99maya Privacy Policy

1. Information We Collect

1.1 Personal Information Provided During Registration

When you create a 99maya account, we collect the following personal information necessary to provide gaming services and comply with PAGCOR regulatory requirements:

• Identity Information: Full legal name, date of birth, gender, and nationality as required to verify that you meet the minimum age requirement of 21 years and are eligible to participate in online gaming activities in the Philippines.
• Contact Information: Email address, mobile phone number, and residential address in the Philippines. We use this information to communicate with you regarding your account, transactions, promotions, and important service updates.
• Account Credentials: Username and password that you create to access your 99maya account. Passwords are encrypted using industry-standard cryptographic hashing and are never stored in plain text format.
• Identification Documents: Government-issued identification such as Philippine Passport, Driver's License, UMID, or other PAGCOR-accepted identification documents submitted for age verification, identity confirmation, and anti-money laundering compliance purposes.

1.2 Financial and Transaction Information

To process deposits, withdrawals, and gaming transactions, 99maya collects and processes the following financial information:

• Payment Method Details: GCash mobile number, PayMaya account information, bank account numbers, and details of other payment methods used for deposits and withdrawals. We do not store full credit card numbers if credit/debit card payments are used.
• Transaction History: Records of all deposits, withdrawals, wagers placed, winnings, bonuses claimed, and other financial activities associated with your account. This information is maintained for regulatory compliance, dispute resolution, and financial reporting purposes.
• Source of Funds Documentation: In accordance with anti-money laundering regulations, we may request documentation regarding the source of funds for large deposits, including bank statements, payslips, or other financial records demonstrating legitimate fund sources.

1.3 Gaming Activity and Behavioral Data

99maya automatically collects information about your gaming activities and platform usage to improve services, detect fraud, and ensure responsible gaming practices:

• Gaming History: Games played, betting patterns, session durations, win/loss records, and preferences regarding game types, betting amounts, and gaming frequency.
• Device and Technical Information: IP address, device type (mobile phone model, tablet, desktop computer), operating system, browser type and version, screen resolution, and unique device identifiers.
• Usage Analytics: Pages visited, features accessed, time spent on different sections of the platform, navigation patterns, and interactions with promotional offers and customer support.
• Location Data: Geographic location derived from IP address to confirm that you are accessing 99maya services from within the Philippines as required by our PAGCOR license.

1.4 Communications and Support Interactions

When you contact 99maya customer support via live chat, email, or phone, we collect and retain records of these communications including:

• Content of support inquiries, complaints, feedback, and responses provided by our support team.
• Chat transcripts, email correspondence, and recordings of phone calls for quality assurance, training purposes, and dispute resolution.
• Feedback and survey responses you provide regarding your experience with 99maya services.

2. How We Use Your Information

2.1 Provision of Gaming Services

The primary purpose for which 99maya collects personal information is to provide, maintain, and improve our online gaming platform and services. Specific uses include:

• Creating and managing your player account, including authentication and access control.
• Processing deposits, withdrawals, and in-game transactions through our payment partners.
• Delivering gaming content including slots, live casino games, sports betting markets, and other entertainment products.
• Tracking gaming activity, maintaining accurate account balances, and ensuring fair play through monitoring systems.
• Delivering promotional bonuses, loyalty rewards, and special offers that you are eligible to receive.
• Providing customer support and responding to inquiries, complaints, and technical issues.

2.2 Regulatory Compliance and Legal Obligations

As a PAGCOR-licensed gaming operator, 99maya is subject to strict regulatory requirements that necessitate collection and processing of personal information:

• Age Verification: Verifying that all players are at least 21 years old as required by Philippine gaming regulations.
• Identity Verification: Confirming player identity to prevent fraud, money laundering, and account sharing.
• Anti-Money Laundering (AML) Compliance: Conducting customer due diligence, transaction monitoring, and suspicious activity reporting as mandated by the Anti-Money Laundering Act (Republic Act No. 9160, as amended).
• Responsible Gaming Enforcement: Monitoring gaming patterns to identify problem gambling behaviors, enforcing deposit limits and self-exclusion requests, and complying with PAGCOR responsible gaming requirements.
• Record Keeping: Maintaining transaction records, game outcomes, and player communications for periods required by PAGCOR regulations and Philippine law.
• Tax Reporting: Reporting winnings and other information to the Bureau of Internal Revenue as required by Philippine tax laws.

2.3 Platform Security and Fraud Prevention

99maya uses personal information to protect the security and integrity of our platform and prevent fraudulent activities:

• Detecting and preventing unauthorized account access, identity theft, and account takeover attempts.
• Identifying suspicious betting patterns, bonus abuse, collusion between players, and other forms of gaming fraud.
• Monitoring for technical exploitation, use of automated betting tools, and attempts to circumvent platform security measures.
• Investigating disputes between players, chargebacks, and other transaction-related issues.
• Maintaining audit trails and security logs for incident response and forensic analysis when security breaches occur.

