nicep Privacy
Policy

This Privacy Policy ("Policy") describes how nicep ("nicep", "we", "us", or "our") collects, uses, stores, discloses, and otherwise processes personal data about individuals who access or use the nicep Platform at nicep.net and its associated services (collectively, the "Platform").

This Policy applies to all registered players, prospective registrants who visit the Platform without completing registration, and individuals who contact nicep through any support or communication channel. It covers data processing activities carried out by nicep in connection with the operation of the Platform, including the online casino, sportsbook, live dealer games, and payment processing functions available to Filipino players.

By registering on, accessing, or using the nicep Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform and contact us to close your account.

This Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, which together govern your relationship with nicep.

For the purposes of this Privacy Policy and applicable Philippine data protection law, nicep acts as the personal information controller in respect of the personal data of players and Platform users. This means nicep is responsible for determining the purposes and means by which your personal data is processed.

nicep's designated Data Protection Officer (DPO) is responsible for overseeing data protection compliance across the Platform. If you have any questions about how your data is handled, or if you wish to exercise any of your data subject rights described in this Policy, you may contact the DPO directly:

nicep maintains a registration with the National Privacy Commission of the Philippines as required under applicable regulations. Players who have concerns about the handling of their personal data that have not been resolved through our internal process may lodge a complaint directly with the NPC.

nicep collects personal data from you through several different means — directly when you register or interact with the Platform, automatically through your use of the Platform, and occasionally from third-party sources as part of our verification and compliance obligations. The categories of personal data we collect are described below.

nicep does not intentionally collect sensitive personal information (as defined under the DPA) such as racial or ethnic origin, political opinions, religious beliefs, health data, or sexual orientation, except where the processing of such data is strictly necessary for a specific legal compliance purpose and you have given explicit consent. For example, problem gambling self-assessments completed voluntarily through our responsible gaming tools may involve limited health-related data, which is processed solely for your benefit.

nicep processes your personal data for the following specific purposes. We process your data only to the extent necessary to fulfil these purposes and do not use it for unrelated secondary purposes without your knowledge or consent.

• Account Registration & Management: Creating and maintaining your nicep player account, authenticating your identity at login, communicating account-related notifications, and managing account closure requests.
• Identity Verification (KYC): Verifying that you meet the eligibility criteria to use the Platform, including age verification (21+ requirement) and confirming your identity in compliance with PAGCOR and AMLC regulatory obligations.
• Payment Processing: Processing your deposits and withdrawals through your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, Cebuana), reconciling transaction records, and managing your PHP wallet.
• Game Delivery & Sportsbook Operation: Delivering the casino games, live tables, and sportsbook markets available on the Platform; calculating bet outcomes; crediting winnings; and managing bonus and promotional credits.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, duplicate accounts, bonus abuse, and unauthorised account access. This includes automated risk scoring of account and transaction patterns.
• Regulatory Compliance: Meeting nicep's obligations under the Data Privacy Act of 2012, the Anti-Money Laundering Act (AMLA) and its amendments, PAGCOR licensing requirements, and other applicable Philippine laws and regulations.
• Responsible Gaming: Monitoring gameplay patterns for indicators of problem gambling behaviour; delivering self-assessment tools; managing deposit limits, cooling-off periods, and self-exclusion requests.
• Customer Support: Responding to your queries, resolving disputes, processing complaints, and providing technical assistance through our 24/7 support team.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve the Platform's performance, navigation, game selection, and overall player experience.
• Marketing Communications: Sending you personalised promotional offers, bonus notifications, and news about nicep — but only where you have provided consent or where we have a legitimate interest and have given you a clear opt-out mechanism.

Under the Data Privacy Act of 2012, nicep processes your personal data on one or more of the following legal bases depending on the specific processing activity:

• Consent: Where you have given specific, informed, and freely given consent — for example, when opting into marketing communications or completing a voluntary responsible gaming self-assessment.
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and nicep — specifically, your registered player account and the associated Terms & Conditions. This covers account management, payment processing, game delivery, and customer support.
• Legal Obligation: Where processing is necessary to comply with a legal obligation applicable to nicep, including KYC/AML requirements under AMLA, reporting obligations to PAGCOR, and data retention obligations under Philippine law.
• Legitimate Interests: Where processing is necessary for nicep's legitimate interests — such as fraud prevention, security monitoring, and Platform improvement — provided those interests are not overridden by your rights and interests as a data subject.

nicep does not sell, rent, or share your personal data with third parties for their own commercial purposes. We share your personal data only with the categories of recipients listed below, and only to the extent necessary for each stated purpose:

