phtayavip — Privacy Policy

01 Introduction

phtayavip is committed to protecting the privacy and security of personal information entrusted to us by our registered players. As an online gaming platform serving hundreds of thousands of Filipino players across Metro Manila, Cebu, Davao, and provinces nationwide, we recognize that responsible data handling is inseparable from responsible gaming.

This Policy describes what personal data phtayavip collects from you when you register, use, or interact with the Platform; the purposes for which we process that data; the parties with whom we may share it; how long we retain it; and the rights you have as a data subject under Philippine law.

By registering an Account or continuing to use the phtayavip Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal information as described herein.

02 Personal Data We Collect

phtayavip collects personal data through several channels: directly from you during registration and account usage, automatically through technical systems as you interact with the Platform, and from third parties such as payment processors and identity verification services.

2.1 Registration & Account Data

• Full legal name (as appearing on a government-issued Philippine ID)
• Date of birth (to verify the mandatory 21+ age requirement)
• Philippine mobile number (used as your primary account identifier and for SMS OTP)
• Email address
• Residential address in the Philippines
• Account username and encrypted password

2.2 Identity Verification (KYC) Data

• Scanned or photographed copies of government-issued Philippine IDs (e.g., PhilSys ID, Passport, UMID, SSS ID, Driver's License)
• Selfie or live photo for facial verification against ID documents
• Proof of address documents where required
• Source of funds documentation for high-volume transaction compliance

2.3 Financial & Transaction Data

• GCash mobile number and transaction reference numbers
• Maya account reference details
• BPI, BDO, or Metrobank account name and last four digits (where applicable)
• Cryptocurrency wallet addresses (for USDT TRC20 transactions)
• Complete deposit, withdrawal, and bet transaction history in PHP

2.4 Gaming Activity Data

• Game sessions — titles played, duration, stakes, and outcomes
• Bonus usage, wagering progress, and promotional participation history
• Responsible gaming tool settings and activation events (deposit limits, self-exclusion)

2.5 Technical & Usage Data

• IP address and approximate geographic location
• Device type, operating system, and browser version
• Pages visited, features accessed, and session duration on the Platform
• Referral source and entry URL
• Cookie identifiers and session tokens (see Section 6)

2.6 Communications Data

• Content of live chat conversations with phtayavip Support agents
• Emails sent to or received from [email protected]
• Feedback, complaints, and dispute records

03 How We Use Your Personal Data

phtayavip processes personal data only for legitimate, specified purposes. The table below summarizes the primary purposes for which your data is used:

04 Legal Basis for Processing

Under the Data Privacy Act of 2012, phtayavip processes your personal data on the following legal bases:

• Contractual necessity: Processing required to provide the phtayavip service you have subscribed to — account management, payment processing, game access, and support.
• Legal obligation: Processing required to comply with Philippine law — PAGCOR regulatory requirements, the Anti-Money Laundering Act (RA 9160), and mandatory age verification under applicable gaming laws.
• Legitimate interests: Processing for fraud prevention, platform security, responsible gaming monitoring, and business analytics, where these interests are not overridden by your rights.
• Consent: Processing for optional purposes such as marketing communications and the use of non-essential cookies, where you have given explicit, revocable consent.

05 Data Sharing & Third Parties

phtayavip does not sell your personal data to third parties. We share personal data only under the following circumstances and only to the extent necessary for the stated purpose:

5.1 Payment Processors

Deposit and withdrawal transactions are processed through GCash, Maya, BPI, BDO, Metrobank, and other payment partners. We share the minimum transaction data necessary to process your payment. These providers are contractually bound to process your data in compliance with applicable Philippine data protection standards.

5.2 Identity Verification Providers

Third-party KYC service providers assist phtayavip in verifying identity documents and performing facial matching. These providers operate under strict data processing agreements and are prohibited from using your KYC data for any purpose other than the verification service they provide to phtayavip.

5.3 Game Software Providers

Game studios whose titles are available on the phtayavip Platform may receive anonymized session data for RNG certification, game performance monitoring, and regulatory audit purposes. Your personally identifiable information is not shared with game studios.

5.4 Regulatory Authorities

phtayavip is legally required to share certain data with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory bodies upon lawful request or as required by regulation. Such disclosures are made in accordance with applicable law and are not within phtayavip's discretion to withhold.

5.5 Law Enforcement

phtayavip may disclose personal data to Philippine law enforcement agencies where required by a valid legal process, court order, or where disclosure is necessary to prevent imminent harm or illegal activity.

06 Cookies & Tracking Technologies

phtayavip uses cookies and similar technologies to operate and improve the Platform. These technologies allow us to recognize your browser, maintain your login session, remember your preferences, and analyze how the Platform is used.

6.1 Types of Cookies We Use

• Essential Cookies: Required for core Platform functionality — session authentication, security tokens, CSRF protection. Cannot be disabled without disrupting Platform access.
• Functional Cookies: Remember your preferences such as language settings, responsible gaming tool configurations, and lobby display preferences.
• Analytical Cookies: Collect anonymized data about how players navigate the Platform to help us improve usability and performance. We use privacy-respecting analytics tools that do not share data with advertising networks.
• Marketing Cookies: Used only with your explicit consent to deliver relevant promotional content. You may withdraw consent at any time.

