1. Data Controller
macauph ("macauph," "we," "us," or "our") is the personal information controller responsible for the personal data of Players and visitors of macauph.org. macauph determines the purposes and means by which personal data collected through the platform is processed. For all data privacy inquiries, Players may contact macauph's Data Protection Officer via the contact details provided in Section 14 of this Policy.
2. Personal Data We Collect
macauph collects the following categories of personal data from Players and website visitors:
- Identity Data: Full legal name, date of birth, nationality, and copies of government-issued Philippine identification documents (e.g. PhilSys ID, passport, UMID, driver's license) submitted during Know Your Customer (KYC) verification.
- Contact Data: Philippine mobile number (Globe or Smart), email address, and residential address.
- Financial Data: GCash number, PayMaya account details, BDO / BPI / Metrobank account numbers, cryptocurrency wallet addresses (USDT TRC20), and transaction history related to deposits and withdrawals on macauph.
- Account Data: macauph username, hashed password, account registration date, account verification status, account balance history, and bonus credit history.
- Gaming Data: Bet history, game session records, win/loss records, wagering totals, game preferences, and session duration data.
- Technical Data: IP address, device type and model, operating system, browser type and version, screen resolution, and mobile network operator.
- Behavioural Data: Pages visited on macauph.org, navigation patterns, click behaviour, search queries made on the platform, and time spent on individual pages or game categories.
- Communications Data: Records of live chat conversations with macauph support agents, email correspondence, and any feedback or complaint submissions.
- Responsible Gaming Data: Self-imposed deposit limits, loss limits, session time limits, cooling-off periods, and self-exclusion requests.
3. How We Collect Your Data
macauph collects personal data through the following means:
- Direct submission: Information you provide during account registration, KYC verification, deposit and withdrawal requests, and communications with macauph support.
- Automated collection: Technical and behavioural data collected automatically through cookies, web beacons, session tokens, and server logs when you visit macauph.org or use the macauph platform.
- Third-party sources: Identity and financial data verified through our KYC service providers; fraud and AML screening data provided by compliance data services; device fingerprinting data provided by our security partners.
- Payment providers: Transaction confirmation data from GCash, PayMaya, BDO, BPI, Metrobank, and other payment partners when you make deposits or receive withdrawals.
4. Purposes of Processing
macauph processes your personal data for the following purposes:
- To create, verify, and manage your macauph account.
- To process deposits, withdrawals, and account balance transactions in Philippine Peso.
- To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under Philippine law, including Republic Act No. 9160 as amended.
- To verify that Players meet the minimum age requirement of 21 years in accordance with PAGCOR regulations.
- To provide customer support via live chat, email, and other communication channels.
- To detect, prevent, and investigate fraud, cheating, collusion, account takeovers, and other prohibited activities on the macauph platform.
- To send service communications — including account security alerts, deposit confirmations, withdrawal notifications, and system maintenance notices.
- To send promotional communications (bonuses, free spins, special offers) where you have opted in to receive such communications, and subject to your right to opt out at any time.
- To personalise your macauph experience — including game recommendations based on your play history and promotional offers tailored to your account activity.
- To enforce macauph's Terms and Conditions and maintain responsible gaming standards, including administering self-exclusion requests.
- To analyse platform usage patterns for product improvement, platform stability, and user experience optimisation.
- To comply with applicable Philippine laws and regulatory requirements, including directives from PAGCOR or the National Privacy Commission (NPC).
5. Legal Basis for Processing
macauph processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
- Contractual necessity: Processing required to perform the contract between you and macauph (i.e., to operate your account and provide gaming services).
- Legal obligation: Processing required to comply with Philippine AML, KYC, PAGCOR licensing, and data privacy regulations.
- Legitimate interests: Processing for fraud prevention, platform security, responsible gaming enforcement, and platform improvement.
- Consent: Processing for marketing communications and optional personalisation features, where you have provided explicit consent and retain the right to withdraw it at any time.
6. Data Retention
macauph retains personal data for as long as necessary to fulfil the purposes described in this Policy, subject to the following minimum retention periods:
- Account and KYC data: Retained for a minimum of five (5) years following account closure, consistent with Philippine AML record-keeping requirements under RA 9160.
- Transaction and gaming records: Retained for a minimum of five (5) years from the date of the transaction or game session.
- Support communications: Retained for three (3) years from the date of the communication.
- Technical and behavioural data: Retained for twelve (12) months from collection, unless required longer for fraud or security investigations.
- Self-exclusion records: Retained permanently to prevent re-registration during self-exclusion periods and to comply with responsible gaming obligations.
Upon expiry of the relevant retention period, macauph will securely delete or anonymise personal data in accordance with its data disposal procedures.
