Privacy Policy

1 Introduction

maya365 ("we," "us," or "our") operates the online gaming platform accessible at https://maya365.app and any associated mobile interfaces (collectively, the "Platform"). We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, including registered players, visitors, and prospective users.

This Privacy Policy describes how maya365 collects, uses, stores, shares, and protects your personal information. It also outlines the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA") and the implementing rules and regulations issued by the National Privacy Commission ("NPC").

By registering on or using the maya365 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this policy, please discontinue use of the Platform immediately.

2 Personal Data We Collect

maya365 collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

• Full legal name
• Date of birth (for age verification — players must be 21 years of age or older)
• Residential address (including city, province, and postal code)
• Email address
• Mobile number (Philippine-registered)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Government-issued identification documents (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Selfie or facial image for identity matching purposes, where required
• Source of funds documentation, where required for anti-money laundering compliance

2.3 Financial & Transaction Data

• Payment method details (e.g., GCash account reference, PayMaya account reference, bank account details for BPI, BDO, or Metrobank)
• Deposit and withdrawal transaction history
• Account balance information
• Bonus and promotional credit history

2.4 Gaming Activity Data

• Game session history, including games played, wager amounts, and outcomes
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)
• Bonus usage and wagering progress

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session timestamps and duration
• Cookie identifiers and similar tracking data (see Section 8)

2.6 Communications Data

• Records of customer support interactions (live chat transcripts, email correspondence)
• Feedback and survey responses submitted voluntarily
• Marketing communication preferences

3 How We Collect Your Data

maya365 collects personal data through the following channels:

• Directly from you — when you register an account, complete identity verification, make deposits or withdrawals, contact customer support, or respond to surveys and promotions.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse or interact with the Platform (see Section 8 for details).
• From third-party service providers — including identity verification agencies, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud detection services, where necessary to fulfill our legal and contractual obligations.
• From regulatory authorities — where we are required by law to receive or verify information about you from government agencies or regulatory bodies.

maya365 does not collect personal data from social media platforms or third-party data brokers for marketing or profiling purposes.

4 How We Use Your Personal Data

maya365 uses the personal data we collect for the following purposes:

maya365 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable law.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, maya365 processes your personal data on the following legal bases:

• Contractual necessity — Processing is necessary to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and delivery of gaming services.
• Legal obligation — Processing is required to comply with applicable Philippine laws and regulations, including anti-money laundering laws, KYC requirements, and regulatory reporting obligations.
• Legitimate interests — Processing is necessary for maya365's legitimate interests in fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided these interests are not overridden by your rights and freedoms.
• Consent — For certain processing activities, such as sending promotional communications and the use of non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Sharing Your Personal Data

maya365 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting services, customer support platforms, and fraud detection services. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

6.2 Regulatory and Law Enforcement Authorities

maya365 may disclose your personal data to government agencies, regulatory bodies, law enforcement authorities, or courts where required to do so by applicable Philippine law, court order, or regulatory directive. This includes disclosures required under anti-money laundering regulations and gaming regulatory requirements.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of maya365's business, your personal data may be transferred to the relevant successor entity. You will be notified of any such transfer and the privacy practices of the successor entity prior to the transfer taking effect.

6.4 With Your Consent

maya365 may share your personal data with other third parties where you have provided your explicit consent to such sharing. You may withdraw this consent at any time by contacting our Data Protection Officer.

7 Data Retention

maya365 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account and registration data — Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements.
• KYC and identity verification documents — Retained for a minimum of five (5) years from the date of verification or account closure, whichever is later.
• Transaction and financial records — Retained for a minimum of five (5) years in accordance with Philippine financial record-keeping regulations.
• Gaming activity data — Retained for the duration of your active account and for up to two (2) years following account closure.
• Customer support communications — Retained for up to three (3) years from the date of the interaction.
• Marketing preferences and consent records — Retained until you withdraw consent or for up to three (3) years from the last interaction, whichever is earlier.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with our data disposal procedures. Where data is anonymized, it may be retained indefinitely for statistical and analytical purposes without identifying you personally.

8 Cookies & Tracking Technologies

maya365 uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the Platform, maintain session security, and gather analytics data that helps us improve our services.

8.1 Types of Cookies We Use

• Strictly Necessary Cookies — Essential for the Platform to function correctly. These include session authentication cookies and security tokens. These cookies cannot be disabled without affecting core Platform functionality.
• Functional Cookies — Remember your preferences and settings (such as language preferences and responsible gaming tool configurations) to provide a more personalized experience.
• Analytics Cookies — Collect aggregated, anonymized data about how players use the Platform, including pages visited, session duration, and navigation paths. This data helps us identify areas for improvement.
• Marketing Cookies — Used to deliver relevant promotional content to you based on your interests and Platform activity. These cookies are only placed with your consent.

8.2 Managing Cookies

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. Please note that disabling strictly necessary cookies may impair your ability to use certain features of the maya365 Platform, including the ability to log in and maintain a gaming session.

For marketing and analytics cookies, you may withdraw your consent at any time by adjusting your cookie preferences within the Platform settings or by contacting our support team.

9 Data Security

maya365 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the maya365 Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls ensuring that only authorized personnel can access personal data, and only to the extent required for their specific job functions.
• Regular security assessments, vulnerability scanning, and penetration testing of the Platform infrastructure.
• Multi-factor authentication options for player accounts to reduce the risk of unauthorized access.
• Incident response procedures to detect, investigate, and respond to data security incidents in a timely manner.

While maya365 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, maya365 will notify you and the National Privacy Commission in accordance with the requirements of the Philippine Data Privacy Act.

10 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by maya365:

• Right to be Informed — You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfills that obligation.
• Right to Access — You have the right to request a copy of the personal data maya365 holds about you, along with information about how it is being processed.
• Right to Rectification — You have the right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure — You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object — You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability — You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Withdraw Consent — Where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to Lodge a Complaint — You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 14. We will respond to all verified requests within thirty (30) days of receipt, in accordance with the requirements of the DPA.

11 Children's Privacy

The maya365 Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine regulations governing online casino gaming. maya365 does not knowingly collect personal data from individuals under the age of 21.

If maya365 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the maya365 Platform, please contact us immediately using the details in Section 14.

Parents and guardians are encouraged to monitor the online activities of minors in their care and to make use of available parental control tools to prevent access to gambling platforms.

12 Third-Party Links

The maya365 Platform may contain links to third-party websites or services for informational or operational purposes. maya365 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

The inclusion of any link on the maya365 Platform does not constitute an endorsement of the linked site or its privacy practices. Your interactions with third-party sites are governed solely by the terms and privacy policies of those sites.

13 Updates to This Privacy Policy

maya365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is always displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how maya365 protects your personal data. Your continued use of the Platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.

14 Contact Us & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by maya365, please contact our Data Protection Officer (DPO). Our DPO is responsible for overseeing maya365's compliance with the Philippine Data Privacy Act and is your primary point of contact for all data privacy matters.

You may reach the maya365 Data Protection Officer and general support team through the following channels:

When submitting a data privacy request, please include your full name, registered email address, and a clear description of your request or concern. We will acknowledge receipt of your request within five (5) business days and provide a full response within thirty (30) days, in accordance with the requirements of the Philippine Data Privacy Act.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about how to file a complaint with the NPC is available through official Philippine government channels.