Privacy Policy

1. Overview

This Privacy Policy ("Policy") is issued by phtaya99 ("phtaya99," "we," "us," or "our") and applies to all personal data collected through the phtaya99 website, mobile platform, and any related services (collectively, the "Platform") operated for Filipino players and other users.

phtaya99 is committed to protecting the privacy and personal data of all users in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.

By registering an account or using the phtaya99 Platform, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy.

2. Personal Data We Collect

phtaya99 collects the following categories of personal data from players and users of the Platform:

We do not collect sensitive personal information as defined under the DPA (such as health data, political opinions, or religious beliefs) unless specifically required for responsible gaming compliance purposes, in which case your explicit consent will be obtained.

3. How We Collect Your Data

phtaya99 collects personal data through the following means:

• Direct interactions: Data you provide when registering your phtaya99 account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: As you interact with the Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, web beacons, and similar tracking technologies. See Section 9 for details.
• Third-party payment providers: When you transact via GCash, PayMaya, BPI, BDO, Metrobank, or Visa/Mastercard, we receive transaction confirmation data from those providers necessary to credit your account and process withdrawals.
• Identity verification services: We may use third-party KYC and anti-money laundering (AML) service providers to verify the identity documents you submit, in compliance with Philippine AML regulations.
• Fraud prevention partners: We receive data from fraud detection services to protect the integrity of the Platform and all players.

4. Purpose of Processing

phtaya99 processes your personal data for the following specific, legitimate purposes:

• Account management: To register, maintain, and administer your phtaya99 player account.
• Identity verification (KYC): To verify your identity and age (21+) in compliance with Philippine gaming and AML regulations.
• Payment processing: To process deposits, withdrawals, and refunds through your chosen Philippine payment method.
• Service delivery: To provide access to casino games, sports betting markets, and all other phtaya99 Platform features.
• Responsible gaming: To monitor gaming behavior, enforce deposit limits, process self-exclusion requests, and identify players who may need support.
• Legal and regulatory compliance: To comply with obligations under the DPA, PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, and unauthorized access.
• Customer support: To respond to your inquiries, complaints, and support requests.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where permitted by law. You may opt out at any time.
• Platform improvement: To analyze usage patterns and improve the performance, features, and user experience of the phtaya99 Platform.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, phtaya99 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — including account registration, payment processing, and game delivery.
• Legal obligation: Processing required to comply with Philippine law, including KYC/AML obligations under RA 9160 and PAGCOR regulatory requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain cookie usage, where your explicit consent has been obtained. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Data Sharing and Disclosure

phtaya99 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients, strictly on a need-to-know basis:

• Payment service providers: GCash, PayMaya, BPI, BDO, Metrobank, and card networks, solely to process your financial transactions.
• KYC and AML service providers: Third-party identity verification and compliance platforms used to fulfill our regulatory obligations.
• Fraud prevention and security vendors: Service providers that help us detect and prevent fraudulent activity on the Platform.
• IT and infrastructure providers: Cloud hosting, database, and technical service providers who process data on our behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or court order.
• Professional advisors: Legal counsel, auditors, and accountants, where necessary for the operation of our business.

All third-party service providers who process personal data on behalf of phtaya99 are bound by data processing agreements that require them to maintain appropriate security measures and process data only for the purposes specified by phtaya99.

7. Data Retention

phtaya99 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. Our general retention periods are as follows:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in compliance with AMLA record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by Philippine AML regulations.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer support communications: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until you withdraw consent, plus an additional period as required for legal compliance.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with NPC guidelines.

8. Data Security

phtaya99 implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. Our security measures include:

• SSL/TLS encryption: All data transmitted between your device and the phtaya99 Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password hashing: Account passwords are stored using strong one-way cryptographic hashing algorithms. phtaya99 staff cannot view your password in plain text.
• Access controls: Personal data is accessible only to authorized phtaya99 personnel who require it to perform their job functions, governed by role-based access controls.
• Two-factor authentication (2FA): Players are encouraged to enable 2FA on their phtaya99 accounts for an additional layer of security.
• Regular security audits: The Platform undergoes periodic security assessments and penetration testing by qualified security professionals.
• Data breach response: phtaya99 maintains an incident response plan. In the event of a personal data breach that poses a real risk to your rights, we will notify the NPC and affected players within the timeframes required by the DPA.

While phtaya99 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for keeping your login credentials confidential and for notifying us immediately of any suspected unauthorized access to your account.

9. Cookies and Tracking Technologies

phtaya99 uses cookies and similar tracking technologies to enhance your experience on the Platform, analyze usage patterns, and support our security and fraud prevention systems. The types of cookies we use include:

• Strictly necessary cookies: Essential for the Platform to function. These include session authentication cookies and security tokens. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game favorites, and display options to personalize your experience.
• Analytics cookies: Collect anonymized data about how players use the Platform — such as pages visited and session duration — to help us improve performance and features.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phtaya99 Platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate securely.

10. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173 (Data Privacy Act of 2012), you have the following rights with respect to your personal data held by phtaya99:

• Right to be informed: The right to know what personal data phtaya99 collects about you and how it is processed — as set out in this Policy.
• Right of access: The right to request a copy of the personal data phtaya99 holds about you.
• Right to rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to erasure or blocking: The right to request deletion or blocking of your personal data where processing is no longer necessary or lawful, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer (DPO) using the contact details in Section 13. We will respond to all verified requests within fifteen (15) business days in accordance with NPC guidelines.

11. Minors and Age Restriction

The phtaya99 Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. phtaya99 does not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data in question, and report the matter to the appropriate regulatory authorities where required.

If you are a parent or guardian and believe that your child has registered on the phtaya99 Platform, please contact us immediately at the details provided in Section 13 so we can take prompt corrective action.

Age verification is a mandatory step in the phtaya99 KYC process. No withdrawal will be processed until age has been confirmed via a valid government-issued Philippine ID.

12. Changes to This Policy

phtaya99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or Platform features. When material changes are made, we will notify registered players via the email address or mobile number on file, and will update the "Last Updated" date at the top of this page.

Your continued use of the phtaya99 Platform following the posting of a revised Privacy Policy constitutes your acceptance of the updated terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

Where changes require fresh consent under the DPA, we will seek that consent from you before the changes take effect.

13. Contact Us & Data Protection Officer

phtaya99 has appointed a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012 and NPC regulations. If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact:

• Data Protection Officer: phtaya99 DPO Office
• Email: support@phtaya99.club
• Live Chat: Available 24/7 via the phtaya99 Platform

We aim to acknowledge all data privacy requests within three (3) business days and resolve them within fifteen (15) business days. For unresolved complaints, you may escalate your concern to the National Privacy Commission (NPC) of the Philippines.