magicph Privacy Policy

This Policy applies to all personal data collected and processed by magicph in connection with: (a) the registration and maintenance of Player Accounts on the magicph Platform; (b) the provision of gaming, payment, and customer support services; (c) compliance with regulatory obligations including PAGCOR authorisation requirements and Philippine anti-money laundering law; and (d) any communication between you and magicph through any channel including live chat, email, or promotional correspondence.

This Policy should be read alongside the magicph Terms and Conditions and the Responsible Gaming Policy, both of which contain provisions relevant to data collection and account management. In the event of any conflict between this Policy and those documents, this Privacy Policy shall prevail with respect to data protection matters.

magicph acts as the Data Controller in respect of all personal data collected through the Platform, as defined under Republic Act No. 10173 and its Implementing Rules. As Data Controller, magicph determines the purposes and means of processing personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection law and PAGCOR regulatory requirements.

For all data protection matters, including the exercise of your rights as a Data Subject, magicph may be contacted via the channels specified in Section 15 of this Policy (Contact and Data Protection Officer).

magicph collects the following categories of personal data in connection with the registration and operation of Player Accounts and the provision of gaming services. The specific data collected at each stage is detailed below.

3.1 Account Registration Data

• Philippine mobile phone number (primary account identifier)
• Date of birth (for age verification — 21+ requirement)
• Username or account alias (if selected by the Player)
• Password (stored in cryptographically hashed form; never in plain text)

3.2 Identity Verification (KYC) Data

• Full legal name as it appears on government-issued identification
• Date of birth (confirmed against ID document)
• Home address (city, province, country)
• Copy of valid Philippine government-issued ID (e.g., Passport, Driver's License, SSS ID, PhilHealth ID, Postal ID, UMID)
• Selfie or liveness verification image (where required by enhanced KYC procedures)

3.3 Financial and Transaction Data

• GCash or Maya mobile number linked to payment transactions
• Bank account details (BPI, BDO, Metrobank) for withdrawal processing
• Cryptocurrency wallet address (for USDT transactions where applicable)
• Transaction history including deposit amounts, dates, withdrawal requests, and processing status
• Wagering history and game session records

3.4 Technical and Usage Data

• Device type, operating system, browser version, and screen resolution
• IP address and general geolocation data derived from IP
• Session logs, including login timestamps, duration of sessions, and pages visited
• Game interaction data and wagering behaviour patterns
• Cookie identifiers and similar tracking data (see Section 8)

3.5 Customer Support Communications

• Content of live chat transcripts, email correspondence, and any other communication submitted to magicph support
• Complaint records and dispute resolution correspondence

magicph collects personal data through the following means:

• Directly from you — information you provide during registration, KYC verification, payment processing, or when contacting customer support.
• Automatically through the Platform — technical data collected via cookies, server logs, and analytics tools as you interact with the magicph website and gaming environment.
• From payment providers — transaction confirmation data from GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and other integrated payment platforms, as necessary to process and reconcile financial transactions.
• From identity verification services — where third-party KYC or document verification services are engaged to assist in validating the accuracy of documents submitted by Players.
• From regulatory bodies — PAGCOR or other competent Philippine authorities may share information with magicph in connection with regulatory oversight, self-exclusion registers, or anti-money laundering reporting requirements.

Under Republic Act No. 10173, magicph processes personal data on the following legal bases:

magicph uses the personal data we collect for the following specific purposes. We do not use personal data for any purpose incompatible with those stated below without obtaining your prior consent or as otherwise permitted by law.

