niceph22 Privacy Policy

2.Data Controller

For the purposes of the Philippine Data Privacy Act, niceph22 is the personal information controller responsible for the personal data collected through the Platform. niceph22 has designated a Data Protection Officer (DPO) in accordance with NPC requirements. Questions or concerns regarding the processing of your personal data may be directed to the niceph22 DPO via the contact details set out in Section 13 of this Policy.

3.Personal Data We Collect

niceph22 collects personal data that you provide directly, data generated through your use of the Platform, and data obtained from third-party sources for verification and compliance purposes. The categories of personal data we collect include:

niceph22 does not collect sensitive personal information (as defined under Section 3(l) of the DPA, such as health data, political opinions, or religious beliefs) unless strictly required for responsible gaming compliance or as mandated by applicable law, in which case explicit consent will be sought.

4.How We Use Your Personal Data

niceph22 uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your niceph22 account, including processing your registration and managing your login credentials.
• Identity verification (KYC): To verify your identity and age (21+) as required by PAGCOR regulations and the DPA, and to comply with Anti-Money Laundering Act (AMLA) obligations.
• Payment processing: To process deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, InstaPay, PesoNet, and other approved Philippine payment channels.
• Game delivery and Platform operation: To provide you with access to casino games, sports betting, live dealer tables, and all other niceph22 Platform features.
• Customer support: To respond to your enquiries, complaints, and support requests via live chat or email.
• Legal and regulatory compliance: To meet our obligations to PAGCOR, the AMLC, the NPC, and other Philippine regulatory bodies.
• Security and fraud prevention: To detect, investigate, and prevent fraudulent transactions, account takeovers, bonus abuse, and other prohibited conduct.
• Responsible gaming: To monitor gameplay patterns that may indicate problem gambling behaviour and to apply responsible gaming tools, deposit limits, or self-exclusion measures where necessary.
• Platform improvement and analytics: To analyse usage patterns, improve game offerings, and personalise the Platform experience.
• Marketing communications: To send you relevant promotions, bonuses, and platform updates where you have consented to receive such communications. You may withdraw this consent at any time.

5.Legal Basis for Processing

niceph22 processes your personal data on the following legal grounds as recognised under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to perform the contract between you and niceph22 — specifically, the provision of Platform services following your registration.
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulatory requirements, the AMLA, and NPC guidelines.
• Legitimate interests: Processing for fraud prevention, security monitoring, and Platform improvement, where our legitimate interests do not override your fundamental rights and freedoms.
• Consent: Processing for direct marketing communications and for any collection of sensitive personal information, where your explicit consent has been obtained and may be withdrawn at any time.

6.Sharing of Personal Data

niceph22 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. niceph22 may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash (G-Xchange Inc.), Maya (Voyager Innovations Inc.), BancNet (operator of InstaPay and PesoNet), and partner banks (BPI, BDO, Metrobank) — to process deposits and withdrawals in Philippine Peso.
• Game providers: Third-party game software providers whose games are hosted on the niceph22 Platform, to the extent necessary to operate and audit game outcomes.
• Identity verification services: KYC and AML compliance service providers engaged to verify player identities and screen against sanctions and watchlists as required by PAGCOR and the AMLA.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other Philippine government bodies, where disclosure is required by law or regulatory direction.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and technical support providers engaged by niceph22 who process data solely on niceph22's instructions under contractual data processing agreements.
• Legal advisers and auditors: Professional advisers and auditors engaged by niceph22 for legal, compliance, or financial audit purposes, subject to professional confidentiality obligations.

Where personal data is transferred to service providers, niceph22 requires those providers to implement data protection measures consistent with applicable Philippine law and this Policy.

