Privacy Policy

ninogames is a PAGCOR-regulated online gaming platform serving players across the Philippines, from Metro Manila and the Visayas to Mindanao and beyond. As an operator of a licensed real-money gaming service, ninogames is both legally obligated and genuinely committed to handling your personal information with care, transparency, and respect for your rights as a data subject under Philippine law.

This Privacy Policy describes in detail what personal data ninogames collects from you, why we collect it, how we use and store it, with whom we share it, how long we keep it, and what rights you have over it. These descriptions reflect ninogames' obligations under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA"), its Implementing Rules and Regulations, the directives of the National Privacy Commission ("NPC"), and the data handling requirements imposed by PAGCOR under the ninogames operating licence.

This Policy should be read alongside the ninogames Terms & Conditions, which govern the contractual relationship between you and ninogames, and the Responsible Gaming Policy, which describes the additional data processing associated with player protection tools.

For the purposes of the Philippine Data Privacy Act, ninogames acts as the Personal Information Controller ("PIC") in respect of all personal data collected and processed through the ninogames.win platform. The Operator has appointed a Data Protection Officer ("DPO") as required by the DPA. Contact details for the DPO are provided in Section 16 of this Policy.

Where ninogames engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification providers, or cloud infrastructure operators — those parties act as Personal Information Processors ("PIP") under data processing agreements that impose obligations equivalent to those applicable to ninogames under Philippine data protection law.

ninogames collects the following categories of personal data in connection with the operation of the platform:

ninogames collects personal data through the following means:

• Direct provision: Data you provide when registering, completing KYC, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access the ninogames platform, including through cookies, web beacons, and server log files. See Section 11 for details.
• Third-party sources: Identity verification data from KYC service providers; transaction confirmation data from payment processors including GCash, Maya, BPI, BDO, and Coins.ph; fraud screening data from compliance service providers.
• Regulatory sources: Data received from PAGCOR or other government authorities in connection with the ninogames operating licence and applicable Philippine law.

ninogames processes your personal data on the following legal bases and for the corresponding purposes:

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Withdrawal of consent to marketing communications does not affect your ability to access your ninogames account or receive service notifications.

ninogames does not sell, rent, or trade your personal data to any third party for commercial purposes. We disclose personal data to third parties only in the following circumstances:

6.1 Service Providers

ninogames engages third-party service providers who process personal data as Personal Information Processors on our behalf. These include:

• Payment processors: GCash (GXI), Maya Philippines (formerly PayMaya), BPI, BDO, Metrobank, 7-Eleven Cliqq (ECPAY), Coins.ph, and USDT TRC20 network facilitators — for the purpose of processing deposits and withdrawals.
• KYC verification providers: Third-party identity verification services that validate government-issued IDs against authoritative Philippine data sources.
• Game software providers: Licensed game suppliers whose software is integrated into the ninogames platform. These providers receive anonymized session and wager data for the purpose of game operation and dispute resolution.
• Cloud infrastructure and security providers: Providers of hosting, database, and cybersecurity infrastructure used to operate the ninogames platform.
• Customer support platforms: Tools used to manage and record support interactions.

6.2 Regulatory and Government Authorities

ninogames discloses personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government authorities where required by law, court order, or the terms of the ninogames operating licence. Such disclosures are made only to the extent necessary to fulfil the relevant obligation.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of the Operator's assets, personal data held by ninogames may be transferred to the acquiring entity, subject to the acquiring entity assuming obligations under this Privacy Policy and the DPA.

Some of ninogames' third-party service providers — including certain cloud infrastructure and game software providers — may process personal data outside the Republic of the Philippines. Where such transfers occur, ninogames ensures that appropriate safeguards are in place in accordance with the DPA and the National Privacy Commission's guidelines on cross-border data transfers.

Safeguards applied to international transfers may include: data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission; transfers to jurisdictions with an adequate level of data protection as assessed by the NPC; or other mechanisms permitted under the DPA. You may request details of the safeguards applicable to any specific international transfer by contacting the ninogames Data Protection Officer.

ninogames retains personal data for as long as is necessary to fulfil the purposes for which it was collected, to maintain the player's account in good standing, or to satisfy applicable legal and regulatory retention requirements, whichever period is longer.

