maya23 Privacy Policy

1. Introduction

maya23 is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy ("Policy") applies to all personal information collected through maya23.vip, its mobile applications, and any communication channels operated by maya23, including live chat, Messenger, Viber, and email support.

maya23 complies with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, its Implementing Rules and Regulations, and all relevant issuances of the National Privacy Commission (NPC). In contexts where additional data protection standards apply, maya23 will observe those standards as required.

maya23 acts as the Personal Information Controller (PIC) in respect of the personal data it processes directly. Where maya23 engages third-party service providers who process data on its behalf, those providers act as Personal Information Processors (PIP) and are contractually bound to observe appropriate data protection obligations.

2. Personal Data We Collect

maya23 collects personal data through multiple channels in the course of providing its services. The categories of data collected include:

• Identity Data — full legal name, date of birth, nationality, and government-issued identification documents (e.g., passport, PhilSys ID, driver's licence, UMID) provided during account verification.
• Contact Data — mobile phone number, email address, and where provided, Messenger or Viber handles.
• Account Data — username, account ID, account registration date, login history, and preferences.
• Financial Data — deposit and withdrawal transaction records, payment method identifiers (e.g., GCash wallet reference, bank account details), and transaction history. maya23 does not store full card numbers — payment card data is processed by PCI-DSS compliant payment processors.
• Gaming Data — game session history, wagers placed, game outcomes, bonus usage, and responsible gaming limit settings.
• Technical Data — IP address, device type, operating system, browser type, session duration, and pages visited, collected through standard web analytics and security monitoring.
• Communications Data — records of your interactions with our support team via live chat, email, Messenger, or Viber, including chat transcripts and support ticket histories.
• KYC Data — documentary evidence collected to satisfy Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations, including scanned copies of identification and proof of address documents.

3. How We Use Your Personal Data

maya23 uses collected personal data for the following purposes:

• Account Management — to create, maintain, verify, and administer your player account.
• Service Delivery — to provide access to games, process deposits and withdrawals, and deliver all features of the maya23 platform.
• Identity Verification & Fraud Prevention — to verify your identity, confirm your age (21+), detect and prevent fraud, money laundering, and account abuse.
• Regulatory Compliance — to fulfil our obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), the Data Privacy Act, and other applicable Philippine laws.
• Customer Support — to respond to your enquiries, resolve disputes, and administer responsible gaming tools on your behalf.
• Marketing — to send you promotional communications about bonuses, new games, and platform features, where you have provided consent or where legitimate interest applies. You may opt out at any time via account settings or by contacting support.
• Platform Improvement — to analyse usage data for the purpose of improving the platform's performance, user experience, and game selection.
• Security — to monitor for suspicious activity, protect our systems, and investigate any reported security incidents.

4. Legal Basis for Processing

maya23 processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contract — processing is necessary for the performance of the contract between you and maya23 (i.e., the Terms & Conditions you agreed to on registration).
• Legal Obligation — processing is required to comply with PAGCOR regulations, AML obligations, NPC requirements, and other applicable Philippine law.
• Legitimate Interest — processing is necessary for maya23's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights.
• Consent — for marketing communications and certain optional data processing activities, maya23 relies on your freely given, specific, and informed consent. You may withdraw consent at any time without detriment to your account.

5. Data Sharing and Disclosure

maya23 does not sell your personal data to third parties. We may share your data in the following limited circumstances:

• Game Providers — game session data (player ID, wager amounts, session token) is shared with the relevant game provider solely to facilitate game play. Game providers are contractually prohibited from using this data for any other purpose.
• Payment Processors — financial data necessary to process your deposit or withdrawal is shared with the relevant payment provider (e.g., GCash, BPI, BDO). These providers operate under their own privacy policies and applicable Philippine payment regulations.
• Regulatory Authorities — maya23 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or law enforcement authorities when required by law or a valid legal order.
• Service Providers — trusted third-party technology and analytics providers who assist maya23 in operating the platform may have access to limited data under strict contractual data processing agreements.
• Business Transfers — in the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments.

6. Data Retention

maya23 retains personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulation. Specifically:

• Account and transaction data is retained for a minimum of five (5) years following account closure, as required by AML regulations.
• KYC documentation is retained for the period specified by PAGCOR and AML regulations, typically five (5) years from the date of last activity.
• Support communications are retained for two (2) years from the date of the interaction.
• Technical and analytics data is retained in aggregated, anonymized form after twelve (12) months.

When data is no longer required for its original purpose and no legal retention obligation applies, maya23 will securely delete or anonymize it.

7. Security Measures

maya23 implements industry-standard technical and organizational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption on all data transmissions.
• Encrypted storage of sensitive data at rest.
• Access controls limiting data access to authorized personnel on a need-to-know basis.
• Two-factor authentication options for player accounts.
• Regular security audits and vulnerability assessments.
• Incident response procedures in compliance with NPC breach notification requirements.

In the event of a personal data breach that is likely to result in risk to your rights, maya23 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected individuals without undue delay as required by law.

8. Cookies and Tracking Technologies

maya23 uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies used include:

• Essential Cookies — required for the platform to function, including session management and security tokens. These cannot be disabled.
• Functional Cookies — used to remember your preferences, such as language settings and display options.
• Analytics Cookies — used to collect aggregated data about platform usage to help us improve features and performance. Analytics data is anonymized where possible.

You can manage cookie preferences through your browser settings. Disabling non-essential cookies may affect certain features of the platform. By continuing to use maya23 after being presented with a cookie notice, you consent to the use of cookies as described above.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by maya23:

• Right to be Informed — the right to know what personal data we hold about you and how it is used.
• Right of Access — the right to request a copy of your personal data in a structured, commonly used format.
• Right to Rectification — the right to have inaccurate or incomplete data corrected.
• Right to Erasure — the right to request deletion of your personal data where no legitimate legal basis for retention exists. Note that certain data must be retained to satisfy legal and regulatory obligations and cannot be erased.
• Right to Object — the right to object to the processing of your personal data on grounds of legitimate interest, including direct marketing.
• Right to Data Portability — the right to receive your data in a machine-readable format where processing is based on consent or contract and is carried out by automated means.
• Right to Lodge a Complaint — the right to lodge a complaint with the National Privacy Commission if you believe your data rights have been violated.

To exercise any of these rights, contact maya23's Data Protection Officer via the contact details in Section 13. We will respond within thirty (30) days of receiving a valid request.

10. Children and Minors

maya23 is strictly for players aged 21 and above. We do not knowingly collect personal data from individuals under 21 years of age. If we become aware that personal data has been collected from an underage individual, we will immediately terminate the associated account, delete the data, and report the matter as required by applicable law. Parents or guardians who believe their minor child has registered on maya23 should contact support immediately.

11. Cross-Border Data Transfers

Some of maya23's third-party service providers, including game providers and technology infrastructure providers, may be located outside the Philippines. Where personal data is transferred to recipients in other countries, maya23 ensures that appropriate safeguards are in place — including contractual data transfer agreements — to provide a level of data protection consistent with the Data Privacy Act of 2012.

12. Updates to This Policy

maya23 may update this Privacy Policy from time to time to reflect changes in our data practices, platform features, or applicable law. Material updates will be communicated to registered players via email or a prominent notice on the platform prior to the effective date. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of maya23 after the effective date of any update constitutes acceptance of the revised Policy.

13. Contact & Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact maya23's Data Protection Officer (DPO) through the following channels:

• 24/7 Live Chat — available directly on maya23.vip
• Messenger & Viber — support handles available on the platform
• Email: [email protected]

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have not been adequately addressed. NPC contact information is publicly available through official Philippine government channels.