48niceph Privacy Policy

This Privacy Policy applies to all personal data collected, processed, stored, and used by 48niceph in connection with the operation of the online gaming platform accessible at 48niceph.app and all associated services, including customer support, financial transaction processing, KYC verification, and marketing communications where consented to.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA"), 48niceph is the Personal Information Controller in respect of personal data collected from registered Players and visitors to the 48niceph platform.

This Policy applies to:

• All registered 48niceph account holders, regardless of whether they are currently active on the platform.
• Individuals who have commenced but not completed the registration process on 48niceph.
• Visitors to the 48niceph.app website who have not registered but whose non-personal or anonymised usage data is collected via cookies or analytics tools.

This Policy does not apply to third-party websites, services, or platforms that may be linked from 48niceph promotional content or partner networks. 48niceph is not responsible for the privacy practices of any third party.

48niceph collects personal data across the following categories. The specific data points collected within each category depend on how you interact with the platform:

48niceph does not intentionally collect special categories of sensitive personal data (such as health information, political opinions, or religious beliefs) from Players. If any such data is disclosed incidentally during support interactions, it will not be processed for any purpose beyond the immediate support context in which it was shared.

48niceph collects your personal data through the following channels and methods:

3.1 Directly From You

The majority of personal data held by 48niceph is provided directly by you during registration, KYC verification, financial transactions, customer support interactions, and when you voluntarily update your account profile. This includes your name, date of birth, contact details, government ID documents, and payment information.

3.2 Automatically Through Platform Use

When you access and use the 48niceph platform, technical and gaming activity data is collected automatically. This includes your IP address, device identifiers, browser characteristics, login times, pages visited within the platform, game sessions initiated, wagers placed, and session durations. This data is collected through server logs, cookies, and analytics tools.

3.3 From Third-Party Verification Services

For KYC identity verification and fraud prevention purposes, 48niceph may use third-party identity verification services that cross-reference the documents you submit with independent data sources. These services operate under their own privacy policies and data processing agreements with 48niceph, and are contractually bound to process your data solely for the verification purpose.

3.4 From Payment Processors

When you make a deposit or withdrawal using GCash, Maya, BPI, BDO, Metrobank, Coins.ph, USDT, or 7-Eleven CLiQQ, the relevant payment processor may provide 48niceph with confirmation data relating to your transaction, including transaction identifiers and the status of the payment. 48niceph does not receive or store full payment card numbers, full GCash PINs, or complete banking credentials.

48niceph processes your personal data for defined purposes, each of which has a corresponding legal basis under the Philippine Data Privacy Act:

4.1 Account Registration and Platform Access

Purpose: To create and manage your 48niceph account, authenticate your identity on login, and provide you with access to the platform's gaming services.
Legal Basis: Performance of contract — processing is necessary to fulfil the service agreement you enter into when registering on 48niceph.

4.2 Identity Verification (KYC)

Purpose: To verify your identity and age (21+ requirement) in accordance with PAGCOR licensing conditions and the Anti-Money Laundering Act of the Philippines.
Legal Basis: Legal obligation — 48niceph is required by PAGCOR regulations and Philippine anti-money laundering legislation to conduct identity verification before processing withdrawals.

4.3 Financial Transaction Processing

Purpose: To process deposits, withdrawals, and in-platform fund movements; to maintain accurate financial records; and to detect and investigate fraudulent transactions.
Legal Basis: Performance of contract and legal obligation.

4.4 Regulatory Compliance and Reporting

Purpose: To fulfil 48niceph's reporting obligations to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine regulatory authorities as required.
Legal Basis: Legal obligation.

4.5 Fraud Prevention and Security

Purpose: To detect, investigate, and prevent fraudulent activity, account abuse, money laundering, and other prohibited conduct on the platform.
Legal Basis: Legitimate interest — 48niceph has a legitimate interest in protecting the integrity of the platform and the interests of all Players.

4.6 Customer Support

Purpose: To provide customer support, resolve disputes, respond to enquiries, and maintain records of support interactions for quality assurance and regulatory purposes.
Legal Basis: Performance of contract and legitimate interest.

4.7 Responsible Gaming Monitoring

Purpose: To monitor gaming activity patterns for indicators of problematic gambling behaviour, to apply responsible gaming tools where activated by the Player, and to comply with PAGCOR's responsible gaming framework.
Legal Basis: Legal obligation and legitimate interest.

4.8 Marketing Communications

Purpose: To send you promotional emails, SMS notifications, and in-platform messages about 48niceph bonuses, new games, and platform updates.
Legal Basis: Consent — marketing communications are sent only to Players who have opted in. You may withdraw consent at any time by updating your communication preferences in your account settings or by contacting support.

