phtaya1 Casino Privacy Policy

1. Introduction

1.1 phtaya1 Casino ("phtaya1," "we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you," "Player," or "User") who access and use our online gaming platform. We understand that trust is the foundation of any good relationship — and that's especially true when it comes to how we handle your information.

1.2 This Privacy Policy describes the types of personal data we collect, the purposes for which we use it, the circumstances under which we may share it, and the rights you have over your own data. It is designed to be clear, honest, and easy to understand — because you deserve to know exactly what happens to your information when you use phtaya1.

1.3 This policy is issued in compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as enforced by the National Privacy Commission (NPC) of the Philippines.

2. Data Controller

2.1 For the purposes of the Data Privacy Act of 2012, phtaya1 Casino acts as the personal information controller (PIC) in respect of the personal data you provide when registering and using the phtaya1 platform.

2.2 As the personal information controller, phtaya1 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.

2.3 If you have any questions or concerns about how phtaya1 handles your personal data, you may contact our Data Protection Officer (DPO) at the contact details provided in Section 15 of this policy.

3. Personal Data We Collect

3.1 phtaya1 collects the following categories of personal data from registered players and platform visitors:

Identity and Contact Information:

Financial Information:

Technical and Usage Data:

3.2 Sensitive Personal Information. In certain circumstances, phtaya1 may collect sensitive personal information as defined under the DPA, such as government identification numbers (e.g., PhilSys ID number, TIN, SSS/GSIS number) for KYC verification purposes. Such data is handled with the highest level of care and is processed only to the extent strictly necessary for identity verification and regulatory compliance.

4. How We Collect Your Data

4.1 phtaya1 collects personal data through the following means:

• Registration: When you create a phtaya1 account, you provide us with your name, date of birth, contact details, and other required information;
• KYC Verification: When you submit identity documents to verify your account, we collect the information contained in those documents;
• Deposits and Withdrawals: When you conduct financial transactions on the platform, we collect the payment details necessary to process those transactions;
• Customer Support: When you contact our support team via live chat or email, we collect the information you provide in the course of that interaction;
• Platform Usage: We automatically collect technical data about your device, browser, and how you interact with the phtaya1 platform through cookies and server logs;
• Promotions and Surveys: When you participate in promotions, competitions, or surveys, we collect the information you submit in connection with those activities.

5. How We Use Your Personal Data

5.1 phtaya1 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your phtaya1 player account, including processing your registration and verifying your identity;
• Service Delivery: To provide you with access to our games, promotions, and other platform features;
• Payment Processing: To process deposits, withdrawals, and other financial transactions on your account;
• KYC and AML Compliance: To verify your identity and comply with our obligations under Philippine anti-money laundering laws and regulations;
• Responsible Gaming: To monitor gaming activity and implement responsible gaming tools, including deposit limits, session limits, and self-exclusion;
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance;
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications;
• Platform Improvement: To analyze usage patterns and improve the functionality, performance, and user experience of the phtaya1 platform;
• Legal Compliance: To comply with applicable Philippine laws, regulations, and lawful orders from competent authorities.

6. Legal Basis for Processing

6.1 phtaya1 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and phtaya1 — specifically, to provide you with access to our gaming platform and related services;
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including anti-money laundering regulations, tax obligations, and gaming regulatory requirements;
• Legitimate Interests: Processing is necessary for phtaya1's legitimate interests, such as fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and freedoms;
• Consent: For certain processing activities, such as sending marketing communications or processing sensitive personal information, we rely on your explicit consent. You may withdraw your consent at any time by contacting our support team or updating your account preferences.

7. Data Sharing and Disclosure

7.1 phtaya1 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may, however, share your personal data with the following categories of recipients where necessary and lawful:

• Payment Service Providers: We share financial data with payment processors such as GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to facilitate deposits and withdrawals;
• KYC and Identity Verification Providers: We engage third-party identity verification services to assist with KYC compliance. These providers process your identity documents under strict confidentiality obligations;
• Game Software Providers: Our platform integrates games from licensed third-party software providers. These providers may receive limited technical data necessary to deliver their games;
• Regulatory and Law Enforcement Authorities: We may disclose your personal data to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law or lawful order;
• Professional Advisors: We may share data with our legal, financial, and compliance advisors under strict confidentiality obligations where necessary for the conduct of our business;
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of phtaya1's business, your personal data may be transferred to the relevant successor entity, subject to equivalent privacy protections.

7.2 All third parties with whom phtaya1 shares personal data are required to handle that data in accordance with applicable Philippine data protection laws and are bound by appropriate contractual data protection obligations.

8. Cookies and Tracking Technologies

8.1 phtaya1 uses cookies and similar tracking technologies (such as web beacons and pixel tags) to enhance your experience on our platform, analyze usage patterns, and deliver relevant content.

8.2 Types of Cookies We Use:

• Strictly Necessary Cookies: These cookies are essential for the operation of the phtaya1 platform. They enable core functions such as account login, session management, and security. These cookies cannot be disabled;
• Performance and Analytics Cookies: These cookies collect anonymized information about how visitors use our platform, such as which pages are visited most frequently. This data helps us improve platform performance;
• Functionality Cookies: These cookies remember your preferences and settings, such as your preferred language and display options, to provide a more personalized experience;
• Marketing Cookies: These cookies track your activity on the platform to help us deliver relevant promotional content. They are only placed with your consent.

8.3 You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phtaya1 platform. Instructions for managing cookies are available in the help section of most major browsers.

9. Data Retention

9.1 phtaya1 retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting requirements.

9.2 In general, phtaya1 retains account and transaction data for a minimum of five (5) years following the closure of your account, in accordance with Philippine anti-money laundering regulations and gaming regulatory requirements.

9.3 Where personal data is no longer required for any lawful purpose, phtaya1 will securely delete or anonymize it in accordance with our internal data retention and disposal procedures.

9.4 In certain circumstances, we may be required to retain your data for longer periods — for example, where it is subject to a legal hold in connection with ongoing litigation, regulatory investigation, or law enforcement inquiry.

10. Data Security

10.1 phtaya1 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest using industry-standard encryption algorithms;
• Strict role-based access controls limiting data access to authorized personnel only;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for internal system access;
• Comprehensive employee data protection training and awareness programs;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phtaya1 will notify the National Privacy Commission and affected data subjects in accordance with the timelines and requirements set out under the Data Privacy Act and its IRR.

10.3 While phtaya1 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your own account credentials.

11. Your Rights as a Data Subject

11.1 Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phtaya1:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as set out in this Privacy Policy;
• Right of Access: You have the right to request a copy of the personal data phtaya1 holds about you, along with information about how it is being processed;
• Right to Rectification: You have the right to request the correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You have the right to request the deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that phtaya1 has violated your data privacy rights.

11.2 To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 15. We will respond to your request within the timeframes prescribed under the Data Privacy Act and its IRR. We may need to verify your identity before processing your request.

12. Children's Privacy

12.1 The phtaya1 platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register for or use the phtaya1 platform.

12.2 If phtaya1 becomes aware that personal data has been collected from an individual under the age of 21 without appropriate verification, we will take immediate steps to delete that data and close the associated account.

12.3 If you are a parent or guardian and believe that your child has provided personal data to phtaya1, please contact our support team immediately so that we can investigate and take appropriate action.

13. Third-Party Links

13.1 The phtaya1 platform may contain links to third-party websites or services for informational purposes. phtaya1 is not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

13.2 The inclusion of any link on the phtaya1 platform does not imply endorsement of the linked site or its content by phtaya1.

14. Updates to This Privacy Policy

14.1 phtaya1 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The revised policy will be posted on this page with an updated effective date.

14.2 Where changes are material, phtaya1 will notify registered players via email or a prominent notice on the platform prior to the changes taking effect. Your continued use of the phtaya1 platform following the effective date of any amendments constitutes your acceptance of the revised Privacy Policy.

14.3 We encourage you to review this Privacy Policy periodically to stay informed about how phtaya1 is protecting your personal data.

15. Contact Us

15.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way phtaya1 handles your personal data, please contact our Data Protection Officer: