noceph Privacy Policy
Your Personal Data, Protected & Secure

1. Information We Collect

noceph collects personal information to verify your identity, comply with legal obligations, prevent fraud, process transactions, and provide personalized gaming services. The types of information we collect include:

1.1 Information You Provide Directly

• Account Registration Information: Full legal name, date of birth, gender, residential address, email address, mobile phone number, username, and password.
• Identity Verification Documents: Government-issued identification (passport, driver's license, national ID, voter's ID, PhilHealth ID, TIN ID), proof of address (utility bill, bank statement, barangay certificate), and selfies or photos for facial verification.
• Payment Information: Bank account details, e-wallet account numbers (GCash, Maya, GrabPay), credit/debit card numbers (tokenized and encrypted), transaction history, deposit and withdrawal records.
• Communication Records: Live chat transcripts, email correspondence, phone call recordings (with consent), customer support tickets, complaints, and feedback submitted through our platform.
• Marketing Preferences: Consent to receive promotional emails, SMS messages, push notifications, and information about your interests and gaming preferences.

1.2 Information Collected Automatically

• Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, mobile carrier, language settings, time zone, and unique device identifiers (IMEI, advertising ID).
• Usage Data: Pages visited, games played, bet amounts, win/loss records, session duration, login times, click patterns, navigation paths, referral sources, and interaction with promotional materials.
• Location Data: Geolocation information derived from your IP address to verify that you are located in the Philippines and to comply with geographic restrictions on online gambling.
• Cookies and Tracking Technologies: We use cookies, web beacons, pixels, and similar technologies to remember your preferences, authenticate your session, track your activity, and deliver personalized content and advertisements. You can manage cookie preferences through your browser settings, but disabling cookies may limit your ability to use certain features of the noceph platform.

1.3 Information from Third Parties

• Payment Processors: Transaction confirmation, payment method validation, and fraud detection data from GCash, Maya, GrabPay, banks, and payment gateways.
• Identity Verification Services: Results from automated identity verification checks, watchlist screening, anti-money laundering (AML) checks, and politically exposed person (PEP) screening conducted by third-party KYC providers.
• Credit Reference Agencies: Information to assess creditworthiness and prevent fraud, where permitted by law.
• Marketing Partners: Information about your interaction with noceph advertisements on social media platforms, affiliate websites, and search engines.

2. How We Use Your Information

noceph uses your personal information for the following purposes, in accordance with the Philippine Data Privacy Act and PAGCOR regulations:

2.1 Account Management and Service Delivery

• Create, maintain, and manage your noceph account
• Verify your identity and age to prevent underage gambling
• Process deposits, withdrawals, and other financial transactions
• Provide access to casino games, sports betting, bingo, fishing games, and other gaming services
• Calculate and pay out winnings
• Manage bonuses, promotions, and loyalty programs
• Provide customer support and respond to inquiries

2.2 Legal Compliance and Security

• Comply with Philippine Data Privacy Act, PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA), and other applicable laws and regulations
• Conduct Know Your Customer (KYC) and Anti-Money Laundering (AML) checks
• Prevent, detect, and investigate fraud, money laundering, collusion, bonus abuse, and other prohibited activities
• Monitor transactions for suspicious activity and file Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council (AMLC) when required
• Respond to lawful requests from government authorities, regulatory bodies, law enforcement agencies, and courts
• Enforce our Terms and Conditions and protect noceph's legal rights

2.3 Marketing and Communications

• Send promotional emails, SMS messages, and push notifications about new games, bonuses, and special offers (you can opt out at any time)
• Personalize your gaming experience based on your preferences and playing history
• Conduct surveys, market research, and customer satisfaction studies
• Invite you to participate in tournaments, competitions, and VIP programs
• Display targeted advertisements on the noceph platform and on third-party websites and social media platforms

2.4 Platform Improvement and Analytics

• Analyze user behavior, game performance, and platform usage to improve our services
• Test new features, games, and functionalities
• Optimize website and mobile app performance, speed, and reliability
• Conduct A/B testing and user experience research
• Develop new products and services based on user feedback and market trends

2.5 Responsible Gaming

• Monitor your gaming activity for signs of problem gambling
• Enforce deposit limits, loss limits, session time limits, and self-exclusion settings
• Provide access to responsible gaming tools and resources
• Contact you if we identify behavior consistent with problem gambling

3. Legal Basis for Data Processing

Under the Philippine Data Privacy Act, noceph must have a lawful basis to process your personal information. We rely on the following legal grounds:

• Consent: You provide explicit consent when you create a noceph account, accept this Privacy Policy, and agree to receive marketing communications.
• Contract Performance: Processing is necessary to perform our contract with you—specifically, to provide gaming services, process transactions, and pay out winnings.
• Legal Obligation: We are required by law to verify your identity, conduct AML checks, maintain transaction records, and report suspicious activity to government authorities.
• Legitimate Interest: We have a legitimate business interest in preventing fraud, ensuring platform security, improving our services, and marketing to existing customers, provided these interests are balanced against your privacy rights.

You have the right to withdraw consent at any time by closing your account or opting out of marketing communications. However, withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal, and we may continue to process your data based on other legal grounds (e.g., legal obligation).

4. How We Share Your Information

noceph does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients for the purposes described in this Privacy Policy:

4.1 Service Providers and Business Partners

• Payment Processors: GCash, Maya, GrabPay, banks, and payment gateway providers to process deposits and withdrawals.
• Identity Verification Services: Third-party KYC providers to verify your identity, age, and address.
• Game Providers: Evolution Gaming, Pragmatic Play, Microgaming, NetEnt, and other game developers to deliver casino games and sports betting content.
• Cloud Hosting Providers: Amazon Web Services (AWS), Google Cloud Platform, Microsoft Azure, and other infrastructure providers to store data and host the noceph platform.
• Customer Support Software: Zendesk, Intercom, LiveChat, and other tools to manage customer inquiries and support tickets.
• Marketing and Analytics Platforms: Google Analytics, Facebook Pixel, Mixpanel, and advertising networks to track user behavior, measure campaign performance, and deliver targeted ads.
• Email and SMS Providers: SendGrid, Twilio, and other communication platforms to send transactional and marketing messages.

All service providers are bound by confidentiality agreements and data processing agreements that require them to protect your personal information and use it only for the purposes we specify.

4.2 Government Authorities and Regulatory Bodies

• PAGCOR: To comply with licensing requirements and respond to regulatory inquiries.
• Anti-Money Laundering Council (AMLC): To file Suspicious Transaction Reports (STRs) and comply with AMLA.
• National Privacy Commission (NPC): To respond to privacy complaints and data breach notifications.
• Law Enforcement Agencies: To comply with lawful requests, court orders, subpoenas, and search warrants.
• Tax Authorities: To comply with tax reporting obligations.

4.3 Corporate Transactions

If noceph is involved in a merger, acquisition, asset sale, bankruptcy, or other corporate transaction, your personal information may be transferred to the acquiring entity or successor organization. You will be notified via email and/or a prominent notice on our website of any change in ownership or use of your personal information, as well as any choices you may have regarding your personal information.

4.4 With Your Consent

We may share your information with other third parties when you explicitly consent to such sharing, such as when you participate in a third-party promotion or connect your noceph account to a social media profile.

5. Data Retention

noceph retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

• Active Accounts: We retain your account information and transaction history for the duration of your account relationship with noceph.
• Closed Accounts: After you close your account, we retain certain information (identity documents, transaction records, communications) for 5 years to comply with Philippine legal and regulatory requirements, including PAGCOR record-keeping obligations and AMLA requirements.
• Marketing Data: If you opt out of marketing communications, we will retain your contact information on a suppression list to ensure we do not contact you again.
• Legal Claims: We may retain information for longer periods if necessary to defend legal claims, resolve disputes, enforce our Terms and Conditions, or comply with court orders.

Once the retention period expires, your personal information will be securely deleted or anonymized so that it can no longer be associated with you.

