MPL S16 Privacy Policy

1. Who We Are

This Privacy Policy is issued by mpl s16, the operator of the online gaming platform accessible at mpl-s16.com and its associated mobile applications (collectively, the "Platform"). mpl s16 acts as the data controller in respect of all personal data collected through the Platform, meaning we determine the purposes and means by which your personal data is processed.

mpl s16 operates in the Philippines and is subject to the requirements of the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). Where applicable, mpl s16 also complies with PAGCOR's data handling requirements for licensed online gaming operators.

References to "mpl s16," "we," "us," or "our" in this Privacy Policy refer to the Platform operator. References to "you," "your," or "player" refer to any individual who accesses, registers for, or uses the mpl s16 Platform.

2. Personal Data We Collect

mpl s16 collects personal data that is necessary, adequate, and not excessive in relation to the purposes for which it is collected. The categories of personal data we collect include the following:

2.1 Registration & Identity Data

• Full legal name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Residential address in the Philippines (city, province, postal code)
• Email address and mobile number
• Username and encrypted password

2.2 Identity Verification (KYC) Data

• Copies of government-issued photo identification (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys national ID)
• Proof of address documents (e.g., utility bills, bank statements dated within three months)
• Proof of payment method ownership where required
• Selfie or liveness verification images where required for enhanced KYC

2.3 Financial & Transaction Data

• Deposit and withdrawal transaction records, including amounts in Philippine Peso (PHP) and timestamps
• Payment method details (e.g., GCash account reference, PayMaya reference, BPI/BDO/Metrobank account details — stored only to the extent necessary for transaction processing and AML compliance)
• Account balance history and wagering records
• Bonus and promotion redemption history

2.4 Technical & Usage Data

• IP address and approximate geolocation derived from IP
• Device type, operating system, and browser information
• Session logs, login timestamps, and session duration
• Game play history, including games accessed, wagers placed, and outcomes
• Platform navigation and interaction data collected via cookies and analytics tools

2.5 Communications Data

• Records of communications between you and mpl s16 support, including live chat transcripts, email correspondence, and support ticket records
• Responses to surveys or feedback forms where you choose to participate

3. How We Collect Your Data

mpl s16 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automatically — through cookies, web beacons, server logs, and similar tracking technologies when you access and interact with the Platform.
• From third-party service providers — including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification services, and fraud detection providers, where such providers share data with us in connection with your use of the Platform.
• From regulatory authorities — where PAGCOR or other competent authorities share information relevant to our compliance obligations.

4. How We Use Your Personal Data

mpl s16 uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Registration data, identity data
Age and identity verification (KYC)	KYC documents, registration data
Processing deposits and withdrawals	Financial data, identity data
Providing and improving gaming services	Usage data, game history
Anti-money laundering (AML) compliance	Financial data, identity data, transaction records
Fraud detection and prevention	Technical data, financial data, usage data
Responsible gaming monitoring	Game history, financial data, usage data
Customer support	Communications data, registration data
Marketing communications (opt-in only)	Registration data, usage data
Regulatory reporting to PAGCOR	Identity data, financial data, transaction records

5. Legal Basis for Processing

mpl s16 processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity — processing is necessary to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management, payment processing, and game provision.
• Legal obligation — processing is required to comply with applicable laws and regulations, including PAGCOR licensing requirements, Anti-Money Laundering Act (AMLA) obligations, and the Data Privacy Act itself.
• Legitimate interests — processing is necessary for mpl s16's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.
• Consent — for marketing communications and certain non-essential cookies, processing is based on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Personal Data

6.1 Service Providers

mpl s16 shares personal data with carefully selected third-party service providers who assist us in operating the Platform. These include payment processors, identity verification providers, cloud hosting providers, customer support platform providers, and analytics service providers. All service providers are contractually required to process personal data only on mpl s16's instructions and to maintain appropriate security measures.

6.2 Regulatory & Law Enforcement Authorities

mpl s16 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory direction. Such disclosures are made only to the extent required and in accordance with applicable legal procedures.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of mpl s16's business, personal data held by mpl s16 may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to this Privacy Policy that result from it.

