MagicPH Privacy Policy – How We Protect Your Data

MagicPH retains personal data for as long as it is necessary for the purposes described in this policy, subject to the following specific retention periods:

When data is no longer required and no legal obligation to retain it exists, MagicPH securely deletes or anonymises the data. Anonymised, aggregated data — from which no individual can be identified — may be retained indefinitely for platform analytics and improvement purposes.

MagicPH implements a comprehensive set of technical and organisational security measures to protect your personal data from unauthorised access, accidental loss, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and MagicPH servers is encrypted using TLS (Transport Layer Security) protocols. This applies to login, deposits, withdrawals, and all account activity.
• Encryption at rest: Sensitive personal data and financial information stored in MagicPH's databases are encrypted at rest using industry-standard encryption algorithms.
• Two-factor authentication: MagicPH uses OTP-based two-factor authentication for login and for high-value withdrawal requests to protect against unauthorised account access.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. MagicPH staff are subject to confidentiality obligations and receive regular data protection training.
• Intrusion detection: MagicPH operates real-time monitoring systems designed to detect and respond to suspicious access attempts and anomalous account behaviour.
• Regular security assessments: MagicPH conducts regular vulnerability assessments and security reviews of its platform infrastructure and data handling practices.
• Third-party security standards: Payment processors and other critical third parties are required to meet equivalent security standards and are subject to periodic review.

Despite these measures, no digital system can guarantee absolute security. In the event of a personal data breach that is likely to result in risk to your rights and freedoms, MagicPH will notify you and the National Privacy Commission (NPC) as required by law, within 72 hours of becoming aware of the breach where feasible.

MagicPH uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file stored on your device when you visit a website. We use the following types of cookies on magicph.best:

• Essential cookies: Required for the platform to function. These include session authentication cookies that keep you logged in while you navigate MagicPH. You cannot opt out of essential cookies without stopping your use of the platform.
• Functional cookies: Remember your preferences such as language settings and display options to provide a more personalised experience on MagicPH.
• Analytics cookies: Collect anonymised data about how pages are used — which sections are visited most, typical navigation paths — to help MagicPH improve the platform. This data is aggregated and cannot be used to identify individual players.
• Security cookies: Help detect and prevent fraudulent login attempts and protect your MagicPH account from unauthorised access.

MagicPH does not use advertising cookies or allow third-party advertising networks to place cookies on magicph.best. You can manage cookie preferences through your browser settings. Note that disabling functional or analytics cookies may affect your experience on the platform, but disabling essential cookies will prevent you from logging in.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by MagicPH. To exercise any of these rights, contact our Data Protection Officer at support@magicph.best. MagicPH will respond to all privacy rights requests within 15 business days of receipt.

• Right to be informed: You have the right to know how MagicPH collects, uses, and shares your personal data. This Privacy Policy fulfils that obligation.
• Right of access: You can request a copy of the personal data MagicPH holds about you, including your account details, transaction history, and gameplay records.
• Right to rectification: If any personal data MagicPH holds about you is inaccurate or incomplete, you can request that we correct it. Some corrections may require identity verification.
• Right to erasure: You can request deletion of your personal data where it is no longer necessary for its original purpose, subject to MagicPH's legal retention obligations. Data subject to mandatory retention periods under Philippine law cannot be deleted before those periods expire.
• Right to object: You can object to MagicPH processing your personal data for marketing purposes at any time. You can also object to processing based on legitimate interests, though this may affect some platform features.
• Right to data portability: You can request a machine-readable copy of personal data you provided to MagicPH for transfer to another service provider, where technically feasible.
• Right to file a complaint: If you believe MagicPH has handled your personal data in a manner that violates the Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

MagicPH is strictly prohibited to persons under 21 years of age. We do not knowingly collect personal data from minors. Age verification is a mandatory step in the MagicPH registration and withdrawal process, and the platform requires players to confirm that they are at least 21 years old when registering.

If MagicPH discovers or is notified that personal data has been collected from a minor — whether through misrepresentation of age during registration or any other means — the account will be immediately suspended, all transactions will be reviewed, and the personal data will be deleted as far as legally permissible. Any funds associated with an account registered by a minor will not be paid out and will be returned to the payment source or retained as required by law.

Parents and guardians who believe a minor may have registered on MagicPH should contact support@magicph.best immediately with relevant information so we can take prompt action.

MagicPH may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When we make material changes, we will notify registered players via email or in-platform notification at least seven days before the updated policy takes effect, except where immediate changes are required by law.

The "Last Updated" date at the top of this page is revised whenever the policy changes. We recommend reviewing this page periodically. The current version of this Privacy Policy is always available at magicph.best/privacy-policy. Your continued use of MagicPH after the effective date of any update constitutes acceptance of the revised policy.

Minor clarifications and non-material updates that do not change the substance of how we handle your data may be made without formal notification, though the "Last Updated" date will always reflect the most recent revision.

MagicPH has appointed a Data Protection Officer (DPO) who is responsible for overseeing our compliance with the Philippine Data Privacy Act and related regulations. For any privacy-related queries, requests to exercise your data rights, or concerns about how MagicPH handles your personal data, contact our DPO:

• Email: support@magicph.best (subject line: "Privacy / DPO")
• Response time: MagicPH acknowledges all privacy queries within 48 hours and aims to resolve them within 15 business days.

If you are not satisfied with MagicPH's response to a privacy concern, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the government body responsible for enforcing the Data Privacy Act. The NPC can be reached through its official channels as a Philippine government body.