Privacy Policy

1. Introduction

This Privacy Policy ("Policy") describes how mayacash ("mayacash," "we," "us," or "our"), the operator of the online gaming platform at mayacash.club, collects, uses, processes, stores, and discloses personal information about you ("Player," "User," or "you") when you access or use our Platform, including our website, mobile applications, and any related services.

mayacash is committed to protecting the privacy and security of your personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. This Policy should be read together with our Terms & Conditions, which govern your use of the mayacash Platform.

By registering an account on mayacash or otherwise using our Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the mayacash Platform immediately.

2. Personal Data We Collect

mayacash collects the following categories of personal data from players and platform users:

2.1 Identity & Contact Information

• Full legal name as it appears on your government-issued ID
• Date of birth and age verification data
• Residential address (barangay, city/municipality, province, region)
• Valid email address
• Philippine mobile number
• Nationality and citizenship information

2.2 Identity Verification (KYC) Documents

• Copies of government-issued photo IDs (PhilSys ID, passport, driver's license, SSS ID, GSIS ID, PRC ID, Voter's ID, or Postal ID)
• Proof of address documents (utility bills, bank statements, or barangay certificates)
• Source of funds documentation where required by AMLC regulations
• Selfie or liveness verification images for biometric identity confirmation

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records
• GCash or PayMaya account reference numbers (not full credentials)
• Bank account details for withdrawal processing (bank name, account name, account number)
• Transaction amounts, dates, and payment method references
• Betting history, game activity logs, and wagering records

2.4 Technical & Usage Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the Platform
• Login timestamps and access logs
• Cookies and similar tracking technology data (see Section 7)

2.5 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback, survey responses, and promotional opt-in preferences
• Responsible gaming tool settings and self-exclusion requests

3. How We Collect Your Data

mayacash collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, pixel tags, and server logs.
• Third-party sources: Identity verification data from KYC service providers; fraud detection signals from security partners; payment confirmation data from GCash, PayMaya, and banking partners.
• Regulatory sources: Information received from PAGCOR, AMLC, or other Philippine regulatory bodies in connection with compliance obligations.

4. How We Use Your Personal Data

mayacash uses your personal data for the following purposes:

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, mayacash processes your personal data on the following legal bases:

• Consent: Where you have given explicit consent for a specific processing activity, such as receiving promotional emails or SMS notifications from mayacash. You may withdraw consent at any time by contacting our DPO or updating your communication preferences in your account settings.
• Contract Performance: Processing necessary to fulfill our obligations under the mayacash Terms & Conditions, including account management, payment processing, and game provision.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including the Anti-Money Laundering Act (RA 9160), PAGCOR regulations, and the Data Privacy Act itself.
• Legitimate Interest: Processing necessary for mayacash's legitimate business interests, including fraud prevention, platform security, and service improvement, provided these interests are not overridden by your data protection rights.

6. Data Sharing & Disclosure

mayacash does not sell or rent your personal data to third parties. We may share your data only in the following circumstances:

• KYC & Identity Verification Partners: Accredited third-party providers who assist with document verification and liveness checks as part of our onboarding process. These providers are bound by strict data processing agreements.
• Payment Processors: GCash, PayMaya, and Philippine banking partners receive only the minimum data necessary to process your deposit or withdrawal transaction.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies, where disclosure is required by law or court order.
• Fraud & Security Providers: Third-party security and fraud detection services that help protect the integrity of the mayacash Platform. These providers act as data processors under our instruction.
• Professional Advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred to the successor entity, subject to equivalent privacy protections.

7. Cookies & Tracking Technologies

The mayacash Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and gather analytics data. The following types of cookies may be used:

• Essential Cookies: Required for the Platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting Platform functionality.
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the mayacash Platform, helping us identify areas for improvement. No personally identifiable information is included in analytics reports.
• Preference Cookies: Store your language, display, and notification preferences so you don't have to re-enter them on each visit.
• Security Cookies: Help detect and prevent fraudulent activity, bot access, and unauthorized login attempts.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the mayacash Platform. We do not use third-party advertising or retargeting cookies.

8. Data Retention

mayacash retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and KYC data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR and AMLC record-keeping requirements.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Customer support communications: Retained for two (2) years from the date of the last interaction, or longer if related to an ongoing dispute or legal matter.
• Technical and usage logs: Retained for up to twelve (12) months for security and fraud investigation purposes.
• Marketing preferences: Retained until you withdraw consent or request deletion, whichever is earlier.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines.

9. Data Security

mayacash implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• TLS/SSL encryption for all data transmitted between your device and the mayacash Platform
• AES-256 encryption for sensitive data stored on our servers
• Multi-factor authentication options for player accounts
• Regular security audits and penetration testing by independent security professionals
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Intrusion detection systems and 24/7 security monitoring
• Incident response procedures aligned with NPC breach notification requirements

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mayacash will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, as required by the Data Privacy Act.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by mayacash:

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to your request within thirty (30) days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

11. Children's Privacy

The mayacash Platform is strictly intended for individuals aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the associated account, void any transactions, and delete the personal data in question.

If you are a parent or guardian and believe that a minor has registered on the mayacash Platform, please contact us immediately at [email protected] so we can take appropriate action.

12. Cross-Border Data Transfers

mayacash primarily stores and processes personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, where we use internationally hosted cloud infrastructure or third-party security services.

Any cross-border transfer of personal data is conducted in accordance with Section 21 of the Data Privacy Act of 2012 and NPC guidelines. We ensure that recipient countries or organizations provide an adequate level of data protection, or that appropriate safeguards (such as contractual clauses) are in place before any transfer occurs.

13. Updates to This Privacy Policy

mayacash may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or Platform features. When material changes are made, we will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. We encourage you to review this Policy periodically. Your continued use of the mayacash Platform after the effective date of any update constitutes your acceptance of the revised Policy.

14. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by mayacash, please contact our Data Protection Officer:

Our support team includes Filipino-speaking agents available around the clock to assist you with any privacy-related concerns in both English and Filipino.