me903 Casino — Privacy Policy

1.1 me903 is the data controller responsible for the personal information collected through the me903 Platform. As data controller, me903 determines the purposes and means of processing your personal data in accordance with the Data Privacy Act of 2012 and PAGCOR's applicable data protection requirements.

1.2 By registering an account on me903.vip, using any service on the Platform, or otherwise providing personal information to me903, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, processing, and use of your personal data as described herein.

1.3 This Policy applies to all personal data collected through the me903 website, mobile browser interface, customer support communications, and any other touchpoint through which you interact with me903.

1.4 me903 is committed to the principles of the Data Privacy Act of 2012: transparency, legitimate purpose, and proportionality. We collect only the data we need, use it only for the purposes disclosed, and take appropriate technical and organizational measures to protect it.

2.1 me903 collects the following categories of personal data in connection with your use of the Platform:

2.2 me903 does not intentionally collect special categories of personal data (sensitive personal information) such as biometric data, health information, or political opinions, except where strictly required for KYC verification or responsible gaming compliance purposes, and only with your explicit consent.

3.1 me903 collects personal data through the following means:

• Direct Collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, submitting support requests, or responding to promotions;
• Automated Collection: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you visit or interact with the Platform;
• Third-Party Sources: Identity verification data from KYC service providers; payment verification data from GCash, PayMaya, banks, and card networks; fraud prevention data from anti-money laundering (AML) service providers; and data required by PAGCOR for regulatory compliance purposes.

3.2 Where me903 collects personal data from third-party sources, we ensure that such collection is lawful and that appropriate data sharing agreements are in place with those third parties.

4.1 me903 processes your personal data only for the following specific, legitimate purposes:

• Account Management: Creating, maintaining, and administering your me903 player account, including authentication and access control;
• KYC & Age Verification: Verifying that you are at least 21 years of age and that your identity matches your registration details, as required by PAGCOR regulations;
• Payment Processing: Processing deposits to and withdrawals from your me903 account via GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard;
• AML Compliance: Monitoring and reporting transactions as required under the Anti-Money Laundering Act (AMLA) of the Philippines and PAGCOR's AML guidelines;
• Responsible Gaming: Monitoring gaming patterns to identify and assist players who may be exhibiting signs of problem gambling, consistent with our Responsible Gaming obligations;
• Customer Support: Responding to your inquiries, resolving disputes, and providing technical assistance;
• Platform Improvement: Analyzing usage data to improve the me903 platform, game lobby, performance, and user experience;
• Marketing Communications: Sending you promotional offers, bonus notifications, and relevant updates, where you have consented to receive such communications;
• Fraud Prevention & Security: Detecting, preventing, and investigating fraud, unauthorized access, and other security incidents;
• Legal Compliance: Fulfilling our obligations under applicable Philippine law, PAGCOR regulations, and NPC guidelines.

5.1 Under the Data Privacy Act of 2012, me903 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and me903 (i.e., providing the gaming services you have registered for), including account management, payment processing, and game delivery;
• Legal Obligation: Processing required to comply with applicable law, including KYC verification under PAGCOR regulations, AML reporting under the Anti-Money Laundering Act, and data retention requirements;
• Legitimate Interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and platform improvement, where such interests do not override your fundamental rights;
• Consent: Processing for marketing communications and any non-essential cookies, where we have obtained your prior, informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

6.1 me903 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share personal data only in the following limited circumstances:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard receive financial data necessary to process your deposits and withdrawals. These parties are subject to their own privacy policies and applicable Philippine financial regulations;
• KYC/Identity Verification Providers: Accredited identity verification service providers receive your government ID and identity data for KYC processing under PAGCOR requirements;
• AML Service Providers: Transaction monitoring and AML compliance service providers process certain gaming and financial data to fulfill our Anti-Money Laundering Act obligations;
• Game Providers: Game software providers (e.g., Pragmatic Play, Evolution, PG Soft) may receive anonymized session data for game auditing and RTP certification purposes;
• Regulatory Authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine regulatory and law enforcement authorities may receive personal data as required by law or regulatory directive;
• Professional Advisors: Legal, accounting, and auditing professionals engaged by me903 may access personal data under strict confidentiality obligations.

6.2 Where personal data is shared with third-party processors, me903 enters into appropriate data processing agreements to ensure the data is handled in compliance with the Data Privacy Act of 2012.

7.1 me903 treats financial data — including your GCash number, PayMaya number, and bank account or card details — with the highest level of protection. Payment data is transmitted exclusively over 256-bit SSL-encrypted connections.

