At mayawin, your personal data is treated with the same care we apply to your real-money balance — protected, handled responsibly, and never shared without a lawful basis. This Policy explains exactly what we collect, why we collect it, and how you can exercise your rights as a data subject under Philippine law.
Under Republic Act 10173 — the Philippines Data Privacy Act of 2012 — and mayawin's own data governance commitments, every registered player holds the following rights over their personal information.
You have the right to know what personal data mayawin collects, the specific purpose for which it is processed, and how long it is retained. This Privacy Policy is the primary instrument through which mayawin fulfils that obligation — written in plain, accessible language for Filipino players.
You may request a copy of the personal data mayawin holds about you at any time. If any information is inaccurate, incomplete, or out of date, you have the right to have it corrected. Rectification requests are processed within fifteen (15) business days of verified submission.
Subject to mayawin's legal retention obligations — which include PAGCOR anti-money laundering record-keeping requirements — you may request deletion of your personal data. mayawin will process erasure requests to the full extent permitted by applicable Philippine law and regulatory requirements.
You may object to the processing of your personal data for marketing, profiling, or any purpose not strictly necessary for the performance of your player account or fulfilment of a legal obligation. Objection to marketing communications can be exercised at any time through your account settings.
You may request a copy of your personal data in a structured, commonly used, machine-readable format. This right applies to data you have directly provided to mayawin, such as registration information and preference data, to the extent technically feasible under mayawin's systems.
If you believe mayawin has processed your personal data in a manner inconsistent with this Privacy Policy or Philippine data privacy law, you may lodge a complaint directly with mayawin's Data Protection Officer, or escalate to the National Privacy Commission (NPC) of the Philippines through its formal complaints process.
mayawin ("we", "us", "the Platform") is committed to protecting the privacy and personal data of every person who registers for, accesses, or interacts with the mayawin online casino and sports betting platform. This Privacy Policy ("Policy") sets out how mayawin collects, uses, stores, discloses, and protects your personal information in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC") of the Philippines.
For Filipino players, this means your personal data is governed by one of the most comprehensive data protection frameworks in Southeast Asia. mayawin treats compliance with the DPA not as a box to tick, but as an operational standard — because the trust Filipino players place in mayawin with their identity documents, mobile numbers, and payment details must be earned and maintained.
By registering for an account at mayawin or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein, to the extent consent is the applicable legal basis for a given processing activity.
The data controller responsible for the personal data collected through the mayawin platform is mayawin, the operator of mayawin.club. As data controller, mayawin determines the purposes and means by which personal data is processed and is responsible for ensuring that such processing complies with the DPA and all applicable NPC regulations.
mayawin has appointed a Data Protection Officer ("DPO") in accordance with the requirements of the DPA and NPC Circular No. 17-01. The DPO is responsible for overseeing compliance with this Policy, responding to data subject rights requests, and serving as the point of contact for the NPC on data privacy matters. Contact details for the DPO are provided in Section 15 of this Policy.
mayawin collects the following categories of personal data in connection with the operation of the platform. The specific data collected depends on the nature of your interaction with mayawin and the features you use:
| Category | Specific Data Elements | Primary Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number and document images, selfie photograph | KYC / Age Verification / AML Compliance |
| Contact Data | Philippine mobile number, email address (if provided) | Account registration, OTP delivery, support communications |
| Account Data | Username, encrypted password hash, account preferences, responsible gaming settings | Account management and personalisation |
| Financial Data | GCash/Maya account reference, bank account details (BPI, BDO, Metrobank), transaction amounts, deposit and withdrawal history | Payment processing, AML monitoring, withdrawal verification |
| Gaming Data | Game session records, wager history, win/loss records, session durations, game preferences | PAGCOR regulatory reporting, dispute resolution, responsible gaming monitoring |
| Technical Data | IP address, device type, operating system, browser type and version, session timestamps, cookies and tracking pixels | Platform security, fraud detection, performance optimisation |
| Communications Data | Live chat transcripts, email correspondence, support ticket records | Customer support, dispute resolution, quality assurance |
| Marketing Data | Promotion participation records, communication preferences, response to campaigns | Targeted marketing (consent-based) |
mayawin does not intentionally collect sensitive personal information ("SPI") as defined under Section 3(l) of the DPA — such as religious beliefs, health data, or sexual orientation — except where strictly required by law or regulatory obligation and only to the minimum extent necessary.
mayawin collects personal data through the following channels and mechanisms:
Under Section 12 of the Data Privacy Act of 2012, processing of personal data is lawful only where one or more of the following criteria apply. mayawin processes personal data under the following legal bases:
mayawin processes your personal data for the following specific purposes, each grounded in one of the legal bases identified in Section 5:
Your identity, contact, and account data are used to create, maintain, and manage your mayawin account — including verifying your age at registration, authenticating logins via OTP, managing your responsible gaming settings, and communicating account-critical information such as transaction confirmations and security alerts.
Financial data is used to process GCash, Maya, and bank deposits, execute withdrawal requests to your designated payment method, verify the source and destination of funds in compliance with AMLA requirements, and investigate any disputed or irregular transactions. mayawin applies a "same-payment-method withdrawal" policy as an AML safeguard, meaning withdrawals are directed to the same payment channel used for deposits where technically feasible.
