At phmasaya, your privacy is not an afterthought — it is a core commitment. This Privacy Policy explains exactly what personal data phmasaya collects from Filipino players, why we collect it, how we use and protect it, and what rights you have under Philippine law. We encourage you to read this document carefully before registering your phmasaya account.
phmasaya ("phmasaya," "we," "us," or "our") is committed to protecting the privacy and personal data of all players who access and use the phmasaya online casino platform. This Privacy Policy has been prepared in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC) of the Philippines.
This Privacy Policy applies to all personal data collected through the phmasaya website, mobile-optimized interfaces, customer support channels, and any other touchpoints through which you interact with phmasaya. It applies to all registered players, prospective players, and visitors to the phmasaya platform.
By registering a phmasaya account or continuing to use the phmasaya platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Privacy Policy, you must not register or continue using phmasaya.
phmasaya collects the following categories of personal data from players and platform users:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | Full legal name, date of birth, government-issued ID number, nationality | Mandatory |
| Contact Data | Email address, mobile number, residential address (city, province) | Mandatory |
| Financial Data | GCash number, Maya account, bank account details, transaction history | Mandatory |
| Verification Data | Copies of government-issued ID, selfie photos for KYC verification | Mandatory |
| Gaming Data | Game history, bet amounts, win/loss records, session duration, bonus usage | Automatic |
| Technical Data | IP address, device type, browser type, operating system, login timestamps | Automatic |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | When provided |
phmasaya does not collect sensitive personal information beyond what is strictly necessary for identity verification, regulatory compliance, and the provision of gaming services. phmasaya does not collect biometric data beyond standard KYC photo verification.
phmasaya collects personal data through the following means:
phmasaya processes your personal data for the following specific, legitimate purposes:
phmasaya will not process your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or as otherwise required by law.
Under the Data Privacy Act of 2012, phmasaya processes your personal data on the following legal bases:
phmasaya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. phmasaya may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
All third parties with whom phmasaya shares personal data are required to process that data in accordance with applicable Philippine data privacy law and phmasaya's data processing standards.
phmasaya retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:
Upon expiry of the applicable retention period, phmasaya will securely delete or anonymize your personal data in accordance with NPC guidelines.
phmasaya implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
While phmasaya takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phmasaya account credentials and for notifying phmasaya immediately of any suspected unauthorized access.
phmasaya uses cookies and similar tracking technologies to operate and improve the platform. The following categories of cookies are used:
You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not affect your ability to access phmasaya's core gaming services, though some features may be limited.
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phmasaya:
You have the right to be informed about how phmasaya collects and processes your personal data, as set out in this Privacy Policy.
You may request a copy of the personal data phmasaya holds about you, along with information about how it is being processed.
You may request correction of any inaccurate or incomplete personal data phmasaya holds about you.
You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phmasaya's legal retention obligations.
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider.
To exercise any of these rights, please contact phmasaya's Data Protection Officer (DPO) using the contact details in Section 13. phmasaya will respond to all verified data subject requests within fifteen (15) business days, as required by the NPC.
The phmasaya platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phmasaya does not knowingly collect personal data from individuals under the age of 21. If phmasaya discovers that personal data has been collected from a person under 21, that account will be immediately closed, all data will be deleted, and any funds will be returned to the verified payment source.
If you believe that a minor has registered a phmasaya account, please contact phmasaya support immediately so that appropriate action can be taken.
ph masaya reserves the right to update this Privacy Policy at any time to reflect changes in Philippine law, NPC guidelines, PAGCOR regulations, or phmasaya's data processing practices. When material changes are made, phmasaya will notify registered players via email or an in-platform notification prior to the changes taking effect.
The date of the most recent revision is displayed at the top of this page. Your continued use of the phmasaya platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this page periodically.
phmasaya has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:
If you are not satisfied with phmasaya's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.
Six ways phmasaya keeps your personal data safe and respected
phmasaya processes all player data in full compliance with the Philippine Data Privacy Act of 2012 and NPC regulations. Your rights as a Filipino data subject are fully respected.
All data transmitted between your device and phmasaya's servers is protected by TLS encryption. Sensitive data at rest — including financial records and ID documents — is encrypted at the storage level.
phmasaya does not sell, rent, or trade your personal data to third-party marketers. Data sharing is limited strictly to payment processors, KYC partners, and regulatory authorities as required by law.
phmasaya has appointed a Data Protection Officer as required by RA 10173. Your data subject requests are handled by a dedicated privacy professional within 15 business days.
phmasaya clearly distinguishes between essential and non-essential cookies. Analytics and marketing cookies are only activated with your explicit consent, which you can withdraw at any time.
phmasaya retains your data only as long as legally required — typically 5 years for financial records under AMLA. After retention periods expire, data is securely deleted or anonymized per NPC guidelines.
Your data is protected. Your privacy is respected. Join Filipino players from Manila, Cebu, Davao, and across the Philippines who trust phmasaya for secure, fair, and responsible online gaming.