Your privacy matters to phtya. This Policy explains what personal information we collect when you use our platform, how we use it, who we share it with, and what rights you hold as a Filipino data subject under the Data Privacy Act.
phtya ("we," "us," "our") is committed to protecting the personal information of every player who uses the phtya online casino and sports betting platform at phtya.app. This Privacy Policy describes, in clear and straightforward terms, what data phtya collects from you, why we collect it, how we use it, who can access it, how long we keep it, and what rights you have as an individual data subject under Philippine law.
This Policy applies to all personal information collected by phtya through the Platform — including data gathered during registration, account verification, gameplay, financial transactions, customer support interactions, and your general use of the website. It covers information collected via our website on any device, including mobile phones on Globe, Smart, or DITO networks.
Please read this Policy carefully alongside our Terms & Conditions. Both documents together govern your relationship with phtya. If any conflict arises between the two documents concerning the handling of personal data, this Privacy Policy shall prevail.
For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phtya is the personal information controller in respect of the personal data you provide to us through the Platform.
As a personal information controller, phtya determines the purposes and means by which your personal information is processed. phtya is responsible for ensuring that any processing of your personal data is done lawfully, for a legitimate purpose, and in a proportionate manner consistent with the principles established under RA 10173.
phtya has appointed a Data Protection Officer (DPO) responsible for overseeing data protection strategy and compliance. You may contact our DPO at any time for queries or concerns relating to your personal data. Contact details are provided in Section 16 of this Policy.
phtya collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include the following:
| Category | Data Items | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, gender, nationality, government ID type and number | Registration & KYC verification |
| Contact Data | Mobile number (Philippine SIM), email address, residential address | Registration |
| Financial Data | GCash number, Maya account, bank account details (BPI, BDO, Metrobank), transaction amounts, deposit and withdrawal history | Deposit/Withdrawal processing |
| KYC Documents | Scanned or photographed copies of government-issued Philippine IDs (PhilSys, GSIS, SSS, passport, driver's license, PRC ID) | KYC verification |
| Gaming Data | Bet history, game sessions, win/loss records, bonus usage, wager amounts, game preferences | Ongoing platform use |
| Technical Data | IP address, device type, operating system, browser type, session timestamps, geolocation data (country/region level) | Each platform session |
| Communications Data | Live chat transcripts, support email content, feedback submissions | Support interactions |
| Preference Data | Responsible gaming settings, deposit/loss limits, notification preferences, language settings | Account settings |
phtya collects personal data through the following means:
phtya processes your personal data for the following purposes, each of which is described alongside its legal basis in Section 6:
Under the Data Privacy Act of 2012, phtya processes your personal information only where one or more of the following legal bases applies:
phtya does not sell, rent, or trade your personal information to any third party for marketing or commercial purposes. phtya shares your personal data only in the following limited circumstances:
phtya retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law, whichever is longer. The following general retention periods apply:
Upon expiry of the applicable retention period, phtya will securely delete or anonymize your personal data in accordance with its data disposal procedures. Where anonymization is not technically feasible, data will be encrypted and placed in secure archival storage with access controls limiting access to authorized compliance personnel only.
phtya uses cookies and similar technologies to operate the Platform, maintain your session when logged in, and analyze how the Platform is used. The categories of cookies used by phtya are as follows:
On your first visit to phtya.app, you will be presented with a cookie consent notice. Strictly necessary cookies are placed without consent. Optional analytics and functional cookies are only placed where you have accepted the relevant cookie category.
You may withdraw your consent to optional cookies at any time by updating your cookie preferences in the cookie settings panel accessible from the Platform footer. Note that withdrawing consent to functional cookies may affect the convenience of your experience but will not prevent you from accessing the Platform.
phtya implements technical, organizational, and administrative security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
While phtya takes these measures seriously, no system is completely immune to security incidents. In the unlikely event of a personal data breach affecting your rights and freedoms, phtya will notify you and the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, as required under RA 10173.
Under the Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by phtya. phtya will respond to valid requests within thirty (30) days of receipt.
Request a copy of the personal data phtya holds about you, the purposes for which it is processed, and the categories of third parties it has been shared with.
Request correction of inaccurate, outdated, or incomplete personal data. Some corrections may require re-submission of KYC documents.