2.4 Service Improvement and Personalization

With your consent where required by law, 99maya uses personal information to enhance your gaming experience:

• Analyzing usage patterns and gaming preferences to improve platform functionality and user interface design.
• Personalizing game recommendations, promotional offers, and content based on your interests and gaming history.
• Conducting market research and statistical analysis to understand player demographics and preferences.
• Testing new features, games, and platform improvements with selected player groups.

2.5 Marketing Communications

Subject to your communication preferences and applicable law, 99maya may use your contact information to send:

• Promotional emails regarding new games, special bonuses, tournaments, and exclusive offers.
• SMS messages about time-sensitive promotions, deposit bonuses, and platform updates.
• Push notifications through mobile devices if you have installed our progressive web app and granted notification permissions.

You may opt out of marketing communications at any time through account settings or by clicking unsubscribe links in emails. Note that you cannot opt out of transactional communications necessary for account management and service delivery.

3. Information Sharing and Disclosure

3.1 Service Providers and Business Partners

99maya shares personal information with trusted third-party service providers who assist in operating our platform and delivering services:

• Payment Processors: GCash, PayMaya, banks, and other payment service providers that process deposits and withdrawals. These entities receive only the financial information necessary to complete transactions.
• Game Providers: Software suppliers such as Evolution Gaming, Pragmatic Play, and other developers whose games appear on 99maya. They may receive limited gameplay data to provide their services but do not receive personally identifiable information unless necessary for specific game features.
• Identity Verification Services: Third-party identity verification and age verification providers who assist in confirming player identity and age using government databases and document authentication services.
• Customer Support Platforms: Cloud-based customer relationship management and live chat providers that help us deliver 24/7 support services.
• Cloud Infrastructure Providers: Hosting and server providers that maintain the technical infrastructure powering 99maya services.
• Security and Fraud Prevention Vendors: Companies providing anti-fraud tools, cybersecurity monitoring, and threat detection services.

All third-party service providers are contractually obligated to maintain confidentiality, use personal information only for specified purposes, and implement appropriate security measures consistent with Philippine data privacy standards.

3.2 Regulatory Authorities and Law Enforcement

99maya discloses personal information to regulatory bodies and law enforcement agencies when legally required or necessary to comply with legal obligations:

• PAGCOR: Reporting player activity, financial transactions, and operational data as required by gaming regulations and license conditions.
• National Privacy Commission: Cooperating with data privacy investigations and responding to lawful requests for information.
• Anti-Money Laundering Council (AMLC): Filing suspicious transaction reports and suspicious activity reports as mandated by anti-money laundering laws.
• Bureau of Internal Revenue: Reporting taxable winnings and other information required for tax enforcement purposes.
• Law Enforcement Agencies: Responding to valid court orders, subpoenas, and lawful requests from Philippine National Police, National Bureau of Investigation, or other authorized law enforcement entities investigating criminal activities.

3.3 Business Transfers

In the event that 99maya is involved in a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy proceedings, personal information may be transferred to successor entities or acquiring parties. You will be notified via email and prominent notice on our platform before your information is transferred and becomes subject to a different privacy policy.

3.4 With Your Consent

Apart from the disclosures described above, 99maya will not share your personal information with third parties without obtaining your explicit consent, except where permitted or required by law.

4. Data Security Measures

99maya implements comprehensive technical, administrative, and physical security measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure:

• Encryption: All data transmission between your device and 99maya servers uses TLS 1.3 encryption with 256-bit AES ciphers. Sensitive data at rest, including passwords and financial information, is encrypted using industry-standard cryptographic algorithms.
• Access Controls: Personal information is accessible only to authorized 99maya employees and contractors who require access to perform their job functions. Access is granted on a need-to-know basis and is protected by multi-factor authentication.
• Network Security: Firewalls, intrusion detection systems, and continuous security monitoring protect 99maya infrastructure against cyber threats and unauthorized access attempts.
• Secure Data Centers: Personal information is stored in secure data centers with physical access controls, 24/7 surveillance, redundant power systems, and disaster recovery capabilities.
• Regular Security Audits: Independent security firms conduct regular penetration testing, vulnerability assessments, and security audits of 99maya systems and processes.
• Employee Training: All 99maya staff receive mandatory training on data privacy, security best practices, and proper handling of personal information.
• Incident Response: We maintain detailed incident response plans to detect, contain, and remediate security breaches promptly should they occur.

