nicph Casino — Privacy Policy

This Privacy Policy (the "Policy") sets out the manner in which nicph (referred to as "nicph," "we," "us," or "our") collects, processes, stores, discloses, and protects the personal information of individuals (referred to as "you," "Player," or "User") who access or use the nicph online gaming platform at nicph.app and all associated services.

nicph is a PAGCOR-regulated online casino and sports betting platform operated for Filipino players. This Policy applies to all personal data collected in connection with your registration, identity verification (KYC), use of games, financial transactions, customer support interactions, promotional participation, and any other activity on the nicph platform.

This Policy is consistent with and governed by the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the applicable guidelines issued by the National Privacy Commission (NPC). nicph's data processing activities are also subject to applicable PAGCOR regulatory requirements regarding player data management.

By registering a nicph account or using any part of the nicph platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, please do not register or continue to use the nicph platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, the Data Controller responsible for your personal data is nicph, a Philippine-registered and PAGCOR-licensed online gaming operator accessible at nicph.app.

nicph determines the purposes and means by which your personal data is collected and processed. Any queries, requests, or complaints relating to the processing of your personal data should be addressed to nicph's Data Privacy Officer through the contact details provided in Section 15 of this Policy.

nicph collects the following categories of personal data in connection with your use of the platform:

nicph collects personal data through the following channels and mechanisms:

1. Direct Provision: Data you actively provide when registering your nicph account, completing KYC verification, making deposits or withdrawal requests, contacting customer support, or participating in promotions.
2. Automated Collection: Technical data collected automatically when you access the nicph platform, including IP addresses, browser and device information, session data, and platform usage patterns. This data is collected via server logs, cookies, and similar technologies as described in Section 11.
3. Payment Processors: Transaction reference data received from GCash, PayMaya (Maya), BPI, BDO, and Metrobank in connection with deposit and withdrawal processing. nicph does not receive or store complete payment card numbers or full bank account numbers.
4. Identity Verification Services: nicph may use third-party KYC verification services to assist with the authentication of government-issued ID documents. These services process identity data under data processing agreements with nicph and are bound by equivalent data protection obligations.
5. PAGCOR and Regulatory Sources: In limited circumstances required by law, nicph may receive information from PAGCOR or other Philippine regulatory authorities relevant to player accounts, responsible gaming obligations, or AML compliance.

nicph processes your personal data for the following purposes:

• Account Registration and Management: Creating and maintaining your nicph Player Account, managing your login credentials, and updating account details.
• Identity and Age Verification (KYC): Verifying that you are at least 21 years of age and confirming your identity as required by PAGCOR operating license conditions and applicable Philippine law.
• Gaming Services Delivery: Processing bets and wagers, managing game sessions, delivering winnings, and maintaining accurate gaming records.
• Payment Processing: Processing GCash, PayMaya, and bank deposits and withdrawals; confirming transactions; and maintaining financial records as required by Philippine law.
• Fraud Prevention and Security: Detecting and preventing unauthorized account access, duplicate account creation, bonus abuse, money laundering, and other prohibited conduct. This includes automated risk scoring based on account activity patterns.
• Anti-Money Laundering (AML) Compliance: Monitoring transactions for suspicious activity and reporting to relevant Philippine authorities as required under Republic Act No. 9160 (Anti-Money Laundering Act) and PAGCOR AML requirements.
• Responsible Gaming: Monitoring gaming activity to identify potential problem gambling indicators, applying player-set deposit limits and self-exclusion settings, and meeting PAGCOR responsible gaming obligations.
• Customer Support: Responding to support queries, complaints, and account issues; maintaining support interaction records for quality and dispute resolution purposes.
• Promotions and Marketing: Where you have not opted out, sending information about nicph promotions, bonuses, and new game releases via your registered email or mobile number.
• PAGCOR Regulatory Reporting: Submitting player activity reports, suspicious transaction reports, and other information to PAGCOR as required under nicph's operating license.
• Platform Improvement: Analysing aggregated, anonymized platform usage data to improve game selection, platform performance, and user experience features.

Under the Data Privacy Act of 2012, nicph processes your personal data on the following legal bases:

1. Consent: Where you have given nicph your explicit consent, including consent given at registration for the processing of your personal data for account management, KYC, and communication purposes. You may withdraw consent at any time by contacting nicph support, subject to any processing that nicph is legally required to conduct regardless of consent.
2. Contractual Necessity: Processing necessary for the performance of nicph's contract with you (the Terms and Conditions), including game delivery, payment processing, account management, and customer support.
3. Legal Obligation: Processing necessary for nicph to comply with applicable Philippine law, including KYC obligations, AML reporting requirements, PAGCOR regulatory conditions, and data retention obligations under financial records legislation.
4. Legitimate Interests: Processing necessary for nicph's legitimate business interests, including fraud detection and prevention, platform security, responsible gaming monitoring, and dispute resolution, where such interests are not overridden by your privacy rights.

nicph does not sell your personal data to third parties. nicph may share your personal data with the following categories of recipients in the circumstances described below:

1. PAGCOR and Philippine Regulatory Authorities: nicph is required by its PAGCOR operating license and by Philippine law to share certain player data and activity reports with PAGCOR and, where applicable, other Philippine regulatory bodies such as the Anti-Money Laundering Council (AMLC). Such sharing is mandatory and cannot be refused by nicph.
2. Philippine Law Enforcement: nicph may disclose personal data to the Philippine National Police, National Bureau of Investigation, or other law enforcement authorities where legally required by valid court order, subpoena, or other legal process under Philippine law.
3. Payment Service Providers: Transaction reference data is shared with GCash, PayMaya (Maya), BPI, BDO, and Metrobank as necessary to process deposits and withdrawals. These providers process financial data under their own terms and applicable Philippine financial regulations.
4. KYC and Identity Verification Services: Identity document data submitted during KYC may be processed by third-party identity verification service providers engaged by nicph under data processing agreements that require equivalent data protection standards.
5. Game Providers: Limited technical session data (but not identity or financial data) is shared with game providers such as JILI, PG Soft, and Pragmatic Play as necessary for game delivery, session management, and technical support. Game providers are contractually prohibited from using this data for independent marketing purposes.
6. IT and Infrastructure Service Providers: Technical service providers who support nicph's platform infrastructure, security systems, and data storage under data processing agreements with appropriate security obligations.

The primary processing of your personal data by nicph occurs within the Philippines. Where it is necessary to transfer personal data to service providers or game providers located outside the Philippines — such as certain game studio technical infrastructure — nicph ensures that such transfers are made only:

• To recipients in countries recognized by the National Privacy Commission as providing an adequate level of personal data protection; or
• Under contractual arrangements that impose data protection obligations on the recipient that are equivalent to those required under the Data Privacy Act of 2012 and its Implementing Rules and Regulations; or
• As required by applicable Philippine law, including PAGCOR regulatory requirements.

You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting nicph's Data Privacy Officer at the details in Section 15.

nicph retains your personal data for as long as is necessary for the purposes for which it was collected and as required by applicable Philippine law and PAGCOR regulatory requirements. The following general retention periods apply:

At the end of the applicable retention period, personal data is securely deleted or anonymized in accordance with nicph's data disposal procedures. Where data must be retained to comply with a legal hold or regulatory inquiry, retention will be extended for the duration of that requirement.

nicph implements a range of technical and organizational security measures designed to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL): All data transmitted between your device and the nicph platform is encrypted using industry-standard TLS encryption, protecting your login credentials, financial data, and personal information in transit.
• Password Hashing: Account passwords are stored in one-way hashed form. nicph does not store plaintext passwords and cannot retrieve a password once set.
• Access Controls: Access to personal data within nicph is restricted to authorized personnel who require it to perform their designated role. All internal data access is logged and subject to review.
• Login Security: Rate limiting and automatic temporary lockouts are applied to login attempts to prevent brute-force attacks on Player Accounts.
• OTP Verification: Sensitive account actions, including mobile number verification and certain withdrawal approvals, require one-time PIN (OTP) verification delivered to the Player's registered Philippine mobile number.
• Fraud Detection Systems: Automated systems monitor account activity for fraud indicators, unusual login patterns, and suspicious transaction behavior in real time.
• Data Breach Response: nicph maintains an incident response plan covering personal data breaches. In the event of a breach affecting your personal data, nicph will notify the National Privacy Commission and affected Players in accordance with the requirements of the Data Privacy Act of 2012.

