Mobaplay Privacy Policy — How We Protect Your Personal Data in the Philippines

1. Overview

This Privacy Policy applies to all personal data collected by Mobaplay ("Mobaplay", "we", "us", "our") in connection with the operation of the Mobaplay online gaming platform accessible at mobaplay.org and any associated interfaces (collectively, the "Platform"). This Policy applies to all registered players and visitors who are based in the Philippines.

Mobaplay is committed to protecting your privacy and handling your personal data with transparency, integrity and care. We operate in accordance with the Data Privacy Act of 2012 (Republic Act 10173) of the Philippines and its implementing rules and regulations. We encourage you to read this Policy carefully before using the Mobaplay Platform so that you understand your rights and how your information is handled.

By registering a Mobaplay account, using our services or visiting the Platform, you acknowledge that you have read and understood this Privacy Policy and that your personal data will be processed as described herein. This Policy forms part of the Mobaplay Terms and Conditions.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, Mobaplay is the personal information controller in respect of the data collected through the Platform. As the controller, Mobaplay is responsible for determining the purposes and means of processing your personal information and for ensuring that it is handled lawfully and securely.

If you have any questions about how Mobaplay processes your personal data, you may contact us using the details provided in Section 14 of this Policy. All data-related enquiries from Filipino players are handled by our privacy team, who are committed to responding within a reasonable timeframe.

3. Personal Data We Collect

Mobaplay collects personal data from you through multiple channels in the course of operating the Platform. The categories of data we may collect include:

We do not collect sensitive personal information — such as racial or ethnic origin, political affiliations, religious beliefs or health data — except where directly required by law for identity verification or responsible gaming compliance purposes.

4. How Mobaplay Uses Your Personal Data

Mobaplay processes the personal data we collect for the following specific purposes:

1. Account creation and authentication — to register your Mobaplay account, verify your identity, enforce the 21+ age policy and secure your login.
2. Platform operation and service delivery — to enable you to access all Mobaplay sections including casino, sports betting, basketball betting, esports, bingo and promotions.
3. PHP transaction processing — to process deposits through GCash, Maya or bank transfer and to handle PHP withdrawal requests to your nominated local account.
4. Regulatory compliance and fraud prevention — to conduct anti-money laundering (AML) checks, identity verification (KYC), detect and prevent fraudulent activity and fulfil our legal obligations under Philippine law.
5. Responsible gaming — to apply the deposit limits, session timers and self-exclusion arrangements that you request, and to identify account behaviour that may indicate problem gaming.
6. Customer support — to respond to your enquiries, resolve disputes and manage support requests submitted through live chat or email.
7. Promotional communications — where you have given consent, to notify you of relevant Mobaplay promotions, bonuses and offers via email or on-platform notification. You may withdraw consent at any time through your account settings.
8. Platform improvement and analytics — to understand how Filipino players use the Mobaplay Platform and to improve performance, navigation and content relevance. Analytics data is used in aggregate form wherever possible.

5. Legal Basis for Processing

Mobaplay processes your personal data on the following legal grounds under the Data Privacy Act of 2012 and related Philippine regulations:

• Contractual necessity — processing your identity, contact and financial data is required to provide the Mobaplay gaming services you have registered to use.
• Legal obligation — certain processing activities, including KYC verification, AML checks and the enforcement of the 21+ age requirement, are carried out to comply with Philippine legal and regulatory obligations.
• Legitimate interests — we process technical and behavioural data for fraud prevention, platform security and platform improvement purposes, where these interests do not override your fundamental privacy rights.
• Consent — where we send you marketing or promotional communications, we do so on the basis of your explicit consent, which you may withdraw at any time without affecting the lawfulness of any prior processing.

6. Data Sharing and Third Parties

Mobaplay shares your personal data only in the following controlled circumstances and with appropriate safeguards in place:

• Identity verification providers — third-party KYC platforms that assist Mobaplay in verifying Philippine government-issued identification documents to enforce the 21+ age requirement.
• Payment processors — GCash, Maya and Philippine bank partners receive the transaction data necessary to process your PHP deposits and withdrawals. These entities operate under their own privacy policies and Philippine financial regulations.
• Fraud prevention and AML service providers — specialised platforms that help Mobaplay detect suspicious financial activity and comply with Philippine anti-money laundering obligations.
• Technology infrastructure providers — cloud hosting, content delivery and platform support providers who process data on behalf of Mobaplay under strict data processing agreements.
• Philippine government authorities and law enforcement — Mobaplay will disclose personal data to the appropriate Philippine authorities when legally required to do so, including in response to valid court orders or regulatory directives.

7. Payment Data and Financial Information

Because Mobaplay operates entirely in Philippine Peso and uses locally familiar payment channels — primarily GCash, Maya and Philippine bank transfer — the financial data we handle relates specifically to PHP transactions within the Philippine financial ecosystem.

When you make a deposit using GCash or Maya, Mobaplay receives a transaction reference and confirmation from the payment provider. Full GCash or Maya account credentials are not stored by Mobaplay; these remain within the respective payment platform's secure environment. For bank transfers, Mobaplay records the transaction reference number and, where provided, the bank account details used for verification purposes.

