maya99 Privacy Policy – How We Handle Your Personal Data

1 Who We Are and How to Contact Us

Maya99 is an online gaming platform operating at maya99.asia, regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). For purposes of the Data Privacy Act of the Philippines (R.A. 10173), maya99 acts as the Personal Information Controller in respect of personal data collected and processed through this platform.

Our designated Data Protection Officer (DPO) can be reached at: [email protected]. Please address all data privacy enquiries to the attention of the Data Protection Officer.

2 Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected by maya99 in connection with the operation of maya99.asia, including data collected during account registration, identity verification (KYC), financial transactions, gameplay, customer support interactions, and use of responsible gaming tools.

This Policy applies to all individuals who access maya99.asia regardless of location, though the platform is operated for and directed at residents and users within the Republic of the Philippines.

3 Personal Data We Collect

The categories of personal data maya99 collects are described in the table below. Collection of data marked as "Required" is necessary to create and operate an account; data marked "Optional" is collected only if you voluntarily provide it.

4 How We Collect Your Personal Data

Maya99 collects personal data through the following channels:

• Direct provision by you – when you register an account, submit KYC documents, make deposits or withdrawals, contact support, or use responsible gaming tools;
• Automatically during platform use – through server logs, session tracking, and analytics tools that record technical and gaming data as you use the platform;
• Third-party sources – where permitted by law and required for compliance, from identity verification providers, payment processors, fraud prevention services, and PAGCOR's central player registry.

5 Legal Bases for Processing

Maya99 processes your personal data on the following legal bases as recognised under the Data Privacy Act of the Philippines:

• Contractual necessity – processing required to create and maintain your Account, process transactions, and provide gaming services;
• Legal obligation – processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (R.A. 9160 as amended), and reporting obligations to Philippine government authorities;
• Legitimate interests – processing for fraud prevention, platform security, responsible gaming risk assessment, and service improvement, where such interests do not override your fundamental privacy rights;
• Consent – where we request your consent for specific processing activities such as marketing communications, which you may withdraw at any time.

6 How We Use Your Personal Data

Maya99 uses the personal data we hold for the following purposes:

• To verify your identity and age (21+ requirement) in accordance with PAGCOR KYC obligations;
• To create, manage, and maintain your Account;
• To process deposits and withdrawals through GCash, PayMaya, BPI, BDO, and Metrobank;
• To detect and prevent fraud, money laundering, and other financial crimes;
• To monitor gaming activity for responsible gaming risk indicators and to facilitate self-exclusion and limit-setting tools;
• To provide customer support and respond to enquiries;
• To comply with mandatory PAGCOR reporting obligations and Philippine law;
• To analyse platform usage patterns for the purpose of improving services (using aggregated or anonymised data where possible);
• To send you transactional communications (account alerts, withdrawal confirmations, security notifications) via your registered mobile number or email;
• To send you promotional communications where you have provided consent, which you may withdraw at any time by contacting support.

7 Who We Share Your Personal Data With

Maya99 shares personal data only with the categories of recipients described below and only to the extent necessary for the stated purpose:

• PAGCOR – mandatory reporting of player registration data, transaction data, and suspicious activity reports as required by maya99's operating licence;
• Payment processors – GCash (Mynt), PayMaya (Voyager Innovations), and Philippine banking partners (BPI, BDO, Metrobank) to facilitate financial transactions; these processors are subject to BSP regulation and their own data protection obligations;
• Identity verification providers – KYC verification partners who assist with government ID verification, subject to contractual data protection obligations;
• Fraud prevention and security services – providers who assist in detecting suspicious login activity, payment fraud, and multi-accounting;
• Philippine law enforcement and regulatory authorities – where maya99 is legally compelled to disclose information by court order, PAGCOR direction, AMLC (Anti-Money Laundering Council) requirement, or other lawful process.

Maya99 does not share personal data with third-party marketers, advertisers, or data brokers.

8 International Data Transfers

Maya99 operates primarily within the Republic of the Philippines and processes personal data on servers located in the Philippines. To the extent that any personal data is transferred to service providers located outside the Philippines — for example, certain cloud infrastructure or fraud prevention services — maya99 ensures that such transfers comply with the requirements of the Data Privacy Act and that the receiving entity provides an adequate level of data protection equivalent to Philippine standards through appropriate contractual safeguards.

