At phmaya, your personal data is treated with the same care we ask you to bring to responsible gaming — seriously, transparently, and with your best interests in mind. This Privacy Policy explains exactly what information phmaya collects from Filipino players, why we collect it, how it is used, and what rights you have over your own data.
All phmaya player data is stored on encrypted servers and transmitted via TLS. Payment data is never stored in full — only tokenized references used by your payment provider.
Filipino players have the right to access, correct, and request deletion of their personal data held by phmaya, consistent with the Data Privacy Act of 2012 (Republic Act 10173).
phmaya does not sell, rent, or trade your personal information to third-party marketers. Data shared with partners is strictly limited to what is necessary for platform operation and regulatory compliance.
As a PAGCOR-licensed operator, phmaya is obligated to collect and retain certain player data under Philippine gaming regulations and anti-money laundering law. We collect only what is legally required.
phmaya uses cookies solely for session management, security, and platform performance analytics. We do not use third-party advertising cookies or behavioral tracking cookies.
You control which communications phmaya sends you. Marketing emails and SMS promotions can be opted out of at any time through your account settings. Transactional and security notices cannot be disabled as they are required for account safety.
This Privacy Policy ("Policy") applies to all personal data collected, processed, and stored by phmaya ("we," "us," "our") in connection with your use of the phmaya online casino and sports betting platform accessible at phmaya.co ("the Platform"). This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as overseen by the National Privacy Commission (NPC) of the Philippines.
By registering for a phmaya account, logging in to the Platform, or otherwise providing personal information to phmaya, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to this Policy, you must not use the phmaya Platform.
This Policy was last revised on January 1, 2026. The most current version is always available on this page. For questions, contact our Data Protection Officer at [email protected].
phmaya operates as the Data Controller for all personal information collected through the Platform. As Data Controller, phmaya determines the purposes and means by which your personal data is processed, and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with the Data Privacy Act of 2012.
phmaya is a PAGCOR-licensed online gaming operator. As a regulated entity, certain data processing activities are mandatory under Philippine gaming law and the Anti-Money Laundering Act (Republic Act 9160 as amended). These legally mandated processing activities are not optional and cannot be withdrawn from by the player.
When you create a phmaya account, we collect the personal information you provide during the registration process, which includes:
In compliance with PAGCOR regulations and the Anti-Money Laundering Act, phmaya conducts Know Your Customer (KYC) verification for all accounts. During this process, we collect scanned or photographed copies of your government-issued ID, and may request proof of address and source of funds documentation for higher-tier account verification.
phmaya records details of all financial transactions conducted through the Platform, including deposit amounts and timestamps, withdrawal requests and processing status, payment method identifiers (GCash account references, bank account last digits), and transaction reference numbers. phmaya does not store full GCash account PINs, full bank account numbers, or card numbers at any point.
phmaya maintains a complete record of your gaming activity on the Platform, including games played, bet amounts, game outcomes, session start and end times, and bonus usage. This data is retained for regulatory reporting purposes and to support responsible gaming monitoring.
When you access phmaya, we automatically collect technical information including your IP address, device type and operating system, browser type and version, session duration and navigation path within the Platform, and approximate geographic location (derived from IP address).
| Data Category | Examples | Required? |
|---|---|---|
| Identity | Name, date of birth, government ID | Mandatory (PAGCOR/KYC) |
| Contact | Mobile number, email address | Mandatory |
| Financial | Transaction history, payment references | Mandatory (AMLA) |
| Gaming Activity | Bet history, game sessions, outcomes | Mandatory (PAGCOR) |
| Technical | IP address, device info, session logs | Automatic collection |
| Marketing Preferences | Email opt-in, SMS opt-in | Optional (consent-based) |
phmaya processes your personal data for the following purposes:
phmaya processes personal data under the following legal bases as established by the Data Privacy Act of 2012:
phmaya does not sell, rent, or trade your personal data to third-party marketing organisations. We share your personal data only in the following circumstances:
All third parties who receive personal data from phmaya are required to process that data in accordance with applicable Philippine privacy law and are prohibited from using it for any purpose beyond the specific activity for which it was shared.
In certain circumstances, your personal data may be transferred to and processed in countries outside the Philippines — for example, when using game content hosted on servers operated by international game providers, or when using payment infrastructure with cross-border components.
Where such transfers occur, phmaya ensures that adequate safeguards are in place consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines, including contractual clauses requiring overseas recipients to maintain data protection standards equivalent to those applicable in the Philippines.
phmaya retains personal data for as long as is necessary to fulfill the purposes for which it was collected, subject to mandatory retention periods under Philippine law:
Following the applicable retention period, personal data is securely deleted or irreversibly anonymized. Anonymized data (which cannot be used to identify you) may be retained indefinitely for statistical and analytical purposes.
phmaya uses cookies and similar technologies on the Platform for the following specific purposes:
phmaya does not use third-party advertising cookies, retargeting pixels, social media tracking cookies, or behavioral profiling technologies on the Platform. You may manage cookie settings through your browser settings, noting that disabling session or security cookies may impair Platform functionality.
Under the Data Privacy Act of 2012, you have the following rights regarding your personal data held by phmaya. To exercise any of these rights, contact [email protected] with the subject line "Privacy Rights Request".
Request a copy of all personal data phmaya holds about you. We will respond within 30 days of a verified request.
Request correction of inaccurate or incomplete personal data. Identity verification may be required for changes to KYC data.
Request deletion of your personal data where retention is no longer necessary — subject to mandatory legal retention requirements under PAGCOR and AMLA rules.
Object to processing of your personal data for marketing purposes. Objection to legally mandated processing is not available.
Receive a copy of your personal data in a structured, commonly used, machine-readable format where technically feasible.
Lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.
phmaya's services are strictly restricted to persons aged twenty-one (21) years and above. phmaya does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted during the registration process and again during KYC verification.
If phmaya discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all personal data collected will be deleted within a reasonable timeframe, and any funds held in the account will be handled in accordance with PAGCOR's procedures for underage account closure.
If you are a parent or guardian and believe a minor under your care has created a phmaya account, please contact [email protected] immediately.
phmaya implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:
In the event of a personal data breach that poses a significant risk to your rights and freedoms, phmaya will notify the National Privacy Commission and affected players in accordance with the Data Privacy Act of 2012 and NPC Circular 16-03.
phmaya reserves the right to update or amend this Privacy Policy at any time. Material changes — those that significantly affect how your personal data is processed — will be communicated to registered players via the registered email address and/or a prominent notice on the phmaya Platform at least fourteen (14) days before the changes take effect.
Your continued use of phmaya following the effective date of any revised Privacy Policy constitutes your acceptance of the changes. If you do not agree to the revised Policy, you must cease using the Platform and may request account closure in accordance with phmaya's Terms and Conditions.
The effective date of the current version of this Privacy Policy is January 1, 2026.
For any privacy-related queries, data rights requests, or concerns regarding phmaya's handling of your personal information, please contact our Data Protection Officer:
For responsible gaming concerns, please visit the Responsible Gaming section. For general platform support, visit our FAQ page.
Our Data Protection Officer is available to answer any questions about how phmaya handles your personal information. Contact us at [email protected] or review our FAQ for common privacy questions.
phmaya · PAGCOR Licensed · NPC Compliant · 21+ Only