phtaya1 Privacy Policy

1 Introduction

phtaya1 ("phtaya1," "we," "us," or "our") is committed to protecting the privacy and personal information of all users ("you," "your," or "User") of our online gaming platform located at phtaya1.app (the "Platform"). This Privacy Policy explains how we collect, use, disclose, store, and protect your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and other applicable data protection laws.

By accessing or using the phtaya1 Platform, creating an account, or engaging with our services, you acknowledge that you have read, understood, and agree to the collection, use, and disclosure of your personal information as described in this Privacy Policy. This Privacy Policy should be read in conjunction with our Terms and Conditions, which govern your use of the Platform.

If you do not agree with the terms of this Privacy Policy, you must immediately cease using the phtaya1 Platform and refrain from providing any personal information to us. For questions or concerns about this Privacy Policy or our data practices, please contact our Data Protection Officer at [email protected].

2 Information We Collect

phtaya1 collects various types of personal information to provide, maintain, and improve our services. The categories of information we collect include:

2.1 Information You Provide Directly

When you register for a phtaya1 account or use our services, you voluntarily provide us with personal information, including:

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, and username.
• Identity Verification Data: Government-issued identification documents (such as Philippine passport, driver's license, or national ID), photographs, and other documents required for age verification and Know Your Customer (KYC) compliance.
• Financial Information: Payment method details (GCash account, PayMaya account, bank account information), transaction history, deposit and withdrawal records, and billing information.
• Communications: Any information you provide when contacting our customer support team, including chat transcripts, emails, and support tickets.
• Marketing Preferences: Your consent to receive promotional communications and your communication preferences.

2.2 Information Collected Automatically

When you access or use the phtaya1 Platform, we automatically collect certain technical and usage information, including:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifiers (such as IP address and device ID), and mobile network information.
• Usage Data: Pages visited, games played, time spent on the Platform, clickstream data, referring and exit pages, search queries, and interaction with Platform features.
• Location Data: Approximate geographic location derived from your IP address to ensure compliance with geographic restrictions and applicable gaming regulations.
• Cookies and Similar Technologies: Information collected through cookies, web beacons, and similar tracking technologies (see Section 9 for details).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Providers: Transaction verification and fraud prevention data from GCash, PayMaya, and banking partners.
• Identity Verification Services: Age verification and identity authentication data from third-party verification providers.
• Game Providers: Gameplay data, game results, and technical performance data from our licensed game content providers.
• Fraud Prevention Services: Risk assessment and fraud detection data from specialized security providers .

3 How We Use Your Information

phtaya1 uses the personal information we collect for the following purposes:

3.1 Account Management and Service Delivery

• Creating and managing your phtaya1 account;
• Verifying your identity and age in compliance with PAGCOR regulations and Philippine law;
• Processing deposits, withdrawals, and other financial transactions;
• Providing access to games, promotions, and Platform features;
• Delivering customer support and responding to your inquiries.

3.2 Legal and Regulatory Compliance

• Complying with applicable Philippine laws, including the Data Privacy Act of 2012, Anti-Money Laundering Act, and gaming regulations;
• Conducting Know Your Customer (KYC) and anti-money laundering (AML) checks;
• Responding to lawful requests from government authorities and law enforcement agencies;
• Maintaining records as required by applicable law and regulatory obligations.

3.3 Security and Fraud Prevention

• Detecting, investigating, and preventing fraudulent transactions and other illegal activities;
• Monitoring for suspicious account activity and unauthorized access;
• Enforcing our Terms and Conditions and other Platform policies;
• Protecting the rights, property, and safety of phtaya1, our users, and the public.

3.4 Platform Improvement and Analytics

• Analyzing usage patterns to improve Platform functionality and user experience;
• Conducting research and development to enhance our games and services;
• Generating aggregated, anonymized statistical reports about Platform usage;
• Testing new features and resolving technical issues.

3.5 Marketing and Communications

With your consent, we may use your information to send you promotional offers, newsletters, and updates about phtaya1 games and services. You may opt out of marketing communications at any time by updating your account preferences or contacting our support team.

4 Legal Basis for Processing

phtaya1 processes your personal information on the following legal grounds under the Data Privacy Act of 2012 and applicable Philippine data protection regulations:

• Contractual Necessity: Processing is necessary to perform our contract with you, including providing gaming services, processing payments, and managing your account.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC/AML requirements, PAGCOR licensing conditions, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests, including fraud prevention, security monitoring, and Platform improvement, provided these interests are not overridden by your privacy rights.
• Consent: For certain processing activities, such as marketing communications and non-essential cookies, we rely on your explicit consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

5 Information Sharing and Disclosure

phtaya1 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your information in the following limited circumstances:

5.1 Service Providers

We share personal information with trusted third-party service providers who assist us in operating the Platform and delivering our services, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, game content providers, cloud hosting services, customer support platforms, and analytics providers. All service providers are contractually bound to process your data only as instructed by phtaya1 and to maintain appropriate security standards.