• Licensed Game Providers (e.g., JILI Games, Pragmatic Play, PG Soft): Game studios receive the minimum player data necessary to deliver game sessions and verify eligibility. They are bound by contractual data processing agreements and are not permitted to use your data for any other purpose.
• Payment Service Providers (GCash, PayMaya, BPI, BDO, Metrobank, 7-Eleven, Cebuana): Financial institutions and e-wallet operators receive transaction-specific data to process your deposits and withdrawals. These providers are subject to their own data protection obligations under Philippine financial regulations.
• Identity Verification (KYC) Partners: Specialist identity verification service providers process your government ID documents and selfie data to complete KYC checks. These providers are certified and operate under data processing agreements that restrict further use of your data.
• Regulatory & Law Enforcement Authorities: nicep discloses personal data to PAGCOR, the AMLC, the National Privacy Commission, or other competent Philippine authorities where required by law, court order, or legal process. Such disclosures are made only to the extent required and are logged internally.
• IT Infrastructure & Security Providers: Cloud hosting, database management, and cybersecurity service providers may process personal data as part of Platform infrastructure. All such providers are bound by data processing agreements and security obligations.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access limited personal data in the course of providing professional services to nicep, subject to professional confidentiality obligations.

In all cases where nicep engages a third-party processor, we ensure that appropriate contractual safeguards are in place — including data processing agreements that mandate compliance with the DPA and restrict the processor from using data for any purpose other than the one specified by nicep.

nicep uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session state, and analyse how the Platform is used. The following categories of cookies are used:

nicep does not use third-party advertising cookies or tracking pixels that share your data with ad networks. All analytics data is either processed internally or shared with analytics providers under strict data processing agreements that prohibit secondary use.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform — including logging in and placing bets.

nicep retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, accounting, and reporting requirements. The key retention periods applicable to nicep player data are:

• Account Data: Retained for the duration of your active account plus a minimum of 5 years after account closure, in compliance with AMLA record-keeping obligations applicable to covered institutions regulated by PAGCOR.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of the transaction, as required by the Anti-Money Laundering Act and its implementing rules.
• KYC / Identity Verification Documents: Retained for a minimum of 5 years from account closure, or longer if required by a specific regulatory instruction or ongoing investigation.
• Support & Communication Records: Retained for 3 years from the date of the last communication, or longer if the communication relates to an unresolved dispute or regulatory inquiry.
• Game Session & Bet History: Retained for 3 years from the date of the session, for dispute resolution and responsible gaming monitoring purposes.
• Marketing Consent Records: Retained for the duration of your consent plus 3 years after withdrawal of consent, to demonstrate compliance with consent obligations.
• Self-Exclusion Records: Retained permanently (or indefinitely) to prevent inadvertent re-registration during an active exclusion period and to maintain an audit trail for regulatory purposes.

Where data is no longer required for any active purpose or legal obligation, nicep securely deletes or anonymises it so that it can no longer be associated with any identifiable individual. Anonymised data may be retained indefinitely for aggregate statistical analysis.

Under the Data Privacy Act of 2012 of the Philippines, you — as a data subject — have the following rights in relation to your personal data held by nicep. To exercise any of these rights, contact us at [email protected] with the subject line DATA PRIVACY — [Right Type].

• Right to Be Informed: You have the right to be informed of how your personal data is being collected and processed — which is the primary purpose of this Privacy Policy.
• Right to Access: You may request a copy of the personal data nicep holds about you, along with information about how it is being used, who it has been shared with, and how long it will be retained.
• Right to Rectification: If any of your personal data held by nicep is inaccurate or incomplete, you may request that it be corrected. Some corrections (e.g., changes to verified identity data) may require re-submission of supporting documents.
• Right to Erasure: You may request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected. Note that nicep may be unable to delete data subject to legal retention obligations (e.g., AMLA records). In such cases, nicep will explain the specific legal basis for retention.
• Right to Object: You may object to the processing of your personal data where nicep relies on legitimate interests as the legal basis. You may also object at any time to the use of your data for direct marketing purposes.
• Right to Data Portability: Where technically feasible and where processing is based on your consent or a contract, you may request a structured, commonly used, machine-readable copy of your personal data for transfer to another service provider.
• Right to Lodge a Complaint: If you believe nicep has not handled your personal data in compliance with the DPA, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

nicep implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Our security programme includes the following controls:

• Encryption in Transit: All data exchanged between your device and nicep servers is encrypted using TLS 1.2 or higher. This protects login credentials, payment data, and game communications from interception.
• Encryption at Rest: Sensitive data stored on nicep servers — including identity documents, payment account references, and KYC records — is encrypted using AES-256 encryption.
• Password Security: Player passwords are stored as one-way cryptographic hashes using industry-standard algorithms. nicep staff cannot retrieve your password in plain text — only you know it.
• Access Controls: Access to player personal data within nicep's internal systems is restricted to authorised personnel on a strict need-to-know basis. All internal access is logged and audited.
• Two-Factor Authentication (2FA): nicep supports and encourages the use of two-factor authentication on player accounts. Internal administrative access to systems containing player data requires 2FA at all times.
• Regular Security Audits: nicep conducts periodic security assessments and penetration testing of the Platform and supporting infrastructure to identify and remediate vulnerabilities proactively.
• Incident Response Plan: nicep maintains a documented data breach response plan. In the event of a confirmed breach, the plan defines escalation, containment, notification, and regulatory reporting procedures in accordance with the DPA.

While nicep takes all reasonable steps to protect your personal data, no internet-based system can be guaranteed to be completely secure. You are responsible for keeping your own login credentials confidential and for notifying us immediately if you suspect your account has been compromised.

The nicep Platform is strictly intended for use by individuals aged 21 years and above, in compliance with Philippine regulations applicable to online casino-style gambling. nicep does not knowingly collect personal data from any person under the age of 21.

Age verification is conducted as part of the registration and KYC process. Any account found to be held by a person under 21 years of age will be immediately and permanently closed. All personal data collected in connection with such an account will be deleted from active systems within 30 days of account closure, except where legal retention obligations require otherwise.

If you are a parent or guardian and believe that a minor has registered on the nicep Platform without your knowledge, please contact us immediately at [email protected]. nicep will investigate the matter promptly and take all appropriate action including data deletion.

Some of nicep's third-party service providers — including game studios, cloud infrastructure providers, and identity verification partners — may process personal data on servers located outside the Philippines. Where such cross-border transfers occur, nicep ensures that appropriate safeguards are in place as required under Section 21 of the Data Privacy Act and NPC regulations, including:

• Contractual clauses that require the receiving entity to apply data protection standards equivalent to those required under Philippine law.
• Assessment of the data protection laws and practices applicable in the recipient's jurisdiction to ensure they do not undermine the protections afforded to you under the DPA.
• Where required, separate consent from you for specific cross-border transfers involving sensitive personal information.

nicep does not transfer personal data to jurisdictions that the NPC has determined to provide inadequate levels of protection without implementing additional safeguards approved by the Commission. You may request details of the specific safeguards in place for any cross-border transfer by contacting our Data Protection Officer.

nicep may send you promotional emails, SMS notifications, and in-platform messages about bonuses, new game releases, tournaments, and exclusive VIP offers — but only where you have given your prior consent during registration or subsequently opted in through your account settings.

Every marketing communication from nicep will include a clear and easy-to-use unsubscribe mechanism. You may also update your marketing preferences at any time through your account settings or by contacting [email protected].

nicep does not use automated profiling to make decisions about your eligibility for bonuses or services that produce significant legal or similarly significant effects on you, without also providing you with the opportunity to request human review of any such decision.

nicep reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidance, or Platform functionality. We are committed to keeping you informed of any material changes.

When we make material changes to this Policy, we will notify you by:

• Posting a prominent notice on the nicep Platform for a minimum of 30 days prior to the change taking effect;
• Sending an email notification to the registered email address on your account; and
• Updating the "Effective Date" displayed at the top of this page.

Your continued use of the Platform after the effective date of a revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with a revised Policy, you should stop using the Platform and contact us to close your account before the effective date of the change.

For non-material changes — such as corrections to typographical errors, clarifications that do not affect how your data is processed, or updates to our contact details — nicep may update this Policy without prior notice, though the effective date will always be updated to reflect the most recent revision.

If you have any questions, concerns, or requests relating to this Privacy Policy or to the way nicep handles your personal data, please do not hesitate to reach out. Our Data Protection Officer is available to assist you and will respond within the timeframes required under the Data Privacy Act of 2012.

Data Protection Officer — nicep
Email: [email protected]
Subject: DATA PRIVACY — [Your Request Type]
Available: 24 hours a day, 7 days a week

nicep takes all privacy complaints seriously and is committed to resolving them fairly, transparently, and within the timeframes mandated by Philippine law. We view every complaint as an opportunity to improve our data protection practices and to strengthen the trust that Filipino players place in the nicep Platform.