PHTYA Privacy Policy
At PHTYA, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains exactly what personal data we collect from Filipino players, why we collect it, how we use it, and the rights you have over your own information.
Your Privacy at PHTYA — At a Glance
These cards highlight the most important points of our Privacy Policy. They are a summary only — please read the full policy below for complete details.
What We Collect
PHTYA collects the personal information you provide during registration — name, date of birth, contact details, and payment information — as well as technical data generated by your use of the platform, such as device type, IP address, and session activity.
How We Use It
Your data is used to operate your PHTYA account, process deposits and withdrawals in Philippine Peso, verify your identity, comply with regulatory requirements, and improve the platform experience for all Filipino players.
Who We Share It With
PHTYA does not sell your personal data to third parties. We share data only with trusted service providers necessary to operate the platform — such as payment processors and identity verification partners — and with regulators where legally required.
How We Protect It
We use industry-standard SSL/TLS encryption for all data in transit and apply strict access controls to data at rest. Only authorised PHTYA personnel with a legitimate business need may access your personal information.
Your Rights
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to access, correct, and request deletion of your personal data held by PHTYA. You may also object to certain processing activities.
Cookies & Tracking
PHTYA uses cookies and similar technologies to keep you logged in, remember your preferences, and analyse platform usage. You can manage cookie preferences through your browser settings at any time.
Introduction
PHTYA ("we," "us," or "our") is committed to protecting the privacy and personal data of all users ("you," "Player," or "User") who access and use the PHTYA online gaming platform available at phtya.com (the "Platform").
This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines. It describes our practices regarding the collection, use, storage, disclosure, and protection of your personal data.
By registering for a PHTYA account or continuing to use the Platform, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.
This Privacy Policy should be read together with our Terms & Conditions and our Responsible Gaming Policy, both of which are incorporated herein by reference.
Data Controller
For the purposes of the Philippine Data Privacy Act of 2012, PHTYA acts as the personal information controller in respect of the personal data collected through the Platform.
As data controller, PHTYA determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data protection law.
If you have any questions or concerns about how PHTYA processes your personal data, you may contact our Data Protection Officer (DPO) using the contact details provided in Section 13 of this Policy.
Personal Data We Collect
PHTYA collects personal data in the following categories:
3.1 Data You Provide Directly
- Registration data: Full name, date of birth, gender, nationality, residential address (including city — e.g., Manila, Cebu, Davao, Quezon City, or Makati), email address, and mobile number;
- Identity verification (KYC) data: Government-issued ID (e.g., PhilSys ID, passport, driver's licence), selfie or liveness check images, and proof of address documents;
- Financial data: Payment method details (e.g., GCash account number, PayMaya account, BDO, BPI, or Metrobank account details), transaction history, deposit and withdrawal records denominated in Philippine Peso (PHP);
- Communications data: Messages, emails, and chat records exchanged with PHTYA customer support.
3.2 Data Collected Automatically
- Technical data: IP address, device type, operating system, browser type and version, and mobile device identifiers;
- Usage data: Pages visited, games played (including Ganesh Fortune, Monster Crash, Star Fishing, Monster Hi-Lo, Virtual Sports, Multi Bet, and Legend of Perseus), session duration, bet history, and click-stream data;
- Location data: General geographic location derived from your IP address;
- Cookie and tracking data: As described in Section 8 of this Policy.
Purpose & Legal Basis for Processing
PHTYA processes your personal data for the following purposes and on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Creating and managing your PHTYA account | Performance of contract |
| Processing deposits and withdrawals in PHP | Performance of contract |
| Verifying your identity and age (21+ requirement) | Legal obligation; legitimate interest |
| Preventing fraud, money laundering, and prohibited conduct | Legal obligation; legitimate interest |
| Complying with gaming regulatory requirements | Legal obligation |
| Providing customer support | Performance of contract; legitimate interest |
| Sending service-related communications | Performance of contract |
| Sending promotional communications (where consented) | Consent |
| Improving platform performance and user experience | Legitimate interest |
| Responsible gaming monitoring and intervention | Legal obligation; legitimate interest |
Where PHTYA relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Sharing Your Personal Data
PHTYA does not sell, rent, or trade your personal data to any third party for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
- Payment service providers: GCash, PayMaya, BDO, BPI, Metrobank, and other payment processors, solely to facilitate your financial transactions on the Platform;
- Identity verification providers: Third-party KYC and anti-money laundering (AML) service providers engaged to verify your identity and comply with regulatory obligations;
- Technology and hosting providers: Cloud infrastructure and software vendors who host and support the PHTYA platform under strict data processing agreements;
- Regulatory and law enforcement authorities: Philippine gaming regulators, the National Privacy Commission, law enforcement agencies, and courts, where PHTYA is legally required or permitted to disclose your data;
- Professional advisers: Lawyers, auditors, and accountants engaged by PHTYA in the course of their professional services, subject to confidentiality obligations;
- Business successors: In the event of a merger, acquisition, or sale of PHTYA's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.
All third-party service providers engaged by PHTYA are contractually required to process your personal data only for the specified purpose and in accordance with applicable data protection law.
