phtayavip Privacy Policy

1. About This Policy

This Privacy Policy ("Policy") describes how phtayavip ("the Company," "We," "Us," or "Our") collects, processes, stores, uses, and discloses personal data in connection with the operation of the phtayavip online gaming platform ("Platform") at phtayavip.club.

This Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission (NPC). Where applicable, this Policy also reflects international privacy standards including those set out in ISO/IEC 29101.

By registering an account or using the phtayavip Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not consent, you should not use the Platform.

2. Data Controller Information

phtayavip is the data controller for personal data collected through the Platform. The Data Protection Officer (DPO) is responsible for overseeing data protection practices at phtayavip and can be contacted via:

Email: [email protected]
Live Chat: Available 24/7 on the phtayavip Platform.

Players located in the Philippines may also exercise their rights under the Data Privacy Act of 2012 by contacting the National Privacy Commission directly. phtayavip cooperates fully with all lawful NPC inquiries.

3. Personal Data We Collect

phtayavip collects personal data through multiple channels. The categories of personal data collected, and the context in which they are collected, are set out below:

Category	Examples	Collection Point
Identity Data	Full legal name, date of birth, government ID details, selfie/photo for KYC	Registration, KYC verification
Contact Data	Email address, mobile number, residential address	Registration, account settings
Financial Data	GCash/PayMaya account references, bank account details, transaction records	Cashier, deposits, withdrawals
Technical Data	IP address, device type, browser, operating system, session logs	Automatic collection on Platform access
Usage Data	Games played, bets placed, session duration, login history, pages visited	Automatic collection during Platform use
Communications Data	Live chat transcripts, email correspondence, support ticket history	Customer support interactions
Marketing Preferences	Opt-in/opt-out status for promotional communications	Registration, account settings

phtayavip does not collect sensitive personal information (as defined under the Data Privacy Act) beyond what is strictly necessary for identity verification and regulatory compliance purposes. We do not collect biometric data beyond the photos and government ID images required for KYC.

4. How We Use Your Personal Data

phtayavip uses personal data for the following purposes:

• Account Administration: To register your account, verify your identity, manage your account settings, and process your transactions including deposits and withdrawals.
• Service Delivery: To provide access to games, process wagers, calculate and credit winnings, and operate the Rewards loyalty programme.
• Regulatory Compliance: To fulfill KYC, anti-money laundering (AML), and responsible gaming obligations required under applicable Philippine regulations.
• Security and Fraud Prevention: To monitor transactions for suspicious activity, prevent fraud, detect multiple account registration, and enforce our Terms & Conditions.
• Customer Support: To respond to your queries, resolve disputes, and provide technical assistance.
• Marketing Communications: To send you promotional offers, bonus notifications, and product updates — subject to your marketing preferences. You may opt out at any time.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the performance and functionality of the phtayavip Platform.
• Legal Obligations: To comply with court orders, regulatory requests, or other lawful obligations imposed on the Company.

phtayavip does not use automated decision-making or profiling that produces legal or similarly significant effects on players, except in the context of responsible gaming tools such as deposit limit calculations and session time tracking.

5. Legal Basis for Processing

phtayavip processes personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to perform our obligations under the Terms & Conditions, including operating your account and processing transactions.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML, KYC, and tax regulations.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement — where these interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing based on other legal bases.

6. Sharing of Personal Data

phtayavip does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment Processors: To facilitate deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and 7-Eleven. These processors handle your financial data under their own privacy policies and are bound by contractual data processing agreements with phtayavip.
• Game Content Providers: Limited technical data (session tokens, game results) is shared with our certified game studio partners to operate game functionality. These providers do not receive your identity or contact data.
• Regulatory Authorities: We may disclose personal data to the National Privacy Commission, law enforcement agencies, or other competent authorities where required by law or court order.
• Professional Advisors: Legal counsel, auditors, and compliance consultants may access personal data on a confidential basis where strictly necessary to provide their services.
• Corporate Transactions: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring entity, subject to equivalent privacy protections.

All third parties with whom phtayavip shares personal data are required to handle that data in accordance with applicable Philippine data privacy law and are prohibited from using it for any purpose other than that for which it was disclosed.

7. Cookies and Tracking Technologies

phtayavip uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files stored on your device that enable us to recognise your browser and remember certain information about your preferences and activity.

7.1 Types of Cookies Used

• Strictly Necessary Cookies: Required for core Platform functionality, including login sessions, game state, and cashier operations. These cannot be disabled without affecting your ability to use the Platform.
• Performance and Analytics Cookies: Collect anonymised data about how players use the Platform — which pages are visited most, which features are used — to help us improve the service.
• Functional Cookies: Remember your preferences such as language, display settings, and recently played games.

You may configure your browser to refuse cookies, though this may impair certain Platform features. phtayavip does not use third-party advertising or tracking cookies.

8. Data Retention

phtayavip retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AML record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction.
• Communications Data: Retained for three (3) years from the date of the communication.
• Technical and Usage Data: Retained for up to twelve (12) months in identified form; aggregated anonymised data may be retained indefinitely for analytical purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised. Players may request earlier deletion of certain categories of data, subject to the Company's legal retention obligations — see Section 10 for details of your data subject rights.

9. Security of Personal Data

phtayavip implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and phtayavip servers.
• Encryption of sensitive data fields at rest, including passwords (hashed with bcrypt), financial account references, and government ID details.
• Role-based access controls restricting staff access to personal data on a need-to-know basis.
• Regular penetration testing and security audits by independent cybersecurity professionals.
• Incident response procedures for the timely detection, reporting, and remediation of personal data breaches.

In the event of a personal data breach that poses a real risk to your rights and freedoms, phtayavip will notify the National Privacy Commission and, where required, affected data subjects, within 72 hours of becoming aware of the breach.

10. Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtayavip:

To exercise any of these rights, contact phtayavip at [email protected] or via live chat. We will respond to all data subject requests within thirty (30) days. We may require proof of identity before processing a request.

11. Children's Privacy

The phtayavip Platform is strictly restricted to individuals aged 21 years and above. phtayavip does not knowingly collect, use, or store personal data of individuals under 21 years of age. If we become aware that personal data belonging to an individual under 21 has been collected, we will delete that data immediately and close the associated account. If you believe a minor has created a phtayavip account, please contact us immediately at [email protected].

12. Changes to This Privacy Policy

phtayavip reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or Platform features. When material changes are made, we will notify registered players via email to their registered address or via an in-platform notification at least fourteen (14) days before the changes take effect.

Continued use of the phtayavip Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. The "Last Updated" date at the top of this Policy will always reflect the date of the most recent revision.

13. Contact and Complaints

If you have any questions, concerns, or complaints regarding this Privacy Policy or phtayavip's data processing practices, please contact our Data Protection Officer:

Email: [email protected]
Live Chat: Available 24/7 on the phtayavip Platform.

If you are not satisfied with our response to your privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about the NPC complaint process is available through official Philippine government channels.