onicph Privacy Policy

This Privacy Policy ("Policy") describes how onicph ("the Company," "we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you," "your," or "Player") who access or use the onicph online casino platform at onicph.com ("the Platform").

onicph is committed to protecting your privacy and handling your personal data with transparency, integrity, and full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC). We are also bound by the data governance requirements of the Philippine Amusement and Gaming Corporation (PAGCOR) as part of our operating license obligations.

By registering an account, accessing the Platform, or otherwise providing your personal information to onicph, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the Platform immediately.

onicph collects only the personal data that is necessary for the purposes described in this Policy. We do not collect data beyond what is reasonably required to operate the Platform, comply with our legal obligations, and deliver a safe, fair gaming experience to Filipino players.

Identity & Registration Data: Full legal name, date of birth, nationality, government-issued ID number (e.g., PhilSys ID, passport, driver's license, SSS/GSIS number), username, and account password (stored in hashed form — never in plain text).

Contact Data: Email address, mobile number, and residential address (including barangay, city/municipality, province, and ZIP code). For players in Metro Manila, Cebu, Davao, or other major urban centers, we may collect city-level location data for fraud prevention purposes.

Financial Data: GCash account number, PayMaya account details, BPI/BDO/Metrobank account references, transaction history, deposit and withdrawal records, and balance information. We do not store full bank account numbers or card numbers on our servers — these are tokenized by our payment processors.

KYC Verification Documents: Copies of government-issued photo ID, proof of address documents (e.g., utility bills, barangay clearance), and selfie photographs submitted for identity verification purposes.

Gaming Activity Data: Game session logs, bet history, win/loss records, bonus usage, wagering patterns, and responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

Technical & Device Data: IP address, device type and model, operating system, browser type and version, screen resolution, time zone, and unique device identifiers.

Communications Data: Records of your interactions with onicph customer support, including live chat transcripts, email correspondence, and any feedback or complaints submitted.

onicph collects your personal data through the following channels and methods:

Data is collected directly from you when you register, complete KYC, make transactions, play games, or contact support. Some technical data is collected automatically through cookies and server logs when you access the Platform. In limited cases, we may receive data from third-party service providers such as payment processors, identity verification services, and fraud detection partners.

onicph uses your personal data strictly for the following purposes. We do not use your data for any purpose that is incompatible with the reasons for which it was originally collected:

• Account Management: Creating, maintaining, and securing your onicph player account, including password recovery and account verification;
• KYC & Age Verification: Verifying that you meet the mandatory 21+ age requirement under Philippine gaming regulations and confirming your identity to prevent fraud;
• Payment Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels;
• Game Delivery: Providing access to the full onicph game library, including slots, bingo, Tongits Go, and live dealer games, and maintaining accurate game session records;
• Regulatory Compliance: Meeting our obligations under PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012;
• Fraud Prevention & Security: Detecting and preventing unauthorized account access, bonus abuse, collusion, money laundering, and other prohibited conduct;
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior and administering responsible gaming tools such as deposit limits and self-exclusion;
• Customer Support: Responding to your inquiries, resolving disputes, and improving the quality of our support services;
• Platform Improvement: Analyzing aggregated, anonymized usage data to improve Platform performance, game selection, and user experience;
• Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have given explicit consent and only through channels you have opted into.

Under the Philippine Data Privacy Act of 2012, onicph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration — including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR licensing conditions, AMLA reporting obligations, and NPC data governance requirements;
• Legitimate Interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving the Platform — where these interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given clear, informed, and freely given consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

onicph shares your personal data only with trusted third parties who are contractually bound to process it securely and only for the specific purposes for which it was shared. We do not share your data with any party that has not agreed to data protection standards consistent with the Philippine Data Privacy Act.

