Privacy Policy –
22niceph Philippines

22niceph operates the online casino and sports betting platform accessible at 22niceph.one, providing Filipino players with access to live casino games, slot titles, bingo rooms, and sports betting markets. In the context of this Privacy Policy, "22niceph", "we", "us", and "our" refer to the operator of the 22niceph Platform.

22niceph acts as the personal information controller (as defined under Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines) with respect to the personal data of registered Players and visitors to the 22niceph Platform. As personal information controller, 22niceph determines the purposes and means of processing your personal data.

This Privacy Policy applies to all personal information collected by 22niceph through:

• The 22niceph website and mobile browser platform at 22niceph.one;
• The account registration and KYC verification process;
• Deposit, withdrawal, and transaction processing;
• Customer support communications via live chat or email;
• Promotional and marketing communications where you have consented to receive them;
• Technical data collected automatically during your use of the Platform.

By creating a 22niceph Account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not use the 22niceph Platform.

22niceph collects the following categories of personal data from Players and Platform visitors. The specific data collected will depend on your level of interaction with the Platform.

22niceph does not knowingly collect sensitive personal information beyond that which is required for identity verification and AML compliance. We do not collect racial or ethnic origin data, political opinions, religious beliefs, health data, or biometric data beyond what may be present on a government-issued ID submitted for KYC purposes.

22niceph collects personal data through the following means:

• Direct collection: Information you provide when registering an Account, completing KYC verification, making a deposit or withdrawal request, or contacting customer support.
• Automated collection: Technical data collected automatically when you access and use the Platform, including through session cookies, log files, and analytics systems.
• Third-party sources: Identity verification data confirmed by KYC service providers; fraud and risk signals from payment processors; age verification data confirmed against Philippine government records where applicable.
• Payment providers: Transaction confirmation data received from GCash, PayMaya, BDO, BPI, and Metrobank in the course of processing deposits and withdrawals.

22niceph processes your personal data for the following purposes:

• Account registration and management: To create and maintain your 22niceph Account, verify your identity and age, and manage your Account preferences.
• Service delivery: To provide you with access to casino games, live casino, bingo rooms, and sports betting markets; to process deposits and withdrawals; and to manage your Account balance.
• Legal and regulatory compliance: To fulfil obligations under applicable Philippine law, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012. This includes the performance of KYC checks and the filing of regulatory reports.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, and other prohibited activities.
• Responsible gaming: To monitor gaming activity for indicators of problem gambling and to enforce responsible gaming tools and restrictions applied to your Account.
• Customer support: To respond to your queries, resolve disputes, and communicate with you about your Account.
• Platform improvement: To analyse aggregate, anonymised usage data for the purpose of improving Platform performance, game selection, and user experience.
• Marketing communications: To send you promotional offers and platform updates, where you have provided explicit consent to receive such communications. You may withdraw this consent at any time by contacting support.

22niceph processes personal data on the following legal bases under Republic Act No. 10173 (Data Privacy Act of 2012):

• Contract performance: Processing necessary to perform the contract between you and 22niceph — including account creation, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulations, AMLA obligations, and tax reporting requirements.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming monitoring, where 22niceph's legitimate interests do not override your fundamental rights.
• Consent: Processing for direct marketing communications, where you have given explicit prior consent. Consent may be withdrawn at any time without affecting the lawfulness of processing based on consent prior to withdrawal.

22niceph does not sell your personal data. We share personal data with third parties only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment service providers: GCash, PayMaya (Maya), BDO Unibank, BPI, and Metrobank — to process deposits, withdrawals, and related transaction verification.
• KYC and identity verification providers: Third-party services used to verify the identity, age, and document authenticity of Players during the KYC process.
• Game software providers: JILI, PG Soft, Pragmatic Play, Evolution, SA Gaming, and other licensed game studios — to the extent technically necessary to deliver their games through the 22niceph Platform. Game providers operate under their own data processing obligations.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory or law enforcement bodies — as required by applicable law or in response to lawful orders.
• Fraud prevention networks: Industry fraud prevention and risk assessment services, to protect both 22niceph and its Players from financial crime.
• Legal advisers and auditors: Where necessary for the conduct of legal proceedings, internal audits, or regulatory compliance reviews.

The 22niceph Platform uses cookies and similar technologies to operate and improve the service. A cookie is a small text file placed on your device when you access the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in during your visit and security tokens. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences (such as language settings and responsible gaming limits) and to personalise your experience. These may be disabled, but doing so may affect Platform functionality.
• Analytics cookies: Used to collect anonymised, aggregated data about how Players use the Platform — pages visited, session duration, error rates — to help 22niceph improve performance and usability. No individually identifiable data is stored in analytics cookies.
• Security cookies: Used to detect and prevent fraudulent access attempts and to implement rate limiting on login and payment pages.

You may manage cookie preferences through your browser settings. Note that disabling certain cookies may impair your ability to use the 22niceph Platform fully.

22niceph implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption on all Platform pages where personal data is transmitted;
• AES-256 encryption for personal data stored in 22niceph's databases;
• Hashed (non-reversible) storage of Account passwords — 22niceph staff cannot read your password;
• Multi-factor authentication options for Player Account access;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform;
• Automated intrusion detection and account anomaly monitoring.

While 22niceph takes reasonable precautions to secure your personal data, no internet-based system can be guaranteed to be completely secure. Players are responsible for maintaining the confidentiality of their own Account credentials.

22niceph retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, or as required by applicable law. The following general retention periods apply:

After the applicable retention period expires, personal data is securely deleted or irreversibly anonymised, unless retention is required for longer by law.

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by 22niceph:

• Right to be informed: The right to know whether your personal data is being processed, and to receive clear information about how it is used — which this Privacy Policy provides.
• Right of access: The right to request a copy of the personal data that 22niceph holds about you.
• Right to correction: The right to have inaccurate or incomplete personal data corrected. You may update most Account information directly through Account Settings.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 22niceph's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes. You may withdraw marketing consent at any time by contacting 22niceph support.
• Right to data portability: The right to receive a structured, commonly used electronic copy of the personal data you have provided to 22niceph.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please submit a written request to [email protected]. 22niceph will respond to all data subject requests within 30 calendar days of receipt. Identity verification may be required before a request is processed.

The 22niceph Platform is strictly for persons aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. 22niceph does not knowingly collect personal data from persons under the age of 21.

If 22niceph becomes aware that personal data has been collected from a person under the age of 21, the relevant Account will be immediately suspended, any winnings will be forfeited, deposits will be returned to the original payment method, and all associated personal data will be deleted from 22niceph's systems without undue delay.

If you believe that a minor may have registered or accessed a 22niceph Account, please contact our support team immediately via live chat or at [email protected].

The 22niceph Platform may from time to time contain references to third-party game providers, payment processors, or other services. This Privacy Policy applies solely to data collected by 22niceph directly. Third-party services linked to or integrated with the 22niceph Platform operate under their own privacy policies, and 22niceph is not responsible for the privacy practices of those services.

Players are encouraged to review the privacy policies of any third-party services they interact with in connection with the 22niceph Platform, including GCash, PayMaya, and any game providers whose content is accessed through the Platform.

Some of 22niceph's service providers — including game software providers and certain technology infrastructure providers — may be located outside the Philippines. Where personal data is transferred internationally, 22niceph ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required by Philippine law, including through data processing agreements and contractual protections.

Such international transfers are limited to the minimum personal data necessary for the purpose and are governed by contractual obligations requiring the recipient to process data only for the specified purpose and in compliance with applicable data protection standards.

22niceph reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered Players via in-platform notification and/or email to the registered address. The effective date of the current version is displayed at the top of this document.

We encourage you to review this Privacy Policy periodically. Continued use of the 22niceph Platform following the publication of any amended Privacy Policy constitutes your acceptance of the changes.

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 22niceph, please contact us through the following channels:

• Live Chat: 24/7 Filipino-English live chat available directly on the 22niceph Platform. Response within 5 minutes.
• Email: [email protected] — for formal data subject requests, please mark your email "Data Privacy Request". Written responses will be provided within 30 calendar days.

If you are not satisfied with 22niceph's response to a privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines.