z25 is committed to protecting your personal data in accordance with Republic Act No. 10173 (the Philippine Data Privacy Act of 2012) and PAGCOR's data protection requirements. This policy explains exactly what we collect, why we collect it, and how it stays secure.
About This Policy. This Privacy Policy ("Policy") describes how z25 ("z25", "we", "us", "our") collects, uses, processes, stores, and discloses personal data obtained from players and site visitors ("you", "your") in connection with your use of the z25 Casino platform at z25.bio. This Policy is issued pursuant to Republic Act No. 10173 (the Data Privacy Act of 2012, "DPA"), its Implementing Rules and Regulations, and relevant issuances of the National Privacy Commission ("NPC") of the Philippines. By registering an account or using the Platform you acknowledge that you have read and understood this Policy.
1.1 The data controller responsible for personal data processed through the z25 Platform is z25, operating the online casino and sports betting platform at z25.bio under PAGCOR regulatory oversight. For the purposes of the Data Privacy Act of 2012, z25 is the personal information controller ("PIC") in respect of all personal data collected through the Platform.
1.2 z25 has appointed a Data Protection Officer ("DPO") responsible for overseeing compliance with the DPA, this Policy, and NPC issuances. Contact details for the DPO are provided in Section 14 of this Policy.
2.1 This Policy applies to all personal data collected by z25 through: (a) the z25 website at z25.bio and all associated subdomains; (b) the account registration and KYC verification process; (c) deposits, withdrawals, and other financial transactions on the Platform; (d) gameplay and betting activity across all z25 game categories; (e) communications between you and z25 support; and (f) any cookies, session data, or tracking technologies deployed on the Platform.
2.2 This Policy does not apply to third-party websites, services, or applications that may be linked from or integrated with the z25 Platform. z25 is not responsible for the privacy practices of third parties whose services or technologies are used in connection with the Platform but who operate under their own privacy policies.
z25 collects the following categories of personal data in connection with the Platform:
| Category | Examples | Source |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government-issued ID number, photograph | Provided by you during registration or KYC |
| Contact Data | Mobile number (Philippine format), email address | Provided by you at registration |
| Financial Data | GCash number, Maya wallet ID, bank account details, transaction amounts, deposit and withdrawal history | Provided by you or generated by Platform activity |
| Gaming Data | Game session logs, bet history, win/loss records, bonus redemption history, responsible gaming settings | Generated automatically through Platform use |
| Technical Data | IP address, device type, operating system, browser type, session duration, login timestamps | Collected automatically via server logs and cookies |
| Communications Data | Support chat transcripts, emails, complaint records | Generated through your contact with z25 support |
| Marketing Preferences | Opted-in communication preferences, promotional history | Provided by you or inferred from Platform activity |
3.2 z25 does not intentionally collect special categories of personal data (such as racial or ethnic origin, religious beliefs, health data, or sexual orientation) except where required by law or PAGCOR regulation, and only with your explicit consent where such collection is discretionary.
z25 processes personal data for the following purposes:
5.1 Under the Philippine Data Privacy Act, z25 processes personal data on the following legal bases:
5.2 Where z25 relies on legitimate interests as a legal basis, z25 has assessed that its interests do not override your fundamental rights and freedoms as a data subject under Philippine law. A record of these assessments is maintained by z25's Data Protection Officer.
z25 does not sell your personal data to any third party for commercial purposes. Data sharing is limited to what is strictly necessary for the purposes described in this Policy.
6.1 z25 may share personal data with the following categories of recipients:
6.2 All third-party recipients of personal data who act as personal information processors on z25's behalf are required to enter into data processing agreements that impose obligations consistent with the DPA and this Policy.
7.1 z25 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following general retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and Identity Data | Duration of account plus 5 years after closure | PAGCOR licensing; RA 9160 AMLA requirements |
| Financial Transaction Records | 10 years from transaction date | RA 9160 AMLA; BIR record-keeping requirements |
| Gaming Session Logs | 5 years from session date | PAGCOR audit requirements |
| KYC Documentation | 5 years after account closure or last transaction | RA 9160 AMLA requirements |
| Support Communications | 3 years from last communication | Dispute resolution; legitimate interest |
| Marketing Preferences | Until withdrawal of consent or account closure | Consent |
| Technical / Log Data | 12 months from collection | Security and fraud prevention |
7.2 Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with z25's data disposal procedures. Anonymised or aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical and analytical purposes.
8.1 z25 implements a range of technical and organisational security measures designed to protect personal data from unauthorised access, disclosure, alteration, loss, or destruction. These measures include:
8.2 Notwithstanding these measures, no data transmission over the internet or storage system can be guaranteed as completely secure. If you believe your account has been compromised, contact z25 support immediately.
9.1 z25 uses cookies and similar tracking technologies on the Platform for the following purposes:
9.2 You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent you from logging in and using the Platform.
Under the Philippine Data Privacy Act, you have the following rights in relation to your personal data held by z25:
10.1 Right to Access. You have the right to request confirmation of whether z25 holds personal data about you and to receive a copy of that data, together with information about how it is being processed.
10.2 Right to Rectification. You have the right to request correction of inaccurate or incomplete personal data held about you. You may update most account information directly through your z25 account settings.
10.3 Right to Erasure. You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and there is no other legal basis for processing. This right is subject to z25's legal retention obligations under PAGCOR regulations and RA 9160.
10.4 Right to Object. You have the right to object to the processing of your personal data where z25 relies on legitimate interests as the legal basis. You also have an unconditional right to object to direct marketing processing at any time.
10.5 Right to Data Portability. Where processing is based on your consent or on contractual necessity, you have the right to receive a copy of personal data you have provided to z25 in a structured, commonly used, machine-readable format.
10.6 How to Exercise Your Rights. To exercise any of the above rights, please contact z25's Data Protection Officer at the details provided in Section 14. z25 will respond to verified requests within 30 calendar days. We may request proof of identity before processing a data subject rights request.
10.7 Right to Lodge a Complaint. If you believe z25 has processed your personal data in violation of the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through NPC's official channels.
z25 does not knowingly collect personal data from individuals under the age of 21. The Platform is strictly for adults aged 21 and above as required by PAGCOR. Age verification is a mandatory step in the z25 registration and KYC process.
11.1 Where z25 discovers that personal data has been collected from an individual under 21 years of age — whether through account registration or otherwise — z25 will immediately close the relevant account, delete the collected personal data to the extent not required to be retained for legal compliance purposes, and report the incident to PAGCOR as required.
11.2 If you are a parent or guardian and believe your child has provided personal data to z25, please contact z25's Data Protection Officer immediately using the contact details in Section 14.
12.1 z25 primarily processes and stores personal data within the Philippines. Where personal data is transferred to or processed by systems or service providers located outside the Philippines — for example, cloud infrastructure providers, certain game content providers, or analytics platforms — z25 ensures that such transfers comply with Section 21 of the DPA, which requires that the receiving country or organisation provides an adequate level of data protection.
12.2 Safeguards used by z25 for cross-border transfers include: (a) transfer to countries recognised by the NPC as providing adequate protection; (b) binding contractual clauses approved by or consistent with NPC guidance; and (c) compliance certifications held by receiving organisations. Details of specific cross-border transfer safeguards may be requested from z25's Data Protection Officer.
13.1 z25 may update this Privacy Policy from time to time to reflect changes in applicable law, NPC guidance, PAGCOR requirements, or z25's data processing practices. The updated Policy will be published at z25.bio/privacy-policy with a revised effective date.
13.2 Where a change is material — meaning it significantly affects how z25 processes your personal data or your rights under this Policy — z25 will notify registered Players via in-platform notification or email at least 14 calendar days before the change takes effect, to the extent practicable. Your continued use of the Platform after the revised effective date constitutes your acceptance of the updated Policy.
13.3 z25 maintains an internal record of all prior versions of this Privacy Policy. Players who wish to review a prior version may request it from the Data Protection Officer.
14.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by z25, please contact z25's Data Protection Officer through any of the following channels:
14.2 z25 aims to respond to all data subject rights requests and privacy inquiries within 30 calendar days of receipt. Complex requests may require additional time; z25 will notify you within the initial 30-day period if an extension is needed.
Your privacy matters to z25. Every data subject rights request is handled by z25's Data Protection Officer with confidentiality and in accordance with the Data Privacy Act. z25 will never charge a fee for processing a legitimate data subject rights request.
Six principles that define how z25 handles your personal data — in plain terms.
z25 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your data is used only to provide z25 services and meet regulatory obligations.
All z25 data processing is conducted in compliance with Republic Act No. 10173 (the Philippine Data Privacy Act of 2012), NPC issuances, and PAGCOR's data protection requirements for licensed gaming operators.
Your data travels between your device and z25 servers over SSL/TLS encrypted connections. Passwords are stored as one-way cryptographic hashes — not in any form that z25 staff can read or retrieve.
z25 honours all data subject rights under the DPA — access, rectification, erasure, objection, portability, and the right to complain to the NPC. Requests are handled by a dedicated Data Protection Officer within 30 days.
z25 keeps your data only as long as required by law and our regulatory obligations. When retention periods expire, data is securely deleted or irreversibly anonymised — it is not kept indefinitely by default.
z25 has appointed a Data Protection Officer responsible for overseeing DPA compliance, handling data subject rights requests, and maintaining z25's registration with the National Privacy Commission.
Confident your privacy is protected? Create your z25 account today. Deposit from ₱100 via GCash, access 500+ games, and play under PAGCOR regulation. 21+ only.