At phpataya, your privacy is not an afterthought — it is a core part of how we build and operate our platform. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use it, and the rights you have as a phpataya player under Philippine law.
Summary: phpataya collects personal data to operate your account, verify your identity, process transactions, and keep the platform safe. We do not sell your personal data to third parties. We comply with the Republic Act No. 10173 (Data Privacy Act of 2012) and all implementing rules issued by the National Privacy Commission of the Philippines.
1.1 This Privacy Policy ("Policy") is issued by phpataya ("the Company," "we," "us," "our") and applies to all personal data collected through the phpataya website at phpataya.club, any associated mobile applications, and all related services and platforms operated by phpataya (collectively, the "Platform").
1.2 phpataya is committed to protecting the privacy and personal data of all users ("you," "your," "the Player") in accordance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 ("DPA"), and its Implementing Rules and Regulations ("IRR") as administered by the National Privacy Commission ("NPC") of the Philippines.
1.3 By registering an account on phpataya, accessing the Platform, or otherwise providing your personal data to us, you acknowledge that you have read and understood this Policy and consent to the collection, use, and processing of your personal data as described herein.
1.4 This Policy should be read together with phpataya's Terms and Conditions and Responsible Gaming Policy, both of which are incorporated by reference.
2.1 phpataya collects the following categories of personal data from players and visitors to the Platform:
phpataya does not collect sensitive personal information beyond what is strictly necessary for identity verification, regulatory compliance, and the safe operation of the Platform. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, or health information unless specifically required by applicable law.
3.1 phpataya collects personal data through the following means:
4.1 phpataya processes your personal data on the following legal bases under the Data Privacy Act of 2012:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Performance of a contract (your phpataya account agreement) |
| Identity verification (KYC) | Legal obligation (PAGCOR regulations, Anti-Money Laundering Act) |
| Processing deposits and withdrawals | Performance of a contract |
| Fraud prevention and security monitoring | Legitimate interests of phpataya and protection of players |
| Responsible gaming monitoring | Legal obligation and legitimate interests |
| Marketing and promotional communications | Your consent (you may withdraw consent at any time) |
| Analytics and Platform improvement | Legitimate interests of phpataya |
| Regulatory reporting | Legal obligation |
5.1 phpataya uses the personal data we collect for the following purposes:
5.2 phpataya will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for processing.
6.1 phpataya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Policy:
phpataya engages trusted third-party service providers to assist in operating the Platform, including payment processors (GCash, PayMaya/Maya, banks), identity verification providers, cloud hosting providers, customer support platforms, and analytics services. These providers are contractually bound to process your data only on phpataya's instructions and in accordance with applicable data protection laws.
phpataya may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, or other government authorities where required by applicable Philippine law, court order, or regulatory directive. phpataya will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, restructuring, or sale of all or part of phpataya's business, your personal data may be transferred to the acquiring entity as part of that transaction. You will be notified of any such transfer and any material changes to how your data is used prior to the transfer taking effect.
7.1 phpataya uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the Platform. The following types of cookies are used by phpataya:
| Cookie Type | Purpose | Duration |
|---|---|---|
| Strictly Necessary | Required for the Platform to function — session management, login authentication, security tokens | Session |
| Functional | Remembers your preferences such as language, game settings, and responsible gaming limits | Up to 12 months |
| Analytics | Collects anonymised data on how players use the Platform to help us improve features and performance | Up to 24 months |
| Marketing | Used to deliver relevant phpataya promotions and measure campaign effectiveness (only with your consent) | Up to 12 months |
7.2 You can manage or disable cookies through your browser settings at any time. Please note that disabling strictly necessary cookies may affect the functionality of the phpataya Platform, including your ability to log in and access your account.
7.3 phpataya does not use cookies to collect sensitive personal information or to track your activity on third-party websites outside of the phpataya Platform.
8.1 phpataya retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
8.2 The following retention periods apply to the main categories of personal data held by phpataya:
8.3 When personal data is no longer required, phpataya will securely delete or anonymise it in accordance with industry-standard data destruction practices.
Your data is protected by industry-standard security measures. phpataya employs multiple layers of technical and organisational safeguards to protect your personal data against unauthorised access, disclosure, alteration, or destruction.
9.1 phpataya implements the following security measures to protect your personal data:
9.2 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phpataya will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012.
9.3 While phpataya takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your phpataya account credentials confidential and for notifying us immediately if you suspect any unauthorised access to your account.
10.1 Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by phpataya:
10.2 To exercise any of the above rights, please contact phpataya's Data Protection Officer using the contact details in Section 14. phpataya will respond to all data privacy requests within thirty (30) days of receipt, in accordance with NPC guidelines.
10.3 Please note that certain rights may be limited where phpataya is required to retain or process your data to comply with a legal obligation, to prevent fraud, or to protect the rights of other players.
The phpataya Platform is strictly for persons aged 21 years and above. phpataya does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will immediately close the relevant account and delete all associated personal data.
11.1 If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to phpataya, please contact us immediately at [email protected] so that we can take appropriate action.
12.1 phpataya primarily processes and stores personal data within the Philippines. Where it is necessary to transfer personal data to service providers or partners located outside the Philippines (for example, cloud infrastructure providers or international payment processors), phpataya ensures that such transfers are conducted in accordance with the Data Privacy Act of 2012 and NPC guidelines on cross-border data transfers.
12.2 phpataya implements appropriate safeguards for international data transfers, including contractual clauses that require recipient organisations to maintain data protection standards equivalent to those required under Philippine law.
12.3 By using the phpataya Platform, you acknowledge and consent to the transfer of your personal data to countries outside the Philippines where necessary for the purposes described in this Policy, subject to the safeguards described above.
13.1 phpataya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
13.2 Where material changes are made to this Policy, phpataya will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect. Your continued use of the phpataya Platform after the revised Policy has been published constitutes your acceptance of the updated terms.
13.3 We encourage you to review this Privacy Policy periodically to stay informed about how phpataya protects your personal data.
14.1 phpataya has appointed a Data Protection Officer ("DPO") in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact our DPO using the following details:
14.2 If you are not satisfied with phpataya's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
National Privacy Commission (NPC): The NPC is the independent government body responsible for administering and implementing the Data Privacy Act of 2012 in the Philippines. You may contact the NPC through its official government channels for complaints and enquiries relating to data privacy.
Every connection to phpataya is secured with bank-grade SSL encryption. Your personal data and financial details are protected in transit and at rest.
phpataya fully complies with the Philippine Data Privacy Act of 2012. We have a registered Data Protection Officer and follow all NPC guidelines.
phpataya never sells, rents, or trades your personal data to third parties for marketing purposes. Your information stays within the phpataya ecosystem.
Access, correct, or delete your data at any time. phpataya honours all data subject rights under Philippine law and responds within 30 days.
In the unlikely event of a data breach, phpataya notifies the NPC within 72 hours and affected players without delay — full transparency, always.
phpataya only keeps your data as long as legally required. When retention periods expire, data is securely deleted using industry-standard methods.
Your privacy is protected every step of the way. Join thousands of Filipino players who trust phpataya for a secure, fair, and responsible gaming experience. Must be 21 years or older.
Gambling is addictive. Know when to stop. | 21+ only | PAGCOR regulated