mafa8 Privacy Policy

1. Overview & Data Controller

mafa8 ("we," "us," "our") is the data controller responsible for the personal data of players who use the mafa8 platform. As data controller, mafa8 determines the purposes and means of processing your personal data and is accountable for ensuring that processing is carried out lawfully, fairly, and transparently.

This Privacy Policy is designed to inform you — our valued Filipino players — about how mafa8 handles your personal information from the moment you visit our site to the moment you close your account. We believe you have a right to know exactly what happens with your data, and we've written this Policy in plain, straightforward English so it's easy to understand.

mafa8 is committed to full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

2. Personal Data We Collect

mafa8 collects the following categories of personal data from players:

2.1 Identity & Contact Data

• Full legal name
• Date of birth (for age verification — you must be 21+)
• Email address
• Mobile phone number
• Residential address (province, city, barangay)
• Government-issued ID details (for KYC verification)

2.2 Financial Data

• GCash account number or registered mobile number
• PayMaya / Maya account details
• Bank account details (account name, account number, bank name) for bank transfer transactions
• Debit card details (card number masked, expiry date)
• Transaction history (deposits, withdrawals, amounts, dates)

2.3 Gaming & Activity Data

• Game history and session logs
• Betting patterns and wagering amounts
• Bonus and promotion usage
• Login timestamps and session durations
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

2.4 Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookies and similar tracking technologies (see Section 9)
• Platform interaction logs

2.5 Communications Data

• Customer support chat transcripts and email correspondence
• Survey responses and feedback submissions
• Marketing preference settings

3. How We Collect Your Data

mafa8 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or responding to surveys;
• Automated collection: Technical data collected automatically when you access the mafa8 platform, including through cookies, log files, and analytics tools;
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-fraud partners; payment verification data from payment processors such as GCash and PayMaya.

mafa8 does not collect sensitive personal information (such as racial or ethnic origin, political opinions, religious beliefs, or health data) unless specifically required for responsible gaming compliance purposes (e.g., self-exclusion records).

4. Purpose of Data Processing

5. Legal Basis for Processing

mafa8 processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to perform our contract with you — i.e., to provide the mafa8 gaming service, process payments, and manage your account;
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR requirements, and tax obligations;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time.

6. Data Sharing & Disclosure

mafa8 does not sell your personal data. We may share your data with the following categories of recipients only where necessary and with appropriate safeguards:

• Payment processors: GCash, PayMaya/Maya, and banking partners — to process your deposits and withdrawals;
• KYC and identity verification providers: To verify your identity and age in compliance with regulatory requirements;
• Fraud prevention and security services: To detect and prevent fraudulent activity on the platform;
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where required by law or court order;
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers who process data on our behalf under strict data processing agreements;
• Responsible gaming organizations: Where required to process self-exclusion requests or referrals to support services.

7. Data Retention

mafa8 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Our general retention periods are:

• Active account data: Retained for the duration of your account and for a period of five (5) years following account closure, in compliance with Philippine anti-money laundering record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• KYC and identity verification documents: Retained for five (5) years following account closure or the last transaction, whichever is later;
• Customer support records: Retained for three (3) years from the date of the interaction;
• Marketing preference data: Retained until you withdraw consent or close your account;
• Technical and log data: Retained for up to twelve (12) months, after which it is anonymized or deleted.

When personal data is no longer required, mafa8 will securely delete or anonymize it in accordance with our internal data disposal procedures.

8. Data Security

mafa8 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption: All data transmitted between your device and the mafa8 platform is encrypted using industry-standard SSL/TLS protocols;
• Encrypted data storage: Sensitive personal and financial data is stored in encrypted form on secured servers;
• Access controls: Access to personal data is restricted to authorized mafa8 personnel on a strict need-to-know basis, enforced through role-based access controls;
• Firewalls and intrusion detection: mafa8 employs network-level security tools to detect and prevent unauthorized access attempts;
• Regular security audits: Our platform and data infrastructure undergo periodic security assessments and penetration testing;
• Staff training: All mafa8 personnel who handle personal data receive regular data protection and security training.

9. Cookies & Tracking Technologies

mafa8 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. The types of cookies we use are:

9.1 Strictly Necessary Cookies

These cookies are essential for the mafa8 platform to function correctly. They enable core features such as account login sessions, security tokens, and session management. These cookies cannot be disabled without affecting platform functionality.

9.2 Performance & Analytics Cookies

These cookies collect anonymized information about how players use the mafa8 platform — such as which pages are visited most frequently and how long sessions last. This data helps us improve the platform experience. These cookies do not identify you personally.

9.3 Functional Cookies

These cookies remember your preferences — such as your preferred language, display settings, and responsible gaming tool configurations — so you don't have to reset them every time you visit.

9.4 Marketing Cookies

With your consent, mafa8 may use cookies to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. You can withdraw consent for marketing cookies at any time through your account settings or browser controls.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by mafa8:

• Right to be informed: You have the right to know how your personal data is being collected, processed, and used — which is the primary purpose of this Privacy Policy;
• Right of access: You may request a copy of the personal data mafa8 holds about you, along with information about how it is being processed;
• Right to rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: You may request that mafa8 provide your personal data in a structured, commonly used, machine-readable format;
• Right to lodge a complaint: If you believe mafa8 has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in Section 14. mafa8 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

11. Minors & Age Policy

mafa8 employs age verification procedures during account registration and KYC review to prevent underage access. If you believe a minor has registered on the mafa8 platform, please contact our support team immediately so we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. mafa8 supports responsible gaming initiatives and takes underage gambling prevention seriously.

12. Cross-Border Data Transfers

In some cases, mafa8 may transfer your personal data to service providers or infrastructure partners located outside the Philippines — for example, cloud hosting providers or international fraud prevention services. Where such transfers occur, mafa8 ensures that appropriate safeguards are in place to protect your data, including:

• Contractual clauses that require the recipient to apply data protection standards equivalent to those required under Philippine law;
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission;
• Your explicit consent, where required.

mafa8 will not transfer your personal data internationally in a manner that undermines the protections afforded to you under the Philippine Data Privacy Act.

13. Changes to This Privacy Policy

mafa8 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or a prominent notice on the mafa8 platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. We encourage you to review this Privacy Policy periodically to stay informed about how mafa8 protects your data. Your continued use of the mafa8 platform following notification of changes constitutes your acceptance of the revised Policy.

14. Contact & Data Protection Officer

mafa8 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact us through the following channels:

• Data Protection Officer: mafa8 DPO Office
• Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 on the mafa8 platform

If you are not satisfied with mafa8's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.