maryph Privacy Policy

maryph ("maryph," "we," "us," or "our") operates the online gaming platform accessible at maryph.net (the "Platform"). maryph is the data controller responsible for the personal information collected through the Platform and is committed to protecting the privacy and security of all registered players and visitors.

This Privacy Policy applies to all personal data collected by maryph in connection with your use of the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and your general browsing of the maryph website.

maryph operates in accordance with the Republic Act No. 10173 (Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. maryph also adheres to PAGCOR's data handling guidelines applicable to licensed online gaming operators.

maryph collects personal data in the following categories. We collect only what is necessary for the stated purposes and do not engage in excessive or disproportionate data collection.

maryph does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data (such as government ID numbers) is collected, it is handled with heightened security measures.

maryph uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and secure your maryph account, including verifying your identity and age (21+) as required by PAGCOR regulations.
• Service Delivery: To provide access to games, process deposits and withdrawals, credit bonuses, and deliver the core maryph gaming experience.
• Regulatory Compliance: To fulfill our obligations under the Data Privacy Act of 2012, PAGCOR licensing requirements, and applicable anti-money laundering (AML) regulations, including the Anti-Money Laundering Act (AMLA) of the Philippines.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, collusion, and other prohibited conduct on the Platform.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our support channels.
• Responsible Gaming: To monitor gameplay patterns that may indicate problem gambling behavior and to administer self-exclusion, deposit limit, and cooling-off requests.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, design, and features of the maryph Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out option.

Under the Data Privacy Act of 2012, maryph processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our obligations under the Terms and Conditions you agreed to upon registration — including account creation, game access, and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AML obligations, and NPC data handling requirements.
• Legitimate Interests: Processing necessary for maryph's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

maryph does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment Processors: GCash, PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, and others) receive the minimum financial data required to process your deposit or withdrawal transaction.
• Identity Verification Providers: Third-party KYC service providers who assist maryph in verifying player identity and age in compliance with PAGCOR requirements. These providers are bound by strict data processing agreements.
• Game Software Providers: Licensed game studios whose titles are available on the maryph Platform may receive anonymized or pseudonymized gameplay data for game performance and integrity purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities, where disclosure is required by law or court order.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers who process data on maryph's behalf under binding data processing agreements that prohibit independent use of your data.

All third-party service providers engaged by maryph are required to implement appropriate technical and organizational security measures and are prohibited from using your personal data for any purpose other than the specific service they provide to maryph.

maryph uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and understand how you use the Platform.

You can manage or delete cookies through your browser settings at any time. Disabling non-essential cookies will not prevent you from accessing the maryph Platform, though some preference-based features may not function as expected.

maryph retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active account plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and PAGCOR regulations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, to support dispute resolution and service improvement.
• Technical and Usage Data: Retained for up to twelve (12) months in identifiable form, after which it is aggregated or anonymized for analytical purposes.
• Marketing Consent Records: Retained for the duration of your consent plus three (3) years, to demonstrate compliance with consent requirements.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC-approved data disposal procedures.

maryph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: TLS 1.2 or higher for all data in transit; AES-256 encryption for sensitive data at rest.
• Access Controls: Role-based access controls (RBAC) ensuring that maryph staff can only access personal data necessary for their specific job function.
• Two-Factor Authentication: Mandatory 2FA for all maryph administrative systems; available and encouraged for player accounts.
• Penetration Testing: Regular third-party security assessments and vulnerability scanning of the maryph Platform infrastructure.
• Incident Response: A documented data breach response plan. In the event of a personal data breach that poses a real risk to your rights, maryph will notify the NPC within 72 hours and affected players without undue delay, as required by the DPA.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by maryph. To exercise any of these rights, contact our Data Protection Officer (DPO) through the maryph support channel.

maryph will respond to all verified data rights requests within thirty (30) calendar days. In complex cases, this period may be extended by a further thirty (30) days, with notice provided to you. If you are not satisfied with maryph's response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

The maryph Platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR regulations governing online gaming in the Philippines. maryph does not knowingly collect personal data from persons under the age of 21.

If maryph becomes aware that personal data has been collected from a person under 21 years of age, the relevant account will be suspended immediately, the data will be deleted in accordance with our data disposal procedures, and any funds held in the account will be returned to the depositing payment method following verification.

If you believe that a minor has registered a maryph account, please contact our support team immediately so that we can take appropriate action.

maryph may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The "Last updated" date at the top of this page will be revised whenever a material change is made.

Where changes are material — meaning they significantly affect how we collect, use, or share your personal data — maryph will notify registered players via the email address on file or through a prominent notice on the Platform at least fourteen (14) days before the changes take effect.

Your continued use of the maryph Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. If you do not agree with the updated policy, you should discontinue use of the Platform and may request account closure through our support channel.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way maryph handles your personal data, please contact our Data Protection Officer (DPO) through the maryph live chat support available on the Platform.

You may also reach the maryph support team by email. Our support email address is displayed in the footer of this page as plain text. Please include your registered account username and a clear description of your request so we can assist you efficiently.

For complaints that remain unresolved after contacting maryph, you have the right to file a complaint with the National Privacy Commission of the Philippines at their official government portal.

maryph is committed to resolving all privacy-related concerns promptly and transparently. We aim to respond to all DPO inquiries within fifteen (15) business days of receipt.