This Privacy Policy explains how 2026 ph collects, uses, stores, and protects your personal information in accordance with Republic Act No. 10173 (Philippine Data Privacy Act) and PAGCOR's regulatory requirements for licensed online gaming operators.
2026 ph operates the online gaming Platform accessible at 2026ph.bio as a PAGCOR-licensed operator. In this capacity, 2026 ph acts as the Data Controller for all personal data collected from registered Players and Platform visitors, as defined under Republic Act No. 10173 (Data Privacy Act of the Philippines, "DPA") and its Implementing Rules and Regulations ("IRR").
The 2026 ph Platform is designed for adult Filipino players aged 21 and above. We recognise that the personal data entrusted to us carries significant weight — it includes financial information, identity documents, and gaming behaviour. We take our obligations as Data Controller with the seriousness that entails, and this Policy is intended to give you a clear, honest account of how we handle your information.
Where 2026 ph engages third-party service providers to process personal data on our behalf — such as payment processors, KYC verification platforms, and game studios — those entities act as Data Processors under binding contracts that impose data protection obligations no less stringent than our own.
2026 ph collects personal data through multiple channels — registration forms, KYC document submissions, Platform activity, and payment transactions. The categories of personal data we collect, and the context in which each is collected, are set out below.
| Data Type | Description & Purpose |
|---|---|
| Full Legal Name | As it appears on a Philippine government-issued ID — required for account creation and KYC verification. |
| Date of Birth | Required to verify that the player is at least 21 years of age, as mandated by PAGCOR. |
| Philippine Mobile Number | Primary account identifier, used for OTP authentication and transactional SMS notifications. |
| Email Address | Secondary contact channel for account notifications, bonus communications, and formal correspondence. |
| Residential Address | Collected as part of KYC for identity and address verification, and to confirm Philippines residency. |
| Username and Password | Credentials for Platform access — passwords are stored in hashed, salted form and are never viewable in plaintext by 2026 ph staff. |
| Data Type | Description & Purpose |
|---|---|
| Government ID Images | Scans or photographs of Philippine government-issued identification (PhilSys, passport, driver's licence, UMID, SSS ID, voter's ID) — required by PAGCOR for KYC. |
| Selfie / Liveness Check | A photograph or video for biometric matching to the submitted ID document — used to prevent identity fraud and comply with PAGCOR account verification requirements. |
| Source of Funds Declaration | May be requested for high-value accounts or large transactions under PAGCOR AML guidelines. |
| Data Type | Description & Purpose |
|---|---|
| GCash / Maya Account Reference | Mobile wallet identifier linked to your account for deposits and withdrawals — the full wallet number is tokenised and not stored in plaintext. |
| Bank Account Details | Account name and number for BPI, BDO, or Metrobank withdrawals — stored in encrypted form. |
| Transaction History | Full record of all deposits, withdrawals, and balance adjustments, retained for regulatory audit purposes. |
| Payment Method Verification | Evidence that deposit and withdrawal methods belong to the registered account holder, as required by PAGCOR AML rules. |
Under the Philippine Data Privacy Act, all personal data processing must rest on a lawful basis. 2026 ph relies on the following legal bases for its data processing activities:
2026 ph uses the personal data we collect for the following purposes. We process your data only for purposes that are compatible with the basis on which it was collected:
2026 ph does not sell your personal data to any third party. We share personal data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose:
2026 ph is legally required to share certain data with Philippine regulatory and law enforcement authorities, including:
We engage third-party service providers to perform specific functions on our behalf. These entities act as Data Processors under binding Data Processing Agreements (DPAs) that restrict their use of your data to the specific purpose for which it was shared:
The 2026 ph Platform is operated from and for the Philippines. Primary data storage is in Philippine data centres. However, some of our third-party service providers — including certain game studios and cloud infrastructure providers — may operate systems in other countries.
Where personal data is transferred outside the Philippines, 2026 ph ensures that appropriate safeguards are in place in accordance with the National Privacy Commission's guidelines on cross-border data transfers. These safeguards include:
You may request information about the specific international data transfers involving your personal data by contacting the 2026 ph Data Protection Officer using the details in Section 14.
2026 ph retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following regulatory minimum retention requirements:
| Data Category | Retention Period |
|---|---|
| Account registration data | Duration of account plus 5 years after closure (PAGCOR requirement) |
| KYC documents | Duration of account plus 5 years after closure (AML requirement under RA 9160) |
| Transaction records | 10 years from the date of transaction (AMLC requirement) |
| Game session history | Duration of account plus 5 years after closure |
| Support interaction records | 3 years from the date of the last interaction |
| Marketing consent records | Until consent is withdrawn plus 1 year |
| Device and session logs | 13 months from collection (fraud detection purpose) |
| Cookie data | As specified in Section 8 — varies by cookie category |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines. Where anonymisation is not technically feasible, data is securely destroyed using methods that prevent recovery.
