mpofafa Privacy Policy – How We Protect Your Data

1. Who Is Responsible for Your Data

mpofafa is the data controller for personal information collected through this platform. We are responsible for determining how and why your data is processed. If you have questions about this Privacy Policy or want to exercise a data right, contact our Data Protection Officer at support@mpofafa.app. Please include your registered name and account identifier so we can respond accurately and promptly.

2. Information We Collect

mpofafa collects information in three main ways: directly from you during registration and account use, automatically from your device and browser, and from trusted third-party verification sources.

Information you provide directly:

• Full legal name, date of birth, and government-issued identification number
• Mobile number, email address, and residential address
• Payment details including GCash or Maya wallet identifiers, bank account numbers, and card references (we do not store full card numbers)
• Identity documents submitted for verification, such as a Philippine passport, driver's licence, or UMID card
• Correspondence with customer support, including chat logs and emails
• Responses to voluntary surveys, promotions, or responsible gaming questionnaires

Information collected automatically:

• Device type, operating system, browser version, and screen settings
• IP address and approximate location based on network data
• Session activity including pages visited, buttons clicked, bets placed, and time spent on each section
• Cookies, local storage identifiers, and similar technologies as described in Section 9

Information from third parties:

• Identity verification results from licensed Philippine KYC providers
• Transaction confirmation data from GCash, Maya, banks, and card processors
• Fraud and risk signals from payment security partners

3. Why We Process Your Information

mpofafa processes personal data for specific, legitimate purposes. We do not use your information for purposes that are incompatible with the reason it was originally collected.

• Account creation and management: registering your profile, authenticating logins, and keeping account details accurate.
• Identity and age verification: confirming that you are at least 21 years old and that your account belongs to a real, eligible person — a requirement under our gaming licence.
• Payment processing: handling deposits, withdrawals, bonus credits, and refunds through approved Philippine payment channels.
• Providing betting and gaming services: recording wagers, settling results, running promotions, and displaying your transaction history.
• Security and fraud prevention: detecting suspicious activity, protecting account integrity, and preventing the use of stolen funds or false identities on mpofafa.
• Regulatory compliance: meeting obligations under Philippine gaming regulations, anti-money laundering rules, and tax reporting requirements.
• Customer support: investigating queries, resolving disputes, and responding to complaints.
• Responsible gaming: monitoring usage patterns for signs of problem gambling and applying limits or interventions when appropriate.
• Platform improvement: analysing aggregated and anonymised usage data to improve product design, performance, and member experience.
• Essential communications: sending account confirmations, security alerts, policy updates, and support responses. We do not send unsolicited marketing emails without consent.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, mpofafa relies on the following grounds to process personal information:

• Contractual necessity: processing required to deliver the services you signed up for, including account management and payment handling.
• Legal obligation: processing required to comply with Philippine gaming regulations, AML rules, tax laws, and court or authority orders.
• Legitimate interests: security monitoring, fraud prevention, and platform analytics — where these interests do not override your fundamental privacy rights.
• Consent: for non-essential communications and certain cookie uses where consent is obtained and can be withdrawn at any time.

5. Sharing Your Information

mpofafa does not sell personal data. We share information only in the following circumstances:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, InstaPay or PESONet operators, and Visa or Mastercard networks receive the transaction data necessary to process deposits and withdrawals.
• Identity verification providers: licensed KYC and document verification services that confirm account eligibility on our behalf.
• Technology and hosting partners: infrastructure, cloud, and security providers who operate under strict data processing agreements.
• Gaming regulators and licensing authorities: as required by the terms of our Philippine gaming licence.
• Law enforcement or courts: where we are legally required to disclose data in response to a valid official request.
• Fraud prevention networks: risk signals may be shared with trusted partners to prevent misuse across platforms, strictly within applicable legal frameworks.

All service providers who handle mpofafa member data are bound by contractual confidentiality obligations and may not use that data for any purpose beyond what mpofafa instructs.

6. Data Retention

mpofafa keeps personal information for as long as it is necessary for the purpose it was collected, with additional periods where required by law or legitimate operational need.