48niceph shares personal data with third parties only where it is necessary for a defined purpose described in this Policy, where required by law, or where you have given explicit consent. The following categories of third parties may receive your personal data:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines), BPI, BDO, Metrobank, Coins.ph, and other payment service providers receive transaction-related data necessary to process your deposits and withdrawals. These processors are subject to their own regulatory obligations under the Bangko Sentral ng Pilipinas (BSP).
• Identity Verification Providers: Third-party KYC and identity verification services receive the identity documents you submit during KYC verification. These providers are contracted by 48niceph and bound by data processing agreements.
• Game Content Providers: Game providers whose titles are available on 48niceph may receive aggregated, non-personally identifiable gaming data for the purpose of game performance monitoring and certification. Individually identifiable player data is not shared with game providers beyond what is strictly necessary for the delivery of the specific game.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities may receive personal data as required by applicable law or regulatory obligation. 48niceph does not control the use of data once shared with a competent authority acting under a lawful mandate.
• Legal and Fraud Prevention Services: Law firms, security consultants, and fraud prevention service providers engaged by 48niceph may process personal data to the extent necessary to provide their services under confidentiality obligations.
• IT Infrastructure and Cloud Providers: Platform infrastructure service providers hosting 48niceph systems may process personal data as part of their infrastructure operations. These providers are contractually bound by data processing agreements requiring equivalent data protection standards.

48niceph does not transfer personal data to third parties for their own independent commercial use. Any data sharing arrangement not described in this Policy will be notified to affected Players in advance, to the extent permitted by law.

48niceph uses cookies and similar tracking technologies to operate and improve the platform, maintain session security, and understand how Players interact with the site. The following cookie categories are used:

6.1 Strictly Necessary Cookies

These cookies are essential for the 48niceph platform to function. They maintain your logged-in session, remember your authentication status, and ensure the security of your account. These cookies cannot be disabled without preventing core platform functionality. No consent is required for strictly necessary cookies under Philippine law.

6.2 Functional Cookies

Functional cookies remember your preferences — such as language settings and display preferences — to improve your platform experience. Disabling these cookies may affect certain platform features but will not prevent basic access.

6.3 Analytics Cookies

Analytics cookies collect anonymised or pseudonymised data about how visitors and Players use the 48niceph platform — which pages are viewed, how long sessions last, and which features are used most frequently. This data is used to improve platform performance and user experience. 48niceph uses analytics tools operated under data processing agreements that restrict the use of this data to 48niceph's own analytics purposes.

6.4 Managing Cookies

You can control cookie settings through your browser's privacy settings. Instructions for managing cookies vary by browser — consult your browser's help documentation for guidance. Blocking all cookies will affect the functionality of the 48niceph platform, including your ability to remain logged in.

48niceph implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Encryption in Transit: All data transmitted between your device and 48niceph servers is protected by TLS 256-bit encryption. This prevents interception of data during transmission, including login credentials, financial data, and personal information.
• Encryption at Rest: Sensitive personal data — including government ID details, financial records, and authentication credentials — is encrypted when stored on 48niceph servers.
• Access Controls: Access to personal data within 48niceph's systems is restricted to personnel whose role requires it, enforced by role-based access controls, multi-factor authentication requirements, and audit logging.
• Password Security: Account passwords are stored as salted cryptographic hashes. 48niceph does not have access to plain-text versions of your password. Our support team will never ask you for your password.
• Intrusion Detection: 48niceph operates security monitoring systems designed to detect and alert on unusual access patterns, potential intrusion attempts, and anomalous data access.
• Vendor Security Requirements: Third-party vendors who process personal data on 48niceph's behalf are required, as a condition of their engagement, to maintain security standards consistent with those described in this Policy.

No data security system is completely impenetrable. In the event of a personal data breach that poses a risk to your rights and freedoms, 48niceph will notify the National Privacy Commission (NPC) within 72 hours of discovery as required by the Philippine DPA, and will notify affected individuals within a reasonable timeframe consistent with NPC guidance.

48niceph retains personal data for no longer than is necessary for the purpose for which it was collected, or as required by applicable Philippine law and PAGCOR regulation. The following retention periods apply to the principal categories of personal data:

At the end of an applicable retention period, personal data is deleted or anonymised. Where anonymisation is technically feasible, anonymised data may be retained for aggregate analytics purposes beyond the retention period — anonymised data is not personal data and falls outside the scope of this Policy.

As a data subject under the Philippine Data Privacy Act, you have the following rights in relation to the personal data held by 48niceph. These rights can be exercised by contacting the 48niceph Data Protection Officer using the contact details in Section 13.

