MayaCash Privacy Policy

MayaCash ("MayaCash," "we," "us," or "our") operates the online gaming platform accessible at mayacash.app and through the MayaCash mobile application (collectively, the "Platform"). In the course of providing our services to players across the Philippines — from Metro Manila and Cebu to Davao, Quezon City, and beyond — we collect and process certain personal data about you.

This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we process it, the parties with whom we may share it, the measures we take to protect it, and the rights available to you as a data subject under Philippine law.

This Policy applies to all personal data collected through the Platform, including data collected during account registration, identity verification, payment processing, gameplay, customer support interactions, and your use of the MayaCash mobile application.

MayaCash is the data controller responsible for the personal data collected through the Platform. As data controller, MayaCash determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

MayaCash has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO through the support channels described in Section 14 of this Policy.

MayaCash collects only the personal data that is necessary to provide our services, comply with our legal and regulatory obligations, and maintain the security and integrity of the Platform. The categories of personal data we collect include:

We do not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where required by law or where you voluntarily provide such information in the context of a responsible gaming self-assessment.

MayaCash collects personal data through the following means:

• Direct interactions: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated technologies: Data collected automatically when you access the Platform, including cookies, web beacons, log files, and similar tracking technologies that record your device information, IP address, and browsing behaviour on the Platform.
• Third-party sources: Data received from identity verification providers, payment processors (such as GCash and PayMaya), fraud prevention services, and regulatory databases, where necessary to verify your identity or comply with our legal obligations.
• Publicly available sources: In limited circumstances, data from publicly available sources such as government registries, where required for compliance purposes.

MayaCash uses your personal data for the following purposes:

• Account management: To create, maintain, and administer your MayaCash account, including verifying your identity and age (21+ requirement) and managing your account settings.
• Service delivery: To provide access to games, process deposits and withdrawals, and deliver the features and functionality of the Platform.
• Regulatory compliance: To comply with our obligations under Philippine law, including anti-money laundering (AML) requirements, know-your-customer (KYC) obligations, and PAGCOR regulatory requirements.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent transactions, cheating, money laundering, and other illegal or prohibited activities on the Platform.
• Responsible gaming: To monitor gameplay patterns, enforce deposit and loss limits, process self-exclusion requests, and identify players who may be at risk of problem gambling.
• Customer support: To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Marketing communications: To send you promotional offers, bonuses, and platform updates, where you have provided your consent to receive such communications. You may withdraw this consent at any time through your account settings.
• Platform improvement: To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the Platform.

MayaCash processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our contract with you, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML/KYC obligations and PAGCOR regulatory requirements.
• Legitimate interests: Processing necessary for MayaCash's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including the sending of direct marketing communications. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

MayaCash does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and eligibility to use the Platform.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where required by law or regulatory obligation.
• Fraud prevention services: Third-party providers that assist MayaCash in detecting and preventing fraudulent activity, cheating, and money laundering.
• Technology service providers: Cloud hosting, data analytics, customer support, and other technology vendors who process data on MayaCash's behalf under strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and other professional advisers, where necessary for the conduct of MayaCash's business.

All third parties with whom MayaCash shares personal data are required to implement appropriate technical and organisational security measures and to process your data only in accordance with MayaCash's instructions and applicable law.

MayaCash retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine AML regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction.
• Support communications: Retained for up to three (3) years from the date of the interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing consent records: Retained for the duration of your consent and for a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with MayaCash's data disposal procedures.

MayaCash implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the MayaCash Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Multi-factor authentication options for player accounts.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• Comprehensive staff training on data protection and information security.
• Incident response procedures for the detection, reporting, and management of personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, MayaCash will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act and NPC regulations.

MayaCash uses cookies and similar tracking technologies on the Platform to enhance your experience, maintain session security, and analyse Platform usage. The types of cookies we use include:

• Strictly necessary cookies: Essential for the operation of the Platform, including session management, authentication, and security. These cannot be disabled without affecting Platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to personalise your experience on the Platform.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the Platform, helping us identify areas for improvement. This data does not identify you personally.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats on the Platform.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. MayaCash does not use third-party advertising cookies or share cookie data with external advertising networks.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by MayaCash:

• Right to be informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of access: The right to obtain confirmation of whether MayaCash holds personal data about you and to receive a copy of that data.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data held about you.
• Right to erasure: The right to request deletion of your personal data, subject to MayaCash's legal and regulatory retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe that MayaCash has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact MayaCash's Data Protection Officer through the live chat support feature on the Platform. We will respond to your request within the timeframes prescribed by the Data Privacy Act and NPC regulations. We may need to verify your identity before processing your request.

The MayaCash Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. MayaCash does not knowingly collect personal data from individuals under the age of 21.

If MayaCash becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the Platform, please contact our support team immediately via live chat.

MayaCash reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.

Where changes to this Policy are material, MayaCash will notify registered players via email or an in-platform notification prior to the changes taking effect. Your continued use of the Platform following the publication of any amendment constitutes your acknowledgement of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how MayaCash protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way MayaCash processes your personal data, please contact our Data Protection Officer through the following channels:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. MayaCash encourages you to contact us first so we can address your concerns promptly and directly.