This Privacy Policy explains how phtaya72 collects, uses, discloses, and protects personal information provided by players using the phtaya72 online gaming platform. We take the privacy of Filipino players seriously — your data is handled with care, transparency, and in compliance with applicable Philippine law.
The following cards offer a plain-language overview for convenience. The full Privacy Policy below is the binding legal document.
We collect personal details you provide during registration and KYC, transaction records, device and session data, and communications between you and phtaya72 support.
To operate your account, process payments, prevent fraud, comply with regulatory requirements, and improve the phtaya72 platform experience for Filipino players.
Payment processors (GCash, BPI, BDO, etc.), game providers, identity verification partners, and regulatory authorities when legally required. We do not sell your data.
256-bit SSL encryption, access controls, encrypted storage, and regular security assessments protect your personal information against unauthorized access or disclosure.
Under the Philippine Data Privacy Act of 2012 (RA 10173), you have rights to access, correction, erasure, objection, and data portability regarding your personal information.
phtaya72 uses essential cookies required for platform operation and optional analytics cookies. You may manage cookie preferences through your browser settings.
Your Privacy Matters to phtaya72. This Privacy Policy ("Policy") describes how phtaya72 ("phtaya72," "Platform," "we," "us," "our") collects, uses, stores, shares, and protects personal information provided by or collected about players ("Player," "User," "you") who access or use the phtaya72 online gaming platform at phtaya72.one. By creating a phtaya72 account or using the platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein. This Policy should be read in conjunction with the phtaya72 Terms and Conditions.
1.1 phtaya72 is committed to protecting the privacy and personal information of its players. As a platform serving Filipino players, phtaya72 operates in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.
1.2 This Policy applies to all personal information collected by phtaya72 in connection with the operation of its online gaming platform, including information collected through the phtaya72 website at phtaya72.one, through player support communications, through payment processing activities, and through identity verification procedures.
1.3 phtaya72 acts as the Personal Information Controller in respect of personal data processed under this Policy. Where phtaya72 engages third-party service providers to process personal data on its behalf, those providers act as Personal Information Processors and are bound by data processing agreements requiring them to handle data only as directed by phtaya72 and in accordance with applicable law.
Philippine Data Privacy Act: Filipino players are protected by Republic Act No. 10173, which grants individuals specific rights regarding how their personal information is collected, processed, and stored by organizations operating in or from the Philippines. phtaya72's data practices are designed to comply with this Act and the NPC's regulatory guidelines.
The following definitions apply throughout this Privacy Policy:
"Personal Information" means any information from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information, would directly and certainly identify an individual, as defined in Republic Act No. 10173.
"Sensitive Personal Information" means personal information about an individual's government-issued identification numbers, financial information, health and medical records, and other categories designated as sensitive under RA 10173.
"Processing" means any operation or set of operations performed on personal information, including collection, recording, organization, storage, updating, retrieval, use, disclosure, or erasure.
"Data Subject" means the individual to whom personal information pertains — in the context of this Policy, the phtaya72 Player whose personal information is being processed.
"KYC" / "Know Your Customer" means the regulatory identity verification process by which phtaya72 confirms a Player's identity, age, residential address, and source of funds as required by applicable anti-money laundering and gaming regulations.
"Third-Party Processor" means a natural or legal person who processes personal information on behalf of phtaya72 pursuant to a data processing agreement, including payment processors, game providers, identity verification services, and IT infrastructure providers.
phtaya72 collects the following categories of personal information in the course of operating its platform:
3.1 Identity and Registration Data
3.2 Identity Verification (KYC) Data
3.3 Financial and Transaction Data
3.4 Technical and Device Data
3.5 Support and Communication Data
Categories of data collected at a glance:
Identity KYC Documents Financial Device & Technical Support Records Gaming Activity Location (IP-derived) Responsible Gaming Settingsphtaya72 does not collect unnecessary personal information. Data collection is limited to what is reasonably required for the purposes described in Section 6 of this Policy.
phtaya72 collects personal information through the following channels:
4.1 Directly from You. When you register a phtaya72 account, complete KYC verification, make a deposit, request a withdrawal, configure your responsible gaming settings, contact phtaya72 support, or otherwise interact with the platform, you provide personal information directly to phtaya72.
