macauph Privacy Policy

SECTION 01

1. Introduction & Scope

1.1 macauph ("macauph," "we," "us," "our") operates the online gaming platform accessible at macauph.club and is committed to maintaining the privacy and security of your personal information in accordance with applicable Philippine law.

1.2 This Privacy Policy ("Policy") describes the personal data macauph collects from you when you visit the macauph Platform, register an account, make a deposit, place a wager, interact with our customer support team, or otherwise engage with macauph's services. It also describes how that data is used, how it is protected, and the rights you hold over it.

1.3 This Policy applies to all personal data collected about Filipino players and other individuals who interact with macauph, whether you are based in Metro Manila, Cebu, Davao, or any other part of the Philippines or abroad.

1.4 By registering an account with macauph or continuing to use the macauph Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

SECTION 02

2. Data Controller

2.1 For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its implementing regulations, macauph is the personal information controller responsible for your personal data processed through the macauph Platform.

2.2 macauph has designated a Data Privacy Officer ("DPO") responsible for overseeing compliance with this Policy and the DPA. Contact details for the macauph DPO are provided in Section 17 of this Policy.

2.3 Where macauph engages third-party service providers to process personal data on its behalf — such as payment processors, identity verification providers, or cloud hosting services — those parties act as personal information processors under the direction and instruction of macauph, subject to binding data processing agreements.

SECTION 03

3. Personal Data We Collect

3.1 macauph collects the following categories of personal data from registered players and Platform visitors:

3.2 macauph does not collect sensitive personal information as defined under the DPA — such as racial or ethnic origin, political opinions, religious beliefs, genetic data, or health information — unless specifically required for a regulatory compliance purpose and only with your explicit consent or as permitted by law.

SECTION 04

4. How We Collect Your Data

4.1 macauph collects personal data through the following means:

• Direct collection: Data you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or updating your account settings;
• Automated collection: Technical and usage data collected automatically when you access the macauph Platform through server logs, cookies, and device fingerprinting technologies;
• Third-party sources: Identity verification data from KYC service providers; fraud risk signals from anti-fraud data services; payment confirmation data from GCash, Maya, and banking partners;
• Publicly available sources: Where lawfully permitted, macauph may supplement account data with information from publicly available government registries for the purposes of anti-money laundering due diligence.

SECTION 05

5. Legal Basis for Processing

5.1 macauph processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations to you under the macauph Terms & Conditions — including account management, payment processing, and game operation;
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act, and other applicable Philippine law;
• Legitimate interests: Processing necessary for macauph's legitimate business interests — including fraud detection, platform security, responsible gaming monitoring, and business analytics — where these interests are not overridden by your privacy rights;
• Consent: Where macauph relies on your consent as the legal basis for processing — primarily for direct marketing communications — you may withdraw that consent at any time without affecting the lawfulness of prior processing.

SECTION 06

6. How We Use Your Personal Data

6.1 macauph uses the personal data it collects for the following purposes:

• Creating, verifying, and managing your macauph account;
• Processing deposits and withdrawals via GCash, Maya, BPI, BDO, and other accepted payment methods;
• Verifying your identity and age (21+) as required by PAGCOR and Philippine gaming law;
• Operating and securing the macauph gaming platform, including detecting and preventing fraud and technical abuse;
• Meeting macauph's anti-money laundering obligations under AMLA, including customer due diligence and transaction monitoring;
• Delivering customer support and resolving disputes or complaints;
• Enforcing macauph's Terms & Conditions and other applicable policies;
• Administering macauph's responsible gaming tools, including deposit limits, session controls, and self-exclusion programs;
• Analyzing Platform usage to improve macauph's services, game offerings, and user experience;
• Sending you transactional communications — deposit confirmations, withdrawal notifications, security alerts — by SMS or email;
• Sending you promotional communications about macauph offers, bonuses, and events, where you have provided consent or where otherwise permitted by applicable law.

6.2 macauph does not use automated decision-making processes that produce legal or similarly significant effects on you as a player, except where such processing is necessary for fraud prevention or PAGCOR regulatory compliance — in which case you retain the right to request human review of the automated decision.