Categories of third parties with whom we may share your data:

• Payment Processors: GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, and Metrobank — for processing deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and document verification services used to confirm player identity and age;
• Game Software Providers: Licensed game studios and RNG certification bodies who supply and audit the games available on the Platform;
• Fraud & AML Detection Services: Specialist providers who help us detect suspicious transactions and comply with AMLA reporting obligations to the Anti-Money Laundering Council (AMLC);
• Regulatory Authorities: PAGCOR, the NPC, the AMLC, and other competent Philippine government authorities, where disclosure is required by law or regulatory instruction;
• IT Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements;
• Legal & Professional Advisors: Lawyers, auditors, and compliance consultants, where disclosure is necessary for legal proceedings or regulatory compliance.

onicph uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain your session security, and analyze Platform usage. A cookie is a small text file stored on your device when you visit the Platform.

Types of cookies we use:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load-balancing cookies. These cannot be disabled without breaking core Platform functionality;
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and display preferences;
• Analytics Cookies: Collect anonymized data about how players use the Platform — which pages are visited most, where players drop off, and how long sessions last. This data is used solely to improve the Platform;
• Security Cookies: Help detect and prevent fraudulent activity, unauthorized account access, and bot traffic.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. onicph does not use third-party advertising or retargeting cookies.

onicph retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account & Identity Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AMLA record-keeping obligations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLA and BIR requirements;
• KYC Documents: Retained for the duration of your account and for five (5) years post-closure;
• Gaming Activity Logs: Retained for three (3) years from the date of each session, for dispute resolution and regulatory audit purposes;
• Customer Support Records: Retained for two (2) years from the date of each interaction;
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of lawful processing.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with NPC-approved data disposal procedures.

onicph implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption: All data transmitted between your device and the onicph Platform is encrypted using TLS 1.3. Sensitive data at rest, including KYC documents and financial records, is encrypted using AES-256;
• Access Controls: Personal data is accessible only to onicph personnel and authorized third parties who have a legitimate need to access it. Role-based access controls and multi-factor authentication are enforced for all internal systems;
• Password Security: Player passwords are stored using industry-standard one-way hashing algorithms. onicph staff cannot view your password in plain text;
• Penetration Testing: The Platform undergoes regular independent security audits and penetration testing to identify and remediate vulnerabilities;
• Incident Response: onicph maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, we will notify the NPC within 72 hours and affected players without undue delay, as required by the Data Privacy Act.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by onicph. You may exercise any of these rights by contacting our Data Protection Officer at the details in Section 14:

onicph will respond to all data subject rights requests within fifteen (15) business days of receipt. We may request proof of identity before processing any request to protect against unauthorized access to your data.

onicph enforces mandatory age verification as part of the KYC process for all new accounts. Any account found to belong to a person under 21 years of age will be immediately and permanently closed, all associated data will be deleted (except where retention is required by law), and any deposited funds will be returned to the original payment source.

If you are a parent or guardian and believe that a minor has registered an account on the onicph Platform, please contact our Data Protection Officer immediately at the details provided in Section 14. We will investigate and take appropriate action without delay.

onicph primarily processes and stores personal data within the Philippines. In limited circumstances, your data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or game software vendors with international operations.

Where such cross-border transfers occur, onicph ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required by the Philippine Data Privacy Act. These safeguards include:

• Data processing agreements with contractual clauses that bind the recipient to data protection standards consistent with RA 10173;
• Transfers only to jurisdictions that the NPC has recognized as providing adequate data protection;
• Technical and organizational security measures applied consistently regardless of where data is processed.

onicph does not transfer your personal data to any jurisdiction where adequate data protection cannot be guaranteed.

onicph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will notify registered players via email and/or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The effective date and version number at the top of this Policy will be updated with each revision. Your continued use of the Platform after the effective date of any updated Policy constitutes your acknowledgment of the changes. We encourage you to review this Policy periodically to stay informed about how onicph protects your data.

The current version of this Policy is always available at onicph.com/privacy-policy.

onicph has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:

If you are not satisfied with onicph's response to your data privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines, which is the independent regulatory authority responsible for enforcing the Data Privacy Act of 2012.