phtaya365 Privacy Policy

1. Introduction

phtaya365 ("we," "us," "our") is committed to protecting the privacy and personal data of all individuals who interact with our platform. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data in connection with the phtaya365 online gaming platform accessible at phtaya365.net.

We understand that trust is the foundation of any relationship between a gaming platform and its players. Filipino players who choose phtaya365 deserve to know exactly how their information is handled — not buried in legalese, but explained clearly and honestly. This policy is our commitment to that transparency.

This Privacy Policy should be read together with our Terms & Conditions, which govern your use of the phtaya365 platform generally.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phtaya365 acts as the personal information controller in respect of the personal data collected through the phtaya365 platform.

phtaya365 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with applicable data protection laws and this Privacy Policy. Contact details for the DPO are provided in Section 15 of this policy.

3. Personal Data We Collect

phtaya365 collects the following categories of personal data:

3.1 Registration and Identity Data

• Full legal name
• Date of birth (for age verification purposes)
• Nationality and country of residence
• Email address
• Mobile phone number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued photo identification (e.g., Philippine passport, driver's license, SSS/GSIS ID, PhilSys National ID)
• Proof of address documents (e.g., utility bills, bank statements)
• Proof of payment method ownership
• Source of funds documentation (where required)

3.3 Financial Data

• GCash account details, PayMaya account details, BPI/BDO/Metrobank account information, or other payment method details used for deposits and withdrawals
• Transaction history (deposits, withdrawals, wagers, winnings)
• Account balance information

3.4 Gaming and Usage Data

• Game history and betting records
• Session duration and frequency of play
• Bonus and promotion usage
• Responsible gaming tool usage (deposit limits, self-exclusion requests)

3.5 Technical and Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Log data including access times, pages viewed, and errors encountered

3.6 Communications Data

• Records of communications with phtaya365 customer support (live chat transcripts, email correspondence)
• Feedback and survey responses
• Marketing preferences and communication opt-in/opt-out records

4. How We Collect Your Data

phtaya365 collects personal data through the following means:

• Directly from you — when you register an Account, complete KYC verification, make deposits or withdrawals, contact customer support, or participate in promotions;
• Automatically — through cookies, web beacons, and similar tracking technologies when you access and use the phtaya365 platform;
• From third parties — including identity verification service providers, payment processors, fraud prevention services, and analytics providers, where permitted by applicable law;
• From publicly available sources — where relevant for fraud prevention, AML compliance, or responsible gaming purposes.

5. How We Use Your Personal Data

phtaya365 uses the personal data we collect for the following purposes:

Purpose	Data Used
Account registration and management	Registration data, identity data
Identity verification (KYC/AML compliance)	KYC data, financial data
Processing deposits and withdrawals	Financial data, identity data
Providing gaming services	Gaming data, technical data
Fraud prevention and security	All categories as relevant
Responsible gaming monitoring	Gaming data, communications data
Customer support	Communications data, account data
Marketing communications (with consent)	Contact data, preferences data
Platform improvement and analytics	Technical data, gaming data (anonymized)
Legal and regulatory compliance	All categories as required by law

6. Legal Basis for Processing

phtaya365 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contract with you (i.e., to provide the phtaya365 gaming services you have registered for);
• Legal obligation — processing required to comply with applicable laws and regulations, including AML/KYC requirements and PAGCOR regulatory obligations;
• Legitimate interests — processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests are not overridden by your rights;
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Sharing Your Personal Data

7.1 phtaya365 does not sell, rent, or trade your personal data to third parties for their own commercial purposes.

7.2 We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors and financial institutions — GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your transactions;
• Identity verification providers — third-party KYC and AML service providers engaged to verify your identity and comply with regulatory requirements;
• Game providers and technology partners — software providers whose games are available on the phtaya365 platform, to the extent necessary to provide gaming services;
• Fraud prevention and security services — providers of fraud detection, cybersecurity, and risk management services;
• Analytics providers — providers of platform analytics services, using anonymized or aggregated data where possible;
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent authorities, where required by law or court order.

7.3 All third-party service providers engaged by phtaya365 are required to process personal data only in accordance with our instructions and applicable data protection laws, and to implement appropriate technical and organizational security measures.

