mwplay Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by mwplay ("mwplay," "we," "us," or "our") and applies to all personal data collected through the mwplay online gaming platform accessible at mwplay.app (the "Platform"), including all associated services, features, and communications.

mwplay is committed to protecting the privacy and personal data of all users ("Player," "User," or "you") in accordance with the Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations (IRR), and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account on mwplay, accessing the Platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein.

2 Data Controller Information

mwplay acts as the data controller in respect of all personal data collected through the Platform. As data controller, mwplay determines the purposes and means by which your personal data is processed. mwplay has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection legislation.

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact the mwplay Data Protection Officer using the contact details provided at the end of this Policy. All data-related inquiries will be acknowledged within five (5) business days and resolved within thirty (30) calendar days.

3 Data We Collect

mwplay collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect are described below.

3.1 Registration Data

When you create a mwplay account, we collect your full legal name, date of birth, residential address in the Philippines (including city, province, and postal code), email address, and mobile number. This information is required to verify your identity, confirm your eligibility to use the Platform, and communicate with you about your account.

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering (AML) regulations and PAGCOR requirements, mwplay may request copies of government-issued identification documents such as a Philippine passport, SSS ID, UMID, PhilSys National ID, or driver's license. We may also request proof of address and proof of payment method ownership.

3.3 Financial Data

mwplay collects transaction data related to your deposits and withdrawals, including payment method details (e.g., GCash account reference, BPI or BDO account details, PayMaya reference), transaction amounts in Philippine Peso (₱), and transaction timestamps. mwplay does not store full card numbers or banking credentials on its servers.

3.4 Gaming Activity Data

We collect data about your gaming activity on the Platform, including games played, wager amounts, win and loss records, session durations, and bonus usage. This data is used to operate the Platform, detect fraud, and support responsible gaming monitoring.

3.5 Technical & Device Data

When you access the mwplay Platform, we automatically collect certain technical data, including your IP address, browser type and version, operating system, device identifiers, screen resolution, and referring URLs. This data helps us maintain Platform security, diagnose technical issues, and improve user experience.

3.6 Communications Data

If you contact mwplay customer support via live chat, email, or any other channel, we retain records of those communications, including the content of messages and any attachments, for quality assurance, training, and dispute resolution purposes.

4 How We Use Your Data

mwplay uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your mwplay account, including processing your registration, verifying your identity, and managing your account settings.
• Service Delivery: To provide you with access to the mwplay Platform, process your deposits and withdrawals in Philippine Peso (₱), credit bonuses, and deliver the gaming services you have requested.
• Regulatory Compliance: To comply with our obligations under Philippine law, including AML regulations, PAGCOR licensing requirements, and the Data Privacy Act of 2012. This includes conducting KYC checks and filing mandatory reports where required.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the Platform. We use automated systems and manual review processes for this purpose.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide responsible gaming support in line with PAGCOR guidelines.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through our support channels.
• Marketing Communications: Where you have provided consent, to send you promotional offers, bonus notifications, and updates about new games and features on mwplay. You may withdraw this consent at any time.
• Platform Improvement: To analyse usage patterns, conduct research, and improve the functionality, performance, and user experience of the mwplay Platform.

5 Legal Basis for Processing

mwplay processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary to perform the contract between you and mwplay — specifically, to provide you with access to the Platform and deliver the gaming services you have requested upon registration.
• Legal Obligation: Processing is necessary for mwplay to comply with its legal and regulatory obligations under Philippine law, including AML legislation, PAGCOR licensing conditions, and tax reporting requirements.
• Legitimate Interests: Processing is necessary for the legitimate interests of mwplay, including fraud prevention, Platform security, and improving our services, provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as sending marketing communications or using non-essential cookies, mwplay relies on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

mwplay does not sell or rent your personal data to third parties. We may share your personal data with the following categories of recipients only where necessary and subject to appropriate safeguards:

6.1 Service Providers

mwplay engages trusted third-party service providers to assist in operating the Platform, including payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank partner gateways), KYC verification providers, cloud hosting providers, and customer support platform operators. These providers are contractually bound to process your data only on mwplay's instructions and to maintain appropriate security standards.

