phtaya72 Privacy Policy

This Privacy Policy ("Policy") applies to all personal data processed by phtaya72 in connection with your use of the phtaya72 platform accessible at phtaya72.co, including all associated pages, features, services, and communication channels. It applies whether you are a registered player, an applicant in the process of registering, or a visitor accessing the platform without a registered account.

phtaya72 processes personal data in compliance with the Republic of the Philippines' Republic Act No. 10173 – Data Privacy Act of 2012 (DPA 2012) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). Our operations are also subject to PAGCOR's player data protection guidelines as a condition of our operating license.

By registering an account or using the phtaya72 platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how phtaya72 processes your personal data as described herein, you should discontinue use of the platform and contact support to request account closure and data deletion where applicable.

For the purposes of the Data Privacy Act of 2012, phtaya72 acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and platform users. As PIC, phtaya72 determines the purposes and means of processing personal data collected through the platform.

Where phtaya72 engages third-party service providers who process personal data on its behalf — such as payment processors and KYC verification services — those providers act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with phtaya72's instructions and applicable privacy law.

phtaya72 collects personal data in the following categories:

3.1 Account Registration Data

• Full legal name as it appears on a government-issued identification document;
• Date of birth (for age verification purposes — players must be 21 or older);
• Email address and/or Philippine mobile number (09XX format);
• Residential address in the Philippines;
• Account username and encrypted password credentials.

3.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (Philippine Passport, PhilSys National ID, Driver's License, UMID, SSS ID, Voter's ID, PRC ID);
• Proof of address documentation (utility bills, bank statements, or equivalent);
• Payment method verification details (GCash account information, bank account details);
• Selfie or liveness verification photograph where required for enhanced KYC.

3.3 Financial Transaction Data

• Deposit amounts, dates, methods, and source account references;
• Withdrawal requests, amounts, processing dates, and destination account references;
• Bonus credit records and wagering activity;
• Transaction history logs maintained for AML compliance purposes.

3.4 Gaming Activity Data

• Game sessions, bet amounts, game outcomes, and session duration records;
• Sports betting selections, odds, and stake amounts;
• Responsible gaming tool settings (deposit limits, loss limits, session limits).

3.5 Technical and Device Data

• IP address and approximate geolocation data derived from IP;
• Device type, operating system, and browser type;
• Session timestamps, login history, and access logs;
• Cookie and tracking technology data as described in Section 8.

3.6 Communications Data

• Live chat transcripts and customer support correspondence;
• Email and SMS communication records;
• Complaint, dispute, and feedback submissions.

phtaya72 collects personal data through the following means:

• Directly from you: When you register an account, complete KYC verification, make deposits or withdrawals, contact customer support, or respond to surveys or promotions;
• Automatically: Through cookies, server logs, and analytics technologies when you access and navigate the phtaya72 platform;
• From third parties: From payment processors such as GCash, PayMaya, BDO, BPI, Metrobank, and UnionBank in connection with financial transactions; from KYC verification service providers; and from fraud prevention and AML screening services where required by law;
• From regulatory bodies: Information may be received from or shared with PAGCOR and other competent Philippine authorities in the exercise of their regulatory functions.

Under the Data Privacy Act of 2012, phtaya72 relies on the following legal bases when processing your personal data:

phtaya72 uses the personal data it collects for the following purposes:

• To create, maintain, and manage your phtaya72 account and verify your identity;
• To process deposits, withdrawals, and all financial transactions on the platform;
• To verify that you meet the eligibility requirements to use the platform, including the 21+ age requirement mandated by PAGCOR;
• To detect and prevent fraud, money laundering, and other prohibited conduct;
• To operate, maintain, and improve the technical performance of the phtaya72 platform;
• To provide customer support, resolve disputes, and respond to inquiries;
• To administer bonuses, promotions, and loyalty programs where you are eligible;
• To fulfil PAGCOR reporting obligations and comply with applicable Philippine law;
• To send service-related communications including deposit confirmations, withdrawal notifications, and security alerts;
• To send marketing communications only where you have provided explicit consent and only through channels you have approved.

phtaya72 may share your personal data with third parties only in the following circumstances and for the purposes described:

• Payment processors and financial institutions: GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, and cryptocurrency exchange services — for the purpose of processing deposits and withdrawals. These providers handle your data under their own privacy policies and applicable Philippine banking regulations;
• KYC and identity verification providers: Third-party services engaged to verify government-issued identification documents and conduct liveness checks as required by PAGCOR's KYC standards;
• Fraud prevention and AML screening services: Industry-standard screening platforms used to detect and prevent money laundering, fraud, and other prohibited financial conduct, as required under Philippine AML law;
• Game software providers: JILI Games, Pragmatic Play, Evolution Gaming, PG Soft, and other certified studios may receive limited technical data necessary to operate their game services within the phtaya72 platform. These providers do not receive financial or KYC data;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities, where disclosure is required by law, regulatory order, or legitimate legal process;
• Professional advisers: Legal counsel, auditors, and accountants where disclosure is strictly necessary for the conduct of their professional services to phtaya72.

