niceph25 Privacy Policy

This Privacy Policy ("Policy") is published by niceph25 ("we," "us," "our," or the "Platform") and applies to all personal data collected, processed, stored, or otherwise handled in connection with your use of the niceph25 website located at niceph25.vip, any associated mobile applications, and all related services offered by the Platform (collectively, the "Services").

niceph25 is committed to protecting the privacy and personal data of all registered members, prospective members, and visitors. This Policy describes what personal information niceph25 collects about you, the legal basis and purposes for which it is processed, the circumstances under which it may be shared, how long it is retained, the security measures applied to it, and the rights available to you as a data subject.

This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission (NPC) of the Philippines. It should be read together with the niceph25 Terms & Conditions, which govern your use of the Platform generally.

For the purposes of the Data Privacy Act of 2012 and this Policy, niceph25 acts as the personal information controller ("PIC") in respect of all personal data collected and processed through the Platform and Services.

niceph25 operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR). Any data processing carried out for the purposes of regulatory compliance with PAGCOR or the Anti-Money Laundering Council (AMLC) is performed in accordance with applicable legal obligations.

niceph25 has designated a Data Protection Officer (DPO) responsible for overseeing data protection compliance and serving as the primary point of contact for data subjects exercising their rights under this Policy. Contact details for the DPO are provided in Section 14 of this Policy.

niceph25 collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party sources where legally permitted. The following table summarizes the categories of personal data collected and the primary source of each:

niceph25 does not intentionally collect special categories of personal data (as defined under R.A. 10173) such as health information, religious beliefs, or political opinions, except where expressly required by law or regulatory mandate.

Providing certain personal data — particularly Identity Data, Contact Data, and Financial Data — is a mandatory condition of creating and maintaining a niceph25 account. Failure to provide required data may prevent account registration or restrict access to specific Platform features.

niceph25 processes personal data only where a valid legal basis exists under R.A. 10173 and its Implementing Rules and Regulations. The following legal bases apply to niceph25's data processing activities:

• Contractual Necessity: Processing required to perform the contract between you and niceph25 — including operating your account, executing deposits and withdrawals, and providing access to games and services.
• Legal Obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulatory requirements, the Anti-Money Laundering Act (R.A. 9160 as amended), Know Your Customer (KYC) obligations, and National Privacy Commission requirements.
• Legitimate Interests: Processing carried out on the basis of niceph25's legitimate business interests, including fraud prevention, platform security, IT system maintenance, and internal analytics — where such interests are not overridden by your fundamental rights and interests.
• Consent: Processing carried out on the basis of your freely given, specific, informed, and unambiguous consent — primarily for optional marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

niceph25 uses personal data collected from and about you for the following specific purposes:

• Account Registration and Management: To create, verify, maintain, and administer your niceph25 account, including processing login requests and maintaining your account preferences and responsible gaming settings.
• Identity Verification (KYC): To verify your identity and age in accordance with PAGCOR licensing requirements, anti-money laundering obligations, and niceph25's own fraud prevention policies. This includes verifying that you meet the minimum age requirement of 21 years.
• Payment Processing: To process deposits and withdrawals through GCash, PayMaya, BPI, BDO, Metrobank, and other approved Philippine payment channels, and to maintain accurate financial records.
• Game Provision and Fairness: To deliver, operate, and maintain the games and services offered on the niceph25 platform and to ensure gaming integrity, including the detection and prevention of cheating, bot usage, and collusion.
• Regulatory Compliance: To fulfill all legal obligations imposed on niceph25 as a PAGCOR-regulated operator, including transaction reporting, suspicious activity reporting to the AMLC, and player protection obligations.
• Customer Support: To respond to your queries, complaints, and support requests, and to improve the quality of niceph25's support services.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and to administer the responsible gaming tools available within your account, including deposit limits, cooling-off periods, and self-exclusion orders.
• Platform Improvement: To analyze usage patterns, diagnose technical issues, conduct A/B testing, and improve the overall performance and user experience of the niceph25 platform.
• Marketing (Opt-In Only): To send you promotional communications, bonus offers, and personalized recommendations where you have opted in to receive such communications. You may opt out at any time.
• Fraud and Security: To detect, investigate, and prevent fraudulent activity, account compromise, money laundering, and other illegal or policy-violating conduct on the Platform.

