phtaya4 Privacy Policy

phtaya4 ("phtaya4," "we," "us," or "our") operates the online gaming platform accessible at phtaya4.app, providing Filipino players with access to live casino games, slots, table games, sports betting, and related entertainment services. phtaya4 acts as the Personal Information Controller in respect of the personal data collected through the platform, as defined under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations.

This Privacy Policy applies to all personal data collected from individuals who visit, register on, or otherwise interact with the phtaya4 platform, including through any mobile-optimized interface. It should be read together with our Terms & Conditions, which govern your use of the phtaya4 platform as a whole.

By registering a phtaya4 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein.

phtaya4 collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of personal data we collect include:

phtaya4 does not intentionally collect sensitive personal information as defined under RA 10173 (such as health data, religious beliefs, or political affiliations) unless specifically required by law or with your explicit consent. Where age verification requires confirmation that you are 21 years of age or older, we process your date of birth solely for this purpose.

phtaya4 collects personal data through the following means:

• Direct collection: Information you provide when registering a phtaya4 account, completing KYC verification, making deposits or withdrawals, claiming bonuses, or contacting customer support.
• Automated collection: Technical data collected automatically when you access the phtaya4 platform, including through cookies, web beacons, and server logs. See Section 9 for details on our cookie practices.
• Third-party sources: Identity verification data from KYC service providers; fraud and AML screening data from compliance service providers; payment confirmation data from GCash, PayMaya, BPI, BDO, Metrobank, and other payment processors.
• Regulatory sources: Information received from PAGCOR or other competent Philippine authorities in connection with regulatory compliance obligations.

phtaya4 uses the personal data we collect for the following purposes:

• Account management: To register and maintain your phtaya4 account, verify your identity, and manage your account preferences and settings.
• Service delivery: To provide access to games, process deposits and withdrawals in PHP, credit bonuses, and deliver the full range of phtaya4 platform features.
• Age and identity verification: To confirm that you are at least 21 years of age and to verify your identity in compliance with Philippine gaming regulations and KYC requirements.
• Legal and regulatory compliance: To comply with obligations under the Philippine Data Privacy Act, the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and other applicable laws.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other security threats.
• Responsible gaming: To monitor gaming patterns, enforce deposit limits and self-exclusion requests, and identify players who may be at risk of problem gambling.
• Customer support: To respond to your inquiries, resolve disputes, and improve the quality of our support services.
• Marketing communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out mechanism.
• Platform improvement: To analyze usage patterns, conduct research, and improve the phtaya4 platform's features, performance, and user experience.

phtaya4 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing a separate legal basis for processing.

Under the Philippine Data Privacy Act of 2012, phtaya4 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you — i.e., to operate your phtaya4 account and deliver the services you have registered for.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AMLA, PAGCOR regulations, and the Data Privacy Act itself.
• Legitimate interests: Processing necessary for phtaya4's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and certain non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

phtaya4 does not sell your personal data to third parties. We share personal data only in the following circumstances and only to the extent necessary for the stated purpose:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process deposits and withdrawals.
• KYC and compliance providers: Identity verification and AML screening service providers engaged to assist with our regulatory compliance obligations.
• Game providers: Third-party game software providers who supply games available on the phtaya4 platform, to the extent necessary to deliver those games.
• IT and infrastructure providers: Cloud hosting, data storage, and cybersecurity service providers who process data on our behalf under strict data processing agreements.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law or regulatory obligation.
• Professional advisers: Legal counsel, auditors, and other professional advisers, subject to confidentiality obligations.
• Business transfers: In the event of a merger, acquisition, or sale of all or part of phtaya4's business, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom phtaya4 shares personal data are required to handle that data in accordance with applicable Philippine data privacy laws and phtaya4's data protection standards.

phtaya4 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including to satisfy legal, regulatory, accounting, and reporting requirements. The following general retention periods apply:

• Account and transaction data: Retained for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping requirements.
• KYC and identity verification documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by applicable law.
• Gaming and session data: Retained for a minimum of three (3) years for dispute resolution and regulatory audit purposes.
• Marketing consent records: Retained for the duration of the marketing relationship plus two (2) years.
• Customer support communications: Retained for two (2) years from the date of the interaction.
• Technical and log data: Retained for up to twelve (12) months, unless required for longer periods for security or legal purposes.

When personal data is no longer required for any lawful purpose, phtaya4 will securely delete or anonymize it in accordance with our data disposal procedures.

phtaya4 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and the phtaya4 platform.
• Encryption of sensitive data at rest, including payment details and identity documents.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security assessments, penetration testing, and vulnerability scanning of the phtaya4 platform.
• Two-factor authentication (2FA) options for player accounts to reduce the risk of unauthorized access.
• Incident response procedures to detect, contain, and notify affected individuals and the National Privacy Commission (NPC) of any personal data breach within the timeframes required by RA 10173.

While phtaya4 takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phtaya4 account credentials and for notifying us immediately if you suspect unauthorized access to your account.

phtaya4 uses cookies and similar tracking technologies to operate and improve the platform, personalize your experience, and analyze usage patterns. The types of cookies we use include:

• Strictly necessary cookies: Essential for the platform to function — including session management, authentication, and security. These cannot be disabled.
• Functional cookies: Remember your preferences such as language settings, game history display, and responsible gaming tool configurations.
• Analytics cookies: Collect anonymized data about how players use the phtaya4 platform to help us improve performance and user experience.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our marketing campaigns. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the phtaya4 platform. Your consent to non-essential cookies is requested when you first access the platform and can be updated at any time through your account settings.

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by phtaya4:

• Right to be informed: The right to know what personal data phtaya4 collects about you and how it is used — as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data phtaya4 holds about you, including information on how it has been processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, machine-readable format and to transmit it to another controller where technically feasible.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phtaya4 has processed your personal data in violation of RA 10173.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13. phtaya4 will respond to all verified requests within thirty (30) days, or within such extended period as permitted by applicable law. We may need to verify your identity before processing your request.

The phtaya4 platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. phtaya4 does not knowingly collect personal data from individuals under the age of 21.

As part of our registration and KYC process, phtaya4 verifies the age of all players. If we discover that personal data has been collected from an individual who is under 21 years of age, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds to the originating payment method.

If you believe that a minor has registered on the phtaya4 platform or that their personal data has been collected without appropriate consent, please contact our support team immediately so that we can take prompt action.

phtaya4 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. When material changes are made, we will notify registered players by email to their registered address and/or by displaying a prominent notice on the phtaya4 platform.

The revised Privacy Policy will take effect on the date specified in the notice. Your continued use of the phtaya4 platform after the effective date constitutes your acknowledgment of the updated policy. The "Last Updated" date at the top of this page indicates when the most recent revision was made.

We encourage you to review this Privacy Policy periodically to stay informed about how phtaya4 protects your personal data.

phtaya4 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Philippine Data Privacy Act and the National Privacy Commission. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated. The NPC is the independent regulatory body responsible for administering and implementing RA 10173 in the Philippines.