phtayaa Privacy Policy

phtayaa ("we," "us," or "our") is committed to protecting the privacy and personal data of all players and visitors who use the phtayaa platform. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

This policy describes the types of personal information we collect, the purposes for which we process it, the parties with whom we may share it, the measures we take to keep it secure, and the rights available to you as a data subject under Philippine law. We encourage you to read this policy carefully and to contact us if you have any questions or concerns.

phtayaa serves players across the Philippines, including those based in Metro Manila, Cebu, Davao, Quezon City, Makati, and other regions. Our platform is designed exclusively for Filipino players aged 21 years and above, and our data practices reflect the regulatory environment applicable to online gaming in the Philippines.

phtayaa collects personal data that is necessary for the operation of the platform, the processing of transactions, and compliance with applicable Philippine laws and regulations. The categories of personal data we collect include:

Identity and Contact Information

• Full legal name as it appears on your government-issued identification
• Date of birth (used to verify the 21+ age requirement)
• Residential address in the Philippines (e.g., barangay, city, province)
• Valid Philippine mobile number
• Email address used for account registration and communications
• Government-issued ID number (e.g., PhilSys, SSS, UMID, passport, or driver's license)

Financial Information

• GCash or PayMaya mobile wallet number registered in your name
• Bank account details for BPI, BDO, or Metrobank transfers (where applicable)
• Transaction history, including deposits, withdrawals, and wager records denominated in Philippine Peso (PHP)

Technical and Usage Data

• IP address and approximate geolocation data
• Device type, operating system, and browser information
• Session duration, pages visited, and features used on the phtayaa platform
• Login timestamps and access logs
• Cookies and similar tracking technologies (see Section 8)

Communications Data

• Records of your communications with phtayaa's customer support team
• Feedback, complaints, and dispute records
• Marketing preferences and opt-in/opt-out records

phtayaa collects personal data through the following channels:

• Account Registration: When you create a phtayaa account, you provide identity and contact information directly through the registration form.
• KYC Verification: When you submit identity documents for Know Your Customer (KYC) verification, we collect the information contained in those documents.
• Financial Transactions: When you make a deposit or withdrawal via GCash, PayMaya, BPI, BDO, or Metrobank, we receive transaction data from the relevant payment provider.
• Platform Usage: We automatically collect technical and usage data when you access and interact with the phtayaa platform, including through cookies and server logs.
• Customer Support: When you contact our support team by email or live chat, we collect the information you provide in those communications.
• Promotions and Surveys: If you participate in phtayaa promotions, competitions, or surveys, we collect the information you submit in connection with those activities.

phtayaa uses the personal data we collect for the following purposes:

phtayaa will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise permitted by applicable Philippine law.

Under the Philippine Data Privacy Act of 2012, phtayaa processes your personal data on the following legal bases:

• Contractual Necessity: Processing is necessary to perform our obligations under the Terms and Conditions you agreed to when registering your phtayaa account, including account management, transaction processing, and customer support.
• Legal Obligation: Processing is required for phtayaa to comply with applicable Philippine laws and regulations, including anti-money laundering (AML) obligations, KYC requirements, and reporting obligations to relevant regulatory authorities.
• Legitimate Interests: Processing is necessary for phtayaa's legitimate interests in operating a secure and compliant gaming platform, preventing fraud, and improving our services, provided those interests are not overridden by your rights and interests.
• Consent: For certain processing activities, such as sending you marketing communications or using non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

phtayaa does not sell, rent, or trade your personal data to third parties for commercial purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

Payment Service Providers

We share financial data with GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors to facilitate deposits and withdrawals. These providers process your data under their own privacy policies and are bound by applicable Philippine financial regulations.

Identity Verification Providers

We may engage third-party KYC and identity verification service providers to assist with the verification of your identity documents. These providers are contractually bound to process your data only for verification purposes and in accordance with applicable data protection laws.

Regulatory and Law Enforcement Authorities

phtayaa may disclose your personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities where required by law, court order, or regulatory directive.

