niceph22 Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how niceph22 ("niceph22," "we," "us," or "our"), the operator of the online gaming platform at niceph22.one, collects, uses, discloses, stores, and protects the personal information of individuals ("you," "your," or "Data Subject") who register accounts, place bets, access content, or otherwise interact with the niceph22 platform or any of its associated services.

niceph22 is committed to protecting the privacy and confidentiality of your personal information in accordance with the Data Privacy Act of 2012 of the Republic of the Philippines (Republic Act No. 10173, or "DPA"), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission ("NPC"). This Policy should be read together with the niceph22 Terms & Conditions, which are incorporated by reference.

If you do not agree with this Policy, you should not register an account or submit any personal information to niceph22. You may contact the niceph22 Data Protection Officer at any time using the contact details provided in Section 15 of this Policy.

02 Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, niceph22 acts as the Personal Information Controller ("PIC") in respect of all personal data collected through the niceph22.one platform. As PIC, niceph22 determines the purposes for which, and the manner in which, personal data is processed.

Certain processing activities are carried out by third-party service providers acting as Personal Information Processors ("PIPs") on behalf of niceph22. All PIPs engaged by niceph22 are bound by written data processing agreements that prohibit them from processing your personal data for any purpose other than the specific services they provide to niceph22 and that require them to implement appropriate technical and organisational security measures.

03 Categories of Personal Data We Collect

The categories of personal data collected by niceph22 depend on the nature of your interaction with the platform. The following table provides an overview of the principal categories of data collected and their primary collection context:

04 How We Collect Your Data

niceph22 collects personal data through the following methods:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys and promotions;
• Automated collection: Technical data collected automatically when you access the niceph22 platform, including via cookies, web beacons, log files, and similar tracking technologies (see Section 10);
• Payment processors: Transaction confirmation and reference data received from GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers in connection with your deposits and withdrawals;
• Identity verification providers: Confirmation of identity document authenticity received from third-party KYC and fraud prevention service providers;
• Publicly available sources: In limited circumstances, niceph22 may verify information against publicly available Philippine government databases or sanctions lists in fulfilment of AML compliance obligations.

05 Purposes of Processing & Legal Basis

niceph22 processes your personal data for the following purposes, each of which has an identified lawful basis under the Data Privacy Act of 2012:

5.1 Account Registration and Management

Lawful basis: Performance of a contract. Processing your identity and contact data is necessary to create and manage your niceph22 player account, authenticate your login sessions, and enable the platform features you request.

5.2 Identity Verification (KYC)

Lawful basis: Legal obligation. niceph22 is required under PAGCOR regulations and the Anti-Money Laundering Act of 2001 (RA 9160, as amended) to verify the identity of all players prior to processing withdrawals. KYC data is processed to satisfy this regulatory obligation.

5.3 Payment Processing

Lawful basis: Performance of a contract. Financial data is processed to execute your deposit and withdrawal requests, reconcile your account wallet, and issue transaction receipts.

5.4 Responsible Gaming Monitoring

Lawful basis: Legal obligation and legitimate interest. Gaming activity data is monitored to identify patterns consistent with problem gambling, to enforce deposit limits and self-exclusion requests, and to comply with PAGCOR responsible gaming requirements.

5.5 Fraud Prevention and Platform Security

Lawful basis: Legitimate interest. Technical and gaming activity data is analysed to detect and prevent fraud, money laundering, multi-accounting, bot activity, and other prohibited conduct under the niceph22 Terms & Conditions and applicable Philippine law.

5.6 Customer Support

Lawful basis: Performance of a contract and legitimate interest. Communications data is processed to respond to your support requests, resolve disputes, and improve the quality of niceph22 customer service.

5.7 Marketing Communications

Lawful basis: Consent. Where you have expressly opted in to receive promotional communications from niceph22, we process your contact and preference data to deliver relevant offers, bonus notifications, and platform updates. You may withdraw consent at any time by updating your account notification preferences or contacting support.

06 Sharing Your Personal Data

niceph22 does not sell, rent, or commercially trade your personal information. We may share your data with the following categories of recipients only to the extent strictly necessary for the purposes described in Section 5:

• Payment service providers (e.g., GCash/GXI, PayMaya/Voyager, BancNet) for the processing of your financial transactions;
• KYC and identity verification providers engaged to verify the authenticity of government-issued identification documents submitted for account verification;
• Game content providers (e.g., Pragmatic Play, PG Soft, Jili) who receive anonymised or pseudonymised player session identifiers necessary to deliver game outcomes and maintain game integrity;
• IT infrastructure and cloud service providers who provide the technical environment in which the niceph22 platform operates, subject to appropriate data processing agreements;
• Fraud prevention and AML analytics services that assist niceph22 in identifying and preventing prohibited conduct;
• Regulatory and law enforcement authorities — including PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine courts — where disclosure is required by law, court order, or valid regulatory demand;
• Successors in interest in the event of a merger, acquisition, or sale of all or substantially all of the niceph22 business, subject to the acquiring entity assuming equivalent data protection obligations.

