niceph25 Privacy Policy

niceph25 ("the Company," "we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who interact with the niceph25 online casino and sports betting platform available at niceph25.co ("the Platform"). This Privacy Policy ("Policy") sets out in clear terms how niceph25 handles personal information — what we collect, why we collect it, how it is used, who it may be shared with, and what rights you hold as a data subject under the laws of the Republic of the Philippines.

This Policy applies to all personal data processed by niceph25 in connection with the Platform, including data collected during account registration, the KYC verification process, deposits and withdrawals through payment partners such as GCash and PayMaya, customer support interactions, and general Platform use. It applies to all registered niceph25 Players and to visitors who access the Platform without registering.

This Policy should be read in conjunction with the niceph25 Terms & Conditions, which govern the overall relationship between niceph25 and its registered Players. Where this Policy uses terms defined in the Terms & Conditions, those definitions apply here as well unless the context requires otherwise.

For the purposes of the Data Privacy Act of 2012 and this Policy, niceph25 acts as the personal information controller ("PIC") in respect of personal data collected and processed in connection with the Platform. As PIC, niceph25 determines the purposes and means of processing personal data and is responsible for ensuring that processing activities comply with applicable Philippine data protection law.

niceph25 has designated a Data Protection Officer ("DPO") as required under the DPA. The DPO is responsible for overseeing niceph25's data protection program, advising on compliance obligations, and acting as the primary point of contact for data subjects exercising their rights under the DPA. Contact details for the DPO are set out in Section 15 of this Policy.

Where niceph25 engages third parties to process personal data on its behalf — including payment processors handling GCash, PayMaya, BPI, BDO, and Metrobank transactions — those parties act as personal information processors ("PIPs") under contracts that impose binding data protection obligations consistent with this Policy and the DPA.

niceph25 collects the following categories of personal data from Players and Platform users:

• Full legal name as it appears on a government-issued Philippine identification document;
• Date of birth (for mandatory age verification — niceph25 is restricted to players 21 years and above);
• Gender (where provided during registration);
• Residential address in the Philippines.

• Philippine mobile number (used for account verification, Two-Factor Authentication, and communications);
• Email address (used for account notifications, support correspondence, and promotional communications where consented).

• Photographs or scanned images of government-issued Philippine identification documents (PhilSys National ID, Philippine Passport, Driver's License, SSS ID, GSIS ID, or UMID);
• Selfie or live photograph submitted for biometric verification purposes;
• Any additional identity or source-of-funds documentation requested to fulfill PAGCOR's KYC and Anti-Money Laundering (AML) obligations.

• Payment method details (GCash account number, PayMaya account number, bank account details for BPI, BDO, and Metrobank) — sufficient to process deposits and withdrawals, not full card numbers;
• Transaction history including deposit amounts, withdrawal requests, wager amounts, game results, and Wallet balance history;
• Information required for AML reporting obligations under the Anti-Money Laundering Act (AMLA) as amended.

• Device type, operating system, and browser type used to access the Platform;
• IP address and approximate geographic location at time of login and during sessions;
• Session duration, game interactions, feature usage patterns, and in-platform navigation data;
• Cookie identifiers and similar tracking data as described in Section 8.

• Records of live chat, email, and any other support communications between you and niceph25's customer support team;
• Complaint and dispute records.

niceph25 collects personal data through the following channels:

• Directly from you — when you complete the niceph25 registration form, submit KYC documents, initiate a deposit or withdrawal, contact our support team, or respond to a promotional offer;
• Automatically through Platform use — technical and usage data is collected automatically when you access the niceph25 website or mobile platform, including through cookies, server logs, and session tracking technologies;
• From payment partners — niceph25 receives transaction confirmation data and, where required for AML purposes, additional information from payment processors handling GCash, PayMaya, and Philippine bank transfers;
• From identity verification services — where niceph25 uses third-party KYC providers to assist with identity verification, those providers may share verification outcomes and associated data with niceph25;
• From PAGCOR and regulatory authorities — in limited circumstances, niceph25 may receive player-related information from PAGCOR or other Philippine regulatory authorities in the context of its regulatory compliance obligations.

