phtays
Privacy Policy

Last Updated: 1 January 2026

1. Introduction

phtays ("we", "us", "our") operates the online gaming platform accessible at phtays.com, including any associated mobile applications and digital services (collectively, the "Platform"). We are committed to safeguarding the privacy and personal data of every individual who accesses or uses the phtays Platform.

This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by phtays. It applies to all players, registered users, and visitors to the phtays Platform, regardless of whether you are based in Metro Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the Philippines.

By accessing the phtays Platform or registering for an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this policy, you must not use the phtays Platform.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 and its implementing rules and regulations, phtays is the personal information controller in respect of the personal data collected through the phtays Platform. This means phtays determines the purposes and means of processing your personal data.

If you have any questions about how phtays handles your personal data, or wish to exercise any of your data subject rights, please contact our Data Protection Officer using the contact details set out in Section 15 of this policy.

3. Personal Data We Collect

phtays collects the following categories of personal data from players and users of the Platform:

3.1 Identity & Registration Data

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Gender
• Government-issued identification number (e.g., Philippine passport, driver's licence, SSS/UMID card number)
• Username and password (stored in encrypted form)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including city, province, and postal code)

3.3 Financial & Transaction Data

• Payment method details (e.g., GCash account reference, PayMaya account reference, BPI, BDO, or Metrobank account details — stored in tokenised form only)
• Deposit and withdrawal history
• Account balance and transaction records
• Bonus and promotional credit history

3.4 Gaming Activity Data

• Game session history, including games played, stakes placed, and outcomes
• Wagering patterns and frequency of play
• Responsible gaming tool usage (e.g., deposit limits set, self-exclusion requests)

3.5 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited on the phtays Platform and time spent on each
• Referring URLs and search terms used to find phtays
• Cookie identifiers and session tokens

3.6 Communications Data

• Records of communications between you and the phtays support team
• Feedback, complaints, and survey responses submitted to phtays

4. How We Collect Your Data

phtays collects personal data through the following means:

4.1 Directly From You

The majority of personal data phtays holds about you is provided directly by you when you register for a phtays account, complete KYC verification, make a deposit or withdrawal, contact our support team, or participate in promotions and surveys.

4.2 Automatically Through the Platform

When you access and use the phtays Platform, we automatically collect certain technical and usage data through cookies, web beacons, server logs, and similar tracking technologies. This data helps us maintain platform security, analyse usage patterns, and improve the phtays experience for all Filipino players.

4.3 From Third Parties

phtays may receive personal data about you from third-party identity verification providers, fraud prevention services, and payment processors (such as GCash and PayMaya) where necessary to verify your identity, process transactions, or comply with our legal obligations under PAGCOR regulations and Philippine anti-money laundering laws.

5. How We Use Your Personal Data

phtays uses the personal data we collect for the following purposes:

Purpose	Data Used
Creating and managing your phtays account	Identity, contact, and registration data
Verifying your age (21+) and identity (KYC)	Identity data, government ID information
Processing deposits and withdrawals (GCash, PayMaya, BPI, BDO, Metrobank)	Financial and transaction data
Providing and improving phtays games and services	Gaming activity and technical data
Detecting and preventing fraud, cheating, and money laundering	All categories of data
Complying with PAGCOR regulations and Philippine law	Identity, financial, and gaming data
Sending account-related notifications and support communications	Contact and communications data
Administering responsible gaming tools and self-exclusion	Identity and gaming activity data
Analysing platform usage and improving user experience	Technical and usage data
Sending promotional communications (where you have consented)	Contact data and gaming preferences

6. Legal Basis for Processing

phtays processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to fulfil our contract with you as a registered phtays player, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, anti-money laundering obligations, and tax reporting requirements.
• Legitimate interests: Processing necessary for phtays's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, and informed consent, such as the sending of promotional communications. You may withdraw your consent at any time by contacting phtays support.

