How phtayas Protects Your Privacy
These highlights summarize the key points of our Privacy Policy. Please read the full document below for complete details on how phtayas handles your personal data.
Data Security
phtayas uses SSL encryption, secure data storage, and strict access controls to protect your personal information at every point — from account registration through to payment processing and account management.
No Data Selling
phtayas does not sell, rent, or trade your personal data to third-party marketers. Your information is shared only with essential service partners — such as payment processors and identity verification providers — strictly on a need-to-know basis.
DPA 2012 Compliance
All data handling practices at phtayas are aligned with the Philippine Data Privacy Act of 2012 (RA 10173) and the National Privacy Commission's implementing rules and regulations.
Your Consent Matters
phtayas collects and processes your personal data only with your informed consent, except where processing is required by law — such as AMLA compliance reporting obligations. You may withdraw consent at any time by contacting our support team.
Access & Correction
You have the right to access, review, and request corrections to the personal data phtayas holds about you. Submit a data access or correction request anytime via our 24/7 support channel and we will respond within the legally required timeframe.
Right to Erasure
Subject to applicable legal and regulatory retention requirements, you may request the deletion of your personal data from phtayas systems. Requests are reviewed and processed in accordance with the DPA 2012 and relevant PAGCOR data retention guidelines.
1. Introduction
phtayas ("we," "us," or "our") operates the online gaming platform accessible at phtayas.net (the "Platform"). We are fully committed to protecting the privacy and personal data of every player and visitor who interacts with the Platform.
This Privacy Policy describes the types of personal information we collect, the purposes for which it is used, how it is stored and protected, with whom it may be shared, and the rights available to you as a data subject under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or "DPA 2012") and its Implementing Rules and Regulations (IRR).
By registering on the phtayas platform, making a deposit, or otherwise using our services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and contact support to close your account.
Data Controller: For the purposes of the Philippine Data Privacy Act of 2012, phtayas is the data controller responsible for your personal information collected via phtayas.net. Our designated Data Protection Officer (DPO) can be reached via the contact details in Section 13.
2. Personal Data We Collect
phtayas collects personal data through several channels — directly from you during registration and account use, automatically through your interaction with the Platform, and in some cases from third-party verification partners. The categories of personal data we collect include:
2.1 Registration & Identity Data
- Full legal name as it appears on a valid Philippine government-issued identification document
- Date of birth (used to verify the 21+ age requirement)
- Gender
- Nationality and country of residence
- Email address
- Mobile phone number
- Residential address (barangay, city/municipality, province)
2.2 Identity Verification (KYC) Data
- Copies of valid Philippine government-issued IDs (e.g., PhilSys ID, passport, driver's license, UMID, SSS/GSIS ID, voter's ID)
- Proof of residential address (e.g., utility bill, bank statement)
- Selfie or live photo for biometric identity matching, where required
- Source of funds documentation for high-volume accounts, as required under AMLA
2.3 Financial & Transaction Data
- GCash mobile number, Maya account reference, or other e-wallet identifiers
- Bank account details (for BPI, BDO, Metrobank, and other bank transfers)
- Deposit and withdrawal history
- Wagering and game transaction records
- Bonus claims and promotional history
2.4 Technical & Usage Data
- IP address and approximate geolocation
- Device type, operating system, and browser version
- Session duration, login timestamps, and platform activity logs
- Game play history and betting patterns
- Cookies and similar tracking technologies (see Section 6)
2.5 Communications Data
- Support chat transcripts and email correspondence with the phtayas team
- Feedback forms and survey responses
- Records of complaints and dispute correspondence
3. How We Use Your Personal Data
phtayas processes your personal data only for specified, explicit, and legitimate purposes. The table below summarizes how we use the data we collect:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, contact, and registration data | Contractual necessity |
| Age and identity verification (KYC) | KYC documents, selfie, date of birth | Legal obligation (DPA 2012, AMLA) |
| Processing deposits and withdrawals | Financial and transaction data | Contractual necessity |
| Fraud prevention and security monitoring | Technical, usage, and financial data | Legitimate interest / Legal obligation |
| Regulatory compliance and AML reporting | Identity, financial, and transaction data | Legal obligation (AMLA, PAGCOR) |
| Providing customer support | Communications and account data | Contractual necessity |
| Delivering bonuses and promotions | Account, wagering, and transaction data | Contractual necessity / Consent |
| Platform improvement and analytics | Technical and usage data (aggregated) | Legitimate interest |
| Responsible gaming monitoring | Wagering patterns and session data | Legal obligation / Legitimate interest |
| Marketing communications (opt-in only) | Contact data and preferences | Consent |
Marketing Opt-Out: If you have consented to receive promotional communications from phtayas and wish to opt out, contact our support team at any time. We will process your opt-out request promptly. Opting out of marketing will not affect your ability to use the platform or receive service-related communications.
