Privacy Policy
of maya88

1. Introduction

This Privacy Policy ("Policy") describes how maya88 ("we," "us," or "our") collects, uses, stores, shares, and protects the personal information of individuals ("you," "your," or "Player") who access or use the maya88 online gaming platform, website, mobile applications, and all related services (collectively, the "Platform").

maya88 is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances of the National Privacy Commission (NPC).

This Policy should be read together with our Terms and Conditions, which are incorporated herein by reference. In the event of any conflict between this Policy and the Terms and Conditions on matters of data privacy, this Policy shall prevail.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection legislation, maya88 acts as the Personal Information Controller (PIC) in respect of the personal data it collects and processes through the Platform.

As the Personal Information Controller, maya88 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

If you have any questions, concerns, or requests relating to this Policy or the processing of your personal data, you may contact our designated Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

maya88 collects the following categories of personal data from players and Platform visitors:

3.1 Identity & Contact Data

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify that you meet the 21+ age requirement)
• Nationality and country of residence
• Residential address, including barangay, city or municipality, province, and postal code
• Email address and mobile phone number

3.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Proof of address documents (e.g., utility bills, bank statements)
• Source of funds documentation where required by anti-money laundering regulations
• Selfie or liveness check images used for identity verification purposes

3.3 Account & Transaction Data

• Username and encrypted password credentials
• Account registration date and history of account changes
• Deposit and withdrawal transaction records, including amounts, dates, and payment method references
• GCash, PayMaya, BPI, BDO, Metrobank, or other payment method identifiers (account numbers are masked; we do not store full card or bank account numbers)
• Bonus and promotion history

3.4 Gaming Activity Data

• Game session logs, including games played, wager amounts, win/loss records, and session durations
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Customer support interaction records and chat transcripts

3.5 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Pages visited, features used, and time spent on the Platform
• Cookie identifiers and similar tracking technology data (see Section 8)
• Referral source and marketing attribution data

4. How We Collect Your Data

maya88 collects personal data through the following means:

• Directly from you — when you register an account, complete identity verification, make a deposit or withdrawal, contact customer support, participate in promotions, or update your account settings.
• Automatically — through cookies, web beacons, server logs, and similar technologies when you browse or use the Platform. See Section 8 for full details on our use of cookies.
• From third-party service providers — including identity verification agencies, payment processors, fraud prevention services, and analytics providers, who may share data with us in connection with the services they provide to maya88.
• From regulatory and law enforcement authorities — where we are required by law to receive or process certain information about you.

5. Purposes of Processing

maya88 processes your personal data for the following purposes:

6. Legal Basis for Processing

maya88 processes your personal data on the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Consent — where you have given your explicit, informed consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
• Contractual Necessity — where processing is necessary for the performance of the contract between you and maya88 (i.e., the Terms and Conditions), including account management, payment processing, and service delivery.
• Legal Obligation — where processing is required to comply with a legal or regulatory obligation applicable to maya88, including PAGCOR licensing conditions, AMLA compliance, and NPC requirements.
• Legitimate Interests — where processing is necessary for the legitimate interests of maya88 or a third party, provided that such interests are not overridden by your rights and interests. This includes fraud prevention, Platform security, and service improvement activities.

Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal. To withdraw consent, please contact our Data Protection Officer using the details in Section 15.

7. Sharing Your Personal Data

maya88 does not sell your personal data. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers — GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors, to facilitate deposits and withdrawals.
• Identity Verification Providers — third-party KYC and age verification service providers who assist us in verifying player identities in compliance with regulatory requirements.
• Fraud Prevention & Security Services — providers of fraud detection, risk management, and cybersecurity services who help us protect the Platform and its users.
• Game Software Providers — licensed game developers and studios whose games are available on the Platform, to the extent necessary for game operation and dispute resolution.
• Analytics Providers — providers of web and app analytics services who help us understand how the Platform is used, subject to appropriate data processing agreements.
• Regulatory Authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulatory directive.
• Law Enforcement — Philippine law enforcement agencies, where disclosure is required by a valid legal order, warrant, or subpoena.
• Professional Advisers — lawyers, auditors, and other professional advisers engaged by maya88, subject to professional confidentiality obligations.

8. Cookies & Tracking Technologies

maya88 uses cookies and similar tracking technologies (such as web beacons and local storage) to operate and improve the Platform. The following types of cookies are used:

• Strictly Necessary Cookies — essential for the Platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies — remember your preferences and settings (such as language and responsible gaming limits) to provide a more personalised experience.
• Analytics Cookies — collect anonymised data about how players use the Platform, helping us identify areas for improvement. We use this data in aggregate form only.
• Marketing Cookies — used to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.

9. Data Retention

maya88 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention periods:

• Active Account Data — retained for the duration of your account's active status plus a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• Transaction Records — financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• KYC Documents — identity verification documents are retained for a minimum of five (5) years following account closure or the end of the business relationship.
• Customer Support Records — support interaction records are retained for three (3) years from the date of the interaction.
• Marketing Data — retained until you withdraw your consent to marketing communications or for a maximum of three (3) years from your last interaction with a marketing communication, whichever is earlier.
• Technical Logs — server and access logs are retained for up to twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised, unless retention is required by a specific legal obligation or ongoing legal proceedings.

10. Data Security

maya88 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform
• Encryption of sensitive data fields at rest within our databases
• Role-based access controls limiting data access to authorised personnel only
• Multi-factor authentication for internal systems access
• Regular security vulnerability assessments and penetration testing
• Continuous monitoring of systems for suspicious activity and intrusion attempts
• Staff training on data protection and information security best practices
• Incident response procedures for managing and reporting data breaches

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by maya88:

To exercise any of the above rights, please submit a written request to our Data Protection Officer using the contact details in Section 15. We will respond to your request within fifteen (15) business days of receipt. We may need to verify your identity before processing your request.

12. Minors & Age Policy

The maya88 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online gaming. maya88 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. Any winnings accrued on an underage account will be forfeited.

13. International Data Transfers

maya88 primarily stores and processes personal data within the Philippines. However, some of our third-party service providers — including certain game software providers, analytics platforms, and cloud infrastructure providers — may process data in other countries.

Where personal data is transferred outside the Philippines, maya88 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Philippine Data Privacy Act. Such safeguards may include:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission
• Transfers to countries recognised by the NPC as providing an adequate level of data protection
• Binding corporate rules where applicable within corporate group structures

You may request further information about the safeguards in place for international data transfers by contacting our Data Protection Officer.

14. Changes to This Privacy Policy

maya88 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform at least seven (7) days before the changes take effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically to stay informed about how maya88 protects your personal data.

Your continued use of the Platform after the effective date of any amendment constitutes your acknowledgement of the revised Policy. If you do not agree with the changes, you should cease using the Platform and may request account closure by contacting our support team.

15. Contact & Complaints

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by maya88, please contact our designated Data Protection Officer:

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012.