Data Retention
PHTYA retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulatory obligations.
As a general guide:
- Account and transaction data is retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations applicable in the Philippines;
- KYC and identity verification documents are retained for the duration of your account and for five (5) years thereafter;
- Customer support communications are retained for three (3) years from the date of the last interaction;
- Marketing consent records are retained for as long as you remain a registered PHTYA player or until you withdraw consent, whichever is earlier;
- Technical and usage logs are retained for up to twelve (12) months for security and platform improvement purposes.
Upon expiry of the applicable retention period, PHTYA will securely delete or anonymise your personal data in accordance with its data disposal procedures.
Security Measures
PHTYA implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
- Encryption: All data transmitted between your device and the PHTYA platform is encrypted using SSL/TLS protocols. Sensitive data at rest is encrypted using industry-standard algorithms;
- Access controls: Access to personal data is restricted to authorised PHTYA personnel on a strict need-to-know basis. All access is logged and audited;
- Two-factor authentication: PHTYA supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorised access;
- Penetration testing and vulnerability assessments: PHTYA conducts regular security assessments of its platform infrastructure;
- Incident response: PHTYA maintains a data breach response procedure. In the event of a personal data breach that poses a risk to your rights and freedoms, PHTYA will notify the National Privacy Commission and affected players in accordance with applicable law.
While PHTYA takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your PHTYA account credentials.
Cookies & Tracking Technologies
PHTYA uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the Platform. The types of cookies we use are as follows:
- Strictly necessary cookies: Essential for the Platform to function. These include session cookies that keep you logged in to your PHTYA account. These cannot be disabled;
- Functional cookies: Remember your preferences, such as language settings and display options, to personalise your experience;
- Analytics cookies: Help PHTYA understand how players use the Platform — which games are most popular, where players encounter issues, and how navigation flows can be improved. Data collected is aggregated and anonymised where possible;
- Security cookies: Used to detect and prevent fraudulent activity and protect the integrity of the Platform.
You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the PHTYA platform. Strictly necessary cookies cannot be disabled as they are required for the Platform to operate.
Your Data Privacy Rights
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by PHTYA:
- Right to be informed: You have the right to be informed about how your personal data is collected and processed, as set out in this Privacy Policy;
- Right of access: You may request a copy of the personal data PHTYA holds about you, along with information about how it is being processed;
- Right to rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
- Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to PHTYA's legal retention obligations;
- Right to object: You may object to the processing of your personal data where PHTYA relies on legitimate interest as the legal basis, or where data is processed for direct marketing purposes;
- Right to data portability: You may request that PHTYA provide your personal data in a structured, commonly used, and machine-readable format;
- Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated.
To exercise any of the above rights, please contact PHTYA's Data Protection Officer using the contact details in Section 13. PHTYA will respond to all verified requests within thirty (30) days of receipt, in accordance with applicable law.
Minors
The PHTYA platform is strictly intended for persons who are at least 21 years of age, in accordance with Philippine gaming regulations. PHTYA does not knowingly collect personal data from individuals under the age of 21.
As part of our registration and identity verification process, PHTYA requires all players to confirm their date of birth and to submit government-issued identification. Any account found to belong to a person under 21 years of age will be immediately suspended, and any personal data collected will be deleted in accordance with our data disposal procedures.
If you believe that PHTYA has inadvertently collected personal data from a minor, please contact us immediately using the details in Section 13 so that we can take prompt corrective action.
International Data Transfers
PHTYA primarily stores and processes your personal data within the Philippines. However, some of our third-party service providers — including cloud hosting and technology partners — may process data in other jurisdictions.
Where personal data is transferred outside the Philippines, PHTYA ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under Philippine law. Such safeguards may include contractual clauses approved by the National Privacy Commission or equivalent data protection authorities.
By using the PHTYA platform, you acknowledge and consent to the transfer of your personal data to jurisdictions outside the Philippines where necessary for the operation of the Platform, subject to the safeguards described above.
Policy Amendments
PHTYA reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via the email address associated with their PHTYA account and/or by displaying a prominent notice on the Platform.
The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed of how PHTYA protects your personal data.
Your continued use of the PHTYA platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.
Contact & Complaints
If you have any questions, concerns, or requests regarding this Privacy Policy or the way PHTYA processes your personal data, please contact our Data Protection Officer. Our support team is available 24 hours a day, 7 days a week.
You may reach us at the following email address (plain text — not a clickable link):
If you are not satisfied with PHTYA's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines.
When contacting us regarding a data privacy matter, please include your registered PHTYA username and a clear description of your request or concern to help us respond as efficiently as possible.
Your Data is Safe. Play at PHTYA Today
Now that you know how PHTYA protects your personal information, it's time to enjoy the games. Register your account in minutes, fund it via GCash, PayMaya, or your local bank, and start playing Ganesh Fortune, Monster Crash, Star Fishing, and more — all in Philippine Peso, all on a platform built with your privacy in mind.
21+ only. Gambling involves financial risk. Please play responsibly.