Under the Data Privacy Act of 2012, niceph25 processes personal data on the following legal bases:

• Contractual necessity — processing is necessary to perform the contract between niceph25 and the Player (the niceph25 Terms & Conditions), including to provide account services, process payments, and deliver gaming services;
• Legal obligation — processing is required to comply with applicable legal and regulatory obligations, including PAGCOR's KYC and AML requirements, the AMLA, tax reporting obligations, and NPC registration requirements;
• Legitimate interests — processing is carried out for niceph25's legitimate interests, including fraud prevention, platform security, responsible gaming enforcement, and improvement of Platform services, where those interests are not overridden by the Player's data protection rights;
• Consent — where processing is not required on other legal bases (for example, certain marketing communications), niceph25 will seek your prior, free, specific, informed, and freely given consent. You may withdraw such consent at any time without affecting the lawfulness of prior processing.

niceph25 uses the personal data collected for the following purposes:

To create, maintain, and administer your niceph25 Account; to process deposits and withdrawals through GCash, PayMaya, and Philippine bank channels; to provide access to all Platform features; and to deliver customer support in connection with your Account.

To verify your identity and confirm that you are aged 21 years or older as required by PAGCOR's licensing conditions. niceph25 is legally prohibited from providing gambling services to persons under 21 years of age, and KYC data is essential to enforcing this restriction.

To fulfill niceph25's obligations under its PAGCOR license, the Anti-Money Laundering Act, PAGCOR's AML compliance framework, and other applicable Philippine laws. This includes mandatory reporting to the Anti-Money Laundering Council (AMLC) where required, and disclosure to PAGCOR and other competent Philippine authorities on request.

To protect the security and integrity of the Platform and all Player Accounts — including detecting, preventing, and investigating unauthorized access, fraudulent activity, money laundering, and violations of the niceph25 Terms & Conditions.

To monitor Player activity and enforce responsible gaming tools including deposit limits, session time controls, and self-exclusion obligations. Session and transaction data is used to identify patterns that may indicate problem gambling behaviors, in accordance with niceph25's PAGCOR-mandated responsible gaming obligations.

Where you have provided consent, to send you information about niceph25 promotions, bonuses, and new features. You may opt out of marketing communications at any time through your Account Settings or by contacting niceph25 support. Opting out of marketing does not affect the delivery of transactional communications related to your Account.

To analyze usage patterns, Platform performance, and Player behavior in aggregate and pseudonymized form, for the purpose of improving the niceph25 Platform, developing new features, and enhancing the overall user experience for Filipino players.

niceph25 does not sell, rent, or trade your personal data to third parties for commercial purposes. Personal data is shared only in the following circumstances and with the following categories of recipient:

• Payment processors — GCash (GXI), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other approved Philippine payment service providers, to the extent necessary to process deposits and withdrawals on your behalf;
• KYC and identity verification providers — third-party identity verification service providers engaged to assist with KYC document verification and age confirmation, bound by data processing agreements;
• PAGCOR and Philippine regulatory authorities — to fulfill niceph25's mandatory reporting and disclosure obligations under its PAGCOR license and applicable Philippine law, including AMLC reporting where required under the AMLA;
• Legal and law enforcement authorities — where required by a court order, statutory obligation, or lawful request from a competent Philippine law enforcement authority;
• Technology and infrastructure providers — cloud hosting, IT security, and platform infrastructure providers who process data on niceph25's behalf under binding data processing agreements that impose obligations equivalent to those in this Policy;
• Professional advisors — legal counsel, auditors, and compliance advisors, bound by confidentiality obligations, where necessary for the operation of niceph25's business.

niceph25 uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies — essential for Platform operation, including session management, authentication, and security functions. These cannot be disabled without affecting Platform functionality;
• Functional cookies — used to remember your preferences (such as language settings and login state) to provide a more personalized experience;
• Analytics cookies — used in pseudonymized or aggregate form to analyze how Players use the Platform, identify performance issues, and measure feature adoption. This data is used internally to improve the Platform;
• Security and fraud prevention cookies — used to detect and prevent fraudulent activity, identify suspicious login patterns, and protect Account security.

Strictly necessary cookies are used on the basis of contractual necessity and legitimate interests. Functional and analytics cookies may be managed through your browser settings. Most modern browsers allow you to refuse cookies or to be alerted when cookies are being sent. Please note that disabling certain cookies may affect the functionality of the niceph25 Platform.

niceph25 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, and in any event for the minimum periods required by applicable Philippine law and PAGCOR's data retention obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymized in accordance with niceph25's data disposal procedures. Where data must be retained beyond standard periods due to an ongoing legal dispute, regulatory inquiry, or court order, retention will be extended until the matter is resolved.

niceph25 implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental or unlawful destruction, alteration, disclosure, or loss. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between Players' devices and niceph25's servers;
• Encryption of sensitive personal data and financial information at rest within niceph25's data storage infrastructure;
• Role-based access controls ensuring that personal data is accessible only to niceph25 personnel and authorized third-party processors with a legitimate operational need;
• Multi-factor authentication requirements for access to systems containing personal data by niceph25 personnel;
• Regular security assessments, penetration testing, and vulnerability management programs;
• Incident response procedures compliant with the NPC's mandatory personal data breach notification requirements under the DPA.

Notwithstanding these measures, no data transmission or storage system is entirely impenetrable. Players are reminded of their own obligation to maintain the security of their niceph25 Account credentials as described in the Terms & Conditions.

As a data subject under the Data Privacy Act of 2012, you hold the following rights in respect of your personal data processed by niceph25. To exercise any of these rights, you may contact niceph25's Data Protection Officer using the contact information in Section 15.

The niceph25 Platform is strictly restricted to persons aged 21 years and above in accordance with PAGCOR's licensing requirements. niceph25 does not knowingly collect or process personal data from individuals under the age of 21. Age verification through the KYC process is a mandatory prerequisite for access to any real-money gambling feature on the Platform.

In the event that niceph25 becomes aware that personal data has been collected from an individual who has misrepresented their age and is under 21 years of age, niceph25 will immediately close the relevant Account, forfeit any associated Wallet balances, and securely delete the collected personal data to the extent not required to be retained for regulatory compliance purposes.

The niceph25 Platform may include references to payment service providers such as GCash and PayMaya whose services you access when making deposits or withdrawals. When you interact with these payment providers' platforms or applications, your personal data is processed by those providers under their own privacy policies, which are separate from and independent of this Policy.

niceph25 is not responsible for the privacy practices of third-party payment providers or other service providers. Players are encouraged to review the privacy policies of any third-party service they use in connection with their niceph25 Account, including GCash (GXI), PayMaya (Voyager Innovations), and their respective banking providers.

niceph25 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable Philippine data protection law, PAGCOR regulatory requirements, niceph25's data processing practices, or other operational changes. The updated Policy will be published on this page with a revised "Last Updated" date.

Where amendments are material — for example, where a new category of data is collected, a new purpose for processing is introduced, or data sharing arrangements change significantly — niceph25 will provide prior notice to registered Players via email or through a prominent notice on the Platform before the amended Policy takes effect. Continued use of the niceph25 Platform after the effective date of a revised Policy constitutes acceptance of the revised terms.

For all privacy-related inquiries, requests to exercise your data rights under the DPA, complaints, or questions about this Policy, please contact niceph25's Data Protection Officer through the following channel:

niceph25's DPO will assess your request, verify your identity as required, and communicate the outcome within the applicable statutory or regulatory timeframe. If you are not satisfied with niceph25's response, you retain the right to escalate your complaint to the National Privacy Commission (NPC) of the Republic of the Philippines in accordance with the DPA and NPC's complaints procedures.