maya23 Privacy
Policy

This Privacy Policy ("Policy") is issued by maya23 ("maya23," "we," "us," or "our") and applies to all personal data collected from players, registered users, and visitors who interact with the maya23 online gaming platform available at maya23.club and all associated services ("Platform").

maya23 is committed to protecting the privacy of all persons whose personal data we process. This Policy is intended to be read in plain language alongside the more technical legal requirements that apply to our operations in the Philippines. We encourage you to read it in full so you understand how your information is handled before you use the Platform.

This Policy should be read together with the maya23 Terms & Conditions, which govern your overall use of the Platform. Capitalized terms used in this Policy but not defined herein have the meanings given to them in the Terms & Conditions.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, maya23 is the personal information controller responsible for the personal data it collects and processes in connection with the Platform and Services.

As data controller, maya23 determines the purposes and means of processing your personal data and is accountable for ensuring that such processing is carried out in accordance with applicable Philippine data privacy law. Our Data Protection Officer can be reached through the contact details provided in Section 16 of this Policy.

maya23 collects the following categories of personal data in connection with the operation of the Platform:

3.1 Registration and Identity Data

• Full legal name;
• Date of birth;
• Registered Philippine mobile number;
• Email address (where provided);
• Username and encrypted password;
• Government-issued identification document details (collected during KYC verification — see Section 6.3).

3.2 Financial Data

• GCash account details (mobile number associated with your GCash wallet);
• PayMaya account details where applicable;
• Bank account details (BPI, BDO, Metrobank) where used for deposits or withdrawals;
• Transaction history, including deposit amounts, withdrawal requests, and timestamps.

3.3 Gaming and Behavioral Data

• Game participation history — games played, bets placed, outcomes, winnings, and losses;
• Sports betting history — markets selected, odds, stake amounts, and settlement results;
• Session duration, login and logout timestamps;
• Responsible gaming settings selected and any limits or exclusions applied.

3.4 Technical and Device Data

• IP address at the time of login and transactions;
• Device type, operating system, and browser information;
• Geolocation data where required for regulatory compliance;
• Cookie identifiers and similar tracking data (see Section 8).

3.5 Communications Data

• Content of communications submitted to the maya23 customer support team via live chat or email;
• Records of opt-in or opt-out decisions regarding marketing communications.

maya23 collects personal data through the following channels:

• Directly from you: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal request, contacting customer support, or updating your account settings;
• Automatically through the Platform: Technical and device data collected through cookies, session logs, and analytics tools as you interact with the maya23 Platform (see Section 8);
• From payment service providers: Transaction confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and Instapay processed in connection with your deposits and withdrawals;
• From identity verification services: Data returned by third-party KYC verification providers engaged to confirm the validity of identification documents submitted during account verification;
• From fraud prevention and analytics services: Risk signals and device fingerprint data from security and fraud-monitoring tools used to protect the integrity of the Platform.

Under the Data Privacy Act of 2012, maya23 processes your personal data on the following lawful bases:

• Contractual necessity: Processing required to perform the Services under the Terms & Conditions — including account creation, game participation, payment processing, and customer support;
• Legal obligation: Processing necessary to comply with applicable Philippine law, including anti-money laundering obligations, age verification requirements, and regulatory reporting duties;
• Legitimate interests: Processing required to protect the security of the Platform, prevent fraud, monitor responsible gaming indicators, and conduct analytics to improve our Services — where these interests are not overridden by your fundamental rights;
• Consent: Processing of your data for direct marketing communications, where you have provided your explicit consent and have the right to withdraw it at any time.

6.1 Service Delivery and Account Management

We use your personal data to create and maintain your maya23 account, process your deposits and withdrawals in Philippine Peso, deliver game and betting services, manage your responsible gaming settings, and provide customer support when you contact our team.

6.2 Fraud Prevention and Platform Security

maya23 uses technical and behavioral data to detect, investigate, and prevent unauthorized account access, fraud, money laundering, and other prohibited conduct. This includes analysis of IP addresses, device fingerprints, and transaction patterns to identify anomalies that may indicate account compromise or abuse.

