Privacy Policy – Phtaya22 Online Casino Philippines

1. Information We Collect

When you register a Phtaya22 account or use our services, we collect the following categories of personal data:

• Identity Information: Full name, date of birth, nationality, and a valid government-issued ID (e.g., PhilSys, SSS, UMID, passport, driver's license).
• Contact Details: Email address, mobile number, and residential address in the Philippines.
• Account Credentials: Username and encrypted password. We never store plain-text passwords.
• Financial Information: GCash number, Maya account, bank account details (BDO, BPI, UnionBank, or other participating banks), and transaction records related to your deposits and withdrawals.
• Device and Technical Data: IP address, browser type and version, operating system, device identifiers, and session logs. This helps us detect fraud and ensure our platform runs smoothly on your device.
• Gaming Activity: Game history, bet amounts, win/loss records, bonus usage, and session timestamps. This data is required by our licensing authority for regulatory compliance and responsible gaming monitoring.
• Communications: Records of your interactions with our customer support team, whether via live chat, email, or in-app messages.

We collect this information directly from you when you register, deposit funds, make a withdrawal, or contact support. Some technical data is collected automatically when you use our platform.

2. Why We Collect Your Data

Phtaya22 only collects personal data for specific, legitimate purposes. Here's a straight breakdown of what we use your information for:

• Account Management: To create, verify, and maintain your Phtaya22 account. Without this, you cannot register or log in.
• KYC and Identity Verification: Philippine gaming regulations require us to verify the identity of all players before allowing withdrawals or large deposits. This helps prevent fraud and underage gambling.
• Processing Payments: To facilitate deposits via GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet bank transfers, and Visa/Mastercard bank cards — and to process your withdrawal requests to your preferred local payment method.
• Regulatory Compliance: We are required by our gaming license and by Philippine law to maintain records of player activity, report suspicious transactions, and cooperate with regulatory bodies.
• Fraud Prevention and Security: We analyse device and behavioural data to detect and block fraudulent activity, account takeovers, and money laundering attempts.
• Customer Support: To identify you when you contact us and to resolve your concerns efficiently.
• Responsible Gaming: To monitor gaming patterns and intervene where we see signs of problematic gambling behaviour, in line with our Responsible Gaming commitments.
• Platform Improvement: Aggregated and anonymised usage data helps us improve our games, features, and overall player experience.
• Marketing (with consent): To send you updates about promotions, bonuses, and new games — but only if you have opted in. You can withdraw consent at any time.

3. How We Share Your Information

We do not sell your personal data. Period. However, to run the Phtaya22 platform properly, we share data with the following trusted parties under strict confidentiality agreements:

• Payment Service Providers: GCash, Maya, GrabPay, InstaPay/PESONet-participating banks, and card processing networks — only the data needed to complete your transaction.
• Identity Verification Services: Third-party KYC providers that help us verify government IDs and confirm player identities as required by our license.
• Game Providers: Software studios whose games are hosted on our platform may receive your player ID and game-session data to resolve technical disputes.
• Fraud Detection and Cybersecurity Partners: Specialised firms that help us detect suspicious activity and protect our platform from bad actors.
• Regulatory and Government Authorities: We will disclose data when legally required — for example, in response to a valid court order, subpoena, or request from the National Privacy Commission or other Philippine authorities.
• Cloud and Hosting Providers: Our infrastructure partners store data in secure data centres. All such partners are contractually bound to protect your information.

All third parties who handle your data are required to implement adequate data protection measures and are prohibited from using your information for their own purposes beyond what is necessary for the service they provide to Phtaya22.

4. Data Storage and Retention

Your personal data is stored on secure servers. We retain personal information for as long as your account is active and for a minimum of five (5) years after account closure, as required by Philippine gaming and anti-money laundering regulations.

After the retention period ends, we securely delete or anonymise your data so that it can no longer be linked back to you. If you request account deletion, we will process it in accordance with legal retention obligations — meaning some financial and identity records may need to be kept for the mandated regulatory period even after account closure.

5. Cookies and Tracking Technologies

Phtaya22 uses cookies and similar technologies (such as web beacons and local storage) to make our platform work properly and to improve your experience. Here's what we use them for:

• Essential Cookies: Required for the platform to function — keeping you logged in, remembering your language preference, and securing your session.
• Analytics Cookies: Help us understand how players navigate the site so we can improve layout, speed, and content. Data collected is aggregated and anonymised.
• Security Cookies: Used to detect and prevent fraudulent or suspicious activity.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies may affect your ability to use certain features of the Phtaya22 platform.

6. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information held by Phtaya22:

• Right to be Informed: You have the right to know what personal data we hold about you and how we use it — which is exactly what this Privacy Policy is for.
• Right to Access: You can request a copy of the personal data we hold on you at any time.
• Right to Correction: If any of your personal data is inaccurate or outdated, you can request that we correct it.
• Right to Erasure (Right to be Forgotten): You may request deletion of your personal data, subject to our legal retention obligations.
• Right to Data Portability: You can request your personal data in a structured, commonly used format.
• Right to Object: You can object to the processing of your personal data for direct marketing purposes at any time.
• Right to Lodge a Complaint: If you believe your privacy rights have been violated, you can file a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, contact us at support@phtaya22.app. We will respond to all legitimate requests within 15 business days.

7. Data Breach Notification

In the unlikely event of a data breach that affects your personal information and poses a risk to your rights, Phtaya22 will notify you and the National Privacy Commission within the timeframes required by Philippine law — generally within 72 hours of becoming aware of the breach. We will inform you of the nature of the breach, the data affected, the steps we have taken to address it, and the actions you should take to protect yourself.

8. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. When we make material changes, we will notify you via email or a prominent notice on the Phtaya22 website at least 30 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.

Continuing to use Phtaya22 after an update takes effect means you accept the revised Privacy Policy. If you disagree with the changes, you may close your account before the effective date.

9. Contact Our Data Protection Officer

If you have any questions, concerns, or requests about this Privacy Policy or about how Phtaya22 handles your personal data, please get in touch with our Data Protection Officer (DPO):

• Email: support@phtaya22.app
• Platform: phtaya22.app
• Response Time: Within 15 business days

We're here to help, Kabayan. Don't hesitate to reach out if something in this policy is unclear or if you need to exercise your data rights.