goal22 Privacy Policy – How We Protect Your Personal Data

1Introduction

This Privacy Policy describes how goal22 ("we," "us," "our") collects, uses, stores, and shares personal information when you register and use the goal22 online gaming platform at goal22.vu. "You" or "Player" refers to any individual who creates an account or accesses the platform.

goal22 is committed to protecting the privacy and personal data of Filipino players. We process personal data only for legitimate, clearly defined purposes and take reasonable steps to keep that data accurate, secure, and protected from unauthorized access.

This Policy should be read alongside our Terms and Conditions and our Responsible Gaming policy. Together, these documents form the complete framework governing your use of goal22.

2Data We Collect

goal22 collects personal information in the following categories:

goal22 does not knowingly collect personal data from individuals under the age of 21. If we become aware that an account belongs to a person under 21, the account will be suspended and any personal data associated with it will be handled in accordance with our data retention policy.

3How We Use Your Data

goal22 uses your personal data only for purposes that are necessary, proportionate, and clearly related to operating the platform and serving you as a player. The main purposes are:

• Creating and maintaining your goal22 account, including login authentication via OTP.
• Processing PHP deposits and withdrawals through GCash, Maya, and Philippine bank transfer.
• Conducting KYC identity verification before processing withdrawals.
• Detecting and preventing fraud, bonus abuse, money laundering, and unauthorized account access.
• Providing customer support through live chat and email.
• Sending you account notifications, security alerts, and promotional communications where you have opted in to receive them.
• Monitoring platform usage to improve performance, identify technical issues, and develop new features.
• Complying with applicable legal obligations, including record-keeping and reporting requirements.

goal22 does not use your personal data to make automated decisions that would significantly affect your legal rights without human review being available.

4KYC Identity Verification

Before processing your first withdrawal, goal22 is required to verify your identity through a Know Your Customer (KYC) process. This involves requesting a copy of a valid Philippine government-issued ID — such as a Philippine Passport, SSS ID, PhilSys National ID, Driver's License, or UMID card — and may also include a selfie or proof of address depending on the level of verification required.

KYC documents submitted to goal22 are used solely for the purpose of confirming your identity and are stored securely using access controls that limit who within the organization can view them. We do not use your ID documents for any purpose beyond identity verification and fraud prevention.

goal22 may engage a third-party identity verification partner to assist with KYC processing. Any such partner is bound by a data processing agreement that restricts their use of your data to the specific KYC purpose.

5Payment Data

All financial transactions at goal22 are processed in Philippine Peso. Payment methods supported include GCash, Maya, and Philippine bank transfer. goal22 does not store complete payment credentials such as full bank account numbers or e-wallet login details — payment processing is handled through the relevant payment provider's secure systems.

Transaction records (amount, date, payment method type, reference number) are retained on goal22's systems as part of your account history and for compliance purposes. These records are necessary to resolve disputes, process withdrawals to the correct verified account, and maintain accurate financial records.

goal22 does not accept credit cards or cryptocurrency as payment methods for gaming activity. Any attempt to use these methods will not be processed on the platform.

6Data Sharing

goal22 does not sell, rent, or trade your personal data to any third party for their own marketing or commercial purposes. Personal data is shared only in the following limited circumstances:

• Service providers: Companies that provide essential services to operate goal22, including payment processors (GCash, Maya, bank transfer networks), KYC verification partners, cloud infrastructure providers, and customer support software vendors. Each is bound by a data processing agreement.
• Legal and regulatory requirements: Where goal22 is required by applicable law, court order, or regulatory authority to disclose personal data, we will comply with such requirements. Where legally permissible, we will notify you of such a disclosure.
• Fraud and security: In cases of suspected fraud, money laundering, identity theft, or other criminal activity, goal22 may share relevant data with law enforcement agencies or financial intelligence authorities.
• Business transfers: If goal22 undergoes a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction. You will be notified of any such change and the privacy protections applicable to your data.

goal22 does not share your gaming history, account balance, or personal information with other players on the platform under any circumstances.

7Data Security

goal22 takes data security seriously and implements multiple layers of protection for the personal information stored on our systems:

• SSL/TLS encryption is applied to all connections between your device and the goal22 platform, protecting data in transit from interception.
• Passwords are stored using one-way hashing and are never held in plaintext — not even goal22 staff can see your password.
• OTP two-factor authentication is applied to account login to reduce the risk of unauthorized access even if login credentials are compromised.
• Access to player data within goal22's internal systems is restricted to staff with a legitimate need-to-know basis and is subject to access logging.
• KYC documents and sensitive identity records are stored in encrypted storage with restricted access controls.

While goal22 takes all reasonable technical and organizational steps to protect your data, no system is completely immune to security risk. You are responsible for keeping your own device, account password, and OTP codes secure. goal22 will never contact you to ask for your password or OTP through any channel.

8Cookies and Tracking Technologies

goal22 uses cookies and similar browser-based technologies to provide core platform functionality and to understand how the platform is used. The types of cookies goal22 uses include:

• Strictly necessary cookies: Required for the platform to function — including keeping you logged in, maintaining your session state between pages, and enabling secure authentication. These cannot be disabled without breaking core functionality.
• Performance and analytics cookies: Used to understand which areas of the platform are used most, how long sessions last, and where technical errors occur. This data is aggregated and does not personally identify individual players.
• Preference cookies: Store your platform settings and language preferences so you do not need to re-enter them on each visit.

Most browsers allow you to manage or delete cookies through your browser settings. Disabling strictly necessary cookies will affect the functionality of the goal22 platform, including your ability to stay logged in. Disabling analytics or preference cookies will have no impact on your ability to play or transact.

9Your Rights Over Your Personal Data

As a goal22 player, you have the following rights with respect to the personal data we hold about you:

• Right of access: You may request a copy of the personal data goal22 holds about your account.
• Right to correction: If any personal data on your account is inaccurate or outdated, you can request that it be corrected. Some changes (such as name changes) may require supporting documentation.
• Right to erasure: You may request that your personal data be deleted. Note that some data must be retained to comply with legal and regulatory record-keeping obligations even after account closure.
• Right to restrict processing: In certain circumstances, you may ask goal22 to pause processing of your personal data while a query or complaint is being resolved.
• Right to object: You may object to the use of your personal data for direct marketing communications at any time by contacting the support team or adjusting your notification preferences within your account.

To exercise any of these rights, contact the goal22 support team via live chat (available 24/7 within the platform) or by email at [email protected]. goal22 will respond to verified data requests within a reasonable timeframe.

10Data Retention

goal22 retains personal data for as long as it is necessary to fulfill the purposes described in this Policy, to maintain your active account, or to comply with applicable legal and regulatory retention requirements. The general principles that govern how long data is retained are:

• Active account data is retained for the lifetime of your account and for a defined period after closure.
• Transaction records and KYC verification data may be retained for a period required under applicable financial record-keeping obligations.
• Support communications are retained for a period sufficient to resolve disputes and improve service quality.
• Technical and analytics data is retained in aggregated or anonymized form after the individual session data has been purged.

When data is no longer required for any of these purposes, it is securely deleted or anonymized.

11Changes to This Privacy Policy

goal22 may update this Privacy Policy from time to time to reflect changes in our data practices, the services we offer, or applicable legal requirements. When we make material changes, the revised Policy will be published on this page with an updated effective date.

For significant changes that affect how we process your personal data, goal22 may notify registered players through in-platform notifications or via the contact information associated with your account. Continued use of goal22 following the publication of an updated Privacy Policy constitutes your acceptance of the revised version.

12Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise your data rights, or have a concern about how your personal data is being handled at goal22, please reach out through the following channels:

• Live chat — 24/7 within the goal22 platform after login
• Email — [email protected] (plain text, no clickable link)

goal22 takes privacy concerns seriously. All data-related queries are handled by our support team and escalated to the appropriate internal team where required. We aim to acknowledge privacy-related requests promptly and resolve them within a reasonable timeframe.