nsfeph Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how nsfeph ("nsfeph," "we," "us," or "our") collects, processes, stores, and protects personal data provided by users ("Player," "User," or "you") who access or use the nsfeph online gaming platform at nsfeph.net and all related services, features, and applications (collectively, the "Platform").

nsfeph is a PAGCOR-regulated online casino and sportsbook operating in the Republic of the Philippines. As a data controller, nsfeph is fully committed to complying with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, the issuances of the National Privacy Commission (NPC), and all relevant PAGCOR data protection requirements.

By registering an account or otherwise using the nsfeph Platform, you acknowledge that you have read and understood this Policy and consent to the collection and use of your personal data as described herein. If you do not agree with this Policy, you should not access or use the Platform.

2. Data Controller

The data controller responsible for your personal information collected through the nsfeph Platform is nsfeph, operating under a valid PAGCOR licence for online gaming services in the Philippines. All data processing activities carried out by nsfeph are registered with and subject to oversight by the National Privacy Commission (NPC) in accordance with RA 10173.

nsfeph has appointed a Data Protection Officer (DPO) to oversee compliance with the Data Privacy Act and this Policy. You may contact the DPO at any time using the contact details provided in Section 14 of this Policy.

3. Personal Data We Collect

3.1 Account Registration Data

When you register an account with nsfeph, we collect the following information:

• Full legal name (as it appears on your government-issued ID);
• Date of birth (for age verification — you must be 21 or older);
• Residential address within the Philippines (e.g., Metro Manila, Cebu, Davao, Quezon City, Makati);
• Valid email address;
• Mobile number registered in the Philippines;
• Username and encrypted password.

3.2 Identity Verification (KYC) Data

As required by PAGCOR regulations and the Anti-Money Laundering Act (AMLA), nsfeph collects identity verification documents including:

• Government-issued photo ID (PhilSys National ID, passport, driver's licence, UMID, SSS/GSIS ID, or PRC ID);
• Proof of residential address (utility bill, bank statement, or barangay certificate issued within 90 days);
• Selfie or live photo for biometric verification purposes;
• Source of funds documentation where required by AML procedures.

3.3 Financial Transaction Data

nsfeph collects records of all deposits and withdrawals made through approved Philippine payment channels, including GCash, Maya, GrabPay, QR Ph, BPI, BDO, Metrobank, 7-Eleven CLiQQ, InstaPay, and Visa/Mastercard. This includes transaction amounts, timestamps, payment method identifiers (e.g., partial account numbers or mobile wallet references), and transaction status. Full card numbers, mobile wallet PINs, and online banking passwords are never collected or stored by nsfeph.

3.4 Gaming Activity Data

We maintain detailed records of your gaming activity on nsfeph, including game history (Sic Bo, Baccarat, Slots, Fishing, Bingo, Sports Betting, and others), bet amounts, win/loss outcomes, session durations, bonus usage, and responsible gaming limit settings. This data is required for PAGCOR regulatory reporting and for the operation of responsible gaming features.

3.5 Technical & Device Data

When you access the nsfeph Platform, we automatically collect certain technical data including your IP address, device type and model, operating system, browser type and version, referring URL, and session timestamps. This data is used for security monitoring, fraud detection, and aggregate analytics purposes.

3.6 Communications Data

If you contact nsfeph customer support via live chat, email, or telephone, we retain records of those communications including the content of messages, chat transcripts, and call logs, for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Collect Your Data

nsfeph collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings;
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you browse or interact with the Platform;
• From third parties — including identity verification service providers, payment processors, PAGCOR, and fraud prevention partners, where necessary to verify your identity, process transactions, or comply with regulatory requirements.

5. How We Use Your Personal Data

nsfeph uses the personal data we collect for the following purposes:

Purpose	Description
Account Management	Creating, maintaining, and securing your nsfeph player account, including authentication and password recovery.
Identity Verification	Confirming your identity and age (21+) as required by PAGCOR KYC regulations and Philippine law.
Payment Processing	Processing your deposits and withdrawal requests through approved Philippine payment channels.
Regulatory Compliance	Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act (RA 10173).
Responsible Gaming	Monitoring gaming activity to identify potential problem gambling behaviour and administering self-exclusion, deposit limits, and cooling-off periods.
Customer Support	Responding to your enquiries, resolving disputes, and providing technical assistance.
Security & Fraud Prevention	Detecting, investigating, and preventing fraud, money laundering, collusion, bot activity, and other prohibited conduct on the Platform.
Platform Improvement	Analysing aggregate usage patterns to improve Platform performance, game offerings, and user experience.
Marketing Communications	Sending you promotional offers, bonus notifications, and Platform updates — only where you have provided your consent, which you may withdraw at any time.

6. Legal Basis for Processing

Under RA 10173 and applicable data protection principles, nsfeph processes your personal data on the following legal bases:

• Contractual necessity — processing required to create and operate your nsfeph account and deliver the services you have requested;
• Legal obligation — processing required to comply with PAGCOR regulations, the AMLA, NPC requirements, and other Philippine laws applicable to online gaming operators;
• Legitimate interests — processing for fraud prevention, security monitoring, and Platform improvement, where such interests are not overridden by your rights and freedoms;
• Consent — processing for direct marketing communications and optional personalisation features, where you have given specific, informed consent that you may withdraw at any time.

