Privacy Policy

1. Introduction

1.1 phtaya5 ("we", "us", "our") is the operator of the online gaming platform accessible at phtaya5.org. We are committed to protecting the privacy and personal data of all players and visitors who interact with the phtaya5 Platform.

1.2 This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal data. It has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

1.3 For the purposes of this Policy, "personal data" means any information that identifies or could reasonably be used to identify you as an individual, including your name, contact details, financial information, and device identifiers.

2. Data We Collect

2.1 phtaya5 collects personal data in the following categories:

Registration Data

• Full name as it appears on a government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Email address and mobile number
• Residential address
• Username and encrypted password

Identity Verification Data (KYC)

• Government-issued photo ID (e.g., Philippine passport, SSS ID, PhilSys national ID, driver's licence)
• Proof of address documentation
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account)

Financial Data

• Deposit and withdrawal transaction records
• Payment method identifiers (e.g., GCash mobile number, bank account last four digits)
• Account balance history

Usage and Technical Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, games played, session duration, and click patterns
• Login timestamps and session logs

Communications Data

• Records of communications with phtaya5 customer support
• Feedback, survey responses, and promotional opt-in preferences

2.2 phtaya5 does not collect sensitive personal data such as biometric data, health information, or political opinions unless specifically required by law or regulatory obligation.

3. How We Use Your Data

3.1 phtaya5 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your phtaya5 player account, including processing deposits, withdrawals, and game participation.
• Identity Verification: To verify your identity and age (21+) in compliance with anti-money laundering (AML) regulations and PAGCOR-aligned responsible gaming standards.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• Customer Support: To respond to your queries, complaints, and support requests in a timely and effective manner.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Regulatory Compliance: To fulfil our obligations under applicable Philippine law, including reporting requirements to relevant regulatory authorities.
• Platform Improvement: To analyse usage patterns and improve the performance, design, and game selection of the phtaya5 Platform.
• Responsible Gaming: To monitor gaming behaviour and identify players who may benefit from responsible gaming tools or intervention.
• Marketing Communications: To send you promotional offers, bonuses, and platform updates where you have opted in to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

4.1 phtaya5 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and phtaya5 — specifically, to operate your player account and provide gaming services.
• Legal Obligation: Processing is required to comply with applicable laws, including AML regulations, tax reporting obligations, and regulatory requirements.
• Legitimate Interests: Processing is necessary for phtaya5's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.

5. Data Sharing and Disclosure

5.1 phtaya5 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers require certain data to process your transactions securely.
• Game Providers: Third-party game providers integrated into the phtaya5 Platform may receive limited technical data (such as session tokens) necessary to deliver their games.
• Identity Verification Services: Third-party KYC providers may process your identity documents to assist with age and identity verification.
• Regulatory Authorities: phtaya5 may be required to disclose player data to the National Privacy Commission, law enforcement agencies, or other regulatory bodies where required by law or court order.
• IT and Security Service Providers: Trusted technology partners who assist with platform hosting, security monitoring, and fraud detection, subject to strict data processing agreements.

5.2 All third parties with whom phtaya5 shares personal data are required to handle that data in accordance with applicable privacy laws and are prohibited from using it for any purpose other than the specific service they provide to phtaya5.

6. Cookies and Tracking Technologies

6.1 phtaya5 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognise you, remember your preferences, and understand how you use the Platform.

6.2 phtaya5 uses the following categories of cookies:

• Essential Cookies: Required for the Platform to function correctly. These include session cookies that keep you logged in to your phtaya5 account. These cannot be disabled.
• Performance Cookies: Collect anonymised data about how players use the Platform, helping us identify areas for improvement. No personally identifiable information is collected by these cookies.
• Functional Cookies: Remember your preferences such as language settings and game display options to personalise your phtaya5 experience.
• Security Cookies: Used to detect and prevent fraudulent activity, including session hijacking and account takeover attempts.

6.3 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phtaya5 Platform.

7. Data Security

7.1 phtaya5 implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phtaya5 Platform
• AES-256 encryption for sensitive data stored in our databases
• Multi-factor authentication options for player accounts
• Regular security audits and penetration testing
• Strict access controls limiting data access to authorised personnel only
• Continuous monitoring for suspicious activity and potential data breaches

7.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phtaya5 will notify the National Privacy Commission and affected players in accordance with the requirements of the Philippine Data Privacy Act.

7.3 While phtaya5 takes all reasonable steps to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your phtaya5 account credentials.

8. Data Retention

8.1 phtaya5 retains personal data for as long as necessary to fulfil the purposes described in this Privacy Policy, or as required by applicable law. Specific retention periods include:

• Account Data: Retained for the duration of your active phtaya5 account, plus a minimum of five (5) years following account closure, as required by AML regulations.
• Transaction Records: Retained for a minimum of five ( 5) years in compliance with Philippine tax and AML requirements.
• KYC Documents: Retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Support Communications: Retained for three (3) years from the date of the communication.
• Marketing Preferences: Retained until you withdraw consent or request deletion.

8.2 Upon expiry of the applicable retention period, phtaya5 will securely delete or anonymise your personal data so that it can no longer be associated with you.

9. Your Rights

9.1 Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtaya5:

• Right to be Informed: You have the right to know what personal data phtaya5 collects about you and how it is used — which is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data phtaya5 holds about you at any time.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data rights have been violated.

9.2 To exercise any of the above rights, please contact phtaya5 at [email protected]. We will respond to all verified data requests within thirty (30) days of receipt.

10. Children's Privacy

10.1 The phtaya5 Platform is strictly intended for adults aged 21 years and above. phtaya5 does not knowingly collect personal data from individuals under the age of 21.

10.2 If phtaya5 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on phtaya5, please contact us immediately at [email protected].

11. International Data Transfers

11.1 phtaya5 primarily processes and stores personal data within the Philippines. Where data is transferred to service providers located outside the Philippines — for example, cloud infrastructure providers or international game studios — phtaya5 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law.

11.2 Such safeguards may include contractual data processing agreements, standard contractual clauses, or transfers to jurisdictions recognised as providing adequate data protection. phtaya5 will not transfer your personal data internationally without a lawful basis for doing so.

12. Updates to This Privacy Policy

12.1 phtaya5 reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. The "Last Updated" date at the top of this page will be revised accordingly.

12.2 Where changes are material, phtaya5 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of the phtaya5 Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy.

12.3 We encourage you to review this Privacy Policy periodically to stay informed about how phtaya5 protects your personal data.

13. Contact Us

13.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by phtaya5, please contact our Data Protection team:

13.2 You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you are not satisfied with our response to your data request or concern.