Table of Contents
- Overview
- 1. Data Controller
- 2. Data We Collect
- 3. How We Use Your Data
- 4. Legal Basis for Processing
- 5. Data Sharing & Disclosure
- 6. Cookies & Tracking Technologies
- 7. Data Retention
- 8. Data Security
- 9. Your Rights
- 10. Children's Privacy
- 11. International Data Transfers
- 12. Policy Updates
- 13. Contact Us
About This Policy
naceph ("naceph," "we," "us," or "our") is committed to safeguarding the privacy and personal data of every Filipino player who accesses or registers on the naceph.cam platform. This Privacy Policy ("Policy") sets out in clear, plain terms what personal information we collect from you, how and why we use it, who we may share it with, and what rights you have over your own data.
This Policy applies to all personal data collected through naceph.cam, including account registration, deposits and withdrawals, gameplay activity, customer support interactions, and marketing communications. naceph operates under PAGCOR licensing and complies with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations ("DPA"), which is the primary Philippine law governing how organizations collect, use, store, and disclose personal information.
By registering a naceph account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of this Policy, please discontinue use of the naceph platform and contact our support team to request account closure.
Your data stays yours. naceph does not sell your personal information to third parties for marketing purposes. We share data only where necessary to deliver our services, comply with Philippine law, or protect the integrity of the platform — and always within the boundaries set out in this Policy.
1. Data Controller
1.1 The data controller responsible for your personal information collected through the naceph platform is naceph, the operator of naceph.cam, duly licensed by the Philippine Amusement and Gaming Corporation (PAGCOR).
1.2 As data controller, naceph determines the purposes and means by which your personal data is processed. We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Policy. Contact details for the DPO are provided in Section 13 of this Policy.
1.3 Where naceph engages third-party service providers (such as payment processors, game software providers, and fraud detection services) to process personal data on our behalf, those providers act as data processors under contracts that impose data protection obligations consistent with applicable Philippine law.
2. Personal Data We Collect
2.1 naceph collects personal data through several channels: directly from you during account registration and subsequent use of the platform; automatically through cookies and similar tracking technologies when you browse naceph.cam; and, where required by law, from third-party identity verification and fraud prevention services.
2.2 Registration and Identity Data
When you create a naceph account, we collect the following categories of personal information:
- Full legal name as it appears on your government-issued identification;
- Date of birth (to verify you are at least 21 years of age);
- Residential address, including barangay, city or municipality, and province;
- Valid email address;
- Philippine mobile number;
- Copies of government-issued photo identification (e.g., PhilSys ID, passport, driver's license) submitted during KYC verification;
- Username and encrypted password credentials.
2.3 Financial and Transaction Data
To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other supported Philippine payment channels, naceph collects:
- Payment method type and registered account name;
- Transaction amounts, dates, and reference numbers;
- Deposit and withdrawal history on the naceph platform;
- Bank account details or e-wallet identifiers where provided for withdrawal purposes.
2.4 Gaming Activity Data
naceph logs gameplay data to ensure platform integrity, resolve disputes, and comply with PAGCOR reporting obligations. This includes:
- Game sessions played, including game titles, bet amounts, and outcomes;
- Sports betting selections, odds accepted, and settlement results;
- Session start and end times;
- Bonus activations, wagering progress, and promotion redemptions.
2.5 Technical and Device Data
When you access naceph.cam, our systems automatically collect certain technical data including: IP address, browser type and version, device type and operating system, referring URL, pages visited, and session duration. This data is used for security monitoring, fraud prevention, geolocation compliance, and platform performance optimization.
2.6 Communications Data
If you contact naceph customer support via live chat or email, we retain records of those communications, including the content of messages and any attachments you provide, to resolve your queries and maintain a support history.
Sensitive personal information such as government ID numbers collected during KYC verification is treated with heightened security controls in accordance with Section 3 of the Data Privacy Act of 2012 and is accessible only to authorized naceph compliance personnel.
3. How We Use Your Personal Data
3.1 naceph uses the personal data we collect for the following specific purposes:
| Purpose | Data Used |
|---|---|
| Account creation and management | Registration data, identity data, contact details |
| Identity verification (KYC) and age verification (21+) | Government ID, date of birth, address |
| Processing deposits and withdrawals | Financial data, payment method details |
| Delivering and improving gaming services | Gaming activity data, device data |
| Anti-money laundering (AML) compliance | Transaction data, identity data |
| Fraud detection and platform security | Technical data, transaction data, gaming data |
| Customer support and dispute resolution | Communications data, account data |
| Bonus administration and promotion delivery | Gaming activity, account data |
| Marketing communications (where consented) | Contact details, gaming preferences |
| PAGCOR regulatory reporting | Gaming activity data, identity data |
| Responsible gaming monitoring | Gaming activity, deposit and loss patterns |
3.2 naceph does not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent, unless required to do so by Philippine law or PAGCOR regulatory directive.
3.3 Where naceph sends you marketing communications about promotions, new games, or special offers, you may withdraw your consent to receive such communications at any time by updating your notification preferences within your naceph account settings or by contacting our support team.
4. Legal Basis for Processing
4.1 naceph processes your personal data on the following legal grounds under the Data Privacy Act of 2012:
- Contractual necessity: Processing is necessary to perform the contract between you and naceph, specifically to operate your account, process transactions, and deliver gaming services;
- Legal obligation: Processing is required to comply with Philippine law, including the Anti-Money Laundering Act, PAGCOR licensing conditions, and the Data Privacy Act of 2012 itself;
- Legitimate interest: Processing is necessary for naceph's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided those interests are not overridden by your privacy rights;
- Consent: For optional marketing communications and certain non-essential cookies, processing is based on your freely given, specific, and informed consent, which you may withdraw at any time.
5. Data Sharing & Disclosure
5.1 naceph does not sell, rent, or trade your personal information to third parties for commercial purposes. We share personal data only in the following limited circumstances:
5.2 Service Providers
naceph engages trusted third-party service providers who process personal data on our behalf under strict contractual data protection obligations. These providers include: payment processing partners (GCash, PayMaya, BPI, BDO, Metrobank, UnionBank and their processors); game software and platform technology providers; identity verification and KYC service providers; fraud detection and cybersecurity services; and cloud hosting and IT infrastructure providers.
5.3 Regulatory and Law Enforcement
naceph is required by Philippine law to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities when lawfully required or when necessary to investigate suspected illegal activity, fraud, or money laundering. Such disclosures are made only to the extent required by law.
5.4 Business Transfers
In the event of a merger, acquisition, or transfer of all or a substantial portion of naceph's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified in advance of any such transfer that materially affects your data and given the opportunity to exercise your rights under this Policy.
No selling of data: naceph will never sell, license, or monetize your personal information by sharing it with advertisers, data brokers, or other third parties for their own marketing purposes.
6. Cookies & Tracking Technologies
6.1 naceph.cam uses cookies and similar tracking technologies (such as local storage and session identifiers) to operate the platform, remember your preferences, maintain your login session, and analyze how the site is used. Cookies are small text files stored on your device by your browser.
6.2 Types of Cookies Used
- Strictly necessary cookies: Essential for the platform to function. These cannot be disabled without significantly impairing your ability to use naceph. They include session management, authentication tokens, and security cookies;
- Functional cookies: Remember your preferences such as language settings, game display options, and responsible gaming limit configurations;
- Analytics cookies: Help naceph understand how players navigate the platform so we can improve the user experience. Data collected is aggregated and does not identify you individually;
- Security cookies: Support fraud detection and bot prevention mechanisms that protect your naceph account and the platform as a whole.
6.3 You can manage cookie preferences through your browser settings, which typically allow you to refuse or delete cookies. Note that disabling strictly necessary cookies will prevent you from logging into your naceph account. Analytics and functional cookies can be disabled without affecting core platform access.
7. Data Retention
7.1 naceph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory obligations.
7.2 Specific retention periods applicable to naceph player data are as follows:
- Account and identity data: Retained for the duration of your active naceph account and for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and the Anti-Money Laundering Act;
- Financial transaction data: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLC and applicable tax regulations;
- Gaming activity data: Retained for the duration of your account and for five (5) years following account closure for regulatory and dispute resolution purposes;
- Customer support communications: Retained for three (3) years from the date of each interaction;
- Marketing consent records: Retained until withdrawn, then archived for three (3) years as evidence of lawful processing.
7.3 Upon expiry of the applicable retention period, naceph will securely delete or anonymize your personal data in accordance with recognized data destruction standards.
8. Data Security
8.1 naceph implements technical and organizational security measures designed to protect your personal data against unauthorized access, loss, destruction, alteration, or disclosure. These measures include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and naceph.cam;
- Encryption of stored sensitive data, including government identification documents and financial account details;
- Access controls restricting personal data access to authorized naceph personnel on a strict need-to-know basis;
- Two-factor authentication (2FA) available for all naceph player accounts;
- Regular security audits and penetration testing conducted by independent cybersecurity specialists;
- Continuous fraud monitoring and anomalous activity detection systems operating across the platform 24/7;
- Data breach response procedures with notification timelines compliant with the Data Privacy Act of 2012.
