1 Overview
At Goal22, we know that handing over personal information to an online platform requires trust — and we don't take that lightly. This Privacy Policy explains in plain language exactly what data we collect from you, why we collect it, how we use it, who we might share it with, and what rights you have over your own information.
This policy applies to all services offered through the Goal22 platform at goal22.best, including the website, mobile experience, customer support interactions, and any promotional communications you receive from us.
Goal22 complies with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its implementing rules and regulations, as enforced by the National Privacy Commission (NPC) of the Philippines. Your rights as a data subject are real and enforceable, and we respect them fully.
By registering an account on Goal22 or by continuing to use our platform, you acknowledge that you have read this Privacy Policy and consent to the data practices described here. If you do not agree, please do not use our platform.
This policy is written to be understood, not to confuse. If something is unclear, reach out to us at support@goal22.best and we'll explain it in plain terms.
2 Data We Collect
Goal22 collects only the personal data that is necessary to operate the platform, provide our services, verify your identity, process your transactions, and comply with legal obligations. Here is a breakdown of the categories of data we collect:
Account and Identity Information
- Full legal name
- Date of birth
- Email address
- Mobile number
- Username and encrypted password
- Government-issued ID details (for KYC verification)
- Selfie or photo for identity verification purposes
Financial Information
- Payment method details (GCash account, Maya account, bank account number, or card details as applicable)
- Deposit and withdrawal transaction history
- Account balance and betting history
Technical and Usage Data
- IP address and device identifiers
- Browser type and operating system
- Pages visited and features used on the platform
- Login timestamps and session duration
- Geolocation data (general, not precise GPS)
Communication Data
- Records of support chat conversations
- Email correspondence with our team
- Survey responses and feedback you choose to provide
3 How We Collect Your Data
We collect personal data in the following ways:
- Directly from you — when you register an account, complete verification, make a deposit, contact support, or participate in a promotion.
- Automatically — through cookies, log files, and analytics tools as you use the Goal22 website and mobile platform.
- From third parties — including identity verification providers, payment processors, and fraud detection services, where necessary and lawful.
We do not purchase data lists or collect data from social media platforms without your explicit consent. Any data we receive from third parties is handled with the same level of care as data you provide directly.
4 How We Use Your Data
Goal22 uses your personal data for the following purposes:
| Purpose | Examples |
|---|---|
| Account management | Creating and maintaining your Goal22 account, processing logins, managing preferences |
| Identity verification | KYC checks to comply with anti-money laundering regulations and to confirm your age |
| Transaction processing | Handling deposits, withdrawals, and bonus credits via your chosen payment method |
| Customer support | Responding to your enquiries, resolving disputes, processing account closure requests |
| Platform improvement | Analysing usage patterns to improve the Goal22 platform and game offerings |
| Promotions & communications | Sending you relevant offers and updates — only if you have opted in to receive them |
| Security & fraud prevention | Detecting suspicious activity, preventing account misuse, protecting other players |
| Legal compliance | Meeting obligations under Philippine gaming regulations, the DPA, and anti-money laundering laws |
5 Legal Basis for Processing
Under the Data Privacy Act of 2012, Goal22 processes your personal data on the following legal grounds:
- Consent — for marketing communications and optional data uses, where you have given us clear consent. You can withdraw this consent at any time.
- Contractual necessity — to perform our obligations under the Terms and Conditions you agreed to when registering your account.
- Legal obligation — where processing is required to comply with Philippine law, including PAGCOR licensing conditions, AML obligations, and the DPA itself.
- Legitimate interests — for fraud prevention, platform security, and internal analytics, where those interests are not overridden by your rights.
7 Data Retention
Goal22 retains your personal data for as long as your account is active and for a period thereafter as required by law and our operational obligations. In practice, this means:
- Account and transaction data is retained for a minimum of five (5) years after your last transaction, in compliance with Philippine AML regulations.
- Communication records (support chats, emails) are retained for up to two (2) years to help resolve any future disputes.
- Technical log data is typically retained for up to twelve (12) months, after which it is anonymised or deleted.
- KYC documents are retained for as long as required by our regulatory obligations, usually no less than five (5) years after account closure.
When your data is no longer needed, we securely delete or anonymise it so that it can no longer be linked back to you as an individual.