All third parties with whom phtaya72 shares personal data are subject to contractual data processing agreements requiring them to maintain appropriate security measures and to process data only as instructed by phtaya72, except where independent legal obligations require otherwise.

The phtaya72 platform uses cookies and similar tracking technologies to ensure the correct functioning of the platform, improve your experience, and support our security and analytics operations. A cookie is a small text file placed on your device when you access a website.

You may control non-essential cookies through your browser settings at any time. However, disabling strictly necessary or security cookies may impair the functionality of the phtaya72 platform, including login and game access. phtaya72 does not use cookies for third-party advertising purposes.

phtaya72 implements and maintains appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include, but are not limited to:

• 256-bit SSL/TLS encryption on all data transmitted between your device and phtaya72 servers — the same standard used by Philippine banks for online banking services;
• Encrypted password storage — passwords are never stored in plain text and are processed using industry-standard cryptographic hashing with salting;
• Two-Factor Authentication (2FA) available to all players to add an additional layer of protection to account access;
• Access controls — internal access to player personal data is restricted to authorized phtaya72 personnel with a legitimate operational need, governed by role-based access policies;
• Intrusion detection and monitoring systems — real-time monitoring of platform access for anomalous activity, with automated alerts and response protocols;
• Player fund segregation — player wallet balances are maintained in accounts separate from phtaya72's operating capital in accordance with PAGCOR requirements.

phtaya72 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR regulatory requirements. The following general retention periods apply:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phtaya72's data destruction procedures. Data that is anonymized — meaning it can no longer be linked to an identified individual — may be retained for statistical purposes beyond these periods.

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtaya72. These rights may be exercised by contacting our Data Protection Officer at [email protected]:

Certain third-party service providers engaged by phtaya72 — including game software studios and technical infrastructure providers — may be located or operate servers in jurisdictions outside the Philippines. Where personal data is transferred outside the Philippines, phtaya72 ensures that appropriate safeguards are in place as required by the Data Privacy Act of 2012 and NPC regulations, including:

• Entering into data processing agreements with overseas recipients that include data protection obligations equivalent to those required under Philippine law;
• Assessing whether the recipient jurisdiction provides an adequate level of data protection;
• Where required by NPC regulations, registering cross-border data sharing arrangements.

Players with questions about specific international data transfers may contact the phtaya72 Data Protection Officer for further information.

The phtaya72 platform is strictly for adults aged 21 years and older, as required by PAGCOR's operating conditions for online casino services in the Philippines. phtaya72 does not knowingly collect or process personal data from individuals under the age of 21.

Age verification is conducted as part of the KYC process for all players. Where phtaya72 becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted promptly, the account will be closed, and any deposits will be refunded in accordance with our standard underage account closure procedure.

phtaya72 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC regulatory guidance, or PAGCOR requirements. The "Last Updated" date displayed at the top of this page reflects the most recent revision.

Where any material change is made to this Policy — particularly any change that affects how we collect, use, or share personal data in a way that is less protective than previously described — phtaya72 will notify active registered players via their registered email address or through an on-platform notification prior to the change taking effect.

Continued use of the phtaya72 platform following publication of an updated Policy constitutes acceptance of the revised terms. Players who do not agree with the updated Policy should contact support to discuss account closure and data handling options.

For any privacy-related inquiries, rights requests, or complaints relating to phtaya72's processing of your personal data, please contact our Data Protection Officer through the following channels:

• Email: [email protected] — use the subject line "Data Privacy Inquiry" or "DPO Request" for prompt routing to the correct team. Response within 30 calendar days.
• Live Chat: Available 24/7 through the phtaya72 website for non-urgent privacy questions or to initiate a formal rights request.

If you are not satisfied with phtaya72's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC is the competent supervisory authority for data protection matters under the Data Privacy Act of 2012.