mvph Privacy Policy

1. Introduction

mvph ("we," "us," "our," "the Platform") is committed to protecting the privacy and personal data of all registered players and visitors. We recognise that Filipino players entrust us with sensitive personal and financial information, and we take that responsibility seriously.

This Privacy Policy describes in plain terms how mvph collects, uses, stores, shares, and protects your personal data. It has been drafted in accordance with the requirements of Republic Act 10173, otherwise known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the regulations issued by the National Privacy Commission (NPC) of the Philippines. It also reflects the data-handling obligations imposed on mvph as a PAGCOR-regulated gaming operator.

This Privacy Policy should be read together with the mvph Terms & Conditions, which govern the overall contractual relationship between you and the platform. Where this Privacy Policy uses terms defined in the Terms & Conditions, those definitions apply here as well.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, mvph acts as the Personal Information Controller (PIC) in respect of all personal data collected through the platform. This means that mvph determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the DPA and all applicable NPC issuances.

Any queries, requests, or complaints relating to the processing of your personal data by mvph should be directed to our Data Protection Officer (DPO) using the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

mvph collects only the personal data that is necessary for the purposes described in this Privacy Policy. The categories of personal data we collect are set out in the table below:

4. How We Collect Your Data

mvph collects personal data through the following means:

4.1 Directly From You

• Registration: When you create your mvph account, you provide your name, date of birth, mobile number, and email address.
• KYC Submission: When completing identity verification, you submit government-issued ID documents and proof of address.
• Deposits and Withdrawals: When linking a GCash wallet, PayMaya account, or Philippine bank account for transactions.
• Support Interactions: When you contact mvph via live chat or email, the content of those interactions is recorded.
• Responsible Gaming Tools: When you set deposit limits, request a cooling-off period, or apply for self-exclusion.

4.2 Automatically

• Platform Activity: Game session data, bet history, and login timestamps are automatically recorded as part of normal platform operation.
• Technical Identifiers: Your IP address, device ID, browser fingerprint, and session cookies are collected automatically when you access the mvph platform.

4.3 From Third Parties

• Payment Processors: GCash, PayMaya, and partner banks may provide transaction confirmation data to facilitate payment processing and fraud detection.
• Identity Verification Providers: Where mvph uses a third-party KYC service to verify government ID documents, that provider returns a verification result to the platform.
• PAGCOR: In certain circumstances, PAGCOR may provide regulatory information relevant to a player's account status, such as self-exclusion registry matches.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, mvph must have a valid legal basis for each category of personal data processing. The following legal bases apply to mvph's data processing activities:

• Contractual Necessity: Processing your identity, contact, and financial data is necessary to create and maintain your account, process deposits and withdrawals, and deliver gaming services under the mvph Terms & Conditions.
• Legal Obligation: Processing for KYC verification, age verification, anti-money-laundering checks, and regulatory reporting to PAGCOR is required by Philippine law, including the Anti-Money Laundering Act (RA 9160 as amended) and PAGCOR licensing conditions.
• Legitimate Interests: Processing technical and gaming data for fraud prevention, platform security, and responsible gaming monitoring is carried out on the basis of mvph's legitimate interests, balanced against your privacy rights.
• Consent: Where mvph sends you optional promotional communications, this is done on the basis of your consent, which you may withdraw at any time by contacting [email protected] or adjusting your account communication preferences.

6. How We Use Your Personal Data

mvph uses the personal data it collects for the following specific purposes:

1. Account creation and management: Registering your player profile, verifying your identity, and maintaining your account in a secure state.
2. Age and eligibility verification: Confirming that you are 21 years of age or older and physically located within the Philippines, as required by PAGCOR regulations.
3. Payment processing: Facilitating deposits through GCash, PayMaya, BPI, BDO, Metrobank, and UnionBank, and processing withdrawal requests to your verified payment method.
4. Regulatory compliance: Meeting mvph's obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, the Data Privacy Act, and any other applicable Philippine law.
5. Fraud prevention and security: Detecting and preventing unauthorised account access, bonus abuse, multi-accounting, and other forms of fraudulent or prohibited conduct.
6. Responsible gaming: Monitoring gaming activity to identify patterns consistent with problem gambling and administering deposit limits, cooling-off periods, and self-exclusion requests.
7. Customer support: Responding to account inquiries, dispute submissions, and technical support requests.
8. Service improvement: Analysing aggregated, anonymised usage data to improve platform performance, game selection, and user experience.
9. Promotional communications: Sending you bonus offers, tournament announcements, and platform updates where you have consented to receive such communications.

7. Data Sharing and Disclosure

mvph does not sell your personal data. We share your data only in the circumstances described below, and only to the extent strictly necessary for the stated purpose:

7.1 Regulatory and Law Enforcement Authorities

mvph is legally required to share certain player data with PAGCOR as a condition of its gaming licence. We may also be required to disclose information to the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue (BIR), or other Philippine government bodies when required by law, court order, or regulatory direction.

7.2 Payment Service Providers

Transaction data is shared with GCash, PayMaya, and our partner Philippine banks (BPI, BDO, Metrobank, UnionBank) solely to the extent required to process your deposits and withdrawals. These providers are bound by their own privacy policies and by Philippine financial services regulations.

7.3 Identity Verification Providers

Where mvph uses a third-party KYC technology provider to assist with the verification of government-issued ID documents, that provider receives and processes the relevant document data under a data processing agreement that obligates them to handle it securely and use it only for the verification purpose.

7.4 Technology and Infrastructure Providers

mvph uses third-party cloud infrastructure and software providers to host and operate the platform. These providers act as Personal Information Processors under the DPA and are bound by contractual obligations that restrict their use of your data to platform operation purposes only.

