At phmaya, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains exactly what data we collect, why we collect it, and how we keep it safe.
Here is a quick summary of how phmaya handles your personal data. Please read the full policy below for complete details.
phmaya uses 256-bit SSL encryption across all data transmissions. Your personal and financial information is stored on secured servers with strict access controls, firewalls, and regular security audits to prevent unauthorized access.
phmaya respects your right to access, correct, and request deletion of your personal data. You can update your account information at any time through your profile settings, or contact our support team to exercise your data rights.
phmaya does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Data shared with third parties is limited to what is strictly necessary for platform operations and legal compliance.
phmaya processes personal data in compliance with applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173), and in accordance with PAGCOR's regulatory requirements for licensed online gaming operators.
phmaya uses cookies and similar technologies to improve your experience, remember your preferences, and analyze platform usage. You can manage your cookie preferences through your browser settings. Essential cookies cannot be disabled as they are required for the platform to function.
If phmaya ever changes how it handles your personal data in a material way, we will notify you via email or an in-platform notification before the changes take effect. You will always know what is happening with your data.
This Privacy Policy ("Policy") describes how phmaya ("phmaya," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of users ("you," "your," or "Player") who access or use the phmaya online gaming platform at phmaya.one (the "Platform").
phmaya is committed to protecting your privacy and handling your personal data with transparency, integrity, and in full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its implementing rules and regulations, as well as applicable PAGCOR regulatory requirements.
By registering an account, accessing the Platform, or otherwise using phmaya's services, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use the Platform.
This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which together govern your use of phmaya.
For the purposes of applicable Philippine data protection law, phmaya is the data controller responsible for your personal information collected through the Platform. As data controller, phmaya determines the purposes and means of processing your personal data and is accountable for ensuring that such processing complies with applicable law.
phmaya has designated a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact our DPO at any time using the contact details provided in Section 14 of this Policy.
phmaya collects personal data from you in the following categories, depending on how you interact with the Platform:
phmaya uses your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Registration & Identity Data |
| Age and identity verification (KYC) | KYC Data, Registration Data |
| Processing deposits and withdrawals | Financial & Transaction Data |
| Providing gaming services and game history | Gaming Activity Data |
| Fraud prevention and security monitoring | Technical Data, Transaction Data |
| Anti-money laundering (AML) compliance | KYC Data, Transaction Data |
| Responsible gaming monitoring and intervention | Gaming Activity Data, Registration Data |
| Customer support and dispute resolution | Communications Data, Account Data |
| Platform improvement and analytics | Technical Data, Gaming Activity Data |
| Marketing and promotional communications (with consent) | Registration Data, Gaming Activity Data |
| Legal and regulatory compliance | All categories as required |
phmaya will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or as otherwise permitted by applicable law.
phmaya processes your personal data on the following legal bases under the Data Privacy Act of 2012:
phmaya does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:
phmaya engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, and banking partners), KYC and identity verification providers, cloud hosting and infrastructure providers, customer support platform providers, and analytics and fraud detection services. All service providers are contractually bound to process your data only on phmaya's instructions and in accordance with applicable data protection law.
phmaya may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive.
In the event of a merger, acquisition, or sale of all or substantially all of phmaya's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer.
phmaya may share your data with other third parties where you have given your explicit consent to such sharing.
phmaya uses cookies, web beacons, and similar tracking technologies to enhance your experience on the Platform. The following types of cookies are used:
You can manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.
phmaya retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your account's active status and for a period thereafter as required by applicable law.
Specifically:
Upon expiry of the applicable retention period, phmaya will securely delete or anonymize your personal data in accordance with its data disposal procedures.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmaya:
To exercise any of these rights, please contact phmaya's Data Protection Officer using the details in Section 14. phmaya will respond to all verified requests within thirty (30) days. We may need to verify your identity before processing your request.
phmaya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:
While phmaya takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, phmaya will notify you and the National Privacy Commission as required by the Data Privacy Act of 2012.
The phmaya Platform is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations governing online gaming in the Philippines. phmaya does not knowingly collect personal data from individuals under the age of 21.
If phmaya becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on phmaya, please contact us immediately using the details in Section 14.
The phmaya Platform may contain links to third-party websites or services for informational purposes. phmaya is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. This Policy applies solely to data collected by phmaya through the Platform.
phmaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.
Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — phmaya will provide advance notice via email or an in-platform notification at least fourteen (14) days before the changes take effect. Your continued use of the Platform after the effective date of any amendment constitutes your acceptance of the revised Policy.
We encourage you to review this Policy periodically to stay informed about how phmaya protects your personal data.
If you have any questions, concerns, or requests regarding this Privacy Policy or phmaya's handling of your personal data, please contact our Data Protection Officer:
You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you are not satisfied with phmaya's response to your privacy concern.
Your data is safe with us. Explore the phmaya Casino, enjoy your favorite games, and know that your privacy is protected every step of the way.
21+ only. Gambling is addictive. Know when to stop. | Responsible Gaming