You may control non-essential cookie categories through your browser settings or the phtayavip cookie preference panel. Note that disabling certain cookies may affect Platform functionality.

07 Data Retention

phtayavip retains personal data for the minimum period necessary to fulfill the purposes described in this Policy, subject to applicable legal retention requirements:

• Account and KYC data: Retained for the duration of your active Account plus a minimum of five (5) years following Account closure, as required by Philippine AML regulations and PAGCOR compliance standards.
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction.
• Gaming session data: Retained for three (3) years for responsible gaming monitoring and regulatory audit purposes.
• Support communications: Retained for three (3) years or until resolution of any related dispute, whichever is later.
• Technical and usage logs: Retained for up to twelve (12) months for security monitoring and fraud prevention.

Upon expiry of the applicable retention period, phtayavip will securely delete or anonymize your personal data in accordance with industry-standard data disposal procedures.

08 Security Measures

phtayavip implements technical and organizational security measures proportionate to the sensitivity of the personal data we process:

• TLS 1.3 encryption for all data in transit between your device and phtayavip servers;
• AES-256 encryption for sensitive data fields stored in phtayavip databases;
• Bcrypt password hashing — passwords are never stored in plaintext and are irretrievable even by phtayavip staff;
• SMS OTP two-factor authentication for account login and high-value withdrawal verification;
• Access controls — phtayavip staff access to personal data is restricted on a strict need-to-know basis with audit logging;
• Regular security audits and penetration testing of the Platform infrastructure;
• Anomaly detection systems that flag unusual login patterns and suspicious transaction activity in real time.

09 Your Rights as a Data Subject

As a Filipino data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtayavip:

• Right to be Informed: To know that your personal data is being collected and processed, and the purposes for which it is used. This Privacy Policy is phtayavip's fulfillment of this right.
• Right to Access: To request a copy of the personal data phtayavip holds about you, the categories of data processed, the purposes of processing, and the parties with whom your data has been shared.
• Right to Correction: To request correction of inaccurate or incomplete personal data. You may update most account information directly through your phtayavip account settings after login.
• Right to Erasure / "Right to be Forgotten": To request deletion of your personal data where processing is no longer necessary or where you have withdrawn consent, subject to phtayavip's legal retention obligations under Philippine AML and gaming regulations.
• Right to Object: To object to processing of your personal data for direct marketing purposes at any time, without requirement to provide justification.
• Right to Data Portability: To receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to File a Complaint: To lodge a complaint with the National Privacy Commission (NPC) if you believe phtayavip has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of these rights, contact phtayavip's Data Protection Officer at [email protected] (plain text — not a clickable link) or via live chat. Requests will be acknowledged within 72 hours and resolved within 30 calendar days.

10 Children's Privacy

The phtayavip Platform is strictly prohibited for use by any person under the age of 21. This is not merely a policy preference — it is a mandatory requirement under Philippine gaming law and PAGCOR regulations. phtayavip does not knowingly collect personal data from any individual under 21 years of age.

Age verification is a mandatory step in the phtayavip registration and KYC process. Any Account that phtayavip discovers to be operated by a person under 21 will be immediately suspended, all associated data will be securely deleted, and the matter will be referred to PAGCOR as required.

If you believe that a person under 21 has created an Account on phtayavip, please contact our Support team immediately at the contact details provided in Section 13.

11 International Data Transfers

phtayavip's primary data processing infrastructure is located within or proximate to the Philippines. Where operational necessity requires transferring personal data to service providers operating outside the Philippines — for example, globally operated cloud infrastructure providers or international game studio partners — phtayavip ensures that such transfers are subject to appropriate safeguards including:

• Data processing agreements that impose data protection obligations equivalent to those required under the Philippine Data Privacy Act;
• Technical security measures (encryption in transit and at rest) consistent with those described in Section 8;
• Restrictions on onward transfer and re-use of personal data by recipient parties.

12 Changes to This Privacy Policy

phtayavip may update this Privacy Policy from time to time to reflect changes in our data processing practices, Philippine regulatory requirements, or Platform functionality. Material changes will be communicated to registered players via SMS notification to your registered Philippine mobile number and/or a prominent notice on the Platform at least seven (7) calendar days before the change takes effect.

The "Last Updated" date at the top of this Policy indicates when the most recent revision was made. Your continued use of the phtayavip Platform after the effective date of a revised Policy constitutes your acceptance of the changes. If you do not accept the revised terms, you should discontinue use of the Platform and may request Account closure.

13 Contact Our Data Protection Officer

For privacy-related inquiries, data subject rights requests, or to report a potential data protection concern, please contact phtayavip's Data Protection Officer through the following channels:

• Email: [email protected] — Subject line: "Privacy / DPO Inquiry" (plain text — not a clickable link)
• Live Chat: Available 24/7 within the phtayavip Platform after logging in. Request to speak with the Data Protection team.
• Response Commitment: phtayavip acknowledges all DPO inquiries within 72 hours and provides a substantive response within 30 calendar days, consistent with NPC guidelines.