niceph48 Privacy Policy – Your Data, Protected

This Privacy Policy ("Policy") describes how niceph48 ("the Company," "we," "us," "our") collects, uses, stores, shares, and protects personal information obtained from players, visitors, and users of the niceph48 platform at niceph48.club ("the Platform"). This Policy is effective as of January 1, 2026 and governs all personal data processing activities carried out by niceph48 in connection with the Platform.

By accessing or using niceph48, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. If you do not agree, please discontinue use of the Platform.

1.1 This Policy applies to all personal information collected by niceph48 from registered players, prospective players who have initiated registration, visitors to the Platform, and individuals who contact us through any channel including live chat, email, or our Support page.

1.2 This Policy covers personal data collected through the niceph48 website, mobile browser interface, and any associated services, including payment processing, identity verification, and customer support interactions.

1.3 This Policy should be read in conjunction with the niceph48 Terms & Conditions and our Responsible Gaming policy, both of which form part of your agreement with niceph48.

1.4 This Policy does not apply to third-party websites, services, or applications that may be linked from or interact with the Platform. niceph48 is not responsible for the privacy practices of third-party entities.

2.1 For purposes of the Philippine Data Privacy Act of 2012, niceph48 is the personal information controller ("PIC") responsible for the personal data collected and processed through the Platform.

2.2 niceph48 has designated a Data Protection Officer (DPO) to oversee compliance with this Policy and applicable data protection law. The DPO may be contacted as described in Section 16 of this Policy.

2.3 Where niceph48 engages third-party service providers to process personal data on its behalf — such as KYC verification providers, payment processors, or game studios — those providers act as personal information processors ("PIPs") under the direction and authority of niceph48. All PIPs are contractually bound to process personal data only in accordance with this Policy and applicable law.

3.1 niceph48 collects the following categories of personal data, depending on your interaction with the Platform:

3.2 niceph48 does not collect sensitive personal information as defined under RA 10173 (such as health data, political affiliations, or religious beliefs) unless specifically required and separately consented to for a disclosed purpose.

4.1 Directly from you when you register a niceph48 account, complete identity verification, make deposits or withdrawals, contact our support team, or interact with any feature of the Platform that requires input.

4.2 Automatically through your use of the Platform, including browser cookies, local storage, server logs, and analytics tools that record technical and usage data when you access the Site.

4.3 From third parties, including:

• KYC and identity verification service providers who validate your government-issued documents;
• Payment processors including GCash, Maya, and Philippine banking institutions that confirm transaction details;
• Fraud prevention and anti-money laundering (AML) screening services;
• Government databases or regulatory registers where required by applicable law.

4.4 niceph48 takes reasonable steps to ensure that data received from third parties was collected lawfully and in accordance with applicable regulations.

5.1 niceph48 processes personal data for the following purposes and on the following legal bases:

• Contract performance: To create and manage your account, process deposits and withdrawals, deliver games and services, and honor our contractual obligations under the Terms & Conditions.
• Legal obligation: To comply with PAGCOR regulatory requirements, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine law, including age verification and suspicious transaction reporting.
• Legitimate interest: To detect and prevent fraud, maintain platform security, analyze usage patterns to improve the Platform, and manage customer service operations — provided these interests are not overridden by your rights.
• Consent: To send marketing communications, promotional offers, and personalized recommendations where you have specifically opted in to receive such communications.

6.1 niceph48 does not sell, rent, or trade your personal information to third parties for their own commercial purposes.

6.2 We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, Maya, GrabPay, BPI, BDO, Metrobank, InstaPay, and other payment service providers, to process your financial transactions;
• KYC/identity verification providers: Third-party services used to verify your identity and age in compliance with PAGCOR and AML requirements;
• Game technology providers: Studio and platform providers (e.g., live casino operators, slot developers) who supply games accessible on niceph48 and who may process gameplay data;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government bodies as required by applicable Philippine law;
• Fraud prevention services: Third-party services that assist in identifying fraudulent activity and protecting the integrity of the Platform;
• Professional advisors: Lawyers, auditors, and compliance consultants bound by confidentiality obligations, where necessary for legal or regulatory purposes.

6.3 All third-party recipients of personal data processed on niceph48's behalf are required to maintain appropriate confidentiality and security obligations consistent with this Policy and RA 10173.

7.1 Some of niceph48's service providers and game technology partners operate servers or infrastructure located outside the Philippines. Where personal data is transferred to recipients in other countries, niceph48 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under RA 10173;
• Transfers only to countries or organizations recognized as providing adequate data protection;
• Explicit player consent where required by the NPC for specific types of cross-border transfers.

7.2 niceph48 will notify you of any material change to the countries to which your data may be transferred where such change affects your rights under applicable law.

8.1 niceph48 retains personal data only for as long as necessary to fulfill the purposes described in this Policy, or as required by applicable law and regulation.

8.2 The following general retention guidelines apply:

• Account data and identity records: Retained for a minimum of five (5) years following account closure, as required by AMLA and PAGCOR compliance obligations;
• Financial transaction records: Retained for a minimum of five (5) years following each transaction, consistent with AML record-keeping requirements;
• Support and communications records: Retained for three (3) years from the date of the last interaction, to allow for dispute resolution and quality assurance;
• Technical and usage logs: Retained for up to twelve (12) months from collection for security and platform analytics purposes;
• Marketing consent records: Retained for the duration of the marketing relationship plus two (2) years to evidence consent.

