macauph is committed to protecting the personal data of every Filipino player who uses our PAGCOR-regulated platform. This Privacy Policy explains what information we collect, why we collect it, how we use and protect it, and what rights you have under Philippine law. We handle your data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations.
These summaries help you quickly understand macauph's key privacy commitments. They do not replace the full legal text that follows — in any conflict, the full clauses govern.
macauph stores and processes your personal data on servers located within the Philippines or in jurisdictions that provide equivalent data protection. We do not transfer your data offshore to jurisdictions with weaker privacy standards without your explicit consent and without appropriate safeguards required under the Data Privacy Act of 2012.
macauph does not sell, rent, auction, or otherwise commercially transfer your personal information to unaffiliated third parties. Period. Data sharing outside of macauph is limited to PAGCOR regulatory reporting obligations, payment processing partners, and fraud and AML compliance services — all as detailed in this Policy and subject to binding data processing agreements.
Under the Philippine Data Privacy Act, you have the right to access your personal data, correct inaccuracies, object to certain processing activities, and — subject to legal retention requirements — request deletion of your data. macauph's Data Protection Officer can be reached to exercise any of these rights, and we aim to respond to all data rights requests within thirty calendar days.
macauph collects only the personal data that is reasonably necessary for the specific purposes described in this Policy — account registration, KYC verification, payment processing, regulatory compliance, and service delivery. We do not collect personal information speculatively or build data profiles beyond what our PAGCOR licensing obligations and platform operations require.
macauph will only send you promotional communications — bonus offers, new game announcements, tournament invitations — if you have opted in to receive them during registration or through your Account settings. You may withdraw your marketing consent at any time via Account preferences or by contacting macauph support. Withdrawal of marketing consent does not affect your ability to use the Platform.
As a PAGCOR-licensed operator, macauph is required by law to provide certain player data to PAGCOR as part of its ongoing regulatory reporting obligations. This mandatory disclosure is a condition of our license and of Philippine gaming law, not a voluntary commercial arrangement. macauph shares only the minimum data required to satisfy PAGCOR's specific reporting requirements.
The Data Privacy Act of 2012 (RA 10173) grants every Filipino data subject specific rights with respect to their personal information. As a macauph player, these rights apply to you and macauph is obligated to honour them.
You have the right to request a copy of the personal data macauph holds about you, including information on how it is being used, the source of the data, and any third parties with whom it has been shared. macauph will provide this information within thirty (30) calendar days of a verified request.
If any personal data macauph holds about you is inaccurate, incomplete, or outdated, you have the right to request correction. You may update basic account information directly through your macauph Account settings. For KYC document corrections, please contact macauph's Data Protection Officer.
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected and where no legal obligation requires its continued retention. Note that PAGCOR regulations and Philippine AML law require macauph to retain certain financial and identity records for defined minimum periods regardless of deletion requests.
You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your individual circumstances provide compelling grounds. macauph will honour such objections unless a compelling legal basis for continued processing applies.
Where macauph processes your personal data by automated means based on your consent or a contract, you have the right to receive your data in a structured, commonly used, machine-readable format. This allows you to transmit your data to another controller where technically feasible.
If you believe macauph has mishandled your personal data, you have the right to lodge a complaint with the National Privacy Commission (NPC), the Philippine government authority responsible for enforcing the Data Privacy Act. macauph's internal complaints process should be exhausted first, but NPC escalation is always available to you.
For the purposes of this Privacy Policy, the following terms shall have the meanings set out below:
"macauph," "we," "us," "our" — the operator of the macauph online gaming platform at macauph.vip, licensed by the Philippine Amusement and Gaming Corporation (PAGCOR).
"Personal Data" — any information from which an individual can be directly or indirectly identified, including but not limited to name, mobile number, date of birth, government ID details, financial account information, IP address, and device identifiers, as defined under RA 10173.
"Sensitive Personal Information" — a subset of personal data that includes government-issued identification numbers, financial account numbers, health information, and other data categories specifically designated under Section 3(l) of RA 10173 as requiring heightened protection.
"Data Subject" — any identified or identifiable natural person whose personal data is collected and processed by macauph, including all registered Players.
"Processing" — any operation performed on personal data, including collection, recording, storage, modification, retrieval, use, disclosure, erasure, or destruction.
"DPO" — macauph's designated Data Protection Officer, responsible for overseeing compliance with this Policy and RA 10173.
"NPC" — the National Privacy Commission of the Philippines, the independent government body established under RA 10173 to administer and enforce the Data Privacy Act.
"PAGCOR" — the Philippine Amusement and Gaming Corporation, the regulatory authority that issues and supervises macauph's gaming license.
2.1 macauph is the personal information controller as defined under RA 10173 with respect to all personal data collected through the macauph Platform. macauph determines the purposes and means of processing your personal data in the course of providing its online gaming services.
2.2 macauph has registered its data processing activities with the National Privacy Commission as required under NPC Circular No. 17-01. macauph's registration details are available upon written request to our Data Protection Officer.
2.3 This Privacy Policy applies to all personal data collected through the macauph Platform, including data collected during account registration, gameplay, payment transactions, customer support interactions, and participation in macauph promotional programmes.
3.1 macauph collects personal data in the following categories depending on your level of engagement with the Platform:
| Category | Data Items | When Collected |
|---|---|---|
| Registration Data | Mobile number, username, date of birth, nationality, province/city of residence | At account creation |
| KYC Identity Data | Full legal name, government ID type and number (PhilSys, passport, driver's license, SSS ID, UMID, Voter's ID), ID photograph, selfie verification image | During KYC verification process |
| Financial Data | GCash account reference, Maya account reference, BPI/BDO account reference (last 4 digits), deposit and withdrawal amounts, transaction timestamps | During payment transactions |
| Gaming Activity Data | Game sessions, bet history, win/loss records, game type and duration, wagering patterns | During gameplay |
| Device & Technical Data | IP address, device type and OS, browser type, session tokens, connection timestamps | On each Platform session |
| Support Communications | Live chat transcripts, email correspondence, support ticket content | When contacting support |
| Responsible Gaming Data | Deposit limit settings, self-exclusion requests, cooling-off period activations | When responsible gaming tools are used |
3.2 macauph does not collect racial or ethnic origin data, political opinions, religious beliefs, biometric data beyond identity photo verification, or health data beyond that disclosed voluntarily in responsible gaming contexts.
Automatic Data Collection: Like most online platforms, macauph automatically collects certain technical data when you access the Platform — including IP address, device identifiers, and session activity logs. This data is used primarily for security monitoring, fraud prevention, and platform performance optimization. It is not used for building individual advertising profiles or sold to data brokers.
4.1 macauph processes your personal data only for specific, legitimate purposes declared at the time of collection or subsequently notified to you. The primary purposes are:
4.2 macauph does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without a human review mechanism, except where required by PAGCOR's fraud and AML detection systems.
5.1 macauph processes personal data only where a lawful basis for processing exists under RA 10173. The applicable bases for each processing activity are:
5.2 Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing conducted prior to withdrawal. Withdrawal of consent for marketing communications does not affect your ability to use the macauph Platform.
6.1 macauph shares personal data with third parties only in the following circumstances, and in each case shares the minimum data necessary for the specific purpose:
6.2 All third-party service providers who process personal data on macauph's behalf are bound by written data processing agreements that require them to process the data only for the specified purposes, implement appropriate security measures, and comply with RA 10173.
No Commercial Data Sales: macauph does not engage in any arrangement by which your personal data is sold, rented, or transferred to any third party for that party's own commercial purposes. macauph's data sharing is exclusively operational and compliance-driven.
7.1 macauph retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to any legal minimum retention periods imposed by PAGCOR regulations or Philippine law.
7.2 Specific retention periods applicable to macauph's data categories are as follows:
7.3 Upon expiry of the applicable retention period, macauph will securely delete or anonymize personal data in accordance with its data destruction procedures. Anonymized data that no longer identifies any individual may be retained for analytical purposes without restriction.
8.1 macauph implements a comprehensive set of technical and organizational security measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, or destruction. These measures include:
8.2 In the event of a personal data breach that is likely to result in harm to affected Data Subjects, macauph will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, as required under NPC Circular No. 16-03, and will notify affected Players without undue delay.
8.3 Notwithstanding the security measures described above, no online platform can guarantee absolute security against all possible threats. You are encouraged to use a strong, unique password for your macauph Account and to enable SMS OTP two-factor authentication to reduce the risk of unauthorized account access.