6.2 Regulatory & Law Enforcement Authorities

mwplay may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine government authorities where required by law, court order, or regulatory directive. mwplay will notify you of such disclosures where legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of all or part of mwplay's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to your data being transferred.

7 Cookies & Tracking Technologies

The mwplay Platform uses cookies and similar tracking technologies to enhance your experience, maintain session security, and analyse Platform usage. Cookies are small text files stored on your device when you visit the Platform.

7.1 Types of Cookies We Use

• Essential Cookies: Required for the Platform to function correctly. These include session authentication cookies and security tokens. They cannot be disabled without affecting Platform functionality.
• Analytical Cookies: Used to collect anonymised data about how users interact with the mwplay Platform, helping us identify areas for improvement. These cookies do not identify you personally.
• Preference Cookies: Used to remember your settings and preferences, such as language selection and display options, so you do not need to re-enter them on each visit.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content about mwplay. You may opt out of marketing cookies at any time via your browser settings or our cookie preference centre.

7.2 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling essential cookies may impair the functionality of the mwplay Platform, including your ability to log in and access your account. For detailed guidance on managing cookies in your specific browser, refer to your browser's help documentation.

8 Data Retention

mwplay retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations.

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of five (5) years from the date of submission, or longer if required by PAGCOR or AMLC regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with Philippine AML legislation.
• Gaming Activity Logs: Retained for a minimum of two (2) years from the date of each gaming session for dispute resolution and responsible gaming monitoring purposes.
• Support Communications: Retained for a minimum of two (2) years from the date of the last communication for quality assurance and dispute resolution purposes.
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent as evidence of compliance.

Upon expiry of the applicable retention period, mwplay will securely delete or anonymise your personal data in accordance with its data disposal procedures.

9 Data Security

mwplay implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the mwplay Platform.
• Encryption of sensitive data at rest, including KYC documents and financial records, using AES-256 encryption standards.
• Role-based access controls ensuring that only authorised mwplay personnel with a legitimate need can access personal data.
• Regular security audits, vulnerability assessments, and penetration testing conducted by independent security specialists.
• Multi-factor authentication (MFA) requirements for mwplay staff accessing systems that process personal data.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mwplay will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay where required.

10 Your Rights

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to your personal data held by mwplay:

• Right to be Informed: You have the right to be informed about how mwplay collects, uses, and processes your personal data, as set out in this Policy.
• Right of Access: You have the right to request a copy of the personal data mwplay holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data mwplay holds about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to mwplay's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on mwplay's legitimate interests.
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that mwplay has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact the mwplay Data Protection Officer at [email protected] (plain text — not a clickable link). We will respond to all verified requests within thirty (30) calendar days. We may need to verify your identity before processing your request.

11 Children's Privacy

The mwplay Platform is strictly intended for individuals who are twenty-one (21) years of age or older, in compliance with Philippine gambling regulations. mwplay does not knowingly collect personal data from individuals under the age of 21.

If mwplay becomes aware that it has inadvertently collected personal data from an individual under the age of 21, it will take immediate steps to delete that data and close the associated account. All funds held in such accounts will be handled in accordance with applicable regulations.

12 Changes to This Policy

mwplay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When we make material changes to this Policy, we will notify registered players by posting a prominent notice on the Platform and, where appropriate, by sending a notification to your registered email address.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed about how mwplay protects your personal data. Your continued use of the mwplay Platform following the posting of any changes constitutes your acceptance of the revised Policy.

If you have any questions about this Privacy Policy or mwplay's data practices, please do not hesitate to contact our Data Protection Officer at [email protected] (plain text — not a clickable link). For general support inquiries, you may also reach us at [email protected] (plain text — not a clickable link).

For more information about your rights and obligations as a mwplay player, please also review our Terms & Conditions and our Responsible Gaming policy.