At meryph, we treat your personal data with the same seriousness we apply to every other part of the platform. This Policy explains exactly what data we collect, why we collect it, how we use and protect it, and what rights you hold as a meryph player under Philippine law.
These highlights summarize our approach. All players should read the full Policy below.
meryph processes all personal data in full compliance with Republic Act No. 10173 (the Data Privacy Act of 2012) and the implementing rules and regulations issued by the National Privacy Commission of the Philippines.
You have the right to access, correct, and erase your personal data; to object to certain processing; to data portability; and to lodge a complaint with the National Privacy Commission. meryph will respond to valid requests within thirty (30) days.
meryph does not sell, rent, or commercially exploit your personal information to third-party advertisers or data brokers. Your data is used to operate the meryph platform, fulfill regulatory obligations, and improve the service we provide to you.
All data transmitted between your device and meryph is encrypted using industry-standard TLS/SSL protocols. Stored personal data is protected by additional encryption layers and access controls that limit internal exposure to authorized personnel only.
meryph retains personal data only for as long as required to fulfill the purposes described in this Policy and to comply with Philippine legal and PAGCOR regulatory retention obligations. After applicable retention periods, data is securely deleted or anonymized.
In the event of a personal data breach that is likely to result in significant risk to affected individuals, meryph will notify the National Privacy Commission and affected players within seventy-two (72) hours of discovering the breach, as required by Philippine law.
As a meryph player, you are a data subject under Republic Act No. 10173. The following rights are yours by law and meryph is obligated to honor them.
You have the right to be told when your personal data is collected, what it will be used for, and with whom it may be shared. This Policy fulfills that obligation at the time of collection.
You may request a copy of the personal data meryph holds about you at any time. We will respond within thirty (30) days of receiving a valid, verified request.
If any personal data we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. Contact support or update your information directly through your account profile.
You may request deletion of your personal data where it is no longer needed for the original purpose, where consent has been withdrawn, or where processing was unlawful — subject to our legal retention obligations.
You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where your particular situation justifies it.
Where technically feasible, you may request your personal data in a structured, commonly used, machine-readable format so that you may transfer it to another service provider of your choice.
This Privacy Policy (the "Policy") describes how meryph (hereinafter "meryph," "we," "us," or "the Company"), operator of the online gaming platform at https://meryph.org and all associated services (the "Platform"), collects, processes, stores, discloses, and protects the personal data of individuals who access or use the Platform (hereinafter "you," "Player," or "Data Subject").
meryph is committed to responsible data stewardship. We collect only what is necessary, use it only for the purposes disclosed in this Policy, and protect it with technical and organizational measures appropriate to the sensitivity of the data.
For the purposes of the Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations, meryph is the Personal Information Controller (PIC) responsible for your personal data processed through the Platform.
meryph operates within the regulatory framework of the Philippine Amusement and Gaming Corporation (PAGCOR). Our operations are subject to PAGCOR's data handling requirements in addition to the requirements of the National Privacy Commission (NPC).
Contact details for privacy-related inquiries are set out in Section 16 of this Policy.
meryph collects personal data across several categories depending on how you interact with the Platform:
Registration and Identity Data:
Financial and Transaction Data:
Technical and Usage Data:
Communications Data:
meryph collects personal data through the following means:
meryph uses your personal data for the following purposes:
meryph processes your personal data under one or more of the following lawful bases recognized by the Data Privacy Act of 2012 and its Implementing Rules:
meryph does not sell or commercially exploit your personal data. We may share your data in the following circumstances:
Some of meryph's technology providers and game partners operate infrastructure or personnel outside of the Philippines. In such cases, personal data may be transferred to or accessed from other countries.
meryph ensures that any cross-border transfer of personal data is conducted in accordance with Section 21 of the Data Privacy Act and the NPC's rules on cross-border data flows. Specifically, meryph requires that recipient entities in other countries provide at least the equivalent level of data protection required under Philippine law, typically implemented through appropriate contractual safeguards.
Players may contact meryph's privacy team to request information about specific safeguards applied to their data in the event of cross-border transfers.
meryph retains personal data for the following periods:
Upon expiry of applicable retention periods, personal data is securely deleted or, where deletion is not technically feasible, anonymized such that it can no longer be associated with any individual.
meryph implements technical and organizational security measures designed to protect personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:
While meryph takes reasonable precautions to protect your data, no online service can guarantee absolute security. Players are responsible for maintaining the security of their own account credentials and for notifying meryph immediately if they suspect unauthorized access to their account.
meryph uses cookies and similar technologies to operate the Platform, recognize returning users, maintain session state, and analyze usage patterns. The following categories of cookies may be set:
meryph does not use third-party advertising or tracking cookies that share your data with external advertising networks. You may manage cookie preferences through your browser settings, noting that disabling essential cookies may affect your ability to use the Platform.
The meryph Platform is strictly intended for individuals aged twenty-one (21) years and above. meryph does not knowingly collect personal data from any person under the age of twenty-one (21). Age verification is conducted as part of the registration process and is required before any real-money withdrawal can be processed.
If meryph becomes aware that it has inadvertently collected personal data from a person under twenty-one (21) years of age, it will immediately suspend the relevant account, delete the personal data collected, and report the matter to PAGCOR as required by its licensing conditions.
To exercise any of the data subject rights described in this Policy, please submit a written request to meryph using the contact details in Section 16. To protect your data, meryph will require you to verify your identity before processing any rights request.
meryph will respond to valid, verified requests within thirty (30) days of receipt. In complex cases or where a large volume of data is involved, meryph may extend this period by up to an additional thirty (30) days, with written notice to you explaining the reason for the extension.
Requests may be denied in the following circumstances: where compliance would violate a legal obligation; where the request is manifestly unfounded or excessive; or where compliance would infringe the rights of another person. In such cases, meryph will provide written reasons for the denial.
There is no fee for making a data subject request. However, meryph reserves the right to charge a reasonable administrative fee for requests that are manifestly unfounded or excessive, particularly where they are repetitive.
If you believe that meryph has processed your personal data in violation of this Policy or of the Data Privacy Act of 2012, you are encouraged to contact meryph's privacy team in the first instance using the details in Section 16. meryph will investigate and respond to all privacy complaints seriously and promptly.
If you are not satisfied with meryph's response, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines. The NPC is the competent supervisory authority for data protection matters in the Philippines. Information on how to file a complaint is available on the NPC's official website.
meryph may update this Privacy Policy from time to time to reflect changes in our data practices, technology, legal requirements, or business operations. When we make material changes, we will notify registered players via the email address on file or through an in-Platform notification, and we will update the "Last Updated" date at the top of this page.
Your continued use of the meryph Platform following the posting of a revised Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you must cease using the Platform and may request account closure in accordance with the Terms and Conditions.
For any privacy-related inquiries, data subject rights requests, or complaints, please contact the meryph privacy team through the following channels:
Your data stays yours. No selling. No third-party advertising networks. Full compliance with Philippine data privacy law. That's the meryph standard — and it applies from your very first login.