6.4 No Sale of Personal Data

mpl s16 does not sell, rent, lease, or otherwise transfer your personal data to third parties for their own marketing or commercial purposes. Any sharing of data is limited to what is described in this Privacy Policy.

7. Cookies & Tracking Technologies

7.1 What Are Cookies

Cookies are small text files placed on your device when you visit the mpl s16 Platform. They allow the Platform to recognize your device, maintain your session, remember your preferences, and collect usage analytics. mpl s16 also uses similar technologies such as web beacons and local storage for comparable purposes.

7.2 Types of Cookies We Use

• Strictly necessary cookies — required for the Platform to function, including session authentication and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and display options to improve your experience on mpl s16.
• Analytics cookies — collect aggregated, anonymized data about how players use the Platform, helping us identify areas for improvement. Used only with your consent.
• Marketing cookies — used to deliver relevant promotional content within the mpl s16 Platform to players who have opted in to marketing communications. Used only with your consent.

7.3 Managing Cookies

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the mpl s16 Platform, including your ability to maintain a logged-in session. Instructions for managing cookies are available in your browser's help documentation.

8. Data Retention

mpl s16 retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account and KYC data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA requirements.
• Transaction and financial records — retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act.
• Support communications — retained for three (3) years from the date of the communication, or longer if related to an ongoing dispute or investigation.
• Technical and usage data — retained for up to twelve (12) months from collection, after which it is aggregated or anonymized.
• Marketing consent records — retained for the duration of your account and for two (2) years following account closure or withdrawal of consent.

When personal data is no longer required, mpl s16 will securely delete or anonymize it in accordance with our data disposal procedures.

9. Data Security

mpl s16 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the mpl s16 Platform
• Encryption of sensitive data at rest, including KYC documents and financial records
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Regular security assessments and penetration testing of Platform infrastructure
• Multi-factor authentication requirements for administrative access to data systems
• Incident response procedures for detecting, reporting, and managing personal data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, mpl s16 will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected players without undue delay where required by law.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by mpl s16:

• Right to be informed — you have the right to be informed of how your personal data is collected, used, and processed, which is the purpose of this Privacy Policy.
• Right of access — you may request a copy of the personal data mpl s16 holds about you, along with information about how it is being processed.
• Right to rectification — you may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure — you may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object — you may object to the processing of your personal data where processing is based on legitimate interests, including profiling for direct marketing purposes.
• Right to data portability — you may request that personal data you have provided to mpl s16 be provided to you in a structured, commonly used, and machine-readable format.
• Right to withdraw consent — where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe mpl s16 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, please contact the mpl s16 Data Protection Officer using the contact details provided in Section 14 of this Privacy Policy. mpl s16 will respond to all valid requests within thirty (30) days of receipt.

11. Children's Privacy

The mpl s16 Platform is strictly intended for individuals aged 21 years and older. mpl s16 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the mpl s16 Platform, please contact our support team immediately so that we can investigate and take appropriate action.

12. Third-Party Links

The mpl s16 Platform may contain references to third-party services such as payment providers (GCash, PayMaya, BPI, BDO, Metrobank). When you interact with these third-party services, you are subject to their own privacy policies and data handling practices. mpl s16 is not responsible for the privacy practices of third-party service providers and encourages you to review their privacy policies before providing any personal data to them directly.

13. Changes to This Privacy Policy

mpl s16 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Where changes are material, mpl s16 will provide notice to registered players via email or a prominent notice on the Platform prior to the changes taking effect. The "Last Updated" date at the top of this Privacy Policy will be revised accordingly. Your continued use of the mpl s16 Platform following the effective date of any amendment constitutes your acknowledgment of the revised Privacy Policy.

14. Contact Us & Data Protection Officer

mpl s16 has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact us using the details below. All communications must be in writing and will be treated as confidential.

Data Protection Officer — mpl s16

Email: [email protected]
General Support: [email protected]

mpl s16 aims to resolve all privacy-related inquiries within thirty (30) days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through its official channels.