4.2 Automatically During Platform Use. When you access and use the phtaya72 platform, certain technical information is automatically collected, including your IP address, device identifiers, browser type, session duration, and pages visited. This data is collected via server logs, session tracking, and first-party analytics tools.
4.3 Through Cookies and Similar Technologies. phtaya72 uses cookies and similar browser-based technologies to operate essential platform functions (such as maintaining your logged-in session) and to analyze platform usage. See Section 10 for details on cookie use and management.
4.4 From Third-Party Identity Verification Services. Where phtaya72 uses third-party KYC or identity verification providers to assist in verifying your identity, those providers may share verification results and data derived from your submitted documents with phtaya72 for account compliance purposes.
4.5 From Payment Providers. Payment transaction confirmation data is shared with phtaya72 by payment processors (including GCash, PayMaya, and participating banks) to confirm deposit and withdrawal transactions.
phtaya72 processes personal information on the following legal bases under the Data Privacy Act of 2012:
5.1 Performance of Contract. Processing is necessary to fulfil phtaya72's obligations to you under the Terms and Conditions — including creating and maintaining your account, processing deposits and withdrawals, and providing access to gaming services.
5.2 Compliance with Legal Obligations. Processing is required to comply with phtaya72's obligations under Philippine anti-money laundering laws, PAGCOR-aligned gaming regulations, tax reporting requirements, and regulatory audit obligations — including the mandatory retention of KYC and transaction records.
5.3 Legitimate Interests. Certain processing activities are conducted on the basis of phtaya72's legitimate interests, including fraud prevention, platform security, abuse detection, and the improvement of gaming services for Filipino players — provided that those interests are not overridden by the rights and interests of the Data Subject.
5.4 Consent. Where processing is not required by contract or law, and where phtaya72 relies on consent as the legal basis (for example, for optional marketing communications), such consent is obtained prior to the processing activity and may be withdrawn at any time without affecting the lawfulness of prior processing.
phtaya72 uses the personal information it collects for the following purposes:
No Selling of Data: phtaya72 does not sell, rent, or trade your personal information to any third party for their own independent marketing or commercial purposes. Data shared with third parties is shared only to the extent necessary to operate the phtaya72 platform and comply with applicable law, as described in Section 7.
phtaya72 shares personal information with third parties only in the circumstances described below:
7.1 Payment Processors. Transaction data is shared with phtaya72's payment processing partners — including GCash (Mynt), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, UnionBank, and other participating payment service providers — to the extent necessary to process your deposits and withdrawals.
7.2 Game Providers. Where game providers require a player identifier or session token to authenticate gameplay, phtaya72 transmits a pseudonymous session identifier to the relevant provider. phtaya72 does not transmit your full name, mobile number, or payment details to game providers.
7.3 Identity Verification Partners. Personal information submitted for KYC verification — including identification documents and facial verification data — may be processed by phtaya72's third-party identity verification service providers, who act as Personal Information Processors under data processing agreements with phtaya72.
7.4 Regulatory and Legal Authorities. phtaya72 may disclose personal information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other competent Philippine government authorities where required or permitted by applicable law — including in response to lawful requests, subpoenas, court orders, or regulatory inquiries.
7.5 IT and Infrastructure Providers. Personal information may be stored on and processed by servers operated by phtaya72's cloud infrastructure and IT service providers. These providers are bound by data processing agreements and are not permitted to use personal data for their own independent purposes.
7.6 Professional Advisers. phtaya72 may share personal information with its legal advisers, auditors, and other professional service providers where necessary in connection with legal proceedings, regulatory investigations, or compliance reviews. Such sharing is subject to confidentiality obligations.
7.7 Corporate Transactions. In the event of a merger, acquisition, or sale of all or substantially all of phtaya72's assets, personal information held by phtaya72 may be transferred to the acquiring entity, subject to equivalent data protection obligations. Players will be notified of any such transfer that materially affects the processing of their personal information.
8.1 phtaya72 retains personal information only for as long as is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law or regulation.
8.2 Account and KYC Records. Where an account remains active, phtaya72 retains the Player's identity, KYC, and account data for the duration of the account's existence. Following account closure, KYC records and account-related information are retained for a minimum of five (5) years from the date of closure to satisfy phtaya72's obligations under Philippine anti-money laundering regulations and gaming record-keeping requirements.
