Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how maya99 ("maya99," "we," "us," or "our") collects, uses, discloses, stores, and protects the personal information of users ("Player," "User," or "you") who access or use the maya99 online casino platform, including the website at maya99.vip and any associated mobile applications or services (collectively, the "Platform").

maya99 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and its Implementing Rules and Regulations, as well as any other applicable data protection laws.

By registering an account on the Platform or otherwise using our services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, maya99 acts as the Personal Information Controller (PIC) in respect of the personal data collected through the Platform.

As the Personal Information Controller, maya99 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

Where maya99 engages third-party service providers to process personal data on its behalf (for example, payment processors and KYC verification providers), those parties act as Personal Information Processors (PIPs) and are bound by data processing agreements that require them to process your data only on maya99's instructions and in accordance with applicable law.

3. Personal Data We Collect

maya99 collects the following categories of personal data from Players:

maya99 does not intentionally collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for regulatory compliance purposes, such as information relating to health conditions in the context of responsible gaming support. Where sensitive personal information is collected, we apply heightened security measures and obtain your explicit consent.

4. How We Collect Your Data

maya99 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access the Platform, including through cookies, web beacons, log files, and similar tracking technologies.
• Third-Party Sources: Information received from identity verification providers, payment processors, fraud prevention services, and regulatory databases as part of our KYC and AML compliance obligations.
• Publicly Available Sources: Information from publicly available government databases or registries where required for compliance purposes.

5. How We Use Your Personal Data

maya99 uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your maya99 account, including verifying your identity and age.
• Service Delivery: To provide access to games, process bets, calculate winnings, and deliver all Platform features and services.
• Financial Transactions: To process deposits, withdrawals, and bonus payments, and to maintain accurate financial records.
• Legal Compliance: To comply with our obligations under Philippine gaming regulations, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable laws, including reporting obligations to PAGCOR and the Anti-Money Laundering Council (AMLC).
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits and self-exclusion.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Marketing Communications: To send you promotional offers, bonuses, and news about maya99, where you have consented to receive such communications. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the features and performance of the Platform.

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, maya99 processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary for the performance of our contract with you (the Terms & Conditions), including account management, game delivery, and financial transactions.
• Legal Obligation: Processing required to comply with our legal obligations under Philippine law, including KYC, AML reporting, age verification, and regulatory record-keeping.
• Legitimate Interests: Processing necessary for our legitimate interests in operating a secure, fair, and commercially viable platform, including fraud prevention, security monitoring, and platform improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and the processing of sensitive personal information. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

7. Data Sharing and Disclosure

maya99 does not sell, rent, or trade your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, Maya (PayMaya), and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing your financial transactions.
• KYC and Identity Verification Providers: Third-party providers engaged to verify your identity and age as required by Philippine gaming regulations.
• Fraud Prevention and Security Services: Providers of fraud detection, cybersecurity, and risk management services.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where required by a valid legal order, warrant, or subpoena.
• Professional Advisers: Legal, audit, and compliance advisers bound by professional confidentiality obligations.
• IT and Hosting Providers: Cloud infrastructure and hosting providers who store and process Platform data on our behalf under strict data processing agreements.

All third parties with whom maya99 shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

8. Data Retention

maya99 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Customer Support Communications: Retained for two (2) years from the date of the last communication.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent.
• Technical and Usage Data: Retained for up to twelve (12) months, after which it is anonymized or deleted.

Where retention beyond these periods is required by a specific legal obligation, regulatory requirement, or ongoing legal proceeding, maya99 will retain the relevant data until that obligation is satisfied.

9. Data Security

maya99 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data in transit is protected using TLS 1.2 or higher. Sensitive data at rest, including financial information and identity documents, is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis. All staff with access to personal data undergo data privacy training and are bound by confidentiality obligations.
• Two-Factor Authentication: Player accounts are protected by two-factor authentication (2FA) to prevent unauthorized access.
• Penetration Testing: The Platform undergoes regular security assessments and penetration testing by independent security professionals.
• Incident Response: maya99 maintains a documented data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required by law.
• Secure Data Centers: Player data is stored in secure, access-controlled data centers with physical security measures, redundant power, and disaster recovery capabilities.

While maya99 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for ensuring the security of the devices you use to access the Platform.

10. Cookies and Tracking Technologies

maya99 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and game display options, to provide a more personalized experience.
• Analytics Cookies: Collect anonymized information about how Players use the Platform, such as which pages are visited most frequently, to help us improve the user experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot detection and session integrity verification.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the Platform. For detailed instructions on managing cookies in your browser, refer to your browser's help documentation.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by maya99:

• Right to Be Informed: The right to be informed about how your personal data is collected and processed, as set out in this Policy.
• Right of Access: The right to request a copy of the personal data maya99 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details in Section 15 of this Policy. We will respond to all verified requests within thirty (30) days, or within such other timeframe as required by applicable law. We may need to verify your identity before processing your request.

Please note that certain rights are subject to limitations where processing is required for compliance with a legal obligation, the performance of a contract, or the establishment, exercise, or defence of legal claims.

12. Minors and Age Restriction

The maya99 Platform is strictly intended for persons aged 21 years and above, in accordance with Philippine gaming regulations. maya99 does not knowingly collect personal data from individuals under the age of 21.

If you are a parent or guardian and believe that a minor has provided personal data to maya99 or accessed the Platform using your account, please contact us immediately at the details provided in Section 15. Upon verification, we will take prompt steps to delete the minor's data and close any account opened in violation of our age restriction policy.

maya99 recommends that parents and guardians use parental control software to prevent minors from accessing online gambling platforms. Gambling is addictive. Know when to stop.

13. International Data Transfers

maya99 primarily stores and processes personal data within the Republic of the Philippines. In certain circumstances, personal data may be transferred to or accessed from locations outside the Philippines — for example, where we use cloud infrastructure providers or technology partners with operations in other countries.

Where personal data is transferred outside the Philippines, maya99 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. Such safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other legally recognized transfer mechanisms.

By using the Platform, you acknowledge and consent to the transfer of your personal data as described in this section, subject to the safeguards described above.

14. Changes to This Privacy Policy

maya99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify registered Players via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The date of the most recent revision is indicated at the top of this page. We encourage you to review this Policy periodically to stay informed about how maya99 protects your personal data. Your continued use of the Platform following the posting of an updated Policy constitutes your acceptance of the revised terms.

15. Contact & Data Protection Officer

maya99 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO through the following channel:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. For more information about your rights and the NPC's complaint process, please refer to the NPC's official resources.

For general support inquiries unrelated to data privacy, please visit our FAQ page or our About Us page for additional contact options.