merrph Privacy Policy

Last Updated: October 8, 2026

1. Introduction

merrph ("we", "us", "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy describes how merrph collects, uses, stores, discloses, and protects the personal information you provide when you access or use our online gaming platform at https://merrph.cam (the "Service"). This Privacy Policy applies to all users of the Service, including registered players, visitors, and anyone who interacts with our platform.

By registering an account with merrph, accessing the Service, or providing your personal information to us, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with the terms of this Privacy Policy, you must not use the Service or provide any personal information to merrph.

This Privacy Policy is governed by and complies with the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, as well as other applicable Philippine laws and regulations concerning data protection and privacy. We reserve the right to update, modify, or amend this Privacy Policy at any time without prior notice. Any changes will be effective immediately upon posting the updated Privacy Policy on our website. Your continued use of the Service after such changes constitutes your acceptance of the modified Privacy Policy.

2. Information We Collect

2.1 Personal Information You Provide

When you register an account with merrph, we collect the following personal information directly from you:

• Identity Information: Full legal name as it appears on your government-issued identification document, date of birth, gender, nationality, and place of birth.
• Contact Information: Email address, mobile phone number, residential address (including street address, barangay, city/municipality, province, and postal code).
• Account Credentials: Username, password (stored in encrypted form), and security questions/answers for account recovery purposes.
• Verification Documents: Copies of government-issued identification documents such as passport, driver's license, UMID, PhilHealth ID, or postal ID; proof of address documents such as utility bills, bank statements, or government correspondence; and selfie photographs for identity verification purposes.
• Financial Information: Bank account details (account number, account name, bank name, branch), GCash or PayMaya mobile numbers, transaction history, deposit amounts, withdrawal requests, and payment method preferences.
• Communication Data: Records of your communications with merrph customer support, including live chat transcripts, email correspondence, phone call recordings (where applicable and with your consent), and any feedback, complaints, or inquiries you submit to us.

2.2 Information We Collect Automatically

When you access or use the merrph Service, we automatically collect certain technical information about your device, browsing actions, and usage patterns using cookies, web beacons, and similar tracking technologies:

• Device Information: Device type, operating system and version, browser type and version, screen resolution, device identifiers (such as IMEI, IDFA, or Android ID), and hardware model.
• Connection Information: IP address, internet service provider (ISP), geographic location (city and region level based on IP address), time zone settings, and network connection type (Wi-Fi, mobile data).
• Usage Information: Pages visited, games played, bets placed, bet amounts and outcomes, session duration, click-through rates, page response times, navigation paths through the website, interaction with specific features, and timestamps of all activities.
• Cookies and Tracking Data: Session cookies for authentication and security, persistent cookies for remembering your preferences and settings, analytics cookies to understand how you use the Service, and marketing cookies to deliver personalized promotional content (subject to your cookie preferences).

2.3 Information from Third Parties

We may receive additional information about you from third-party sources to verify your identity, prevent fraud, and comply with legal obligations:

• Payment Providers: Transaction confirmation, payment status, and fraud risk assessments from GCash, PayMaya, and partner banks.
• Verification Services: Identity verification results, age verification confirmations, and address validation data from third-party verification providers.
• Regulatory Authorities: Information from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine regulatory bodies regarding compliance checks, player exclusions, or regulatory investigations.

3. How We Use Your Information

merrph uses the personal information we collect for the following purposes, all of which are necessary for the operation of our online gaming platform and compliance with applicable laws:

• Account Management: To create and maintain your merrph account, authenticate your identity when you log in, manage your account preferences and settings, and provide customer support services.
• Service Provision: To process your bets, manage gameplay, calculate winnings and losses, maintain your account balance, process deposits and withdrawals, and provide access to all features of the Service.
• Identity Verification and Fraud Prevention: To verify that you are 21 years of age or older, confirm your identity and residential address, detect and prevent fraudulent activity, identify multiple accounts or bonus abuse, and comply with Know Your Customer (KYC) and anti-money laundering (AML) requirements under Philippine law.
• Payment Processing: To process deposits from your chosen payment method, execute withdrawal requests to your verified payment account, reconcile transactions, and investigate payment disputes or chargebacks.
• Marketing and Promotions: To send you promotional offers, bonuses, free spins, and other incentives via email, SMS, push notifications, or in-app messages (only if you have consented to receive marketing communications); to personalize your gaming experience and show you relevant game recommendations; and to conduct surveys and request feedback on our Service.
• Legal Compliance and Regulatory Obligations: To comply with Philippine gaming regulations, anti-money laundering laws, tax reporting requirements, and court orders or legal process; to enforce our Terms and Conditions and detect violations; to protect merrph's legal rights and defend against legal claims; and to report suspicious activity to relevant authorities including PAGCOR and the AMLC.
• Service Improvement and Analytics: To analyze usage patterns and player behavior to improve the Service; to develop new features, games, and promotional offers; to conduct A/B testing and optimize user experience; and to generate aggregated, anonymized statistics about platform performance and player demographics.
• Responsible Gaming: To monitor your gameplay patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, provide responsible gaming tools and resources, and comply with player protection obligations under Philippine gaming regulations.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, merrph processes your personal data based on the following legal grounds:

