phtaya39 Privacy Policy

Effective Date: January 1, 2026  |  Last Updated: January 1, 2026

1. Introduction and Scope

This Privacy Policy ("Policy") describes how phtaya39 ("phtaya39," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the phtaya39 online gaming platform at phtaya39.club, including its website, mobile interface, games, sports betting services, and all related features and communications.

This Policy applies to all personal data processed by phtaya39 in connection with the provision of its services to players based in the Philippines and is designed to comply with the Republic Act No. 10173 — Data Privacy Act of 2012 (DPA) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC) of the Philippines.

By registering an account on phtaya39 or by continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the phtaya39 platform immediately.

2. Data Controller Information

phtaya39 acts as the Data Controller for the personal data collected through the phtaya39 platform. As Data Controller, phtaya39 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with applicable Philippine data protection laws.

For all data protection inquiries, requests, or complaints, you may contact our designated Data Protection Officer (DPO) at: [email protected]

3. Personal Data We Collect

phtaya39 collects the following categories of personal data from players:

3.1 Identity and Registration Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Gender
• Nationality and country of residence
• Government-issued identification number (e.g., Philippine National ID, passport, driver's license)
• Username and password (stored in encrypted form)

3.2 Contact Data

• Email address
• Mobile phone number
• Residential address (including barangay, city, province, and postal code)

3.3 Financial and Payment Data

• GCash or PayMaya mobile wallet number
• Bank account details (BPI, BDO, Metrobank, or other Philippine banks)
• Transaction history, including deposits, withdrawals, and bonus credits
• Source of funds declarations (where required for KYC/AML compliance)

3.4 Gaming and Behavioral Data

• Game history, bet records, and wagering activity
• Session duration and login timestamps
• Responsible gaming tool usage (deposit limits, self-exclusion requests)
• Customer support interactions and chat logs

3.5 Technical and Device Data

• IP address and approximate geographic location
• Device type, operating system, and browser information
• Cookie identifiers and session tokens
• Platform access logs and error reports

Data Category	Examples	Primary Purpose
Identity Data	Name, date of birth, government ID	Account registration, KYC verification, age check
Contact Data	Email, phone, address	Account communications, support, notifications
Financial Data	GCash number, bank account, transactions	Payment processing, AML compliance, withdrawals
Gaming Data	Bet history, session logs, game activity	Service delivery, responsible gaming monitoring
Technical Data	IP address, device info, cookies	Security, fraud prevention, platform analytics

4. How We Collect Your Data

phtaya39 collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions
• Automatically — through cookies, session tracking, and server logs when you access and use the phtaya39 platform
• From third parties — including identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), fraud detection services, and regulatory bodies where required by law

5. How We Use Your Personal Data

phtaya39 uses your personal data for the following purposes:

• To create and manage your phtaya39 player account
• To verify your identity and age (21+ requirement) in compliance with Philippine gaming regulations
• To process deposits and withdrawals in Philippine Peso via GCash, PayMaya, and Philippine banks
• To deliver the games, sports betting markets, and other platform features you use
• To detect and prevent fraud, money laundering, and other prohibited activities
• To comply with our legal and regulatory obligations, including PAGCOR licensing requirements and AMLA reporting
• To provide customer support and respond to your inquiries
• To send you account-related notifications, security alerts, and service updates
• To send you promotional communications and bonus offers (where you have consented)
• To monitor and improve responsible gaming tools and player protection measures
• To analyze platform performance and improve the phtaya39 user experience

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, phtaya39 processes your personal data on the following legal bases:

• Contractual necessity — processing required to fulfill our obligations under the phtaya39 Terms & Conditions, including account management and payment processing
• Legal obligation — processing required to comply with Philippine laws, including PAGCOR regulations, the Anti-Money Laundering Act, and NPC requirements
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights
• Consent — processing for marketing communications and non-essential cookies, where you have provided explicit consent that you may withdraw at any time