9.1 macauph uses cookies and similar tracking technologies on the Platform for the following purposes:
9.2 macauph does not deploy third-party advertising cookies or cross-site tracking technologies that profile your activity outside of the macauph Platform. macauph does not participate in real-time bidding or programmatic advertising networks.
9.3 You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may impair your ability to log in or use certain Platform functions.
10.1 The macauph Platform is strictly for adults aged 21 years and above, consistent with PAGCOR's minimum age requirements for online casino gaming in the Philippines. macauph does not knowingly collect personal data from individuals under 21 years of age.
10.2 Age verification is enforced through macauph's mandatory KYC process, which requires submission of a Philippine government-issued identity document confirming the Player's date of birth prior to the activation of full account privileges.
10.3 If macauph becomes aware that personal data has been collected from an individual under 21 years of age, macauph will immediately suspend the relevant Account, delete the collected data to the extent legally permissible, and report the incident to PAGCOR as required by macauph's licensing conditions.
Parental Responsibility: Adults who share devices with minors are reminded to ensure that their macauph login credentials are kept private and that minors are not able to access the macauph Platform through a shared device. macauph's session timeout controls and device lock features can assist in preventing unintended access.
11.1 To exercise any of your rights under RA 10173 with respect to personal data held by macauph, you may submit a written request to macauph's Data Protection Officer using the contact details set out in Section 14 of this Policy.
11.2 Requests must include your full legal name as registered on your macauph Account, your registered Philippine mobile number, a description of the right you wish to exercise and the specific data concerned, and, where macauph considers it reasonable for verification purposes, a copy of your government-issued identity document.
11.3 macauph will acknowledge receipt of your request within five (5) business days and provide a substantive response within thirty (30) calendar days. Where a request is complex or involves a large volume of data, macauph may extend the response period by an additional thirty (30) days with prior notification.
11.4 macauph will not charge a fee for processing data rights requests in ordinary circumstances. Where requests are manifestly unfounded, repetitive, or excessive, macauph reserves the right to charge a reasonable administrative fee or decline to act on the request, with written reasons provided.
11.5 If you are not satisfied with macauph's response to your data rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.
12.1 macauph primarily processes and stores personal data within the Philippines. Where operational requirements necessitate the transfer of personal data to processors or service providers located outside the Philippines — for example, cloud infrastructure providers or international game technology partners — macauph ensures that such transfers comply with Section 21 of RA 10173.
12.2 Cross-border transfers of personal data are carried out only where:
12.3 KYC identity documents and Philippine government-issued ID data are not transferred outside the Philippines except as strictly required by PAGCOR's compliance framework and with appropriate safeguards in place.
13.1 macauph may amend this Privacy Policy from time to time to reflect changes in our data processing activities, changes in applicable Philippine law or NPC regulations, PAGCOR regulatory requirements, or developments in best practice. Material amendments will be communicated to Players via notice on the Platform.
13.2 The current version of this Policy is always available at macauph.vip/privacy-policy. The effective date displayed at the top of this document confirms when the current version came into force.
13.3 Your continued use of the macauph Platform following publication of an amended Privacy Policy constitutes your acknowledgment of the changes. If you object to any amendment, you should cease using the Platform and request Account closure in accordance with the Terms and Conditions.
14.1 macauph has designated a Data Protection Officer (DPO) in accordance with Section 21(c) of RA 10173 and NPC Circular No. 17-01. The DPO is responsible for overseeing macauph's compliance with this Privacy Policy and the Data Privacy Act.
14.2 To contact macauph's Data Protection Officer or to exercise any data rights under this Policy, please use the following channels:
Data Protection Officer — macauph
Email: [email protected] — please include "DPO Request" in the subject line of your email to ensure routing to the Data Protection Officer.
Live Chat: Available 24/7 via the macauph Platform — for urgent data security concerns, live chat is recommended for fastest initial response.
14.3 For regulatory matters relating to the Data Privacy Act of 2012 that are not resolved through macauph's internal process, you may contact the National Privacy Commission of the Philippines at their official government offices and portal.
Our Data Protection Officer and 24/7 support team are here to help with any privacy-related queries. Sign in to access your account and data settings.