6. Data Security

noceph implements technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction. Our security measures include:

• Encryption: We use SSL/TLS encryption to protect data transmitted between your device and noceph servers. Sensitive data at rest (e.g., passwords, payment information) is encrypted using AES-256 encryption.
• Access Controls: Access to personal information is restricted to employees, contractors, and service providers who need the information to perform their job duties. All personnel with access to personal data are subject to confidentiality obligations.
• Authentication: User accounts are protected by passwords and two-factor authentication (2FA) options. We encourage you to use strong, unique passwords and enable 2FA.
• Network Security: Firewalls, intrusion detection systems, and regular security audits protect noceph infrastructure from cyberattacks.
• Payment Security: We comply with Payment Card Industry Data Security Standard (PCI DSS) requirements and do not store full credit card numbers on our servers. Payment information is tokenized and processed through PCI-compliant payment gateways.
• Regular Security Testing: We conduct regular vulnerability assessments, penetration testing, and security audits to identify and address potential security weaknesses.

Despite our best efforts, no security system is impenetrable. If we become aware of a data breach that poses a risk to your rights and freedoms, we will notify you and the National Privacy Commission within 72 hours, in accordance with the Philippine Data Privacy Act.

7. Your Privacy Rights

Under the Philippine Data Privacy Act, you have the following rights regarding your personal information:

7.1 Right to Access

You have the right to request a copy of the personal information we hold about you. You can access most of your data by logging into your noceph account. For additional information, contact customer support.

7.2 Right to Correction

You have the right to request correction of inaccurate or incomplete personal information. You can update your profile information in your account settings or contact customer support for assistance.

7.3 Right to Erasure (Right to be Forgotten)

You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may retain certain information to comply with legal obligations (e.g., PAGCOR record-keeping requirements, AMLA obligations).

7.4 Right to Object

You have the right to object to processing of your personal information based on legitimate interests or for direct marketing purposes. You can opt out of marketing communications by clicking the "unsubscribe" link in promotional emails or adjusting your communication preferences in your account settings.

7.5 Right to Data Portability

You have the right to receive your personal information in a structured, commonly used, and machine-readable format, and to transmit that information to another service provider. Contact customer support to request a data export.

7.6 Right to Restrict Processing

You have the right to request restriction of processing of your personal information in certain circumstances, such as when you contest the accuracy of the data or object to processing based on legitimate interests.

7.7 Right to Lodge a Complaint

If you believe noceph has violated your privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Contact details: National Privacy Commission, 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City 1308, Philippines. Email: [email protected]. Website: www.privacy.gov.ph.

To exercise any of these rights, contact noceph customer support at [email protected]. We will respond to your request within 30 days. We may request additional information to verify your identity before processing your request.

8. International Data Transfers

Your personal information may be transferred to and processed in countries outside the Philippines, including the United States, European Union member states, and other jurisdictions where our service providers and business partners are located. These countries may have data protection laws that differ from Philippine law.

When we transfer your personal information internationally, we implement appropriate safeguards to ensure your data receives an adequate level of protection, such as:

• Standard contractual clauses approved by the National Privacy Commission
• Data processing agreements with service providers that require compliance with Philippine data protection standards
• Certification under internationally recognized privacy frameworks (e.g., EU-U.S. Data Privacy Framework, APEC Cross-Border Privacy Rules)

9. Children's Privacy

noceph services are intended exclusively for adults 21 years of age and older. We do not knowingly collect personal information from individuals under 21. If we discover that we have inadvertently collected personal information from a person under 21, we will delete that information immediately and close the account.

Parents and guardians who believe their child has provided personal information to noceph should contact us immediately at [email protected]. We encourage parents to use parental control software to prevent minors from accessing online gambling websites.

10. Changes to This Privacy Policy

noceph reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes, we will notify you by email, through a prominent notice on the noceph website, or via push notification on our mobile apps. The "Last Updated" date at the top of this page indicates when the Privacy Policy was last revised.

Continued use of noceph services after changes are posted constitutes your acceptance of the updated Privacy Policy. We encourage you to review this page periodically to stay informed about how we collect, use, and protect your personal information.

11. Contact Us

If you have questions, concerns, or complaints about this Privacy Policy or noceph's data practices, please contact us:

• Email: [email protected] (for privacy-related inquiries) or [email protected] (for general customer support)
• Live Chat: Available 24/7 on the noceph website and mobile apps
• Mailing Address: noceph Data Protection Officer, Metro Manila, Philippines
• Response Time: We aim to respond to all privacy inquiries within 30 days