• Account creation and authentication — to create, manage, and secure your magicph Account, including OTP-based login verification tied to your registered Philippine mobile number.
• Age and identity verification — to confirm that you are 21 years of age or older (as required by PAGCOR regulations) and to verify your identity for KYC compliance.
• Payment processing — to process deposits, withdrawals, and refunds through your chosen payment method (GCash, Maya, BPI, BDO, Metrobank, USDT, Coins.ph, or 7-Eleven), and to maintain accurate financial records.
• Fraud detection and prevention — to identify, investigate, and prevent fraudulent activity, money laundering, and abuse of promotional offers, including detection of multiple accounts belonging to the same individual.
• Regulatory compliance — to fulfill obligations under PAGCOR regulations, Republic Act 9160 (Anti-Money Laundering Act), and all other applicable Philippine law, including mandatory reporting to the Anti-Money Laundering Council (AMLC) where required.
• Customer support — to respond to your enquiries, process disputes, and maintain records of support interactions.
• Responsible gaming — to monitor gaming patterns for indicators of problem gambling and to administer self-exclusion requests and responsible gaming tools.
• Service communications — to send you transactional notifications (e.g., deposit confirmations, withdrawal status updates, security alerts) via SMS or in-platform notification.
• Promotional communications — where you have provided consent, to send personalised offers, bonus notifications, and promotional updates relevant to your gaming activity. You may withdraw this consent at any time through your Account settings.
• Platform improvement — to analyse aggregated usage data to improve the performance, design, and game selection of the magicph Platform.

magicph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. Personal data is shared only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors — GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and other payment service providers receive the minimum data required to execute and confirm financial transactions (e.g., mobile number, account reference, transaction amount). These providers are bound by their own regulatory data protection obligations.
• KYC and identity verification partners — where a third-party verification service is used to assist in validating KYC documents, that service receives only the documents necessary for verification and is contractually prohibited from using the data for any other purpose.
• Game studio providers — game providers (e.g., JILI, PG Soft, Evolution Gaming) receive pseudonymous session identifiers and wagering data necessary to operate game sessions. These providers do not receive directly identifying personal information such as your full name or ID documents.
• Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government authorities may receive personal data where required by law, court order, or regulatory direction. magicph will, where legally permitted, notify you of such disclosure.
• Professional advisers — legal counsel, auditors, and compliance consultants engaged by magicph may access personal data on a confidential, need-to-know basis in connection with the provision of professional services.
• Business transfers — in the event of a merger, acquisition, or transfer of substantially all of magicph's assets, Player data may be transferred to the acquiring entity, which would be required to honour this Privacy Policy or provide notice of material changes.

The magicph Platform uses cookies and similar tracking technologies to ensure proper functioning of the site, maintain your login session, and collect usage analytics. A cookie is a small text file stored on your device by your browser at the instruction of the website you are visiting.

Types of Cookies Used

• Strictly Necessary Cookies — required for the Platform to function. These include session authentication cookies that keep you logged in to your magicph Account during a session. These cookies cannot be disabled without preventing use of the Platform.
• Functional Cookies — remember your preferences (e.g., language settings, preferred game category) to personalise your experience on the Platform.
• Analytics Cookies — collect anonymised or pseudonymised data about how visitors use the Platform (e.g., pages visited, time on site, error encounters) to help magicph improve performance and content. This data is aggregated and does not identify individual users.
• Security Cookies — detect unusual access patterns and assist in fraud prevention by identifying new device logins that warrant additional OTP verification.

magicph does not use third-party advertising cookies or permit external advertising networks to set cookies through the Platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the Platform.

magicph retains personal data for the period necessary to fulfill the purposes for which it was collected, subject to the minimum retention requirements of applicable Philippine law. The following retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be associated with an identifiable individual. Where legal proceedings or regulatory investigations are ongoing, data relevant to those proceedings will be retained until their conclusion regardless of the standard retention period.

magicph implements appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include, but are not limited to:

• SSL/TLS encryption on all data transmitted between your device and the magicph Platform, protecting personal data and financial information in transit.
• Cryptographic password hashing — account passwords are stored using industry-standard one-way cryptographic hashing algorithms. magicph staff cannot read your password in plain text.
• OTP-based two-factor authentication for new device logins and high-value withdrawal requests, tied to your registered Philippine mobile number.
• Access controls — personal data is accessible only to magicph personnel and authorised third parties who require it to perform their specific roles, on a strict need-to-know basis.
• Player fund segregation — financial balances are held in accounts separate from magicph's operating funds, consistent with PAGCOR requirements.
• Security monitoring — automated systems monitor for unusual login activity, suspicious transaction patterns, and potential security incidents.

Despite these measures, no data transmission over the internet or electronic storage system can be guaranteed as 100% secure. In the event of a personal data breach that creates a real risk of harm to Data Subjects, magicph will notify the National Privacy Commission (NPC) and affected Data Subjects in accordance with Section 20(f) of the DPA and NPC Circular 16-03.

Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by magicph. These rights may be exercised by contacting magicph through the channels described in Section 15.

• Right to be Informed — you have the right to be notified of the nature and extent of personal data being collected and processed, the purposes of processing, and the identity of any third parties to whom data is shared.
• Right to Access — you have the right to request a copy of the personal data magicph holds about you, along with information about how it is being processed.
• Right to Rectification — you have the right to request correction of inaccurate or incomplete personal data in your Account. For most registration data, this can be done directly through Account settings. For KYC data, corrections require re-submission of supporting documentation.
• Right to Erasure ("Right to be Forgotten") — you may request deletion of personal data where it is no longer necessary for the purpose for which it was collected, where you withdraw consent (if consent was the basis for processing), or where the data has been unlawfully processed. This right is subject to magicph's legal obligations to retain data under PAGCOR and AMLA requirements, which may override an erasure request.
• Right to Object — you have the right to object to the processing of your personal data for direct marketing purposes at any time, without giving reasons. You may also object to processing based on legitimate interests, subject to magicph's ability to demonstrate compelling legitimate grounds.
• Right to Data Portability — you have the right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible and where processing is based on consent or contract.
• Right to Lodge a Complaint — if you believe magicph has processed your personal data in violation of the DPA, you have the right to lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

The magicph Platform is strictly intended for adults aged 21 years and older, consistent with PAGCOR regulations governing real-money online gaming in the Philippines. magicph does not knowingly collect personal data from individuals under the age of 21.

If magicph becomes aware that personal data has been collected from a person under the age of 21, that Account will be immediately suspended, all associated data will be reviewed, and, following any required regulatory reporting, the personal data will be securely deleted in accordance with the procedures applicable under the DPA and PAGCOR guidelines.

Parents or guardians who have reason to believe that a minor has registered an Account on the magicph Platform should contact magicph support immediately using the contact details in Section 15. magicph will act promptly to investigate and resolve any such report.

The game studio providers and certain technical infrastructure partners engaged by magicph may operate data processing systems located outside the Republic of the Philippines (for example, game servers operated by studios based in jurisdictions including Malta, Isle of Man, or other regulated gaming jurisdictions). Where personal data is transferred outside the Philippines in connection with the provision of gaming services, magicph ensures that such transfers are subject to appropriate safeguards, including:

• Contractual obligations on data processors to adhere to data protection standards consistent with the DPA and applicable NPC regulations;
• Limitation of data shared with international processors to the minimum necessary for the specific service function (e.g., pseudonymous session identifiers rather than full identity data for game session management);
• Assessment of the adequacy of data protection standards in the receiving jurisdiction prior to initiating any data transfer arrangement.

KYC documents and full identity verification data are processed and stored within systems that are either located in the Philippines or are subject to contractual data protection obligations meeting the standards of the DPA.

magicph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, PAGCOR requirements, or NPC issuances. The date of the most recent revision is displayed at the top of this page and in the sidebar table of contents.

Where amendments are material — meaning they significantly change how we process your personal data or affect your rights as a Data Subject — magicph will provide notice via the Platform (e.g., a banner notification on the site) or by direct communication to your registered mobile number, with reasonable advance notice prior to the effective date of the change.

Your continued use of the magicph Platform following the effective date of any amended Privacy Policy constitutes acknowledgment of the updated Policy. We encourage you to review this page periodically to remain informed of how magicph handles your personal data.

For all matters relating to this Privacy Policy, the exercise of your Data Subject rights, or any concern about how magicph processes your personal data, please contact us through the following channels:

• Live Chat: Available 24/7 through the Support widget on the magicph Platform. For data protection matters, please state "Privacy / Data Request" at the start of your message so it is routed to the appropriate team.
• Email: [email protected] — please include your registered mobile number, the nature of your request, and any relevant Account reference in your message. Label the subject line "Privacy Request" for prompt routing.

magicph has designated a Data Protection Officer (DPO) in accordance with the DPA and NPC Circular 17-01. The DPO is responsible for overseeing magicph's compliance with the DPA, acting as the point of contact between magicph and the National Privacy Commission, and responding to Data Subject requests escalated beyond the standard customer support team. The DPO may be reached through the email address above.

If you are not satisfied with magicph's response to a privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. Information on how to file a complaint is available on the NPC's official government website.