maya99 Privacy Policy

maya99 ("the Company," "we," "our," "us") is the operator of the online casino and sports betting platform accessible at https://maya99.win (the "Platform"). maya99 is the Personal Information Controller (PIC) as defined under Republic Act 10173 (the Data Privacy Act of 2012) with respect to all personal data collected from Filipino players and visitors to the Platform. maya99 operates under a license issued by the Philippine Amusement and Gaming Corporation (PAGCOR) and is subject to the regulatory oversight of both PAGCOR and the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all personal data collected, processed, stored, and transmitted by maya99 in connection with the provision of its online gaming services to players in the Philippines, including players accessing the Platform from Manila, Cebu, Davao, Quezon City, Makati, and all other parts of the Philippine archipelago.

When you create a maya99 account, we collect the following information:

• Full legal name (as appearing on your government-issued ID);
• Philippine mobile number;
• Date of birth (for age verification — you must be 21 or older);
• Email address (optional, if provided);
• Chosen username and encrypted password hash.

To comply with PAGCOR requirements and the Anti-Money Laundering Act (RA 9160, as amended), we collect:

• Copies of valid Philippine government-issued identification documents (e.g., Philippine passport, UMID, SSS ID, driver's license, PhilSys National ID);
• Proof of address documentation where required;
• Selfie or live photo verification for identity matching purposes;
• Source of funds declarations for high-value transactions as required by AML regulations.

We collect records of all financial transactions conducted through your account, including deposit amounts, withdrawal requests, payment method identifiers (e.g., GCash number, bank account reference), and transaction timestamps. We do not store full credit or debit card numbers — all payment processing is handled by certified third-party payment processors.

We maintain records of your gaming activity on the Platform, including game sessions, bet history, win/loss outcomes, and bonus usage. This data is required for regulatory compliance, dispute resolution, and responsible gaming monitoring.

We automatically collect technical data when you access the Platform, including IP address, device type, operating system, browser type, session duration, pages visited, and referring URL. This data is used for security monitoring, fraud prevention, and Platform performance optimization.

We retain records of communications between you and the maya99 customer support team, including live chat transcripts, support ticket content, and feedback submissions, for quality assurance and dispute resolution purposes.

maya99 collects personal data through the following channels:

• Directly from you — through account registration forms, KYC document submissions, deposit/withdrawal requests, and customer support interactions;
• Automatically — through cookies, web beacons, and server logs when you access and use the Platform;
• From third-party payment providers — GCash, Maya/PayMaya, and banking partners provide transaction confirmation data to maya99 in connection with deposit and withdrawal processing;
• From identity verification services — KYC service providers may return verification results to maya99 based on the documents you submit;
• From fraud prevention services — risk scoring data from fraud detection systems.

maya99 processes your personal data for the following purposes:

• Account management: Creating, maintaining, and securing your player account;
• Service delivery: Enabling you to access and use all games and features on the Platform;
• Payment processing: Processing deposits, withdrawal requests, and bonus credits;
• Regulatory compliance: Meeting our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and the Data Privacy Act;
• Age and identity verification: Confirming that you meet the 21+ age requirement and that your identity is genuine;
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, money laundering, and unauthorized account access;
• Responsible gaming: Monitoring gaming patterns and intervening where signs of problematic gambling behavior are detected, in accordance with PAGCOR responsible gaming requirements;
• Customer support: Responding to your inquiries, complaints, and support requests;
• Platform improvement: Analyzing usage data to improve the Platform's performance, features, and user experience;
• Marketing communications: Sending promotional offers and updates, subject to your consent and opt-out rights;
• Legal proceedings: Preserving and producing data in connection with legal claims, regulatory investigations, or court orders.

Under Republic Act 10173, maya99 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing necessary to perform our obligations under the Terms and Conditions you accept upon account creation;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act, and other applicable Philippine laws;
• Legitimate interests: Processing necessary for fraud prevention, security monitoring, and Platform improvement, provided such interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and optional analytics, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

maya99 does not sell, rent, or trade your personal information. We share your data only in the following limited circumstances:

We engage third-party service providers who process data on our behalf, subject to written data processing agreements that require them to handle your data in accordance with RA 10173. These include KYC verification services, payment processing partners (GCash, Maya, banking partners), IT infrastructure providers, fraud detection services, and customer support platform providers.

We are required by law to disclose certain data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities upon lawful request or as required by our licensing conditions.

We may disclose your data to courts, law enforcement agencies, or legal representatives where required by a valid court order, subpoena, or where necessary to protect the legal rights of maya99 or third parties.

In the event of a merger, acquisition, or sale of all or part of maya99's business, player data may be transferred to the acquirer, subject to the same privacy protections described in this Policy. Affected players will be notified in advance of any such transfer.

Some of maya99's service providers and infrastructure components may be located outside the Philippines. Where personal data is transferred internationally, maya99 ensures that appropriate safeguards are in place, including contractual clauses that require the recipient to handle data in a manner consistent with RA 10173. International transfers are conducted only to countries or organizations that provide an adequate level of data protection as assessed by the National Privacy Commission of the Philippines.

maya99 retains your personal data for as long as your account is active and for such additional period as is required by law or legitimate business necessity. Specific retention periods include:

• Account and KYC data: Retained for a minimum of 5 years following account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act;
• Financial transaction records: Retained for a minimum of 5 years from the date of each transaction;
• Gaming activity logs: Retained for 2 years from the date of the activity, or longer where subject to an active dispute or regulatory inquiry;
• Customer support communications: Retained for 2 years from the date of the final communication in each support case;
• Marketing consent records: Retained for 3 years from the date consent was given or withdrawn.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures.

The maya99 Platform uses cookies and similar tracking technologies to provide certain functionality, analyze usage patterns, and maintain session security. The types of cookies used include:

• Strictly necessary cookies: Essential for Platform operation, including session authentication and security tokens. These cannot be disabled without impairing Platform functionality;
• Functional cookies: Store your preferences such as language, currency display, and game lobby settings;
• Analytics cookies: Help us understand how players navigate and use the Platform so we can improve performance and user experience;
• Security cookies: Used for fraud detection and to identify suspicious login patterns.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent access to the Platform but may affect certain features. maya99 does not use third-party advertising cookies or behavioral targeting technologies.

Under Republic Act 10173, Filipino players have the following rights with respect to their personal data held by maya99:

To exercise any of the above rights, contact the maya99 Data Protection Officer via live chat or email at [email protected]. We will respond to all data rights requests within 15 business days of receipt.

maya99 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers;
• Encryption of sensitive data at rest, including KYC documents and financial records;
• Role-based access controls limiting internal access to personal data on a strict need-to-know basis;
• Multi-factor authentication for all internal system access by maya99 employees;
• Regular third-party security audits and penetration testing;
• 24/7 security monitoring and automated intrusion detection systems;
• Formal data breach response procedures compliant with NPC breach notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, maya99 will notify the National Privacy Commission and affected data subjects within 72 hours of becoming aware of the breach, as required by NPC Circular 16-03.

The maya99 Platform is strictly for adults aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. maya99 does not knowingly collect, process, or store personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the associated account, delete all related personal data, and report the matter to PAGCOR as required by our licensing conditions. If you believe a minor has created a maya99 account, please notify us immediately via live chat.

maya99 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised accordingly. Where changes are material — meaning they significantly affect your rights or our data processing activities — we will provide advance notice via email to your registered address or through a notification within the Platform. Your continued use of maya99 following the effective date of any revised Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed of how we are protecting your data.

For all privacy-related inquiries, data rights requests, or concerns about how maya99 handles your personal data, please contact our designated Data Protection Officer:

• Role: Data Protection Officer, maya99
• Email: [email protected]
• Live Chat: Available 24/7 on the maya99 Platform
• Support Languages: English and Tagalog
• Response Time: Within 15 business days for formal data rights requests

You also have the right to contact the National Privacy Commission of the Philippines (NPC) directly if you believe your data rights under RA 10173 have not been respected.