5.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, law enforcement authorities, regulatory bodies (including PAGCOR and the National Privacy Commission), and courts when required by law, court order, or regulatory requirement, or when we believe disclosure is necessary to protect the rights, property, or safety of phtaya1, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of all or substantially all of phtaya1's assets, your personal information may be transferred to the acquiring entity. We will notify you of any such transfer and any changes to this Privacy Policy that may result.

5.4 With Your Consent

We may share your information with third parties in other circumstances with your explicit prior consent.

6 Data Security

phtaya1 implements comprehensive technical and organizational security measures to protect your personal information against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and our servers is protected using 256-bit SSL/TLS encryption. Sensitive data stored in our systems is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is strictly limited to authorized phtaya1 personnel who require it to perform their job functions. All staff with access to personal data undergo background checks and regular privacy training.
• Network Security: Our Platform is protected by firewalls, intrusion detection systems, and regular security audits conducted by independent cybersecurity experts.
• Payment Security: Financial transactions are processed through PCI-DSS compliant payment gateways. phtaya1 does not store full payment card details on our servers.
• Incident Response: We maintain a documented data breach response plan and will notify affected users and the National Privacy Commission within 72 hours of discovering a breach that poses a risk to your rights and freedoms.

While we take all reasonable steps to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activities that occur under your account.

7 Data Retention

phtaya1 retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, resolve disputes, and enforce our agreements. Our standard retention periods are as follows:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by Philippine anti-money laundering regulations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years in accordance with the Anti-Money Laundering Act and tax regulations.
• Identity Verification Documents: KYC documents are retained for five (5) years after the end of the business relationship, as required by AMLC regulations.
• Customer Support Records: Support communications are retained for three (3) years after the resolution of the relevant issue.
• Marketing Data: Retained until you withdraw your consent or opt out of marketing communications.
• Technical Logs: Server and access logs are retained for up to twelve (12) months for security and fraud prevention purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

8 Your Privacy Rights

Under the Data Privacy Act of 2012 and applicable Philippine data protection regulations, you have the following rights with respect to your personal information held by phtaya1:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed, as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal information we hold about you and information about how it is processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal information. You may update most account information directly through your account settings.
• Right to Erasure: The right to request deletion of your personal information, subject to our legal and regulatory retention obligations.
• Right to Object: The right to object to the processing of your personal information for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your privacy rights have been violated.

9 Cookies and Tracking Technologies

phtaya1 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and deliver relevant content. A cookie is a small text file placed on your device when you visit our Platform.

9.1 Types of Cookies We Use

• Strictly Necessary Cookies: Essential for the Platform to function properly, including session management, authentication, and security features. These cannot be disabled.
• Performance Cookies: Collect anonymized information about how you use the Platform, such as pages visited and errors encountered, to help us improve performance.
• Functional Cookies: Remember your preferences and settings, such as language preferences and game settings, to provide a personalized experience.
• Analytics Cookies: Help us understand how users interact with the Platform through aggregated statistical analysis.

9.2 Managing Cookies

You can control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies. However, disabling certain cookies may affect the functionality of the Platform and your ability to access some features. Please refer to your browser's help documentation for instructions on managing cookies.

10 International Data Transfers

phtaya1 primarily processes and stores your personal data within the Philippines. However, some of our service providers and technology partners may be located in other countries. When we transfer personal data outside the Philippines, we ensure that appropriate safeguards are in place to protect your information, including:

• Transferring data only to countries with adequate data protection laws as recognized by the National Privacy Commission;
• Implementing contractual clauses that require recipients to protect personal data to the same standard as required under Philippine law;
• Ensuring that all international data transfers comply with the requirements of the Data Privacy Act of 2012 and NPC regulations.

By using the phtaya1 Platform, you consent to the transfer of your personal information to countries outside the Philippines where our service providers operate, subject to the safeguards described above.

11 Children's Privacy

The phtaya1 Platform is strictly intended for individuals who are at least twenty-one (21) years of age. We do not knowingly collect, use, or disclose personal information from individuals under the age of 21. In accordance with Philippine law and PAGCOR regulations, access to online casino gaming is prohibited for minors.

If you believe that a minor has provided personal information to phtaya1 or has accessed our Platform, please contact us immediately at [email protected] so that we can take appropriate action.

12 Changes to This Privacy Policy

phtaya1 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by:

• Posting the updated Privacy Policy on the Platform with a revised "Last Updated" date;
• Sending an email notification to your registered email address for significant changes;
• Displaying a prominent notice on the Platform for a reasonable period following the update.

Your continued use of the phtaya1 Platform after the effective date of any changes constitutes your acceptance of the revised Privacy Policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal information.

12.1 Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer. We are committed to resolving any privacy concerns promptly and transparently. You may reach us at [email protected]. Our team is available to assist you and will respond within thirty (30) business days.

12.2 National Privacy Commission

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the government body responsible for administering and implementing the Data Privacy Act of 2012 and ensuring compliance with its provisions.