4. Legal Basis for Processing
Under the Philippine Data Privacy Act of 2012, phtayas relies on the following legal bases when processing your personal data:
- Consent: Where you have given us clear, informed, and specific consent to process your data for a stated purpose — for example, marketing communications or optional profile features.
- Contractual Necessity: Where processing is required to perform our obligations under the Terms & Conditions you have agreed to — including account management, payment processing, and delivering gaming services.
- Legal Obligation: Where processing is required to comply with applicable Philippine law, including but not limited to the Anti-Money Laundering Act (AMLA), PAGCOR regulations, the DPA 2012, and tax reporting requirements.
- Legitimate Interest: Where processing is necessary for purposes that are in phtayas's legitimate interests — such as fraud detection, platform security, and improving user experience — provided those interests are not overridden by your rights and freedoms.
5. Data Sharing & Disclosure
phtayas does not sell or rent your personal data to any third party. We may share your personal information only in the following circumstances and only to the extent necessary for the stated purpose:
5.1 Service Providers
We engage trusted third-party service providers to support platform operations, including payment processors (GCash, Maya, BPI, BDO, Metrobank, InstaPay), identity verification and KYC partners, fraud detection services, customer support technology providers, and cloud hosting and data storage providers. All service providers are contractually bound to handle your data securely and only for the specific purpose for which it was shared.
5.2 Regulatory and Legal Authorities
phtayas is required by Philippine law to disclose certain player data to regulatory and law enforcement authorities. This includes mandatory reporting to the Anti-Money Laundering Council (AMLC) for covered and suspicious transactions under the AMLA, as well as responses to lawful orders from PAGCOR, the National Privacy Commission (NPC), Philippine courts, or other competent government bodies.
5.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of the phtayas business, your personal data may be transferred to the acquiring entity as part of the transaction, subject to the same privacy protections described in this Policy. You will be notified of any such transfer and its implications for your personal data.
5.4 Consent-Based Sharing
In all other cases, phtayas will not disclose your personal data to third parties without your explicit, prior consent.
Important: phtayas will never share your personal data with third-party advertisers, data brokers, or any organization for their own independent marketing or commercial purposes without your explicit opt-in consent.
6. Cookies & Tracking Technologies
phtayas uses cookies and similar tracking technologies on the Platform to support essential platform functionality, improve your experience, and analyze platform usage. The types of cookies we use include:
- Essential Cookies: Required for the platform to function correctly — including session management, login authentication, and security features. These cannot be disabled without affecting core platform functionality.
- Functional Cookies: Remember your preferences such as language settings, preferred payment methods, and display options to personalize your experience on return visits.
- Analytics Cookies: Collect aggregated and anonymized data about how users interact with the Platform — such as pages visited, session duration, and feature usage — to help us improve the phtayas experience.
- Security Cookies: Support fraud detection, bot prevention, and account security monitoring by tracking unusual activity patterns.
You may manage non-essential cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality and performance of the phtayas platform. phtayas does not use cookies to serve third-party advertising on the Platform.
7. Data Retention
phtayas retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory guidelines. Our general retention periods are as follows:
- Active account data: Retained for the full duration your account remains open on the phtayas platform.
- Transaction and financial records: Retained for a minimum of 5 years following each transaction, in compliance with AMLA requirements and PAGCOR record-keeping obligations.
- KYC and identity verification documents: Retained for a minimum of 5 years following account closure or the completion of the last transaction, whichever is later.
- Support and communications records: Retained for up to 3 years following the closure of each support interaction or complaint.
- Platform usage and technical logs: Retained for up to 12 months for security and fraud analysis purposes.
Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with NPC-recommended data disposal practices.