Identity data — including government ID documents and selfie photographs — is processed to verify that you are who you say you are, that you are at least twenty-one (21) years of age, and that your account is not being used for identity fraud or financial crime. KYC data is processed by mayawin's KYC team and, where applicable, by contracted third-party identity verification providers who are bound by data processing agreements consistent with DPA requirements.
Gaming data, transaction records, and identity data are retained and, where required by PAGCOR regulation or court order, disclosed to regulatory authorities as part of mayawin's obligations as a PAGCOR-licensed operator. This includes providing player records, transaction data, and AML monitoring reports to PAGCOR and to the Anti-Money Laundering Council (AMLC) of the Philippines where required by law.
Gaming session data, deposit history, and loss data are monitored by mayawin's responsible gaming systems to identify patterns consistent with problem gambling — such as significantly escalating session durations, rapid successive deposits, or large single-session losses. Where such patterns are identified, mayawin may proactively reach out to the Player with responsible gaming resources or temporarily limit account activity in accordance with its duty of care obligations.
Where you have provided consent, mayawin may use your contact data and gameplay preferences to send personalised promotional communications — including information about new games, reload bonus offers, and seasonal promotions relevant to Philippine players. You may withdraw marketing consent at any time through your account settings or by contacting the mayawin Data Protection Officer, as described in Section 15.
mayawin does not sell your personal data to third parties. Disclosure of personal data to external parties occurs only in the following circumstances and under the following controls:
The mayawin website uses cookies — small text files placed on your device — and similar tracking technologies to support platform functionality, security, and analytics. The following categories of cookies are in use:
Most web browsers provide controls to manage and delete cookies. Note that disabling strictly necessary cookies will affect platform functionality. mayawin does not currently use third-party advertising or retargeting cookies on the mayawin.club platform.
mayawin implements technical and organisational security measures proportionate to the nature of the personal data processed. These measures include but are not limited to:
mayawin retains personal data for no longer than is necessary for the purpose for which it was collected, subject to any longer retention periods required by law or regulatory obligation. The following general retention periods apply:
Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-approved data disposal procedures.
As a data subject under the Philippine Data Privacy Act of 2012, you hold the rights summarised at the top of this page — and described in detail in Sections 16 through 22 of the DPA. To exercise any of these rights, including the right to access, rectify, erase, object to, or obtain a copy of your personal data, submit a written request to the mayawin Data Protection Officer using the contact details in Section 15.
To protect your personal data from unauthorised disclosure, mayawin requires identity verification before processing any data subject rights request. You will be asked to confirm your registered mobile number, account username, and submit a response to a security question or OTP. This is a security measure, not a barrier to rights exercise.
If you are not satisfied with mayawin's response to a data subject rights request or complaint, you may lodge a formal complaint with the National Privacy Commission of the Philippines. Information on how to contact and file a complaint with the NPC is available on the NPC's official government website.
The mayawin platform is strictly restricted to persons aged twenty-one (21) years and above. mayawin does not knowingly collect or process personal data from individuals under the age of 21. Age verification is conducted as part of the KYC process for all registered accounts.
If mayawin discovers that personal data has been collected from a person under the age of 21 — whether through a false date of birth at registration or any other mechanism — the relevant account will be closed immediately. The personal data of the underage individual will be deleted to the extent permitted by PAGCOR regulatory record-keeping requirements, and any deposited funds will be returned to the originating payment method net of forfeited winnings, as set out in the mayawin Terms & Conditions.
If a parent, guardian, or concerned party believes an underage individual has registered an account on the mayawin platform, they are encouraged to contact the mayawin Data Protection Officer immediately using the contact details in Section 15 so that appropriate action can be taken without delay.
Some personal data processed by mayawin — particularly gaming data processed by international game providers and technical data processed by cloud infrastructure providers — may be transferred to, stored in, or processed in countries outside the Republic of the Philippines.
Where such cross-border transfers occur, mayawin ensures that they are conducted in accordance with Section 21 of the Data Privacy Act and the NPC's applicable circulars on cross-border data flows. Specifically, mayawin ensures that the receiving entity is bound by data processing agreements providing a level of data protection that is not less protective than Philippine law, or that the transfer falls within a permitted basis under the DPA's cross-border transfer provisions.
mayawin does not transfer identity documents, KYC data, or Philippine government ID information to servers or processors located in jurisdictions without adequate data protection frameworks, except where compelled by Philippine court order or regulatory requirement.
mayawin reviews and, where necessary, updates this Privacy Policy periodically to reflect changes in applicable law, NPC guidance, PAGCOR regulatory requirements, or mayawin's data processing practices. The effective date at the top of this document identifies the version currently in force.
Where an update materially affects your privacy rights or the way your personal data is used, mayawin will notify you through a prominent notice on the mayawin.club platform and, where your contact details permit, by direct communication to your registered mobile number or email address. Notification will be provided at least seven (7) days before the updated Policy takes effect.
Your continued use of the mayawin platform after the effective date of an updated Privacy Policy constitutes acknowledgement of the update. If you do not accept the terms of an updated Policy, you should discontinue use of the platform and may request account closure in accordance with the Terms & Conditions.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by mayawin, you may contact the mayawin Data Protection Officer through the following channels:
mayawin aims to resolve all data privacy queries at first contact. Formal data subject rights requests will be escalated to the designated DPO for processing in accordance with the timeframes set out in Section 11 of this Policy.
mayawin holds your data to the same standard as your money — secured, respected, and only used for the right reasons. Register today and experience a PAGCOR-regulated casino built for Filipino players. 21+ only. Play responsibly.