Key retention periods applicable to ninogames data processing include:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, as required by PAGCOR and AMLA regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by AMLA and PAGCOR reporting obligations.
• Gameplay records: Retained for a minimum of three (3) years from the date of the session, for dispute resolution and regulatory audit purposes.
• Support communications: Retained for two (2) years from the date of the communication, or longer where the communication relates to an unresolved dispute.
• Marketing consent records: Retained for three (3) years from the date of consent to demonstrate compliance with consent obligations.

At the expiration of applicable retention periods, personal data is securely deleted or anonymized in accordance with the NPC's data disposal guidelines.

ninogames implements organizational and technical security measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to:

• Encryption in transit: All data exchanged between your device and ninogames servers is encrypted using TLS 1.2 or higher (256-bit SSL).
• Encryption at rest: Sensitive personal data, including KYC documents and financial records, is encrypted at rest in ninogames' data stores.
• Access controls: Access to personal data within the ninogames organization is restricted based on role and necessity, enforced through multi-factor authentication for administrative systems.
• Audit logging: Access to personal data stores is logged and monitored for anomalous activity.
• Vulnerability management: The ninogames platform undergoes regular security assessments, penetration testing, and patch management procedures.
• Staff training: ninogames personnel with access to personal data receive mandatory data protection training consistent with NPC requirements.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ninogames:

To exercise any of these rights, please submit a written request to the ninogames Data Protection Officer at [email protected]. ninogames will respond to all data subject requests within 15 business days of receipt, or within the timeframe required by applicable NPC regulations. Certain rights may be limited where their exercise would conflict with ninogames' legal obligations under PAGCOR or AMLA regulations.

ninogames uses cookies and similar tracking technologies on the ninogames.win platform to support the operation of the platform, improve performance, and — with your consent — to gather usage analytics. The following categories of cookies are used:

You can manage cookie preferences through your ninogames account settings or through your browser's built-in cookie management tools. Note that disabling strictly necessary cookies will prevent you from logging into your ninogames account.

ninogames is strictly prohibited to individuals under 21 years of age, as required by PAGCOR regulations applicable to licensed online gaming platforms in the Philippines. ninogames does not knowingly collect personal data from individuals under 21. Age verification is a required step in the KYC process for all accounts.

If ninogames becomes aware that personal data has been collected from a person under 21 years of age, that data will be immediately deleted, the associated account closed, and the incident reported to PAGCOR as required under the ninogames operating licence.

If you believe a minor has registered on ninogames, please contact our support team immediately at [email protected].

ninogames will send you promotional communications — including bonus offers, game launches, and platform updates — only where you have provided explicit consent to receive such communications during registration or through your account communication preferences. Marketing communications may be delivered by SMS to your registered Philippine mobile number, by email, or through in-app push notifications if you have the ninogames application installed.

You can withdraw consent to marketing communications at any time by: (a) updating your notification preferences in Account Settings; or (b) sending a withdrawal request to [email protected]. Opt-outs are processed within 5 business days. Withdrawal of consent to marketing communications does not affect your ability to use the ninogames platform or receive service-related notifications (such as deposit confirmations, withdrawal notifications, and security alerts).

In the event of a personal data breach that is likely to result in serious harm to affected data subjects, ninogames will notify the National Privacy Commission within 72 hours of becoming aware of the breach, as required by the DPA and NPC Circular No. 16-03. Where required, ninogames will also notify affected data subjects without undue delay.

Breach notifications to affected players will be delivered via the email address or mobile number registered to the affected account and will include: a description of the nature of the breach; the type of personal data involved; the likely consequences; and the measures ninogames is taking or has taken to address the breach and mitigate its effects.

ninogames maintains an incident response plan and conducts regular security exercises to minimize the likelihood and impact of data breaches on its players.

ninogames may update this Privacy Policy from time to time to reflect changes in data processing practices, new regulatory requirements, or operational changes to the platform. Where changes are material — for example, where we introduce a new category of data processing or a new third-party disclosure — we will notify you via the contact details registered to your account at least 14 days before the changes take effect.

The current version of this Privacy Policy will always be accessible at ninogames.win/privacy-policy. The date at the top of this Policy indicates when it was last updated. Your continued use of ninogames after the effective date of any revision constitutes your acknowledgment of the updated Policy.

For any questions, concerns, or requests relating to this Privacy Policy or ninogames' data processing practices, please contact the ninogames Data Protection Officer:

If you believe your data privacy rights have been violated and your concern has not been adequately addressed by ninogames, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC maintains a complaint mechanism for data subjects and can be reached through the NPC's official government channels.