• Consent: You have provided explicit consent for us to process your personal data for specific purposes, such as receiving marketing communications or using optional features of the Service. You may withdraw your consent at any time by contacting customer support.
• Contractual Necessity: Processing is necessary to fulfill our contractual obligations to you under the Terms and Conditions, including providing access to the Service, processing bets and payments, and maintaining your account.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including gaming regulations, anti-money laundering laws, tax laws, and court orders or legal process issued by Philippine authorities.
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, service improvement, and marketing (provided that such interests do not override your fundamental rights and freedoms).

5. How We Share Your Information

merrph does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your personal information with the following categories of recipients in limited circumstances:

• Payment Service Providers: We share necessary payment information with GCash, PayMaya, and partner banks to process your deposits and withdrawals. These providers are contractually obligated to protect your data and use it only for payment processing purposes.
• Game Providers: We share limited information (username, bet amounts, session data) with third-party game developers and providers such as JILI Games to enable gameplay and calculate game outcomes. Game providers do not have access to your identity documents or financial account details.
• Verification Service Providers: We share identity information and verification documents with third-party identity verification services to confirm your age, identity, and address in compliance with Philippine gaming regulations.
• Regulatory Authorities: We may disclose your personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and other Philippine regulatory bodies when required by law or regulation, in response to legal process, or to report suspicious activity.
• Law Enforcement and Legal Authorities: We may disclose your personal information to law enforcement agencies, courts, or government authorities when required by a valid court order, subpoena, or other legal process, or when necessary to prevent fraud, investigate suspected illegal activity, or protect the rights and safety of merrph, our users, or the public.
• Service Providers and Contractors: We may share your personal information with third-party service providers who perform services on our behalf, such as cloud hosting providers, customer support platforms, email service providers, analytics tools, and cybersecurity services. These service providers are contractually bound to protect your data and use it only for the purposes we specify.
• Business Transfers: In the event that merrph is involved in a merger, acquisition, sale of assets, bankruptcy, or other corporate transaction, your personal information may be transferred to the successor entity or acquiring party, subject to the same privacy protections outlined in this Privacy Policy.

Except as described above, we will not share your personal information with third parties without your explicit consent.

6. International Data Transfers

Your personal information is primarily stored and processed within the Republic of the Philippines. However, some of our service providers, such as cloud hosting providers and analytics platforms, may be located outside the Philippines, including in the United States, Singapore, or other countries.

When we transfer your personal data internationally, we ensure that appropriate safeguards are in place to protect your information in accordance with the Data Privacy Act of 2012. These safeguards may include standard contractual clauses approved by the National Privacy Commission, adequacy determinations by Philippine authorities, or other legally recognized transfer mechanisms.

By using the merrph Service and providing your personal information, you consent to the international transfer of your data as described in this Privacy Policy.

7. Data Security

merrph implements industry-standard technical, organizational, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, destruction, or loss. Our security measures include:

• Encryption: All data transmitted between your device and our servers is encrypted using Transport Layer Security (TLS) 1.2 or higher. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
• Access Controls: Access to personal information is restricted to authorized merrph employees and contractors who require access to perform their job functions. All personnel with access to personal data are subject to confidentiality obligations.
• Secure Infrastructure: Our servers and databases are hosted in secure data centers with physical access controls, fire suppression systems, backup power supplies, and 24/7 monitoring.
• Regular Security Audits: We conduct regular security assessments, vulnerability scans, and penetration testing to identify and remediate potential security weaknesses.
• Incident Response: We maintain an incident response plan to detect, respond to, and recover from security breaches or data incidents in a timely manner.

