Privacy Policy

This Privacy Policy applies to all personal data processed by nasa17 in connection with your use of the nasa17 platform, including the website at nasa17.net, any associated mobile interface, customer support channels, and promotional communications. It applies to all registered players, prospective users, and visitors to the platform regardless of location, though it is primarily directed at users in the Philippines.

nasa17 is committed to processing personal data in a lawful, fair, and transparent manner consistent with the requirements of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as any other applicable data protection legislation.

By registering an account on nasa17 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the platform and contact us to close your account.

For the purposes of applicable data protection legislation, nasa17 acts as the data controller in respect of personal data collected from users of the nasa17 platform. As data controller, nasa17 determines the purposes and means by which personal data is processed.

Where nasa17 engages third-party service providers — such as payment processors, game providers, or identity verification services — to process data on its behalf, those parties act as data processors and are contractually bound to process data only on nasa17's instructions and in accordance with applicable data protection law.

Enquiries regarding this Privacy Policy or the exercise of data subject rights may be directed to our support team at [email protected].

nasa17 collects different categories of personal data depending on how you interact with the platform. The table below sets out the main categories of data collected and provides examples of the specific data points within each category.

nasa17 does not intentionally collect special categories of sensitive personal data (such as racial or ethnic origin, political opinions, religious beliefs, health data, or biometric data for identification purposes) unless strictly required by applicable KYC or anti-money laundering obligations, in which case such data is handled with heightened care and access controls.

nasa17 collects personal data through the following channels and means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data gathered automatically when you access or use the platform, including via cookies, server logs, and session tracking technologies.
• Third-party sources: Identity and fraud-check data received from KYC and AML service providers; payment confirmation data received from payment processors such as GCash, Maya, BPI, and BDO; and fraud signals from industry-shared databases where applicable.
• Inferred data: Insights derived from your gaming and transaction activity used for responsible gaming monitoring, fraud detection, and platform improvement.

nasa17 processes personal data for the following purposes:

• Account management: Creating, maintaining, and managing your player account, including authentication and access controls.
• Identity and age verification: Verifying that you meet the 21+ age requirement and confirming your identity in accordance with applicable KYC and AML regulations.
• Payment processing: Facilitating deposits and withdrawals via local payment methods including GCash, Maya, QR Ph, GrabPay, InstaPay, PesoNet, BPI, BDO, Metrobank, and 7-Eleven CLiQQ.
• Regulatory compliance: Meeting obligations under Philippine gaming regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Fraud and security: Detecting, investigating, and preventing fraudulent activity, unauthorized access, bonus abuse, and other security threats.
• Responsible gaming: Monitoring gaming patterns to identify potentially problematic behaviour and to administer self-exclusion, deposit limits, and other player protection tools.
• Customer support: Responding to queries, complaints, and requests for assistance submitted via chat or email.
• Platform improvement: Analysing usage patterns and feedback to enhance the functionality, performance, and content of the nasa17 platform.
• Marketing communications: Sending promotional materials, bonus notifications, and platform updates to players who have opted in to receive such communications. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, nasa17 relies on one or more of the following legal bases when processing your personal data:

• Contractual necessity: Processing required to perform the contract between you and nasa17 — i.e., providing gaming and betting services, processing payments, and managing your account.
• Legal obligation: Processing necessary to comply with applicable laws, including KYC/AML requirements, gaming regulations, and tax reporting obligations.
• Legitimate interests: Processing carried out for nasa17's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time by contacting support or adjusting your account preferences.

nasa17 does not sell, rent, or trade your personal data to any third party for their own commercial purposes. Personal data may be shared with the following categories of recipients, strictly as necessary to operate the platform and meet legal obligations:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, and other local payment partners, for the purpose of processing deposits and withdrawals.
• Game content providers: Third-party game studios and live casino operators whose games are made available on the nasa17 platform, to the extent necessary for game functionality and fairness certification.
• KYC and AML service providers: Identity verification and anti-money laundering screening services engaged to fulfil regulatory obligations.
• Regulatory authorities: Philippine gaming regulators, the Anti-Money Laundering Council (AMLC), and other government bodies where disclosure is required by law or court order.
• IT and infrastructure providers: Cloud hosting, cybersecurity, and platform maintenance providers who process data solely on nasa17's instructions under binding data processing agreements.
• Professional advisers: Legal counsel, auditors, and accountants bound by professional confidentiality obligations.

nasa17 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements under Philippine law.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and applicable gaming regulations.
• Gaming history: Retained for a minimum of three (3) years to support dispute resolution, regulatory audits, and responsible gaming monitoring.
• Support communications: Retained for up to three (3) years from the date of the relevant interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing preference data: Retained until you withdraw consent or request erasure, subject to any overriding legal retention obligations.
• Technical and log data: Retained for up to twelve (12) months for security and fraud detection purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to any identifiable individual.

nasa17 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include but are not limited to:

• TLS/SSL encryption for all data transmitted between your device and nasa17's servers.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis.
• Multi-factor authentication for administrative access to systems holding personal data.
• Regular security assessments, penetration testing, and vulnerability scanning of platform infrastructure.
• Incident response procedures including notification protocols in the event of a personal data breach.

While nasa17 takes data security seriously, no system is entirely immune to risk. In the unlikely event of a data breach affecting your personal data, nasa17 will notify the National Privacy Commission (NPC) and affected individuals in accordance with the Data Privacy Act of 2012 and its implementing rules.

nasa17 uses cookies and similar tracking technologies to operate the platform, remember your preferences, analyse usage patterns, and support security functions. The following categories of cookies are used:

• Strictly necessary cookies: Essential for the platform to function. These include session authentication cookies and security tokens. They cannot be disabled without impairing platform functionality.
• Functional cookies: Used to remember your preferences such as language settings and display options, improving your experience on return visits.
• Analytical cookies: Used to collect anonymised data about how users navigate the platform, helping nasa17 identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other threats to the integrity of the platform.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the nasa17 platform. nasa17 does not use advertising or cross-site tracking cookies.

nasa17 strictly prohibits use of the platform by individuals under 21 years of age. The platform does not knowingly collect personal data from persons under 21. Age verification is a mandatory step in the account registration process and is enforced through document-based KYC checks.

If you are a parent or guardian and believe a minor may have accessed the nasa17 platform using your or another adult's identity, please contact us immediately at [email protected] so we can investigate and take appropriate action.

Under the Philippine Data Privacy Act of 2012 and its implementing rules, you have the following rights with respect to your personal data held by nasa17:

• Right to be informed: The right to know what personal data nasa17 holds about you and how it is being used — which is the primary purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data nasa17 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data held about you.
• Right to erasure: The right to request deletion of your personal data where there is no longer a lawful basis for nasa17 to retain it, subject to overriding legal retention obligations.
• Right to object: The right to object to processing of your personal data for marketing purposes or based on nasa17's legitimate interests.
• Right to data portability: The right to receive a copy of personal data you have provided to nasa17 in a structured, commonly used format.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe nasa17 has processed your personal data in violation of applicable law.

To exercise any of the above rights, please contact our support team at [email protected]. We will respond to verified requests within thirty (30) days. We may require identity verification before processing rights requests to prevent unauthorised disclosure.

Some of nasa17's service providers and game content partners may be located outside the Philippines. Where personal data is transferred to recipients in other countries, nasa17 ensures that appropriate safeguards are in place to protect your data, including contractual data processing agreements that require overseas recipients to apply data protection standards equivalent to those required under Philippine law.

nasa17 does not transfer personal data to jurisdictions that do not provide an adequate level of protection for personal data without first implementing appropriate contractual or technical safeguards, consistent with the requirements of the National Privacy Commission.

nasa17 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, platform features, or applicable legal requirements. When material changes are made, we will notify registered players via the email address on file or by prominent notice on the platform prior to the changes taking effect.

The effective date displayed at the top of this page reflects the date of the most recent revision. We encourage you to review this Privacy Policy periodically to stay informed about how nasa17 protects your data. Continued use of the platform following the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by nasa17, please contact our support team. We are committed to addressing all data-related enquiries promptly and transparently.

• Email: [email protected]
• Response time: Within 30 days for formal data subject rights requests; within 1 business day for general enquiries
• Languages: English and Tagalog
• Hours: 24/7 live chat available within the platform; email monitored during Philippine business hours (PHT)

If you are not satisfied with nasa17's response to a data-related complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC), which is the competent supervisory authority for data protection matters in the Philippines.