How 26ph Collects, Uses, and Protects Your Personal Data

26ph ("we", "us", "the platform") operates an online gaming and casino service accessible to players in the Philippines. In the course of providing this service, we necessarily collect and process certain personal information about you. This Privacy Policy describes our practices with respect to that information.

We are committed to handling your personal data responsibly, in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This policy tells you what personal data we collect, why we collect it, how we use and protect it, who we share it with, how long we keep it, and what rights you have over it.

If you have questions about this policy or how 26ph handles your data, you can reach us at any time through the contact details provided at the end of this document. We are happy to clarify anything that isn't clear.

26ph collects personal data through several channels: information you provide directly, information generated automatically when you use the platform, and in limited cases, information from third parties such as payment processors or identity verification services.

26ph does not intentionally collect sensitive personal information such as health data, political opinions, or religious beliefs. If any such data is incidentally included in documents you submit for verification purposes, it will be treated with the same or higher level of protection as all other data.

26ph uses the personal data it collects for specific, legitimate purposes directly related to operating the platform and complying with applicable law. We do not use your data for any purpose that is incompatible with the original reason it was collected. The primary purposes for which 26ph processes personal data are:

• Account management: Creating and maintaining your 26ph account, processing login requests, and managing account settings and preferences.
• Identity verification (KYC): Verifying your age and identity as required to comply with applicable gaming regulations and to prevent underage access to the 26ph platform.
• Transaction processing: Facilitating deposits and withdrawals through Philippine payment channels such as GCash, Maya, and bank transfers, and maintaining accurate transaction records.
• Platform operation: Delivering games, ensuring correct bet settlement, maintaining service availability, and troubleshooting technical issues on 26ph.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, account takeovers, money laundering, and other prohibited activity on the 26ph platform.
• Regulatory compliance: Meeting obligations under Philippine law, including record-keeping, anti-money laundering reporting, and responding to lawful requests from government authorities.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling and administering responsible gaming tools including deposit limits, cooling-off periods, and self-exclusion at 26ph.
• Customer support: Responding to your inquiries, resolving complaints, and maintaining a record of support interactions for quality and dispute resolution purposes.
• Platform improvement: Analysing aggregated usage data to understand how players interact with 26ph and to guide improvements to the platform, game selection, and user experience.
• Marketing communications: Sending promotional offers, bonus notifications, and news about 26ph to players who have opted in to receive such communications.

Under the Philippine Data Privacy Act, 26ph is required to have a legal basis for each category of personal data processing. The primary legal bases on which 26ph relies are:

• Contract performance: Processing necessary to fulfil our obligations to you as a 26ph account holder, including account management, transaction processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including KYC verification, anti-money laundering obligations, and responses to lawful regulatory requests.
• Legitimate interests: Processing necessary for 26ph's legitimate interests in fraud prevention, platform security, and service improvement, balanced against your privacy rights.
• Consent: Where you have provided explicit consent, such as opting in to receive marketing communications from 26ph. Consent may be withdrawn at any time.

26ph does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We share personal data only in the following limited circumstances and always under appropriate safeguards:

• Payment service providers: When you make a deposit or withdrawal at 26ph, your financial information is shared with the relevant payment processor (e.g., GCash, Maya, your bank) to the extent necessary to complete the transaction.
• Game providers: Software providers whose games are available on the 26ph platform may receive limited gameplay data necessary to deliver and verify the fairness of their games.
• Identity verification services: When KYC verification is required, your identity documents and information may be shared with a third-party verification service operating under strict data processing agreements.
• Regulatory authorities: 26ph may be required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other Philippine government bodies in response to lawful requests or mandatory reporting obligations.
• Professional advisers: Legal, accounting, or audit firms acting as service providers to 26ph, bound by confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of 26ph's business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to equivalent privacy protections.

26ph retains personal data for as long as it is needed for the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active 26ph account plus a minimum of five years after account closure, to comply with anti-money laundering record-keeping requirements.
• Transaction records: Retained for a minimum of five years from the date of the transaction, in line with Philippine financial record-keeping obligations.
• Gameplay records: Retained for a minimum of three years to support dispute resolution, responsible gaming monitoring, and regulatory compliance.
• Communications data: Support interactions retained for up to three years to facilitate dispute resolution and quality assurance at 26ph.
• Technical and device data: Generally retained for up to 12 months unless a longer period is needed for fraud investigation or security purposes.