7. Sharing Your Personal Data

phtays does not sell, rent, or trade your personal data to third parties. We may share your personal data with the following categories of recipients only where strictly necessary and in accordance with this Privacy Policy:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification services used to confirm your identity and eligibility to use phtays.
• Fraud prevention services: Providers of fraud detection and anti-money laundering screening tools used to protect the integrity of the phtays Platform.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies where disclosure is required by law.
• IT and hosting providers: Third-party service providers who host and maintain the phtays Platform infrastructure, subject to strict data processing agreements.
• Professional advisers: Lawyers, auditors, and other professional advisers where necessary for the conduct of phtays's business.

8. Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device when you visit the phtays Platform. They allow phtays to recognise your device, maintain your session, and collect usage data to improve the Platform.

8.2 Types of Cookies Used by phtays

• Strictly necessary cookies: Essential for the operation of the phtays Platform, including session management and security. These cannot be disabled.
• Functional cookies: Remember your preferences and settings on phtays, such as your preferred language and display options.
• Analytics cookies: Help phtays understand how players use the Platform so we can improve performance and user experience. Data collected is aggregated and anonymised where possible.

8.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phtays Platform and your ability to access some features. Strictly necessary cookies cannot be disabled as they are essential to the operation of phtays.

9. Data Retention

phtays retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In general, phtays applies the following retention periods:

• Account and identity data: Retained for the duration of your phtays account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLC record-keeping requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by Philippine anti-money laundering regulations.
• Gaming activity data: Retained for three (3) years from the date of the relevant gaming session.
• Technical and usage data: Retained for up to twelve (12) months from the date of collection.
• Communications data: Retained for three (3) years from the date of the communication.

Where phtays is required to retain data for longer periods by applicable law or regulatory directive, the longer retention period shall apply.

10. Data Security

phtays implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phtays Platform
• Encryption of sensitive data at rest, including passwords and payment method details
• Strict access controls limiting access to personal data to authorised phtays personnel on a need-to-know basis
• Regular security assessments and penetration testing of the phtays Platform
• Two-factor authentication options for player accounts
• Continuous monitoring for suspicious activity and potential data breaches

11. Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phtays:

• Right to be informed: The right to be informed of how your personal data is being collected and processed by phtays, as set out in this Privacy Policy.
• Right of access: The right to request a copy of the personal data phtays holds about you and information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data phtays holds about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phtays's legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on phtays's legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe phtays has not handled your personal data in accordance with applicable law.

To exercise any of these rights, please contact the phtays Data Protection Officer using the details in Section 15. phtays will respond to all verified data subject requests within thirty (30) days of receipt, in accordance with the requirements of the Philippine Data Privacy Act.

12. Children's Privacy

The phtays Platform is strictly intended for individuals who are 21 years of age or older, as required under Philippine gaming regulations. phtays does not knowingly collect personal data from individuals under the age of 21.

If phtays becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on phtays, please contact our support team immediately.

13. International Data Transfers

phtays primarily processes and stores personal data within the Republic of the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines — for example, for the provision of cloud hosting or fraud prevention services — phtays ensures that such transfers are conducted in accordance with the requirements of the Philippine Data Privacy Act, including the implementation of appropriate safeguards such as data processing agreements that require the recipient to provide a level of data protection equivalent to that required under Philippine law.

14. Updates to This Privacy Policy

phtays reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is indicated at the top of this page.

Where changes to this Privacy Policy are material, phtays will notify registered players by email or by posting a prominent notice on the Platform prior to the changes taking effect. Your continued use of the phtays Platform after any amendment constitutes your acceptance of the revised Privacy Policy.

15. Contact Us & Complaints

If you have any questions, concerns, or complaints about this Privacy Policy or the way phtays handles your personal data, please contact our Data Protection Officer:

Data Protection Officer, phtays
Email: [email protected]
General Support: [email protected]

phtays will acknowledge all privacy-related enquiries within five (5) business days and will endeavour to resolve complaints within thirty (30) days of receipt.

If you are not satisfied with phtays's response to your complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available through official Philippine government channels.