phmaya Privacy Policy

When you register and use phmaya, we collect certain personal information that is necessary to operate your account and deliver a safe, personalised gaming experience. This includes your full name, date of birth, email address, mobile number, and a government-issued ID for identity verification purposes as required under Philippine regulations. We also collect transactional data such as deposit and withdrawal records, game history, and session logs to ensure the integrity of your account and comply with anti-money laundering obligations. Device and technical information — including your IP address, browser type, operating system, and mobile device identifiers — may be collected automatically when you access the platform. We may also collect information you voluntarily provide when you contact our support team, respond to surveys, or participate in promotions. All information collected is limited to what is genuinely necessary for the purposes described in this policy, and we do not collect sensitive personal data beyond what is required for identity verification and responsible gaming compliance.

The personal information we collect is used primarily to create and manage your account, process deposits and withdrawals in Philippine pesos, verify your identity, and deliver the games and services available on the platform. We use your contact details to send you important account notifications, security alerts, and — where you have opted in — promotional communications about new games, bonuses, and platform updates. Transaction and session data is analysed to detect suspicious activity, prevent fraud, and ensure compliance with applicable Philippine laws and our licensing obligations. Your information also helps us improve the platform by understanding how players navigate the site, which features are most used, and where the mobile experience can be enhanced. We may use aggregated, anonymised data for internal reporting and product development, but this data cannot be used to identify you individually. We will never use your personal information to make automated decisions that significantly affect your rights without giving you the opportunity to seek human review.

phmaya does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes — this is a firm commitment we make to every player on our platform. We may share your information with trusted service providers who assist us in operating the platform, such as payment processors, identity verification partners, and cloud infrastructure providers, but only to the extent necessary for them to perform their services and under strict confidentiality agreements. In cases where we are legally required to do so — for example, in response to a valid court order, regulatory inquiry, or law enforcement request under Philippine law — we may disclose your information to the relevant authorities. If phmaya undergoes a business restructuring, merger, or acquisition, your personal data may be transferred to the successor entity, and you will be notified of any such change in advance. All third-party partners we work with are required to handle your data in accordance with applicable data protection standards and are prohibited from using it for any purpose beyond what we have authorised. We conduct periodic reviews of our third-party relationships to ensure ongoing compliance with our privacy commitments.

We implement industry-standard technical and organisational measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. All data transmitted between your device and our platform is encrypted using SSL/TLS protocols, and sensitive account information is stored using secure, access-controlled systems with restricted internal access. Our security team monitors the platform around the clock for unusual activity, and we conduct regular security assessments to identify and address potential vulnerabilities before they can be exploited. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and the relevant Philippine authorities in accordance with our legal obligations and within the timeframes required by applicable law. We strongly encourage you to use a strong, unique password for your phmaya account and to enable any additional security features available, such as two-factor authentication where offered. While we take every reasonable precaution to protect your data, no system is completely immune to risk, and we ask that you also take responsibility for keeping your login credentials confidential and reporting any suspicious account activity to our support team immediately.

As a registered user of phmaya based in the Philippines, you have the right to access the personal information we hold about you, request corrections to any inaccurate or incomplete data, and ask us to delete your account and associated personal data subject to our legal retention obligations. You may also object to or request restrictions on certain types of processing, withdraw any consent you have previously given for optional data uses such as marketing communications, and request a copy of your data in a portable, machine-readable format. To exercise any of these rights, please contact our support team at [email protected] with your registered account details and a clear description of your request, and we will respond within the timeframe required by applicable Philippine data protection law. We will never penalise you for exercising your privacy rights, and exercising these rights will not affect your ability to continue using the platform unless account closure is specifically requested. If you believe your privacy rights have been violated and we have not adequately addressed your concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. We are committed to resolving all privacy-related concerns fairly, transparently, and in a timely manner.

We retain your personal information for as long as your account remains active and for a reasonable period thereafter to fulfil our legal, regulatory, and business obligations. Transaction records and identity verification documents are retained for the minimum period required under Philippine anti-money laundering regulations, which may extend beyond account closure. Once the applicable retention period has expired and there is no longer a legal or legitimate business reason to keep your data, we will securely delete or anonymise it in accordance with our internal data lifecycle procedures. If you request account closure, we will begin the deletion process for data that is not subject to mandatory retention requirements, and we will inform you of what data must be retained and for how long. We do not retain personal data for longer than is necessary, and we review our retention schedules regularly to ensure they remain aligned with current legal requirements and best practices. For specific questions about how long particular types of data are retained, please contact our support team at [email protected].

phmaya reserves the right to update this Privacy Policy at any time to reflect changes in our practices, the services we offer, or applicable legal requirements. When we make changes, the revised policy will be published on this page with an updated effective date, and we encourage you to review it periodically to stay informed about how we protect your information. For material changes that significantly affect your rights or the way we handle your data, we will make reasonable efforts to notify you directly via the email address associated with your account before the changes take effect. Your continued use of the platform after a revised policy has been posted constitutes your acceptance of the updated terms. If you do not agree with any changes to this policy, you have the right to stop using the platform and request account closure by contacting our support team. All previous versions of this policy are available upon request for reference purposes.