While we take reasonable precautions to protect your personal information, no method of transmission over the internet or method of electronic storage is 100% secure. We cannot guarantee absolute security of your data. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.

8. Data Retention

merrph retains your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary depending on the type of information and the purpose for which it was collected:

• Account Information: Retained for the duration of your account relationship with merrph, plus seven (7) years after account closure to comply with anti-money laundering record-keeping requirements under Philippine law.
• Transaction Records: Retained for seven (7) years from the date of the transaction to comply with financial record-keeping and tax reporting obligations.
• Verification Documents: Retained for seven (7) years after account closure to comply with Know Your Customer (KYC) and regulatory requirements.
• Communication Records: Retained for three (3) years to resolve disputes, provide customer support, and maintain a record of our interactions with you.
• Marketing Preferences: Retained until you withdraw consent or request deletion, except where we have a legitimate interest or legal obligation to retain such information.

After the applicable retention period expires, we will securely delete or anonymize your personal information in accordance with our data retention and destruction policies.

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Access: You have the right to request access to the personal information we hold about you, including information about how we collect, use, and share your data.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete personal information. You can update most of your account information directly through your merrph account settings.
• Right to Erasure: You have the right to request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected, or when you withdraw consent. However, we may be required to retain certain information to comply with legal obligations or for legitimate business purposes.
• Right to Object: You have the right to object to the processing of your personal information for direct marketing purposes. You can opt out of marketing communications at any time by clicking the "unsubscribe" link in our emails or contacting customer support.
• Right to Data Portability: You have the right to receive your personal info rmation in a structured, commonly used, and machine-readable format, and to transmit that information to another service provider where technically feasible.
• Right to Withdraw Consent: Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that merrph has violated your privacy rights or mishandled your personal information.

To exercise any of these rights, please contact our Data Protection Officer at the contact details provided in Section 13 below. We will respond to your request within fifteen (15) business days. In some cases, we may require additional information to verify your identity before processing your request.

10. Cookies and Tracking Technologies

merrph uses cookies, web beacons, and similar tracking technologies to enhance your experience on our platform, analyze usage patterns, and deliver personalized content. Cookies are small text files stored on your device when you visit our website. We use the following types of cookies:

• Essential Cookies: Required for the basic functionality of the Service, including user authentication, security, and session management. These cookies cannot be disabled without affecting the operation of the Service.
• Performance Cookies: Collect anonymous information about how visitors use the Service, such as which pages are visited most often and whether users encounter error messages. This information helps us improve the Service.
• Functionality Cookies: Remember your preferences and settings, such as language preference, username, and game favorites, to provide a more personalized experience.
• Marketing Cookies: Track your browsing activity to deliver targeted advertising and promotional content based on your interests. These cookies may be set by merrph or third-party advertising partners (with your consent).

You can control cookie settings through your browser preferences. Most browsers allow you to refuse cookies, delete existing cookies, or receive notifications when cookies are set. However, disabling certain cookies may limit your ability to use some features of the Service. By continuing to use the merrph Service, you consent to our use of cookies as described in this Privacy Policy.

11. Children's Privacy

merrph is strictly for users 21 years of age and older. We do not knowingly collect personal information from individuals under the age of 21. If you are under 21 years old, you are prohibited from registering an account, accessing the Service, or providing any personal information to merrph.

If we become aware that we have collected personal information from an individual under 21 years of age without proper age verification, we will take immediate steps to delete that information and terminate the account. If you believe that we have collected information from a minor, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

merrph reserves the right to update, modify, or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by posting the updated Privacy Policy on our website and updating the "Last Updated" date at the top of this document.

If we make material changes that significantly affect how we collect, use, or share your personal information, we may also notify you by email or through a prominent notice on the Service. Your continued use of the Service after such notification constitutes your acceptance of the modified Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your personal information.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 on the merrph website
• Response Time: Under 3 hours for email inquiries; under 3 minutes for live chat

For complaints or concerns regarding your privacy rights under the Data Privacy Act of 2012, you may contact the National Privacy Commission of the Philippines:

• National Privacy Commission
• 5th Floor, Philippine International Convention Center (PICC), Vicente Sotto Street, Pasay City, Metro Manila 1307, Philippines
• Email: [email protected]
• Website: https://www.privacy.gov.ph

By using the merrph Service, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. If you do not agree with this Privacy Policy, you must immediately cease all use of the Service.