8 Security Measures
Protecting your data is something Goal22 takes seriously at every level. We implement industry-standard technical and organisational security measures, including:
- SSL/TLS encryption for all data transmitted between your device and our servers.
- Encrypted storage for sensitive data including passwords and payment details.
- Role-based access controls — only authorised staff can access personal data, and only when required to do their job.
- Regular security audits and vulnerability assessments.
- Two-factor authentication options for your account login.
- Real-time monitoring for suspicious login activity and account anomalies.
While we do everything reasonable to protect your data, no digital system is completely immune to risk. We encourage you to use a strong, unique password for your Goal22 account and to enable two-factor authentication for additional protection.
In the unlikely event of a data breach that affects your rights and interests, Goal22 will notify the National Privacy Commission and affected users in accordance with the timelines required by the Data Privacy Act of 2012.
9 Cookies and Tracking Technologies
Goal22 uses cookies and similar technologies to operate the platform and improve your experience. Here's a straightforward breakdown of the types we use:
- Essential cookies — required for the platform to function. These keep you logged in, remember your session preferences, and enable core features. You cannot opt out of these without stopping use of the platform.
- Analytics cookies — help us understand how players navigate the site, which pages are most visited, and where users encounter issues. This data is aggregated and anonymised.
- Preference cookies — store your language, display, or notification preferences so you don't have to reset them each visit.
- Marketing cookies — used only if you have given explicit consent, to show you relevant Goal22 promotions. You can opt out of these at any time via your account settings or browser controls.
You can manage or delete cookies through your browser settings. Note that disabling essential cookies may affect how the platform works for you.
10 Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by Goal22. These are not just formalities — they are enforceable rights that we are obligated to respect.
Right to Access
Request a copy of the personal data Goal22 holds about you at any time.
Right to Rectification
Request correction of any inaccurate or incomplete personal data we hold.
Right to Erasure
Request deletion of your personal data, subject to our legal retention obligations.
Right to Object
Object to processing of your data for direct marketing or profiling at any time.
Right to Data Portability
Receive your personal data in a structured, commonly used format where technically feasible.
Right to Complain
Lodge a complaint with the National Privacy Commission if you believe we've mishandled your data.
To exercise any of the above rights, contact our Data Privacy Officer at support@goal22.best with the subject line "Data Subject Request." We will respond within the timelines prescribed by the DPA — typically within 15 business days of receiving your request.
We may need to verify your identity before processing certain requests to protect against unauthorised access. This is for your protection, not to create obstacles.
11 Data Protection for Minors
Goal22 strictly prohibits use of its platform by anyone under the age of 21. We do not knowingly collect personal data from minors. If you are a parent or guardian and believe your child has registered on Goal22, please contact us immediately at support@goal22.best so we can close the account and delete all associated data without delay.
We take this responsibility seriously. Age verification is part of our KYC process precisely to prevent minors from accessing the platform. Any account found to belong to someone under 21 will be permanently closed and all funds returned to the payment source used for deposit.
12 Updates to This Privacy Policy
Goal22 may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. When we make changes, we will update the "Last Updated" date at the top of this page.
For significant changes that materially affect how we use your personal data, we will notify you via email or an in-platform notification before the change takes effect. This gives you the opportunity to review the updated policy and decide whether you are comfortable continuing to use Goal22.
We recommend checking this page periodically so you're always up to date on how your data is handled. Your continued use of the platform after any update is posted constitutes acceptance of the revised Privacy Policy.
13 Contact Our Data Privacy Officer
If you have any questions about this Privacy Policy, want to exercise your data subject rights, or have a concern about how Goal22 has handled your personal information, please get in touch with our Data Privacy Officer.
- Email: support@goal22.best (subject: "Data Subject Request" or "Privacy Concern")
- Live Chat: Available 24/7 through the Goal22 website
- Response time: Within 15 business days for formal data subject requests; faster for general enquiries
If you are not satisfied with our response, you have the right to escalate your concern to the National Privacy Commission of the Philippines, which regulates data privacy compliance under the Data Privacy Act of 2012.
Your privacy matters. Don't hesitate to reach out — whether it's a quick question or a formal request, we're here to help.