8. Data Security
phtayas implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security framework includes:
- SSL/TLS Encryption: All data transmitted between your device and the phtayas platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
- Secure Data Storage: Personal and financial data is stored in access-controlled, encrypted databases hosted on secure cloud infrastructure with regular security audits.
- Access Controls: Access to personal data is restricted to authorized phtayas personnel and service providers strictly on a need-to-know basis, with multi-factor authentication required for administrative access.
- Security Monitoring: The Platform is monitored continuously for suspicious activity, unauthorized access attempts, and potential data breaches.
- Incident Response: phtayas maintains a data breach response plan. In the event of a personal data breach that poses risk to your rights and freedoms, we will notify you and the National Privacy Commission within the timeframes required under DPA 2012.
Your Responsibility: You also play a role in keeping your account secure. Use a strong, unique password for your phtayas account, do not share your login credentials with anyone, and contact support immediately if you suspect unauthorized access to your account.
9. Your Data Subject Rights
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtayas. To exercise any of these rights, contact our Data Protection Officer using the details in Section 13.
Request a copy of the personal data phtayas holds about you, including information on how it is being processed.
Request that inaccurate or incomplete personal data in your phtayas account be corrected or updated.
Request deletion of your personal data where it is no longer necessary or where you withdraw consent, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing or where processing is based on legitimate interest.
Request a structured, machine-readable copy of your personal data for transfer to another service provider where technically feasible.
Lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe your data rights have been violated.
phtayas will respond to all verified data subject requests within 15 business days of receipt, in accordance with the DPA 2012 and NPC guidelines. We may request proof of identity before processing any request to protect your data from unauthorized disclosure.
10. Children's Privacy
The phtayas platform is strictly intended for adults aged 21 years and above. phtayas does not knowingly collect, process, or store personal data from individuals under the age of 21. Registration by minors is a violation of our Terms & Conditions and applicable Philippine gaming regulations.
If phtayas discovers that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the collected data (except where retention is required for legal or regulatory purposes), and return any deposited funds after deducting any fraudulently claimed bonuses.
Parental Advisory: If you believe a minor may have registered on the phtayas platform using false information, please contact our support team immediately at [email protected] so we can investigate and take appropriate action.
11. Cross-Border Data Transfers
In some cases, personal data collected by phtayas may be transferred to, stored on, or processed by servers or service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification platforms.
Where such cross-border transfers occur, phtayas ensures that adequate data protection safeguards are in place, consistent with the requirements of Section 21 of the DPA 2012 and NPC Circular 16-01. These safeguards may include standard contractual clauses, binding corporate rules, or confirmation that the receiving jurisdiction provides a comparable level of data protection.
By using the phtayas platform, you consent to your personal data being transferred internationally where necessary for the provision of our services, subject to the protections described above.
12. Updates to This Privacy Policy
phtayas may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or platform features. The most current version of the Privacy Policy will always be accessible at phtayas.net/privacy-policy, with the effective date displayed at the top of the document.
Material changes to this Privacy Policy will be communicated to registered players via email notification to the address on file, or via a prominent notice on the Platform prior to the changes taking effect. We encourage you to review the Privacy Policy periodically to stay informed about how phtayas protects your personal data.
Your continued use of the phtayas platform following any update to this Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with any changes, you may request account closure as described in our Terms & Conditions.
13. Contact & Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by phtayas, please reach out to us through the following channels:
- Data Protection Officer (DPO): phtayas has a designated Data Protection Officer responsible for overseeing compliance with the DPA 2012 and this Privacy Policy.
- Email: [email protected] — please include "Privacy Request" or "DPO Inquiry" in your subject line.
- Live Chat: Available 24/7 on the phtayas platform — average response time under 30 minutes.
- Response Time: Data subject requests will be acknowledged within 3 business days and fully responded to within 15 business days.
If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint directly with the Philippine National Privacy Commission (NPC). For more information about your rights and how to file a complaint, please visit the NPC's official website or contact the Commission directly through their publicly available channels.
For questions about responsible gaming tools, self-exclusion, or account limits, please visit our Responsible Gaming page. For general platform questions, visit our FAQ.
Play with Confidence on phtayas
Your personal data is protected every step of the way. Explore live casino games, bingo, slots, and more — with the peace of mind that phtayas takes your privacy seriously. For Filipino players aged 21 and above.
Must be 21 years or older. Please gamble responsibly.