Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") describes how megaperya.ph ("the Platform," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "Player," or "User") who access or use the megaperya.ph website at megaperyaph.org, its mobile interface, games, and all related services (collectively, the "Services").

This Policy applies to all personal data processed by megaperya.ph in connection with the Services, regardless of whether you are a registered Player, a visitor browsing the website, or a prospective customer. It covers data collected online through the Platform as well as data provided directly to our customer support team.

By accessing or using megaperya.ph, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

2. Data Controller Information

megaperya.ph acts as the Personal Information Controller (as defined under Republic Act No. 10173, the Data Privacy Act of 2012) with respect to the personal data collected through the Platform. megaperya.ph operates under the regulatory oversight of the Philippine Amusement and Gaming Corporation (PAGCOR).

For all data privacy matters, you may contact our designated Data Protection Officer (DPO) at:

• Email: [email protected]
• Subject Line: Data Privacy Inquiry – [Your Full Name]

3. Personal Data We Collect

3.1 Registration and Identity Data

When you create a megaperya.ph account, we collect:

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Email address
• Mobile phone number
• Residential address (city, province, country)
• Username and encrypted password

3.2 Identity Verification (KYC) Data

As required by PAGCOR regulations and anti-money laundering (AML) compliance, we may collect:

• Government-issued ID (Philippine National ID, passport, driver's license, SSS/GSIS ID, or equivalent)
• Proof of address (utility bill, bank statement, or barangay certificate)
• Selfie or live photo for identity matching
• Source of funds declaration (for high-value accounts)

3.3 Financial and Transaction Data

To process deposits and withdrawals, we collect:

• GCash or Maya account number (mobile number)
• Bank account details (account name, account number, bank name) for bank transfer transactions
• Debit card details (card number, expiry, CVV — processed securely and not stored in plain text)
• Transaction history, including deposit amounts, withdrawal amounts, dates, and payment method used

3.4 Gaming Activity Data

We collect data about your use of the Platform, including:

• Games played, wagers placed, wins, and losses
• Session duration and frequency of play
• Bonus and promotion usage
• Responsible gaming tool settings (deposit limits, session timers, self-exclusion status)

3.5 Technical and Device Data

When you access megaperya.ph, we automatically collect:

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, time spent on pages, and navigation paths
• Referring URL and search terms used to find the Platform
• Cookie identifiers and session tokens

3.6 Communications Data

If you contact megaperya.ph customer support, we collect the content of your communications, including chat transcripts, email correspondence, and support ticket records.

4. How We Collect Your Data

megaperya.ph collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions.
• Automatically: Through cookies, web beacons, server logs, and similar tracking technologies when you access the Platform.
• From third parties: From payment processors (GCash, Maya, banks) to confirm transaction details; from identity verification service providers during KYC; and from PAGCOR or other regulatory bodies as required by law.

5. Legal Basis for Processing

megaperya.ph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfill our obligations under the Terms and Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with PAGCOR regulations, Anti-Money Laundering Act (AMLA) requirements, and other applicable Philippine laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where these interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time.

6. How We Use Your Personal Data

megaperya.ph uses your personal data for the following purposes:

• Creating and managing your megaperya.ph account
• Verifying your identity and age (21+ requirement) in compliance with PAGCOR regulations
• Processing deposits and withdrawals via GCash, Maya, and Philippine bank transfers
• Providing access to games including slots, bingo, Lucky Dice, European Roulette Pro, and live dealer tables
• Administering bonuses, promotions, and loyalty programs
• Detecting and preventing fraud, money laundering, and other illegal activities
• Monitoring gaming activity for responsible gaming purposes and enforcing self-imposed limits
• Providing customer support and resolving disputes
• Sending transactional communications (deposit confirmations, withdrawal notifications, security alerts)
• Sending marketing communications about megaperya.ph promotions and new games (with your consent)
• Improving the Platform through analytics and user behavior research
• Complying with legal and regulatory obligations

7. Sharing and Disclosure of Personal Data

megaperya.ph does not sell, rent, or trade your personal data to third parties for marketing purposes. We share your data only in the following circumstances:

7.1 Service Providers

We share data with trusted third-party service providers who assist in operating the Platform, including:

• Payment processors (GCash, Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) — for transaction processing only
• Identity verification providers — for KYC compliance
• Game software providers — limited to session and wagering data necessary to deliver games
• Cloud hosting and IT infrastructure providers — under strict data processing agreements
• Customer support platform providers — for managing support tickets and chat

All service providers are contractually bound to process your data only as instructed by megaperya.ph and to maintain appropriate security standards.

7.2 Regulatory and Legal Disclosure

We may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, or courts when required by Philippine law, a valid court order, or a regulatory directive. megaperya.ph will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of megaperya.ph's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the new controller prior to the transfer taking effect.

8. Data Retention

megaperya.ph retains your personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR regulations and the Anti-Money Laundering Act.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with AMLA requirements.
• KYC documents: Retained for a minimum of five (5) years after the end of the business relationship.
• Customer support records: Retained for two (2) years from the date of the last interaction.
• Technical and device data: Retained for up to twelve (12) months from collection.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year for audit purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines.

9. Security Measures

megaperya.ph implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and our servers
• AES-256 encryption for sensitive data stored in our databases, including payment details and identity documents
• Multi-factor authentication (MFA) available for all player accounts
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis
• Regular penetration testing and vulnerability assessments conducted by independent security firms
• 24/7 intrusion detection and monitoring systems on all production infrastructure
• Incident response procedures aligned with NPC breach notification requirements (72-hour notification window)

Despite these measures, no system is completely immune to security risks. You are encouraged to use a strong, unique password for your megaperya.ph account and to enable MFA where available.

10. Cookies and Tracking Technologies

10.1 Types of Cookies Used

megaperya.ph uses the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game display options, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymized data about how Players use the Platform to help us improve performance and user experience. We use privacy-respecting analytics tools that do not share data with advertising networks.

megaperya.ph does not use third-party advertising or behavioral tracking cookies.

10.2 Managing Cookies

You can manage or disable non-essential cookies through your browser settings. Note that disabling functional cookies may affect your experience on the Platform. Strictly necessary cookies cannot be disabled as they are essential for the Platform to operate securely.

11. Your Rights Under RA 10173

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by megaperya.ph:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it — as described in this Policy.
• Right of access: The right to request a copy of the personal data we hold about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] with the subject line "Data Privacy Request – [Your Full Name]." We will respond within fifteen (15) business days of receiving your request, as required by NPC regulations.

12. Children's Privacy

megaperya.ph is strictly intended for individuals who are 21 years of age or older, in accordance with PAGCOR regulations. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately delete that data and close the associated account.

If you are a parent or guardian and believe that a minor has registered on megaperya.ph, please contact us immediately at [email protected].

13. Cross-Border Data Transfers

megaperya.ph primarily stores and processes your personal data within the Philippines. In limited circumstances, data may be transferred to service providers located outside the Philippines — for example, cloud infrastructure providers or game software vendors with servers in other jurisdictions.

Any cross-border transfer of personal data is conducted in compliance with Section 21 of the Data Privacy Act of 2012 and applicable NPC regulations. We ensure that recipient countries or organizations provide an adequate level of data protection, and we implement appropriate safeguards such as data processing agreements incorporating standard contractual clauses.

14. Changes to This Privacy Policy

megaperya.ph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or regulatory guidance. Material changes will be communicated to registered Players via email or a prominent notice on the Platform at least seven (7) days before taking effect.

The "Last Updated" date at the top of this Policy indicates when the most recent changes were made. Your continued use of megaperya.ph after the effective date of any amendment constitutes your acceptance of the revised Policy.

15. How to Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by megaperya.ph, please contact us:

• Email: [email protected]
• Subject Line: Privacy Policy Inquiry
• Response Time: Within 72 hours for general inquiries; within 15 business days for formal data subject requests

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been adequately addressed by megaperya.ph.