phtya Privacy Policy

1. Introduction

phtya is a PAGCOR-licensed online casino and sports betting platform serving users in the Philippines. As part of operating a licensed gaming platform, phtya is required to collect and process personal information to verify user identities, process financial transactions, comply with anti-money laundering (AML) obligations, and fulfil its regulatory duties to PAGCOR.

phtya is committed to handling personal data responsibly and transparently. This Policy tells you exactly what data we collect, why we collect it, how long we keep it, and what rights you have over it. If anything in this Policy is unclear, please contact our Data Protection Officer at [email protected] before using the Platform.

2. Data Controller

The data controller responsible for personal information processed through the phtya platform is phtya, operating under a PAGCOR license and registered under Philippine law. For all data privacy inquiries, including requests to exercise your rights under RA 10173, contact:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Data Privacy Request — [Your Username]"
• Response time: Within 15 business days as required by NPC guidelines

3. Personal Data We Collect

phtya collects the following categories of personal data:

• Identity Data: Full legal name, date of birth, nationality, and government-issued ID details (e.g., PhilSys ID number, UMID, passport number, or driver's license number). This data is required for age verification and KYC compliance under PAGCOR regulations.
• Contact Data: Email address, Philippine mobile number, and residential address. Used for account communication, transaction verification, and support.
• Financial Data: Payment method details (e.g., GCash mobile number, PayMaya account reference, BPI/BDO account name), transaction history, deposit and withdrawal records. Card numbers are processed by our payment provider and are not stored by phtya directly.
• Account Data: Username, encrypted password, account preferences, session logs, login timestamps, and IP addresses.
• Gaming Data: Game participation history, betting patterns, wager amounts, winnings, and bonus utilisation records. Maintained for regulatory compliance and responsible gaming monitoring.
• Technical Data: Device type, browser type, operating system, screen resolution, referring URL, and mobile network carrier (Globe, Smart, DITO, etc.). Collected automatically when you access phtya.
• Communications Data: Records of your correspondence with phtya support, including live chat transcripts and support emails.

4. How We Collect Your Data

phtya collects personal data through the following means:

• Direct submission: Data you provide during account registration, identity verification, deposit/withdrawal requests, or support communications.
• Automated collection: Technical and usage data collected automatically via cookies, server logs, and analytics tools when you access or use the phtya Platform.
• Third-party sources: Identity verification data from government-issued documents you submit; payment data from payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa/Mastercard networks); fraud prevention data from licensed screening providers.

5. Lawful Basis for Processing

phtya processes your personal data on the following lawful bases under RA 10173:

• Contractual necessity: Processing required to create and maintain your phtya account and to deliver the gaming services you have requested.
• Legal obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws and regulations.
• Legitimate interests: Processing necessary to prevent fraud, maintain platform security, and improve phtya services — where these interests are not overridden by your rights.
• Consent: Where processing is not required by law or contract, phtya will obtain your consent — for example, for optional marketing communications. You may withdraw consent at any time by contacting [email protected].

6. How We Use Your Personal Data

phtya uses the personal data we collect for the following purposes:

• To register and maintain your phtya account, including age and identity verification.
• To process deposits and withdrawals through your registered payment methods (GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard).
• To provide gaming services — including slots, live casino, sports betting, bingo, and Dragon Gate — and to maintain accurate records of your gaming activity.
• To fulfil PAGCOR licensing obligations, including KYC verification, transaction monitoring, and responsible gaming programme administration.
• To comply with the Anti-Money Laundering Act (Republic Act No. 9160, as amended) — including transaction monitoring, suspicious activity reporting, and record retention.
• To detect and prevent fraud, cheating, and abuse of the phtya Platform.
• To provide customer support and respond to your queries.
• To send you service communications — including account activity notifications, security alerts, and responsible gaming reminders.
• To send you promotional communications about phtya offers and bonuses — only where you have opted in to receive such communications.
• To improve the phtya Platform through aggregated analytics and user experience testing.

7. Data Sharing and Disclosure

phtya does not sell, rent, or trade your personal data. We may disclose your personal information to the following categories of recipients, strictly as necessary:

• PAGCOR and Philippine regulatory authorities: As required by our PAGCOR license and applicable Philippine law, including mandatory reporting under AMLA.
• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and card networks (Visa/Mastercard) — to process your financial transactions. These providers operate under their own privacy policies and applicable Philippine financial regulation.
• Identity verification providers: Licensed KYC and document verification services engaged by phtya to verify government-issued ID documents. Data is processed under contract and NPC-compliant data processing agreements.
• Game software providers: Where game providers require session tokens or anonymised technical data to deliver game content to your device. No directly identifying personal data is shared with game providers without your knowledge.
• Law enforcement and courts: Where phtya is legally compelled to disclose personal data pursuant to a valid court order, subpoena, or other legal process under Philippine law.

