Privacy Policy

Section 1

Overview & Scope

This Privacy Policy ("Policy") is issued by 22slot ("the Platform," "we," "us," or "our") and applies to all personal data collected from users ("Player," "User," or "you") who access or use the 22slot website at https://22slot.app and all associated services, features, games, and content (collectively, the "Services").

This Policy is intended to inform you, in clear and plain language, about the types of personal data 22slot collects, the purposes for which that data is processed, the parties with whom it may be shared, the period for which it is retained, and the rights available to you as a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

By registering a 22slot account, making a deposit, or otherwise using the Services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the 22slot platform.

Section 2

Data We Collect

22slot collects the following categories of personal data from players. The specific data collected depends on how you interact with the platform and the Services you use.

22slot does not collect sensitive personal information as defined under the Data Privacy Act (such as health data, political opinions, or religious beliefs) unless specifically required by law or with your explicit consent.

Section 3

How We Collect Data

22slot collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically via cookies, web beacons, server logs, and similar tracking technologies when you access the 22slot website.
• Third-party sources: Identity verification data from government ID databases or third-party KYC providers; fraud and AML screening data from compliance service providers; payment confirmation data from GCash, PayMaya, BPI, BDO, and Metrobank.

Section 4

Purpose of Processing

22slot processes your personal data only for the purposes listed below. Each purpose is supported by a lawful basis under the Data Privacy Act of 2012.

• Account creation and management: To register your player account, authenticate your identity, and maintain your account in good standing.
• Age and identity verification (KYC): To verify that you are at least 21 years of age and to confirm your identity as required by Philippine law and responsible gaming obligations.
• Payment processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers, and to maintain accurate financial records.
• Service delivery: To provide access to games, bonuses, promotions, and all other features of the 22slot platform.
• Legal and regulatory compliance: To comply with anti-money laundering obligations under Republic Act No. 9160 (as amended), tax reporting requirements, and any lawful order from Philippine regulatory authorities.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and unauthorized account access.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Platform improvement: To analyze usage patterns and player behavior in aggregate (anonymized) form to improve game offerings, website performance, and user experience.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent and subject to your right to opt out at any time.

Section 5

Data Sharing

22slot does not sell your personal data. We may share your data with the following categories of third parties only to the extent necessary for the purposes described in this Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum financial data necessary to process your transactions. These providers operate under their own privacy policies and are bound by Philippine financial data protection regulations.
• Identity verification providers: Third-party KYC and AML screening services receive identity documents and personal data solely for the purpose of verifying your identity and screening against sanctions lists as required by law.
• Game software providers: Game providers may receive anonymized or pseudonymized session data necessary to deliver and maintain game functionality. They do not receive your full identity or financial data.
• Regulatory authorities: 22slot will disclose personal data to Philippine government agencies, law enforcement, or regulatory bodies (including the AMLC and NPC) when required to do so by law, court order, or lawful regulatory request.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers may have access to personal data as part of their service delivery, subject to strict data processing agreements.

Section 6

Data Retention

22slot retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under Republic Act No. 9160.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine tax and AML regulations.
• Communications data: Support tickets and chat transcripts are retained for two (2) years from the date of the interaction.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it is anonymized or deleted.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 22slot's data disposal procedures.

Section 7

Security Measures

22slot implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and 22slot servers.
• AES-256 encryption for sensitive data stored at rest, including financial records and identity documents.
• Multi-factor authentication (MFA) options for player accounts.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular third-party security audits and penetration testing of the 22slot platform.
• Real-time intrusion detection and automated threat monitoring systems.
• Secure data centers with physical access controls and 24/7 monitoring.

While 22slot takes all reasonable precautions to protect your data, no system is completely immune to security threats. You are responsible for maintaining the confidentiality of your account credentials and for notifying 22slot immediately if you suspect unauthorized access to your account.

Section 8

Cookies & Tracking

22slot uses cookies and similar tracking technologies to operate the platform, remember your preferences, maintain your session, and analyze how players use the site. The following types of cookies are used:

• Strictly necessary cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience on return visits.
• Analytics cookies: Collect anonymized data about how players navigate the site — which pages are visited most, where players drop off, and how features are used. This data is used solely to improve the 22slot platform.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the 22slot platform, but may affect certain features and your overall experience. Note that strictly necessary cookies cannot be disabled as they are essential to platform security and functionality.

Section 9

Your Rights

As a data subject under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by 22slot:

• Right to be informed: The right to know what personal data 22slot collects about you and how it is processed — which is the purpose of this Policy.
• Right of access: The right to request a copy of the personal data 22slot holds about you, along with information about how it is being used.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 22slot's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes at any time.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact the 22slot Data Privacy Officer via the contact details provided in Section 12 of this Policy. 22slot will respond to all verified data subject requests within fifteen (15) calendar days, as required by Philippine law.

Section 10

Minors & Age Policy

The 22slot platform is strictly intended for adults aged 21 years and above. 22slot does not knowingly collect personal data from individuals under the age of 21. The minimum gambling age in the Philippines is 21 years, and 22slot enforces this requirement through mandatory age verification during the registration and withdrawal process.

If 22slot becomes aware that personal data has been collected from a person under 21 years of age, that data will be immediately deleted, the associated account will be closed, and any deposits or winnings will be handled in accordance with applicable Philippine law.

Section 11

Changes to This Policy

22slot reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The "Effective Date" at the top of this page will be updated to reflect the date of the most recent revision.

Where changes are material — meaning they significantly affect how your personal data is collected, used, or shared — 22slot will notify registered players via the email address or mobile number on file at least seven (7) days before the changes take effect. For non-material changes, continued use of the platform following the updated Effective Date constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how 22slot protects your personal data.

Section 12

Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 22slot, please contact our Data Privacy Officer. Our support team is available 24/7 on Philippine Standard Time.

If you are not satisfied with 22slot's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012.