7. Sharing Your Personal Data
macauph does not sell your personal data to third parties. macauph may share personal data with the following categories of recipients, strictly on a need-to-know basis and subject to confidentiality obligations:
- Game providers: Technical identifiers (not full identity data) shared with certified game providers (Evolution, Pragmatic Play, PG Soft, etc.) to enable game session management and dispute resolution.
- Payment processors: Identity and financial data shared with GCash, PayMaya, BDO, BPI, Metrobank, and other payment partners to process transactions.
- KYC and AML service providers: Identity data shared with our verification partners to fulfil KYC and AML compliance obligations.
- Fraud prevention services: Technical and behavioural data shared with security and fraud detection partners to protect the macauph platform and its players.
- Regulatory authorities: Personal and transaction data disclosed to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other Philippine government bodies when required by law or lawful order.
- Legal and professional advisors: Data disclosed to lawyers, auditors, and compliance consultants under confidentiality obligations where necessary for legal proceedings or regulatory compliance.
8. Data Security
macauph implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- TLS 1.3 encryption for all data transmitted between your device and macauph.org.
- Bcrypt password hashing — macauph never stores passwords in plain text.
- Access controls limiting personal data access to authorised macauph personnel with a documented need to access it.
- Two-factor authentication options for Player accounts and mandatory MFA for internal macauph staff systems.
- Regular security assessments and penetration testing of macauph's platform infrastructure.
- Segregated storage of payment credentials — macauph does not store your GCash PIN, bank account passwords, or card security codes.
No internet transmission is completely secure. While macauph takes all reasonable steps to protect your data, we cannot guarantee absolute security against all threats. In the event of a personal data breach that is likely to affect your rights and freedoms, macauph will notify the NPC and affected Players in accordance with the requirements of the Data Privacy Act.
9. Cookies & Tracking Technologies
macauph uses cookies, web beacons, and similar tracking technologies on macauph.org for the following purposes:
- Essential cookies: Required for the platform to function — including session management, login persistence, and security token storage.
- Analytical cookies: Used to understand how Players navigate macauph.org, which games are most accessed, and where technical issues occur, to improve the platform experience.
- Preference cookies: Used to remember your platform preferences, including language settings and responsible gaming display options.
- Marketing cookies: Used (with your consent) to deliver relevant promotional content based on your macauph activity. You may opt out of marketing cookies at any time via your browser settings or macauph account preferences.
You can control cookie settings through your browser. Disabling essential cookies may affect the functionality of the macauph platform.
10. Your Rights Under the Philippine Data Privacy Act
As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data processed by macauph:
- Right to be informed: You have the right to know what personal data macauph collects and how it is used — as set out in this Policy.
- Right of access: You may request a copy of the personal data macauph holds about you.
- Right to rectification: You may request correction of inaccurate or incomplete personal data in your macauph account.
- Right to erasure: You may request deletion of your personal data where macauph no longer has a lawful basis for retaining it, subject to applicable legal retention obligations.
- Right to object: You may object to certain processing activities, including direct marketing communications. You may opt out of marketing emails at any time via the unsubscribe link in any macauph promotional email.
- Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
- Right to lodge a complaint: You have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe macauph has violated your data privacy rights.
To exercise any of these rights, contact macauph's Data Protection Officer at [email protected]. macauph will respond to verified rights requests within thirty (30) calendar days.
11. Minors
macauph strictly prohibits access to its platform by individuals under 21 years of age. macauph does not knowingly collect personal data from individuals under 21. If macauph discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all data associated with the account will be deleted, and the matter will be reported to the appropriate regulatory authority. If you believe that a minor has registered a macauph account, please notify macauph support immediately.
12. International Data Transfers
macauph's primary data processing infrastructure is located in Asia. In certain circumstances — including the use of certified game providers, KYC verification services, and fraud prevention platforms — personal data may be transferred to and processed in jurisdictions outside the Philippines. Where such transfers occur, macauph ensures that adequate data protection safeguards are in place, including contractual clauses consistent with NPC requirements for cross-border data transfers under the Data Privacy Act.
13. Changes to This Privacy Policy
macauph reserves the right to update this Privacy Policy at any time. Where changes are material, macauph will notify registered Players via the email address or mobile number on file at least seven (7) calendar days before the changes take effect. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of macauph.org following the effective date of any revision constitutes your acceptance of the updated Policy.
For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by macauph, please contact us:
- Email: [email protected] — mark your subject line "Data Privacy Request"
- Live Chat: Available 24/7 on macauph.org — for urgent account security concerns
macauph is committed to resolving all data privacy concerns promptly and transparently. If you are not satisfied with macauph's response to your data privacy concern, you have the right to escalate your complaint to the Philippine National Privacy Commission (NPC).