7. Data Sharing & Disclosure

7.1 Third-Party Service Providers

nsfeph engages third-party service providers to assist in delivering the Platform, including identity verification providers, payment processors, cloud hosting providers, customer support platform operators, and data analytics services. These providers are granted access to your personal data only to the extent necessary to perform their designated functions and are contractually bound to maintain the confidentiality and security of your data in accordance with RA 10173.

7.2 Regulatory Authorities

nsfeph is required to share certain player data with PAGCOR and other Philippine regulatory and law enforcement authorities (including the Anti-Money Laundering Council) as part of its licensing obligations, regulatory reporting duties, and legal compliance requirements. Such disclosures are made in accordance with applicable Philippine law and without prejudice to your privacy rights where disclosure is not legally mandated.

7.3 No Sale of Personal Data

nsfeph does not sell, rent, exchange, or otherwise transfer your personal data to any third party for their own independent marketing, advertising, or commercial purposes. Your data is never monetised in a manner inconsistent with this Policy.

7.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of assets involving nsfeph, your personal data may be transferred to the successor entity as part of that transaction. nsfeph will notify affected players of any such transfer and ensure the successor entity is bound by equivalent data protection obligations.

8. Data Retention

nsfeph retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by Philippine law and PAGCOR regulations:

• Account registration and KYC data: Retained for a minimum of five (5) years following account closure, as required by AMLA regulations;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Gaming activity logs: Retained for a minimum of two (2) years for responsible gaming monitoring and regulatory reporting purposes;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained for the duration of your marketing subscription and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, your personal data is securely deleted or anonymised in accordance with NPC-approved data disposal procedures.

9. Security Measures

nsfeph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and nsfeph's servers;
• AES-256 encryption at rest for all stored sensitive personal data;
• Multi-factor authentication (MFA) options for player account access;
• Role-based access controls limiting internal staff access to personal data on a strict need-to-know basis;
• Regular third-party security audits and penetration testing;
• 24/7 automated intrusion detection and anomaly monitoring systems;
• PCI-DSS compliant payment processing for all card and e-wallet transactions.

While nsfeph employs industry-standard security practices, no system is completely immune to security risks. In the event of a personal data breach that poses a real risk to your rights and freedoms, nsfeph will notify you and the National Privacy Commission within the timeframes required by RA 10173 and NPC Circular 16-03.

10. Cookies & Tracking Technologies

nsfeph uses cookies and similar technologies (including web beacons and local storage) to operate the Platform, remember your preferences, maintain your login session, and analyse aggregate usage patterns. We categorise our cookies as follows:

• Strictly necessary cookies: Essential for the Platform to function, including session management, security tokens, and load balancing. These cannot be disabled;
• Functional cookies: Remember your language preferences, display settings, and responsible gaming configurations;
• Analytics cookies: Collect anonymised, aggregated data about how players navigate the Platform to help us improve performance and content;
• Security cookies: Detect fraudulent activity, bot traffic, and suspicious login patterns.

nsfeph does not use third-party advertising cookies or cross-site tracking cookies for targeted advertising purposes. You can manage cookie settings through your browser preferences. Disabling strictly necessary cookies may affect your ability to access certain features of the Platform.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you have the following rights with respect to your personal data held by nsfeph:

• Right to be Informed: You have the right to know how your personal data is collected, processed, and used — which is the purpose of this Policy;
• Right to Access: You may request a copy of the personal data nsfeph holds about you at any time;
• Right to Correction: You may request that inaccurate or incomplete personal data be corrected or updated;
• Right to Erasure or Blocking: You may request the deletion or blocking of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations;
• Right to Object: You may object to the processing of your personal data for direct marketing or where processing is based on legitimate interests;
• Right to Data Portability: You may request a structured, machine-readable copy of personal data you have provided to nsfeph;
• Right to Damages: You have the right to seek compensation for any damages suffered as a result of inaccurate, incomplete, outdated, false, unlawfully obtained, or unauthorised use of your personal data;
• Right to File a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe nsfeph has violated your data privacy rights.

To exercise any of the above rights, please contact our Data Protection Officer using the details in Section 14. nsfeph will respond to all verified data subject requests within fifteen (15) business days of receipt, as required by NPC regulations.

12. Minors & Age Policy

The nsfeph Platform is strictly for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. nsfeph does not knowingly collect personal data from persons under the age of 21. If nsfeph becomes aware that personal data has been collected from a minor, that account will be immediately closed, all associated data will be deleted, and any funds held in the account will be handled in accordance with applicable Philippine law.

If you are a parent or guardian and believe your child has registered an account with nsfeph, please contact our Data Protection Officer immediately using the contact details in Section 14 so that we can investigate and take appropriate action.

13. Changes to This Privacy Policy

nsfeph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, Philippine law, NPC guidelines, or PAGCOR regulatory requirements. When material changes are made, nsfeph will notify registered players via email or an in-Platform notification at least fourteen (14) days before the updated Policy takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of the nsfeph Platform following the effective date of any revised Policy constitutes your acceptance of the updated terms. If you do not accept the changes, you should close your account before the effective date.

14. Contact the Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by nsfeph, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Data Privacy Request — [Your Account Username]
• Response Time: Within 15 business days of receipt
• Platform: nsfeph.net — Philippines

If you are not satisfied with nsfeph's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file an NPC complaint is available on the NPC's official website.