nn33 Casino – Privacy Policy
At nn33, the privacy of every Filipino player is a genuine operational priority — not a legal checkbox. This Privacy Policy explains in plain terms what personal data nn33 collects, why we collect it, how it is stored and protected, who it may be shared with, and what rights you hold as a data subject under Philippine law.
1 Overview & Scope of This Policy
This Privacy Policy applies to all personal data collected, processed, stored, or otherwise handled by nn33 in connection with the operation of the nn33 online gaming platform at nn33.lat (the "Platform"). It applies to all registered Users, prospective players who visit the Platform without registering, and any individual whose personal data is submitted to nn33 in connection with account-related activities.
nn33 is committed to protecting the personal data of Filipino players in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines. Where nn33 processes data in connection with players located in other jurisdictions, applicable local data protection laws are also observed.
By registering an account on nn33, making a deposit, or using any feature of the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the Platform.
This Policy should be read alongside nn33's Terms & Conditions and Responsible Gaming Policy, both of which also contain provisions relevant to how nn33 manages your account and personal information.
2 Legal Basis for Processing
nn33 processes personal data only where a lawful basis for doing so exists under the Data Privacy Act of 2012 and applicable PAGCOR-compliant regulatory requirements. The legal bases relied upon by nn33 are as follows:
- Contractual Necessity: Processing is necessary for the performance of the contract between you and nn33, including account registration, identity verification, processing of deposits and withdrawals, and provision of gaming services.
- Legal Obligation: Processing is required by applicable law, including Anti-Money Laundering Act obligations (Republic Act No. 9160, as amended), PAGCOR licensing conditions, tax reporting obligations under the National Internal Revenue Code, and mandatory Know Your Customer (KYC) requirements.
- Legitimate Interests: Processing is necessary for nn33's legitimate business interests, including fraud prevention, security monitoring, platform improvement, responsible gaming compliance, and customer service operations, where those interests are not overridden by your data protection rights.
- Consent: Where nn33 relies on your consent as the legal basis for processing — such as for sending promotional communications or optional analytics — that consent is sought explicitly and separately, and you retain the right to withdraw it at any time.
3 Personal Data We Collect
nn33 collects personal data through a number of channels, including direct registration inputs, KYC document submission, transactional activity, and automated technical collection. The categories of personal data collected are described in the table below:
| Category | Data Elements | Collection Method |
|---|---|---|
| Identity Data | Full legal name, date of birth, gender, nationality, government ID number and type | Registration form; KYC document upload |
| Contact Data | Email address, Philippine mobile number, home address | Registration form; account settings |
| KYC Documents | Photographic ID (front and back), proof of address documents, selfie verification images | KYC verification portal |
| Financial Data | GCash account reference, Maya wallet reference, bank account details (BPI, BDO, UnionBank), transaction history, deposit and withdrawal records | Payment processing; account activity |
| Gaming Activity | Game history, wager amounts, win/loss records, bonus usage, session durations, responsible gaming limit settings | Platform gaming systems |
| Technical Data | IP address, device type and identifiers, browser type and version, operating system, session timestamps, geolocation data (city-level) | Automated collection via platform systems and cookies |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support interactions |
nn33 does not collect sensitive personal information beyond what is required for identity verification (which may include information visible on government-issued IDs) and responsible gaming compliance. nn33 does not collect biometric data beyond KYC facial comparison where applicable to the verification method used.
4 How nn33 Uses Your Personal Data
Personal data collected by nn33 is used exclusively for the following defined purposes. Data is never processed for purposes incompatible with those listed below without your prior explicit consent:
- Account Management: Creating, maintaining, and administering your nn33 account, including processing login authentication, implementing responsible gaming controls you have set, and communicating account-related notifications.
- Identity and Age Verification: Verifying that you are who you claim to be and that you meet the mandatory minimum age requirement of 21 years, in compliance with PAGCOR regulations and the Data Privacy Act.
- Payment Processing: Processing deposits via GCash, Maya, BPI, BDO, UnionBank, and other accepted methods; processing withdrawal requests to your verified payment accounts; maintaining financial transaction records as required by law.
- Regulatory Compliance: Fulfilling nn33's obligations under the Anti-Money Laundering Act, PAGCOR licensing conditions, tax regulations, and other applicable Philippine law. This includes mandatory reporting of certain transactions to relevant regulatory authorities.