7.5 Business Transfers

In the event of a merger, acquisition, or transfer of ownership of the mvph platform, player data may be transferred to the successor entity as part of that transaction. Affected players will be notified in advance and, where the DPA requires, their consent will be sought before any such transfer is completed.

8. Cookies and Tracking Technologies

mvph uses cookies and similar tracking technologies on the platform to ensure proper functionality, maintain your session, and gather aggregated usage analytics. The following categories of cookies are in use:

• Strictly Necessary Cookies: These cookies are essential for the platform to function. They maintain your login session, remember your language preference, and enable core security features. These cannot be disabled.
• Functional Cookies: These remember your display preferences and game settings so you do not need to reconfigure them on each visit.
• Analytics Cookies: These collect aggregated, anonymised data about how players navigate and use the platform. This data is used solely to improve the mvph service and is not linked back to individual identities.
• Security Cookies: These help mvph detect and prevent fraudulent login attempts, bot activity, and other security threats by identifying unusual usage patterns.

You may manage non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of parts of the mvph platform. mvph does not use third-party advertising or behavioural tracking cookies.

9. Data Retention

mvph retains your personal data only for as long as is necessary for the purposes for which it was collected, taking into account applicable legal and regulatory retention obligations. The following general retention periods apply:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR licensing conditions and the Anti-Money Laundering Act.
• Transaction and financial records: Retained for a minimum of five (5) years in accordance with AMLC record-keeping requirements and BIR regulations.
• Gaming session records: Retained for a minimum of three (3) years for regulatory reporting and dispute resolution purposes.
• Support communications: Retained for two (2) years following the resolution of the relevant inquiry or dispute.
• Marketing consent records: Retained for the duration of your account plus two (2) years to evidence consent history in case of regulatory audit.

Following the expiry of applicable retention periods, your data will be securely deleted or irreversibly anonymised. You may request early deletion of data that mvph is not legally obligated to retain by exercising your right to erasure as described in Section 11.

10. Data Security

mvph implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and the mvph platform is encrypted using 256-bit TLS/SSL protocols. Data is never transmitted over unencrypted connections.
• Encryption at rest: Sensitive data — including KYC documents, financial account details, and password hashes — is encrypted at rest using industry-standard encryption algorithms in our secure data infrastructure.
• Access controls: Access to personal data is restricted to mvph personnel on a strictly need-to-know basis. All staff with access to personal data are subject to confidentiality obligations and receive data privacy training.
• Penetration testing: The mvph platform undergoes regular security assessments, including penetration testing and vulnerability scanning, to identify and remediate security weaknesses before they can be exploited.
• Incident response: mvph maintains a documented data breach response procedure. In the event of a breach affecting your personal data, we will notify the National Privacy Commission and affected players within the timeframes required by the DPA.
• Two-factor authentication: SMS OTP two-factor authentication is available to all players and strongly recommended to add an additional layer of protection to your mvph Login credentials.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, as a registered mvph player you have the following rights in respect of your personal data. mvph is committed to facilitating the exercise of these rights promptly and without unnecessary delay:

To exercise any of the above rights, please submit a written request to [email protected] with the subject line "Data Subject Request." mvph will acknowledge your request within 72 hours and respond substantively within fifteen (15) business days, as required by the DPA. We may need to verify your identity before processing certain requests to prevent unauthorised access to another person's data.

12. Children's Privacy and Age Restriction

The mvph platform is strictly prohibited for use by persons under the age of 21 years. mvph does not knowingly collect personal data from individuals under 21. This minimum age requirement reflects Philippine law and PAGCOR regulations governing participation in casino-style online gambling.

If mvph discovers during the KYC process or at any other point that an account has been registered by or is being used by a person under 21, the account will be immediately suspended, all funds will be handled in accordance with PAGCOR regulatory guidance, and any personal data collected will be processed solely to the extent required for regulatory reporting before deletion.

If you believe that a minor has registered on the mvph platform, please notify us immediately at [email protected] so that we can take prompt action.

13. Third-Party Links and Services

The mvph platform may contain references to payment services (GCash, PayMaya, Philippine banks) and game content providers in the context of platform operation. Where you interact directly with a third-party service — such as GCash for a deposit — that service is subject to its own privacy policy and data practices. mvph is not responsible for the privacy practices of third-party services.

mvph does not embed third-party advertising networks, social media tracking pixels, or behavioural advertising tools on the platform. Any analytics tools used by mvph are configured to collect only anonymised, aggregated data that cannot be used to identify individual players.

14. Updates to This Privacy Policy

mvph reviews and updates this Privacy Policy periodically to reflect changes in applicable Philippine law, NPC guidance, PAGCOR requirements, or platform practices. The "Last Updated" date at the top of this page indicates when the current version was published.

Where changes to this Privacy Policy are material — meaning they affect your rights or the way we process your personal data in a significant way — mvph will notify registered players via the email address on file or through an in-platform notification prior to the changes taking effect. For minor or clarificatory changes, the updated Policy will be published on this page without separate notice.

Your continued use of the mvph platform following the effective date of any update constitutes your acknowledgment of the revised Privacy Policy. If you do not accept the revised Policy, you should cease using the platform and contact [email protected] to request account closure.

15. Contact and Complaints

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a concern about how mvph has handled your personal data, please contact our Data Protection Officer using the details below:

• Email: [email protected] (plain text — not a clickable link; please copy and paste into your email client)
• Subject Line: Please use "Privacy Policy Query" or "Data Subject Request" as appropriate so your message reaches the DPO team promptly.
• Response Time: mvph will acknowledge all privacy-related queries within 72 hours and provide a substantive response within fifteen (15) business days.

If you are not satisfied with how mvph has handled your privacy concern after raising it with us directly, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information about the NPC complaint process is available through the NPC's official government channels.