8. Cookies and Tracking Technologies

8.1 phtaya365 uses cookies and similar tracking technologies to enhance your experience on the platform, to analyze platform usage, and to support security and fraud prevention functions.

8.2 We use the following categories of cookies:

• Strictly necessary cookies — essential for the operation of the platform, including session management and security functions. These cannot be disabled.
• Functional cookies — remember your preferences and settings to provide a more personalized experience.
• Analytics cookies — collect anonymized information about how you use the platform to help us improve it.
• Marketing cookies — used to deliver relevant promotional content. These are only set with your consent.

8.3 You can manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the phtaya365 platform.

9. Data Retention

9.1 phtaya365 retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC data — retained for a minimum of five (5) years following account closure, in accordance with AML regulations and PAGCOR requirements;
• Transaction records — retained for a minimum of five (5) years from the date of the transaction;
• Gaming records — retained for a minimum of three (3) years;
• Customer support communications — retained for two (2) years from the date of the last interaction;
• Marketing consent records — retained for the duration of your account and for two (2) years following account closure or withdrawal of consent.

9.2 Where personal data is no longer required for any lawful purpose, phtaya365 will securely delete or anonymize it in accordance with our data disposal procedures.

10. Data Security

10.1 phtaya365 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phtaya365 platform;
• AES-256 encryption for sensitive data stored in our systems;
• Multi-factor authentication options for account access;
• Regular security audits and penetration testing by independent security professionals;
• Strict access controls limiting employee access to personal data on a need-to-know basis;
• Comprehensive staff training on data protection and information security;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

10.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phtaya365 will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of the Philippine Data Privacy Act of 2012.

10.3 While phtaya365 takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for maintaining the security of your phtaya365 login credentials and for notifying us immediately of any suspected unauthorized access to your account.

11. Your Data Privacy Rights

11.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phtaya365:

• Right to be informed — the right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy;
• Right of access — the right to request a copy of the personal data phtaya365 holds about you;
• Right to rectification — the right to request correction of any inaccurate or incomplete personal data;
• Right to erasure — the right to request deletion of your personal data, subject to our legal obligations to retain certain data;
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation;
• Right to data portability — the right to receive your personal data in a structured, commonly used, and machine-readable format;
• Right to lodge a complaint — the right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

11.2 To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided in Section 15. phtaya365 will respond to all data subject requests within thirty (30) days of receipt, in accordance with applicable law.

11.3 Please note that certain rights are subject to limitations. For example, we may be unable to delete data that we are legally required to retain for AML or regulatory compliance purposes.

12. Children's Privacy

12.1 The phtaya365 platform is strictly intended for adults aged twenty-one (21) years and above, in accordance with Philippine law. phtaya365 does not knowingly collect personal data from individuals under the age of 21.

12.2 If phtaya365 becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete such data and close the associated account. Any winnings accrued by an underage user will be forfeited.

12.3 If you believe that a minor has registered on the phtaya365 platform, please contact us immediately at the details provided in Section 15.

13. International Data Transfers

13.1 phtaya365 primarily processes personal data within the Republic of the Philippines. However, some of our third-party service providers — including game software providers, cloud infrastructure providers, and analytics services — may process data in other jurisdictions.

13.2 Where personal data is transferred outside the Philippines, phtaya365 ensures that appropriate safeguards are in place to protect your data, including contractual clauses that require recipients to provide a level of data protection equivalent to that required under Philippine law.

13.3 By using the phtaya365 platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside the Philippines where necessary for the provision of our services, subject to the safeguards described above.

14. Changes to This Privacy Policy

14.1 phtaya365 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

14.2 Where changes are material, phtaya365 will notify registered Players via email or a prominent notice on the platform prior to the changes taking effect. Your continued use of the phtaya365 platform following notification of any changes constitutes your acceptance of the revised Privacy Policy.

14.3 We encourage you to review this Privacy Policy periodically to stay informed of how phtaya365 is protecting your personal data.

15. Contact Us & Data Protection Officer

15.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by phtaya365, please contact our Data Protection Officer:

15.2 You also have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC) if you believe that phtaya365 has not handled your personal data in accordance with applicable law. Information about the NPC and how to file a complaint is available on the NPC's official website.