This Privacy Policy explains how 23ph collects, uses, stores, and protects the personal data of players and visitors to 23ph.one. It is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. By registering an account or continuing to use the 23ph platform, you acknowledge that you have read and understood this Policy.
Last updated: 5 June 2026
Your privacy matters to 23ph. This Policy applies to all personal data processed by 23ph in connection with the operation of 23ph.one, including data collected during account registration, gameplay, financial transactions, customer support interactions, and marketing communications. "Personal data" means any information that identifies or can reasonably identify you as an individual.
The data controller responsible for the personal data processed through 23ph.one is 23ph, the operator of the 23ph online gaming platform, operating under the PAGCOR licensing framework within the Republic of the Philippines.
For all privacy-related enquiries, requests to exercise data subject rights, or complaints, players may contact the 23ph Data Protection Officer (DPO) via the contact details set out in Section 13 of this Policy.
23ph collects personal data from multiple sources. The categories of data collected, and the circumstances in which each category is collected, are set out below.
| Purpose | Data Categories Used |
|---|---|
| Account registration and authentication | Registration data, device data |
| Identity verification and KYC compliance | KYC documents, registration data |
| Processing deposits and withdrawals | Payment data, KYC data |
| Fraud prevention and AML monitoring | All data categories, transaction history |
| Customer support and dispute resolution | Communications data, account history |
| Personalising the gaming experience | Usage data, game history |
| Responsible gaming monitoring and interventions | Usage data, deposit/loss history |
| Sending promotional communications (with consent) | Email address, mobile number |
| Platform analytics and improvement | Usage data, technical data (anonymised) |
| Regulatory reporting to PAGCOR and other authorities | Registration data, financial transaction data |
23ph processes personal data under one or more of the following legal bases, as specified under the Philippine Data Privacy Act of 2012:
5.1 23ph does not sell, rent, or trade your personal data to any third party for marketing purposes.
5.2 23ph may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data-sharing agreements:
5.3 All third-party processors engaged by 23ph are contractually required to process personal data solely in accordance with 23ph's instructions and to implement appropriate technical and organisational security measures.
6.1 23ph uses cookies and similar tracking technologies (including local storage and session tokens) on the 23ph.one platform for the following purposes:
6.2 You may manage your cookie preferences through your browser settings. Note that disabling essential cookies will prevent full use of the 23ph platform.
7.1 23ph retains personal data for as long as is necessary for the purposes for which it was collected, subject to the following retention schedules:
7.2 Following the expiry of applicable retention periods, personal data is securely deleted or anonymised so that it can no longer identify any individual.
8.1 23ph implements industry-standard technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
8.2 In the event of a personal data breach that poses a risk to your rights and freedoms, 23ph will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 23ph:
To exercise any of these rights, contact the 23ph DPO via the details in Section 13. 23ph will respond within thirty (30) calendar days of receiving a valid request. Identity verification may be required before processing your request.
10.1 The 23ph platform is strictly for persons aged twenty-one (21) years and above. 23ph does not knowingly collect personal data from individuals below this age threshold.
10.2 If 23ph discovers or is notified that it has collected personal data from an individual below 21 years of age, it will take immediate steps to delete that data and close the associated account. All funds held in such accounts will be handled in accordance with applicable PAGCOR guidelines.
10.3 If you believe that a person under the age of 21 has registered on the 23ph platform, please contact 23ph support immediately via Live Chat or email.
11.1 Some of 23ph's technology partners and game providers are based outside the Philippines. Where personal data is transferred to recipients in countries that may not offer the same level of data protection as the Philippines, 23ph ensures that appropriate safeguards are in place, including data processing agreements incorporating the standard contractual clauses recognised by the National Privacy Commission.
11.2 23ph will not transfer personal data to a foreign country unless the transfer is governed by adequate data protection provisions and is consistent with the requirements of the Philippine Data Privacy Act and its implementing rules.
12.1 23ph may update this Privacy Policy from time to time to reflect changes in applicable law, regulatory guidance, or 23ph's data processing practices. Material changes will be communicated to registered players via the email address on file or by a prominent notice on the 23ph platform, no less than seven (7) days before the changes take effect.
12.2 The current version of this Privacy Policy, with its effective date, is always available at 23ph.one/privacy-policy. Continued use of the 23ph platform following the effective date of any revised Policy constitutes acceptance of the revised terms.
For all privacy-related enquiries, to exercise your data subject rights, or to submit a complaint regarding 23ph's data processing practices, please contact:
If you are not satisfied with 23ph's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through official government channels.
23ph processes all personal data in full compliance with Republic Act No. 10173 (Philippine Data Privacy Act of 2012) and its implementing rules enforced by the NPC.
Every data transmission between your device and 23ph servers is protected by bank-grade 256-bit SSL/TLS encryption. Your personal and financial data is never transmitted in plaintext.
23ph does not sell, rent, or trade your personal data to any third party for marketing or commercial purposes — ever. Your data is used solely to operate and improve the 23ph platform.
Access, correct, port, or delete your personal data at any time by contacting the 23ph DPO. Requests are processed within 30 days with a full audit trail.
23ph retains data only as long as legally required — typically 5 years for KYC and financial records per AMLA regulations — then securely deletes or anonymises it.
Withdraw consent for marketing communications at any time — via account settings, by clicking unsubscribe in any email, or by contacting 23ph support via Live Chat.
Your data is protected. Your payments are secure. Your account is yours. 23ph is PAGCOR-regulated and Data Privacy Act compliant. Must be 21+ to play.
Access 23ph Now