maryph Casino — Privacy Policy

maryph Casino operates the online gaming platform accessible at maryph.vip (the "Platform"). As an operator of a real-money gaming platform subject to PAGCOR's regulatory oversight, maryph is required to collect and process certain categories of personal data from registered players. This includes data required for account creation, identity verification (Know Your Customer / KYC), payment processing, fraud prevention, and compliance with Philippine anti-money laundering legislation.

maryph is committed to handling your personal data with integrity, transparency, and security. We process data only for defined, legitimate purposes and take appropriate technical and organisational measures to protect it from unauthorised access, loss, or misuse. This Privacy Policy applies to all personal data collected from players who register on or interact with the maryph Platform from the Philippines.

For the purposes of the Philippine Data Privacy Act of 2012, maryph Casino is the Personal Information Controller (PIC) in respect of all personal data collected from players on the Platform. As PIC, maryph determines the purposes for which your personal data is processed and the means by which processing is carried out.

maryph has designated a Data Privacy Officer (DPO) who is responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. To contact the Data Privacy Officer directly with any privacy-related concern, please use the contact details provided in Section 16 of this policy.

maryph collects the following categories of personal data from players:

3.1 Identity Data

• Full legal name as it appears on government-issued identification
• Date of birth (used for age verification — players must be 21+)
• Nationality and country of residence
• Government ID number and type (e.g., PhilSys ID, SSS, UMID, Passport, Driver's License)
• Photographic image of the identification document submitted during KYC
• Selfie photograph taken during the KYC verification process

3.2 Contact Data

• Philippine mobile number (primary account identifier and OTP delivery channel)
• Email address (where provided by the player for account notifications)
• Current residential address in the Philippines

3.3 Financial Data

• GCash or Maya account number (where used as a payment method)
• Bank account details (name, account number, bank name) where bank transfer is used for deposits or withdrawals
• Transaction history including deposit amounts, withdrawal requests, and dates
• Payment method identification tokens provided by third-party payment processors (maryph does not store full card or e-wallet credentials directly)

3.4 Technical & Usage Data

• IP address and approximate geolocation at the time of login and transactions
• Device type, operating system, and browser information
• Session duration, login timestamps, and logout events
• Game play history including game titles, bet amounts, results, and timestamps
• Bonus redemption and wagering progress data
• Responsible gaming limit settings and any self-exclusion or cooling-off requests

3.5 Communications Data

• Records of live chat communications with maryph's support team
• Email correspondence sent to or from maryph's support address
• Formal complaints and dispute records

maryph collects your personal data through the following means:

• Direct submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawal requests, contacting support, or updating your account settings.
• Automated technical collection: Device and session data collected automatically when you access the Platform via your browser or the maryph mobile application, including IP address, device identifiers, and session logs.
• Transactional records: Financial data generated when you make deposits or withdrawal requests, as recorded by maryph's cashier system and third-party payment processors.
• Game system logs: Play data generated automatically by the Platform's game engine when you participate in any real-money game session on maryph.
• Third-party verification services: Where maryph uses third-party identity verification technology to assist in processing KYC submissions, data may be shared with and received from such providers in accordance with their own privacy and security standards.
• Cookies and tracking technologies: Data collected via cookies and similar technologies as described in Section 8 of this policy.

maryph processes your personal data under the following legal bases as recognised by the Philippine Data Privacy Act of 2012:

maryph uses the personal data we collect for the following specific purposes:

• To create, verify, and maintain your registered Player Account on the maryph Platform;
• To verify your identity and age (21+) in accordance with PAGCOR's Know Your Customer requirements;
• To process your deposit and withdrawal transactions via your chosen payment method (GCash, Maya, bank transfer, etc.);
• To detect, investigate, and prevent fraudulent activity, bonus abuse, money laundering, and other prohibited conduct;
• To enforce the responsible gaming limits, cooling-off periods, and self-exclusion requests you activate on your Account;
• To respond to your support requests, resolve disputes, and maintain records of communications;
• To send you transactional notifications directly related to your Account — such as deposit confirmations, withdrawal updates, and security alerts — via SMS to your registered mobile number;
• To send promotional communications about maryph bonuses and offers, only where you have consented to receive these;
• To comply with maryph's obligations under PAGCOR's licensing conditions, the Anti-Money Laundering Act, and other applicable Philippine law;
• To analyse aggregate, anonymised platform usage data to improve game selection, product features, and performance.

maryph will not use your personal data for any purpose that is incompatible with the purposes described above without first notifying you and, where required, obtaining your consent.

maryph does not sell, rent, or otherwise commercially transfer your personal data to any third party. We share personal data with third parties only where necessary to operate the Platform and deliver services to you, or where required by law. Third parties with whom maryph may share your data include:

• Third-party game providers: Game studios whose content is available on the maryph Platform may receive your account identifier and session data necessary for game delivery and RNG certification. They do not receive full identity data.
• Payment processors: Philippine e-wallet operators (GCash, Maya) and banking partners receive the financial data necessary to process your transactions. maryph does not store full payment credentials.
• KYC verification providers: Where maryph uses a third-party identity verification technology provider to assist with KYC processing, your identity document and selfie may be processed by that provider on maryph's behalf under a strict data processing agreement.
• Fraud detection and security services: Technology providers who assist maryph in detecting suspicious activity, duplicate accounts, and unauthorised access may process technical and session data on maryph's behalf.
• PAGCOR and Philippine regulatory authorities: maryph is required to disclose player data to PAGCOR and, where relevant, to the Anti-Money Laundering Council (AMLC) and other government bodies upon lawful request. maryph will comply with valid legal orders and cannot notify you in advance of such disclosures where prohibited by law.
• Professional advisors: Legal, accounting, and compliance advisors engaged by maryph may access player data where necessary in the course of providing professional services, subject to confidentiality obligations.