7.Data Retention

niceph22 retains personal data for no longer than is necessary for the purposes for which it was collected, subject to the following minimum retention obligations:

• Account and identity data: Retained for the duration of your account plus a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and the AMLA's record-keeping obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and BIR regulations.
• Customer support communications: Retained for two (2) years following the resolution of each support case, unless a longer period is required for ongoing dispute resolution or regulatory investigation.
• Marketing consent records: Retained for the duration of the consent plus three (3) years following withdrawal, as evidence of lawful processing.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC guidelines.

8.Data Security

niceph22 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. Our security measures include:

• TLS 256-bit encryption for all data transmitted between your device and niceph22 servers.
• Encryption of stored personal data and financial records at rest.
• Role-based access controls limiting employee access to personal data to those with a legitimate business need.
• Multi-factor authentication requirements for all niceph22 staff with access to personal data systems.
• Regular security assessments, penetration testing, and vulnerability scanning of the niceph22 Platform and infrastructure.
• An incident response and data breach notification procedure consistent with NPC requirements, including notification to affected data subjects and the NPC within the prescribed timeframes in the event of a personal data breach.

While niceph22 employs rigorous security measures, no system is completely impenetrable. We encourage you to use a strong, unique password for your niceph22 account and to enable two-factor authentication (2FA) to reduce the risk of unauthorised access.

9.Cookies and Tracking Technologies

niceph22 uses cookies and similar tracking technologies (such as local storage and session tokens) on the Platform to:

• Essential cookies: Maintain your authenticated session, remember your language and display preferences, and ensure the Platform functions correctly. These cookies are strictly necessary and cannot be disabled without affecting Platform functionality.
• Analytics cookies: Collect aggregated, anonymised information about how players use the niceph22 Platform, to help us improve navigation, game discovery, and overall user experience. Analytics data is not linked to your individual identity.
• Security cookies: Detect fraudulent login attempts, CSRF attacks, and other security threats, and associate your session with a single device to prevent session hijacking.

You may manage cookie preferences through your browser settings. Blocking essential cookies will impair your ability to use the niceph22 Platform. niceph22 does not use third-party advertising or behavioural tracking cookies.

10.Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012 and NPC regulations, you have the following rights with respect to your personal data held by niceph22:

• Right to be informed: To be notified that your personal data is being or will be processed, and of the purposes and scope of such processing — which is the purpose of this Policy.
• Right to access: To request a copy of your personal data held by niceph22 and to receive information about how it is being processed.
• Right to rectification: To request correction of inaccurate or incomplete personal data held by niceph22.
• Right to erasure or blocking: To request deletion or suspension of processing of your personal data where it is no longer necessary, where consent has been withdrawn, or where processing is unlawful — subject to niceph22's legal retention obligations.
• Right to object: To object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation where processing is based on legitimate interests.
• Right to data portability: To receive your personal data in a structured, commonly used, and machine-readable format where processing is carried out by automated means.
• Right to lodge a complaint: To file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact the niceph22 Data Protection Officer at [email protected] with the subject line "Data Privacy Request." niceph22 will respond to valid requests within fifteen (15) working days of receipt, in accordance with NPC guidelines.

11.Minors and Age Restriction

The niceph22 Platform is strictly intended for persons aged 21 years and above. niceph22 does not knowingly collect personal data from individuals under 21 years of age. If niceph22 discovers that personal data has been collected from a person under 21, that account will be immediately suspended and the personal data will be deleted from niceph22's systems, subject to any mandatory retention obligations under Philippine law. Account holders are responsible for ensuring that persons under 21 do not access their niceph22 account or the Platform. If you believe a person under 21 has registered on the niceph22 Platform, please notify us immediately at [email protected].

12.Changes to This Privacy Policy

niceph22 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, changes in Philippine law, or requirements from the NPC or PAGCOR. When material changes are made, niceph22 will notify registered players by displaying a notice on the Platform or by SMS or email to the contact details on file. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the niceph22 Platform following notification of an update constitutes your acceptance of the revised Policy. If you do not agree with any amendment, you must stop using the Platform and may request account closure.

13.Contact and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or niceph22's processing of your personal data, please contact our Data Protection Officer: