maya99 Privacy Policy

Introduction

maya99 operates the online casino and sports betting platform at maya99.one (the "Platform"). In providing these services to players in the Philippines, we necessarily collect and process certain personal data about registered players and visitors to our website.

We take privacy seriously — not because we are legally required to, but because Filipino players deserve to know exactly what happens to their personal information when they use maya99. This Privacy Policy is written in plain language alongside formal legal definitions. If there is any ambiguity, the interpretation that best protects your data privacy rights shall prevail.

By registering an account on maya99 or otherwise providing your personal data to us, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any aspect of this Policy, you should not register an account or use the Platform.

Personal Data We Collect

maya99 collects personal data through two primary channels: information you provide directly, and information collected automatically through your use of the Platform. The following table details the categories of data we process:

We do not collect sensitive personal information (as defined under the DPA, including race, ethnicity, religion, or health information) except where required by law (e.g., responsible gaming self-exclusion records).

How We Use Your Personal Data

maya99 uses the personal data we collect for the following purposes:

• Account management: Creating and maintaining your maya99 account, verifying your identity, processing login authentication, and managing your account settings and preferences.
• PAGCOR compliance and KYC: Fulfilling our obligations as a PAGCOR-licensed operator, including identity verification, age verification (21+), and Know Your Customer (KYC) checks required by Philippine gaming regulations.
• Anti-Money Laundering (AML): Monitoring transactions for suspicious activity in compliance with Republic Act No. 9160, the Anti-Money Laundering Act of 2001, as amended, and reporting obligations to the Anti-Money Laundering Council (AMLC) of the Philippines.
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Customer support: Responding to your inquiries, resolving account issues, processing complaints, and providing 24/7 live chat assistance.
• Responsible gaming: Monitoring gaming patterns to identify potential problem gambling behaviour, applying deposit and loss limits, processing self-exclusion requests, and maintaining self-exclusion records.
• Platform security: Detecting and preventing fraud, unauthorised account access, bot activity, and other prohibited conduct.
• Personalisation: With your consent, tailoring promotional offers, bonus notifications, and game recommendations to your preferences and gaming history.

Legal Basis for Processing

Under the Data Privacy Act of 2012, all processing of personal data must be grounded in a lawful basis. maya99 processes your personal data on the following legal grounds:

• Contractual necessity: Processing required to enter into and perform the agreement between you and maya99 (account registration, payment processing, game provision).
• Legal obligation: Processing required to comply with our obligations under PAGCOR regulations, the Anti-Money Laundering Act, the Data Privacy Act, and other applicable Philippine laws.
• Legitimate interests: Processing necessary for the legitimate interests of maya99, including fraud prevention, platform security, and responsible gaming monitoring, where those interests are not overridden by your data privacy rights.
• Consent: Processing for marketing communications and personalised promotional offers, conducted only where you have given explicit, freely given, and withdrawable consent. You may withdraw marketing consent at any time from your account settings.

Data Sharing & Third-Party Disclosure

maya99 does not disclose your personal data to third parties except in the following circumstances:

• Payment service providers: Financial data (transaction references, amounts) is shared with GCash, PayMaya, BPI, BDO, and Metrobank solely to process your deposit and withdrawal transactions. These providers are bound by their own privacy policies and Philippine BSP regulations.
• Game content providers: Game session data (bets, game results) is shared with our licensed game providers (including JILI Games, Pragmatic Play, PG Soft) to operate and audit game outcomes. No identity data is shared with game providers.
• Regulatory authorities: Personal and financial data may be disclosed to PAGCOR, the AMLC, the National Privacy Commission (NPC), and Philippine law enforcement authorities where required by law or regulatory order.
• KYC verification services: Identity data submitted during KYC is processed by accredited identity verification providers operating under data processing agreements that comply with the DPA.
• Legal proceedings: Personal data may be disclosed to courts or legal advisors in connection with the exercise or defence of legal claims involving maya99.

All third parties with whom maya99 shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose beyond the specific service they are providing to maya99.

Cookies & Tracking Technologies

maya99 uses cookies and similar tracking technologies to operate the Platform, maintain your login session, and improve your user experience. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication tokens, CSRF protection tokens, and load-balancing cookies. These cannot be disabled without preventing you from using the Platform.
• Functional cookies: Remember your preferences (e.g., language, preferred game lobby view, "Remember Me" login state) to personalise your experience on return visits.
• Analytics cookies: Collect aggregated, anonymised data about how users interact with the Platform (pages visited, session duration, feature usage). This data is used solely to improve Platform performance and is not linked to individual identities.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform. maya99 does not use third-party advertising cookies or cross-site tracking cookies.

Data Retention

maya99 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to any longer retention periods required by Philippine law. The following retention schedule applies:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that renders re-identification impossible.

Data Security

maya99 implements technical and organisational security measures appropriate to the sensitivity of the personal data we hold. These include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and maya99 servers.
• Encryption at rest for all sensitive personal and financial data stored in our databases.
• Access controls limiting personal data access to maya99 personnel with a legitimate operational need.
• Two-factor authentication for all maya99 staff accessing systems containing personal data.
• Regular penetration testing and security audits by independent third-party security firms.
• Incident response procedures compliant with NPC breach notification requirements under Section 20 of the DPA.

In the event of a personal data breach that poses a real risk of serious harm to data subjects, maya99 will notify the National Privacy Commission and affected players within seventy-two (72) hours of becoming aware of the breach, in accordance with NPC Circular No. 16-03.

Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by maya99:

• Right to be informed — to know whether your personal data is being or has been processed.
• Right of access — to access your personal data held by maya99, including the purposes of processing and the recipients of disclosure.
• Right to rectification — to correct inaccurate or incomplete personal data without undue delay.
• Right to erasure — to have your personal data erased where processing is no longer necessary or lawful, subject to our legal retention obligations.
• Right to data portability — to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to object — to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to damages — to be indemnified for damages sustained as a result of inaccurate, incomplete, outdated, or unlawfully processed personal data.

To exercise any of these rights, contact maya99's Data Protection Officer by email at [email protected] with the subject line "Data Privacy Request". We will respond within fifteen (15) business days. You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

Children's Privacy

The maya99 Platform is strictly for adults aged 21 and above 21+ as required by PAGCOR regulations. maya99 does not knowingly collect or process personal data from individuals under 21 years of age. If we become aware that personal data has been collected from an individual under 21, that account will be immediately suspended, all data deleted, and any funds returned to the originating payment method.

If you are a parent or guardian and believe your child has created an account on maya99, please contact us immediately at [email protected].

Changes to This Privacy Policy

maya99 reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. When material changes are made, we will notify registered players via account notification and update the "Last Updated" date at the top of this page.

Your continued use of the maya99 Platform following publication of an updated Privacy Policy constitutes your acknowledgment of and agreement to the updated policy. We recommend reviewing this page periodically.

Contact & Data Protection Officer

For any privacy-related questions, data subject rights requests, or concerns about maya99's handling of your personal data, please contact our designated Data Protection Officer (DPO):

• Email: [email protected] (subject: "Data Privacy Request")
• Live Chat: Available 24/7 on the maya99 Platform

For complaints that cannot be resolved directly with maya99, you may escalate to the National Privacy Commission of the Philippines:

• NPC website: www.privacy.gov.ph
• NPC address: 5th Floor Delegation Building, PICC Complex, Roxas Boulevard, Pasay City, Metro Manila