Financial data is used exclusively for the following purposes:

• Processing your PHP deposits to your Mobaplay wallet.
• Identifying the correct withdrawal channel for your withdrawal requests.
• Conducting AML source-of-funds checks as required under Philippine regulations.
• Resolving any disputed transactions or payment errors reported by you or your payment provider.

Mobaplay applies the same data security standards to financial data as to all other personal information categories. Payment records are retained for the minimum period required by Philippine financial and tax regulations.

8. Data Retention

Mobaplay retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by Philippine law. The following general retention periods apply:

• Active account data — retained for the duration of your Mobaplay account and for a period following account closure as required by legal and regulatory obligations.
• Financial transaction records — retained for a minimum of five (5) years following the transaction date, in line with Philippine anti-money laundering and tax retention requirements.
• Identity verification documents — retained for the period required under Philippine KYC regulations, typically five (5) years from the date of verification or account closure, whichever is later.
• Support communications — retained for a period of three (3) years from the date of the support interaction, to enable dispute resolution.
• Marketing consent records — retained from the date of consent until you withdraw consent, plus an additional period sufficient to demonstrate compliance if required.

When the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

9. Security Measures

Mobaplay implements a layered approach to data security, combining technical, organisational and procedural controls to protect your personal information against unauthorised access, disclosure, alteration or destruction. Key security measures include:

• SSL/TLS encryption on all data in transit between your browser or device and Mobaplay servers.
• Encrypted data storage for sensitive fields including identity document numbers and financial account references.
• Two-factor authentication (2FA) available to all Mobaplay account holders to prevent unauthorised login.
• Role-based access controls limiting which Mobaplay staff can access player data to those who require it for legitimate operational purposes.
• Automated fraud and anomaly detection monitoring for unusual account behaviour, suspicious login patterns and atypical financial transactions.
• Regular security assessments of the Mobaplay platform infrastructure, including vulnerability scanning and periodic audits.

While Mobaplay takes reasonable and industry-standard security precautions, no internet-based platform can guarantee absolute security. We encourage you to protect your own account by using a strong, unique password and enabling 2FA on your Mobaplay account.

10. Your Rights as a Filipino Data Subject

Under the Data Privacy Act of 2012 and its implementing regulations, you have the following rights in relation to your personal data held by Mobaplay:

To exercise any of the above rights, please contact the Mobaplay privacy team using the details in Section 14. We will respond to all valid requests within thirty (30) days. We may need to verify your identity before fulfilling a data rights request to ensure that we do not disclose or modify data for someone other than the account holder.

11. Cookies and Tracking Technologies

Mobaplay uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device when you visit mobaplay.org. The categories of cookies Mobaplay uses are:

• Strictly necessary cookies — essential for the Platform to function. These include session authentication cookies that keep you logged in to your Mobaplay account. They cannot be disabled without breaking core platform functionality.
• Performance cookies — collect aggregated, anonymous data about how Filipino players navigate the Platform, which pages are most visited and how long sessions last. This data helps us improve the Mobaplay experience.
• Functionality cookies — remember preferences such as your language setting, preferred game view or display settings so you do not need to reconfigure them on every visit.
• Security cookies — support fraud detection and help protect your Mobaplay account by identifying and flagging unusual access patterns.

Mobaplay does not use third-party advertising cookies that track your activity across other websites. You can configure your browser settings to block or delete cookies; however, doing so may affect the functionality of your Mobaplay account session.

12. Children and Minors — 21+ Policy

The Mobaplay Platform is strictly restricted to adults aged 21 years and above. Mobaplay does not knowingly collect personal data from individuals under the age of 21, and we actively enforce this age threshold through mandatory identity verification at the point of account registration.

If Mobaplay becomes aware that an account has been registered by a person under 21 years of age, we will immediately suspend the account, cease processing the personal data associated with it, delete or anonymise that data to the extent permitted by law, and may report the matter to the appropriate Philippine authorities where required.

13. Changes to This Privacy Policy

Mobaplay may update this Privacy Policy from time to time to reflect changes in the Platform, applicable Philippine law, regulatory guidance or our internal data handling practices. When we make material changes to this Policy, we will notify active Mobaplay account holders through a platform notification or email to the address registered on your account.

The date of the most recent review of this Policy is displayed at the top of this page. Continued use of the Mobaplay Platform following the publication of any revised Privacy Policy constitutes your acknowledgement of the updated terms. If you do not agree with changes to this Policy, you may close your Mobaplay account by contacting support.

We encourage you to review this Privacy Policy regularly to remain informed about how Mobaplay protects your personal data as a Filipino player.

14. Contact Our Privacy Team

If you have any questions, concerns or requests relating to this Privacy Policy or the way Mobaplay handles your personal data, please reach out to our privacy team using any of the following channels:

• Email: [email protected] — mark your subject line as "Privacy Request" for priority handling by our privacy team.
• Live Chat: Available 24/7 through your logged-in Mobaplay account dashboard — ask to be connected to a privacy or data protection enquiry.
• Response time: Privacy requests are typically acknowledged within 48 hours. Full responses to data subject rights requests are provided within 30 days.

For complaints about how Mobaplay has handled your personal data that remain unresolved after contacting us, you may escalate your concern to the National Privacy Commission (NPC) of the Philippines, which is the regulatory body responsible for data protection in the Philippines.