Privacy Policy

1. Overview

1.1 phtayta ("we," "us," "our") operates as an online casino and sports betting platform serving Filipino players. As part of delivering our services, we necessarily collect and process certain personal data about our users ("you," "your," "the Player").

1.2 This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data. It applies to all interactions you have with phtayta, including account registration, deposits, gameplay, customer support, and marketing communications.

1.3 By registering a phtayta account or using any part of our platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

1.4 This Privacy Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

2.1 phtayta collects the following categories of personal data:

2.1 Identity & Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth and age verification information;
• Residential address (barangay, city, province, ZIP code);
• Email address and mobile phone number;
• Government-issued ID type and number (e.g., PhilSys ID, passport, driver's license, SSS, UMID, PRC, or voter's ID).

2.2 Financial Data

• Payment method details (e.g., GCash mobile number, PayMaya account reference, bank account name and last four digits for BPI, BDO, or Metrobank);
• Transaction history including deposits, withdrawals, and bonus credits;
• Billing address associated with card payments (Visa, Mastercard).

2.3 Gaming & Behavioural Data

• Game history, wager amounts, win/loss records, and session durations;
• Bonus usage and promotional participation records;
• Responsible gaming settings, including deposit limits and self-exclusion requests;
• Customer support interactions and complaint records.

2.4 Technical & Device Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Login timestamps and session activity logs;
• Cookies and similar tracking technologies (see Section 9).

3. How We Collect Your Data

3.1 phtayta collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making a deposit or withdrawal, contacting support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the phtayta platform, including via cookies, log files, and analytics tools;
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from risk management partners; payment confirmation data from payment processors such as GCash, PayMaya, and banking partners.

3.2 phtayta does not purchase personal data from data brokers or third-party marketing lists.

4. Purpose of Processing

4.1 phtayta processes your personal data for the following purposes:

5. Legal Basis for Processing

5.1 phtayta processes your personal data on the following legal bases under the Data Privacy Act of 2012 (RA 10173):

• Consent: Where you have given explicit consent, such as for marketing communications or optional data collection;
• Contractual necessity: Where processing is necessary to perform our obligations under the phtayta Terms & Conditions, including account management and payment processing;
• Legal obligation: Where processing is required to comply with applicable Philippine laws, including anti-money laundering regulations and gaming licensing requirements;
• Legitimate interests: Where processing is necessary for phtayta's legitimate business interests, such as fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights and freedoms.

6. Data Sharing & Disclosure

6.1 phtayta does not sell your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Coins.ph, 7-Eleven, Visa, and Mastercard — for the purpose of processing your financial transactions;
• KYC and identity verification providers: Third-party services used to verify your identity and age in compliance with regulatory requirements;
• Fraud prevention and risk management partners: Services used to detect and prevent fraudulent activity on the platform;
• Game software providers: Licensed game developers whose software powers the games available on phtayta — limited to data necessary for game delivery and integrity;
• Regulatory authorities: Philippine government agencies and gaming regulators, where disclosure is required by law or regulatory mandate;
• Legal and professional advisors: Lawyers, auditors, and compliance consultants engaged by phtayta, subject to professional confidentiality obligations.

6.2 All third parties with whom phtayta shares personal data are required to handle that data in accordance with applicable data protection laws and are prohibited from using it for any purpose other than the one for which it was shared.

7. Data Retention

7.1 phtayta retains your personal data for as long as your account is active and for a period thereafter as required by applicable law or legitimate business necessity.

7.2 Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, in accordance with anti-money laundering record-keeping requirements;
• Transaction and financial records are retained for a minimum of five (5) years from the date of the transaction;
• Customer support records are retained for three (3) years from the date of the interaction;
• Marketing consent records are retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes.

7.3 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phtayta's data disposal procedures.

8. Data Security

8.1 phtayta implements appropriate technical and organizational measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and phtayta's servers;
• Encryption of sensitive data at rest, including financial information and government ID details;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security audits and vulnerability assessments of the phtayta platform;
• Two-factor authentication options for player accounts;
• Continuous monitoring of platform activity for suspicious behaviour.

8.2 While phtayta takes all reasonable steps to protect your data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, phtayta will notify you and the relevant regulatory authority in accordance with applicable law.

8.3 You are responsible for maintaining the security of your phtayta Login credentials. Do not share your password with anyone. If you suspect unauthorized access to your account, contact phtayta support immediately.

9. Cookies & Tracking Technologies

9.1 phtayta uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. A cookie is a small text file stored on your device when you visit a website.

9.2 phtayta uses the following types of cookies:

• Essential cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality;
• Analytics cookies: Used to understand how players interact with the phtayta platform, including pages visited, time spent, and features used. This data is aggregated and anonymized;
• Preference cookies: Used to remember your settings and preferences, such as language and display options;
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our campaigns, where you have provided consent.

9.3 You may manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phtayta platform.

10. Your Data Rights

10.1 Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by phtayta:

• Right to be informed: You have the right to know what personal data phtayta collects about you and how it is used — which is the purpose of this Privacy Policy;
• Right of access: You may request a copy of the personal data phtayta holds about you at any time;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data in your phtayta account;
• Right to erasure: You may request deletion of your personal data, subject to phtayta's legal retention obligations and legitimate business interests;
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

10.2 To exercise any of the above rights, please contact phtayta's Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days.

10.3 phtayta may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorized parties.

11. Minors & Age Policy

11.1 Age verification is a mandatory part of the phtayta registration and KYC process. All players must confirm that they are at least 21 years of age and must provide valid government-issued identification to verify this.

11.2 If you believe a minor has registered on phtayta, please contact us immediately at [email protected] so that we can take appropriate action.

12. International Data Transfers

12.1 phtayta primarily processes and stores personal data within the Philippines. In certain circumstances, data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game software developers.

12.2 Where personal data is transferred outside the Philippines, phtayta ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses consistent with the requirements of RA 10173 and its Implementing Rules and Regulations.

12.3 phtayta will not transfer your personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent or without implementing appropriate protective measures.

13. Third-Party Services & Links

13.1 The phtayta platform may integrate with third-party services such as payment gateways, identity verification providers, and game software platforms. These third parties operate under their own privacy policies, and phtayta is not responsible for their data practices.

13.2 phtayta does not include links to external websites within the platform. Any third-party integrations are purely functional (e.g., payment processing) and do not involve the transfer of personal data beyond what is strictly necessary for the service.

13.3 phtayta requires all third-party service providers to maintain appropriate data security standards and to process personal data only in accordance with phtayta's instructions and applicable law.

14. Amendments to This Policy

14.1 phtayta reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or platform features. The "Last updated" date at the top of this page will be revised accordingly.

14.2 Where changes are material, phtayta will notify registered players via email or an in-platform notification. Your continued use of phtayta following any update constitutes acceptance of the revised Privacy Policy.

14.3 If you do not agree with any amendment to this Privacy Policy, you may request account closure by contacting our support team.

15. Contact & Data Protection Officer

15.1 phtayta has designated a Data Protection Officer (DPO) responsible for overseeing compliance with RA 10173 and this Privacy Policy. If you have any questions, concerns, or requests relating to your personal data, please contact us:

• Email: [email protected]
• Live Chat: Available 24/7 on the phtayta platform
• Response Time: Within 4 hours for email; under 2 minutes for live chat

15.2 If you are not satisfied with phtayta's response to a data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines.