nwplay Privacy Policy

nwplay ("we," "us," or "our") operates the online gaming platform accessible at nwplay.app, serving players across the Philippines with slots, bingo, live casino games, and sports betting. We take your privacy seriously and are fully committed to protecting the personal information you share with us when you register, play, or otherwise interact with the nwplay platform.

This Privacy Policy ("Policy") describes in detail the types of personal data nwplay collects, the purposes for which that data is processed, the conditions under which it may be shared with third parties, and the rights available to you as a data subject under applicable Philippine law — in particular the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

By registering an account on nwplay and by continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the nwplay platform and contact our support team to close your account.

nwplay collects personal data in several ways: directly from you when you register or use the platform, automatically through your interactions with our website and games, and in some cases from trusted third-party verification services. The categories of data we collect are set out below.

We do not intentionally collect sensitive personal information such as religious beliefs, political opinions, or health data unless it is directly relevant to a responsible gaming assessment and you have explicitly provided it. We do not collect biometric data beyond what is embedded in identity documents submitted for KYC purposes.

nwplay processes your personal data only for clearly defined, legitimate purposes. We do not use your data for purposes that are incompatible with those described below, and we do not engage in the sale of personal data to third parties for their own marketing use.

• Account Management: To create, maintain, and manage your nwplay player account, including processing your registration, verifying your identity, and enabling you to log in securely.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years as mandated under Philippine gaming regulations, and to confirm your identity as required by anti-money laundering (AML) obligations.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank, and to maintain accurate records of all financial transactions on your account in Philippine Peso (PHP).
• Game Delivery and Platform Operation: To deliver slot games, bingo, live casino, and sports betting services, to maintain accurate game histories, and to process bonus and promotional claims.
• Regulatory Compliance and Fraud Prevention: To comply with applicable Philippine gaming regulations, anti-money laundering laws, and data privacy obligations. To detect, investigate, and prevent fraudulent activity, cheating, or abuse of the nwplay platform.
• Responsible Gaming: To monitor gaming patterns that may indicate problem gambling behaviour, to enforce player-set limits and self-exclusion requests, and to fulfil our obligations under PAGCOR responsible gaming guidelines.
• Customer Support: To respond to your enquiries, resolve disputes, and provide technical assistance via live chat and email.
• Marketing and Personalisation: To send you promotional offers, bonus notifications, and personalised game recommendations where you have consented to receive such communications. You may withdraw this consent at any time through your account settings or by contacting support.
• Platform Improvement: To analyse aggregated usage data in order to improve the performance, security, and content of the nwplay platform.

Under the Data Privacy Act of 2012 (RA 10173) of the Philippines, nwplay is required to identify a lawful basis for each category of personal data processing. The primary legal bases on which nwplay relies are as follows:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary for nwplay to fulfil its contractual obligations to you as a registered player — including account creation, game delivery, and payment processing.
• Legal Obligation: Processing for KYC, age verification, anti-money laundering compliance, and regulatory reporting is required by applicable Philippine law, including the Anti-Money Laundering Act (AMLA) and PAGCOR regulations.
• Legitimate Interest: Processing for fraud prevention, platform security, and responsible gaming monitoring is justified by nwplay's legitimate interest in maintaining a safe and fair gaming environment, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential personalisation is based on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out before withdrawal.

nwplay may share your personal data with the following categories of third parties, strictly on a need-to-know basis and only for the purposes described in this Policy:

• Payment Service Providers: GCash (GXI), PayMaya (Maya Bank), BPI, BDO, Metrobank, and UnionBank receive transaction data necessary to process your deposits and withdrawals. Each provider operates under its own privacy policy and applicable Philippine financial regulations.
• Identity Verification Services: Third-party KYC and age-verification providers may process your identity documents to confirm your eligibility to use the nwplay platform. These providers are contractually bound to process data solely for verification purposes.
• Game Content Providers: Licensed game studios and live casino operators whose content is hosted on the nwplay platform may receive session and activity data necessary to deliver game functionality. They do not receive your identity or financial data.
• Cloud Infrastructure Providers: nwplay uses reputable cloud hosting and database services to store and process platform data securely. These providers act as data processors under agreements that require them to implement appropriate security measures.
• Regulatory and Law Enforcement Authorities: nwplay will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities when required to do so by law, court order, or valid regulatory request.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by nwplay may access personal data to the extent necessary to provide their professional services, subject to confidentiality obligations.

nwplay does not transfer your personal data outside the Philippines except where necessary to deliver specific platform services (e.g., international game content providers), and only where appropriate data protection safeguards are in place consistent with the requirements of RA 10173.

The nwplay website uses cookies and similar tracking technologies to improve your browsing experience, maintain your session state, and analyse platform usage. A cookie is a small text file placed on your device by a website you visit. Cookies do not contain executable code and cannot access other data stored on your device.

nwplay uses the following categories of cookies:

• Strictly Necessary Cookies: These cookies are essential for the operation of the nwplay platform. They enable core functions such as maintaining your logged-in session, processing transactions, and applying your responsible gaming limit settings. These cookies cannot be disabled without impairing platform functionality.
• Performance and Analytics Cookies: These cookies help nwplay understand how players interact with the platform — for example, which game categories are most visited and where technical errors occur. Data collected is aggregated and anonymised. These cookies require your consent.
• Functional Cookies: These cookies remember your preferences (e.g., language settings, display preferences) to provide a more personalised experience. They are activated only with your consent.
• Marketing Cookies: If you have consented to receiving personalised promotions, marketing cookies may be used to track your interactions with nwplay content in order to deliver relevant bonus offers. You may withdraw this consent through your account settings at any time.

