Privacy Policy

1 Overview & Scope

This Privacy Policy applies to all personal data collected, processed, and stored by phtayaph in connection with your use of the phtayaph website, mobile platform, games, promotions, payment services, and customer support channels.

By registering an account or using any phtayaph service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must discontinue use of the phtayaph platform.

2 Data We Collect

phtayaph collects personal data through various means, including account registration, identity verification, gameplay activity, payment transactions, and communications with our support team. The categories of data we collect include:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., Philippine passport, SSS, UMID, or driver's licence).
• Contact Data: Email address, mobile number, and residential address (including city — Manila, Cebu, Davao, Quezon City, Makati, or elsewhere in the Philippines).
• Financial Data: Payment method details (GCash number, PayMaya account, BPI/BDO/Metrobank account details, Visa/Mastercard card details), deposit and withdrawal history, and transaction records.
• Account Data: Username, account preferences, game history, betting records, bonus usage, and loyalty points balance.
• Technical Data: IP address, device type, browser type and version, operating system, session duration, and pages visited on the phtayaph platform.
• Communications Data: Records of your interactions with phtayaph customer support, including live chat transcripts, emails, and support ticket history.

phtayaph does not knowingly collect sensitive personal information beyond what is required for identity verification and regulatory compliance purposes.

3 How We Use Your Data

phtayaph uses the personal data we collect for the following purposes:

• To create, verify, and manage your phtayaph player account.
• To process deposits, withdrawals, and other financial transactions in Philippine Peso (PHP).
• To comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under Philippine law.
• To personalise your gaming experience, including game recommendations and promotional offers tailored to your activity.
• To send you transactional communications, such as deposit confirmations, withdrawal notifications, and account security alerts.
• To send you marketing communications about phtayaph promotions, new games, and special offers — where you have provided consent or where permitted by law.
• To detect, investigate, and prevent fraudulent activity, cheating, and other prohibited conduct on the platform.
• To comply with regulatory requirements imposed by PAGCOR and other Philippine authorities.
• To improve the phtayaph platform through analysis of usage patterns and player feedback.

phtayaph will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent.

4 Legal Basis for Processing

phtayaph processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfil our obligations under the phtayaph Terms & Conditions, including account management and payment processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate Interests: Processing necessary for phtayaph's legitimate business interests, such as fraud prevention, platform security, and service improvement — provided these interests are not overridden by your rights.
• Consent: Processing based on your freely given, specific, and informed consent — particularly for marketing communications. You may withdraw consent at any time by contacting our support team.

5 Data Sharing & Disclosure

phtayaph does not sell your personal data. We may share your data with the following categories of recipients only where necessary and lawful:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard — to process your financial transactions securely.
• Identity Verification Providers: Third-party KYC service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Game Software Providers: Licensed game developers whose software powers phtayaph's slot, live casino, and other game offerings — limited to data necessary for game operation.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies — where required by law or regulatory directive.
• IT and Security Service Providers: Cloud hosting, cybersecurity, and fraud detection vendors engaged to maintain the security and availability of the phtayaph platform.

All third parties with whom phtayaph shares personal data are required to handle that data in accordance with applicable Philippine data protection law and are prohibited from using it for any purpose other than the specific service they provide to phtayaph.

6 Cookies & Tracking Technologies

phtayaph uses cookies and similar tracking technologies to operate and improve the platform. The types of cookies we use include:

• Essential Cookies: Required for the platform to function correctly, including session management and security features. These cannot be disabled.
• Functional Cookies: Remember your preferences, such as language settings and display options, to personalise your phtayaph experience.
• Analytics Cookies: Collect anonymised data about how players use the phtayaph platform, helping us identify areas for improvement.
• Marketing Cookies: Used to deliver relevant promotional content about phtayaph games and offers. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the phtayaph platform.

7 Data Retention

phtayaph retains your personal data for as long as your account remains active and for a period thereafter as required by Philippine law and regulatory obligations. Specific retention periods include:

• Account and Identity Data: Retained for a minimum of five (5) years following account closure, in compliance with PAGCOR licensing requirements and AML regulations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act.
• Communications Data: Support interactions and correspondence are retained for up to three (3) years from the date of the last interaction.
• Technical and Usage Data: Anonymised analytics data may be retained indefinitely; identifiable technical data is deleted within twelve (12) months of collection.

Upon expiry of the applicable retention period, phtayaph will securely delete or anonymise your personal data so that it can no longer be associated with you as an individual.

8 Data Security

phtayaph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phtayaph platform.
• AES-256 encryption for sensitive data stored on phtayaph servers, including financial and identity information.
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing conducted by qualified cybersecurity professionals.
• Two-factor authentication (2FA) options available to all phtayaph account holders to protect account access.
• Incident response procedures to detect, contain, and notify affected players and the National Privacy Commission (NPC) in the event of a personal data breach, within the timeframes prescribed by Philippine law.

9 Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtayaph:

• Right to Be Informed: The right to know what personal data phtayaph collects about you and how it is used — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data phtayaph holds about you, along with information about how it is processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phtayaph's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another data controller where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe phtayaph has violated your data privacy rights.

To exercise any of these rights, please contact the phtayaph Data Privacy Officer via the contact details provided in Section 12 of this policy. phtayaph will respond to all verified requests within thirty (30) days, as required by Philippine law.

10 Minors & Age Restriction

phtayaph is strictly intended for individuals aged 21 years and above, in accordance with Philippine law and PAGCOR regulations governing online gaming. phtayaph does not knowingly collect personal data from individuals under the age of 21.

If phtayaph becomes aware that personal data has been collected from a person under the age of 21, that account will be immediately suspended, all associated data will be deleted, and any deposits will be returned in accordance with our account closure procedures.

If you are a parent or guardian and believe that your child has registered on phtayaph, please contact our support team immediately so that we can take appropriate action.

11 Changes to This Policy

phtayaph reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, or regulatory requirements. When material changes are made, phtayaph will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

The "Last Updated" date at the top of this page indicates when the most recent revision was made. Continued use of the phtayaph platform following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this page periodically to stay informed about how phtayaph protects your data.

12 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by phtayaph, please contact our Data Privacy Officer using the details below:

• Email: [email protected]
• Platform: Via the in-platform live chat or support ticket system available after logging in to your phtayaph account.

phtayaph is committed to resolving all privacy-related inquiries promptly and transparently. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.