8.3 Transaction Records. Financial transaction records — including deposit history, withdrawal history, and wager logs — are retained for a minimum of five (5) years from the date of each transaction, in compliance with AMLC reporting obligations and tax record-keeping requirements.
8.4 Support Records. Customer support interaction records, including chat transcripts and email correspondence, are retained for three (3) years following the closure of the relevant support ticket, unless the matter involves an unresolved dispute or regulatory inquiry, in which case records are retained until the matter is fully resolved.
8.5 Marketing Data. Where a Player has consented to receive marketing communications, marketing-related data is retained until the Player withdraws consent or requests erasure, subject to applicable minimum retention periods.
8.6 Upon expiry of the applicable retention period, personal information is securely deleted or anonymized so that it can no longer be linked to an identifiable individual.
Retention and Anti-Money Laundering: Under Philippine Republic Act No. 9160 (Anti-Money Laundering Act), as amended, phtaya72 is required to retain transaction records and KYC documentation for a minimum period mandated by the AMLC. This obligation overrides a Player's request for erasure in respect of data that falls within the mandatory retention period.
9.1 phtaya72 implements technical, administrative, and organizational security measures designed to protect your personal information against unauthorized access, disclosure, alteration, loss, or destruction.
9.2 Encryption. All data transmitted between your device and the phtaya72 platform is encrypted using 256-bit SSL/TLS encryption. Account passwords are stored using one-way cryptographic hashing algorithms — phtaya72 does not store or have access to readable passwords.
9.3 Access Controls. Access to personal information within phtaya72's systems is restricted to personnel who require it for legitimate business purposes. Access is governed by role-based permissions and is subject to audit logging.
9.4 Authentication Security. phtaya72 offers two-factor authentication via SMS OTP for player accounts. New device logins trigger automatic OTP verification. Accounts are temporarily locked following multiple consecutive failed login attempts.
9.5 Third-Party Security. phtaya72 evaluates the security practices of its third-party service providers and requires them to implement appropriate technical and organizational measures to protect personal information they process on phtaya72's behalf.
9.6 Data Breach Response. In the event of a personal data breach that is likely to result in harm to affected Data Subjects, phtaya72 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular requirements, and will notify affected Players without undue delay where required.
9.7 While phtaya72 takes reasonable steps to protect your personal information, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying phtaya72 promptly if you suspect unauthorized access to your account.
10.1 phtaya72 uses cookies — small text files placed on your device by a web server — and similar browser-based technologies to support the operation of the platform and improve the player experience.
10.2 Essential Cookies. These cookies are strictly necessary for the phtaya72 platform to function. They maintain your authenticated session after login, store your language and display preferences, and prevent cross-site request forgery. Essential cookies cannot be disabled without breaking core platform functionality.
10.3 Analytics Cookies. phtaya72 may use first-party analytics cookies to collect aggregated, anonymized data about how players use the platform — including pages visited, session duration, and feature engagement. This data is used to identify areas for platform improvement and does not identify individual players.
10.4 Managing Cookies. You may manage or disable cookies through your browser's settings. Most modern browsers — including Chrome on Android (the most commonly used browser among Filipino mobile users), Safari on iOS, and Firefox — provide settings to block or delete cookies. Note that disabling essential cookies will prevent phtaya72 from maintaining your login session and may impair platform functionality.
10.5 phtaya72 does not use third-party advertising cookies or cross-site tracking technologies.
Under the Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, you have the following rights in respect of your personal information held by phtaya72:
You have the right to obtain confirmation of whether phtaya72 holds personal information about you, and to receive a copy of that information.
You have the right to request correction of inaccurate or incomplete personal information about you that is held by phtaya72.
You have the right to request deletion of your personal information, subject to phtaya72's obligations under applicable law (including mandatory retention periods).
You have the right to object to the processing of your personal information on legitimate interests grounds, and to withdraw consent for consent-based processing.
You have the right to receive your personal information in a structured, commonly used, machine-readable format and to transmit that data to another controller.
You have the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, false, or unlawfully obtained personal information under RA 10173.
11.1 To exercise any of the above rights, please submit a written request to phtaya72 support at the contact details provided in Section 16. phtaya72 will respond to verified Data Subject rights requests within 15 business days. In complex cases, the response period may be extended by a further 15 business days, with notification to the Data Subject.