7.2 me903 does not store full card numbers (PAN) or CVV codes on its servers. Card payment processing is handled by PCI DSS-compliant payment processors. me903 stores only masked card references (e.g., last four digits) for display in your transaction history.

7.3 GCash and PayMaya numbers associated with your account are stored securely and used solely for the purpose of processing deposits and withdrawals. They are not used for any other purpose without your explicit consent.

7.4 All financial transactions on me903 are logged for AML compliance purposes and retained for the periods required by Philippine law. These records may be provided to the Anti-Money Laundering Council (AMLC) or other competent authorities upon lawful request.

8.1 me903 uses cookies and similar tracking technologies (web beacons, session tokens, local storage) to operate the Platform, enhance your experience, and analyze usage. The types of cookies used include:

• Essential Cookies: Required for the Platform to function. These include session authentication cookies and security tokens. Essential cookies cannot be disabled without impairing Platform functionality;
• Functional Cookies: Remember your preferences (e.g., language settings, remembered username) to improve your experience;
• Analytics Cookies: Collect anonymous usage data to help us understand how players use the Platform and how to improve it. Data collected is aggregated and cannot be used to identify individual players;
• Marketing Cookies: Used only with your explicit consent to deliver personalized promotions relevant to your gaming activity on me903.

8.2 Non-essential cookies (functional, analytics, marketing) require your consent and can be managed through your browser settings. Withdrawing consent for non-essential cookies will not affect your ability to use the core me903 Platform.

9.1 me903 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, destruction, or accidental loss. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• AES-256 encryption for sensitive data stored at rest;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Two-factor authentication for administrative system access;
• Real-time intrusion detection and monitoring systems;
• Regular security audits and penetration testing by accredited third-party security firms;
• Formal incident response procedures compliant with NPC breach notification requirements.

9.2 In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, me903 will notify affected players and the National Privacy Commission within the timeframes required by the Data Privacy Act of 2012 and NPC regulations.

9.3 While me903 takes all reasonable precautions to secure your personal data, no internet transmission is 100% secure. You also bear responsibility for maintaining the security of your me903 account credentials.

10.1 me903 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law:

• Account Data: Retained for the duration of your account's active status and for five (5) years after account closure, as required by PAGCOR regulations and Philippine AML law;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, in compliance with the Anti-Money Laundering Act;
• KYC Documents: Retained for five (5) years after account closure or as required by PAGCOR and NPC guidelines;
• Support Communications: Retained for two (2) years from the date of the last interaction, unless longer retention is required for dispute resolution;
• Technical/Log Data: Retained for a maximum of twelve (12) months for security and fraud prevention purposes.

10.2 Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with NPC guidelines.

11.1 Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by me903:

11.2 To exercise any of these rights, contact me903's Data Protection Officer via email at [email protected] with the subject line "Data Privacy Rights Request." me903 will acknowledge your request within five (5) business days and respond substantively within thirty (30) days, in accordance with NPC guidelines.

11.3 If you are not satisfied with me903's response to your data privacy request or complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

12.1 me903 strictly prohibits use of the Platform by persons under 21 years of age. me903 does not knowingly collect personal data from minors. If we become aware that personal data has been collected from a person below the minimum age, we will immediately delete such data and close the associated account.

12.2 If you believe that a minor has accessed the me903 Platform or that me903 has inadvertently collected personal data belonging to a minor, please contact us immediately at [email protected]. We will investigate and take appropriate action promptly.

12.3 Parents and guardians are encouraged to use parental control software to prevent underage individuals from accessing online gaming platforms.

13.1 The me903 Platform may contain links to third-party websites, including payment provider portals (GCash, PayMaya) and regulatory body websites. me903 is not responsible for the privacy practices of third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

13.2 Third-party payment providers (GCash, PayMaya, BPI, BDO, Metrobank) process your financial data under their own privacy policies and applicable Bangko Sentral ng Pilipinas (BSP) regulations. me903 is not responsible for their data handling practices.

14.1 me903 reserves the right to update or revise this Privacy Policy at any time. When we make material changes, we will notify registered players by email (to the address associated with your account) or by prominent notice on the Platform prior to the changes taking effect.

14.2 The effective date of the most current version of this Policy is shown at the top of this page. Your continued use of the me903 Platform following notification of changes constitutes acceptance of the revised Policy.

14.3 We encourage you to review this Policy periodically to stay informed about how me903 protects your personal data.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by me903, please contact our Data Protection Officer: