mwplay Privacy Policy

mwplay is the operator of the online casino and sports betting platform accessible at mwplay.bio ("Platform"). For the purposes of this Privacy Policy, mwplay acts as the data controller in respect of personal data collected from players and visitors in connection with the use of the Platform.

mwplay is committed to protecting the privacy and security of all personal information entrusted to it by its players. This commitment is embedded in how the Platform is designed, how data flows are managed, and how staff are trained to handle personal information responsibly.

This Privacy Policy applies to all personal data processed by mwplay in connection with:

• Registration and maintenance of a Player account on the Platform;
• Use of any game, betting market, or service offered through the Platform;
• Deposits, withdrawals, and financial transactions conducted via the Platform;
• Communications between you and mwplay's customer support team;
• Your browsing of the mwplay website, including through cookies and analytics technologies;
• Participation in any promotional, referral, or loyalty program operated by mwplay.

This Policy does not apply to third-party websites or services that may be linked to or from the Platform. mwplay is not responsible for the privacy practices of those third parties, and you should review their privacy policies independently before providing them with any personal information.

mwplay collects personal information through several channels. The categories and specific data points collected are described in the table below:

mwplay does not collect sensitive personal information such as biometric data, health records, or political opinions. Where government ID documents are collected for KYC purposes, these are used solely for identity verification and are not retained beyond the period required by applicable law.

mwplay uses the personal information it collects for the following specific purposes:

• Account creation and management — to register your account, verify your identity, and maintain your profile on the Platform;
• Service delivery — to provide access to casino games, betting markets, bingo rooms, and all other Platform features;
• Payment processing — to process your deposits and withdrawals via GCash, Maya, BPI, BDO, and other supported payment methods;
• Regulatory compliance and KYC — to verify your age and identity as required by PAGCOR regulations and the Anti-Money Laundering Act (AMLA) of the Philippines;
• Fraud prevention and security — to detect, investigate, and prevent fraudulent transactions, bonus abuse, collusion, and other prohibited activities;
• Responsible gaming — to enforce deposit and loss limits you have set, to monitor for signs of problem gambling, and to apply any self-exclusion periods you have requested;
• Customer support — to respond to your inquiries, resolve disputes, and provide assistance through live chat, Messenger, and Viber;
• Promotions and marketing — to send you information about bonuses, promotions, and new features that may interest you, subject to your communication preferences;
• Platform improvement — to analyze usage patterns, identify technical issues, and improve the mwplay user experience for all Philippine players;
• Legal obligations — to comply with applicable laws, court orders, and regulatory requirements.

mwplay processes your personal data on the following legal bases under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines:

• Contractual necessity — processing is necessary to perform the contract between you and mwplay (i.e., to provide the gaming platform and associated services you have signed up for);
• Legal obligation — processing is required to comply with applicable laws, including PAGCOR regulations, AMLA obligations, and KYC requirements;
• Legitimate interests — processing is necessary for mwplay's legitimate interests in preventing fraud, maintaining platform security, improving services, and conducting responsible gaming monitoring, provided those interests are not overridden by your rights;
• Consent — where mwplay relies on your consent (for example, for the sending of marketing communications), you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

mwplay does not sell or rent your personal information to third parties. We may share your personal data with the following categories of recipients for the purposes described in Section 4:

• Payment service providers — GCash (GXI), Maya (Voyager Innovations), BPI, BDO, and other financial institutions, for the purpose of processing your deposits and withdrawals;
• Identity verification and KYC providers — third-party services contracted to assist with age and identity verification, acting as data processors under mwplay's instruction;
• Game studio and software providers — licensed third-party game providers whose software runs games available on the Platform may receive limited session data required for their services;
• IT infrastructure and hosting providers — cloud hosting, security, and technical services providers who process data on mwplay's behalf under data processing agreements;
• Regulatory authorities — PAGCOR and other Philippine government agencies or law enforcement bodies, where mwplay is legally required or permitted to disclose information;
• Fraud prevention and analytics services — third-party providers that assist in fraud detection and platform analytics, operating under strict data processing agreements;
• Professional advisers — legal, accounting, and auditing firms, where necessary for compliance or dispute resolution purposes.