All third parties who process personal data on maryph's behalf are required to implement appropriate security measures and to process data only in accordance with maryph's instructions and this Privacy Policy.

maryph uses cookies and similar tracking technologies on the Platform to provide core functionality, maintain your login session, detect security threats, and analyse how the Platform is used. The following types of cookies may be set when you access maryph:

• Strictly necessary cookies: Required for the Platform to function. These include session cookies that maintain your login state while you are actively using the Platform. These cannot be disabled without preventing core functionality.
• Security cookies: Used to detect and prevent fraudulent activity, including session hijacking and cross-site request forgery attacks. These are essential and cannot be disabled.
• Performance and analytics cookies: Used to collect aggregated, anonymised data about how pages are accessed and how players navigate the Platform. This data helps maryph identify areas for improvement. These cookies do not identify you personally.
• Preference cookies: Used to remember your language settings and display preferences across sessions.

You may configure your browser to refuse cookies or to alert you when cookies are being set. However, disabling strictly necessary or security cookies will impair the functionality of the Platform and may prevent you from logging in or transacting. maryph does not use third-party advertising or cross-site tracking cookies.

maryph implements appropriate technical and organisational security measures to protect your personal data from unauthorised access, disclosure, loss, destruction, or alteration. These measures include:

• 256-bit SSL encryption for all data transmitted between your device and the maryph Platform;
• AES-256 encryption at rest for sensitive stored data including identity documents and financial records;
• Role-based access controls ensuring that only authorised personnel with a legitimate operational need can access identifiable player data;
• OTP two-factor authentication for all player account logins from unrecognised devices;
• Intrusion detection and session anomaly monitoring to identify and respond to suspicious access patterns in real time;
• Regular security audits of the Platform infrastructure and third-party integrations;
• Secure data deletion procedures applied when personal data reaches the end of its retention period.

maryph retains your personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any longer retention periods required by law. The following retention guidelines apply:

• Account data (identity, contact details): Retained for the lifetime of your Account and for five (5) years following Account closure, in compliance with PAGCOR record-keeping requirements and applicable AML obligations.
• KYC documentation (identity documents, selfies): Retained for five (5) years following Account closure or the completion of the last transaction, as required by the Anti-Money Laundering Act.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with PAGCOR financial audit requirements.
• Game play history: Retained for three (3) years for dispute resolution and regulatory reporting purposes, after which records are anonymised and retained only in aggregate statistical form.
• Communications and support records: Retained for three (3) years from the date of the communication to support dispute resolution and quality assurance.
• Technical logs (IP addresses, session data): Retained for twelve (12) months from the date of collection for security and fraud investigation purposes.

When retained data reaches the end of its applicable retention period, maryph will securely delete or irreversibly anonymise it in accordance with the Data Privacy Act's disposal requirements.

Under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights in relation to your personal data held by maryph. These rights may be exercised by contacting maryph's Data Privacy Officer using the details in Section 16:

The maryph Platform is strictly for adults aged 21 years and older. maryph does not knowingly collect personal data from persons under the age of 21. Age is verified as part of the mandatory KYC process required for all real-money accounts.

If maryph becomes aware that it has collected personal data from a person who was under 21 at the time of registration, that Account will be immediately suspended, all personal data associated with the Account will be securely deleted (except where retention is required by law), and any Real Money Balance will be returned via the original payment method. If you believe that a minor has registered an Account on maryph, please contact our support team immediately.

maryph's primary data infrastructure is based within the Philippines. However, certain third-party service providers — including some game providers and technical infrastructure partners — may process data outside the Philippines. Where such transfers occur, maryph ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that required by the Philippine Data Privacy Act.

These safeguards may include contractual clauses requiring the recipient to maintain equivalent data protection standards, or reliance on the recipient's participation in a recognised data protection certification framework. maryph will not transfer your data to a jurisdiction that lacks adequate data protection laws without implementing appropriate contractual protections.

maryph may send you promotional communications about bonuses, new game releases, and platform updates via SMS to your registered Philippine mobile number, but only where you have given your explicit consent to receive such communications. Consent is collected during the account registration process and can be withdrawn at any time.

To opt out of marketing communications from maryph at any time, you may update your communication preferences in your Account settings dashboard, or contact maryph's support team directly via live chat. Opting out of marketing communications will not affect transactional notifications related to your Account (deposit confirmations, withdrawal updates, security alerts, OTP codes) which are sent as part of the service and cannot be disabled while your Account is active.

maryph reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data processing practices, changes in applicable law, or improvements to our services. The updated effective date will always be displayed prominently at the top of this page.

Where a material change is made to this Privacy Policy — that is, a change that substantively affects your rights as a data subject or significantly changes how maryph uses your personal data — we will provide advance notice via SMS to your registered mobile number or via a prominent notification displayed upon login. Minor changes, such as corrections, clarifications, or updates to contact information, may take effect without individual notification.

Continued use of the maryph Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any amendment, please contact maryph's support team to discuss your options, including Account closure and data deletion where applicable.

For any questions, requests to exercise your data subject rights, or concerns about maryph's privacy practices, please contact maryph's Data Privacy Officer via the following channels:

• Live chat: Available 24 hours a day, 7 days a week via the support chat function on the Platform. This is the recommended channel for time-sensitive privacy requests.
• Email: [email protected] — for written privacy requests and formal complaints. maryph targets a response within five (5) business days for written correspondence.

If you are not satisfied with maryph's response to your privacy concern or believe that maryph is not handling your personal data in compliance with the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the regulatory body responsible for administering and enforcing the Data Privacy Act and accepts complaints from data subjects regarding alleged violations of their privacy rights.