At phtaaya, your privacy matters. This Privacy Policy explains what personal information we collect when you use phtaaya.org, how we use and protect that information, and what rights you have under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173). Please read this document carefully before using any phtaaya service.
phtaaya is committed to handling your personal information with transparency, care, and full compliance with Philippine data protection law. Here are the core principles that guide how we manage your data.
phtaaya uses industry-standard SSL encryption, secure data storage, and strict access controls to protect your personal information from unauthorized access, disclosure, or misuse at all times.
phtaaya does not sell, rent, or trade your personal data to third parties for marketing or commercial purposes. Your information is used solely to operate your account and improve your experience on the platform.
Under the Philippine Data Privacy Act, you have the right to access, correct, and request deletion of your personal data held by phtaaya. We make it straightforward to exercise these rights through our support team.
phtaaya only collects the personal information that is necessary to provide our services, comply with legal obligations, and keep your account secure. We do not collect data beyond what is required for these purposes.
phtaaya's data practices are fully aligned with Republic Act No. 10173, the Data Privacy Act of 2012, and the implementing rules and regulations issued by the National Privacy Commission of the Philippines.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, phtaaya will notify affected players and the National Privacy Commission within the timeframes required by Philippine law.
phtaaya ("we," "us," "our," or "the Platform") operates the online casino and sports betting platform accessible at phtaaya.org. We are committed to protecting the privacy and personal data of all individuals who interact with our platform, including registered players, visitors, and prospective users (collectively referred to as "you" or "your").
This Privacy Policy describes how phtaaya collects, uses, stores, shares, and protects your personal information in connection with your use of phtaaya.org and all associated services. It also outlines your rights as a data subject under the Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations.
By accessing or using phtaaya, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately.
Note: This Privacy Policy should be read together with phtaaya's Terms and Conditions, which are available at phtaaya.org/terms-conditions.
For the purposes of the Philippine Data Privacy Act of 2012, phtaaya acts as the personal information controller in respect of the personal data collected through phtaaya.org. As the data controller, phtaaya determines the purposes and means of processing your personal information.
phtaaya has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Privacy Policy. If you have any questions or concerns regarding the processing of your personal data, you may contact our DPO through the contact details provided in Section 14 of this Policy.
phtaaya is registered with the National Privacy Commission of the Philippines in accordance with applicable data protection regulations.
phtaaya collects personal data from you in several ways, including directly when you register an account, make a deposit, or contact our support team, and automatically through your use of the Platform. The categories of personal data we collect include: Information You Provide Directly:
Information Collected Automatically:
Sensitive Personal Information: Where phtaaya collects sensitive personal information (such as government ID numbers) for KYC purposes, we apply additional safeguards in accordance with Section 3(l) of the Data Privacy Act of 2012.
phtaaya processes your personal data only for specified, explicit, and legitimate purposes. The table below summarizes the primary purposes for which we use your data and the corresponding legal basis for each:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Account registration and management | Identity, Contact, Account Data | Contract performance |
| Processing deposits and withdrawals | Financial, Identity Data | Contract performance |
| KYC identity verification | Identity, Verification Data | Legal obligation |
| Anti-money laundering compliance | Financial, Identity, Usage Data | Legal obligation |
| Fraud detection and prevention | Technical, Usage, Financial Data | Legitimate interest |
| Customer support and dispute resolution | Identity, Contact, Communications Data | Contract performance |
| Responsible gaming monitoring | Usage, Financial Data | Legal obligation / Legitimate interest |
| Platform improvement and analytics | Usage, Technical, Cookie Data | Legitimate interest |
| Marketing communications (where consented) | Contact, Account Data | Consent |
| Regulatory reporting | Identity, Financial Data | Legal obligation |
phtaaya will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.
phtaaya processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:
Where phtaaya relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time by contacting our support team. Withdrawal of consent does not affect the lawfulness of processing carried out prior to the withdrawal.
phtaaya does not sell, rent, or trade your personal data to third parties. However, we may share your personal information with the following categories of recipients where necessary and lawful:
All third parties with whom phtaaya shares personal data are required to implement appropriate technical and organizational security measures and to process your data only in accordance with phtaaya's instructions and applicable Philippine data protection law.
Cross-Border Transfers: Where personal data is transferred outside the Philippines, phtaaya ensures that adequate safeguards are in place in accordance with the requirements of the Data Privacy Act of 2012 and NPC guidelines.
phtaaya uses cookies and similar tracking technologies to enhance your experience on phtaaya.org, analyze platform usage, and support security functions. A cookie is a small text file placed on your device when you visit a website. The types of cookies used by phtaaya include:
You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of phtaaya.org. For more information on managing cookies, refer to your browser's help documentation.
phtaaya retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:
Upon expiry of the applicable retention period, phtaaya will securely delete or anonymize your personal data in accordance with our data disposal procedures.
phtaaya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:
While phtaaya takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your phtaaya login credentials and for notifying us immediately if you suspect unauthorized access to your account.
Security Tip: Never share your phtaaya password with anyone, including phtaaya support staff. Our team will never ask for your password via email, chat, or phone.
Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phtaaya. To exercise any of these rights, please contact our Data Protection Officer at [email protected].
Request a copy of the personal data phtaaya holds about you and information about how it is being processed.
Request correction of inaccurate or incomplete personal data held by phtaaya about you.
Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
Object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interest.
Receive your personal data in a structured, commonly used, machine-readable format where technically feasible.
Withdraw consent to processing at any time where consent is the legal basis, without affecting the lawfulness of prior processing.
phtaaya will respond to all data subject requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, and you will be notified accordingly. phtaaya reserves the right to verify your identity before processing any data subject request.
phtaaya's services are strictly intended for individuals who are at least 21 years of age, in accordance with Philippine law governing online gambling. phtaaya does not knowingly collect personal data from individuals under the age of 21.
If phtaaya becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that information and close the associated account. If you believe that a minor has registered on phtaaya, please contact us immediately at [email protected].
Age Restriction: phtaaya enforces a strict 21+ age policy. Underage gambling is illegal in the Philippines and will not be tolerated on our platform under any circumstances.
phtaaya.org may contain links to third-party websites or services for informational purposes. phtaaya has no control over the content, privacy practices, or data handling of any third-party website and accepts no responsibility or liability for their privacy policies or practices.
We encourage you to review the privacy policy of any third-party website you visit. The inclusion of a link on phtaaya.org does not constitute an endorsement of that website or its privacy practices by phtaaya.
phtaaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
Where material changes are made to this Privacy Policy, phtaaya will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of phtaaya following the publication of an updated Privacy Policy constitutes your acceptance of the revised terms.
We encourage you to review this Privacy Policy periodically to stay informed about how phtaaya protects your personal information. If you have any concerns about changes to this Policy, please contact our Data Protection Officer.
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phtaaya, please contact our Data Protection Officer using the details below:
phtaaya will acknowledge your inquiry within two (2) business days and aim to provide a substantive response within thirty (30) days. If you are not satisfied with phtaaya's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information on how to file a complaint with the NPC is available on the NPC's official website.
Data Subject Requests: When submitting a data subject rights request, please include your full name, registered email address, and a clear description of your request to help us process it efficiently.