maya23 Privacy Policy

1 Introduction

Maya23 ("we", "us", "the Company", "maya23") is committed to protecting and respecting the privacy of all individuals who interact with the maya23 Platform, including registered Players, prospective users, and visitors to maya23.cam. We recognize that the personal data you share with us carries significant value, and we handle it with the care and transparency it deserves.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by maya23. It covers the types of data collected, the purposes for which it is used, the conditions under which it may be shared, the security measures we employ to protect it, and the rights available to you under Philippine law.

This policy applies to all maya23 services, including the main website at maya23.cam, any associated mobile-optimized pages, and any communications sent by maya23 to registered or prospective Players. It should be read in conjunction with the maya23 Terms & Conditions, which are incorporated by reference.

2 Data Controller Information

For the purposes of the Philippine Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for the processing of your personal data is maya23, operating the Platform at maya23.cam.

All data protection inquiries, requests to exercise your rights, or formal complaints may be directed to our designated Data Protection Officer (DPO) through the contact channels listed in Section 15 of this policy. Maya23 has appointed a DPO in accordance with applicable Philippine data protection requirements.

3 Personal Data We Collect

Maya23 collects personal data that is necessary and proportionate to the purposes for which it is processed. The categories of personal data we collect include, but are not limited to, the following:

We do not collect sensitive personal data such as health information, biometric data, or political affiliations unless specifically required by applicable law or regulation for AML compliance purposes, in which case collection will be disclosed at the point of collection.

4 How We Collect Personal Data

Maya23 collects personal data through the following means:

4.1 Direct Collection

Data you provide directly when you register an Account, complete the KYC verification process, make a deposit or withdrawal, contact our support team, participate in promotions, or otherwise interact with the Platform. This is the primary source of identity, contact, financial, and KYC data.

4.2 Automated Collection

Data collected automatically when you access and use the Platform, including through cookies, web beacons, and similar tracking technologies. This includes technical data, usage data, and session data. Please refer to Section 6 for full details of our cookie practices.

4.3 Third-Party Sources

In limited circumstances, we may receive data about you from third-party sources, including:

• Identity verification service providers used during the KYC process;
• Payment processors such as GCash and PayMaya, who may share transaction reference data with us for reconciliation purposes;
• Fraud detection and anti-money laundering (AML) screening databases, as required by applicable regulations;
• Publicly available sources, including government registries, where necessary for compliance purposes.

5 Purposes and Legal Basis for Processing

Maya23 processes your personal data only for specified, explicit, and legitimate purposes. The primary purposes for which we process personal data, and the legal basis for each, are as follows:

• Account Registration and Management: To create and maintain your maya23 Account, verify your identity and age (21+), and provide access to the Platform. Legal basis: performance of a contract.
• KYC and Age Verification: To verify that you are at least 21 years of age and to comply with Know Your Customer obligations. Legal basis: legal obligation and legitimate interests.
• Payment Processing: To process deposits, withdrawals, and refunds in Philippine Peso via your chosen payment method. Legal basis: performance of a contract.
• Anti-Money Laundering (AML) Compliance: To screen transactions and player activity against AML obligations under Philippine law. Legal basis: legal obligation.
• Platform Operation and Game Delivery: To deliver gaming services, calculate winnings, apply bonuses, and maintain accurate account records. Legal basis: performance of a contract.
• Customer Support: To respond to your inquiries, resolve disputes, and improve service quality. Legal basis: legitimate interests and performance of a contract.
• Responsible Gaming: To monitor gaming behavior, apply player-requested limits, and identify indicators of potential problem gambling. Legal basis: legal obligation and legitimate interests.
• Security and Fraud Prevention: To detect and prevent unauthorized access, fraud, cheating, and abuse of the Platform. Legal basis: legitimate interests and legal obligation.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have provided consent or where permitted under applicable law. You may opt out at any time.
• Platform Analytics and Improvement: To analyze usage patterns, improve platform performance, and develop new features. Legal basis: legitimate interests.
• Legal Compliance: To comply with applicable Philippine laws, regulatory requirements, and lawful orders from competent authorities. Legal basis: legal obligation.

6 Cookies and Tracking Technologies

Maya23 uses cookies and similar tracking technologies to enhance your experience on the Platform, maintain session continuity, analyze usage patterns, and deliver relevant content. The cookies we use fall into the following categories:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that keep you logged in during a gaming session. These cannot be disabled without impairing Platform functionality.
• Performance Cookies: Collect anonymized data about how Players use the Platform, such as pages visited and error messages encountered, to help us improve performance.
• Functionality Cookies: Remember your preferences such as language settings, display preferences, and last-used game category to personalize your experience.
• Analytics Cookies: Used to understand aggregate user behavior on the Platform. Data collected through analytics cookies is anonymized and aggregated before use.

You may manage cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the Platform. Maya23 does not sell cookie-derived data to third parties for advertising purposes.

7 Sharing of Personal Data

Maya23 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate confidentiality and data protection obligations:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, Visa, and Mastercard, solely for the purpose of processing your transactions in Philippine Peso;
• KYC and Identity Verification Providers: Third-party services engaged to assist in verifying your identity, age, and the authenticity of documents submitted during the KYC process;
• Fraud Prevention and AML Service Providers: Specialist vendors engaged to assist maya23 in detecting and preventing fraud, money laundering, and other financial crimes;
• IT Infrastructure and Cloud Service Providers: Hosting, cloud storage, and cybersecurity service providers engaged to operate and maintain the Platform securely;
• Customer Support Platforms: Third-party customer service software used to manage live chat and support ticket communications;
• Regulatory Authorities and Law Enforcement: Where required by law, valid legal process, or regulatory order, maya23 may disclose personal data to Philippine government agencies, law enforcement bodies, or regulatory authorities including, where applicable, PAGCOR;
• Professional Advisers: Lawyers, accountants, and auditors bound by professional confidentiality obligations, where required for legal, financial, or compliance purposes.

All third-party service providers engaged by maya23 are subject to contractual data processing agreements that require them to handle your personal data in accordance with applicable Philippine data protection law and this Privacy Policy.

8 International Data Transfers

In the course of providing services, your personal data may be transferred to and processed in countries outside the Philippines. This may occur where third-party service providers such as cloud infrastructure providers or KYC platforms operate servers in other jurisdictions.

Wherever such transfers occur, maya23 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to that provided under the Philippine Data Privacy Act of 2012. These safeguards may include contractual clauses requiring the recipient to process the data to a standard equivalent to Philippine data protection requirements, and verification that the recipient country provides an adequate level of data protection.

If you wish to obtain further information about specific safeguards applied to international data transfers, you may contact the maya23 Data Protection Officer through the channels listed in Section 15.

9 Data Retention

Maya23 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your active Account and for a period of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine financial record-keeping regulations;
• KYC Documents: Retained for the duration of the Account relationship and five (5) years post-closure, or longer where required by law;
• Gaming History: Retained for five (5) years from the date of each gaming session for regulatory compliance and dispute resolution purposes;
• Communications and Support Data: Retained for three (3) years from the date of each communication, unless a longer period is required for dispute resolution;
• Technical and Usage Data: Typically retained for twelve (12) months from collection, after which it is anonymized or deleted.

Where personal data is no longer required for any legitimate purpose and no legal obligation requires its continued retention, maya23 will securely delete or anonymize the data.

10 Security Measures

Maya23 implements a comprehensive suite of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the maya23 Platform is encrypted using industry-standard TLS encryption, equivalent to the security used by major Philippine banks for online transactions;
• Data Encryption at Rest: Sensitive data fields, including financial data and KYC document metadata, are encrypted at rest in our secure data infrastructure;
• Access Controls: Strict role-based access controls ensure that employee access to personal data is limited to what is necessary for each individual's specific job function;
• Two-Factor Authentication: Available to all Players and mandated for administrative access by maya23 staff;
• Regular Security Audits: Periodic penetration testing and vulnerability assessments conducted by independent third-party security specialists;
• Incident Response Protocol: A documented data breach response procedure, including notification protocols in accordance with the requirements of the Philippine Data Privacy Act;
• Staff Training: Regular data privacy and security training for all employees who handle personal data.

11 Your Rights Under Philippine Law

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data processed by maya23. To exercise any of these rights, please contact our Data Protection Officer as described in Section 15:

Maya23 will respond to all verified rights requests within thirty (30) days of receipt. Where requests are complex or numerous, we may extend this period by a further thirty (30) days, with prior notice to you. There is no charge for exercising your rights under this policy, except where requests are manifestly unfounded or excessive.

12 Children's Privacy

The maya23 Platform is strictly intended for individuals aged twenty-one (21) years and above. Maya23 does not knowingly collect, process, or retain personal data from individuals under this age threshold. Age verification is a mandatory component of the Account registration and KYC process.

If maya23 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate parental or guardian consent, we will take immediate steps to permanently delete that data and close the associated Account. If you have reason to believe that a minor has registered an Account or provided personal data to maya23, please contact our Data Protection Officer immediately.

13 Third-Party Links

The maya23 Platform may contain links to third-party websites or services, including payment processors, that are operated independently of maya23. This Privacy Policy applies solely to data processing activities conducted by maya23 and does not extend to the privacy practices of any third-party websites or services.

Maya23 is not responsible for the privacy practices, content, or data handling of third-party websites. We encourage you to review the privacy policy of any third-party service before providing your personal data to that service. The inclusion of a link to a third-party service on the maya23 Platform does not constitute an endorsement of that service's privacy practices.

14 Amendments to This Policy

Maya23 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes to this policy will be communicated to registered Players via email notification to the address on file and/or via a prominent notice on the Platform, at least seven (7) days before the changes take effect where reasonably practicable.

The "Last Updated" date at the top of this page indicates when this Privacy Policy was most recently revised. We recommend that you review this policy periodically to stay informed of how maya23 handles your personal data. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgment of the updated policy.

15 Contact, Complaints, and DPO

For all data privacy inquiries, requests to exercise your rights, or formal complaints regarding maya23's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Subject Line: Please use "Data Privacy Request" or "DPO Inquiry" for faster routing
• Live Chat: Available 24/7 on the maya23 Platform for general data privacy questions
• Response Timeframe: We aim to acknowledge all formal data privacy requests within 72 hours and to respond substantively within 30 days

If you are not satisfied with maya23's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the government authority responsible for administering and implementing the Data Privacy Act of 2012. Information about the NPC and its complaints process is available through official Philippine government channels.