macauph Privacy Policy

macauph ("we", "us", "our") operates the online gaming platform accessible at macauph.app. We are committed to protecting the privacy and personal data of every individual who visits, registers on, or interacts with the macauph platform ("you", "your", "Player").

This Privacy Policy describes how macauph collects, uses, stores, shares, and protects your personal information. It also explains the rights available to you under Republic Act No. 10173, the Data Privacy Act of 2012 (DPA), and the implementing rules and regulations issued by the National Privacy Commission (NPC) of the Philippines.

By accessing the macauph platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the platform immediately.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, macauph is the Personal Information Controller (PIC) in respect of the personal data collected through the macauph platform. As PIC, macauph determines the purposes and means of processing your personal information.

Where macauph engages third-party service providers to process personal data on its behalf (for example, payment processors, KYC verification providers, or cloud hosting services), those providers act as Personal Information Processors (PIPs) and are contractually bound to process data only on macauph's documented instructions and in compliance with the DPA.

macauph collects the following categories of personal data, depending on how you interact with the platform:

macauph collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automatically — when you access the macauph platform, our servers and analytics tools automatically record technical and usage data including your IP address, device identifiers, and browsing behaviour on the platform.
• From third parties — macauph may receive identity verification data from licensed KYC/AML service providers, fraud detection signals from payment processors, and age verification confirmations from identity verification partners. All such third parties are contractually required to share data with macauph only in compliance with applicable law.

macauph processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

• Account registration and management — to create and maintain your macauph account, verify your identity, and provide access to platform features. Legal basis: Performance of contract.
• KYC and age verification — to confirm that you are at least 21 years of age and to comply with PAGCOR licensing requirements and anti-money laundering (AML) obligations. Legal basis: Legal obligation.
• Payment processing — to process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers, and to verify that payment methods are registered in your name. Legal basis: Performance of contract.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, account abuse, and unauthorized access. Legal basis: Legitimate interests / Legal obligation.
• Responsible gaming compliance — to monitor gaming behaviour, apply responsible gaming limits, and respond to self-exclusion requests. Legal basis: Legal obligation / Legitimate interests.
• Customer support — to respond to your enquiries, resolve disputes, and improve support quality. Legal basis: Performance of contract / Legitimate interests.
• Platform improvement and analytics — to understand how Players use macauph and to improve game offerings, user experience, and platform performance. Legal basis: Legitimate interests.
• Marketing communications — to send you promotional offers and updates about macauph, where you have provided consent. You may withdraw consent at any time via your account settings. Legal basis: Consent.

macauph does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment processors — GCash, PayMaya/Maya, and Philippine banking partners receive the minimum data necessary to process your transactions. These providers are bound by their own privacy policies and applicable financial regulations.
• KYC and identity verification providers — licensed third-party providers who assist macauph in verifying your identity and age as required by PAGCOR and AML regulations.
• Cloud infrastructure and hosting providers — macauph uses reputable cloud service providers to host the platform. These providers act as Personal Information Processors under data processing agreements.
• Regulatory and law enforcement authorities — macauph will disclose personal data to PAGCOR, the NPC, the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities where required by law, court order, or regulatory directive.
• Fraud prevention networks — macauph may share limited data with industry fraud prevention services to protect the platform and its players from fraudulent activity.

macauph uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following types of cookies are used:

• Strictly necessary cookies — essential for the platform to function. These include session authentication cookies and security tokens. These cannot be disabled without impairing platform functionality.
• Functional cookies — remember your preferences such as language settings, responsible gaming limits, and display preferences.
• Analytics cookies — collect anonymised data about how Players navigate the platform, which pages are visited most, and where errors occur. This data is used solely to improve the macauph experience.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your macauph account. macauph does not use third-party advertising or cross-site tracking cookies.

macauph retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and identity data — retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR licensing conditions and AML regulations.
• Financial transaction records — retained for a minimum of five (5) years from the date of the transaction, in compliance with the Anti-Money Laundering Act and PAGCOR requirements.
• Gaming history — retained for three (3) years from the date of each gaming session, or longer where required by regulatory obligation or active dispute.
• Support communications — retained for two (2) years from the date of the last communication, unless the matter relates to an ongoing dispute or legal proceeding.
• Marketing consent records — retained for the duration of your consent and for one (1) year after withdrawal of consent, as evidence of compliance.

Where retention beyond these periods is required by law, court order, or regulatory directive, macauph will retain the relevant data for the period required and no longer.

macauph implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data in transit between your device and macauph servers.
• Encryption of sensitive data at rest, including financial data and government ID details.
• Role-based access controls ensuring that macauph staff can only access personal data necessary for their specific job function.
• Regular security assessments and penetration testing of the macauph platform.
• Two-factor authentication (2FA) available for all Player accounts.
• Automated fraud detection and anomaly monitoring systems operating 24/7.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, macauph will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with the Data Privacy Act of 2012.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by macauph:

To exercise any of these rights, contact macauph's Data Protection Officer (DPO) using the details in Section 14. macauph will respond to all valid requests within thirty (30) days. In complex cases, this period may be extended by a further sixty (60) days, with prior notice to you.

The macauph platform is strictly intended for individuals aged 21 years and above. macauph does not knowingly collect personal data from persons under the age of 21. Age verification is conducted as part of the registration and KYC process.

If macauph becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately closed, all personal data associated with the account will be deleted (subject to any legal retention obligations), and any funds in the account will be returned to the verified payment source.

macauph primarily processes personal data within the Philippines. Where personal data is transferred to service providers located outside the Philippines (for example, cloud infrastructure providers), macauph ensures that such transfers are made only to countries or organisations that provide an adequate level of data protection, or that appropriate contractual safeguards are in place, in accordance with the Data Privacy Act of 2012 and NPC guidelines.

macauph will not transfer your personal data to jurisdictions that do not provide adequate data protection without your explicit consent or a lawful basis under the DPA.

macauph may update this Privacy Policy from time to time to reflect changes in our data processing practices, legal obligations, or platform features. Where changes are material, macauph will notify you via email to your registered address or via a prominent notice on the platform at least fourteen (14) days before the changes take effect.

Your continued use of the macauph platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised policy. If you do not accept the revised policy, you must close your account before the effective date.

The date of the most recent update is always displayed at the top of this page. We encourage you to review this Privacy Policy periodically.

macauph has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact: