pphtaya Privacy Policy

Introduction

pphtaya is committed to protecting the privacy and personal data of every player who uses our platform. We understand that when you share your personal information with us, you are placing trust in pphtaya to handle that information responsibly, transparently, and in accordance with applicable law.

This Policy applies to all personal data collected by pphtaya through the pphtaya website, mobile applications, customer support channels, and any other services operated under the pphtaya brand. It applies to all registered players, prospective players, and visitors to the pphtaya platform, regardless of whether they are located in Metro Manila, Cebu, Davao, or anywhere else in the Philippines.

pphtaya processes personal data in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines and its Implementing Rules and Regulations, as well as any other applicable data protection legislation. The National Privacy Commission of the Philippines is the relevant supervisory authority for data protection matters in the Philippines.

Personal Data We Collect

pphtaya collects the following categories of personal data from players and platform users:

• Identity Data: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (e.g., Philippine passport, SSS, UMID, or driver's license number) collected for account registration and KYC verification purposes.
• Contact Data: Email address, mobile phone number, and residential address (including barangay, city, and province) used to communicate with you and verify your identity.
• Financial Data: Payment method details including GCash account references, PayMaya account references, bank account details (BPI, BDO, Metrobank), and card details (Visa, Mastercard) used to process deposits and withdrawals. pphtaya does not store full card numbers; payment processing is handled by certified payment processors.
• Transaction Data: Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance history on the pphtaya platform.
• Technical Data: IP address, device type, browser type and version, operating system, time zone, and other technical identifiers collected automatically when you access the pphtaya platform.
• Usage Data: Information about how you use the pphtaya platform, including pages visited, games played, session duration, click patterns, and feature interactions.
• Communications Data: Records of your communications with pphtaya customer support, including chat transcripts, email correspondence, and call recordings where applicable.
• Responsible Gaming Data: Information related to your use of responsible gaming tools, including deposit limits set, self-exclusion requests, and cooling-off periods, maintained to protect your wellbeing and comply with regulatory obligations.

How We Collect Your Data

pphtaya collects personal data through the following means:

• Direct interactions: Data you provide when registering a pphtaya account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically through cookies, web beacons, server logs, and similar tracking technologies when you access the pphtaya platform.
• Third-party sources: Identity verification data from KYC service providers, fraud prevention data from security partners, and payment verification data from payment processors. pphtaya only receives data from third parties where legally permitted and where necessary for the purposes described in this Policy.

How We Use Your Personal Data

pphtaya uses the personal data we collect for the following purposes:

• To create, verify, and manage your pphtaya account, including identity verification and age verification (21+ requirement).
• To process deposits, withdrawals, and other financial transactions on the pphtaya platform.
• To provide customer support and respond to your inquiries, complaints, and requests.
• To comply with our legal and regulatory obligations, including anti-money laundering (AML) checks, Know Your Customer (KYC) requirements, and reporting obligations to applicable Philippine gaming and financial authorities .
• To detect, investigate, and prevent fraud, cheating, money laundering, and other prohibited activities on the pphtaya platform.
• To personalize your pphtaya experience, including recommending games and promotions that may be relevant to your preferences.
• To send you service-related communications, such as account notifications, transaction confirmations, and security alerts.
• To send you marketing communications about pphtaya promotions, bonuses, and new features, where you have opted in to receive such communications.
• To monitor and improve the performance, security, and functionality of the pphtaya platform.
• To administer responsible gaming tools and fulfill our obligations to protect vulnerable players.
• To enforce the pphtaya Terms & Conditions and resolve any disputes that may arise.

Legal Basis for Processing

pphtaya processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable Philippine law:

• Contractual necessity: Processing required to perform our contract with you, including operating your pphtaya account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with applicable laws and regulations, including AML obligations, KYC requirements, age verification, and regulatory reporting.
• Legitimate interests: Processing carried out for pphtaya's legitimate business interests, including fraud prevention, platform security, and improving our services, where such interests are not overridden by your data protection rights.
• Consent: Processing based on your freely given, specific, and informed consent, including the sending of marketing communications. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

Data Sharing & Disclosure

pphtaya does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, Mastercard, and other payment service providers used to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Fraud prevention and security partners: Service providers that assist pphtaya in detecting and preventing fraud, money laundering, and other prohibited activities.
• Technology and infrastructure providers: Cloud hosting, data storage, and platform technology providers who process data on pphtaya's behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: Philippine gaming regulators, the National Privacy Commission, financial intelligence units, law enforcement agencies, and courts, where pphtaya is legally required or permitted to disclose your data.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by pphtaya in connection with the operation of its business, subject to professional confidentiality obligations.