9 Data Retention

Maya99 retains personal data for the periods described below, after which data is securely deleted or irreversibly anonymised:

• Account and identity data – retained for the duration of your Account and for a minimum of five (5) years after Account closure, as required by PAGCOR regulations and Philippine AML law;
• Financial transaction data – retained for a minimum of five (5) years from the date of the transaction in accordance with Anti-Money Laundering Act requirements;
• Gaming history – retained for three (3) years from the date of play for dispute resolution and regulatory audit purposes;
• Support communications – retained for two (2) years from the date of the last communication;
• Technical and session logs – retained for twelve (12) months for security and fraud monitoring purposes.

10 Cookies and Tracking Technologies

Maya99 uses cookies and similar technologies on maya99.asia to:

• Maintain your session state and keep you logged in during a gaming session;
• Remember your platform preferences (language, display settings);
• Detect suspicious access patterns and support account security;
• Collect aggregated analytics data to understand how the platform is used and identify areas for improvement.

Session cookies (which expire when you close your browser) are strictly necessary for platform operation and cannot be disabled without impairing platform functionality. Analytics cookies are non-essential and, where required by law, will be subject to your consent at the point of first visit.

Maya99 does not use third-party advertising cookies or allow ad networks to place tracking technologies on maya99.asia.

11 Security of Your Personal Data

Maya99 implements the following technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and maya99 servers;
• Encryption of personal data at rest in maya99's database infrastructure;
• Role-based access controls limiting internal access to personal data to staff with a legitimate operational need;
• Two-factor authentication for internal administrative systems;
• Regular security penetration testing and vulnerability assessments;
• Incident response procedures for data breach detection, containment, and notification in accordance with NPC requirements.

In the event of a personal data breach that poses a real risk of serious harm, maya99 will notify the National Privacy Commission within seventy-two (72) hours of discovery and will notify affected individuals without undue delay.

12 Your Rights Under the Data Privacy Act

As a data subject under R.A. 10173, you have the following rights in respect of your personal data held by maya99:

• Right to be informed – to know what personal data maya99 holds about you and how it is processed;
• Right of access – to request a copy of the personal data maya99 holds about you;
• Right to rectification – to request correction of inaccurate or incomplete personal data;
• Right to erasure – to request deletion of personal data where there is no longer a lawful basis for processing, subject to legal retention obligations;
• Right to object – to object to processing based on legitimate interests, including profiling for marketing purposes;
• Right to data portability – to receive a copy of personal data you have provided to maya99 in a structured, machine-readable format;
• Right to lodge a complaint – to file a complaint with the National Privacy Commission if you believe your privacy rights have been violated.

To exercise any of the above rights, contact maya99's Data Protection Officer at [email protected]. We will respond to verified requests within thirty (30) days as required by the Data Privacy Act.

13 Children and Minors

Maya99's services are strictly for individuals aged 21 years and above. Maya99 does not knowingly collect personal data from individuals under 21. Account registration requires identity verification that confirms age eligibility before an account becomes fully active.

If maya99 discovers that personal data has been collected from an individual under 21, the account will be closed immediately, all data will be deleted (except as required for regulatory reporting of the age violation), and any deposited funds will be returned to the source payment method.

14 Changes to This Privacy Policy

Maya99 may update this Privacy Policy from time to time to reflect changes in platform operations, legal requirements, or regulatory obligations. Material changes will be communicated to registered users via the email address or mobile number on file at least seven (7) days before the revised Policy takes effect.

The current version of this Privacy Policy is always accessible at maya99.asia/privacy-policy. The "Last Updated" date at the top of this document reflects when the most recent version was published. Continued use of the platform after the effective date of any revised Policy constitutes acceptance of the updated terms.

15 Contact and Complaints

For all data privacy matters — including rights requests, privacy enquiries, and concerns about how maya99 handles your personal data — please contact our Data Protection Officer:

• Email: [email protected] (attn: Data Protection Officer)
• Response time: We aim to acknowledge all privacy requests within three (3) business days and to provide a substantive response within thirty (30) calendar days.

If you are not satisfied with maya99's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Further information about the NPC and its complaint process is available through Philippine government information channels.