Privacy Policy — merryph.con Casino

01 Introduction & Scope

This Privacy Policy is issued by merryph.con Casino ("merryph.con," "we," "us," or "our") and applies to all personal data collected through the merryph.con website, mobile platform, live chat support, and any other services we provide (collectively, the "Platform").

merryph.con is committed to protecting the privacy and personal data of all users, particularly Filipino players who entrust us with their information. This Policy is drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

By registering for an account, making a deposit, or otherwise using the merryph.con Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of merryph.con.

02 Data We Collect

merryph.con collects personal data through several channels: directly from you during registration and account use, automatically through your interaction with the Platform, and from third-party sources such as payment processors and identity verification providers.

2.1 Data You Provide Directly

2.2 Data Collected Automatically

When you access and use the merryph.con Platform, we automatically collect certain technical and behavioral data, including:

• Device & Technical Data: IP address, device type, operating system, browser type and version, screen resolution;
• Usage Data: Pages visited, games played, session duration, click patterns, search queries within the Platform;
• Transaction Data: Deposit and withdrawal history, game wager history, bonus usage records;
• Location Data: General geographic location derived from IP address (used for regulatory compliance and fraud prevention).

2.3 Data from Third Parties

merryph.con may receive personal data about you from third-party sources, including identity verification service providers, payment processors, fraud detection services, and PAGCOR's player exclusion registry. Data received from these sources is handled in accordance with this Privacy Policy.

03 How We Use Your Data

merryph.con uses your personal data only for legitimate, specified purposes. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The primary purposes for which we process your data are:

• Account Management: Creating, maintaining, and securing your merryph.con account; verifying your identity and age (21+ requirement); processing login and authentication;
• Service Delivery: Enabling you to access and play games on the Platform; processing deposits and withdrawals via your chosen payment method; crediting bonuses and promotional rewards;
• Regulatory Compliance: Fulfilling our obligations under PAGCOR regulations, the Data Privacy Act of 2012, and applicable anti-money laundering (AML) laws; reporting to regulatory authorities as required;
• Fraud Prevention & Security: Detecting and preventing fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct; conducting security audits;
• Responsible Gaming: Monitoring gaming patterns to identify potential problem gambling behavior; administering self-exclusion requests and deposit limits; complying with PAGCOR's responsible gaming requirements;
• Customer Support: Responding to your inquiries, complaints, and support requests; maintaining records of communications for quality assurance;
• Marketing & Promotions: Sending you information about merryph.con promotions, bonuses, and new games — but only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out option;
• Platform Improvement: Analyzing usage patterns to improve the Platform's performance, game selection, and user experience.

04 Legal Basis for Processing

Under the Data Privacy Act of 2012, merryph.con processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your account, process transactions, and deliver gaming services;
• Legal Obligation: Processing required to comply with applicable laws and regulations, including PAGCOR licensing requirements, AML obligations, and tax reporting;
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where our legitimate interests are not overridden by your privacy rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

05 Data Sharing & Disclosure

merryph.con may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

5.1 Service Providers

We engage trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya, BPI, BDO, and other Philippine banks), identity verification providers, cloud hosting services, customer support software providers, and fraud detection services. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

5.2 Regulatory Authorities

merryph.con is required to share certain player data with PAGCOR and other Philippine regulatory authorities as part of our licensing obligations. This includes reporting suspicious transactions to the Anti-Money Laundering Council (AMLC) where required by law.

5.3 Law Enforcement

merryph.con may disclose personal data to law enforcement agencies, courts, or other government authorities where required by law, court order, or where we believe disclosure is necessary to protect the rights, property, or safety of merryph.con, our players, or the public.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of merryph.con's business, your personal data may be transferred to the acquiring entity. You will be notified of any such transfer and the privacy practices of the acquiring entity prior to the transfer taking effect.

06 Cookies & Tracking Technologies

merryph.con uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and deliver relevant content. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the Platform to function — these cannot be disabled. They include session cookies that keep you logged in and security cookies that protect against fraud;
• Functional Cookies: Remember your preferences such as language settings, game favorites, and display options to personalize your experience;
• Analytics Cookies: Help us understand how players use the Platform so we can improve performance and game selection. Data collected is aggregated and anonymized where possible;
• Marketing Cookies: Used to deliver relevant promotional content about merryph.con. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the merryph.con Platform. For strictly necessary cookies, no consent is required as they are essential to service delivery.

07 Data Retention

merryph.con retains your personal data for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with PAGCOR record-keeping requirements and AML regulations ;
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act;
• KYC Documents: Retained for a minimum of five (5) years after account closure or the last transaction, whichever is later;
• Support Communications: Retained for two (2) years from the date of the interaction;
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year after withdrawal of consent.

When personal data is no longer required for any of the above purposes, merryph.con will securely delete or anonymize it in accordance with our internal data disposal procedures.

08 Data Security

merryph.con implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the merryph.con Platform is encrypted using industry-standard SSL/TLS protocols;
• Encrypted Data Storage: Sensitive data, including passwords and financial information, is stored in encrypted form using strong cryptographic algorithms;
• Access Controls: Access to personal data is restricted to authorized merryph.con personnel and service providers on a strict need-to-know basis, enforced through role-based access controls;
• Two-Factor Authentication (2FA): Available to all players to add an additional layer of security to their accounts;
• Regular Security Audits: merryph.con conducts periodic security assessments and penetration testing to identify and remediate vulnerabilities;
• Incident Response: merryph.con maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players within the timeframes required by the Data Privacy Act of 2012.

09 Your Rights Under the Data Privacy Act

As a data subject under the Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by merryph.con:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy;
• Right of Access: You may request a copy of the personal data merryph.con holds about you, along with information about how it is being processed;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our demonstrating compelling grounds;
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format for transfer to another service provider;
• Right to Lodge a Complaint: If you believe merryph.con has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of the above rights, please contact our Data Protection Officer using the details provided in Section 14. We will respond to all verified requests within fifteen (15) business days of receipt, in accordance with NPC guidelines.

10 Children's Privacy

If merryph.con becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the merryph.con Platform, please contact us immediately at the details in Section 14.

11 International Data Transfers

merryph.con primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — such as cloud hosting and analytics providers — may process data in other countries. Where personal data is transferred outside the Philippines, merryph.con ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012.

Such safeguards may include contractual clauses approved by the National Privacy Commission, adequacy decisions, or other legally recognized transfer mechanisms. By using the merryph.con Platform, you consent to such international transfers where they are necessary for the provision of our services.

12 Third-Party Links

The merryph.con Platform may contain links to third-party websites or services for informational purposes. merryph.con is not responsible for the privacy practices or content of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to data collected through the merryph.con Platform.

13 Amendments to This Policy

merryph.con reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the Platform at least seven (7) days before the changes take effect.

The effective date at the top of this document will always reflect the date of the most recent revision. Your continued use of the merryph.con Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how we protect your data.

14 Contact & Data Protection Officer

merryph.con has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact our DPO through the following channels:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.