Right to Be Informed

You have the right to be informed of the existence and nature of the personal data held about you by 48niceph, the purpose for which it is being processed, and how it will be handled. This Privacy Policy serves as the primary mechanism through which 48niceph fulfils this obligation.

Right of Access

You have the right to request a copy of the personal data 48niceph holds about you. Access requests will be fulfilled within thirty (30) days of receipt, subject to identity verification. 48niceph may charge a reasonable administrative fee for excessive or manifestly unfounded access requests.

Right to Correction

If you believe that personal data held by 48niceph is inaccurate, incomplete, or outdated, you have the right to request its correction. Some data — such as your registered email address — can be updated directly in your account settings. For other data fields, please contact the DPO.

Right to Erasure ("Right to Be Forgotten")

You have the right to request the deletion of your personal data from 48niceph's systems. This right is subject to 48niceph's overriding legal obligations — data that must be retained for PAGCOR compliance, anti-money laundering purposes, or active dispute resolution cannot be deleted before the applicable retention period has elapsed, even upon request.

Right to Object and Right to Block

You have the right to object to, or request the suspension of, 48niceph's processing of your personal data in specific circumstances — for example, where you dispute the accuracy of the data or where processing for direct marketing purposes is concerned. Marketing communications can be opted out of at any time via your account settings.

Right to Data Portability

You have the right to receive a copy of the personal data you have provided to 48niceph in a structured, commonly used, machine-readable format, where technically feasible.

Right to Complain

If you believe 48niceph has violated your rights under the Philippine Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available through official Philippine government channels.

48niceph's gaming services are intended exclusively for individuals who are 21 years of age or older, as required by PAGCOR regulations governing online gaming in the Philippines. 48niceph does not knowingly collect personal data from individuals under the age of 21.

Where 48niceph discovers, through KYC verification or any other means, that an account has been registered by an individual under the age of 21, the following steps will be taken:

• The account will be immediately suspended and subsequently closed.
• Any deposited funds will be returned to the original payment method following identity verification of the depositor.
• Any winnings generated on the account will be forfeited.
• The incident will be reported to PAGCOR as required by the applicable regulatory framework.

If you are a parent or guardian and believe that an individual under 21 in your care has registered on 48niceph, please contact the 48niceph support team via live chat or email immediately so that appropriate action can be taken.

48niceph primarily processes and stores personal data within the Philippines. In limited circumstances, personal data may be transferred to and processed in other countries — for example, where 48niceph engages cloud infrastructure providers or technical service partners whose systems are located outside the Philippines.

Where personal data is transferred outside the Philippines, 48niceph takes steps to ensure that the transfer complies with the requirements of the Philippine Data Privacy Act, including by:

• Entering into data processing agreements with the receiving party that impose data protection standards consistent with Philippine law.
• Transferring data only to jurisdictions or organisations that provide adequate levels of personal data protection.
• Implementing additional technical safeguards (such as encryption) for data transferred across jurisdictions.

48niceph does not transfer personal data to international third parties for purposes unrelated to the operation of the platform.

48niceph reserves the right to update or amend this Privacy Policy at any time. Changes may be made to reflect updates in applicable Philippine law, changes in PAGCOR regulatory requirements, platform feature changes, or refinements to our data processing practices.

Material changes to this Policy — meaning changes that affect how your personal data is used in a way that may impact your rights — will be communicated to you via email to your registered address and/or via a prominent notice on the 48niceph platform prior to the changes taking effect, where reasonably practicable.

The effective date at the top of this Policy reflects the date of the most recent version. Continued use of the 48niceph platform following the effective date of any amendment constitutes your acknowledgement of the updated Policy.

48niceph has designated a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. The DPO is responsible for overseeing 48niceph's data protection compliance, handling data subject rights requests, and serving as the point of contact for the National Privacy Commission.

To exercise any of your rights described in Section 9, to raise a concern about how 48niceph handles your personal data, or to request further information about this Privacy Policy, please contact the 48niceph DPO through the following channels:

• Live Chat: Available 24 hours a day, 7 days a week via the 48niceph platform. For DPO-specific enquiries, please identify your message as a Data Privacy enquiry so it is directed to the appropriate team.
• Email: [email protected] (plain text — not a clickable link). Please include "Data Privacy Request" in your subject line. Responses to DPO enquiries are provided within thirty (30) calendar days of receipt.

When submitting a data subject rights request, you will be required to verify your identity before any personal data is disclosed or modified. This is a security measure to protect your data from unauthorised access by third parties.

For complaints that cannot be resolved through 48niceph's internal DPO process, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through the official NPC channels available to Philippine residents.