nafwph Privacy Policy

nafwph ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of every Filipino player who registers and plays on the nafwph platform. We understand that privacy is not just a legal obligation — it is a fundamental aspect of the trust that Filipino players place in nafwph when they choose us as their online casino platform of choice.

This Privacy Policy describes the categories of personal data that nafwph collects from players and prospective players in the Philippines, the purposes for which that data is processed, the conditions under which it may be shared with third parties, the security measures nafwph employs to protect it, and the rights that players have over their own personal data under Philippine law.

By accessing the nafwph platform, registering an account, or using any nafwph service, you confirm that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Privacy Policy, you should not use the nafwph platform.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, nafwph acts as the Personal Information Controller (PIC) with respect to all personal data collected from players and users of the nafwph platform.

As Personal Information Controller, nafwph determines the purposes and means of processing your personal data and bears responsibility for ensuring that all processing activities are conducted in accordance with Philippine data protection law, PAGCOR regulatory requirements, and this Privacy Policy.

For all privacy-related inquiries, data subject access requests, correction requests, or complaints, players may contact nafwph's designated Data Privacy Officer through the contact details provided in Section 14 of this Policy.

nafwph collects the following categories of personal data in connection with the operation of your player account and the delivery of nafwph services:

nafwph collects personal data through the following methods:

• Direct Collection: Data you provide when registering a nafwph account, completing KYC verification, making a deposit or withdrawal, contacting nafwph support, or participating in promotional surveys or feedback requests.
• Automated Collection: Technical data collected automatically when you access the nafwph platform, including IP addresses, device identifiers, browser data, session logs, and cookie-based data. This collection happens in the background without any action required on your part.
• Transaction Processing: Financial data collected during the processing of deposits and withdrawals through GCash, PayMaya, BDO, BPI, Metrobank, InstaPay, Visa, and Mastercard, including transaction timestamps, amounts, and payment method identifiers.
• Third-Party Verification: Where required for identity verification or fraud prevention, nafwph may receive data from third-party identity verification service providers operating in the Philippines. Such providers are bound by data processing agreements consistent with Philippine law.

nafwph uses your personal data for the following purposes:

• Account Management: Creating, maintaining, verifying, and operating your nafwph player account, including processing logins, managing your wallet balance, and updating your account settings.
• Identity & Age Verification: Verifying that all nafwph players are 21 years of age or older, in compliance with PAGCOR regulations governing online gambling in the Philippines.
• Financial Transactions: Processing deposits and withdrawals via GCash, PayMaya, and Philippine bank accounts; generating transaction records; and complying with Philippine anti-money laundering obligations.
• Regulatory Compliance: Meeting all reporting, record-keeping, and audit obligations imposed by PAGCOR and other applicable Philippine regulatory authorities.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, account compromises, money laundering, and abuse of the nafwph platform.
• Responsible Gaming: Monitoring gaming activity patterns to identify players who may be at risk of problem gambling; administering responsible gaming tools including deposit limits, loss limits, and self-exclusion.
• Customer Support: Responding to player inquiries, resolving disputes, and maintaining communication records for quality assurance purposes.
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve nafwph's platform performance, game selection, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to players who have opted in to receive marketing communications. Players can opt out at any time through their account settings or by contacting nafwph support.

Under the Philippine Data Privacy Act of 2012, nafwph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the agreement between nafwph and you as a registered player — including operating your account, processing transactions, and delivering gaming services.
• Legal Obligation: Processing required to comply with Philippine law, including PAGCOR regulatory obligations, the Anti-Money Laundering Act (AMLA) as amended, and the Data Privacy Act of 2012 itself.
• Legitimate Interests: Processing conducted in pursuit of nafwph's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your fundamental rights and freedoms.
• Consent: Where processing is not covered by the above bases — such as direct marketing communications — nafwph will seek your explicit, freely given, and informed consent, which you may withdraw at any time without penalty to your account standing.

nafwph does not sell, rent, or trade your personal data. We may share your personal data only in the following limited circumstances:

• PAGCOR & Regulatory Authorities: nafwph is required by law to disclose player account information and gaming records to PAGCOR and other authorized Philippine regulatory or law enforcement authorities upon valid legal demand.
• Payment Service Providers: GCash, PayMaya, BDO, BPI, Metrobank, and card processors receive the minimum financial data necessary to process your transactions. These providers are subject to their own privacy and security obligations under Philippine law.
• Identity Verification Providers: Third-party KYC and identity verification service providers may process your identity documents solely for verification purposes under data processing agreements binding them to standards consistent with Philippine data protection law.
• Game Software Providers: Licensed third-party game software providers may receive anonymized or pseudonymized technical data necessary to operate their games on the nafwph platform. They do not receive your identity, contact, or financial data.
• Legal Proceedings: nafwph may disclose your personal data where required by a valid court order, legal process, or mandatory disclosure obligation under Philippine law.

nafwph retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy applicable legal, regulatory, accounting, and reporting obligations. Specific retention periods include:

• Active Account Data: Retained for the duration of your nafwph account and for a period of not less than 5 years following permanent account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML obligations.
• KYC & Identity Documents: Retained for a minimum of 5 years after the closure of your nafwph account, as required under the Anti-Money Laundering Act of the Philippines.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction in compliance with AMLA and PAGCOR requirements.
• Customer Support Communications: Retained for up to 3 years from the date of each interaction for quality assurance and dispute resolution purposes.
• Technical & Log Data: Retained for up to 12 months, except where specific log data is required as evidence in an active fraud investigation or legal proceeding, in which case it will be retained until the matter is fully resolved.
• Marketing Consent Records: Retained for the duration of your nafwph account or until you withdraw consent to marketing communications, whichever occurs first.

At the expiry of applicable retention periods, nafwph will securely delete or irreversibly anonymize your personal data so that it can no longer be associated with your identity.

nafwph uses cookies and similar technologies to operate and improve the platform experience. The cookies nafwph deploys fall into the following categories:

• Strictly Necessary Cookies: Essential for the nafwph platform to function. These cookies maintain your login session, remember your language preferences, and ensure the security of your account. They cannot be disabled without affecting platform functionality.
• Performance Cookies: Collect anonymized data about how players use the nafwph platform — which games are most popular, how long sessions last, and which features are most accessed. This data is used solely to improve the platform and is never linked to your identity.
• Functional Cookies: Remember your preferences and settings — such as your preferred game categories, notification settings, and display preferences — to personalize your nafwph experience.

nafwph does not deploy advertising cookies, third-party tracking pixels, or cross-site behavioral tracking technologies. You can manage or delete cookies through your browser settings at any time; however, disabling strictly necessary cookies will impair your ability to use the nafwph platform.

nafwph implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and nafwph's servers.
• AES-256 encryption for all personal and financial data stored on nafwph's servers.
• Multi-factor authentication (SMS OTP) available and encouraged for all player accounts.
• Role-based access controls ensuring that nafwph staff can only access personal data relevant to their specific job functions.
• Regular penetration testing and security audits conducted by independent security professionals.
• Secure, access-controlled data centers with physical and environmental safeguards.
• Incident response procedures for detecting, reporting, and managing data breaches in accordance with the reporting timelines required by the Philippine Data Privacy Act and the National Privacy Commission.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by nafwph:

• Right to Be Informed: The right to be informed when your personal data is being collected and processed, including the purposes and scope of processing — which is the primary function of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data nafwph holds about you, including information about how it is being processed and to whom it has been disclosed.
• Right to Rectification: The right to request correction of inaccurate, incomplete, or outdated personal data. Certain corrections may require supporting documentation consistent with nafwph's KYC verification requirements.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nafwph's legal obligations to retain certain records under PAGCOR and AML requirements.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. Objection to marketing processing will be actioned immediately upon receipt of your request.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe nafwph has violated your rights under the Data Privacy Act of 2012.

To exercise any of the above rights, please contact nafwph's Data Privacy Officer through the contact details provided in Section 14. nafwph will acknowledge your request within 5 Philippine business days and provide a substantive response within 30 days of receipt.

The nafwph platform is strictly intended for adults aged 21 years and over, as required by PAGCOR regulations. nafwph does not knowingly collect, process, or retain personal data from individuals under the age of 21.

All nafwph account registrations are subject to age verification as part of the KYC process. Accounts that cannot be verified as belonging to a player aged 21 or older will be immediately suspended and any deposits will be returned to the verified deposit source.

nafwph reserves the right to amend this Privacy Policy at any time to reflect changes in applicable Philippine law, PAGCOR regulatory requirements, nafwph's operational practices, or the range of services offered on the nafwph platform.

Where amendments to this Privacy Policy are material — meaning they significantly affect the way nafwph collects, uses, or shares your personal data — nafwph will provide advance notice to registered players via their registered Philippine mobile number or through a prominent platform notification, prior to the amended policy taking effect.

The "Last Updated" date at the top of this Privacy Policy will always reflect the date of the most recent revision. Your continued use of the nafwph platform following the effective date of any amended Privacy Policy constitutes your acknowledgement of the changes.

For all privacy-related inquiries, data subject access requests, correction or deletion requests, or complaints regarding nafwph's handling of your personal data, please contact our Data Privacy Officer through the following channels:

If you are not satisfied with nafwph's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the independent authority responsible for enforcing the Data Privacy Act of 2012. Information on filing an NPC complaint is available on the NPC's official government website.