Technology and Service Providers

We engage trusted third-party technology providers for platform hosting, data analytics, customer support tools, and cybersecurity services. These providers act as data processors on our behalf and are contractually prohibited from using your data for their own purposes.

phtayaa retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with Philippine AML and gaming regulatory requirements.
• Transaction and financial records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and related regulations.
• Customer support communications: Retained for three (3) years from the date of the communication, or longer if the communication relates to an unresolved dispute or legal matter.
• Technical and usage logs: Retained for up to twelve (12) months, after which they are aggregated or anonymized for analytical purposes.
• Marketing consent records: Retained for the duration of your consent and for three (3) years following withdrawal of consent, as evidence of compliance.

Upon expiry of the applicable retention period, phtayaa will securely delete or anonymize your personal data in accordance with our data disposal procedures.

phtayaa uses cookies and similar tracking technologies to enhance your experience on the platform, analyze usage patterns, and support security functions. A cookie is a small text file placed on your device when you visit the phtayaa website.

Types of Cookies We Use

• Strictly Necessary Cookies: These cookies are essential for the phtayaa platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Performance and Analytics Cookies: These cookies collect anonymized information about how players use the phtayaa platform, such as which pages are visited most frequently. This data helps us improve the platform experience.
• Functional Cookies: These cookies remember your preferences, such as your preferred language or display settings, to provide a more personalized experience.
• Marketing Cookies: With your consent, we may use cookies to deliver relevant promotional content about phtayaa's games and offers. You may opt out of marketing cookies at any time.

Managing Your Cookie Preferences

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phtayaa platform. For strictly necessary cookies, disabling them may prevent you from accessing your account or using core platform features.

phtayaa implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the phtayaa platform
• Encryption of sensitive data at rest, including financial information and identity documents
• Multi-factor authentication options for player accounts
• Regular security audits and vulnerability assessments of our platform infrastructure
• Role-based access controls limiting employee access to personal data on a need-to-know basis
• Incident response procedures for detecting, reporting, and managing personal data breaches
• Staff training on data protection obligations and security best practices

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phtayaa will notify the National Privacy Commission and affected data subjects in accordance with the requirements of the Philippine Data Privacy Act and NPC Circular No. 16-03.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtayaa:

• Right to be Informed: You have the right to be informed about how your personal data is collected, used, and processed. This Privacy Policy fulfils that obligation.
• Right of Access: You have the right to request a copy of the personal data phtayaa holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of the above rights, please contact phtayaa's Data Protection Officer using the contact details provided in Section 14 of this policy. We will respond to all verified requests within fifteen (15) business days, in accordance with NPC guidelines.

The phtayaa platform is strictly intended for individuals aged 21 years and above. phtayaa does not knowingly collect personal data from individuals under the age of 21. The minimum age for casino-style gambling in the Philippines is 21 years, and phtayaa enforces this requirement through mandatory age verification during the registration process.

If phtayaa becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you are a parent or guardian and believe that your child has registered on the phtayaa platform, please contact us immediately at [email protected] so that we can take appropriate action.

The phtayaa platform may contain references to third-party payment providers and regulatory bodies for informational purposes. phtayaa is not responsible for the privacy practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you use in connection with your phtayaa account, including GCash, PayMaya, BPI, BDO, and Metrobank.

The inclusion of any reference to a third-party service on the phtayaa platform does not constitute an endorsement of that service's privacy practices or data handling procedures.

phtayaa reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. The date of the most recent revision is displayed at the top of this page.

Where changes to this policy are material, phtayaa will notify registered players via email or through an on-platform notification prior to the changes taking effect. Your continued use of the phtayaa platform following the publication of a revised Privacy Policy constitutes your acceptance of the updated terms.

We encourage you to review this Privacy Policy periodically to stay informed about how phtayaa protects your personal data. If you do not agree with any changes to this policy, you may request account closure in accordance with the Terms and Conditions.

phtayaa has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data or this policy, please contact us using the details below.

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have not been adequately addressed by phtayaa. Information about the NPC and its complaint procedures is available through official Philippine government channels.