nasa12 Privacy Policy

1. Overview

This Privacy Policy ("Policy") describes how nasa12 ("nasa12," "we," "us," or "our") collects, uses, stores, and protects the personal information of users ("you," "Player," or "User") who access or use the nasa12 website and online gaming platform (collectively, the "Platform") at nasa12.app.

nasa12 is committed to protecting the privacy and personal data of all Filipino players who use our Platform. We handle your personal information in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

By registering an account on nasa12 or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue your use of the nasa12 Platform immediately.

2. Data We Collect

nasa12 collects personal data that is necessary for the operation of the Platform, compliance with Philippine regulatory requirements, and the delivery of a safe and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued Philippine identification document
• Date of birth (used to verify the 21+ age requirement)
• Philippine mobile number (used as your primary account identifier and for OTP verification)
• Email address (where provided)
• Residential address in the Philippines

2.2 Identification and Verification Data

• Government-issued Philippine identification document type and number (e.g., PhilSys ID, passport, driver's license, SSS/GSIS ID, PRC ID, Voter's ID)
• Selfie or photograph submitted for identity verification purposes
• Any additional documentation submitted during the KYC (Know Your Customer) verification process

2.3 Financial Data

• GCash mobile number and transaction reference numbers
• PayMaya account details and transaction reference numbers
• Bank account details for BPI, BDO, or Metrobank transfers (account name and number, as required for withdrawal processing)
• Deposit and withdrawal transaction history
• Account wallet balance and transaction records

2.4 Gaming and Activity Data

• Betting history, game session records, and wagering activity across all nasa12 game categories (casino, sports, slots, bingo, coin games)
• Login timestamps, session duration, and activity logs
• Responsible gaming settings, including deposit limits and self-exclusion requests
• Customer support interaction records

2.5 Technical Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Cookies and similar tracking technologies (see Section 9)
• Platform usage analytics and performance data

3. How We Collect Data

nasa12 collects your personal data through the following means:

• Direct Registration: When you create a nasa12 account, you provide your mobile number, date of birth, and other registration details directly to us.
• KYC Verification: When you submit identity documents and photographs as part of the account verification process.
• Financial Transactions: When you make deposits or request withdrawals via GCash, PayMaya, BPI, BDO, or Metrobank, transaction data is shared with nasa12 by the relevant payment provider.
• Platform Usage: Automatically collected as you use the nasa12 Platform, including through cookies, server logs, and analytics tools.
• Customer Support: When you contact the nasa12 support team via live chat, email, or any other communication channel.
• Third-Party Sources: In limited circumstances, nasa12 may receive data about you from third-party identity verification providers or fraud prevention services engaged to support our compliance obligations.

4. Purpose of Processing

nasa12 processes your personal data for the following specific and legitimate purposes:

nasa12 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by Philippine law.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 of the Philippines, nasa12 processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and nasa12 — specifically, to provide you with access to the Platform, process your transactions, and deliver gaming services.
• Legal Obligation: Processing is required for nasa12 to comply with its legal obligations under Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Legitimate Interests: Processing is necessary for the legitimate interests of nasa12, including fraud prevention, platform security, and responsible gaming monitoring, provided that such interests are not overridden by your rights and freedoms.
• Consent: For certain processing activities, such as marketing communications, nasa12 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time by contacting the nasa12 support team.

6. Data Sharing and Disclosure

nasa12 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and in accordance with the Data Privacy Act of 2012:

• Payment Processors: GCash, PayMaya, BPI, BDO, and Metrobank receive the minimum financial data necessary to process your deposit and withdrawal transactions. These providers are bound by their own privacy policies and applicable Philippine financial regulations.
• Identity Verification Providers: Third-party KYC and identity verification service providers engaged by nasa12 to assist with document verification and fraud prevention. These providers process your data solely on nasa12's instructions and are contractually bound to maintain confidentiality.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government agencies where disclosure is required by law, regulation, or court order.
• Fraud Prevention Services: Third-party fraud detection and prevention providers who assist nasa12 in identifying and preventing fraudulent activity on the Platform.
• Technology and Hosting Providers: Cloud hosting and infrastructure providers who store and process Platform data on nasa12's behalf, subject to strict data processing agreements.
• Professional Advisers: Legal, accounting, and auditing professionals engaged by nasa12, subject to professional confidentiality obligations.

7. Data Retention

nasa12 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active nasa12 account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required under the Anti-Money Laundering Act of the Philippines.
• Gaming Activity Records: Retained for a minimum of three (3) years from the date of each gaming session or transaction.
• KYC Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Customer Support Records: Retained for a minimum of two (2) years from the date of the last interaction.
• Technical and Usage Data: Retained for up to twelve (12) months, after which it is anonymised or deleted.

Upon expiry of the applicable retention period, nasa12 will securely delete or anonymise your personal data in accordance with its data disposal procedures, unless further retention is required by law.

8. Data Security

nasa12 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS Encryption: All data transmitted between your device and the nasa12 Platform is encrypted using industry-standard SSL/TLS protocols.
• Data Encryption at Rest: Sensitive personal data, including identification documents and financial information, is encrypted when stored on nasa12 servers.
• Access Controls: Access to personal data is restricted to nasa12 personnel and authorised third parties who have a legitimate need to access such data in the performance of their duties. All access is logged and monitored.
• Two-Factor Authentication: nasa12 uses OTP-based two-factor authentication via your registered Philippine mobile number to protect account access.
• Regular Security Audits: nasa12 conducts periodic security assessments and vulnerability testing of the Platform and its underlying infrastructure.
• Incident Response: nasa12 maintains a data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, nasa12 will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

While nasa12 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your nasa12 account credentials and for notifying nasa12 immediately if you suspect any unauthorised access to your account.

9. Cookies & Tracking Technologies

nasa12 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyse usage patterns, and support the security and integrity of the Platform. A cookie is a small text file placed on your device when you visit the nasa12 Platform.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management, authentication, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: Used to collect anonymised information about how players use the Platform, including pages visited, time spent, and error messages encountered. This data helps nasa12 improve the Platform experience.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming limits, to provide a more personalised experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

9.2 Managing Cookies

You may control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or receive a notification when a new cookie is set. Please note that disabling strictly necessary cookies may impair the functionality of the nasa12 Platform and prevent you from accessing certain features, including account login.

nasa12 does not use cookies to serve third-party advertising or to track your activity across unrelated websites.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights with respect to your personal data held by nasa12:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed by nasa12, as set out in this Privacy Policy.
• Right of Access: You have the right to request a copy of the personal data that nasa12 holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data that nasa12 holds about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nasa12's legal and regulatory retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on nasa12's legitimate interests.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that nasa12 has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact the nasa12 Data Privacy Officer using the contact details provided in Section 14 of this Policy. nasa12 will respond to all verified data subject requests within fifteen (15) calendar days of receipt, in accordance with NPC guidelines.

11. Minors and Age Restriction

The nasa12 Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine law and PAGCOR regulations governing online gaming and casino operations in the Philippines.

nasa12 does not knowingly collect personal data from individuals under the age of 21. If nasa12 becomes aware that personal data has been collected from a person under 21 years of age, nasa12 will immediately suspend the relevant account, delete the personal data collected, and report the matter to the relevant regulatory authorities where required.

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to nasa12, please contact us immediately using the details in Section 14 so that we can take appropriate action.

12. Cross-Border Data Transfers

In certain circumstances, nasa12 may transfer your personal data to service providers or technology partners located outside the Philippines. Where such transfers occur, nasa12 ensures that appropriate safeguards are in place to protect your personal data, consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

Such safeguards may include contractual data processing agreements that impose data protection obligations on the recipient equivalent to those applicable in the Philippines, or transfers to countries that have been assessed as providing an adequate level of data protection.

nasa12 will not transfer your personal data to jurisdictions that do not provide an adequate level of protection for personal data without first implementing appropriate safeguards and, where required, obtaining your consent.

13. Changes to This Privacy Policy

nasa12 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. The date of the most recent revision will be indicated at the top of this page.

When material changes are made to this Privacy Policy, nasa12 will notify registered players via their registered Philippine mobile number or through a prominent notice on the Platform prior to the changes taking effect. Your continued use of the nasa12 Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

nasa12 recommends that you review this Privacy Policy periodically to stay informed of how we are protecting your personal data. If you do not agree with any changes to this Policy, you must cease using the Platform and may request account closure in accordance with the nasa12 Terms & Conditions.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by nasa12, please contact our Data Privacy Officer using the following details:

nasa12 aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them within fifteen (15) calendar days of receipt. For complex requests, nasa12 may require additional time and will notify you accordingly.

If you are not satisfied with nasa12's response to your privacy enquiry, you have the right to escalate your complaint to the National Privacy Commission of the Philippines through their official channels.