Request deletion of personal data where it is no longer necessary for the purpose collected, or where you withdraw consent — subject to legal retention obligations.
Object to processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests in specific circumstances.
Request a structured, machine-readable copy of the personal data you have provided to phtya, where technically feasible.
Lodge a complaint with phtya's Data Protection Officer or directly with the National Privacy Commission (NPC) of the Philippines if you believe your rights have been violated.
To exercise any of the rights above, submit a written request to phtya's Data Protection Officer using the contact details provided in Section 16. phtya may require you to verify your identity before processing a data subject rights request to prevent unauthorized disclosure or deletion.
phtya's KYC verification process is designed to identify and reject registrations by underage individuals. Where phtya becomes aware that personal data of a person under 21 has been collected — whether through registration fraud or other means — the relevant account will be immediately suspended, any deposited funds will be returned to the deposited payment method, and all personal data associated with that account will be deleted without delay.
If you are a parent or guardian and believe that a person under 21 in your household has registered on phtya, please contact phtya's support team immediately via Live Chat or the email address provided in Section 16.
Some of phtya's service providers — including licensed game providers and certain technical infrastructure partners — may be located outside the Philippines. Where personal data is transferred to recipients in other countries, phtya ensures that appropriate safeguards are in place to protect your information, consistent with the requirements of RA 10173.
Safeguards may include contractual clauses requiring the recipient to process data only for specified purposes, maintain security standards equivalent to those required under Philippine law, and submit to audit by phtya or its designated representatives. phtya does not transfer data to countries or entities that cannot provide an adequate level of protection for your personal information.
All financial transactions — including GCash and Maya deposits and withdrawals — are processed within the Philippines through locally licensed payment processors and are not subject to international transfer.
The phtya Platform does not contain outbound links to third-party websites for commercial or promotional purposes. All links on phtya.app refer to pages within the phtya domain. phtya is not responsible for the privacy practices of any external website or service that you access independently outside of phtya.app.
phtya's game lobby contains titles provided by third-party game providers. These providers operate their game engines as part of the phtya Platform under contractual arrangements and data processing agreements. They do not operate as independent websites from the perspective of the player experience on phtya.
phtya reserves the right to update or revise this Privacy Policy at any time. Revisions may be made in response to changes in applicable Philippine privacy law, changes to our data processing practices, the introduction of new services, or regulatory guidance from the National Privacy Commission (NPC) or PAGCOR.
When material changes are made to this Policy, phtya will publish a notice on the Platform and, where reasonably practicable, send a notification to your registered email address or mobile number. The effective date at the top of this Policy will be updated with each revision.
Your continued use of the phtya Platform after a revised Privacy Policy has been published constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you should close your account and cease using the Platform before the revised Policy takes effect.
For any questions, concerns, or requests related to this Privacy Policy or phtya's data processing practices, you may contact phtya's Data Protection Officer (DPO) using the following details:
Six ways phtya protects your personal data every day — not just on paper, but in practice.
Every byte of data exchanged between your device and phtya travels over 256-bit TLS encryption — the same level used by Philippine banks for online transactions. Your credentials, financial data, and game history are protected in transit at all times.
phtya has never sold player data to third parties and never will. Your personal information — including your GCash number, mobile number, and gaming history — is used exclusively to operate phtya's services. It is not a product we monetize.
phtya processes all player data in strict compliance with Republic Act No. 10173 — the Data Privacy Act of 2012 — and its Implementing Rules and Regulations. A dedicated Data Protection Officer oversees ongoing compliance and manages data subject rights requests.
phtya collects only the personal data that is strictly necessary for the purpose at hand. We do not collect data speculatively or for purposes beyond those stated in this Policy. KYC documents are used for identity verification only — not for profiling.
This Privacy Policy is written in plain language and published in full on phtya.app. No fine print, no buried clauses. Every processing activity, every data sharing arrangement, and every retention period is documented and accessible to every phtya player.
In the event of a breach affecting your personal data, phtya will notify you and the National Privacy Commission within 72 hours — as required by RA 10173. You will receive clear information about what happened, what data was affected, and what steps phtya is taking.
At phtya, protecting your personal data is not an afterthought — it's built into every part of the platform. From GCash deposits to live casino sessions, your information is handled with the care it deserves under Philippine law. Filipino players aged 21 and above can register with confidence.