You can manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may affect your ability to use certain features of the nwplay platform. For detailed cookie management instructions, refer to the help section of your browser (Chrome, Firefox, Safari, or your preferred mobile browser).

nwplay retains your personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable Philippine law. The following retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLC and BIR regulations applicable to gaming operators.
• KYC Documents: Retained for the duration of your account plus five (5) years after closure, or longer if required by a regulatory investigation or legal proceeding.
• Gaming Activity Logs: Retained for three (3) years from the date of each recorded session, used for dispute resolution and responsible gaming monitoring.
• Customer Support Communications: Retained for two (2) years from the date of each interaction, to support dispute resolution and quality assurance.
• Marketing Consent Records: Retained for the period of consent plus two (2) years, to demonstrate compliance with consent requirements.

When your personal data is no longer required for any of the above purposes, nwplay will securely delete or anonymise it in accordance with our data disposal procedures. Anonymised data that can no longer be linked to you may be retained for statistical and analytical purposes without time limitation.

nwplay implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, disclosure, alteration, or destruction. Our security programme includes the following controls:

• Encryption in Transit: All data transmitted between your device and the nwplay platform is protected by 256-bit Transport Layer Security (TLS) encryption. You can verify this by checking for the padlock icon in your browser's address bar.
• Encryption at Rest: Sensitive personal data stored in nwplay databases — including identity documents, payment details, and authentication credentials — is encrypted at rest using AES-256 encryption.
• Access Controls: Access to personal data is restricted to nwplay personnel who have a legitimate need to process it as part of their job function. All staff with data access are subject to confidentiality obligations and regular data privacy training.
• Multi-Factor Authentication: Critical nwplay internal systems require multi-factor authentication (MFA) for all staff access. Players are encouraged to enable MFA on their own nwplay accounts for additional protection.
• Regular Security Audits: nwplay's platform and infrastructure are subject to regular vulnerability assessments and penetration testing conducted by independent security specialists.
• Incident Response: nwplay maintains a documented data breach response procedure. In the event of a breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the incident and will notify affected players without undue delay.

As a data subject under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by nwplay. You may exercise any of these rights by contacting the nwplay Data Privacy Officer (DPO) via the contact details provided in Section 12 of this Policy.

• Right to Be Informed: You have the right to be informed about how nwplay collects and processes your personal data. This Privacy Policy fulfils that obligation.
• Right of Access: You have the right to request a copy of the personal data nwplay holds about you, including information about how it is being used and with whom it has been shared.
• Right to Rectification: You have the right to request correction of any personal data that is inaccurate, incomplete, or outdated. Some corrections (e.g., name changes) may require supporting documentation.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to nwplay's legal retention obligations described in Section 7.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to nwplay demonstrating compelling legitimate grounds.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe nwplay has processed your personal data in breach of RA 10173.

nwplay will respond to all valid data rights requests within thirty (30) calendar days of receipt. Where a request is complex or numerous, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it.

The nwplay platform is strictly intended for adults who are at least twenty-one (21) years of age, in accordance with Philippine gaming regulations. nwplay does not knowingly collect personal data from individuals under the age of 21.

All new account registrations are subject to mandatory age and identity verification. Where nwplay discovers or has reasonable grounds to suspect that an account belongs to a person under the age of 21, we will immediately suspend the account, initiate a full investigation, delete any personal data collected from the minor to the extent not required for legal compliance purposes, and report the matter to the appropriate regulatory authority if required.

If you are a parent or guardian and you believe that your child has registered an account on nwplay, please contact our support team immediately. We will act on such notifications promptly and without requiring any formal process on your part.

nwplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform operations. The most current version of the Policy will always be available on the nwplay website at nwplay.app/privacy-policy, and the effective date at the top of the page will be updated accordingly.

When we make material changes to this Policy — that is, changes that significantly affect your rights or how your personal data is used — we will notify you by email to your registered address and/or by a prominent notice displayed on the nwplay platform upon your next login. We encourage you to review this Policy periodically even when no notification has been issued.

Your continued use of the nwplay platform following the effective date of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with any updated provisions, you should discontinue use of the platform and contact support to close your account.

nwplay has appointed a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Policy, please contact the nwplay DPO using the details below.

• Email: [email protected] — please include "Privacy / DPO" in your subject line
• Live Chat: Available 24/7 through the nwplay platform — identify your query as a privacy matter at the start of the chat
• Response Time: The DPO team aims to acknowledge all privacy-related enquiries within two (2) business days and to resolve them fully within thirty (30) calendar days

If you are not satisfied with nwplay's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, the supervisory authority responsible for enforcing RA 10173.