While 99maya employs industry-leading security measures, no system is completely impenetrable. We cannot guarantee absolute security of personal information transmitted over the internet or stored on our systems. You are responsible for maintaining the confidentiality of your account credentials and should immediately notify us if you suspect unauthorized access to your account.

5. Data Retention

99maya retains personal information for as long as necessary to fulfill the purposes described in this Privacy Policy and comply with legal and regulatory obligations:

• Active Accounts: Personal information associated with active player accounts is retained for the duration of account activity and as long as the account remains open.
• Closed Accounts: After account closure, personal information is retained for a minimum of five years to comply with PAGCOR record-keeping requirements, anti-money laundering regulations, and tax law obligations. Financial transaction records and gaming history may be retained for longer periods as required by law.
• Marketing Communications: Contact information for marketing purposes is retained until you opt out of promotional communications or your account is closed.
• Legal Holds: Personal information subject to pending litigation, investigation, or regulatory inquiry is retained until the matter is resolved and retention is no longer legally required.

Upon expiration of applicable retention periods, personal information is securely deleted or anonymized such that it can no longer be associated with an identifiable individual.

6. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information held by 99maya:

• Right to Information: You have the right to be informed whether 99maya is processing your personal information and to receive details about such processing.
• Right to Access: You may request access to your personal information and obtain copies of data we hold about you.
• Right to Correction: You may request correction of inaccurate or incomplete personal information. You can update most account information directly through your account settings.
• Right to Erasure: You may request deletion of your personal information subject to legal and regulatory retention requirements that may prevent immediate deletion.
• Right to Object: You may object to processing of your personal information for direct marketing purposes at any time. You may also object to processing based on legitimate interests where such interests are overridden by your privacy rights.
• Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, and machine-readable format where technically feasible.
• Right to Lodge Complaints: You may file complaints regarding 99maya's data processing practices with the National Privacy Commission if you believe your privacy rights have been violated.

To exercise these rights, contact our Data Protection Officer at the email address provided in the Contact Information section. We will respond to all requests within the timeframes required by Philippine data privacy law. Note that certain requests may be subject to verification of your identity and legal limitations that prevent full compliance in some circumstances.

7. International Data Transfers

While 99maya primarily operates within the Philippines and stores personal information on servers located in the Philippines and Southeast Asia, some service providers may process data outside the Philippines. Where personal information is transferred internationally, 99maya ensures that:

• Adequate data protection standards equivalent to Philippine law are maintained through contractual safeguards, standard data protection clauses, or reliance on jurisdictions deemed adequate by the National Privacy Commission.
• Service providers comply with internationally recognized data protection frameworks and implement appropriate security measures.
• Transfers are made only to the extent necessary for the provision of services and fulfillment of legitimate business purposes.

8. Children's Privacy

99maya services are intended exclusively for individuals 21 years of age or older. We do not knowingly collect personal information from individuals under the age of 21. If we discover that we have inadvertently collected personal information from a minor, we will immediately delete such information from our systems and close any associated accounts. Parents or guardians who believe their child has provided personal information to 99maya should contact us immediately so we can take corrective action.

9. Cookies and Tracking Technologies

99maya uses cookies, web beacons, and similar tracking technologies to enhance platform functionality, analyze usage patterns, and deliver personalized experiences. Cookies are small text files stored on your device that help us recognize you when you return to our platform. We use:

• Essential Cookies: Necessary for platform operation, authentication, and security. These cookies cannot be disabled without affecting core functionality.
• Performance Cookies: Collect anonymous information about how you use our platform to help us improve performance and user experience.
• Functionality Cookies: Remember your preferences and settings to provide enhanced features and personalized content.
• Advertising Cookies: Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns where you have consented to such use.

Most web browsers allow you to control cookies through browser settings. However, disabling certain cookies may limit your ability to use some platform features. For more detailed information about our use of cookies, please refer to our separate Cookie Policy available on the 99maya website.

10. Changes to This Privacy Policy

99maya reserves the right to update this Privacy Policy periodically to reflect changes in our data practices, legal requirements, or business operations. Material changes will be communicated through email notification to your registered email address and prominent notice on our platform at least 30 days before the updated policy takes effect. Your continued use of 99maya services after the effective date of changes constitutes acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy regularly to stay informed about how we protect your personal information.

11. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or 99maya's data processing practices, please contact our Data Protection Officer:

• Email: [email protected]
• Customer Support: Available 24/7 via live chat on the platform or email at [email protected]
• Data Protection Officer: Direct inquiries specifically about data privacy and rights requests to [email protected]

We aim to respond to all privacy-related inquiries within 15 business days as required by the Data Privacy Act. For urgent matters or suspected security incidents, please contact us immediately through live chat for faster response.