Any third party with whom phtya shares personal data is required to handle that data in accordance with RA 10173 and under a contractual data processing agreement.

8. Cookies and Tracking Technologies

phtya uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small data files stored on your device when you visit phtya.vip. We use the following categories of cookies:

• Strictly necessary cookies: Required for the Platform to function — including session management, login state, and security tokens. These cannot be disabled without breaking core platform functionality.
• Performance cookies: Anonymised data used to understand how users interact with phtya — including page load times, error rates, and navigation patterns. Used to improve platform performance.
• Functional cookies: Store your preferences — such as language settings and game lobby view preferences — to personalise your phtya experience.

You can manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use phtya.

9. Data Retention

phtya retains personal data for as long as is necessary to fulfil the purposes set out in this Policy, unless a longer retention period is required or permitted by Philippine law. Specific retention periods include:

• Account and identity data: Retained for the duration of your phtya account and for a minimum of five (5) years after account closure, in compliance with AMLA record-keeping requirements.
• Financial transaction data: Retained for a minimum of five (5) years as required under AMLA and PAGCOR licensing conditions.
• Gaming activity data: Retained for a minimum of three (3) years after the relevant gaming session, for regulatory audit purposes.
• Support communications: Retained for two (2) years after the resolution of the relevant support case.

10. Data Security

phtya implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and phtya's servers.
• AES-256 encryption for sensitive data stored in phtya's databases.
• Role-based access controls limiting phtya personnel access to personal data on a strict need-to-know basis.
• Regular security assessments and penetration testing of the phtya Platform and infrastructure.
• Two-factor authentication available for all phtya user accounts.

No security system is impenetrable. In the event of a personal data breach that poses a real risk to your rights and freedoms, phtya will notify the National Privacy Commission and affected users within the timeframes mandated by RA 10173 and NPC Circular No. 16-03.

11. Your Rights Under RA 10173

As a data subject under Philippine law, you have the following rights with respect to your personal data held by phtya:

• Right to be Informed: The right to know what personal data phtya holds about you and how it is being processed — as set out in this Policy.
• Right to Access: The right to request a copy of the personal data phtya holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data, subject to phtya's legal obligations to retain data under AMLA and PAGCOR requirements.
• Right to Object: The right to object to processing of your personal data, including for direct marketing purposes.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe phtya has breached your data privacy rights.

To exercise any of these rights, contact phtya at [email protected] with the subject "Data Privacy Request — [Your Username]." phtya will respond within fifteen (15) business days of receipt of a valid request.

12. International Data Transfers

Where phtya transfers personal data to service providers located outside the Philippines — for example, to international game software providers or cloud infrastructure providers — such transfers are conducted only where appropriate safeguards are in place, including contractual clauses that provide data protection standards equivalent to those required under RA 10173 and NPC regulations. phtya will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without your explicit consent, except where required by law.

13. Children's Privacy

The phtya Platform is strictly for users aged 21 years of age and older in compliance with Philippine law and PAGCOR regulations. phtya does not knowingly collect personal data from persons under the age of 21. If phtya becomes aware that a person under the required age has registered an account or provided personal data, the account will be immediately closed and all associated personal data will be deleted in accordance with this Policy, except to the extent required to be retained under applicable law.

14. Changes to This Privacy Policy

phtya reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered users via the email address associated with their phtya account at least seven (7) days before the amended Policy takes effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Continued use of the phtya Platform after the effective date of any amendment constitutes acceptance of the revised Policy. We encourage you to review this Policy periodically.

15. Contact and Data Protection Officer

If you have questions, concerns, or requests relating to this Privacy Policy or phtya's data practices, or if you wish to exercise any of your rights under RA 10173, please contact phtya's Data Protection Officer:

• Email: [email protected] (plain text — not a clickable link)
• Subject line: "Data Privacy — [Nature of Request]"
• Support Hours: 8:00 AM – 11:00 PM PHT, Daily

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you believe your data privacy rights have been violated. NPC contact details are available on the official NPC website.