z25 Casino Privacy Policy

1. Who We Are

z25 (z25.asia) is a Philippine-registered online gaming platform operating under PAGCOR regulatory oversight. For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), z25 acts as the Personal Information Controller for personal data collected through the z25 platform. z25 has designated a Data Protection Officer (DPO) who can be contacted at the address provided in Section 14.

2. Data We Collect

2.1 Registration Data

When you create a z25 account, we collect: full legal name, date of birth, Philippine mobile number, email address, and a self-selected password (stored in hashed form — never in plain text).

2.2 Identity Verification (KYC) Data

To comply with PAGCOR anti-money laundering requirements, z25 collects copies of government-issued photo ID (UMID, Driver's License, Passport, SSS card, or equivalent), selfie photographs where required, and supporting financial documents as needed. This data is handled with heightened security and access controls.

2.3 Financial Transaction Data

z25 records all deposits, withdrawals, bet placements, game results, and bonus transactions associated with your account. This includes the payment method used (GCash, PayMaya, BPI, BDO, or Metrobank account identifiers — not full card or bank numbers), transaction amounts in PHP, timestamps, and transaction reference numbers.

2.4 Gaming Activity Data

z25 logs gameplay data including game sessions, bet history, wagering patterns, win and loss records, and session durations. This data is used for account management, responsible gaming monitoring, regulatory reporting, and fraud detection.

2.5 Device and Technical Data

z25 automatically collects technical information when you access the platform, including IP address, device type, operating system, browser type, geolocation data (country and city level), session duration, and pages accessed. This data is used for security, fraud prevention, and service optimization.

2.6 Customer Support Communications

When you contact z25 support, we collect and retain the content of your communications, including email correspondence, live chat transcripts, and any attachments or documents you provide.

3. How We Use Your Data

z25 uses the personal data it collects for the following purposes:

• Account creation and management — to register, verify, and maintain your z25 account;
• Identity verification and KYC — to comply with PAGCOR anti-money laundering obligations and confirm player eligibility;
• Payment processing — to facilitate deposits and withdrawals through your chosen Philippine payment method;
• Game provision — to deliver casino, sports betting, e-Sabong, bingo, and slot services;
• Responsible gaming monitoring — to identify patterns of play that may indicate problem gambling and to enforce self-imposed limits and exclusions;
• Fraud prevention and security — to detect and prevent unauthorized access, cheating, collusion, and money laundering;
• Regulatory compliance — to fulfill z25's obligations to PAGCOR and other Philippine regulatory and law enforcement bodies;
• Customer support — to respond to your enquiries and resolve disputes;
• Service communications — to send you transactional notifications, account alerts, and mandatory legal or policy updates;
• Marketing communications — to send you promotional offers and bonus information, where you have provided consent and have not opted out.

4. Legal Basis for Processing

z25 processes your personal data under the following legal bases as recognized under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to perform the services you have contracted for by creating a z25 account;
• Legal obligation — processing required to comply with PAGCOR regulations, Philippine AML law, and applicable court or regulatory orders;
• Legitimate interests — fraud prevention, security monitoring, and platform analytics, where these interests are not overridden by your rights;
• Consent — marketing communications and certain cookie-based tracking, where you have provided affirmative consent.

5. Data Sharing & Disclosure

5.1 Service Providers

z25 shares personal data with third-party service providers who process data on z25's behalf under binding data processing agreements. These include: payment processors (GCash/Maya Philippines, BPI, BDO, Metrobank), KYC and identity verification providers, game software providers (who may receive anonymized session data), cloud hosting and security providers, and customer support platform operators. All service providers are contractually required to implement appropriate security measures and to process data only as instructed by z25.

5.2 Regulatory Disclosure

z25 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine governmental or law enforcement bodies where required by law, court order, or legitimate regulatory request. z25 will, where legally permitted, notify you of such disclosure.

5.3 No Sale of Data

z25 does not sell, rent, lease, or otherwise transfer your personal information to third-party advertisers or data brokers for their independent marketing purposes.

6. International Data Transfers

Some of z25's third-party service providers — including game software providers and cloud infrastructure partners — may be located outside the Philippines. Where personal data is transferred internationally, z25 ensures that adequate safeguards are in place as required under RA 10173, including standard contractual clauses or transfers to countries with substantially similar data protection laws. z25 does not transfer data to jurisdictions that do not provide adequate protections without implementing compensating controls.

7. Data Retention

z25 retains personal data for as long as your account is active and for a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations. Transaction and KYC records may be retained for longer periods where required by law. After the applicable retention period, personal data is securely deleted or anonymized. Anonymized, aggregated data (from which you cannot be identified) may be retained indefinitely for statistical and operational purposes.

8. Cookies & Tracking Technologies

z25 uses cookies and similar tracking technologies on the z25.asia website for the following purposes:

• Strictly necessary cookies — required for login session management, security, and basic platform functionality. These cannot be disabled without impairing the service;
• Performance and analytics cookies — used to understand how players navigate the platform and to identify areas for improvement. These are activated with your consent;
• Functional cookies — to remember your preferences such as language and display settings.

You may manage or withdraw consent for non-essential cookies through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to log in and use the z25 platform.

9. Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by z25:

To exercise any of the above rights, contact the z25 Data Protection Officer at [email protected] with the subject line "Data Privacy Request." z25 will respond within 30 days of receiving a complete request.

10. Children's Privacy

The z25 platform is strictly for persons aged 21 and above. z25 does not knowingly collect personal data from individuals under the age of 21. If z25 discovers that personal data from an underage individual has been collected, the account will be immediately suspended, the data will be deleted, and any deposited funds will be returned. Parents or guardians who believe their child has registered on z25 should contact [email protected] immediately. 21+

11. Security

z25 implements a comprehensive set of technical and organizational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data in transit between your device and z25 servers;
• AES-256 encryption for sensitive data stored at rest, including KYC documents;
• Role-based access controls ensuring that z25 personnel access only the data necessary for their specific function;
• Regular penetration testing and security audits by qualified third-party security professionals;
• Multi-factor authentication requirements for z25 internal systems that process player data;
• Incident response procedures aligned with NPC breach notification requirements.

Notwithstanding these measures, no internet-based service can guarantee absolute security. z25 encourages you to protect your own account by using a strong, unique password and never sharing your OTP with anyone.

12. Third-Party Links

The z25 platform does not contain links to third-party websites. This Privacy Policy applies solely to z25 (z25.asia) and does not cover any external sites. z25 is not responsible for the privacy practices of any third-party payment provider interfaces you may access in the course of making a deposit or withdrawal (e.g., the GCash or bank portal opened during a transaction). Those providers' own privacy policies govern their handling of your data.

13. Amendments to This Policy

z25 may update this Privacy Policy from time to time to reflect changes in law, PAGCOR regulatory requirements, or z25's data processing practices. The revised Policy will be published on this page with an updated effective date. Where changes are material, z25 will notify registered players via their registered email address. Continued use of the z25 platform after the effective date of any revision constitutes acceptance of the updated Policy. You are encouraged to review this page periodically.

14. Contact & Data Protection Officer

For questions, requests, or concerns regarding this Privacy Policy or z25's data processing practices, contact the z25 Data Protection Officer:

• Email: [email protected] — subject line: "Data Privacy Request" or "DPO Enquiry"
• Support hours: 8 AM – 12 MN PHT, daily
• Response time: Within 30 days of a complete and verified request

If you are not satisfied with z25's response to your data privacy concern, you have the right to file a complaint with the Philippine National Privacy Commission (NPC). Information on filing NPC complaints is available through the NPC's official channels.