At phtya, your personal information belongs to you. This Privacy Policy explains exactly what data we collect from players across the Philippines, why we collect it, who we share it with, and the rights you have over it. We believe transparency isn't optional — it's the standard.
As a phtya player in the Philippines, you have specific rights over your personal data under the Data Privacy Act of 2012 (Republic Act No. 10173).
You have the right to request a copy of all personal information phtya holds about you, including how it was collected, the purpose of processing, and who it has been shared with. Submit an access request to our Data Privacy Officer at any time.
If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request a correction. phtya will update verified corrections within 5 business days of receiving your request and supporting documentation.
Subject to applicable legal and regulatory retention obligations, you may request the deletion of personal data phtya holds about you. Certain data — particularly transaction records required by AMLC regulations — must be retained for defined periods regardless of erasure requests.
You may object to the processing of your personal data for marketing and promotional purposes at any time. phtya will cease sending promotional communications within 5 business days of receiving a valid opt-out request. Game operation and compliance processing cannot be objected to.
You have the right to receive your personal data from phtya in a structured, commonly used, machine-readable format and to have that data transmitted to another service provider where technically feasible and legally permissible.
In the event of a personal data breach that is likely to give rise to a real risk to your rights and freedoms, phtya will notify affected players and the National Privacy Commission (NPC) of the Philippines within 72 hours of becoming aware of the breach.
This Privacy Policy is issued by phtya ("phtya," "we," "us," or "our") and applies to all personal information collected from registered Players, website visitors, and individuals who interact with the phtya platform at phtya.org. This Policy is issued in compliance with the Data Privacy Act of 2012 of the Philippines (Republic Act No. 10173) and its Implementing Rules and Regulations, and should be read together with the phtya Terms & Conditions.
By accessing the phtya platform, completing the registration process, or using any phtya service, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you should discontinue use of the phtya platform immediately.
phtya is committed to processing your personal data lawfully, fairly, and transparently. We collect only the information we genuinely need, retain it only for as long as necessary, and protect it using industry-standard security measures throughout its lifecycle on our systems.
For the purposes of the Data Privacy Act of 2012, phtya is the personal information controller with respect to all personal data collected from individuals who use the phtya platform. phtya has appointed a Data Privacy Officer (DPO) who is responsible for overseeing compliance with this Policy and with applicable Philippine data protection law.
You may contact the phtya Data Privacy Officer with any privacy-related inquiry, correction request, access request, or complaint. Contact details for the DPO are provided in Section 16 of this Policy.
phtya collects the following categories of personal data from Players and visitors, depending on the nature of your interaction with the Platform:
phtya does not intentionally collect sensitive personal information beyond what is necessary for regulatory compliance (e.g., identity verification to confirm age and nationality as required by PAGCOR). We do not collect biometric data unless you opt in to biometric login features on supported devices.
The majority of personal data phtya collects is provided directly by you in the following circumstances: when you complete the phtya registration form; when you submit KYC verification documents; when you make a deposit or request a withdrawal; when you contact phtya customer support; when you set responsible gaming limits or self-exclusion preferences; and when you update your account profile information.
When you access phtya.org or use the phtya platform, technical data is automatically collected by our systems. This includes your IP address, the device and browser you are using, the pages you visit, your session duration, and interaction logs within games. This data is collected using standard web server logs and first-party analytics tools.
phtya may receive personal data about you from the following third-party sources: payment processors (e.g., GCash, Maya, BPI) who confirm the success or failure of deposit and withdrawal transactions; identity verification service providers who assist with KYC processing; fraud detection and anti-money laundering service providers; and PAGCOR or other regulatory authorities in the Philippines, where legally required.
phtya processes your personal data only for specific, legitimate purposes. The primary purposes for which we process personal data include:
Under the Data Privacy Act of 2012, phtya is required to identify a lawful basis for each category of personal data processing. The legal bases on which phtya relies are as follows:
Where phtya relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal, nor does it affect processing carried out on other legal bases.
phtya does not sell your personal data to third parties. We do not share your information with commercial partners for their own marketing purposes. Personal data is shared with third parties only in the following circumstances:
phtya engages trusted third-party service providers who process personal data on our behalf and under our instruction, including: payment processors (GCash/GXI, Maya/Voyager Innovations, BPI, BDO, Metrobank, and cryptocurrency networks); KYC and identity verification providers; IT infrastructure and cloud hosting providers; fraud detection and anti-money laundering screening providers; customer support platform providers; and email and SMS communication service providers. All processors are bound by data processing agreements that restrict the use of your data to phtya's specified purposes.
phtya will disclose personal data to the extent required by applicable Philippine law or the order of a competent authority, including: PAGCOR, as part of regulatory reporting and compliance obligations; the Anti-Money Laundering Council (AMLC), pursuant to AMLA reporting requirements; the Bureau of Internal Revenue (BIR), in connection with applicable tax obligations; Philippine law enforcement agencies, where required by court order or lawful request; and the National Privacy Commission (NPC), in relation to data breach notifications or investigation procedures.
In the event of a merger, acquisition, restructuring, or sale of assets involving phtya, personal data held by phtya may be transferred to the successor entity as part of the transaction. Players will be notified of any such transfer that materially affects the processing of their personal data.
Important: phtya will never sell, rent, or commercially exchange your personal data with unaffiliated third parties for their own marketing or commercial purposes.
phtya retains personal data only for as long as it is necessary for the purposes set out in this Policy, or as required by applicable Philippine law. Our standard retention periods are as follows:
When personal data is no longer required, phtya will securely delete or anonymise it in accordance with our data deletion procedures.
phtya implements technical and organisational security measures designed to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:
While phtya implements robust security measures, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your login credentials and for promptly notifying phtya of any suspected unauthorised access to your account.
phtya uses first-party cookies and similar tracking technologies on the phtya.org platform. Cookies are small data files placed on your device that enable platform functionality and help us understand how the Platform is being used. phtya uses the following categories of cookies:
You may configure your browser settings to refuse or delete cookies. Note that refusing strictly necessary cookies will impair your ability to use the phtya platform, including logging in to your account.
phtya may send promotional emails and SMS notifications to Players who have opted in to marketing communications during the registration process or subsequently through their account settings. Marketing communications from phtya may include: deposit bonus offers; free spin promotions; bingo event notifications; seasonal campaigns; and platform feature announcements.
You may opt out of marketing communications at any time by: updating your notification preferences in your phtya Account Settings; clicking the "unsubscribe" link in any phtya promotional email; or contacting phtya support at [email protected] with an opt-out request.
Opting out of marketing communications does not affect your receipt of transactional communications (such as deposit confirmations, withdrawal notifications, security alerts, and account-related notices), which are necessary for the operation of your phtya account.
21+ Only. The phtya platform is strictly for individuals who are 21 years of age or older. phtya does not knowingly collect or process the personal data of individuals under the age of 21.
If phtya becomes aware that personal data has been collected from an individual under the age of 21, that data will be deleted and the associated account will be immediately and permanently closed. If you are a parent or guardian and believe that your child's personal data has been collected by phtya, please contact our Data Privacy Officer immediately at [email protected].
Under the Data Privacy Act of 2012 (RA 10173), you have the following rights with respect to your personal data held by phtya: the right to be informed, the right to access, the right to object, the right to erasure or blocking, the right to damages, the right to file a complaint, the right to rectify, and the right to data portability.
To exercise any of these rights, please submit a written request to the phtya Data Privacy Officer at [email protected]. Your request should include: your full name as registered on your phtya account; your registered email address; a description of the right you wish to exercise and the specific data concerned; and, where an access or correction request is being made, a copy of a valid Philippine government-issued identification document to verify your identity.
phtya will acknowledge receipt of your request within 3 business days and will respond substantively within 15 business days of receiving your verified request. Where the nature or volume of the request requires additional time, phtya will notify you of the extended timeline.
If you believe that phtya has processed your personal data in a manner that is inconsistent with the Data Privacy Act of 2012 or with this Privacy Policy, you have the right to file a complaint. phtya encourages you to contact our Data Privacy Officer in the first instance, as many privacy concerns can be resolved directly and efficiently through this channel.
If you are not satisfied with phtya's response to your complaint, you have the right to refer the matter to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent government body responsible for enforcing data privacy rights under RA 10173. Information on how to file a complaint with the NPC is available through the NPC's official communications channels.
phtya reserves the right to update or amend this Privacy Policy from time to time in response to changes in Philippine law, regulatory guidance from PAGCOR or the NPC, changes in our data processing practices, or improvements to our platform. The current version of the Privacy Policy is always accessible at phtya.org/privacy-policy.
When material changes are made to this Policy, phtya will notify registered Players via email to your registered address and/or by posting a prominent notice on the Platform. We recommend reviewing this Privacy Policy periodically. Your continued use of the phtya platform after the effective date of an updated Privacy Policy constitutes your acknowledgement of the changes.
For all privacy-related inquiries, requests, or complaints, please contact the phtya Data Privacy Officer using the contact details below:
Data Privacy Officer, phtya
Email: [email protected]
Live Chat: Available 24/7 from within the phtya platform after login
Serving players from Metro Manila, Cebu, Davao, and all regions of the Philippines.
For general terms of use, please review the phtya Terms & Conditions. For responsible gaming information and self-exclusion tools, visit the phtya Responsible Gaming page.
Now that you know how phtya protects your personal information, you can play with full confidence. Your data stays in the Philippines, your privacy rights are protected under RA 10173, and your account is secured with industry-standard encryption. Ready when you are — 21 and over, of course.
For players 21 years and older only. phtya processes your data in compliance with the Data Privacy Act of 2012 (RA 10173).