phtaya17 Privacy Policy

1 Introduction

phtaya17 is committed to protecting the privacy and personal data of all Players who use our online gaming platform. We understand that entrusting us with your personal information is a significant act of confidence, and we take that responsibility seriously.

This Policy applies to all personal data collected through the phtaya17 website, mobile interface, customer support channels, and any other touchpoints associated with the phtaya17 platform. It covers Players based in the Philippines and is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations.

We encourage you to read this Policy carefully and in full. If you have any questions about how phtaya17 handles your personal data, our Data Protection Officer is available to assist — contact details are provided in Section 16.

2 Data Controller

For the purposes of the Philippine Data Privacy Act of 2012, phtaya17 acts as the Personal Information Controller in respect of the personal data collected through the phtaya17 platform. This means phtaya17 determines the purposes and means by which your personal data is processed.

phtaya17 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO directly using the details provided in Section 16 of this Policy.

3 Data We Collect

phtaya17 collects the following categories of personal data from Players. We only collect data that is necessary for the purposes described in this Policy:

phtaya17 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by law (for example, information related to self-exclusion or responsible gaming interventions).

4 How We Collect Data

phtaya17 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access and interact with the phtaya17 platform, including through cookies, log files, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud screening data from anti-fraud partners; payment data from GCash, PayMaya, and banking partners in connection with your transactions.
• Publicly available sources: In limited circumstances, phtaya17 may verify information against publicly available records to confirm identity or detect fraud.

5 How We Use Your Data

phtaya17 uses the personal data we collect for the following purposes:

• Account management: Creating, maintaining, and securing your phtaya17 account, including verifying your identity and age (21+ requirement) during registration.
• Service delivery: Enabling you to access and play Games, process deposits and withdrawals in Philippine Peso (PHP), and use all features of the phtaya17 platform.
• Regulatory compliance: Fulfilling our obligations under Philippine gaming regulations, anti-money laundering laws, and the Data Privacy Act, including KYC verification and transaction monitoring.
• Fraud prevention and security: Detecting, investigating, and preventing fraudulent activity, unauthorized account access, and other security threats.
• Responsible gaming: Monitoring gaming behavior to identify potential problem gambling patterns and administering responsible gaming tools such as deposit limits and self-exclusion.
• Customer support: Responding to your inquiries, resolving disputes, and providing technical assistance.
• Platform improvement: Analyzing usage patterns to improve the phtaya17 platform, fix bugs, and develop new features.
• Marketing communications: Sending you promotional offers, bonus notifications, and platform updates — only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out option.

phtaya17 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent.

6 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phtaya17 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration, including account management, game access, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including gaming regulations, anti-money laundering requirements, and tax obligations.
• Legitimate interests: Processing necessary for phtaya17's legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights and freedoms.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for marketing communications and optional data uses. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7 Data Sharing & Disclosure

phtaya17 does not sell your personal data. We may share your personal information with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your deposits and withdrawals.
• KYC and identity verification providers: Third-party services that assist phtaya17 in verifying your identity and age as required by Philippine regulations.
• Fraud prevention and security partners: Service providers that help phtaya17 detect and prevent fraudulent activity and unauthorized access.
• IT and platform service providers: Cloud hosting, data storage, and technical infrastructure providers who process data on phtaya17's behalf under strict confidentiality agreements.
• Regulatory and law enforcement authorities: Philippine government agencies, including PAGCOR, the Anti-Money Laundering Council (AMLC), and the National Privacy Commission, where disclosure is required by law or court order.
• Professional advisors: Legal counsel, auditors, and other professional advisors, subject to professional confidentiality obligations.

8 Cookies & Tracking Technologies

phtaya17 uses cookies and similar tracking technologies to enhance your experience on the platform, maintain session security, and gather analytics data. The types of cookies we use include:

• Essential cookies: Required for the platform to function correctly, including session management, login authentication, and security features. These cannot be disabled without affecting platform functionality.
• Analytics cookies: Used to collect aggregated, anonymized data about how Players use the phtaya17 platform, helping us identify areas for improvement.
• Preference cookies: Used to remember your settings and preferences, such as language selection and display options.
• Security cookies: Used to detect and prevent fraudulent activity, bot access, and other security threats.

You may control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phtaya17 platform. phtaya17 does not use third-party advertising cookies or behavioral tracking cookies for external advertising purposes.

9 Data Retention

phtaya17 retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable law. Our general retention periods are as follows:

• Account data: Retained for the duration of your active account, plus a minimum of five (5) years following account closure, as required by Philippine anti-money laundering regulations.
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with financial record-keeping requirements.
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by law.
• Customer support records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution.
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter to demonstrate compliance.

When personal data is no longer required, phtaya17 will securely delete or anonymize it in accordance with our data disposal procedures.

10 Data Security

phtaya17 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phtaya17 platform.
• Encryption of sensitive data at rest, including financial information and government ID details.
• Role-based access controls ensuring that only authorized phtaya17 personnel can access personal data, and only to the extent necessary for their role.
• Regular security audits, vulnerability assessments, and penetration testing of the phtaya17 platform.
• Multi-factor authentication options for Player accounts.
• Continuous monitoring for suspicious activity and automated fraud detection systems.
• Staff training on data protection and information security best practices.

While phtaya17 takes every reasonable precaution to protect your data, no system is completely immune to security risks. In the event of a data breach that poses a risk to your rights and freedoms, phtaya17 will notify you and the National Privacy Commission as required by law.

11 Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtaya17:

• Right to be informed: The right to know what personal data phtaya17 collects about you and how it is used — which this Policy fulfills.
• Right of access: The right to request a copy of the personal data phtaya17 holds about you.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used format and to transmit it to another service provider where technically feasible.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact phtaya17's Data Protection Officer using the details in Section 16. We will respond to all valid requests within thirty (30) days. In complex cases, we may extend this period by a further thirty (30) days, with prior notification.

12 Children's Privacy

The phtaya17 platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. phtaya17 does not knowingly collect personal data from individuals under the age of 21.

If phtaya17 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete all personal data collected from that individual, and take appropriate action in accordance with our legal obligations.

If you are a parent or guardian and believe that your child has registered on the phtaya17 platform, please contact us immediately using the details in Section 16 so that we can take prompt action.

13 International Data Transfers

phtaya17 primarily stores and processes personal data within the Philippines. In limited circumstances, personal data may be transferred to or accessed from servers or service providers located outside the Philippines — for example, in connection with cloud infrastructure or specialized technical services.

Where such transfers occur, phtaya17 ensures that appropriate safeguards are in place to protect your personal data, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under Philippine law.
• Transfers only to countries or organizations that provide an adequate level of data protection as recognized by the National Privacy Commission.
• Your explicit consent, where required by applicable law.

phtaya17 will not transfer your personal data internationally in a manner that undermines the protections afforded to you under the Philippine Data Privacy Act.

14 Third-Party Services

The phtaya17 platform may integrate with third-party services to deliver certain features, including payment processing, identity verification, and game content. These third-party services operate under their own privacy policies, and phtaya17 is not responsible for the data practices of third parties.

phtaya17 carefully selects third-party partners and requires them to maintain data protection standards consistent with applicable Philippine law. We conduct due diligence on all third-party processors before engaging their services and review these arrangements periodically.

The phtaya17 platform does not contain links to external third-party websites. Any third-party integrations are embedded within the platform itself and are subject to the data sharing arrangements described in Section 7 of this Policy.

15 Changes to This Policy

phtaya17 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When material changes are made, phtaya17 will notify registered Players via email or a prominent notice on the platform prior to the changes taking effect.

The effective date at the top of this Policy will always reflect the date of the most recent revision. We encourage you to review this Policy periodically to stay informed about how phtaya17 protects your personal data.

Your continued use of the phtaya17 platform following the effective date of any revised Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you should cease using the platform and may request account closure by contacting our support team.

16 Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or phtaya17's data practices, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 directly on the phtaya17 platform
• Email (DPO): [email protected]
• General Support: [email protected]

phtaya17 aims to respond to all privacy-related inquiries within five (5) business days. For formal data rights requests, we will respond within thirty (30) days as described in Section 11.

If you are not satisfied with phtaya17's response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. The NPC is the independent authority responsible for enforcing the Data Privacy Act and can be reached through their official government channels.