SECTION 07

7. Data Sharing & Disclosure

7.1 macauph shares your personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, Maya, BPI, BDO, UnionBank, Metrobank, and other payment service providers receive transaction data necessary to process your deposits and withdrawals;
• KYC and identity verification providers: macauph engages accredited third-party services to perform identity and age verification. These providers receive the minimum data necessary to complete verification;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory bodies may receive player data where legally required — including where macauph is subject to a regulatory examination, audit, or investigation;
• Law enforcement: macauph may disclose personal data to Philippine law enforcement agencies where required by a valid legal order, court order, or other lawful process;
• Cloud and infrastructure providers: macauph uses reputable third-party cloud hosting and IT infrastructure providers who process data on macauph's behalf under binding data processing agreements;
• Professional advisors: macauph's legal, compliance, audit, and financial advisors may have access to personal data where strictly necessary for the delivery of professional services.

7.2 macauph does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. macauph does not share player data with social media platforms, data brokers, or advertising networks without your explicit consent.

SECTION 08

8. Cookies & Tracking Technologies

8.1 macauph uses cookies and similar tracking technologies — including session tokens, local storage, and device fingerprinting — to operate and secure the Platform, maintain your login session, and analyze Platform usage patterns.

8.2 The following categories of cookies are used on the macauph Platform:

• Strictly necessary cookies: Essential for Platform operation — login sessions, security tokens, language preferences. These cannot be disabled without affecting Platform functionality;
• Analytical cookies: Used to understand how players use the macauph Platform — pages visited, session duration, error logs. Data collected is aggregated and anonymized where possible;
• Fraud prevention technologies: Device fingerprinting and behavioral signals used by macauph's fraud detection systems to identify suspicious account activity.

8.3 You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies may prevent you from accessing certain features of the macauph Platform, including your account login.

SECTION 09

9. Data Security

9.1 macauph implements comprehensive technical and organizational measures designed to protect your personal data from unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and macauph's servers;
• AES-256 encryption for sensitive data stored at rest on macauph's infrastructure;
• Role-based access controls limiting employee access to personal data based on verified business need;
• Multi-factor authentication requirements for macauph personnel accessing production systems;
• Regular security audits, vulnerability assessments, and penetration testing;
• Incident response procedures aligned with the DPA's breach notification requirements.

9.2 While macauph implements industry-standard security measures, no online platform can guarantee absolute security. You are also responsible for maintaining the security of your own account credentials — see Section 4 of the macauph Terms & Conditions for account security obligations.

9.3 In the event of a personal data breach that poses a risk to your rights and freedoms, macauph will notify the National Privacy Commission and affected players in accordance with the DPA's breach notification requirements.

SECTION 10

10. Data Retention

10.1 macauph retains personal data for as long as is necessary to fulfill the purpose for which it was collected, subject to any longer retention period required by PAGCOR regulations or Philippine law. Key retention periods applicable to macauph player data include:

• Active account data: Retained for the duration of your macauph account and for a period of five (5) years after account closure;
• Financial transaction records: Retained for a minimum of five (5) years from the date of transaction, as required under AMLA and PAGCOR record-keeping obligations;
• KYC documentation: Retained for five (5) years following the end of the business relationship, as required under AML regulations;
• Technical and usage logs: Retained for up to two (2) years for Platform security and dispute resolution purposes;
• Support communications: Retained for three (3) years for quality assurance and dispute resolution purposes.

10.2 When personal data reaches the end of its retention period and is no longer required for any lawful purpose, macauph will securely delete or anonymize that data in accordance with its data retention and disposal procedures.

SECTION 11

11. Your Rights Under the Data Privacy Act

11.1 As a data subject under the Philippine Data Privacy Act of 2012, you hold the following rights with respect to the personal data macauph holds about you:

11.2 To exercise any of the rights listed above, contact macauph's Data Privacy Officer using the details in Section 17. macauph will respond to verified data subject requests within thirty (30) calendar days of receipt. In complex cases, macauph may extend this period by a further thirty (30) days with notice.

11.3 macauph will not charge a fee for responding to data subject requests unless the request is manifestly unfounded, excessive, or repetitive — in which case macauph may charge a reasonable administrative fee or decline to act on the request, with written explanation.

11.4 If you believe macauph has not adequately addressed your data privacy concerns, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

SECTION 12

12. Children's Privacy

12.1 The macauph Platform is strictly not intended for, and does not knowingly collect personal data from, individuals under the age of twenty-one (21) years. macauph operates exclusively as an adult gaming platform in compliance with PAGCOR's minimum age requirements for online gaming in the Philippines.

12.2 If macauph discovers that personal data has been collected from an individual who is under 21 years of age, that data will be immediately deleted and the associated account will be permanently closed. Any deposits made by underage individuals will be handled in accordance with macauph's Terms & Conditions and applicable PAGCOR guidance.

12.3 Parents and guardians are responsible for supervising minors' online activity and for ensuring that minors do not circumvent macauph's age verification procedures. If you believe a minor may have registered or used a macauph account, please contact macauph support immediately.

SECTION 13

13. Marketing Communications

13.1 With your consent, macauph may send you promotional communications about macauph bonuses, new games, events, and offers via SMS or email. Consent to marketing communications is separate from the consent required to create your account and use macauph's gaming services.

13.2 You may withdraw your consent to receive marketing communications at any time by:

• Updating your communication preferences in your macauph account settings;
• Replying STOP to any macauph SMS communication;
• Clicking the unsubscribe link in any macauph marketing email;
• Contacting macauph support via live chat or email.

13.3 Withdrawal of marketing consent does not affect transactional communications — macauph will continue to send you account-related notifications (deposit confirmations, withdrawal alerts, security notifications) regardless of your marketing preferences, as these are necessary for the operation of your account.

SECTION 14

14. Third-Party Services

14.1 macauph engages third-party service providers to support Platform operations, including payment processors (GCash, Maya, BPI, BDO, UnionBank, Metrobank), KYC verification providers, cloud infrastructure services, fraud detection services, and customer support platforms.

14.2 All third-party processors engaged by macauph are bound by data processing agreements that require them to process personal data only in accordance with macauph's instructions, implement appropriate security measures, and comply with the requirements of the Philippine Data Privacy Act.

14.3 macauph is not responsible for the privacy practices of third-party platforms that are independently accessible by players — such as GCash or Maya — when players use those platforms outside of the macauph context. Those platforms have their own privacy policies which apply to their independent operations.

SECTION 15

15. Cross-Border Data Transfers

15.1 macauph primarily processes and stores personal data on servers located within the Philippines or in jurisdictions that provide an equivalent level of data protection. Where personal data is transferred to a jurisdiction outside the Philippines — for example, to cloud infrastructure or third-party service providers operating internationally — macauph implements appropriate contractual safeguards to ensure that the transferred data receives an equivalent level of protection as required under the DPA.

15.2 Cross-border transfers of personal data by macauph are conducted in compliance with National Privacy Commission guidelines on cross-border data sharing, including the use of appropriate contractual clauses and data sharing agreements where required.

SECTION 16

16. Policy Updates

16.1 macauph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, changes in applicable law or PAGCOR regulations, or improvements to our Platform's privacy and security standards.

16.2 Where we make material changes to this Policy, we will notify registered players via email or SMS and/or by posting a prominent notice on the macauph Platform at least seven (7) days before the changes take effect, except where immediate changes are required by law.

16.3 Your continued use of the macauph Platform after the effective date of any updated Policy constitutes your acceptance of the revised terms. The version published at macauph.club/privacy-policy is always the current version applicable to your use of the Platform.

16.4 The current version of this Privacy Policy is effective as of January 1, 2026. Previous versions are available upon request from macauph's Data Privacy Officer.

SECTION 17

17. Contact & Data Privacy Officer

17.1 If you have any questions, concerns, or requests relating to this Privacy Policy or macauph's processing of your personal data, please contact macauph's designated Data Privacy Officer using the details below:

17.2 macauph is also subject to the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR) with respect to player data processed in connection with licensed online gaming operations. Players who believe macauph has violated its PAGCOR-licensed obligations may escalate concerns to PAGCOR through its official complaint channels.

17.3 This Privacy Policy was last reviewed and updated on January 1, 2026. macauph thanks you for taking the time to read this Policy and for trusting macauph with your personal data.