Where pphtaya engages third-party service providers to process personal data on its behalf, pphtaya ensures that appropriate data processing agreements are in place and that such providers implement adequate technical and organizational security measures.

Data Retention

pphtaya retains your personal data for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

As a general principle, pphtaya retains account and transaction data for a minimum of five (5) years following the closure of your pphtaya account, in accordance with applicable Philippine anti-money laundering and gaming regulatory requirements. Certain categories of data may be retained for longer periods where required by law or where necessary to resolve disputes or enforce agreements.

When personal data is no longer required for any lawful purpose, pphtaya will securely delete or anonymize it in accordance with our internal data retention and disposal procedures.

Cookies & Tracking Technologies

pphtaya uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the pphtaya platform. Cookies are small text files placed on your device that help us recognize you, remember your preferences, and understand how you use our platform.

pphtaya uses the following categories of cookies:

• Strictly necessary cookies: Essential for the operation of the pphtaya platform, including maintaining your login session and enabling core platform functionality. These cookies cannot be disabled.
• Performance and analytics cookies: Used to collect information about how players use the pphtaya platform, such as which pages are visited most frequently and whether error messages are received. This data is used in aggregate form to improve platform performance.
• Functionality cookies: Used to remember your preferences and settings on the pphtaya platform, such as your preferred language and display settings.
• Targeting and marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of pphtaya marketing campaigns. These cookies are only placed where you have provided your consent.

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the pphtaya platform. For strictly necessary cookies, your consent is not required as they are essential to the operation of the service.

Data Security

pphtaya takes the security of your personal data seriously and implements appropriate technical and organizational measures to protect your information against unauthorized access, accidental loss, destruction, or disclosure. Our security measures include, but are not limited to:

• Encryption of data in transit using Transport Layer Security (TLS) protocols.
• Encryption of sensitive data at rest using industry-standard encryption algorithms.
• Access controls and authentication measures limiting access to personal data to authorized pphtaya personnel on a strict need-to-know basis.
• Regular security assessments, vulnerability testing, and penetration testing of the pphtaya platform.
• Incident response procedures to detect, report, and address personal data breaches promptly.

While pphtaya takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. pphtaya cannot guarantee the absolute security of your data. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pphtaya will notify you and the National Privacy Commission in accordance with applicable legal requirements.

Your Data Protection Rights

Under the Data Privacy Act of 2012 and applicable Philippine law, you have the following rights in relation to your personal data held by pphtaya:

• Right to be informed: The right to be informed about how pphtaya collects and uses your personal data, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data pphtaya holds about you, along with information about how it is being processed.
• Right to rectification: The right to request that pphtaya correct any inaccurate or incomplete personal data held about you.
• Right to erasure: The right to request that pphtaya delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to pphtaya's legal retention obligations.
• Right to object: The right to object to pphtaya's processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to withdraw consent: Where pphtaya processes your data on the basis of consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the pphtaya support team using the contact details provided in Section 13 of this Policy. pphtaya will respond to all valid data subject requests within the timeframes required by applicable law. Please note that certain rights may be subject to limitations where pphtaya has overriding legal obligations or legitimate interests that take precedence.

If you are not satisfied with pphtaya's response to a data protection request or complaint, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

Children's Privacy

The pphtaya platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. pphtaya does not knowingly collect personal data from individuals under the age of 21.

If pphtaya becomes aware that personal data has been collected from a person under the age of 21, pphtaya will take immediate steps to delete that data and close the associated account. Any winnings accrued by an underage user will be forfeited in accordance with the pphtaya Terms & Conditions.

If you believe that pphtaya may have inadvertently collected personal data from a person under the age of 21, please contact our support team immediately so that we can investigate and take appropriate action.

Updates to This Privacy Policy

pphtaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made to this Policy, pphtaya will notify registered players by posting a prominent notice on the pphtaya platform and, where appropriate, by sending a notification to the email address registered on your account.

The date of the most recent revision to this Policy is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how pphtaya protects your personal data. Your continued use of the pphtaya platform following any update to this Policy constitutes your acknowledgment of the revised terms.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or pphtaya's data processing practices, please contact our Data Protection team. Our customer support is available 24 hours a day, 7 days a week.

Email (plain text – not a clickable link):

[email protected]

Email displayed as plain text only – not a clickable link.

For information on the rules governing your use of the pphtaya platform, please review our Terms & Conditions. For responsible gaming support and self-exclusion tools, please visit our Responsible Gaming page.