- Fraud Prevention and Security: Detecting, investigating, and preventing fraudulent activity, collusion, account takeover, money laundering, and other prohibited conduct on the Platform.
- Responsible Gaming: Monitoring gaming behavior to identify potential problem gambling indicators, administering self-exclusion and cooling-off requests, and fulfilling obligations under nn33's Responsible Gaming framework.
- Customer Support: Responding to your support inquiries, resolving disputes, and maintaining records of support interactions for quality assurance purposes.
- Platform Improvement: Analyzing aggregated, anonymized usage data to improve Platform features, game offerings, and user experience.
- Marketing Communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent to receive such communications. You may withdraw consent at any time via your Account notification settings.
nn33 does not sell, rent, or trade your personal data to third-party marketers or data brokers under any circumstances. Your personal information is never used for purposes outside the scope of your nn33 account and the services described in this Policy.
5 Cookies & Tracking Technologies
nn33 uses cookies and similar tracking technologies to operate the Platform, enhance your experience, maintain session security, and collect analytical data. The categories of cookies used are as follows:
- Strictly Necessary Cookies: Required for the Platform to function correctly, including maintaining your authenticated login session, storing your responsible gaming preferences, and enabling secure payment processing. These cannot be disabled without impairing Platform functionality.
- Performance Cookies: Collect anonymized, aggregated data about how the Platform is used — including page load times, error logs, and navigation patterns — to enable nn33 to improve Platform performance and reliability.
- Functionality Cookies: Remember your Platform preferences, such as display settings, language preferences, and your last-visited game category, to personalize your experience across sessions.
- Analytics Cookies: Used with your consent to collect data about usage patterns across the Platform. Analytics data is processed in aggregated form and does not identify individual users.
You may manage cookie preferences through your browser settings. Note that disabling Strictly Necessary Cookies will impair Platform functionality. nn33 does not use third-party advertising or cross-site tracking cookies.
Your browser settings control which non-essential cookies are stored on your device. Consult your browser's help documentation for instructions on managing cookie preferences. nn33 does not require consent to set Strictly Necessary Cookies, as these are essential to Platform operation.
6 Data Sharing & Disclosure
nn33 does not disclose your personal data to third parties except in the circumstances described below. All third-party recipients of personal data are required, by contract, to process that data only for the specified purpose and in compliance with applicable data protection law:
- KYC and Identity Verification Providers: Specialized third-party KYC processing platforms that assist nn33 in verifying government-issued Philippine ID documents. These providers act as data processors under nn33's instruction and are bound by strict data processing agreements.
- Payment Service Providers: GCash (GXI Inc.), Maya (Voyager Innovations), and licensed Philippine banking institutions (BPI, BDO, UnionBank) process payment transactions. These entities are independent data controllers subject to their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations.
- Game Software Providers: Licensed game providers (including Pragmatic Play, PG Soft, and others) receive the minimum technical data necessary to deliver their games within the nn33 platform. Game providers do not receive your identity documents or financial account details.
- Regulatory and Law Enforcement Authorities: nn33 is required by law to disclose personal data and transaction records to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement authorities with lawful jurisdiction, where required by applicable Philippine law or a valid legal order.
- Professional Advisors: Legal counsel, auditors, and compliance consultants who are bound by professional confidentiality obligations and engage with personal data only to the extent necessary to provide their services to nn33.
nn33 will never sell, license, or share your personal data with advertising networks, data brokers, or any entity that intends to use it for commercial purposes unrelated to your nn33 account. This is an absolute commitment, not a qualified one.
7 Data Retention
nn33 retains personal data only for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable law. The specific retention periods applied by nn33 are as follows:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account and KYC data | 5 years from account closure or last active session | AMLA obligations; PAGCOR licensing requirements |
| Financial transaction records | 10 years from the date of the transaction | AMLA (RA 9160); BIR record-keeping requirements |
| Game history and session logs | 3 years from the date of the session | PAGCOR compliance; dispute resolution purposes |
| Customer support records | 3 years from last interaction | Legitimate interests (dispute resolution) |
| Self-exclusion records | Indefinitely or as required by regulation | Responsible gaming obligations |
| Marketing consent records | Duration of consent + 3 years | Proof of consent; regulatory audit trail |
| Technical and session logs | 90 days from collection | Security and fraud prevention |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with nn33's data deletion procedures. Anonymized, aggregated data that cannot be used to identify any individual may be retained indefinitely for statistical analysis.