When data is no longer required and the retention period has expired, 26ph securely deletes or anonymises it. Anonymised data may be retained beyond these periods for analytical purposes, as it no longer constitutes personal data.

26ph uses a combination of technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. The security measures in place at 26ph include:

• SSL/TLS encryption: All data transmitted between your device and the 26ph platform is encrypted using industry-standard SSL/TLS protocols.
• Secure storage: Personal and financial data is stored on servers with access controls restricting access to authorised personnel only.
• Password security: Account passwords are stored in hashed form. 26ph will never ask you to share your password via email, chat, or phone.
• Access controls: Internal access to personal data at 26ph is granted on a need-to-know basis and is subject to role-based permissions and audit logging.
• Monitoring: The platform is monitored for unusual access patterns and potential security incidents on an ongoing basis.

Despite these measures, no internet-based platform can guarantee absolute security. In the unlikely event of a data breach that affects your rights, 26ph will notify you and the relevant Philippine authorities in accordance with the requirements of the Data Privacy Act.

26ph uses cookies and similar tracking technologies on our platform. Cookies are small text files stored on your device that allow the platform to recognise you across visits, maintain your login session, remember preferences, and collect usage analytics.

The types of cookies used by 26ph include:

• Essential cookies: Necessary for the platform to function. These include session cookies that keep you logged in at 26ph and security cookies that protect your account. These cannot be disabled without breaking core functionality.
• Functional cookies: Remember your preferences such as language settings and table limits within the 26ph lobby. Disabling these may affect your experience.
• Analytics cookies: Help 26ph understand how players navigate the platform, which pages and games are most visited, and where technical issues occur. This data is used in aggregate and is not linked to individual identities.
• Marketing cookies: Used to deliver relevant promotions and to measure the effectiveness of 26ph marketing activity. These are only placed where you have consented.

You can manage or disable cookies through your browser settings. Note that disabling essential cookies may prevent you from accessing your 26ph account or using core platform features. Most browsers allow you to view, delete, and block cookies from specific websites.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to personal data held by 26ph. To exercise any of these rights, contact us using the details in Section 13.

26ph aims to respond to all rights requests within 30 calendar days. If a request is complex or you have submitted multiple requests, we may take up to an additional 30 days, in which case we will inform you of the extension and the reason for it.

The 26ph platform is strictly for adults aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If you believe that a minor has submitted personal data to 26ph, please contact us immediately so that we can take steps to delete the relevant information and close any associated account.

Age verification is a mandatory step in the 26ph registration and KYC process. All players are required to confirm their age during registration and may be asked to provide documentary proof. Accounts where the age of the account holder cannot be verified will be suspended until satisfactory proof is received.

With your consent, 26ph may send you promotional communications by email or SMS, including information about new games, bonuses, and special offers. You can opt in to receive these communications during registration or through your account settings.

You may opt out of marketing communications at any time by clicking the unsubscribe link in any marketing email, adjusting your communication preferences in your 26ph account, or contacting our support team directly. Opting out of marketing does not affect service communications, such as account updates, transaction confirmations, or security alerts, which are sent regardless of your marketing preferences.

26ph may update this Privacy Policy from time to time to reflect changes in our practices, the services we offer, or applicable law. When material changes are made, we will update the "Last updated" date at the top of this page and, where appropriate, notify registered players by email or through the platform.

We encourage you to review this Privacy Policy periodically, even if you have not received a direct notification. Continued use of the 26ph platform after changes have been posted constitutes your acknowledgement of the updated policy. If you disagree with any material changes, you may choose to close your account and request deletion of your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way 26ph handles your personal data, please reach out to us. We are committed to handling all data-related inquiries promptly and transparently.

You can contact the 26ph data privacy team at:

If you are not satisfied with 26ph's response to a data privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines, which oversees enforcement of the Data Privacy Act of 2012.