masaya365 Privacy Policy

§ 01 Data Controller

The data controller for all personal data collected through the masaya365 platform is the operator of masaya365.one, a company licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR). masaya365 has designated a Data Protection Officer (DPO) in accordance with RA 10173. Inquiries relating to data privacy may be directed to our support team at [email protected] (plain text — not a clickable link).

This Privacy Policy applies to all personal data collected through the masaya365 website (masaya365.one), mobile web application, customer support channels, and any other touchpoints through which masaya365 provides services to Filipino players.

§ 02 Data We Collect

masaya365 collects personal data in three ways: directly from you when you register and use the platform, automatically through your interaction with the platform, and from third parties such as payment providers and identity verification services.

masaya365 does not knowingly collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for identity verification. Where collection of sensitive data is necessary (e.g., government ID data for KYC), appropriate security measures and consent procedures are applied.

§ 03 How We Use Your Data

masaya365 uses your personal data for the following purposes:

• Account Management: Creating and maintaining your masaya365 account, verifying your identity, managing your login credentials, and processing account closure requests.
• KYC Compliance: Verifying that you meet the minimum age requirement of 21 years and confirming your identity and payment method ownership as required by PAGCOR.
• Payment Processing: Processing deposits and withdrawals via GCash, Maya, BPI, BDO, and other accepted Philippine payment methods; recording transaction history; and investigating disputed transactions.
• Game Operation: Delivering game sessions, maintaining bet records, calculating winnings, and crediting bonuses to your masaya365 account.
• Customer Support: Responding to your inquiries, resolving disputes, and maintaining records of communications for quality and training purposes.
• Regulatory Compliance: Meeting masaya365's obligations under PAGCOR licensing conditions, the Philippine Anti-Money Laundering Act (AMLA), RA 10173, and other applicable laws.
• Fraud Prevention & Security: Detecting and preventing unauthorized account access, bonus abuse, money laundering, and other forms of fraudulent activity on the masaya365 platform.
• Platform Improvement: Analysing aggregated, anonymised usage patterns to improve the masaya365 user experience, game lobby, and payment flows.
• Marketing Communications: Sending promotional offers and platform updates to players who have opted in to receive such communications, with the ability to opt out at any time.

§ 04 Legal Basis for Processing

Under RA 10173, masaya365 relies on the following legal bases for processing your personal data:

• Contractual Necessity: Processing required to perform the contract between you and masaya365 (i.e., providing the casino platform services you have registered for), including account creation, game operation, and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing requirements, AMLA obligations, and other applicable Philippine legal requirements — including KYC verification, transaction monitoring, and regulatory reporting.
• Legitimate Interests: Processing for fraud prevention, platform security, and internal analytics, where masaya365's interests do not override your rights and freedoms as a data subject.
• Consent: Processing for optional marketing communications, where you have provided explicit consent. You may withdraw consent at any time by contacting masaya365 support or updating your account communication preferences.

§ 05 Data Sharing & Disclosure

masaya365 does not sell or rent your personal data to third parties. masaya365 may share your personal data with the following categories of recipients, only to the extent necessary for the stated purpose:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (Voyager Innovations), and other Philippine payment service providers, for the purpose of processing deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to validate government-issued Philippine IDs during the KYC process.
• Game Providers: Licensed game providers (e.g., PG Soft, Pragmatic Play, Jili) who deliver game content through the masaya365 platform. These providers receive session data necessary to deliver and audit game outcomes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and law enforcement agencies in the Philippines, where disclosure is required by law or regulatory mandate.
• IT & Platform Infrastructure Providers: Cloud hosting, database, and cybersecurity service providers who process data on masaya365's behalf under data processing agreements.

All third-party processors engaged by masaya365 are required to implement appropriate data protection measures consistent with RA 10173 and are prohibited from using your personal data for any purpose beyond what is necessary to perform their services for masaya365.

§ 06 Cookies & Tracking Technologies

masaya365 uses cookies and similar tracking technologies to operate the platform, maintain your session, and analyse platform usage. The types of cookies masaya365 uses include:

• Strictly Necessary Cookies: Essential for platform functionality, including session management and login authentication. These cannot be disabled without preventing use of the platform.
• Functional Cookies: Used to remember your preferences, such as language settings and game lobby filters, to provide a more personalised masaya365 experience.
• Analytical Cookies: Used to collect anonymised data about how players use the masaya365 platform, helping masaya365 identify areas for improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, including bot access and credential stuffing attacks on the masaya365 login page.

You may control cookie settings through your browser. Disabling strictly necessary cookies will affect platform functionality. masaya365 does not use third-party advertising or social media tracking cookies.

§ 07 Data Retention

masaya365 retains personal data for the following periods, after which data is securely deleted or anonymised:

• Account and KYC Data: Retained for a minimum of 5 years from account closure, as required by PAGCOR licensing conditions and the Philippine AMLA.
• Transaction Records: Retained for a minimum of 5 years from the date of the transaction, consistent with AMLA record-keeping requirements.
• Game Session Logs: Retained for 3 years from the date of the session, for dispute resolution and regulatory audit purposes.
• Customer Support Records: Retained for 2 years from the date of the interaction, unless the record relates to an ongoing dispute or regulatory matter.
• Marketing Data: Retained until you withdraw consent or request deletion, whichever occurs first.

§ 08 Data Security

masaya365 implements a comprehensive suite of technical and organisational security measures to protect your personal data against unauthorised access, loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and masaya365 servers;
• Encryption at rest for all sensitive personal and financial data stored in masaya365 databases;
• Multi-factor authentication requirements for masaya365 administrative access;
• Regular third-party penetration testing and vulnerability assessments of the masaya365 platform;
• Role-based access controls limiting employee access to personal data to only what is required for their specific job function;
• Automated intrusion detection and anomaly monitoring on all masaya365 infrastructure.

In the event of a personal data breach that is likely to result in harm to affected data subjects, masaya365 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173 and NPC Circular 16-03.

§ 09 Your Rights as a Data Subject

Under RA 10173, you have the following rights with respect to your personal data held by masaya365:

• Right to Be Informed: The right to be told what personal data masaya365 holds about you and how it is processed — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data masaya365 holds about you.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected.
• Right to Erasure: The right to request deletion of your personal data, subject to masaya365's legal obligations to retain certain data under PAGCOR and AMLA requirements.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or processing based on masaya365's legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another data controller, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe masaya365 has violated your data privacy rights.

To exercise any of these rights, contact masaya365 via live chat or at [email protected]. masaya365 will respond to all data subject requests within 15 business days of receipt, as required by NPC regulations.

§ 10 Minors

masaya365 does not knowingly collect personal data from individuals under the age of 21. The masaya365 platform is strictly restricted to players who are 21 years of age or older, in compliance with PAGCOR regulations and Philippine law. All registrants are required to complete KYC age verification before accessing real-money gaming features. If masaya365 becomes aware that personal data has been collected from a person under the age of 21, such data will be deleted and the associated account closed immediately.

§ 11 Changes to This Policy

masaya365 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, regulatory requirements, or platform operations. Material changes to this policy will be communicated to registered players via the mobile number or contact details on file, at least 7 days prior to the revised policy taking effect. The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of the masaya365 platform following notification of changes constitutes acceptance of the revised Privacy Policy.

§ 12 Contact & DPO

For questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by masaya365, please contact us through any of the following channels:

• Live Chat: Available 24/7 via the masaya365 platform (accessible after logging in)
• Email: [email protected] (displayed as plain text — not a clickable link)

For concerns that cannot be resolved through masaya365's internal process, you may lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint is available on the NPC's official website.