phataya Privacy Policy

1. Introduction

phataya ("we," "us," "our," or "the Platform") operates the online gaming platform accessible at phataya.net, serving players across the Philippines. We are committed to protecting the privacy and personal data of every individual who interacts with our Platform, whether as a registered player, a visitor, or a prospective member.

This Privacy Policy describes how phataya collects, uses, stores, shares, and protects your personal data. It also explains the rights available to you under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering a phataya account, accessing phataya.net, or using any phataya service, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree, please discontinue use of the Platform and contact us to close your account.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, phataya acts as the Personal Information Controller (PIC) with respect to the personal data of its registered players and website visitors. phataya determines the purposes and means of processing personal data collected through phataya.net.

Our designated Data Protection Officer (DPO) oversees compliance with data privacy obligations and handles all data subject requests. You may contact the DPO through the contact details provided in Section 15 of this Policy.

3. Personal Data We Collect

phataya collects the following categories of personal data, depending on how you interact with the Platform:

Category	Examples	Purpose
Identity Data	Full legal name, date of birth, nationality, government-issued ID number	Account registration, KYC verification, age verification (21+)
Contact Data	Email address, Philippine mobile number, residential address	Account communication, support, regulatory notices
Financial Data	GCash number, PayMaya account, bank account details, transaction history	Processing deposits and withdrawals, AML compliance
Technical Data	IP address, device type, browser type, operating system, session data	Platform security, fraud prevention, service optimization
Usage Data	Games played, bet amounts, session duration, bonus usage, login history	Responsible gaming monitoring, personalization, analytics
Communications Data	Live chat transcripts, support emails, feedback submissions	Customer support, dispute resolution, service improvement
Verification Documents	Scanned government ID, selfie with ID, proof of address, proof of payment	KYC compliance, fraud prevention, regulatory requirements

phataya does not collect sensitive personal information beyond what is strictly required for identity verification and regulatory compliance. We do not collect biometric data, health information, or political affiliations.

4. How We Collect Your Data

phataya collects personal data through the following means:

• Direct Collection: Information you provide when registering a phataya account, completing KYC verification, making deposits or withdrawals, contacting support, or participating in promotions.
• Automated Collection: Technical and usage data collected automatically when you access phataya.net, including through cookies, web beacons, log files, and similar tracking technologies (see Section 8).
• Third-Party Sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment verification data from payment processors such as GCash and PayMaya.
• Regulatory Sources: Information received from PAGCOR or other competent Philippine authorities in connection with regulatory compliance obligations.

5. How We Use Your Personal Data

phataya uses your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your phataya account; processing login and authentication; managing account settings and preferences.
• Service Delivery: Enabling access to phataya games including live casino, slots, bingo, and Dragon Tiger Luck; processing deposits and withdrawals; crediting bonuses and promotions.
• Identity Verification: Verifying your identity and age (21+) in compliance with PAGCOR regulations and the Anti-Money Laundering Act (AMLA) of the Philippines.
• Regulatory Compliance: Meeting obligations under PAGCOR licensing conditions, the AMLA, the Data Privacy Act, and other applicable Philippine laws and regulations.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, money laundering, unauthorized account access, and other prohibited conduct.
• Responsible Gaming: Monitoring gaming behavior to identify potential problem gambling indicators; administering deposit limits, loss limits, cooling-off periods, and self-exclusion requests.
• Customer Support: Responding to your inquiries, resolving disputes, and improving our support services.
• Marketing Communications: Sending you information about phataya promotions, bonuses, and new games — only where you have provided consent or where permitted by applicable law. You may opt out at any time.
• Platform Improvement: Analyzing usage patterns and player behavior (in aggregated, anonymized form) to improve phataya's games, features, and user experience.

6. Legal Basis for Processing

phataya processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your phataya account and deliver gaming services.
• Legal Obligation: Processing required to comply with PAGCOR regulations, AMLA obligations, NPC requirements, and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7. Data Sharing & Disclosure

phataya does not sell, rent, or trade your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, and banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the purpose of processing deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm your identity and age in compliance with regulatory requirements.
• Anti-Fraud & Security Partners: Service providers that assist phataya in detecting and preventing fraudulent activity and unauthorized access.
• Game Software Providers: Licensed game developers and live casino operators whose games are available on phataya, to the extent necessary for game operation and dispute resolution.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine authorities, where disclosure is required by law or regulatory directive.
• Legal & Professional Advisors: Lawyers, auditors, and other professional advisors engaged by phataya, subject to professional confidentiality obligations.