All third-party recipients are required to handle your data in accordance with applicable data protection law and to implement appropriate security measures. Where mwplay engages data processors, it does so under written contracts that govern the processing and protect your rights.

mwplay uses cookies and similar technologies (such as web beacons and local storage) to operate and improve the Platform. Cookies are small text files placed on your device by your browser when you visit mwplay.bio. They serve several functions:

• Essential cookies — required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled without affecting Platform functionality.
• Functional cookies — remember your preferences such as language settings, game view configurations, and responsible gaming tools.
• Analytics cookies — collect aggregated, anonymized data about how the Platform is used, such as which pages are most visited and where errors occur. This helps mwplay improve the player experience for Filipino users.
• Performance cookies — help mwplay measure load times and identify technical bottlenecks on Philippine mobile networks.

You can manage cookies through your browser settings. Most browsers allow you to view, block, or delete cookies. Blocking essential cookies will prevent you from accessing your mwplay account. For detailed guidance, refer to your browser's help documentation.

mwplay retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including satisfying legal, regulatory, and audit requirements. The following general retention periods apply:

• Account data and transaction records — retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping obligations;
• KYC and identity verification documents — retained for a minimum of five (5) years from the date of verification or account closure, whichever is later;
• Customer support communications — retained for two (2) years from the date of the interaction;
• Technical and log data — typically retained for twelve (12) months;
• Marketing preference data — retained until you withdraw consent or close your account.

When personal data is no longer required, mwplay deletes or anonymizes it in a secure manner. Where anonymization is used, the resulting data no longer constitutes personal data and may be retained and used for analytical purposes indefinitely.

mwplay implements a range of technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption on all connections between your browser or device and the mwplay Platform;
• Encrypted storage of sensitive data including payment credentials and identity documents;
• Role-based access controls limiting data access to authorized personnel on a need-to-know basis;
• Regular security assessments and penetration testing of the Platform infrastructure;
• Multi-factor authentication requirements for administrative access to systems holding personal data;
• Staff data protection training covering the obligations of the Data Privacy Act of 2012.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mwplay will notify you and the National Privacy Commission (NPC) in accordance with the requirements of the Data Privacy Act of 2012 and its implementing rules.

As a data subject under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by mwplay:

To exercise any of the above rights, please contact mwplay's Data Protection Officer at [email protected] with the subject line "Data Subject Request." mwplay will acknowledge your request within 5 business days and respond substantively within 30 calendar days. In complex cases, this period may be extended by an additional 30 days with notification to you.

Identity verification may be required before mwplay processes a data subject request to ensure that personal data is not disclosed to unauthorized parties.

If mwplay becomes aware that personal data has been collected from a person under the age of 21 — whether through a fraudulent registration or otherwise — that Account will be immediately suspended and the personal data will be deleted or anonymized as promptly as practicable, subject to any mandatory legal retention obligations. Any funds associated with such an account will be handled in accordance with mwplay's Terms and Conditions and applicable regulations.

If you are a parent or guardian and believe that your child under 21 has provided personal information to mwplay, please contact us immediately at [email protected]. We will investigate and take appropriate action without undue delay.

mwplay's primary operations and data infrastructure are focused on the Philippines. However, some of mwplay's third-party service providers — including cloud hosting providers, game software studios, and analytics services — may process data on servers located outside the Philippines.

Where personal data is transferred outside the Philippines, mwplay takes reasonable steps to ensure that such transfers are carried out in compliance with the Data Privacy Act of 2012, including by entering into appropriate contractual arrangements with the receiving parties that provide substantially similar levels of data protection as those required under Philippine law.

By using the mwplay Platform and providing your personal information, you acknowledge and consent to the potential transfer of your data to countries outside the Philippines for the purposes described in this Policy, subject to the safeguards described above.

mwplay reserves the right to update or modify this Privacy Policy at any time to reflect changes in its data processing practices, applicable laws, or Platform features. When material changes are made, mwplay will provide advance notice via a prominent notice on the Platform or by direct communication to registered Players using the contact information on their account.

The "Last Updated" date at the top of this document indicates when this Policy was most recently revised. Continued use of the Platform after the effective date of any updated Policy constitutes acceptance of the revised terms. If you do not agree with the revised Policy, you should stop using the Platform and, if applicable, close your account.

We encourage you to review this Privacy Policy periodically to stay informed about how mwplay handles your personal information.

If you have any questions, concerns, or complaints regarding this Privacy Policy or mwplay's handling of your personal data, you may contact the mwplay Data Protection Officer through any of the following channels:

• Email: [email protected] (subject line: "Privacy Inquiry" or "Data Subject Request")
• Live Chat: Available 24/7 on the mwplay Platform — average response time 3–5 minutes
• Messenger & Viber: Through mwplay's official support channels

mwplay will acknowledge privacy-related inquiries within 48 hours and endeavor to resolve them within 30 calendar days. If you are not satisfied with mwplay's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.