mayawin Privacy Policy

This Privacy Policy ("Policy") describes how mayawin ("mayawin," "we," "us," "our") — the operator of the online gaming platform accessible at mayawin.vip — collects, uses, discloses, stores, and protects the personal data of users ("you," "Player") who access or use the mayawin platform and its associated services.

mayawin is committed to processing personal data in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the directives of the National Privacy Commission (NPC). This Policy also reflects PAGCOR's data handling expectations for licensed online gaming operators serving Filipino players.

By registering an account, making a deposit, or otherwise using the mayawin platform, you acknowledge that you have read, understood, and consented to the data processing practices described in this Policy. If you do not agree, you must not access or use the mayawin platform.

The following terms carry the meanings set out below throughout this Policy:

• "Personal Data" — any information from which a living individual can be identified, directly or indirectly, including names, mobile numbers, email addresses, financial data, and device identifiers.
• "Processing" — any operation performed on personal data, including collection, recording, storage, use, disclosure, deletion, or destruction.
• "Data Controller" — mayawin, which determines the purposes and means of processing personal data collected through the mayawin platform.
• "Data Processor" — a third party that processes personal data on behalf of and under the instructions of mayawin (e.g., payment processors, KYC verification providers, game software suppliers).
• "Data Subject" — you, the individual whose personal data is being processed.
• "NPC" — the National Privacy Commission of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act.
• "Consent" — a freely given, specific, informed, and unambiguous indication of your agreement to the processing of your personal data for a stated purpose.
• "Sensitive Personal Information" — personal data that includes government-issued identification numbers, financial details, biometric data, and other categories accorded heightened protection under RA 10173.

mayawin collects personal data through multiple channels: during account registration, as part of KYC verification, through your use of platform features, and through automated technical means. The categories of data we collect are set out in the table below:

mayawin does not intentionally collect data from individuals who have not registered an account. Where anonymous visitors access the platform, only aggregated, non-identifiable technical data is collected for platform performance analysis.

mayawin processes your personal data for the following purposes, each of which is grounded in a lawful basis as described in Section 5:

To create, authenticate, and maintain your mayawin account; to verify your identity during registration and KYC procedures; to process deposits and withdrawals through GCash, Maya, and other accepted Philippine payment methods; to manage your Wallet balance and transaction history; and to provide access to all features and games available on the mayawin platform.

To comply with the obligations imposed by PAGCOR on licensed gaming operators, including age verification (21+ requirement), identity verification, anti-money laundering (AML) record-keeping, suspicious activity reporting, and responses to lawful requests from Philippine government authorities. Financial and identity records are retained for the minimum periods required by applicable law.

To detect, investigate, and prevent unauthorized access to your account, fraudulent transactions, bonus abuse, multi-accounting, and any other activity that violates mayawin's Terms & Conditions or Philippine law. This includes analysis of login patterns, IP addresses, device fingerprints, and transaction behaviors using automated and manual review processes.

To respond to your support inquiries submitted via in-app live chat or email; to resolve disputes relating to game outcomes, transactions, or account status; and to maintain records of support interactions for quality assurance and regulatory reference purposes.

To monitor gaming behavior patterns that may indicate problem gambling risk; to administer responsible gaming tools including deposit limits, session timers, and self-exclusion periods; and to contact players where our systems identify patterns consistent with gambling-related harm, consistent with PAGCOR's responsible gaming directives.

To analyze aggregated, anonymized usage data for the purpose of improving platform performance, game catalogue decisions, payment flow optimization, and user experience design. Individual player data is not used for these analytical purposes without anonymization.

To send you promotional offers, bonus notifications, and relevant platform updates — but only where you have provided explicit consent to receive such communications during registration or subsequently via your account preferences. You may withdraw this consent at any time through your account settings or by contacting support.

mayawin processes your personal data on one or more of the following lawful bases recognized under RA 10173 and its Implementing Rules:

• Contractual Necessity: Processing required to perform the contract between mayawin and you, including account creation, gameplay, deposits, and withdrawals.
• Legal Obligation: Processing necessary to comply with applicable Philippine laws and PAGCOR regulatory requirements, including AML obligations, age verification, and government reporting duties.
• Legitimate Interests: Processing for fraud prevention, platform security, abuse detection, and responsible gaming monitoring — where such interests are not overridden by your rights and interests.
• Consent: Processing for promotional communications and any other purpose for which we have explicitly obtained your consent. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

mayawin does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Personal data is disclosed to third parties only in the circumstances listed below:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations, Inc.), GrabPay, BPI, BDO, Metrobank, and other payment service providers receive your payment identifiers to process deposit and withdrawal transactions. These providers operate their own privacy policies and are governed by Bangko Sentral ng Pilipinas (BSP) regulations.
• KYC and Identity Verification Providers: Third-party identity verification services licensed to process government-issued Philippine IDs as part of the KYC process required by PAGCOR and AML obligations.
• Game Software Providers: Licensed game developers and studios supplying games to the mayawin platform may receive limited technical session data necessary to deliver and operate their games. Game providers do not receive financial or identity data beyond what is necessary for game functionality.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the NPC, and other Philippine government bodies may receive your personal data pursuant to lawful requests, court orders, or our mandatory reporting obligations.
• Professional Advisers: Lawyers, auditors, and compliance consultants engaged by mayawin under strict confidentiality obligations, where access to your data is necessary for the professional service being provided.

All third-party processors engaged by mayawin are contractually required to implement appropriate security measures and to process personal data only in accordance with mayawin's documented instructions and the requirements of RA 10173.

Some of mayawin's third-party service providers — including game software providers and cloud infrastructure operators — may be located outside the Philippines. Where personal data is transferred to a country that does not provide a level of data protection equivalent to Philippine standards, mayawin will ensure that appropriate safeguards are in place, including:

• Contractual clauses in Data Processing Agreements that impose obligations consistent with RA 10173;
• Confirmation that the recipient country's data protection framework has been assessed as adequate by the NPC or mayawin's Data Protection Officer;
• Your explicit consent to the transfer, where required and where no other adequate safeguard is available.

You may request information about the specific safeguards governing international transfers of your personal data by contacting the mayawin Data Protection Officer at the address set out in Section 14.

mayawin retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the minimum retention periods required by Philippine law. The following general retention principles apply:

• Account Data: Retained for the duration of your active account relationship with mayawin, and for a minimum of five (5) years after account closure to satisfy AML and PAGCOR record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with RA 9160 (Anti-Money Laundering Act) and its amendments.
• KYC and Identity Verification Documents: Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Support Communications: Retained for a minimum of two (2) years from the date of the interaction, or longer where a dispute remains unresolved.
• Responsible Gaming Records: Retained for the duration of any active self-exclusion period and for a minimum of two (2) years thereafter.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized so that it can no longer be attributed to an identified individual. Earlier deletion may be requested by exercising your rights under Section 11, subject to overriding legal retention obligations.

mayawin uses cookies and similar technologies (including web beacons and local storage) to operate and improve the platform. The categories of cookies used are as follows:

• Strictly Necessary Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without preventing you from using the mayawin platform.
• Functional Cookies: Enable mayawin to remember your preferences — such as language settings and game lobby filters — between sessions. These improve your experience but are not essential to platform operation.
• Analytics Cookies: Collect aggregated, anonymized data about how players interact with the platform, including pages visited, features used, and session durations. This data informs platform development. Individual player identities are not used in analytics processing.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair or prevent access to the mayawin platform. All other cookie categories may be disabled without preventing basic access.

mayawin implements a range of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL Encryption: All data in transit between your device and the mayawin platform is encrypted using TLS 1.2 or higher, consistent with the standard applied by Philippine banks and GCash.
• Access Controls: Personal data is accessible only to mayawin personnel and authorized processors who require access to perform their specific functions. Role-based access controls and audit logs are maintained.
• Two-Factor Authentication: OTP-based verification is applied to new device logins and high-value withdrawal requests, reducing the risk of unauthorized account access.
• Penetration Testing: The mayawin platform undergoes regular third-party security assessments to identify and remediate vulnerabilities.
• Data Minimization: mayawin collects and retains only the personal data strictly necessary for the stated processing purpose, reducing the volume of data at risk in the event of a security incident.

In the event of a personal data breach that poses a real risk of serious harm to affected individuals, mayawin will notify the NPC within 72 hours of discovery, and will notify affected players without undue delay where required by RA 10173.

As a data subject under RA 10173, you hold the following rights in respect of your personal data held by mayawin. You may exercise any of these rights by contacting the mayawin Data Protection Officer as detailed in Section 14:

mayawin will respond to all data rights requests within thirty (30) calendar days of receipt. Requests are processed at no charge. In cases of excessive or manifestly unfounded requests, mayawin reserves the right to charge a reasonable administrative fee or decline the request, with written reasons provided to the data subject.

The mayawin platform is strictly intended for use by individuals aged 21 years and above, consistent with PAGCOR regulations governing real-money online gaming in the Philippines. mayawin does not knowingly collect personal data from individuals below this age threshold.

Age verification is conducted as part of the account registration and KYC process. If mayawin discovers that an account has been registered by or used by an individual under 21 years of age, the account will be immediately suspended, all personal data associated with the underage individual will be deleted in accordance with RA 10173, and any funds held in the account will be handled in accordance with applicable Philippine regulations.

If you believe that a minor has registered on the mayawin platform or that a minor's personal data has been submitted to us, please contact us immediately via the channels set out in Section 14.

mayawin reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, PAGCOR regulatory requirements, or our platform operations.

Material changes — including changes that expand the categories of personal data collected, alter the purposes for which data is used, or modify your rights — will be communicated to registered players via in-app notification or the email address registered to your account, no less than fourteen (14) calendar days prior to the effective date of the change.

Your continued use of the mayawin platform after the effective date of any revision constitutes your acceptance of the updated Policy. The date of the most recent update is displayed at the top of this document. We encourage you to review this Policy periodically to stay informed about how mayawin protects your personal data.

mayawin has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and for handling all data privacy-related inquiries, requests, and complaints. You may contact the mayawin DPO through the following channels:

You also have the right to raise concerns directly with the National Privacy Commission of the Philippines. For information on how to file a complaint with the NPC, please visit the NPC's official platform at privacy.gov.ph.

This Privacy Policy was last reviewed and updated in January 2026. The current version will always be available at mayawin.vip/privacy-policy.