phtay Privacy Policy

1. Introduction

phtay operates as an online gaming platform serving players across the Philippines, including Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond. We take the privacy and security of your personal data seriously, and we are committed to handling it responsibly, transparently, and in full compliance with applicable Philippine law — particularly Republic Act No. 10173, the Data Privacy Act of 2012, and its Implementing Rules and Regulations.

This Privacy Policy applies to all personal data collected through the phtay website, mobile platform, customer support channels, and any other services we provide. It covers data collected from registered players, prospective users who browse the platform without registering, and individuals who contact our support team.

By accessing or using phtay, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the phtay platform immediately.

2. Data We Collect

phtay collects personal data that is necessary to provide you with a secure, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Nationality and country of residence;
• Government-issued identification documents (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID);
• Username and encrypted password.

2.2 Contact Data

• Email address;
• Mobile phone number;
• Residential address in the Philippines.

2.3 Financial Data

• GCash or PayMaya account details (mobile number only — we do not store PINs or passwords);
• Bank account details for BPI, BDO, Metrobank, UnionBank, or other linked accounts used for deposits and withdrawals;
• Transaction history, including deposit amounts, withdrawal requests, and gaming activity in Philippine Peso (PHP).

2.4 Technical & Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Pages visited, time spent on the platform, and clickstream data;
• Session logs and game activity records.

2.5 Communications Data

• Records of your interactions with phtay customer support via live chat or email;
• Feedback, complaints, and dispute records.

Data Category	Examples	Purpose
Identity Data	Name, DOB, government ID	KYC verification, age check
Contact Data	Email, phone, address	Account management, support
Financial Data	GCash number, bank account	Deposits, withdrawals, AML
Technical Data	IP address, device info	Security, fraud prevention
Usage Data	Game history, session logs	Platform improvement, compliance
Communications Data	Support chat transcripts	Dispute resolution, quality

3. How We Use Your Data

phtay uses the personal data we collect for the following purposes:

• Account creation and management: To register your phtay account, verify your identity, and maintain your player profile;
• Age and identity verification: To confirm that you are at least 21 years of age and eligible to use the platform under Philippine gaming regulations;
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods in PHP;
• Regulatory compliance: To meet our obligations under Philippine anti-money laundering (AML) laws, the Data Privacy Act of 2012, and applicable gaming regulations;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats;
• Customer support: To respond to your inquiries, resolve disputes, and provide assistance through our 24/7 support channels;
• Platform improvement: To analyze usage patterns and improve the features, performance, and user experience of the phtay platform;
• Responsible gaming: To monitor gaming behavior and proactively offer responsible gaming tools where patterns of concern are identified;
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided explicit consent and subject to your right to opt out at any time.

4. Legal Basis for Processing

phtay processes your personal data on the following legal grounds as recognized under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing is necessary to perform the contract between you and phtay — i.e., to provide you with access to the gaming platform and process your transactions;
• Legal obligation: Processing is required to comply with applicable Philippine laws, including AML regulations, KYC requirements, and gaming licensing conditions;
• Legitimate interests: Processing is necessary for phtay's legitimate interests in operating a secure, fraud-free platform, provided those interests are not overridden by your rights;
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

5. Data Sharing & Disclosure

phtay does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only where necessary and lawful:

5.1 Service Providers

We engage trusted third-party service providers to assist in operating the phtay platform, including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), identity verification providers, cloud hosting services, and customer support platforms. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection law.

5.2 Regulatory & Law Enforcement Authorities

phtay may disclose personal data to Philippine government agencies, regulatory bodies, law enforcement authorities, or courts where required by law, court order, or regulatory directive. This includes disclosures required under AML regulations and gaming licensing conditions.

5.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of phtay's business, your personal data may be transferred to the acquiring entity as part of that transaction. We will notify affected users of any such transfer and the applicable privacy terms.

6. Cookies & Tracking Technologies

phtay uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and analyze usage patterns. The types of cookies we use include:

• Essential cookies: Required for the platform to function correctly, including session management and security features. These cannot be disabled;
• Analytics cookies: Used to collect anonymized data about how players use phtay, helping us improve platform performance and user experience;
• Preference cookies: Used to remember your settings and preferences, such as language and display options;
• Marketing cookies: Used to deliver relevant promotional content based on your activity on phtay. These are only set with your explicit consent.

You can manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies may affect the functionality of the phtay platform.

7. Data Retention

phtay retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specifically:

• Account and identity data is retained for a minimum of five (5) years following account closure, as required under Philippine AML regulations;
• Transaction records are retained for a minimum of five (5) years from the date of each transaction;
• Customer support communications are retained for three (3) years from the date of the interaction;
• Marketing consent records are retained for the duration of your consent and for a reasonable period thereafter as evidence of that consent.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, phtay will securely delete or anonymize it.

8. Data Security

phtay implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phtay platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Multi-factor authentication options for player accounts;
• Regular security audits and penetration testing by independent security professionals;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Comprehensive staff training on data protection and information security practices.

While phtay takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your phtay login credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

9. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtay:

• Right to be informed: You have the right to know what personal data phtay collects about you and how it is used;
• Right of access: You may request a copy of the personal data phtay holds about you;
• Right to rectification: You may request correction of any inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations;
• Right to object: You may object to the processing of your personal data for direct marketing purposes at any time;
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact the phtay Data Protection Officer using the contact details provided in Section 13 of this Policy. We will respond to all verified requests within thirty (30) days.

10. Children & Minors

The phtay platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phtay does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data, and report the matter to the relevant regulatory authority where required. If you believe that a minor has registered on phtay, please contact our support team immediately.

11. Third-Party Services

The phtay platform may integrate with third-party services such as payment gateways (GCash, PayMaya, BPI, BDO, Metrobank), game software providers, and analytics tools. These third parties operate under their own privacy policies, and phtay is not responsible for their data practices.

phtay conducts due diligence on all third-party service providers to ensure they maintain adequate data protection standards. All third-party processors engaged by phtay are bound by data processing agreements that require them to handle your data in accordance with applicable Philippine law and this Privacy Policy.

12. Changes to This Privacy Policy

phtay reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When we make material changes, we will notify registered users by email and/or by posting a prominent notice on the phtay platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of phtay following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the revised Policy, you should stop using the platform and may request account closure by contacting our support team.

13. Contact & Data Protection Officer

phtay has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO.

You may reach the phtay Data Protection Officer and general support team via live chat on the phtay platform, available 24 hours a day, 7 days a week. Our support email address is displayed in the footer of this page as plain text for reference.

For complaints that cannot be resolved directly with phtay, you have the right to escalate your concern to the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.