8.3 Upon expiry of the applicable retention period, niceph48 will securely delete or anonymize personal data in accordance with its internal data disposal procedures.

9.1 niceph48 implements organizational, technical, and physical security measures designed to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption applied to all data transmitted between your device and niceph48 servers;
• Encrypted storage of sensitive data including financial account details and identity documents at rest;
• Access controls limiting internal access to personal data to authorized personnel with a legitimate business need;
• Two-factor authentication options for account access and critical account actions;
• Regular security assessments and penetration testing of the Platform's infrastructure;
• Audit logging of internal access to personal data records.

9.2 While niceph48 applies rigorous security practices, no system is entirely immune from risk. You are responsible for maintaining the confidentiality of your own login credentials and for notifying niceph48 promptly of any suspected unauthorized access to your account.

10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by niceph48:

10.2 To exercise any of the above rights, contact niceph48's Data Protection Officer as described in Section 16. niceph48 will respond to verifiable requests within thirty (30) calendar days, or within such shorter period as required by applicable NPC issuances.

10.3 niceph48 may request identity verification before processing any data subject request to ensure that personal data is not disclosed to unauthorized persons.

11.1 niceph48 uses cookies and similar tracking technologies (such as local storage and session tokens) to operate the Platform, remember your preferences, maintain session security, and analyze usage patterns.

11.2 The following types of cookies may be present on the niceph48 Platform:

• Strictly Necessary Cookies: Required for the Platform to function. These cannot be disabled without impairing basic functionality such as login sessions and account access.
• Performance and Analytics Cookies: Used to understand how players use the Platform — which pages are most visited, where errors occur, and how navigation flows can be improved. Data collected is aggregated and anonymized.
• Functional Cookies: Store your preferences such as language settings, display preferences, and previously used payment methods to speed up future sessions.
• Security Cookies: Assist in detecting fraudulent activity, unauthorized login attempts, and malicious behavior targeting the Platform or player accounts.

11.3 You may adjust your browser settings to refuse or delete cookies. However, disabling strictly necessary cookies will impair your ability to use core Platform features including logging in and placing bets.

12.1 niceph48 is strictly a 21+ platform. We do not knowingly collect personal information from any person under the age of 21 years.

12.2 If niceph48 discovers or has reason to believe that personal data has been collected from a person under 21, it will immediately suspend the associated account, investigate the circumstances, and delete the minor's personal data from its systems, except where retention is required by law.

12.3 Parents and guardians who believe their child may have registered on or accessed niceph48 are encouraged to contact our support team immediately. niceph48 treats such reports with high priority.

13.1 In the event of a personal data breach that is likely to result in harm to affected data subjects, niceph48 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular 2022-01 on mandatory breach notification.

13.2 Where the breach is likely to result in serious harm (such as identity theft, financial loss, or significant damage to reputation), niceph48 will also directly notify the affected data subjects within the period prescribed by the NPC, providing:

• A description of the nature of the breach;
• The categories and approximate number of data subjects affected;
• The likely consequences of the breach;
• The measures niceph48 has taken or proposes to take to address the breach and mitigate its effects.

13.3 niceph48 maintains an internal breach response procedure and conducts regular drills to ensure readiness. All personnel with access to personal data receive training on breach identification and escalation procedures.

14.1 The niceph48 Platform may integrate with or reference third-party services including game studios, payment gateways, and analytics providers. These third parties have their own privacy policies and data practices that are independent of niceph48.

14.2 When you use a payment service such as GCash or Maya to deposit or withdraw funds, your interaction with that service is also subject to GCash's and Maya's own privacy policies. niceph48 receives only the transaction confirmation data necessary to credit or debit your niceph48 account balance.

14.3 niceph48 is not responsible for the privacy practices of third-party service providers, game studios, or any external websites. We encourage you to review the privacy policies of any third-party service you interact with in connection with the Platform.

15.1 niceph48 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. The revised Policy will be posted on this page with an updated effective date.

15.2 Where changes are material — meaning they significantly affect how we process your personal data or the rights available to you — niceph48 will provide advance notice through a prominent notice on the Platform or via email to your registered address.

15.3 Your continued use of the niceph48 Platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. If you do not agree with the revised Policy, you should discontinue use and may request account closure in accordance with the Terms & Conditions.

16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or your personal data held by niceph48, please contact us through any of the following channels:

• Support Page: Visit niceph48.club/support for live chat and all available support options
• Email: [email protected] (plain text — not a clickable link)

16.2 For formal data subject rights requests, data breach notifications, or NPC-related matters, please address your written communication to the niceph48 Data Protection Officer (DPO) via the email address above, with "Data Privacy Request" in the subject line.

16.3 niceph48's DPO is responsible for overseeing compliance with RA 10173, handling data subject requests, and liaising with the National Privacy Commission on behalf of the Company.

16.4 If you are unsatisfied with our response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. For information on how to file a complaint with the NPC, please visit the NPC's official website or contact the Commission directly.