niceph21 Privacy Policy

1. Introduction

1.1 This Privacy Policy ("Policy") describes how niceph21 ("the Platform", "we", "us", "our") collects, uses, stores, shares, and protects the personal data of individuals ("you", "the Player", "the User") who access or use the niceph21 website at niceph21.vip and any associated mobile-optimised versions of the Platform.

1.2 niceph21 is committed to protecting the privacy and security of all players, particularly those based in the Philippines. We process personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC).

1.3 This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference.

1.4 We may update this Policy from time to time. The date of the most recent revision is displayed at the top of this page. Continued use of the Platform following any update constitutes your acceptance of the revised Policy.

2. Data Controller

2.1 For the purposes of the Philippine Data Privacy Act of 2012, niceph21 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes in connection with the operation of the Platform.

2.2 As Personal Information Controller, niceph21 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

2.3 If you have any questions or concerns about how your personal data is handled, you may contact our Data Protection Officer (DPO) via the contact details provided in Section 15 of this Policy.

3. Data We Collect

3.1 niceph21 collects the following categories of personal data:

3.2 niceph21 does not collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for regulatory compliance, in which case such data is handled with heightened security measures and explicit consent.

4. How We Collect Data

4.1 niceph21 collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the Platform, including through cookies, server logs, and similar tracking technologies.
• Third-party sources: Identity verification and KYC data received from accredited verification service providers; fraud prevention data from security partners; payment data from GCash, Maya, and banking partners as part of transaction processing.

4.2 Where niceph21 receives personal data about you from a third party, we will handle that data in accordance with this Policy and notify you of the source where required by applicable law.

5. How We Use Your Data

5.1 niceph21 uses your personal data for the following purposes:

• To create, manage, and maintain your player account on the Platform.
• To verify your identity and age in compliance with Philippine gaming regulations and KYC requirements. Players must be at least 21 years of age.
• To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To personalise your gaming experience, including game recommendations and relevant promotional offers.
• To monitor your gaming activity for responsible gaming purposes, including identifying signs of problem gambling and applying self-exclusion or limit tools where appropriate.
• To communicate with you regarding your account, transactions, promotions, and Platform updates.
• To comply with legal and regulatory obligations, including reporting requirements under PAGCOR regulations and anti-money laundering laws.
• To improve the Platform's performance, security, and user experience through analytics and testing.
• To resolve disputes and enforce our Terms & Conditions.

5.2 niceph21 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

6. Legal Basis for Processing

6.1 Under the Philippine Data Privacy Act of 2012, niceph21 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC/AML obligations, PAGCOR regulatory requirements, and tax reporting duties.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and analytics, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where we have obtained your prior, informed, and freely given consent. You may withdraw consent at any time.

7. Data Sharing & Disclosure

7.1 niceph21 does not sell your personal data to any third party. We may share your data only in the following circumstances and only to the extent necessary:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, and debit card processors, solely to facilitate deposits and withdrawals.
• KYC and identity verification providers: Accredited third-party providers used to verify your identity and age as required by Philippine gaming regulations.
• Fraud prevention and security partners: Service providers that assist in detecting and preventing fraudulent activity, money laundering, and other prohibited conduct.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities, where disclosure is required by law or court order.
• IT and platform service providers: Cloud hosting, data storage, and technical support providers operating under strict data processing agreements that prohibit independent use of your data.

7.2 All third parties with whom niceph21 shares personal data are required to handle that data in accordance with applicable privacy laws and are prohibited from using it for any purpose other than the specific service they provide to us.

7.3 niceph21 does not transfer personal data outside the Philippines except where required by law or where adequate data protection safeguards are in place.

8. Cookies & Tracking Technologies

8.1 niceph21 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and analyse how the Platform is used.

8.2 We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled as they are required for account login, session management, and security. No consent is required for these cookies.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalised experience.
• Analytics cookies: Help us understand how players use the Platform so we can improve performance and user experience. These are only set with your consent.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

8.3 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. Strictly necessary and security cookies cannot be disabled without impacting your ability to use the Platform.

9. Data Retention

9.1 niceph21 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation.

9.2 The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML and PAGCOR record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by anti-money laundering regulations.
• KYC verification documents: Retained for the duration of your account and for five (5) years following account closure.
• Support and communications data: Retained for up to three (3) years from the date of the last interaction, for dispute resolution and quality assurance purposes.
• Technical and usage data: Retained for up to two (2) years, after which it is anonymised or deleted.

9.3 Where personal data is no longer required, niceph21 will securely delete or anonymise it in accordance with our internal data disposal procedures.

10. Data Security

10.1 niceph21 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls ensuring that only authorised personnel can access personal data, and only to the extent required for their specific role.
• Regular security audits, vulnerability assessments, and penetration testing.
• Multi-factor authentication (MFA) for internal systems and, where available, for player accounts.
• Continuous monitoring for suspicious activity, intrusion attempts, and data breaches.
• Staff training on data privacy and security best practices.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, niceph21 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.

10.3 While niceph21 takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.

11. Your Rights

11.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by niceph21:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as set out in this Policy.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

11.2 To exercise any of the above rights, please contact our Data Protection Officer via live chat or email as detailed in Section 15. We will respond to all verified requests within thirty (30) days, or within the timeframe required by applicable law.

11.3 niceph21 may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to an unauthorised party.

12. Children & Minors

12.1 The niceph21 Platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.

12.2 If niceph21 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and report the matter to the relevant regulatory authority where required.

13. Third-Party Links

13.1 The niceph21 Platform may contain references to third-party services such as payment processors. While we take care to work only with reputable partners, niceph21 is not responsible for the privacy practices of third-party services.

13.2 We encourage you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform, particularly payment providers such as GCash and Maya.

14. Changes to This Policy

14.1 niceph21 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. The date of the most recent revision is always displayed at the top of this page.

14.2 Where changes are material, we will notify you by email or by displaying a prominent notice on the Platform prior to the changes taking effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the updated Policy.

14.3 If you do not agree with any changes to this Policy, you must cease using the Platform and may request account closure in accordance with our Terms & Conditions.

15. Contact & Complaints

15.1 If you have any questions, concerns, or complaints regarding this Privacy Policy or the way niceph21 handles your personal data, please contact our Data Protection Officer:

• Live Chat: Available 24/7 directly on the Platform — the fastest way to reach us
• Email: [email protected]
• Response Time: Live chat under 60 seconds; email within 5 business days

15.2 If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering and implementing the Data Privacy Act of 2012.

15.3 niceph21 takes all privacy complaints seriously and is committed to resolving them promptly, fairly, and in full compliance with Philippine data privacy law.