mgame Casino Privacy Policy

1 Introduction

mgame ("mgame," "we," "us," "our") operates the online gaming platform accessible at https://mgame.cam. We are committed to protecting the personal data of every player registered on our platform and to handling that data in a transparent, lawful, and secure manner consistent with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

This Privacy Policy ("Policy") describes how mgame collects, uses, stores, discloses, and protects personal information obtained from players, prospective players, and visitors to the mgame platform. It applies to all personal data processed in connection with your use of the mgame website, mobile-optimized platform, and any associated services, communications, and support interactions.

This Policy should be read together with the mgame Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference.

2 Data Controller

For the purposes of the Data Privacy Act of 2012 and applicable data protection legislation, mgame is the personal information controller responsible for the processing of your personal data collected through or in connection with the mgame platform.

mgame operates under the PAGCOR regulatory framework for online gaming in the Philippines. Our data processing activities are subject to oversight by the National Privacy Commission (NPC) of the Republic of the Philippines, and we maintain appropriate registration and compliance obligations with that authority.

For all data privacy inquiries, access requests, and complaints, please contact our Data Protection Officer using the contact details provided in Section 15 of this Policy.

3 Personal Data We Collect

mgame collects personal data that is necessary, relevant, and not excessive relative to the purposes for which it is collected. The categories of personal data we process include the following:

3.1 Identity and Registration Data

• Full legal name as appearing on a government-issued Philippine ID
• Date of birth (collected to enforce the 21+ age requirement)
• Nationality and country of residence
• Government-issued ID type, ID number, and scanned or photographed copies
• Selfie or liveness photograph submitted during KYC verification
• Username chosen at registration

3.2 Contact and Communication Data

• Registered mobile number (Philippine format)
• Email address
• Records of support interactions via live chat, email, or any other communication channel
• Preferences for receiving promotional communications

3.3 Financial and Transaction Data

• GCash mobile number and registered name (for payment verification)
• Maya (PayMaya) account details provided for deposit or withdrawal
• Bank account name, account number, and bank name (BPI, BDO, Metrobank) where used for transactions
• Cryptocurrency wallet address (USDT TRC20) where applicable
• Deposit amounts, withdrawal amounts, dates, and transaction reference numbers
• Account balance history and wallet statements

3.4 Gameplay and Platform Activity Data

• Games played, bet amounts, game outcomes, and session durations
• Bonus and promotion claims, wagering progress, and fulfillment status
• Self-imposed responsible gaming limits and self-exclusion records
• Login timestamps, session lengths, and account activity logs

3.5 Technical and Device Data

• IP address and approximate geographic location at login
• Device type, operating system, and browser type and version
• Referral source URL if arriving from a linked page
• Cookie identifiers and session tokens (see Section 8)

4 How We Collect Your Data

mgame collects personal data through the following means:

5 Purposes of Processing & Legal Basis

mgame processes personal data only for specified, explicit, and legitimate purposes. The table below summarizes the primary purposes for which your data is processed and the corresponding legal basis under the Data Privacy Act of 2012:

6 Data Sharing & Third-Party Disclosure

mgame does not sell, rent, or trade your personal data to unaffiliated third parties for their own marketing or commercial purposes. We may share your personal data with the following categories of recipients where necessary and proportionate to the purpose:

6.1 Payment Service Providers

GCash, Maya (PayMaya), BPI, BDO, Metrobank, 7-Eleven payment processors, USDT TRC20 network processors, and Coins.ph receive the minimum personal data necessary to authenticate and process deposit and withdrawal transactions initiated by you. These providers operate under their own privacy policies and are bound by applicable financial data protection requirements.

6.2 KYC and Identity Verification Providers

mgame engages third-party identity verification service providers to process government-issued ID documents and liveness photographs submitted during account registration. These providers act as data processors under documented data processing agreements and are prohibited from using your data for any purpose other than performing identity verification for mgame.

6.3 Fraud Prevention and AML Screening Services

Personal data including name, date of birth, nationality, and account activity may be shared with fraud prevention platforms and AML screening services for the purpose of detecting, investigating, and preventing financial crime. Processing in this context is conducted pursuant to our legal obligations under the Anti-Money Laundering Act (AMLA) of the Philippines and its implementing rules.

6.4 Regulatory and Law Enforcement Authorities

mgame will disclose personal data to PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), law enforcement agencies, or any court of competent jurisdiction where required to do so by law, court order, or binding regulatory direction. We will notify affected players of such disclosure where legally permitted to do so.

6.5 Game Content Providers

Third-party game studios and live dealer platform providers whose games are accessible through mgame receive anonymized or pseudonymized gameplay data for the purpose of game performance monitoring, RNG audit compliance, and live dealer session management. These providers do not receive your identity or payment data.

7 Data Retention

mgame retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law, whichever is longer. The following general retention periods apply:

• Account and identity data: Retained for the duration of the account relationship and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Gameplay and session records: Retained for a minimum of three (3) years for dispute resolution, audit, and regulatory reporting purposes.
• Support communications: Retained for two (2) years from the date of the interaction, or longer where the subject matter relates to an unresolved dispute or compliance investigation.
• Marketing consent records: Retained for as long as consent is active and for three (3) years thereafter to demonstrate compliance.
• Self-exclusion records: Retained indefinitely to prevent re-registration by self-excluded individuals.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.

8 Cookies & Tracking Technologies

mgame uses cookies and similar tracking technologies to operate the platform, maintain session continuity, prevent fraud, and improve the user experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for platform operation — session tokens, login state, security tokens, and load balancing identifiers. These cannot be disabled without breaking platform functionality.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming limit configurations, and game lobby view preferences.
• Analytics Cookies: Collect anonymized data about how players interact with the platform — page views, session duration, error events — to help us improve the platform experience. These cookies do not identify you personally.
• Security Cookies: Support fraud detection and login monitoring by identifying unusual session patterns or device changes that may indicate unauthorized access.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent the mgame platform from functioning correctly. mgame does not use third-party advertising or behavioral profiling cookies.

9 Data Security

mgame implements a layered information security framework to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Technical and organizational measures in place include:

• TLS/SSL encryption applied to all data transmitted between your device and the mgame platform
• Encryption of sensitive personal data at rest, including identity documents and payment reference data
• Role-based access controls limiting employee access to personal data to those with a documented operational need
• Multi-factor authentication required for all administrative access to systems that process personal data
• Continuous security monitoring, intrusion detection, and automated anomaly alerting
• Regular third-party security audits and penetration testing
• Documented incident response procedures with defined notification timelines consistent with NPC requirements

10 Your Data Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), registered players have the following rights with respect to their personal data processed by mgame:

To exercise any of the above rights, please contact our Data Protection Officer as described in Section 15. mgame will acknowledge your request within five (5) business days and provide a substantive response within thirty (30) days. In complex cases, this period may be extended by a further thirty (30) days with notice provided to you.

11 Children & Minors

The mgame platform is strictly intended for individuals aged twenty-one (21) years and above. mgame does not knowingly collect personal data from any person below this age. The 21+ age requirement is a hard legal obligation under the PAGCOR regulatory framework governing online gaming in the Philippines.

If mgame becomes aware that personal data has been collected from an individual below the age of 21, we will immediately close the associated account, return any balance pursuant to regulatory guidelines, and securely delete the personal data collected. If you believe that an individual below the minimum age has registered an account on the mgame platform, please notify our support team immediately.

12 Cross-Border Data Transfers

Some of mgame's third-party service providers — including KYC verification platforms, game content providers, and certain analytics services — may process personal data in jurisdictions outside the Republic of the Philippines. Where such cross-border data transfers occur, mgame ensures that appropriate safeguards are in place, which may include:

• Execution of standard contractual clauses that impose data protection obligations consistent with Philippine law
• Engagement of providers in jurisdictions recognized by the NPC as providing adequate data protection
• Binding corporate rules or equivalent instruments where applicable

By using the mgame platform and accepting this Privacy Policy, you acknowledge that your personal data may be transferred to and processed in countries outside the Philippines, subject to the safeguards described above.

13 Third-Party Links

The mgame platform does not contain links to third-party websites or services for commercial affiliation purposes. To the extent that third-party game studio content embedded within the mgame platform loads assets from external servers, those providers operate under their own privacy policies, which mgame does not control. Players are encouraged to review the privacy policies of any third-party service they interact with independently of the mgame platform.

14 Changes to This Privacy Policy

mgame reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. Material changes — those that significantly affect your rights or the way your data is processed — will be communicated to registered players via the mobile number or email address on file at least seven (7) days prior to the change taking effect.

Non-material updates, such as clarifications of existing language or corrections of typographical errors, may take effect immediately upon publication. The "Last Updated" date at the top of this Policy reflects when the most recent revision was made. Continued use of the mgame platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

We recommend reviewing this Policy periodically. Prior versions of the Privacy Policy are available upon request from our Data Protection Officer.

15 Contact Our Data Protection Officer

For all privacy-related queries, data subject access requests, objections to processing, or complaints regarding mgame's handling of your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected] — please include "Data Privacy Request" in the subject line
• Live Chat: Available 24/7 via the mgame platform dashboard — request to be connected to a privacy or compliance team member
• Response Language: Filipino and English
• Acknowledgment Timeline: Within 5 business days of receipt
• Resolution Timeline: Within 30 days of acknowledgment; up to 60 days for complex requests

Players who are not satisfied with mgame's response to a privacy complaint may escalate the matter to the National Privacy Commission (NPC) of the Philippines. Information about filing a complaint with the NPC is available on the Commission's official government website.