07 Cross-Border Data Transfers

Certain service providers engaged by niceph22, including game content providers and cloud infrastructure operators, may process personal data in data centres located outside the Republic of the Philippines. Where such cross-border transfers occur, niceph22 ensures they are conducted in accordance with Section 21 of the Data Privacy Act and the applicable NPC rules, including by:

• Executing data processing agreements that incorporate appropriate contractual safeguards;
• Transferring data only to jurisdictions that the NPC has recognised as providing an adequate level of personal data protection, or applying equivalent protections where adequate recognition does not exist;
• Limiting the scope of transferred data to the minimum necessary for the service provider to perform its function.

08 Data Retention

niceph22 retains personal data for the minimum period required to fulfil the purpose for which it was collected and to comply with applicable Philippine legal, regulatory, and contractual obligations. The following indicative retention periods apply:

Upon expiry of the applicable retention period, personal data is either securely deleted from niceph22 systems or irreversibly anonymised so that it can no longer be associated with an identifiable individual.

09 Security Measures

niceph22 implements a multi-layered approach to personal data security that encompasses technical, administrative, and physical safeguards appropriate to the nature and sensitivity of the data processed. The principal measures in place include:

• Transport security: All data transmitted between your device and niceph22 is encrypted using TLS 1.2 or higher (256-bit SSL). The platform enforces HTTPS across all pages and API endpoints.
• Data-at-rest encryption: Sensitive personal and financial data stored in niceph22 databases is encrypted at rest using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a need-to-know basis. All internal access is subject to multi-factor authentication and comprehensive access logging.
• Password security: Account passwords are never stored in plain text. niceph22 uses one-way cryptographic hashing with salting for all stored password representations.
• Two-factor authentication: Players are encouraged — and in certain high-risk scenarios required — to enable two-factor authentication on their niceph22 accounts to mitigate the risk of unauthorised access.
• Penetration testing: The niceph22 platform undergoes periodic security assessments conducted by independent third-party cybersecurity specialists.
• Employee training: All niceph22 employees who handle personal data receive mandatory data protection training on their responsibilities under the DPA and niceph22's internal data governance policies.

10 Cookies & Tracking Technologies

niceph22 uses cookies and similar tracking technologies to operate the platform, enhance your user experience, and gather analytics data about platform usage. A "cookie" is a small text file stored on your device by your browser when you access a website.

10.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the platform to function, including session management, authentication, and security features. These cannot be disabled without affecting platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby view preferences, and responsible gaming tool configurations.
• Analytics Cookies: Collect anonymised or pseudonymised usage data to help niceph22 understand how players interact with the platform, identify errors, and improve the user experience. niceph22 uses reputable third-party analytics providers bound by appropriate data processing agreements.
• Marketing Cookies: Used only where you have provided explicit consent, to personalise promotional content and measure the effectiveness of niceph22 marketing campaigns.

10.2 Managing Cookie Preferences

You can manage or disable non-essential cookies through your browser settings. Most modern browsers allow you to block or delete cookies. Note that disabling certain cookies may affect the availability or performance of some niceph22 platform features. Instructions for managing cookies in the most widely used browsers are available through the browser developer's official support documentation.

11 Your Data Subject Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by niceph22:

To exercise any of the above rights, submit a written request to the niceph22 Data Protection Officer using the contact details in Section 15. niceph22 will acknowledge your request within five (5) business days and respond within thirty (30) calendar days, or within the timeframe prescribed by the NPC where a longer period is justified.

12 Minors and Age Verification

The niceph22 platform is strictly for individuals aged 21 years and above, as required by Philippine regulations governing online gambling administered by PAGCOR. niceph22 does not knowingly collect personal data from persons under 21 years of age.

Parents and guardians who become aware that a minor has submitted personal data to niceph22 should contact the Data Protection Officer immediately using the contact details in Section 15.

13 Personal Data Breach Notification

In the event of a personal data breach that is likely to result in a real risk of serious harm to affected data subjects, niceph22 will:

• Notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under NPC Circular No. 16-03;
• Notify affected data subjects within seventy-two (72) hours of confirming that their personal data has been compromised, in cases where the breach poses a real risk of serious harm;
• Take immediate steps to contain the breach, investigate its scope and cause, and implement remediation measures to prevent recurrence.

Breach notifications to affected players will be sent to the registered email address on file. niceph22 maintains an internal breach response plan and conducts periodic tabletop exercises to ensure readiness.

14 Changes to This Privacy Policy

niceph22 may update this Privacy Policy from time to time to reflect changes in data processing practices, Philippine regulatory requirements, or the platform's services. Where changes are material — such as modifications to the categories of data collected, the purposes of processing, or the rights available to data subjects — niceph22 will provide advance notice by posting an update notice on the platform and sending a notification to your registered email address.

The "Last Updated" date at the top of this Policy will be revised upon each update. Continued use of the niceph22 platform following the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes to this Policy, you should cease using the platform and may request account closure in accordance with the niceph22 Terms & Conditions.

15 Contact & Data Protection Officer

Questions, concerns, or requests regarding this Privacy Policy or your personal data rights under the Data Privacy Act of 2012 should be directed to the niceph22 Data Protection Officer:

If you believe your data privacy rights have been violated and niceph22 has not adequately addressed your concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines through its official website and complaint procedures.

For responsible gaming concerns, including self-exclusion requests and deposit limit adjustments, please visit the Responsible Gaming page or contact support directly.