8.2 While naceph takes all reasonable steps to protect your personal data, no online system can guarantee absolute security. You also play a role in protecting your account — please use a strong unique password, enable 2FA, and never share your naceph login credentials with anyone.
8.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, naceph will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach and will notify affected players promptly thereafter, in compliance with NPC Circular No. 16-03.
9. Your Data Rights
9.1 Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by naceph:
- Right to be Informed: You have the right to know what personal data naceph collects about you, how it is used, and with whom it is shared — which this Policy provides;
- Right to Access: You may request a copy of the personal data naceph holds about you, including the purposes for which it is processed;
- Right to Rectification: You may request correction of inaccurate or incomplete personal data in your naceph account by updating your account settings or contacting our support team;
- Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to naceph's legal retention obligations;
- Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time;
- Right to Data Portability: You may request your personal data in a structured, machine-readable format for transfer to another service provider where technically feasible;
- Right to Lodge a Complaint: If you believe naceph has processed your personal data in violation of applicable law, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
9.2 To exercise any of the above rights, please contact naceph's Data Protection Officer via the contact details in Section 13. naceph will respond to all verified data rights requests within thirty (30) calendar days in accordance with the Data Privacy Act of 2012 and its implementing regulations.
Note on legal retention: naceph may decline erasure requests where continued retention is required by PAGCOR licensing conditions, the Anti-Money Laundering Act, or other applicable Philippine law. We will always explain the reason if we cannot fulfill an erasure request.
10. Children's Privacy
10.1 The naceph platform is strictly prohibited for persons under the age of 21 years, in accordance with Philippine gambling regulations. naceph does not knowingly collect personal data from individuals below the minimum age requirement.
10.2 All naceph account registrations are subject to mandatory age verification. Where naceph discovers that an account has been registered by or on behalf of a person under 21 years of age, that account will be immediately terminated, all associated funds will be refunded in accordance with our underage gaming policy, and all personal data of the minor will be deleted without undue delay.
10.3 If you are a parent or guardian and believe a minor has accessed the naceph platform, please contact our support team immediately so we can take appropriate action.
11. International Data Transfers
11.1 naceph primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including game software providers, cloud infrastructure partners, and fraud detection services — may process data in jurisdictions outside the Philippines.
11.2 Where personal data is transferred outside the Philippines, naceph ensures that appropriate safeguards are in place to protect that data in accordance with the Data Privacy Act of 2012. Such safeguards include contractual data protection clauses binding on the recipient organization and, where applicable, transfers only to jurisdictions recognized as providing an adequate level of data protection.
11.3 You may request information about the specific safeguards applicable to any cross-border transfers of your personal data by contacting naceph's Data Protection Officer.
12. Updates to This Policy
12.1 naceph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR requirements, or technological developments. The "Last Updated" date at the top of this Policy indicates when the most recent revision was made.
12.2 Where material changes are made to this Policy — particularly changes that may affect your rights or how we use your personal data — naceph will provide reasonable notice by posting the updated Policy on naceph.cam and, for registered players, by sending notification to your registered email address.
12.3 Continued use of the naceph platform following publication of an updated Privacy Policy constitutes your acknowledgment of, and agreement to, the updated terms. We encourage you to review this Policy periodically.
13. Contact & DPO Details
13.1 For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by naceph, please contact us through the following channels:
- Live Chat: Available 24/7 on naceph.cam in English and Tagalog
- Email (plain text — not a clickable link): [email protected]
- Data Protection Officer: [email protected] — for formal data rights requests and privacy complaints
13.2 naceph aims to acknowledge all privacy-related enquiries within three (3) business days and to provide a substantive response within thirty (30) calendar days. If your matter is urgent — such as suspected unauthorized access to your account — please contact us via live chat for the fastest response.
13.3 If you are not satisfied with naceph's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.
How naceph Protects Your Data
256-Bit Encryption
All data transmitted between your device and naceph.cam is protected by bank-grade SSL/TLS encryption, keeping your account details and financial transactions secure.
DPA 2012 Compliant
naceph fully complies with the Philippines' Data Privacy Act of 2012 and its implementing regulations, with a dedicated Data Protection Officer overseeing compliance.
No Data Selling
naceph never sells, rents, or trades your personal information. Data shared with third parties is strictly limited to service delivery and legal compliance purposes.
Your Data Rights
Filipino players have full rights under the DPA to access, correct, delete, and port their personal data. naceph responds to all verified data rights requests within 30 days.
PAGCOR Regulated
naceph's data handling practices are subject to PAGCOR regulatory oversight, providing an additional layer of accountability and player protection beyond standard privacy law.
24/7 Privacy Support
Our Filipino support team is available round the clock in English and Tagalog to help with any privacy questions, data rights requests, or account security concerns.