructure
• Authentication: Multi-factor authentication (MFA) is required for account access and sensitive operations
• Regular Audits: We conduct regular security audits, penetration testing, and vulnerability assessments to identify and address potential weaknesses
• Employee Training: All employees with access to personal data receive mandatory data protection and security training
• Incident Response: We maintain an incident response plan to quickly detect, respond to, and mitigate data breaches
• Secure Data Centers: Our data is stored in secure, access-controlled data centers with 24/7 monitoring and physical security

Despite our best efforts, no method of electronic transmission or storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and promptly notifying us of any unauthorized access to your account.

6. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your active account and for a period after account closure as required for regulatory compliance
• Transaction Records: Financial transaction data, including deposits, withdrawals, and betting history, is retained for a minimum of five (5) years to comply with Philippine tax laws, AML regulations, and PAGCOR requirements
• Identity Verification Documents: KYC/AML documentation (IDs, proof of address) is retained for a minimum of five (5) years after account closure or the last transaction, whichever is later
• Communication Records: Customer support interactions, emails, and chat logs are retained for up to three (3) years for quality assurance and dispute resolution purposes
• Marketing Data: Marketing consent records and communication preferences are retained until you withdraw consent or for a reasonable period thereafter
• Inactive Accounts: Accounts inactive for 12 consecutive months may be subject to review, and personal information may be anonymized or deleted unless retention is required by law

Upon expiration of the retention period, we will securely delete or anonymize your personal information in accordance with our data destruction policies. You may request early deletion of your data by contacting our Data Protection Officer, subject to legal retention requirements.

7. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Be Informed: You have the right to know how your personal information is collected, used, and shared
• Right to Access: You may request access to the personal information we hold about you and obtain a copy in a structured, commonly used format
• Right to Rectification: You may request correction of inaccurate or incomplete personal information
• Right to Erasure or Blocking: You may request deletion or blocking of your personal information when it is no longer necessary for the purposes for which it was collected, subject to legal retention requirements
• Right to Object: You may object to the processing of your personal information for direct marketing purposes or other legitimate interests
• Right to Data Portability: You may request that your personal information be transferred to another service provider in a portable format, where technically feasible
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within fifteen (15) days or as required by law. Please note that certain rights may be limited by legal obligations or legitimate business interests (e.g., we cannot delete transaction records required for tax or regulatory compliance).

8. Cookies and Tracking Technologies

The 2026ph Platform uses cookies, web beacons, pixel tags, and similar tracking technologies to collect information about your browsing behavior and preferences. Cookies are small text files stored on your device that allow us to recognize you and remember your preferences.

8.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function properly (account authentication, session management, security features)
• Performance Cookies: Collect information about how you use the Platform to help us improve functionality (analytics, error tracking)
• Functional Cookies: Remember your preferences and settings (language selection, display options)
• Targeting/Advertising Cookies: Deliver personalized advertisements and measure marketing campaign effectiveness

8.2 Managing Cookies

You can manage cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, disabling essential cookies may affect the functionality of the Platform and prevent you from accessing certain features. Disabling advertising cookies will not reduce the number of ads you see but may make them less relevant to your interests.

9. International Data Transfers

Your personal information may be transferred to and processed in countries outside the Philippines where our service providers or data centers are located. We ensure that such transfers comply with the Data Privacy Act by:

• Implementing Standard Contractual Clauses (SCCs) or other approved transfer mechanisms
• Ensuring recipient countries have adequate data protection laws
• Obtaining your explicit consent where required
• Applying appropriate safeguards to protect your data during international transfers

10. Children's Privacy

The 2026ph Platform is not intended for use by individuals under the age of 21. We do not knowingly collect personal information from minors. If we become aware that we have collected personal information from someone under 21 without proper age verification, we will immediately delete such information and close the associated account. If you believe we have inadvertently collected information from a minor, please contact us immediately at [email protected].

11. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. When we make material changes, we will notify you by:

• Posting the updated Policy on the Platform with a new "Last Updated" date
• Sending an email notification to your registered email address
• Displaying a prominent notice on the Platform homepage

Your continued use of the 2026ph Platform after the effective date of the updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Data Protection Officer: Available Monday to Friday, 9 AM - 6 PM Philippine Time
• Customer Support: [email protected] (24/7 availability)
• Live Chat: Available 24/7 on our website

For complaints or concerns regarding the processing of your personal information, you may also file a complaint with the National Privacy Commission:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center, Vicente Sotto St., Pasay City, Metro Manila
• Email: [email protected]
• Website: privacy.gov.ph