niceph25 does not sell, rent, or trade your personal data to any third party for their own independent commercial purposes. Personal data is shared with external parties only in the following limited circumstances:

• Payment Service Providers: GCash (G-Xchange Inc.), PayMaya (Maya Philippines Inc.), BPI, BDO, Metrobank, VISA, and Mastercard processing networks — solely to execute your requested financial transactions.
• Game Software Providers: Licensed game studios and content providers (such as JILI, Pragmatic Play, and PG Soft) receive limited technical data necessary to deliver and operate their games within the niceph25 environment. These providers are bound by data processing agreements.
• KYC and AML Service Providers: Third-party identity verification and anti-money laundering screening platforms engaged by niceph25 to assist in meeting its regulatory KYC/AML obligations.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and any other government authority where disclosure is required by applicable Philippine law, court order, or regulatory directive.
• Professional Advisers: Lawyers, accountants, auditors, and insurers engaged by niceph25 in the ordinary course of business, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, restructuring, or asset sale involving niceph25, personal data may be transferred to the relevant successor entity, provided that the successor is bound by data protection obligations at least equivalent to those in this Policy.

All third-party data processors engaged by niceph25 are required to process personal data only on niceph25's documented instructions, to maintain appropriate security measures, and to comply with applicable Philippine data protection law.

Some of niceph25's service providers — including certain game software providers and technology infrastructure partners — may be located outside the Philippines. Where personal data is transferred to parties in countries that do not offer a level of data protection equivalent to that provided under Philippine law, niceph25 takes appropriate measures to ensure that your data remains protected.

These measures may include entering into data transfer agreements based on contractual clauses approved by the NPC, applying binding corporate rules, or relying on applicable derogations under R.A. 10173 such as the necessity of the transfer for the performance of a contract with you.

You may request further information about the specific safeguards applied to international transfers of your personal data by contacting the niceph25 Data Protection Officer using the contact details provided in Section 14.

niceph25 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements imposed on the Platform.

The following general retention periods apply to the principal categories of personal data held by niceph25:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following permanent account closure, in accordance with PAGCOR record-keeping requirements and applicable Philippine AML law.
• Financial Transaction Data: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLC record-keeping obligations under R.A. 9160 as amended by R.A. 10365.
• Gaming Activity Data: Retained for a minimum of three (3) years following the date of the relevant activity, for regulatory and dispute resolution purposes.
• Communications and Support Data: Retained for three (3) years from the date of the communication, or longer where the communication is relevant to a pending dispute or regulatory matter.
• Marketing and Preference Data: Retained for two (2) years from your last active engagement with niceph25 marketing communications, or until you withdraw consent, whichever is earlier.
• Technical and Log Data: Retained for up to twelve (12) months from the date of collection, unless required for longer periods for security incident investigation purposes.

When personal data is no longer required for any purpose and no legal retention obligation applies, niceph25 will securely delete or irreversibly anonymize such data.

The niceph25 platform uses cookies, web beacons, pixel tags, session storage, and similar tracking technologies to operate and improve the Services. The following categories of cookies are used on niceph25:

• Strictly Necessary Cookies: Essential for core platform functionality, including maintaining your authenticated session, storing your account preferences, and enabling secure GCash and PayMaya transaction flows. These cookies cannot be disabled without materially impairing your use of the Platform.
• Performance and Analytics Cookies: Used to collect aggregated, anonymized information about how visitors use the niceph25 platform — such as which pages are visited most frequently and whether any errors are encountered. This data helps us improve platform performance and user experience.
• Functional Cookies: Used to remember your preferences and customization choices, such as your preferred language, game display settings, and responsible gaming tool configurations.
• Marketing Cookies (Opt-In): Used only where you have explicitly opted in to receive personalized promotions and bonus offers. These cookies help niceph25 deliver relevant promotional content to opted-in members. You may opt out at any time through your account settings or browser controls.

You can control or disable cookies through your browser settings. Please note that disabling strictly necessary cookies will affect your ability to use core niceph25 features, including logging in and processing transactions. Instructions for managing cookies in major browsers are available through the respective browser's help documentation.

Under the Data Privacy Act of 2012 (R.A. 10173) and its Implementing Rules, you have the following rights in respect of your personal data held by niceph25. niceph25 will respond to all valid rights requests within thirty (30) days of receipt, subject to identity verification and any applicable legal exemptions.

To exercise any of the rights listed above, please contact the niceph25 Data Protection Officer using the details provided in Section 14. niceph25 will verify your identity before processing any data rights request. Requests that are manifestly unfounded or excessive may be refused or subject to a reasonable fee, in accordance with applicable NPC guidelines.

The niceph25 platform and all associated Services are intended exclusively for adults who are at least 21 years of age. This is the mandatory minimum age for participation in online gambling under PAGCOR's regulatory framework.

niceph25 does not knowingly collect, process, or retain personal data from any individual under the age of 21. Registration on the niceph25 platform requires you to confirm that you meet the minimum age requirement. niceph25 reserves the right to request government-issued identity documentation to verify age at any time.

If niceph25 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement, it will promptly close the relevant account, delete the associated personal data to the extent legally permitted, and report the matter to PAGCOR where required.

If you are a parent or guardian and believe that a minor may have accessed or registered on the niceph25 platform, please contact our support team immediately using the contact details in Section 14.

niceph25 employs a comprehensive set of technical, organizational, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, destruction, and accidental loss. Key measures include:

• Transport Encryption: All data transmitted between your device and niceph25 servers is protected by 256-bit TLS/SSL encryption, preventing interception by unauthorized parties during transmission.
• Password Security: User account passwords are never stored in plaintext. niceph25 applies industry-standard cryptographic hashing with salt to all stored passwords.
• Access Controls: Strict role-based access controls limit internal access to personal data to personnel who require it for legitimate business purposes. Access logs are maintained and periodically reviewed.
• Two-Factor Authentication (2FA): Available to all registered niceph25 members as an additional layer of login security. We strongly encourage all members to enable 2FA.
• Vulnerability Management: Regular security assessments, penetration testing, and vulnerability scanning are performed on the niceph25 platform infrastructure.
• Incident Response: niceph25 maintains a documented data breach response procedure. In the event of a personal data breach affecting your rights and freedoms, niceph25 will notify you and the NPC in accordance with the breach notification requirements of R.A. 10173.

While niceph25 takes all reasonable and practical steps to protect your personal data, no security system is completely impenetrable. You are responsible for keeping your account credentials confidential and for using strong, unique passwords. niceph25 will never ask you for your password through any channel.

niceph25 reserves the right to update, amend, or replace this Privacy Policy at any time. The "Last Updated" date appearing at the top of this document will be revised whenever a substantive change is made.

Where a change is material — meaning it significantly affects how we process your personal data or your rights in relation to it — niceph25 will provide advance notice to registered members by posting a notice on the Platform, by email to your registered address, or by another prominent method. For non-material changes (such as clarifications, formatting corrections, or minor administrative updates), the revised Policy will be published without separate notification.

Your continued use of the niceph25 platform following the publication of any updated Privacy Policy constitutes your acknowledgment of the changes. We recommend reviewing this Policy periodically to stay informed about how niceph25 protects your data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the way niceph25 handles your personal data, please contact our Data Protection Officer or customer support team:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available directly on the niceph25 platform
• Support Hours: Daily, 8:00 AM – 12:00 AM Philippine Standard Time (PHT)

niceph25 will acknowledge all written data-related inquiries within 72 hours and will resolve or respond substantively within thirty (30) calendar days of receipt.

If you are not satisfied with niceph25's handling of your personal data or your data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government authority responsible for enforcing the Data Privacy Act of 2012.

niceph25 takes data privacy complaints seriously and will cooperate fully with any NPC investigation. We encourage members to contact us first so that we have the opportunity to address your concern directly before escalation to the regulatory authority.