All third-party service providers engaged by phataya are contractually required to process personal data only for the specified purpose, to maintain appropriate security measures, and to comply with applicable data protection laws.

8. Cookies & Tracking Technologies

phataya uses cookies and similar tracking technologies on phataya.net to enhance your experience, maintain session security, and analyze platform usage. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of phataya.net, including session management, login authentication, and security functions. These cannot be disabled without affecting core platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game display options, and responsible gaming limits to provide a personalized experience.
• Analytics Cookies: Collect anonymized data about how players use phataya.net — such as pages visited, session duration, and navigation paths — to help us improve the Platform. Analytics data is aggregated and does not identify individual players.
• Marketing Cookies: Used only where you have provided explicit consent, to deliver relevant phataya promotions and measure the effectiveness of marketing campaigns.

You may manage your cookie preferences through your browser settings. Note that disabling strictly necessary cookies may impair your ability to use phataya. For marketing and analytics cookies, you may withdraw consent at any time through your account settings.

9. Data Retention

phataya retains your personal data for as long as necessary to fulfill the purposes described in this Privacy Policy, subject to the following retention periods:

• Active Account Data: Retained for the duration of your phataya account and for a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the AMLA and PAGCOR regulations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the last transaction, whichever is later.
• Support Communications: Live chat transcripts and support emails are retained for two (2) years from the date of the communication, for dispute resolution and service improvement purposes.
• Marketing Data: Retained until you withdraw consent or opt out of marketing communications, after which it is deleted or anonymized within 30 days.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phataya's data disposal procedures.

10. Data Security

phataya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your device and phataya.net is encrypted using 256-bit SSL/TLS technology. Sensitive data stored in our systems is encrypted at rest.
• Access Controls: Access to personal data is restricted to authorized phataya personnel and service providers on a strict need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: phataya supports two-factor authentication (2FA) for player accounts to provide an additional layer of login security.
• Regular Security Audits: phataya conducts regular internal and third-party security assessments, penetration testing, and vulnerability scans to identify and remediate security risks.
• Incident Response: In the event of a personal data breach that poses a risk to your rights and freedoms, phataya will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act.

While phataya takes all reasonable precautions to protect your data, no electronic system is completely immune to security risks. You are responsible for maintaining the security of your phataya login credentials and for notifying us immediately of any suspected unauthorized access.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phataya:

• Right to Be Informed: The right to be informed of how your personal data is collected, used, and processed — as set out in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data phataya holds about you, including information on how it is being processed.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your phataya account settings.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phataya's legal retention obligations under PAGCOR and AMLA regulations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes. You may exercise this right at any time through your account settings or by contacting support.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format, where technically feasible.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phataya has violated your data privacy rights.

To exercise any of these rights, please contact phataya's Data Protection Officer using the contact details in Section 15. We will respond to all verified data subject requests within 15 business days, in accordance with NPC guidelines.

12. Children's Privacy

phataya's services are strictly intended for individuals who are 21 years of age or older, in compliance with PAGCOR regulations governing online gaming in the Philippines. phataya does not knowingly collect personal data from individuals under the age of 21.

If phataya becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and report the matter to the relevant authorities where required. If you believe a minor has registered on phataya, please contact our support team immediately.

13. Third-Party Links

phataya.net may contain links to third-party websites or services for informational purposes. phataya is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit. This Privacy Policy applies solely to data collected through phataya.net and phataya's services.

14. Updates to This Privacy Policy

phataya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, regulatory requirements, or platform features. When material changes are made, phataya will notify registered players via the email address on file and/or via a prominent notice on phataya.net at least 7 days before the changes take effect.

The "Last updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of phataya following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

15. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phataya, please contact our Data Protection Officer:

• Live Chat: Available 24/7 inside your phataya account — fastest response for urgent matters
• Email (DPO): [email protected]
• General Support: [email protected]

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC can be reached through its official government channels.

This Privacy Policy was last updated in January 2026 and supersedes all prior versions. Previous versions are available upon request by contacting phataya support.