Privacy Policy – 218plusph

218plusph is the data controller responsible for personal data collected through the Platform at https://218plusph.app and all associated services (collectively, the "Platform"). As data controller, 218plusph determines the purposes and means of processing your personal data.

By registering an account with or otherwise using 218plusph, you acknowledge that you have read this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein. If you do not agree with this Policy, you must discontinue use of the Platform immediately.

218plusph collects the following categories of personal data in connection with the operation of the Platform:

218plusph does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for identity verification and legal compliance purposes. We do not collect racial or ethnic origin, political opinions, religious beliefs, or health data except where directly relevant to a responsible gaming inquiry.

218plusph collects personal data through the following means:

• Direct collection: Information you provide voluntarily when registering an account, completing KYC verification, making deposits or withdrawal requests, or contacting support.
• Automated collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access or use the Platform.
• Third-party sources: Identity verification data from licensed KYC service providers; transaction data from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank; fraud screening data from licensed fraud prevention services.

218plusph processes your personal data for the following purposes:

• Account creation and management: Registering your 218plusph account, authenticating your identity on login, and maintaining accurate account records.
• Age and identity verification (KYC): Confirming that you are at least 21 years of age and verifying your identity in compliance with PAGCOR-aligned regulations and Philippine anti-money laundering law (RA 9160).
• Payment processing: Facilitating deposits to and withdrawals from your 218plusph account via GCash, PayMaya, and bank transfer channels.
• Legal and regulatory compliance: Fulfilling obligations under the Philippine Data Privacy Act, Anti-Money Laundering Act, and applicable PAGCOR directives, including record-keeping and suspicious transaction reporting.
• Security and fraud prevention: Monitoring Platform activity to detect, investigate, and prevent fraudulent transactions, account takeovers, collusion, and other prohibited conduct.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour and enforcing self-exclusion, deposit limit, and session time restrictions where applicable.
• Customer support: Responding to enquiries, complaints, and disputes submitted through live chat or email.
• Service improvement: Analysing aggregated, anonymised usage data to improve Platform performance, game selection, and user experience.
• Marketing communications: Sending promotional offers and updates to account holders who have consented to receive such communications. You may withdraw this consent at any time via your account settings or by contacting support.

Under the Philippine Data Privacy Act of 2012 (RA 10173), 218plusph relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you accepted at registration (e.g., account management, payment processing).
• Legal obligation: Processing required to comply with applicable laws and regulatory requirements, including KYC, AML reporting, and PAGCOR directives.
• Legitimate interests: Processing carried out in pursuit of 218plusph's legitimate interests in fraud prevention, security, and Platform improvement, provided such interests are not overridden by your data protection rights.
• Consent: Processing for purposes such as marketing communications, where your prior explicit consent has been obtained. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

218plusph does not sell your personal data to any third party. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash (G-Xchange Inc.), PayMaya Philippines, BPI, BDO, Metrobank, and other licensed payment service providers, for the sole purpose of processing your financial transactions.
• Identity verification providers: Licensed KYC and fraud screening vendors engaged to verify your identity and assess transaction risk.
• Technology service providers: Cloud hosting, Platform infrastructure, and customer support software providers operating under binding data processing agreements with 218plusph.
• Game content providers: Third-party game studios (e.g., Pragmatic Play, PG Soft, Jili Games) may receive anonymised session tokens for game integrity purposes — no personally identifiable data is shared.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities, where disclosure is required by law or a valid legal order.

218plusph retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and as required by applicable law. Specific retention periods include:

• Account and KYC records: Retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, in compliance with RA 9160 and related AMLC regulations.
• Support communications: Retained for three (3) years from the date of the relevant interaction.
• Technical and usage logs: Retained for twelve (12) months from collection, unless required for ongoing investigations or legal proceedings.
• Marketing consent records: Retained until consent is withdrawn and for three (3) years thereafter as evidence of the consent lifecycle.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents re-identification.

218plusph uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and analyse usage patterns. The categories of cookies used include:

• Strictly necessary cookies: Required for the Platform to function (e.g., authentication session tokens, security cookies). These cannot be disabled.
• Functional cookies: Used to remember your preferences (e.g., language, game lobby layout). Disabling these may affect Platform functionality.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate the Platform, helping us identify and fix usability issues.
• Marketing cookies: Used to deliver relevant promotional content to account holders who have consented to marketing communications. These may be disabled via your browser settings or account preferences.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from accessing your 218plusph account.

218plusph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and the 218plusph Platform.
• AES-256 encryption for sensitive data at rest, including payment details and government ID numbers.
• Bcrypt hashing for all stored account passwords — plaintext passwords are never stored.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Regular third-party penetration testing and vulnerability assessments.
• Multi-factor authentication for administrative access to data systems.
• Automated intrusion detection and real-time security monitoring.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 218plusph will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the timeframes prescribed under RA 10173 and its implementing rules.

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal data held by 218plusph:

• Right to be informed: You have the right to know what personal data 218plusph holds about you, the purposes for which it is processed, and the parties with whom it is shared.
• Right of access: You may request a copy of the personal data 218plusph holds about your account.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Minor account details (such as contact number) may be updated directly within account settings.
• Right to erasure (right to be forgotten): You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to overriding legal retention obligations.
• Right to object: You may object to processing of your personal data for direct marketing purposes at any time. You may also object to other forms of processing based on legitimate interests where your individual circumstances warrant it.
• Right to data portability: Where technically feasible, you may request that we provide your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that 218plusph has not handled your personal data in accordance with RA 10173.

To exercise any of the above rights, contact 218plusph's Data Protection Officer at the details provided in Section 14. We will respond to all rights requests within fifteen (15) business days of receipt, and will provide a substantive response within thirty (30) days as required under RA 10173.

The 218plusph Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect or process personal data from individuals under 21 years of age. If we become aware that an account has been registered by a person under the minimum age, that account will be immediately closed and all associated personal data will be deleted or anonymised.

If you believe that a minor has registered an account on 218plusph, please contact our support team immediately so that we can take appropriate action.

218plusph primarily processes personal data within the Philippines. Where the use of third-party service providers (such as cloud infrastructure or game content providers) requires the transfer of personal data to servers or entities located outside the Philippines, 218plusph ensures that such transfers are conducted in accordance with the requirements of Section 21 of RA 10173, including the use of contractual clauses and other legally recognised transfer mechanisms that provide a level of protection equivalent to that guaranteed under Philippine data protection law.

218plusph reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory guidance. Material changes will be communicated to registered account holders via the email address on file or through a notice displayed upon login to the Platform. The effective date of the current version is shown at the top of this page.

Your continued use of the Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. We recommend reviewing this Policy periodically.

218plusph has designated a Data Protection Officer (DPO) as required under RA 10173. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact us through the following channels:

If you are not satisfied with our response, you have the right to refer your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.