phtyaa Casino Privacy Policy

1. Introduction

1.1 phtyaa ("phtyaa," "we," "us," "our") operates the online gaming platform accessible at https://phtyaa.com. We are committed to protecting the privacy and personal data of every player who uses our platform.

1.2 This Privacy Policy ("Policy") describes how phtyaa collects, uses, stores, shares, and protects personal data in connection with your use of the phtyaa platform, including our website, mobile interface, live chat, and any associated services.

1.3 This Policy is issued in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the requirements of the National Privacy Commission (NPC). It also reflects phtyaa's obligations under PAGCOR's regulatory framework for licensed online gaming operators.

1.4 By registering a phtyaa account or using any part of our platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please do not use phtyaa.

2. Data Controller

2.1 For the purposes of the Philippine Data Privacy Act of 2012, phtyaa is the personal information controller responsible for your personal data collected through the phtyaa platform.

2.2 phtyaa has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data privacy laws. You may contact our DPO at any time using the contact details provided in Section 14 of this Policy.

2.3 phtyaa operates under a valid PAGCOR license. Our data processing activities are subject to PAGCOR's oversight in addition to the requirements of the National Privacy Commission.

3. Information We Collect

phtyaa collects personal data through several channels. The categories of data we collect are described below:

3.1 Registration Data

When you create a phtyaa account, we collect: full name, date of birth, gender, nationality, residential address (including city, province, and postal code), email address, and mobile number. This information is required to create and manage your account.

3.2 Identity Verification (KYC) Data

As required by PAGCOR and the Anti-Money Laundering Act, phtyaa conducts Know Your Customer (KYC) verification. This requires you to submit copies of government-issued identification documents (such as a Philippine passport, SSS ID, UMID, driver's license, or PhilSys national ID), proof of address, and in some cases, source of funds documentation.

3.3 Financial Data

phtyaa collects information about your deposits, withdrawals, and transaction history on the platform. We also collect payment method identifiers (such as your GCash mobile number or bank account details) to process transactions. phtyaa does not store full credit or debit card numbers.

3.4 Gaming Activity Data

We collect records of your gaming activity on phtyaa, including games played, wagers placed, outcomes, session durations, and bonus usage. This data is used for account management, responsible gaming monitoring, and regulatory reporting.

3.5 Technical & Device Data

When you access phtyaa, we automatically collect technical data including your IP address, device type, operating system, browser type and version, screen resolution, and referring URL. This data is used for security monitoring, fraud prevention, and platform optimization.

3.6 Communications Data

If you contact phtyaa's support team via live chat or email, we retain records of those communications for quality assurance, dispute resolution, and regulatory compliance purposes.

4. How We Use Your Data

phtyaa uses your personal data for the following purposes:

• Account Management: To create, maintain, and manage your phtyaa account, including processing deposits and withdrawals, applying bonuses, and maintaining your gaming history.
• Identity Verification: To verify your identity and age (21+) as required by PAGCOR and Philippine law, and to conduct ongoing KYC checks as required by the Anti-Money Laundering Act.
• Regulatory Compliance: To fulfill phtyaa's obligations under PAGCOR's licensing requirements, the Anti-Money Laundering Act, and other applicable Philippine laws and regulations.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other security threats to the phtyaa platform.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to comply with PAGCOR's responsible gaming requirements.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance through phtyaa's 24/7 support channels.
• Platform Improvement: To analyze usage patterns, identify technical issues, and improve the performance, security, and user experience of the phtyaa platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.

5. Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phtyaa processes your personal data on the following legal bases:

• Contractual Necessity: Processing necessary to perform our contract with you (i.e., to operate your phtyaa account and provide gaming services).
• Legal Obligation: Processing required to comply with PAGCOR's licensing requirements, the Anti-Money Laundering Act, and other applicable Philippine laws.
• Legitimate Interests: Processing necessary for phtyaa's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing based on your freely given, specific, and informed consent, particularly for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing & Disclosure

6.1 phtyaa does not sell, rent, or trade your personal data to third parties for their own marketing purposes.

6.2 phtyaa may share your personal data with the following categories of recipients:

• PAGCOR: As phtyaa's regulatory authority, PAGCOR may require access to player data for audit, compliance, and enforcement purposes. phtyaa is legally obligated to cooperate with such requests.
• Anti-Money Laundering Council (AMLC): phtyaa is required to report suspicious transactions and provide player data to the AMLC under the Anti-Money Laundering Act of 2001 and its amendments.
• Payment Processors: phtyaa shares necessary financial data with payment service providers (including GCash, PayMaya, BPI, BDO, and Metrobank) to process your deposits and withdrawals.
• KYC / Identity Verification Providers: phtyaa uses third-party identity verification services to conduct KYC checks. These providers process your identity documents under strict data processing agreements.
• Technology Service Providers: phtyaa works with technology partners who provide hosting, security, analytics, and customer support infrastructure. These partners process data only on phtyaa's instructions and under binding data processing agreements.
• Law Enforcement & Courts: phtyaa may disclose personal data to Philippine law enforcement agencies or courts where required by law, court order, or to protect the rights and safety of phtyaa, its players, or the public.