nicph uses cookies and similar technologies to deliver platform functionality, maintain session security, and analyze platform usage patterns. A cookie is a small text file placed on your device by the nicph platform when you visit it.

11.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for the nicph platform to function. These include session authentication cookies that keep you logged in and security tokens that protect against cross-site request forgery. These cookies cannot be disabled without preventing core platform functionality.
• Functional Cookies: Store your preferences such as language settings and display options. Disabling these may affect your experience on nicph.
• Analytics Cookies: Used to collect aggregated, anonymized data about how Players use the nicph platform — which games are most popular, session duration patterns, and platform performance metrics. This data helps nicph improve the platform experience over time.
• Security Cookies: Used to detect and prevent fraudulent activity, duplicate account registration, and unauthorized access attempts based on browser fingerprint and session consistency.

11.2 Managing Cookies

You may control cookies through your browser settings. Most modern browsers allow you to block, delete, or receive notifications about cookies. Please note that disabling strictly necessary cookies will prevent you from accessing your nicph account and using the platform. Detailed instructions for managing cookies are available in the help documentation of your browser of choice (Chrome, Safari, Firefox, and others).

nicph does not use cookies for cross-site advertising tracking or share cookie data with advertising networks for the purpose of serving targeted advertisements on third-party websites.

Under the Data Privacy Act of 2012 (Republic Act No. 10173) and applicable NPC regulations, you have the following rights in relation to your personal data held by nicph:

To exercise any of the above rights, please contact nicph's Data Privacy Officer via the support email provided in Section 15 of this Policy, clearly identifying the right you wish to exercise and the personal data it concerns. nicph will respond to your request within a reasonable period and in any event within the timeframes required by applicable Philippine data protection law.

nicph is a real-money gaming platform intended strictly for adults aged twenty-one (21) years and above. nicph does not knowingly collect personal data from persons under the age of 21.

Age verification is a mandatory step in the nicph registration and KYC process. Any account found to have been registered by an individual under 21 years of age will be immediately closed in accordance with the nicph Terms and Conditions and PAGCOR licensing requirements. All personal data associated with such an account will be securely deleted unless retention is required by applicable Philippine law.

nicph reserves the right to update or amend this Privacy Policy at any time, including in response to changes in applicable Philippine data protection law, NPC guidance, PAGCOR regulatory requirements, or changes to nicph's data processing activities.

Material changes to this Policy will be communicated to registered Players by email to their registered address or via a prominent notice on the nicph platform, prior to the changes taking effect. The date on which this Policy was last updated is displayed at the top of this page.

Your continued use of the nicph platform following the effective date of any change to this Policy constitutes your acknowledgment of the updated Policy. If you do not agree with the changes, you should close your account and cease using nicph before the effective date. Archived versions of prior policies may be requested from nicph's Data Privacy Officer.

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a complaint regarding nicph's handling of your personal data, please contact nicph's Data Privacy Officer through the following channels:

• Support Email: [email protected] — Mark your message with the subject line "Privacy Policy Query" or "Data Rights Request" as appropriate. This is plain text only — not a clickable link.
• Live Chat: Available 24/7 from your logged-in nicph account. For urgent privacy concerns, live chat is the fastest way to reach the nicph support team.

nicph commits to acknowledging data rights requests and privacy complaints within five (5) business days and to resolving them within the timeframes required by the Data Privacy Act of 2012 and applicable NPC regulations.

If your concern is not resolved to your satisfaction through nicph's internal process, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, the supervisory authority for data protection matters under Philippine law. Information about making a complaint to the NPC is available through official Philippine government channels.