mafa8 Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") governs the collection, processing, storage, and disclosure of personal data by mafa8 (the "Platform," "we," "us," or "our") in connection with your use of mafa8.cam and any associated mobile applications or services. By creating an account, accessing the website, or using any mafa8 service, you acknowledge that you have read, understood, and agree to this Policy.

mafa8 is committed to protecting your privacy and complying with applicable data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and, where applicable, the General Data Protection Regulation (GDPR) of the European Union. This Policy applies to all users regardless of geographic location.

2. Information We Collect

2.1 Personal Identification Information

When you register for a mafa8 account, we collect the following personal identification data:

• Full legal name as it appears on your government-issued identification
• Date of birth to verify you are at least 21 years of age
• Residential address including street, city, province, and postal code
• Email address for account verification and communication
• Mobile phone number for two-factor authentication and security alerts
• Government-issued ID (passport, driver's license, UMID, SSS ID) for KYC verification
• Selfie photograph holding your ID for identity verification purposes

2.2 Financial and Transaction Data

To process deposits, withdrawals, and wagers, mafa8 collects and stores:

• Payment method details (GCash account, PayMaya number, bank account information)
• Transaction history including deposit amounts, withdrawal requests, and bet records
• Billing addresses associated with payment methods
• Currency preference and conversion records
• Tax identification numbers where required by law

We do not store full credit card numbers or CVV codes on our servers. Payment processing is handled by certified third-party providers compliant with PCI-DSS standards.

2.3 Technical and Device Information

When you access the mafa8 platform, our servers automatically collect technical data including:

• IP address and geolocation data
• Device type, operating system, and browser version
• Device identifiers (IMEI, MAC address, advertising ID)
• Screen resolution and language settings
• Referring URLs and clickstream data
• Session duration and page views

This information is used for fraud detection, security monitoring, platform optimization, and compliance with responsible gaming regulations.

2.4 Behavioral and Gameplay Data

To improve user experience and detect problem gambling behavior, mafa8 collects:

• Betting patterns, wager amounts, and game preferences
• Win/loss records and account balance history
• Session frequency and duration
• Use of responsible gaming tools (deposit limits, self-exclusion)
• Chat messages and customer support interactions

2.5 Cookies and Tracking Technologies

mafa8 uses cookies, web beacons, and similar tracking technologies to enhance functionality and personalize your experience. Cookies store information such as login credentials, language preferences, and recently played games. You may disable cookies through your browser settings, but this may limit certain platform features. For more information, see our Cookie Policy (available at the bottom of this page).

3. How We Use Your Information

3.1 Account Management and Authentication

We use your personal data to create and maintain your mafa8 account, verify your identity, authenticate login attempts, and prevent unauthorized access. Two-factor authentication (2FA) via SMS or email helps protect your account from intrusion.

3.2 Transaction Processing

Financial data is used to process deposits, execute withdrawals, reconcile transactions, and generate account statements. We verify payment methods to comply with Anti-Money Laundering (AML) and Know Your Customer (KYC) regulations.

3.3 Legal and Regulatory Compliance

mafa8 is required by law to collect and retain certain personal information for compliance with:

• Age verification and prevention of underage gambling
• Anti-Money Laundering (AML) and Counter-Terrorism Financing (CTF) regulations
• Tax reporting obligations
• Responsible gaming and self-exclusion programs
• Dispute resolution and legal proceedings

We may disclose your data to regulatory authorities, law enforcement agencies, or courts when legally obligated to do so.

3.4 Fraud Prevention and Security

Technical and behavioral data is analyzed to detect fraudulent activity, multi-accounting, collusion, bonus abuse, and other violations of our Terms & Conditions. Machine learning algorithms flag suspicious patterns for manual review by our security team.

3.5 Marketing and Promotions

With your consent, we use your email address and phone number to send promotional offers, bonus notifications, and updates about new games or features. You may opt out of marketing communications at any time by clicking "Unsubscribe" in any email or adjusting your notification preferences in your account settings.

3.6 Customer Support

When you contact mafa8 support via live chat, email, or phone, we record and store your communications to resolve issues, improve service quality, and train support staff. Chat transcripts and support tickets are retained for up to 7 years.

3.7 Product Improvement and Analytics

Aggregated and anonymized data is used to analyze user behavior, optimize platform performance, develop new features, and conduct A/B testing. This data cannot be used to identify individual users.

4. How We Share Your Information

4.1 Third-Party Service Providers

mafa8 shares your data with trusted third-party service providers who assist in operating the platform, including:

• Payment processors: GCash, PayMaya, bank partners for transaction processing
• KYC verification services: Identity verification and age confirmation providers
• Game providers: Software developers who supply casino games and live dealer content
• Cloud hosting services: AWS, Google Cloud, or similar infrastructure providers
• Customer support platforms: Live chat software and ticketing systems
• Analytics services: Google Analytics, Mixpanel, or similar tools (anonymized data only)

All third-party providers are contractually obligated to protect your data and may only use it for the purposes specified by mafa8. They are prohibited from selling, renting, or disclosing your information to other parties.

4.2 Legal Obligations and Law Enforcement

We may disclose your personal data when required by law, court order, subpoena, or government regulation. This includes cooperation with law enforcement investigations, tax authorities, and regulatory agencies. We will notify you of such disclosures unless prohibited by law.

4.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or bankruptcy, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer, and the new entity will be bound by this Privacy Policy.

4.4 Affiliate and Marketing Partners

With your explicit consent, we may share limited data (email address, user ID) with marketing partners for co-branded promotions or referral programs. You may opt out of such sharing at any time.

4.5 No Sale of Personal Data

mafa8 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Any data sharing is strictly for operational purposes as described in this Policy.

5. Data Security and Protection Measures

5.1 Encryption and Secure Transmission

All data transmitted between your device and mafa8 servers is encrypted using industry-standard TLS/SSL protocols. Financial transactions are processed through PCI-DSS compliant payment gateways with end-to-end encryption.

5.2 Access Controls and Authentication

Access to your personal data is restricted to authorized employees and contractors who require it to perform their duties. All personnel undergo background checks and are bound by confidentiality agreements. We enforce role-based access controls and multi-factor authentication for internal systems.

5.3 Data Storage and Backup

Your data is stored on secure servers located in jurisdictions with strong data protection laws. Regular backups are performed to prevent data loss. Backup data is encrypted and stored separately from production systems.

5.4 Vulnerability Testing and Audits

mafa8 conducts regular security audits, penetration testing, and vulnerability assessments to identify and address potential weaknesses. Third-party cybersecurity firms perform annual audits of our infrastructure and applications.

5.5 Incident Response

In the event of a data breach or security incident, mafa8 will notify affected users within 72 hours (as required by GDPR) and report the incident to relevant authorities. We will provide details of the breach, the data affected, and steps taken to mitigate harm.

6. Data Retention and Deletion

6.1 Retention Period

mafa8 retains your personal data for as long as your account is active and for a period thereafter as required by law. Typical retention periods include:

• Account information: Retained for 7 years after account closure for legal and regulatory compliance
• Transaction records: Retained for 7 years for tax and AML compliance
• Chat transcripts and support tickets: Retained for 7 years
• Marketing communications: Retained until you opt out or 2 years of inactivity
• Technical logs: Retained for 90 days unless flagged for security review

6.2 Account Deletion and Right to Erasure

You may request deletion of your mafa8 account and associated data by contacting [email protected]. Upon account closure, we will anonymize or delete your personal data within 30 days, except where retention is required by law. Please note that certain data (transaction records, KYC documents) must be retained for 7 years for regulatory compliance.

6.3 Anonymization and Aggregation

After the retention period expires, personal data is either securely deleted or anonymized so it can no longer be linked to an individual. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

7. Your Privacy Rights

7.1 Right to Access

You have the right to request a copy of all personal data mafa8 holds about you. We will provide this information in a structured, commonly used, and machine-readable format (such as CSV or PDF) within 30 days of your request.

7.2 Right to Rectification

If your personal data is inaccurate or incomplete, you may update it through your account settings or by contacting support. We will verify the accuracy of updated information before making changes.

7.3 Right to Erasure ("Right to Be Forgotten")

You may request deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw consent. This right is subject to legal and regulatory obligations that require us to retain certain data.

7.4 Right to Restrict Processing

You may request that we temporarily restrict processing of your data while we verify its accuracy or investigate a complaint. During this period, we will store your data but not actively process it.

7.5 Right to Data Portability

You have the right to receive your personal data in a portable format and transmit it to another service provider. We will provide data in CSV, JSON, or PDF format upon request.

7.6 Right to Object

You may object to processing of your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests by providing specific reasons related to your situation.

7.7 Right to Withdraw Consent

Where processing is based on your consent, you may withdraw consent at any time. This will not affect the lawfulness of processing prior to withdrawal.

7.8 Right to Lodge a Complaint

If you believe mafa8 has violated your privacy rights, you may lodge a complaint with the National Privacy Commission of the Philippines or the relevant data protection authority in your jurisdiction.

8. International Data Transfers

mafa8 may transfer your personal data to countries outside the Philippines for processing by our service providers. When transferring data internationally, we ensure adequate safeguards are in place, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the National Privacy Commission
• Binding Corporate Rules (BCRs) for transfers within corporate groups

By using mafa8, you consent to international data transfers as described in this Policy.

9. Children's Privacy

mafa8 services are strictly for users aged 21 years or older. We do not knowingly collect personal data from individuals under the legal gambling age. If we discover that we have inadvertently collected data from a minor, we will immediately delete that data and permanently close the associated account. Parents or guardians who believe their child has provided personal data to mafa8 should contact [email protected] immediately.

10. Changes to This Privacy Policy

mafa8 reserves the right to amend this Privacy Policy at any time to reflect changes in our practices, legal requirements, or technological developments. The "Last Updated" date at the top of this document indicates the most recent revision. Material changes will be communicated via email or prominent site notification. Continued use of the platform after changes are posted constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically.

11. Contact Information and Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Postal Address: mafa8 Data Protection Office, Manila, Philippines
• Response Time: We aim to respond to all privacy inquiries within 5 business days