7. Cookies & Tracking Technologies

7.1 phtyaa uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device that help us recognize you, maintain your session, and analyze platform usage.

7.2 phtyaa uses the following categories of cookies:

• Essential Cookies: Required for the platform to function. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled.
• Analytics Cookies: Used to understand how players use phtyaa, which pages are most visited, and where technical issues occur. This data is aggregated and anonymized.
• Preference Cookies: Used to remember your platform settings, such as language preferences and display options.
• Marketing Cookies: Used to deliver relevant promotional content. These are only set with your consent.

7.3 You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using phtyaa, but may affect some platform features.

8. Data Retention

8.1 phtyaa retains your personal data for as long as necessary to fulfill the purposes described in this Policy, subject to the following minimum retention periods required by Philippine law:

• Account and KYC Data: Retained for a minimum of five (5) years from the date of account closure, as required by PAGCOR and the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each gaming session.
• Support Communications: Retained for a minimum of two (2) years from the date of each interaction.

8.2 When personal data is no longer required for any lawful purpose, phtyaa will securely delete or anonymize it in accordance with industry-standard data destruction practices.

9. Data Security

9.1 phtyaa implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and phtyaa's servers is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal data, including identity documents and financial information, is stored in encrypted form on phtyaa's secure servers.
• Access Controls: Access to personal data is restricted to phtyaa staff and authorized service providers who require it to perform their duties. All access is logged and audited.
• Two-Factor Authentication: phtyaa offers two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
• Regular Security Audits: phtyaa conducts regular security assessments and penetration testing to identify and address vulnerabilities in our platform.
• Incident Response: phtyaa maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, phtyaa will notify the National Privacy Commission and affected players within the timeframes required by law.

10. Your Rights Under the Data Privacy Act

10.1 As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtyaa:

• Right to Be Informed: You have the right to be informed about how phtyaa collects and processes your personal data, as described in this Policy.
• Right of Access: You have the right to request a copy of the personal data phtyaa holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data phtyaa holds about you.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phtyaa's legal retention obligations.
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests where you have grounds relating to your particular situation.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe phtyaa has processed your personal data in violation of the Data Privacy Act.

10.2 To exercise any of these rights, please contact phtyaa's Data Protection Officer using the contact details in Section 14. phtyaa will respond to all valid requests within thirty (30) days. We may need to verify your identity before processing your request.

11. Children & Minors

11.1 phtyaa's services are strictly intended for persons aged twenty-one (21) years and above. phtyaa does not knowingly collect personal data from persons under the age of 21.

11.2 If phtyaa discovers that personal data has been collected from a person under 21, we will immediately close the associated account, forfeit any balance in accordance with PAGCOR regulations, and securely delete the personal data of the underage individual.

11.3 If you believe that phtyaa has inadvertently collected personal data from a person under 21, please contact us immediately using the details in Section 14 so that we can take prompt corrective action.

12. Third-Party Services

12.1 The phtyaa platform integrates with third-party services including payment processors (GCash, PayMaya, BPI, BDO, Metrobank), game providers, and identity verification services. When you interact with these services, their own privacy policies apply to the data they collect directly.

12.2 phtyaa is not responsible for the privacy practices of third-party service providers beyond the data processing agreements we maintain with them. We encourage you to review the privacy policies of any third-party services you use in connection with phtyaa.

12.3 phtyaa does not include third-party advertising networks or social media tracking pixels on our platform. Your gaming activity on phtyaa is not shared with social media platforms for advertising purposes.

13. Changes to This Privacy Policy

13.1 phtyaa reserves the right to update this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR's regulatory requirements. The updated effective date will be displayed at the top of this page.

13.2 Where changes are material, phtyaa will notify registered players via email or in-platform notification at least fourteen (14) days before the changes take effect. Your continued use of phtyaa after the effective date of any amendment constitutes acceptance of the revised Policy.

13.3 We encourage you to review this Policy periodically to stay informed about how phtyaa protects your personal data.

14. Contact & Complaints

14.1 If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or have a complaint about phtyaa's data processing practices, please contact our Data Protection Officer:

• Live Chat: Available 24/7 on every page of the phtyaa platform — the fastest way to reach us.
• Email: [email protected]

14.2 phtyaa will acknowledge all privacy-related inquiries within twenty-four (24) hours and aim to resolve them within thirty (30) days. Complex requests involving data access or erasure may take longer; we will keep you informed of progress.

14.3 If you are not satisfied with phtyaa's response to your privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph.