meeryph Privacy Policy

1 Introduction

meeryph ("we," "us," or "our") is committed to protecting the privacy and personal data of all individuals who access or use the meeryph online casino and sports betting platform (the "Platform"). This Privacy Policy describes how meeryph collects, uses, stores, discloses, and protects personal information in connection with your use of the Platform.

This policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations as enforced by the National Privacy Commission (NPC) of the Philippines. It also reflects our obligations as a PAGCOR-regulated online gaming operator, including mandatory KYC and anti-money laundering data retention requirements.

This Privacy Policy should be read alongside our Terms & Conditions and our Responsible Gaming Policy, all of which form part of our agreement with you as a registered meeryph Player.

2 Data Controller

For the purposes of the Data Privacy Act of 2012, meeryph acts as the Personal Information Controller (PIC) in respect of the personal data you provide when registering for and using the Platform. As PIC, meeryph determines the purposes and means of processing your personal data and bears primary responsibility for ensuring that processing is carried out lawfully, fairly, and transparently.

Where meeryph engages third-party service providers to process personal data on its behalf — for example, payment gateway operators, identity verification vendors, or cloud infrastructure providers — those parties act as Personal Information Processors (PIP) under written agreements that bind them to standards consistent with this Privacy Policy and the DPA.

Our designated Data Protection Officer (DPO) may be contacted using the details provided in Section 14 of this policy.

3 Personal Data We Collect

3.1 Information You Provide Directly

When you register an Account, complete KYC verification, make deposits or withdrawals, contact our support team, or participate in promotions, meeryph collects personal data including but not limited to:

• Identity data: Full legal name, date of birth, gender, nationality, and government-issued identification document number (e.g., UMID, PhilSys, passport, or driver's license);
• Contact data: Residential address (including barangay, city, province, and zip code), mobile number, and email address;
• Financial data: Payment method details (e-wallet account numbers for GCash, Maya, GrabPay; bank account details for BPI, BDO, Metrobank; transaction histories; deposit and withdrawal records);
• KYC documentation: Scanned or photographed copies of government-issued ID, proof of address documents (utility bills or bank statements), and selfie or liveness verification images where required;
• Account credentials: Username and hashed password (we do not store passwords in plain text);
• Communications data: Content of support tickets, live chat transcripts, and emails exchanged with meeryph customer service.

3.2 Information Collected Automatically

When you access and use the meeryph Platform, certain technical and behavioral data is collected automatically through cookies, web beacons, and similar tracking technologies, including:

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers;
• Usage data: Pages visited, games played, session duration, betting history, wagering patterns, feature interactions, and clickstream data;
• Geolocation data: Approximate location data derived from your IP address to support jurisdictional compliance checks. meeryph does not collect precise GPS-level location data without explicit consent;
• Cookie data: Session cookies, persistent preference cookies, and analytics cookies as further described in Section 7.

3.3 Information from Third Parties

meeryph may receive personal data about you from third parties in connection with identity verification, fraud prevention, and regulatory compliance. This includes information returned by identity verification service providers during the KYC process, fraud scoring data from payment processors, and publicly available information used to conduct politically exposed person (PEP) and sanctions screening in line with anti-money laundering obligations.

4 How We Use Your Personal Data

meeryph uses the personal data it collects for the following purposes:

• Account registration and management: To create, maintain, verify, and administer your meeryph account, including processing your meeryph Login credentials and enabling platform access;
• KYC and identity verification: To verify your identity, age (confirming you are 21 years of age or older), and eligibility to use the Platform, as required by PAGCOR regulations;
• Payment processing: To process deposits, execute withdrawal requests, detect and prevent payment fraud, and maintain accurate financial records;
• Anti-money laundering (AML) compliance: To monitor transaction patterns, conduct PEP and sanctions screening, file suspicious transaction reports where required by law, and retain records as mandated by applicable AML regulations;
• Customer support: To respond to your queries, resolve complaints, and provide technical assistance;
• Responsible gaming: To monitor gaming behavior for signs of problem gambling, enforce self-imposed limits and exclusions, and fulfill our responsible gaming obligations under PAGCOR's framework;
• Platform improvement: To analyze usage patterns, conduct A/B testing, identify technical issues, and develop new features and games that improve the meeryph experience;
• Marketing communications: To send promotional offers, bonus notifications, and platform updates to Players who have opted in to receive such communications. You may opt out at any time;
• Legal and regulatory compliance: To comply with applicable Philippine laws, court orders, PAGCOR directives, NPC requirements, and other regulatory obligations.

5 Legal Basis for Processing

meeryph processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual necessity: Processing of identity, contact, financial, and account data is necessary to perform the contract between you and meeryph — namely, to provide you with access to the Platform and its services;
• Legal obligation: KYC data collection, AML transaction monitoring, and related record retention are required by PAGCOR regulations and applicable Philippine laws on anti-money laundering and counter-terrorism financing;
• Consent: Processing for marketing communications and non-essential cookies is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing;
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and analytics is based on meeryph's legitimate interests in operating a safe, compliant, and well-functioning platform, balanced against your privacy rights.

6 Sharing and Disclosure of Your Data

meeryph does not sell, rent, or trade your personal data to unaffiliated third parties for their own commercial purposes. We may share your personal data only in the following circumstances:

6.1 Service Providers (Personal Information Processors)

meeryph engages trusted third-party service providers to assist in operating the Platform. These providers process data only on meeryph's instructions and are contractually prohibited from using your data for any purpose other than providing services to meeryph. Categories of service providers include payment gateway operators (including e-wallet providers such as GCash and Maya, and banking partners including BPI, BDO, and Metrobank), identity verification and KYC vendors, cloud hosting and infrastructure providers, customer support platform providers, and fraud prevention and cybersecurity vendors.

6.2 Regulatory and Law Enforcement Authorities

meeryph may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, the Bureau of Internal Revenue, or other government bodies where required by law, regulation, court order, or legal process. meeryph will, where legally permissible, notify you of such disclosures.

6.3 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving meeryph, personal data held by meeryph may be transferred to the successor entity, subject to the same privacy protections described in this policy. You will be notified of any such transfer that materially affects your privacy rights.

6.4 With Your Consent

meeryph may share your personal data with third parties for purposes not covered above where you have given your explicit prior consent to such sharing.

7 Cookies and Tracking Technologies

The meeryph Platform uses cookies and similar technologies to enhance your experience, maintain session continuity, and gather analytics data. The categories of cookies used are:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies that keep you logged in after meeryph Login and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: Remember your preferences such as language, game settings, and display configurations. Disabling these may affect your experience.
• Analytics cookies: Collect anonymized usage data to help meeryph understand how Players interact with the Platform — which games are most popular, where users drop off, and how page performance can be improved. These are activated only with your consent.
• Marketing cookies: Used to present relevant promotional content within the Platform to Players who have opted into marketing communications. Activated only with your consent.

You can manage cookie preferences through your browser settings or the meeryph cookie preference center accessible from the Platform footer. Note that disabling strictly necessary cookies will prevent Platform access.

8 Data Retention

meeryph retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods driven by regulatory obligations:

• KYC and identity verification records: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR regulations and applicable AML laws in the Philippines;
• Financial and transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC record-keeping requirements;
• Account data (active accounts): Retained for the duration of your active relationship with meeryph, plus a reasonable period after account closure to handle any residual queries or disputes;
• Customer support communications: Retained for up to three (3) years from the date of the interaction to support dispute resolution and service improvement;
• Analytics and usage data: Retained in anonymized or aggregated form for up to two (2) years for platform improvement purposes.

Upon expiry of applicable retention periods, meeryph will securely destroy or anonymize personal data so that it can no longer be attributed to an identifiable individual.

9 Data Security

meeryph implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the meeryph Platform;
• Encryption of sensitive data at rest, including stored KYC documents and payment method information;
• Role-based access controls ensuring that only authorized meeryph personnel with a legitimate need-to-know can access personal data;
• Two-factor authentication (2FA) available for all Player accounts and enforced for all administrative personnel accounts;
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals;
• Formal incident response procedures, including notification protocols in the event of a personal data breach affecting your rights.

While meeryph takes all reasonable steps to protect your data, no method of transmission over the internet or method of electronic storage is completely secure. You play an important role in keeping your Account secure by maintaining a strong password, enabling 2FA, and not sharing your meeryph Login credentials with anyone.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by meeryph. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. meeryph will respond to all legitimate requests within 30 calendar days of receipt, subject to identity verification.

11 Children's Privacy

The meeryph Platform is strictly intended for individuals who are 21 years of age or older, consistent with PAGCOR regulations governing online gaming in the Philippines. meeryph does not knowingly collect personal data from individuals under the age of 21. Age verification is conducted as part of the mandatory KYC process for all registered accounts.

If meeryph becomes aware that it has inadvertently collected personal data from a person under 21, that Account will be immediately suspended, the personal data will be deleted as promptly as legally permissible, and any real-money balances will be handled in accordance with our Terms & Conditions. If you have reason to believe that a minor has registered an Account on the Platform, please notify meeryph support immediately at the email address displayed in the footer.

12 Cross-Border Data Transfers

The meeryph Platform is primarily operated from and for the Philippines. Where meeryph engages service providers that process personal data outside the Philippines — for example, cloud infrastructure providers with data centers in other jurisdictions — such transfers are conducted only where adequate data protection safeguards are in place. These safeguards may include contractual clauses approved by the National Privacy Commission, adequacy determinations, or other recognized legal mechanisms consistent with the DPA.

meeryph will not transfer your personal data to a country or territory that does not provide an adequate level of protection for personal data rights without first implementing appropriate safeguards and, where required, obtaining your consent.

13 Amendments to This Privacy Policy

meeryph reserves the right to update or amend this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made — particularly those affecting your rights as a data subject or the purposes for which your data is processed — meeryph will provide advance notice by posting a prominent notice on the Platform and, where practicable, by sending a notification to your registered email address.

The "Last updated" date at the top of this policy indicates when the most recent revision took effect. Your continued use of the meeryph Platform after the effective date of any amended Privacy Policy constitutes your acknowledgment of and agreement to the updated terms. If you do not agree with any amendment, you should cease using the Platform and may request Account closure by contacting our support team.

14 Contact Us and Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or to meeryph's handling of your personal data, you are encouraged to contact us in the first instance through our customer support team. For formal data subject rights requests or privacy-related complaints, please direct your communication to our designated Data Protection Officer.

You may reach the meeryph Data Protection Officer and support team via the email address displayed in the footer of this page. When submitting a data subject rights request, please include your registered username, a clear description of your request, and a copy of a valid government-issued ID for identity verification purposes. meeryph will acknowledge receipt of your request promptly and will provide a substantive response within 30 calendar days, or sooner where the nature of the request allows.

For complaints that remain unresolved following contact with meeryph, you retain the right to escalate your concern to the National Privacy Commission of the Philippines.