phtay Privacy Policy

1. Introduction

phtay ("phtay," "we," "our," "us") operates the online gaming platform accessible at phtay.vip. This Privacy Policy describes how phtay collects, uses, stores, discloses, and protects personal information provided by users ("you," "Player") when registering for or using any phtay service.

By creating a phtay account or continuing to use phtay.vip, you acknowledge that you have read and understood this Privacy Policy and consent to the data processing practices described herein. This Policy should be read together with phtay's Terms & Conditions and Responsible Gaming Policy.

phtay is committed to compliance with the Republic of the Philippines' Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, which govern the processing of personal information of Philippine residents.

2. Data Controller

For the purposes of the Data Privacy Act of 2012, the data controller responsible for your personal information is phtay, operating the platform at phtay.vip. For all privacy-related enquiries, you may contact our Data Protection Officer at: [email protected] (plain text address — not a clickable link).

3. Personal Data We Collect

phtay collects personal information in the following categories:

phtay does not intentionally collect sensitive personal information beyond what is required for identity verification and regulatory compliance. We do not collect biometric data beyond what is strictly necessary for account verification.

4. How phtay Uses Your Personal Data

phtay processes your personal data for the following purposes:

• Account Management: Creating, maintaining, and securing your phtay account, including processing your phtay Login credentials and enforcing one-account-per-player policies.
• Identity & Age Verification: Confirming that you meet the minimum age requirement of 21 years and verifying your identity in compliance with applicable anti-money laundering (AML) and know-your-customer (KYC) regulations.
• Transaction Processing: Processing GCash, PayMaya, and bank transfer deposits and withdrawals, and maintaining accurate financial records of all phtay account activity.
• Regulatory Compliance: Meeting obligations under Philippine law including the Data Privacy Act of 2012, Anti-Money Laundering Act (AMLA), and applicable online gaming regulations.
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling patterns, applying self-imposed limits, and enabling responsible gaming interventions where appropriate.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality of phtay customer service.
• Platform Security: Detecting and preventing fraud, account takeovers, bonus abuse, and other prohibited activities on phtay.
• Service Improvement: Analysing aggregated, anonymised usage data to improve phtay platform features, game offerings, and overall user experience for Filipino players.
• Marketing Communications: Sending promotional offers, bonus notifications, and platform updates to your registered contact details — subject to your communication preferences, which you may update at any time in your phtay account settings.

5. Legal Basis for Processing

phtay processes your personal data under the following legal bases as established by the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the phtay Terms & Conditions, including account creation, payment processing, and game delivery.
• Legal Obligation: Processing necessary to comply with Philippine law, including AML reporting, KYC verification, and gaming regulatory requirements.
• Legitimate Interests: Processing conducted for fraud prevention, platform security, and service improvement where these interests do not override your privacy rights.
• Consent: Processing for marketing communications and non-essential cookies, where your consent has been obtained and may be withdrawn at any time.

6. Data Sharing & Third-Party Disclosure

phtay does not sell, rent, or trade your personal information to third parties for commercial purposes. phtay may share your data with the following categories of recipients only where strictly necessary:

• Payment Processors: GCash (GXI), PayMaya (Voyager Innovations), and Philippine banking partners solely for processing financial transactions on your phtay account.
• Game Providers: Licensed game software providers (e.g., JILI, PG Soft, Pragmatic Play) receive only session tokens and anonymised identifiers — never your full personal profile.
• Regulatory Authorities: Philippine government agencies including the Anti-Money Laundering Council (AMLC) and applicable gaming regulators, where legally required.
• KYC/AML Service Providers: Third-party identity verification and fraud screening services, subject to data processing agreements that restrict further use of your information.
• IT Infrastructure Providers: Cloud hosting and cybersecurity vendors bound by confidentiality obligations and data processing agreements compliant with Philippine privacy law.

7. Cookies & Tracking Technologies

phtay uses cookies and similar tracking technologies to operate and improve the platform. Cookies used by phtay fall into the following categories:

• Strictly Necessary Cookies: Essential for phtay Login session management, security token validation, and basic platform functionality. These cannot be disabled without rendering phtay unusable.
• Performance Cookies: Collect anonymised data about how players interact with phtay — pages visited, game categories accessed, and session duration — to help us improve the platform.
• Functional Cookies: Remember your language preferences, display settings, and last visited game category to personalise your phtay experience.
• Marketing Cookies: Used only where you have provided consent, to deliver relevant phtay promotions and track the effectiveness of our communications.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in to and use phtay.

8. Data Retention

phtay retains your personal data for as long as your account remains active and for a minimum period after account closure as required by Philippine law:

• Financial transaction records and KYC documentation: minimum five (5) years from the date of the transaction, in compliance with AMLA requirements.
• Gaming history and account activity logs: three (3) years from account closure or last active session.
• Customer support communications: two (2) years from the date of the interaction.
• Marketing consent records: retained for the duration of your consent plus one (1) year for audit purposes.

After the applicable retention period, phtay will securely delete or irreversibly anonymise your personal data.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtay:

• Right to be Informed: The right to know that phtay is collecting and processing your personal data and the purposes thereof — fulfilled by this Privacy Policy.
• Right of Access: The right to request a copy of the personal data phtay holds about you.
• Right to Rectification: The right to have inaccurate or incomplete personal data corrected. You may update most account information directly via your phtay account settings.
• Right to Erasure: The right to request deletion of your personal data, subject to phtay's legal retention obligations.
• Right to Object: The right to object to processing of your data for marketing purposes. You may opt out of marketing communications at any time through your phtay account notification settings.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format where technically feasible.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe phtay has processed your data unlawfully.

To exercise any of these rights, contact phtay's Data Protection Officer at: [email protected]. phtay will respond to verified requests within thirty (30) days.

10. Security Measures

phtay implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phtay.vip;
• Two-factor authentication (OTP) on all phtay Login attempts;
• Encrypted storage of passwords using one-way hashing algorithms — phtay staff cannot view your password;
• Regular third-party penetration testing and security audits of phtay infrastructure;
• Role-based access controls ensuring phtay staff access only the minimum personal data necessary for their job function;
• Automatic session timeout and anomalous login detection with real-time alerts.

Despite these measures, no online platform can guarantee absolute security. In the event of a data breach that poses a risk to your rights, phtay will notify affected users and the National Privacy Commission within the timeframe required by law.

11. Minors & Age Restrictions

phtay services are strictly restricted to individuals aged 21 years and older. phtay does not knowingly collect personal data from persons under the age of 21. If phtay becomes aware that a minor has registered or attempted to register, the account will be immediately closed and all associated data will be deleted. If you believe a minor has accessed phtay using your account, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

phtay may update this Privacy Policy from time to time to reflect changes in applicable law, our data processing practices, or the phtay platform. Material changes will be communicated to registered players via their registered mobile number or email address at least seven (7) days before taking effect. The "Last updated" date at the top of this page will reflect any revisions. Continued use of phtay following notification of changes constitutes acceptance of the revised Privacy Policy.

13. Contact & Data Protection Officer

For any questions, requests, or concerns regarding this Privacy Policy or phtay's handling of your personal data, please contact:

phtay Data Protection Officer
Email: [email protected] (plain text — not a clickable link)
Response time: within 30 days for formal data subject requests; within 24 hours for general privacy enquiries.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC) if you are not satisfied with phtay's handling of your privacy concern.