• Active account data is retained throughout the life of the account and for a minimum of five years after closure, as required under Philippine AML and gaming regulations.
• Transaction and betting records are retained for a minimum of five years to support dispute resolution, regulatory audits, and tax obligations.
• Identity documents are kept for the period required by the verification provider's licence and our own regulatory obligations.
• Support correspondence is retained for a reasonable period linked to the nature of the query and any ongoing dispute.
• Cookies and session data have shorter lifespans described in the cookie settings available on the platform.

Once retention periods expire and there is no legal basis to keep the information, mpofafa deletes or anonymises the data securely.

7. Security Measures

mpofafa applies layered technical and organisational controls to protect member data:

• All connections between your device and the mpofafa platform are encrypted using TLS. Sensitive stored data is encrypted at rest.
• Access to personal data within mpofafa is limited to authorised staff with a legitimate operational need and is logged for audit purposes.
• Payment details are handled through certified payment processors. mpofafa does not store full debit or credit card numbers on its own servers.
• Account login is protected by password requirements and optional two-factor authentication. Suspicious login activity triggers automated alerts.
• Regular security assessments are conducted to identify and address vulnerabilities in the platform.

No online platform can guarantee absolute security. If you believe your mpofafa account has been compromised, contact support@mpofafa.app immediately so we can take protective action.

8. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, Filipino members have the following rights in relation to their personal data held by mpofafa:

• Right to be informed: to know that your data is being collected and the reasons for processing — which is the purpose of this policy.
• Right of access: to request a copy of the personal information mpofafa holds about you.
• Right to rectification: to correct inaccurate or incomplete information in your account.
• Right to erasure: to request deletion of personal data where there is no longer a lawful basis for retaining it.
• Right to restrict processing: to ask mpofafa to limit how your data is used in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format where technically applicable.
• Right to object: to object to processing based on legitimate interests, including profiling.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time without affecting prior processing.

To exercise any of these rights, email support@mpofafa.app with your name, registered mobile number, and a description of your request. mpofafa will respond within the period required by applicable law. We may need to verify your identity before processing the request.

9. Cookies and Similar Technologies

mpofafa uses cookies and similar client-side technologies to keep sessions secure, remember preferences, prevent fraud, and understand how members interact with the platform. Types used include:

• Strictly necessary cookies: required for login sessions, security tokens, and core platform functions. These cannot be disabled without breaking the service.
• Functional cookies: remember your language preference, display settings, and recent activity to improve your experience across sessions.
• Analytics cookies: collect aggregated, anonymised data about how the platform is used. This helps mpofafa identify areas for improvement without identifying individual members.

mpofafa does not use third-party advertising cookies or tracking pixels that serve ads on behalf of other companies. You can manage non-essential cookies through the settings panel available when you first access the platform, or from your account preferences at any time.

10. Children and Minors

mpofafa does not knowingly collect personal information from anyone under 21 years of age. Age verification is performed as part of the registration and KYC process. If mpofafa discovers that an account was created by someone who does not meet the minimum age requirement, that account will be closed immediately, associated funds reviewed, and the matter handled in line with our licence obligations.

If you believe a minor has accessed mpofafa, please contact us at support@mpofafa.app so we can investigate and take appropriate action.

11. Cross-Border Data Transfers

mpofafa primarily processes and stores personal data within systems accessible to its operations. Where service providers are located outside the Philippines, data transfers are conducted under contractual safeguards that require the recipient to apply protection standards consistent with the Data Privacy Act of 2012. mpofafa will not transfer your data to a jurisdiction that does not offer adequate protection without implementing appropriate safeguards first.

12. Changes to This Privacy Policy

mpofafa may update this Privacy Policy to reflect changes in the law, new platform features, updated payment methods, or improved privacy practices. The effective date at the top of the policy will always show the most recent revision. Material changes will be communicated through the platform or to your registered contact details before they take effect.

Continued use of mpofafa after an updated policy takes effect means you accept the revised version. If you disagree with a change, you may contact us to close your account after resolving pending wagers and balances.

13. Contact and Complaints

For any privacy-related question, data access request, or complaint about how mpofafa handles personal information, contact our Data Protection Officer:

• Email: support@mpofafa.app
• Subject line: Privacy Request – [your registered name]

mpofafa takes privacy complaints seriously and will acknowledge your message and respond substantively within the period required by the Data Privacy Act of 2012. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.