merrph Privacy Policy

1. Introduction & Scope

1.1 merrph ("we", "us", "our") is committed to protecting the privacy and personal data of all individuals who interact with the merrph online gaming platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information.

1.2 This policy applies to all personal data processed by merrph in connection with the operation of the merrph platform, including data collected when you register for an account, make deposits or withdrawals, participate in games, contact our support team, or interact with merrph marketing communications.

1.3 merrph operates primarily in the Philippines and processes personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

1.4 This Privacy Policy should be read alongside the merrph Terms & Conditions, which govern your use of the platform. Terms not defined in this policy carry the meanings assigned to them in the Terms & Conditions.

2. Data Controller Information

2.1 For the purposes of the Data Privacy Act of 2012, merrph is the personal information controller responsible for the personal data collected through the merrph platform.

2.2 merrph has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact the merrph DPO through our support channels.

2.3 If you have any questions, concerns, or requests relating to the processing of your personal data by merrph, please contact us at [email protected] or via the live chat function available on the merrph platform.

3. Data We Collect

3.1 merrph collects personal data from you in the following categories:

3.2 merrph does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. Where sensitive data (such as government ID numbers) is collected, it is processed solely for KYC and anti-money laundering purposes.

3.3 You are not legally obligated to provide your personal data to merrph. However, failure to provide certain categories of data — particularly identity and financial data — will prevent merrph from opening or maintaining your account or processing transactions.

4. How We Use Your Data

4.1 merrph uses the personal data we collect for the following purposes:

• Account Management: To create, verify, maintain, and secure your merrph account, including processing your merrph login and enforcing account security measures;
• Transaction Processing: To process deposits and withdrawals in Philippine Peso via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods;
• Regulatory Compliance: To fulfill merrph's obligations under PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine laws, including KYC verification and suspicious transaction reporting;
• Platform Improvement: To analyze gaming patterns, platform usage, and technical performance in order to improve the merrph user experience;
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance through merrph's 24/7 support channels;
• Responsible Gaming: To monitor gaming behavior and enforce responsible gaming tools such as deposit limits and self-exclusion requests;
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, collusion, money laundering, and other prohibited conduct on the merrph platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where merrph has a legitimate interest in doing so.

4.2 merrph will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

5. Legal Basis for Processing

5.1 merrph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform the contract between you and merrph — including account creation, transaction processing, and game participation;
• Legal Obligation: Processing required to comply with merrph's obligations under Philippine law, including PAGCOR licensing requirements, anti-money laundering regulations, and tax reporting obligations;
• Legitimate Interests: Processing carried out for merrph's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: Processing based on your freely given, specific, and informed consent — primarily for marketing communications and optional data collection. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

6.1 merrph does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your financial transactions;
• Identity Verification Providers: Third-party KYC and identity verification services used to confirm your identity and comply with regulatory requirements;
• Game Software Providers: Licensed game developers and providers whose games are available on the merrph platform, to the extent required for game operation and fairness auditing;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies, where disclosure is required by law or regulatory directive;
• IT and Security Service Providers: Cloud hosting, cybersecurity, and technical infrastructure providers who process data on merrph's behalf under strict data processing agreements;
• Professional Advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

6.2 All third parties with whom merrph shares personal data are required to process that data in accordance with applicable Philippine data protection laws and merrph's data processing standards. merrph does not authorize third parties to use your data for their own independent purposes.

6.3 In the event of a merger, acquisition, or sale of merrph's business or assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

7. Cookies & Tracking

7.1 The merrph platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyze platform usage. Cookies are small text files stored on your device when you visit the merrph website.

7.2 merrph uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the merrph platform to function, including session management and security tokens. These cannot be disabled;
• Performance Cookies: Used to collect anonymized data about how players use the merrph platform, helping us identify and fix technical issues;
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming configurations;
• Analytics Cookies: Used to understand aggregate player behavior and improve the merrph platform experience.

7.3 You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the merrph platform, including your ability to log in and access games.

8. Data Security

8.1 merrph employs the following security measures to protect your personal data:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the merrph platform;
• AES-256 encryption for personal and financial data stored in merrph databases;
• Multi-factor authentication options for merrph account access;
• Regular security audits and penetration testing of merrph infrastructure;
• Role-based access controls limiting merrph staff access to personal data on a need-to-know basis;
• Continuous monitoring for suspicious activity and unauthorized access attempts.

8.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, merrph will notify the National Privacy Commission and affected individuals in accordance with the timelines prescribed by the Data Privacy Act of 2012 and NPC regulations.

8.3 You are responsible for maintaining the security of your merrph account credentials. merrph strongly recommends enabling two-factor authentication and using a unique, strong password for your merrph login.

9. Data Retention

9.1 merrph retains your personal data for as long as your merrph account remains active and for a period thereafter as required by applicable law and regulatory obligations.

9.2 The following general retention periods apply to merrph player data:

• Account and Identity Data: Retained for the duration of your merrph account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC requirements;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine anti-money laundering regulations;
• Gaming History: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes;
• Support Communications: Retained for two (2) years from the date of the last interaction;
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications.

9.3 Upon expiry of the applicable retention period, merrph will securely delete or anonymize your personal data in accordance with NPC guidelines.

10. Your Privacy Rights

10.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by merrph:

10.2 To exercise any of the above rights, please contact the merrph Data Protection Officer via live chat or at [email protected]. merrph will respond to all verified data rights requests within thirty (30) days, in accordance with NPC guidelines. We may request proof of identity before processing your request.

10.3 If you believe merrph has not handled your personal data in accordance with the Data Privacy Act of 2012, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

11. Children's Privacy

11.1 merrph does not knowingly collect, process, or retain personal data from individuals under the age of 21. If merrph becomes aware that personal data has been collected from a person under 21, it will take immediate steps to delete that data and close the associated account.

11.2 If you are a parent or guardian and believe that a minor has registered for a merrph account or provided personal data to merrph, please contact us immediately at [email protected] so that we can take appropriate action.

12. Changes to This Policy

12.1 merrph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this page will be revised accordingly.

12.2 Where changes to this Privacy Policy are material — meaning they significantly affect how merrph processes your personal data or your rights — merrph will notify registered players via email or a prominent notice on the merrph platform prior to the changes taking effect.

12.3 Your continued use of the merrph platform following the publication of an updated Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the updated policy, you should discontinue use of the merrph platform and contact us to close your account.

13. Contact & Complaints

13.1 For any questions, concerns, or requests relating to this Privacy Policy or merrph's data processing practices, please contact us through the following channels:

• Live Chat: Available 24/7 directly on the merrph platform — the fastest way to reach us
• Email: [email protected] (plain text — not a clickable link)
• Data Protection Officer: Reachable via the same support channels above
• Support Hours: 24 hours a day, 7 days a week, Philippine Time (PHT)

13.2 If you are not satisfied with merrph's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.

13.3 merrph is committed to resolving all privacy-related concerns promptly and transparently. We aim to acknowledge all written privacy inquiries within 24 hours and provide a substantive response within 30 days.