11.2 phtaya72 may require identity verification before processing a Data Subject rights request to ensure that personal information is not disclosed to an unauthorized person.
11.3 If you are dissatisfied with phtaya72's handling of a privacy concern or Data Subject rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on filing NPC complaints is available on the NPC's official government website.
12.1 The phtaya72 platform is strictly intended for adults aged 21 years and above. phtaya72 does not knowingly collect or process personal information from individuals under the age of 21.
12.2 During account registration and KYC verification, phtaya72 requires confirmation and documentary evidence of the Player's age. Any account found to belong to a person under 21 years of age will be immediately closed and any associated personal information will be deleted, except where retention is required by applicable law.
12.3 If phtaya72 becomes aware that it has inadvertently collected personal information from an individual under 21, it will take immediate steps to delete that information from its systems and, where applicable, notify the relevant regulatory authority.
21+ Requirement: In compliance with PAGCOR's regulations for casino-style gaming in the Philippines, all real-money gaming accounts on phtaya72 are restricted to persons aged 21 and above. Age verification is conducted during registration and may be repeated at any time through the KYC process.
13.1 phtaya72's primary operations and data processing activities are based in the Philippines. Where personal information is transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international game providers — phtaya72 ensures that appropriate safeguards are in place to protect the transferred data, in accordance with the Data Privacy Act and NPC requirements.
13.2 Such safeguards may include data processing agreements incorporating standard contractual clauses approved by the NPC, adequacy determinations, or other measures recognized under Philippine data protection law.
13.3 By using the phtaya72 platform and providing your personal information, you acknowledge that your data may be transferred to and processed in countries other than the Philippines, subject to the safeguards described in this Section.
14.1 The phtaya72 platform may contain links to third-party websites — for example, links to game providers' information pages or payment service provider portals — where relevant to platform use. These links are provided for convenience only.
14.2 phtaya72 is not responsible for the privacy practices or content of third-party websites accessed via links from the phtaya72 platform. This Privacy Policy applies solely to personal information collected and processed by phtaya72 in connection with the phtaya72 platform. You should review the privacy policies of any third-party sites you visit.
15.1 phtaya72 reserves the right to update or amend this Privacy Policy at any time. Where changes are material — for example, where phtaya72 introduces a new category of data collection or a new purpose for processing — phtaya72 will notify Players through the platform interface and/or by notification to the registered contact details on the Player's account, with reasonable advance notice.
15.2 The date of last update is displayed at the top of this Policy. The version of this Policy currently published at phtaya72.one/privacy-policy is the operative version. Archived versions are available upon request to phtaya72's Data Protection Officer.
15.3 Continued use of the phtaya72 platform after the effective date of any amendment constitutes acceptance of the revised Policy. If you disagree with an amendment, you should cease using the platform and may request account closure through phtaya72 support.
16.1 phtaya72 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and with the Data Privacy Act of 2012. The DPO is the appropriate point of contact for privacy-related inquiries, Data Subject rights requests, and data breach notifications.
Data Protection Officer — phtaya72
Platform: phtaya72 (phtaya72.one)
Email Contact: [email protected] (plain text — not a clickable link)
Subject Line for Privacy Requests: "Data Privacy Request — [Your Account Username]"
Response Time: Standard privacy requests within 15 business days
Languages: English
16.2 For complaints regarding phtaya72's data practices that have not been satisfactorily resolved through direct contact with phtaya72's DPO, you may submit a complaint to the National Privacy Commission (NPC) of the Philippines. The NPC is the independent regulatory body responsible for administering the Data Privacy Act in the Philippines.
16.3 When submitting a Data Subject rights request to phtaya72, please include: your full name and registered mobile number, the nature of your request (access, correction, erasure, objection, etc.), and sufficient detail to allow phtaya72 to identify and locate the relevant data. Identity verification will be required before any access or disclosure is made.
phtaya72 is built with Filipino players' privacy and security in mind — encrypted sessions, no data selling, and full compliance with the Philippine Data Privacy Act. Sign in and enjoy gaming you can trust.
Real-money gaming for players aged 21 and above only. Gambling involves risk. Please play responsibly.