phtaya01 Privacy Policy

1. Introduction

phtaya01 ("phtaya01," "we," "us," or "our") operates the online gaming platform accessible at phtaya01.vip and any associated mobile applications or services (collectively, the "Platform"). We are committed to protecting the privacy and personal data of all users, particularly Filipino players who entrust us with their information.

This Privacy Policy describes how phtaya01 collects, uses, discloses, stores, and protects your personal data when you access or use the Platform. It also describes the rights available to you under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations ("IRR"), as well as any other applicable data protection laws.

By registering an account on phtaya01 or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Privacy Policy, you must not use the Platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, phtaya01 acts as the personal information controller ("PIC") with respect to the personal data of its registered players and Platform visitors. phtaya01 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable data protection laws.

phtaya01 has designated a Data Protection Officer ("DPO") who is responsible for overseeing compliance with the DPA and this Privacy Policy. Contact details for the DPO are provided in Section 14 of this Policy.

3. Personal Data We Collect

phtaya01 collects personal data from you in several ways — directly when you provide it to us, automatically when you use the Platform, and from third parties where permitted by law. The categories of personal data we collect include:

3.1 Registration and Identity Data

• Full legal name as it appears on your government-issued ID
• Date of birth (to verify the 21+ age requirement under PAGCOR regulations)
• Email address and mobile phone number
• Residential address (city, province, postal code)
• Username and encrypted password
• Government-issued ID type and number (for KYC verification)

3.2 Financial and Transaction Data

• GCash account number or PayMaya/Maya account details
• Bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) where used for deposits or withdrawals
• Debit card details (card number masked, expiry date)
• Deposit and withdrawal history
• Wagering history and game transaction records
• Bonus and promotion redemption records

3.3 Technical and Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used
• Login timestamps and access logs
• Cookie identifiers and similar tracking technologies (see Section 7)

3.4 Communications Data

• Records of your communications with phtaya01 customer support
• Feedback, survey responses, and complaint records
• Marketing preferences and communication opt-in/opt-out records

3.5 Responsible Gaming Data

• Self-imposed deposit limits, session limits, and cooling-off periods
• Self-exclusion requests and status
• Responsible gaming tool usage history

4. How We Use Your Personal Data

phtaya01 uses your personal data for the following purposes:

Purpose	Data Used
Account registration and management	Identity data, contact data
Age and identity verification (KYC)	Identity data, government ID data
Processing deposits and withdrawals	Financial data, identity data
Providing gaming services and game history	Transaction data, usage data
Fraud prevention and security monitoring	Technical data, financial data, identity data
PAGCOR regulatory compliance and reporting	Identity data, transaction data, responsible gaming data
Anti-money laundering (AML) compliance	Identity data, financial data, transaction data
Customer support and complaint handling	Communications data, identity data
Responsible gaming monitoring and intervention	Responsible gaming data, transaction data, usage data
Marketing communications (with your consent)	Contact data, marketing preferences
Platform analytics and improvement	Technical data, usage data (aggregated/anonymized)

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phtaya01 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legal requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where our interests do not override your fundamental rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed, and freely given consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

phtaya01 does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya/Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist in verifying your identity and age in compliance with PAGCOR requirements.
• IT and cloud infrastructure providers: Hosting, database, and security service providers who process data on our behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government bodies as required by law.
• Fraud prevention and AML services: Third-party providers that help us detect and prevent fraudulent activity and money laundering.
• Professional advisors: Legal counsel, auditors, and accountants, subject to professional confidentiality obligations.

All third-party service providers who process personal data on behalf of phtaya01 are required to enter into data processing agreements that obligate them to process your data only on our instructions and in compliance with the DPA.

7. Cookies and Tracking Technologies

phtaya01 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, analyze usage patterns, and deliver relevant content. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These cannot be disabled without affecting core functionality such as login sessions and security features.
• Functional cookies: Remember your preferences such as language settings and display options to improve your experience.
• Analytics cookies: Collect aggregated, anonymized data about how players use the Platform to help us improve performance and content.
• Marketing cookies: Used only with your explicit consent to deliver relevant promotional content about phtaya01 games and offers.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For marketing cookies, you may withdraw consent at any time through your account settings.

8. Data Retention

phtaya01 retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and PAGCOR regulations. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, as required by PAGCOR and AML regulations.
• Financial and transaction data: Retained for a minimum of five (5) years from the date of the transaction, in compliance with Philippine AML and tax laws.
• Communications data: Retained for three (3) years from the date of the communication, or longer if required for ongoing legal proceedings.
• Technical and usage data: Retained for up to twelve (12) months in identifiable form, after which it is aggregated or anonymized.
• Responsible gaming data: Self-exclusion records are retained for the duration of the exclusion period and for five (5) years thereafter.

When personal data is no longer required, phtaya01 will securely delete or anonymize it in accordance with our data disposal procedures.

9. Data Security

phtaya01 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL encryption for all data transmitted between your device and our servers
• Encryption of sensitive data stored at rest
• Multi-factor authentication options for player accounts
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and penetration testing
• Incident response procedures aligned with NPC notification requirements

While phtaya01 takes all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your own account credentials.

10. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtaya01:

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14. We will respond to all valid data subject requests within thirty (30) days of receipt, as required by the DPA IRR.

11. Children's Privacy and Age Restriction

The phtaya01 Platform is strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. phtaya01 does not knowingly collect personal data from individuals under the age of 21.

If phtaya01 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and report the matter to PAGCOR as required. If you believe that a minor has registered on the Platform, please contact us immediately at the details provided in Section 14.

12. Cross-Border Data Transfers

phtaya01 primarily stores and processes personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers located outside the Philippines — for example, where we use cloud infrastructure or technology service providers with international operations.

Any cross-border transfer of personal data is conducted in compliance with Section 21 of the Philippine Data Privacy Act of 2012 and the NPC's rules on cross-border data flows. We ensure that recipient countries or organizations provide an adequate level of data protection, or that appropriate safeguards (such as contractual clauses) are in place before any transfer occurs.

13. Updates to This Privacy Policy

phtaya01 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, or PAGCOR regulatory requirements. When we make material changes, we will post the revised Policy on the Platform and update the "Last Updated" date at the top of this page.

For significant changes that materially affect how we process your personal data, we will provide additional notice via email or in-platform notification. Your continued use of the phtaya01 Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

14. Contact and Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phtaya01, please contact our Data Protection Officer:

Data Protection Officer, phtaya01
Email: privacy@phtaya01.vip
General Support: support@phtaya01.vip

We aim to acknowledge all privacy-related inquiries within five (5) business days and to resolve them within thirty (30) days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.