Effective Date: June 2025

22 Two Privacy Policy – Your Data, Protected

At 22 Two, your privacy is not an afterthought — it is built into how we operate. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have as a player in the Philippines. Plain and simple, walang hidden na bagay.

22 two

Your personal information is protected under the Philippine Data Privacy Act of 2012 (RA 10173).

How 22 Two Protects Your Privacy

Here is a quick overview of the principles that guide how we handle your personal data at 22 Two.

Encrypted Storage

All personal data is stored on secure, encrypted servers. We use industry-standard SSL/TLS protocols across the entire 22 Two platform.

No Data Selling

22 Two does not sell, rent, or trade your personal information to any third party for their own marketing purposes. Ever.

RA 10173 Compliant

Our data practices are fully aligned with the Philippine Data Privacy Act of 2012 and the guidelines of the National Privacy Commission.

You Stay in Control

You can access, correct, or request deletion of your personal data at any time by contacting our support team.

Opt-Out Options

Don't want marketing emails? You can unsubscribe anytime. We respect your communication preferences fully.

Minimal Data Collection

We only collect data that is necessary for running your account, processing payments, and keeping the platform secure.

01 Overview

This Privacy Policy describes how 22 Two ("we," "us," "our") collects, uses, discloses, and safeguards the personal information of users ("you," "Player") who access and use the 22 Two platform at 22two.best. This policy is applicable to all registered players based in the Philippines and is written in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012, and its Implementing Rules and Regulations.

By registering on 22 Two and using our services — whether you are playing Tongits, placing a bet on basketball, or making a deposit via GCash — you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

Plain language summary: We collect data to run your account and keep things secure. We don't sell your info, and we give you real control over what we hold about you. If you have questions, our Data Protection Officer is always reachable at privacy@22two.best.

02 Personal Data We Collect

22 Two collects only the personal data that is necessary to provide you with a safe and functional gaming experience. The categories of personal data we collect include:

Data Category Examples When Collected
Identity Data Full name, date of birth, government-issued ID number Registration, KYC verification
Contact Data Email address, mobile number Registration, account updates
Financial Data GCash/Maya number, bank account name, card type (not full card number) Deposits and withdrawals
Transaction Data Deposit amounts, withdrawal history, game bets placed, win/loss records Ongoing platform use
Technical Data IP address, browser type, device model, operating system Each platform visit
Usage Data Pages visited, time spent, game preferences, session duration Ongoing platform use
Communications Data Support chat transcripts, email correspondence When you contact support
22 two

We verify your identity to protect you and to comply with Philippine gaming regulations.

What We Do Not Collect

22 Two does not collect your full debit or credit card number — only the card type and last four digits, where necessary for verification. We also do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or biometric data, unless specifically required by law and disclosed to you in advance.

03 How We Use Your Personal Data

Every piece of data we collect has a specific, legitimate purpose. Here is exactly what we use your personal data for at 22 Two:

  • Account creation and management: To set up your player account, verify your identity, and keep your account secure.
  • Payment processing: To process your deposits and withdrawals through GCash, Maya, GrabPay, BDO, BPI, UnionBank, and other supported Philippine payment channels.
  • Regulatory compliance: To meet our obligations under Philippine gaming laws, anti-money laundering (AMLA) regulations, and National Privacy Commission requirements.
  • Platform security and fraud prevention: To detect and prevent fraudulent activity, unauthorised account access, and other security threats.
  • Customer support: To respond to your queries, resolve disputes, and improve your experience with our support team.
  • Responsible gaming: To monitor gameplay patterns that may indicate problem gambling and to apply any self-imposed limits you have set on your account. Visit our Responsible Gaming page to learn more.
  • Marketing and promotions: To send you bonus offers, game updates, and promotional material — but only if you have given us explicit consent to do so. You can withdraw this consent at any time.
  • Platform improvement: To analyse usage trends, fix bugs, and develop new features based on how players use 22 Two.

We do not use your personal data for purposes that are incompatible with those listed above without first informing you and obtaining any additional consent required by law.

05 Data Sharing and Third Parties

22 Two does not sell your personal data to third parties. We may share your information with the following categories of third parties, strictly on a need-to-know basis and under binding confidentiality agreements:

Payment Service Providers

To process your deposits and withdrawals, we share relevant payment data with the corresponding payment service providers (e.g., GCash, Maya, BDO, BPI). These providers are bound by their own privacy policies and Philippine financial regulations.

Identity Verification Services

To fulfil our KYC obligations, we may share your identity documents with regulated third-party verification providers. These providers are contractually prohibited from using your data for any purpose other than verification.

Regulatory Authorities

Where required by Philippine law — including requests from the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or duly authorised law enforcement agencies — 22 Two may disclose personal data without your prior consent, as permitted under RA 10173.

Technology and Infrastructure Providers

We use third-party cloud hosting and technical infrastructure services to operate the 22 Two platform. These providers only process data on our instruction and under strict data processing agreements.

22 two

22 Two serves Filipino players from all regions, keeping data handling local and compliant.

No Cross-Border Transfers Without Safeguards

If any personal data is transferred outside the Philippines — for example, to international cloud infrastructure — we ensure that appropriate safeguards are in place in accordance with NPC guidelines, such as standard contractual clauses or equivalent protection measures. We will inform you of any such transfers in advance where required.

06 Cookies and Tracking Technologies

22 Two uses cookies and similar tracking technologies to keep the platform running smoothly and to understand how players use our site. Here is a breakdown of the types of cookies we use:

Cookie Type Purpose Can You Opt Out?
Essential Cookies Keep you logged in, maintain session security, enable core platform functions No — required for the platform to work
Analytics Cookies Track page views, session duration, and feature usage to improve the platform Yes — via cookie settings
Preference Cookies Remember your language, game preferences, and display settings Yes — via cookie settings
Marketing Cookies Track which promotions you engage with to personalise bonus offers Yes — via cookie settings or unsubscribe

You can manage your cookie preferences at any time through your browser settings or through the cookie consent banner when you first visit 22 Two. Note that disabling essential cookies may affect your ability to use certain features of the platform.

07 How Long We Keep Your Data

22 Two retains personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by Philippine law. Here are our general retention periods:

  • Active account data: Retained for the full duration of your account relationship with 22 Two.
  • Transaction and financial records: Retained for a minimum of five (5) years following the transaction, in compliance with AMLA and BIR requirements.
  • KYC documents: Retained for five (5) years after account closure or the last transaction, whichever is later.
  • Support communications: Retained for two (2) years after the resolution of the relevant query.
  • Marketing data: Retained until you withdraw consent or for two (2) years of inactivity, whichever comes first.

When personal data is no longer needed, 22 Two will securely delete or anonymise it so it can no longer be linked back to you as an individual.

08 How We Keep Your Data Secure

Keeping your personal data safe is something 22 Two takes seriously. We have implemented a range of technical and organisational security measures designed to prevent unauthorised access, disclosure, alteration, or destruction of your information.

  • SSL/TLS Encryption: All data transmitted between your device and 22 Two is encrypted using 256-bit SSL/TLS technology.
  • Secure data centres: Player data is stored on servers located in secure facilities with restricted physical access, continuous monitoring, and redundant backup systems.
  • Access controls: Only authorised 22 Two staff who need to access your data as part of their job function are permitted to do so. All staff with data access undergo regular privacy training.
  • Two-factor authentication (2FA): We offer 2FA as an additional layer of account security. We strongly encourage all players to enable it.
  • Regular security audits: The 22 Two platform undergoes periodic security reviews and penetration testing by qualified third parties.

Despite our best efforts, no system is completely impenetrable. In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, 22 Two will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with RA 10173.

09 Your Data Privacy Rights

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 22 Two. We are committed to honouring these rights promptly and without unnecessary delay.

Right to Access

You have the right to request a copy of the personal data 22 Two holds about you, including information on how it is being processed.

Right to Rectification

If any of your personal data is inaccurate or incomplete, you have the right to request that we correct it. You can update basic information directly through your account settings.

Right to Erasure

You may request the deletion of your personal data where it is no longer necessary for the purpose it was collected, subject to our legal retention obligations.

Right to Object

You can object to the processing of your personal data for direct marketing purposes at any time. We will stop processing your data for that purpose immediately.

Right to Data Portability

You may request a copy of your personal data in a structured, machine-readable format so you can transfer it to another service if you choose.

Right to File a Complaint

If you believe your data privacy rights have been violated, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer at privacy@22two.best. We will respond to all verified requests within fifteen (15) business days. We may need to verify your identity before processing your request.

10 Minors and Age Restriction

22 Two strictly prohibits the use of our platform by anyone under the age of 21. We do not knowingly collect personal data from minors. If we discover that a minor has registered on 22 Two, we will immediately suspend the account, delete all associated personal data, and return any deposited funds to the original payment source.

If you are a parent or guardian and believe that your child has registered on 22 Two, please contact us at support@22two.best immediately so we can take appropriate action. We take the protection of minors seriously and act quickly in all such cases.

11 Changes to This Privacy Policy

22 Two may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal requirements, or the services we offer. When we make material changes, we will notify you by email and/or by displaying a notice on the 22 Two platform. The effective date at the top of this page will always reflect the most current version.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Continued use of 22 Two after notification of changes to this policy constitutes your acceptance of the updated version. Kung hindi ka agree sa changes, please contact us before continuing to use the platform — we would rather know and work it out than lose a kabayan player.

12 Contact Our Data Protection Officer

22 Two has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding your personal data and how 22 Two handles it, you can reach our DPO directly.

DPO Email

privacy@22two.best

General Support

support@22two.best

Response Time

Within 15 business days

Your Privacy is Safe with 22 Two

Now that you know how we handle your data, play with confidence. Join hundreds of thousands of Filipino players who trust 22 Two for a safe, fair, and genuinely fun gaming experience.