2026 ph uses cookies and similar tracking technologies on the Platform. Cookies are small data files stored on your device that help us operate the Platform correctly, recognise returning users, and understand how the Platform is used. We use the following categories of cookies:
You may manage your cookie preferences at any time via your browser settings or by contacting 2026 ph support. Note that disabling essential cookies will prevent you from accessing your 2026 ph account. Most modern browsers allow you to block or delete specific categories of cookies — your browser's help documentation will guide you through the available options.
Under Republic Act No. 10173 (Data Privacy Act of the Philippines) and its Implementing Rules, you hold the following rights with respect to your personal data processed by 2026 ph. All requests to exercise these rights should be directed to our Data Protection Officer using the contact details in Section 14:
The 2026 ph Platform is strictly for adults aged 21 and above, as required by PAGCOR for all Philippine online casino activities. 2026 ph does not knowingly collect or process personal data from persons under 21 years of age.
Age verification is a mandatory step in the 2026 ph KYC process — no Account may be activated without successful age verification against a valid Philippine government-issued identification document. Where 2026 ph discovers or has reasonable grounds to believe that an Account is held by or has been used by a person under 21, the Account will be immediately suspended and all relevant data will be reviewed in accordance with PAGCOR's reporting requirements.
2026 ph implements technical, organisational, and administrative security measures commensurate with the sensitivity of the personal data we hold and the risks associated with online gaming and financial transactions. Our key security measures include:
Notwithstanding these measures, no online system can guarantee absolute security. You are encouraged to use a strong, unique password for your 2026 ph account and to enable OTP authentication on your registered Philippine mobile number to maximise the security of your account.
The 2026 ph Platform may contain references to third-party services — including payment gateways that redirect you to a third-party interface to complete a transaction. When you navigate to a third-party service, you are subject to that third party's privacy policy, not this one. 2026 ph is not responsible for the data practices of third-party services.
Specifically in the context of the Philippine payment ecosystem: when you initiate a GCash or Maya payment, you are briefly redirected to the respective e-wallet's authentication interface. 2026 ph does not receive or store your GCash or Maya login credentials. The transaction is completed within the e-wallet's secure environment and only the outcome (success or failure) and a transaction reference are returned to 2026 ph.
2026 ph may update this Privacy Policy from time to time to reflect changes in our data processing practices, the introduction of new Platform features, changes to Philippine data protection law, or updated PAGCOR regulatory requirements.
Where updates are material — affecting how we collect, use, or share your personal data in ways that may affect your rights — 2026 ph will provide advance notice via email to your registered address and via an in-Platform notification. The "Last Updated" date at the top of this document will be revised to reflect the effective date of any amendment.
Your continued use of the 2026 ph Platform after the effective date of a revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not accept the revised Policy, you should cease using the Platform and exercise your right to account closure and data deletion (subject to mandatory regulatory retention requirements) as described in Section 9.
For all privacy-related enquiries, data rights requests, and data breach notifications concerning your 2026 ph personal data, please contact our Data Protection Officer:
The National Privacy Commission (NPC) is the Philippine government authority responsible for enforcing Republic Act No. 10173 (Data Privacy Act). The NPC's complaint and advisory services are available to all Philippine data subjects at no cost.
2026 ph is fully compliant with RA 10173 and the NPC's Implementing Rules. We maintain a registered Data Protection Officer, a documented breach response plan, and annual privacy impact assessments on all data processing activities.
256-bit SSL in transit and AES-256 at rest — the same encryption standards used by BPI, BDO, and Metrobank for their online banking platforms. Your identity documents, financial data, and account credentials are protected by multiple encryption layers.
Access, correction, deletion, portability, and objection rights are available to all 2026 ph players at any time. Submit a written request via email to our DPO — we acknowledge within 3 business days and respond substantively within 15.
2026 ph does not sell personal data to any third party. This is a hard line, not a qualified promise. Your information exists on our Platform to serve your gaming experience and meet our regulatory obligations — nothing else.
KYC at 2026 ph is mandatory under PAGCOR regulation — not a surveillance measure. Your identity documents are used exclusively for age and identity verification. KYC data is held securely and shared only with our verification partner and PAGCOR as required.
Promotional communications from 2026 ph are sent only to players who have explicitly opted in. You can withdraw consent at any time in account settings — opt-out is immediate and permanent until you choose to opt back in.
Your personal data is protected by Philippine law and 2026 ph's own bank-grade security standards. Register your account, complete KYC once, and enjoy 1,000+ games with instant GCash payouts. 21+ only.
21+ only • PAGCOR-regulated • Data protected under RA 10173 • Gamble responsibly