8 Security Measures
nn33 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include, but are not limited to:
- Encryption in Transit: All data transmitted between your device and nn33's servers is encrypted using 256-bit TLS/SSL encryption, the same standard applied by international financial institutions.
- Encryption at Rest: Sensitive personal data — including KYC documents, identity information, and financial account references — is encrypted at rest in nn33's data storage systems using AES-256 encryption.
- Access Controls: Access to personal data within nn33's systems is restricted on a strict need-to-know basis. All personnel with access to personal data undergo background screening and are bound by confidentiality obligations.
- Multi-Factor Authentication: Internal administrative access to systems containing personal data requires multi-factor authentication. Players are strongly encouraged to enable 2FA on their nn33 accounts.
- Intrusion Detection: nn33's systems are monitored continuously for unauthorized access attempts, unusual data access patterns, and security incidents. Automated alerting systems are in place to detect and respond to potential breaches in real time.
- Regular Security Audits: nn33 conducts periodic third-party security assessments and penetration tests to identify and remediate vulnerabilities before they can be exploited.
- Data Breach Response: In the event of a confirmed personal data breach affecting Filipino players' rights and freedoms, nn33 will notify the National Privacy Commission within 72 hours of becoming aware, and will notify affected individuals without undue delay, in accordance with the Data Privacy Act of 2012.
While nn33 applies industry-standard security measures, no online system is entirely immune to security risks. You are responsible for maintaining the security of your account credentials. If you suspect unauthorized access to your nn33 account, contact support via live chat immediately.
9 Your Rights as a Data Subject
Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, you hold the following rights with respect to your personal data held by nn33. Requests to exercise these rights may be submitted via the contact methods described in Section 14:
Right to Be Informed
You have the right to be informed of how your personal data is collected, processed, and used — which is the primary purpose of this Privacy Policy.
Right of Access
You may request a copy of the personal data nn33 holds about you, along with information about how it is being processed.
Right to Rectification
You may request correction of inaccurate or incomplete personal data held by nn33, subject to identity verification requirements.
Right to Erasure
You may request deletion of your personal data where it is no longer necessary for its original purpose, subject to legal retention obligations that override erasure.
Right to Object
You may object to the processing of your personal data for direct marketing purposes or where processing is based on nn33's legitimate interests.
Right to Data Portability
You may request that personal data you have provided to nn33 be delivered to you in a structured, commonly used, machine-readable format.
Right to Restriction
You may request that nn33 restrict processing of your personal data in certain circumstances, such as while a rectification request is under review.
Right to Lodge a Complaint
You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe nn33 has processed your data unlawfully.
nn33 will respond to data subject rights requests within 15 Philippine business days of receipt. Complex requests may require up to 30 days. Identity verification is required for all rights requests to prevent unauthorized access to personal data by third parties.
Note that certain rights are subject to limitations where legal retention obligations, regulatory requirements, or nn33's legitimate interests in fraud prevention and security override the exercise of those rights. nn33 will explain the basis for any limitation clearly when responding to your request.
10 Children & Minors
nn33 does not knowingly collect personal data from any individual under the age of 21 years. The Platform is strictly restricted to adults aged 21 and above, in compliance with PAGCOR regulations governing online gaming in the Philippines. Age verification is conducted as a mandatory component of the KYC process.
If nn33 becomes aware that personal data has been collected from an individual who does not meet the minimum age requirement of 21 years, that data will be deleted immediately, the associated account will be permanently suspended, and any deposited funds will be returned in accordance with applicable regulations.
Parents and guardians who believe that a person under 21 may have accessed or registered on nn33 are encouraged to contact nn33's support team immediately via live chat or email. nn33 treats such reports with the highest priority.
Strict 21+ enforcement: nn33 applies the mandatory Philippine minimum gaming age of 21 years. No individual under 21 may register, deposit, or participate in any gaming activity on the Platform, regardless of registration method or circumstance.