6.3 Identity Verification (KYC)

We process identity data — including copies of government-issued identification documents — to verify that you are who you say you are, that you are 21 years of age or older, and that your registered payment methods are held in your own name. This is a legal obligation that applies to all maya23 accounts before any withdrawal is processed.

6.4 Regulatory Compliance

maya23 is required to maintain records of player transactions, identity verifications, and gaming activity for regulatory compliance purposes, including compliance with Philippine anti-money laundering laws and applicable gaming regulations. These records are retained for the periods specified in Section 9.

6.5 Responsible Gaming Monitoring

Gaming and session data is used to monitor player activity for signs of problem gambling behavior. This includes tracking session frequency, deposit patterns, and voluntary limit activations. The purpose is to support the responsible gaming tools available to all maya23 players and to allow us to intervene where indicators of harm are identified.

6.6 Marketing Communications

With your consent, maya23 may send you promotional communications about new games, bonuses, promotions, and platform updates via SMS to your registered Philippine mobile number or by email. You may withdraw this consent at any time by contacting support or updating your account communication preferences (see Section 12).

6.7 Platform Analytics and Improvement

Aggregated and anonymized usage data is used to understand how players interact with the Platform, which game categories are most popular, and where technical improvements are needed. This data is not linked back to individual identifiable players in its analyzed form.

maya23 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients for the purposes described in this Policy:

• Game providers: JILI Games, Pragmatic Play, PG Soft, NetEnt, Hacksaw Gaming, Red Tiger, Nolimit City, Spribe, and other game content providers may receive session data necessary to operate the specific game you are playing. These providers process data only to deliver game services and are bound by contractual data protection obligations;
• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and Instapay receive transaction data necessary to process your deposits and withdrawals. These providers operate under their own privacy policies and applicable Philippine financial regulations;
• KYC verification providers: Third-party identity verification services engaged to validate identification documents submitted during account verification;
• Fraud and security vendors: Third-party security and analytics providers engaged to detect fraud, prevent money laundering, and protect the integrity of the Platform;
• Regulatory and law enforcement authorities: maya23 may disclose personal data to Philippine regulatory bodies, law enforcement agencies, or courts where required to do so by law, court order, or regulatory direction. This includes mandatory reporting under Philippine anti-money laundering legislation;
• Professional advisors: Legal, accounting, and compliance professionals engaged by maya23 who are bound by obligations of confidentiality.

The maya23 Platform uses cookies and similar tracking technologies to operate core platform functions, analyze usage, and support security. Cookies are small text files stored on your device when you visit the Platform.

8.1 Types of Cookies Used

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without breaking Platform functionality;
• Functional cookies: Used to remember your preferences such as language settings and responsible gaming choices;
• Analytics cookies: Used to collect aggregated data about how players use the Platform. This data helps us understand which games are popular, how players navigate the lobby, and where technical performance can be improved;
• Security and fraud prevention cookies: Used to identify suspicious access patterns and protect against account takeover and fraud.

8.2 Managing Cookies

You may manage cookie settings through your browser settings at any time. Please note that disabling strictly necessary cookies will affect your ability to use core platform functions, including account login and game play. Disabling analytics or functional cookies will not prevent you from using the Platform but may result in a less personalized experience.

maya23 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to longer retention periods required by applicable law. The following general retention guidelines apply:

• Active accounts: Personal data associated with an active player account is retained for the duration of the account's active status plus any applicable statutory retention period after closure;
• Transaction and KYC records: Financial transaction records and identity verification documents are retained for a minimum of five (5) years from the date of the transaction or the closure of the account, whichever is later, consistent with Philippine anti-money laundering record-keeping requirements;
• Support communications: Customer support interactions are retained for a period of two (2) years from the date of the interaction;
• Marketing consent records: Records of marketing consent and opt-out are retained for as long as the associated account remains active or until the consent is revoked, plus a reasonable period for audit purposes.

When personal data is no longer required for any lawful purpose, maya23 will securely delete or irreversibly anonymize it. Where anonymization is not technically feasible, data will be securely deleted.

maya23 implements a layered set of technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption for all data transmitted between your device and the maya23 servers — the same encryption standard used by Philippine banks and major financial services;
• Password hashing — account passwords are stored using industry-standard cryptographic hashing algorithms. Plain-text passwords are never stored;
• Access controls — internal access to personal data is restricted on a need-to-know basis. Employees and contractors with access to personal data are bound by confidentiality obligations;
• Two-factor authentication available to players for account login, providing an additional layer of protection against unauthorized access;
• Fraud monitoring systems — automated systems monitor account activity in real time for indicators of unauthorized access or suspicious behavior;
• Regular security reviews of Platform infrastructure, access logs, and data handling procedures.

Despite the measures above, no method of electronic transmission or storage is 100% secure. In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, maya23 will notify you and the National Privacy Commission as required by applicable law.

The maya23 Platform is strictly intended for persons who are 21 years of age or older. maya23 does not knowingly collect personal data from persons under the age of 21.

Age verification is conducted as part of the KYC process before any withdrawal is processed. All players are required to confirm their date of birth during registration and to provide documentary proof of age upon request. Providing false information about your age during registration is a violation of the Terms & Conditions and applicable law.

maya23 may send you marketing communications about promotions, new games, bonuses, and platform news via SMS to your registered Philippine mobile number, or by email where provided. We will only send you marketing communications where you have given your explicit consent to receive them, whether during registration or at a later stage through your account settings.

12.1 Opting Out

You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your account settings dashboard;
• Contacting the maya23 support team via live chat and requesting to be removed from marketing communications;
• Following the unsubscribe instructions included in any marketing email sent by maya23.

Please note that opting out of marketing communications does not affect your ability to receive transactional communications that are necessary for the operation of your account, such as deposit confirmation notifications, withdrawal processing updates, KYC request notifications, or security alerts.

As a platform that partners with game providers and technology vendors operating internationally — including providers based outside the Philippines — some personal data may be transferred to, stored in, or processed in countries other than the Philippines in connection with the delivery of game services, fraud prevention, and Platform operations.

Where personal data is transferred outside the Philippines, maya23 takes steps to ensure that appropriate safeguards are in place to protect that data consistent with the requirements of the Data Privacy Act of 2012. These safeguards may include data processing agreements with standard contractual clauses, reliance on adequacy determinations where applicable, or other mechanisms recognized by the National Privacy Commission.

By using the maya23 Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the delivery of the Services described in this Policy.

To exercise any of your data rights described in this Policy — including rights of access, rectification, erasure, objection, or data portability — please contact the maya23 Data Protection Officer or customer support team using the details in Section 16.

When submitting a data rights request, please include:

• Your full name and registered mobile number or email address associated with your maya23 account;
• A clear description of the right you wish to exercise;
• Sufficient information to allow us to locate and identify the specific data your request relates to.

maya23 will respond to valid data rights requests within the timeframe required under applicable Philippine data privacy law. We may request additional information to verify your identity before processing a request, to ensure we do not disclose or delete data belonging to any person other than the verified account holder.

maya23 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via their registered mobile number or email address and update the "Last updated" date at the top of this document.

The current version of this Policy is always available at maya23.club/privacy-policy. Your continued use of the maya23 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. If you do not accept a revised Policy, you should close your account and cease using the Platform.

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by maya23, please contact us using the following channels:

• Live Chat: Available 24/7 directly within the maya23 Platform after login — the fastest way to reach the support team;
• Email: [email protected] — for data privacy inquiries directed to the Data Protection Officer, please include "Privacy Request" in the subject line;
• Support Hours: 24 hours a day, 7 days a week, including Philippine public holidays.

If you are not satisfied with our response to a data privacy concern, you have the right to escalate the matter to the National Privacy Commission of the Philippines, which is the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.