7. Data Sharing and Third Parties

phtaya39 does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors — GCash, PayMaya, BPI, BDO, Metrobank, and other Philippine payment providers, for the purpose of processing your transactions
• Identity verification providers — third-party KYC and AML compliance services that assist us in verifying player identities and detecting suspicious activity
• Game content providers — licensed game studios and software providers whose games are available on the phtaya39 platform
• IT and hosting providers — cloud infrastructure and cybersecurity service providers who support the operation of the phtaya39 platform
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies, where required by law or court order
• Professional advisors — lawyers, auditors, and accountants, where necessary for legal or compliance purposes

8. Data Retention

phtaya39 retains your personal data for as long as your account remains active and for a period thereafter as required by applicable Philippine law and regulatory obligations. Specifically:

• Account and identity data — retained for the duration of your account plus a minimum of 5 years after account closure, in accordance with PAGCOR licensing requirements and AMLA obligations
• Transaction and financial records — retained for a minimum of 5 years from the date of each transaction, as required by the Anti-Money Laundering Act
• Gaming activity logs — retained for a minimum of 3 years for responsible gaming monitoring and dispute resolution purposes
• Marketing consent records — retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation
• Technical and device data — retained for up to 12 months for security and fraud prevention purposes

Upon expiry of the applicable retention period, phtaya39 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

9. Data Security

phtaya39 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phtaya39 platform
• Encrypted storage of passwords and sensitive financial data using industry-standard hashing and encryption algorithms
• Access controls limiting internal access to personal data on a strict need-to-know basis, with role-based permissions and audit logging
• Regular security audits and penetration testing conducted by independent cybersecurity professionals
• Two-factor authentication (2FA) available for player accounts to provide an additional layer of login security
• Incident response procedures to detect, contain, and notify affected players and the NPC of any personal data breach within the timeframes required by the DPA

While phtaya39 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your phtaya39 login credentials and for notifying us immediately if you suspect unauthorized access to your account.

10. Cookies and Tracking Technologies

phtaya39 uses cookies and similar tracking technologies to enhance your experience on the platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the platform is used.

10.1 Types of Cookies We Use

• Strictly necessary cookies — essential for the platform to function, including session management and security tokens. These cannot be disabled.
• Functional cookies — remember your preferences such as language settings and game display options
• Analytics cookies — help us understand how players use phtaya39 so we can improve the platform experience
• Marketing cookies — used to deliver relevant promotional content, only where you have provided consent

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phtaya39 platform.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, Filipino players have the following rights with respect to their personal data held by phtaya39:

• Right to be informed — the right to know what personal data phtaya39 collects and how it is used, as set out in this Privacy Policy
• Right of access — the right to request a copy of the personal data phtaya39 holds about you
• Right to rectification — the right to request correction of inaccurate or incomplete personal data
• Right to erasure — the right to request deletion of your personal data, subject to our legal retention obligations
• Right to object — the right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation
• Right to data portability — the right to receive your personal data in a structured, commonly used format
• Right to withdraw consent — the right to withdraw consent for marketing communications or non-essential cookies at any time, without affecting the lawfulness of prior processing
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. phtaya39 will respond to all verified data subject requests within 15 business days.

12. Children and Minors

phtaya39 is strictly an adult platform. In accordance with Philippine gaming regulations, access to real-money gaming is restricted to individuals who are 21 years of age or older. phtaya39 does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will immediately close the associated account and delete all related data.

If you believe that a minor has registered on phtaya39, please notify us immediately at [email protected] so that we can take prompt action.

13. International Data Transfers

In some cases, your personal data may be transferred to and processed by service providers located outside the Philippines — for example, cloud hosting providers or game content studios operating in other jurisdictions. Where such transfers occur, phtaya39 ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses consistent with the requirements of the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.

14. Changes to This Privacy Policy

phtaya39 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. Material changes will be communicated to registered players via email or through a prominent notice on the phtaya39 platform at least 7 days before the changes take effect. The "Last Updated" date at the top of this Policy will always reflect the most recent revision. Your continued use of phtaya39 following the effective date of any amendment constitutes your acceptance of the revised Policy.

15. Contact and Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phtaya39 handles your personal data, please contact our Data Protection Officer:

Email: [email protected]
Live Chat: Available 24/7 through the phtaya39 platform
Response Time: Within 15 business days for formal data subject requests

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.