11 International Data Transfers
As an online gaming platform, nn33 may utilize service providers whose servers or processing infrastructure are located outside the Philippines — including in jurisdictions that host our game provider partners' streaming infrastructure or cloud services. Where personal data is transferred outside the Philippines, nn33 ensures that appropriate safeguards are in place to protect that data to a standard equivalent to that required by the Data Privacy Act of 2012.
Safeguards implemented for international data transfers include standard contractual clauses that impose binding data protection obligations on recipient entities, restrictions on onward transfer and sub-processing without nn33's prior written consent, and requirements for equivalent technical security standards.
nn33 does not transfer KYC identity documents or sensitive personal information to jurisdictions that do not provide an adequate level of data protection without your explicit consent or a valid legal basis under Philippine law.
12 Third-Party Links
The nn33 Platform may contain references or links to third-party payment providers (GCash, Maya, BPI, BDO, UnionBank) whose privacy practices are governed by their own privacy policies, independent of this Policy. nn33 is not responsible for the privacy practices, data handling, or content of third-party services.
When you interact with a third-party payment gateway or service in connection with your nn33 account, you do so subject to that third party's terms of service and privacy policy. nn33 recommends that you review the applicable privacy documentation of any third-party service you interact with in connection with your nn33 account activities.
13 Amendments to This Privacy Policy
nn33 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, business practices, or the services offered on the Platform. All amendments will be published on this page with an updated Effective Date.
For material changes — particularly those that affect how your personal data is used or your rights as a data subject — nn33 will endeavor to provide advance notice via email to the registered address on your account or via a prominent notice displayed on the Platform at login, no less than 14 days before the changes take effect.
Your continued use of the nn33 Platform following the publication of any amendment constitutes your acknowledgment of the revised Policy. If you do not agree with any amendment, you should cease using the Platform and contact support to request account closure in accordance with the Terms & Conditions.
Enable email notifications in your Account settings to receive alerts when this Privacy Policy is updated. Version history is available on request from the nn33 Data Protection Officer.
14 Contact & Data Protection Officer
nn33 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. The DPO is your primary point of contact for all matters relating to the processing of your personal data by nn33, including data subject rights requests, privacy inquiries, and data breach notifications.
Available 24 hours a day, 7 days a week. The fastest channel for general privacy inquiries and account-related support. Average first response under 60 seconds during peak hours.
For formal data subject rights requests, privacy complaints, and DPO correspondence: [email protected]
Please include "Privacy Request" in the subject line.
nn33 aims to acknowledge all formal privacy correspondence within 5 Philippine business days and to resolve requests within 15 Philippine business days, extendable to 30 days for complex requests with written notice to you explaining the reason for the extension.
If you are not satisfied with nn33's response to a privacy complaint or data subject rights request, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC) via their official channels.
nn33's Data Protection Commitments
Six ways nn33 puts Filipino player privacy into practice — beyond the policy page.
256-Bit SSL & AES-256 Encryption
Data in transit is secured with 256-bit SSL/TLS. Personal data at rest — including KYC documents and financial records — is encrypted with AES-256. The same encryption standard trusted by Philippine banks.
RA 10173 Compliant Processing
All personal data processing at nn33 is conducted in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and the NPC's Implementing Rules. A dedicated Data Protection Officer oversees compliance.
No Data Sales, Ever
nn33 will never sell, rent, or license your personal data to third-party marketers, data brokers, or advertisers. Your data exists solely to service your nn33 account and comply with applicable regulations.
Full Data Subject Rights
Access, rectify, erase, port, and object to your data. All eight rights under RA 10173 are honored by nn33. Submit requests via live chat or email — responses within 15 Philippine business days.
Strict Need-to-Know Access
Only personnel who genuinely need access to personal data to perform their role have it. All such staff undergo background checks, confidentiality training, and are bound by data handling agreements.
72-Hour NPC Breach Notification
In the event of a confirmed data breach affecting player rights, nn33 will notify the NPC within 72 hours and inform affected players without undue delay — in full compliance with RA 10173 breach notification obligations.
Privacy Protected. Start Playing at nn33
Your personal data is protected, your funds are secure, and your games are certified fair. nn33 is the Philippines' PAGCOR-compliant online casino built with Filipino player trust at its core.
Gambling is for entertainment purposes only. Players must be 21 years of age or older. | Terms & Conditions | Responsible Gaming