Privacy Policy – phtaya30

1. Introduction

phtaya30 ("phtaya30," "we," "us," or "our") operates the online gaming platform accessible at https://phtaya30.app (the "Platform"). We are committed to protecting the privacy and personal data of all users who access or register on the phtaya30 Platform.

This Privacy Policy ("Policy") describes how phtaya30 collects, uses, stores, shares, and protects personal information in connection with your use of the Platform. It also describes the rights available to you under applicable Philippine data protection law, specifically Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), and its implementing rules and regulations.

By accessing the phtaya30 Platform or creating an account, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. This Policy should be read together with our Terms & Conditions.

2. Personal Data We Collect

phtaya30 collects the following categories of personal data from users of the Platform:

phtaya30 does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law or where you voluntarily provide such information in the context of a responsible gaming self-assessment.

3. How We Collect Your Data

phtaya30 collects personal data through the following means:

• Direct interactions: When you register an account on phtaya30, complete identity verification, make a deposit or withdrawal, contact our support team, or respond to surveys or promotions.
• Automated technologies: When you access the phtaya30 Platform, we automatically collect technical and usage data through cookies, server logs, and similar tracking technologies. See Section 8 for more details on our cookie use.
• Third-party sources: phtaya30 may receive data about you from payment processors (such as GCash and PayMaya), identity verification service providers, and fraud prevention partners, where necessary to operate the Platform and comply with our legal obligations.

4. How We Use Your Personal Data

phtaya30 uses the personal data we collect for the following purposes:

• To create and manage your phtaya30 account and verify your identity and age (21+ requirement).
• To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods.
• To provide access to games and services on the phtaya30 Platform.
• To administer bonuses, promotions, and loyalty programmes in accordance with their applicable terms.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct.
• To comply with applicable laws and regulations, including anti-money laundering (AML) and know-your-customer (KYC) requirements.
• To monitor gaming behaviour for responsible gaming purposes and to apply limits or restrictions where necessary.
• To send you transactional communications such as account confirmations, deposit receipts, and withdrawal notifications.
• To send you promotional and marketing communications where you have given your consent to receive them.
• To improve the phtaya30 Platform through analytics, user research, and performance monitoring.
• To respond to your enquiries and resolve disputes through our customer support team.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 of the Philippines, phtaya30 is required to have a lawful basis for processing your personal data. The legal bases on which phtaya30 relies are as follows:

• Contractual necessity: Processing is necessary to perform the contract between you and phtaya30, including operating your account, processing transactions, and providing access to games and services on the Platform.
• Legal obligation: Processing is necessary for phtaya30 to comply with applicable laws and regulations, including KYC, AML, and tax reporting obligations.
• Legitimate interests: Processing is necessary for phtaya30's legitimate interests, including fraud prevention, platform security, and improving our services, provided those interests are not overridden by your rights and interests.
• Consent: Where phtaya30 relies on your consent as the legal basis for processing — for example, for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Personal Data

phtaya30 does not sell, rent, or otherwise disclose your personal data to unaffiliated third parties for their own commercial purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing your deposits and withdrawals.
• Identity verification providers: Third-party KYC and age verification service providers engaged by phtaya30 to verify your identity and confirm that you meet the 21+ age requirement.
• Fraud prevention and security partners: Service providers that assist phtaya30 in detecting and preventing fraudulent activity, money laundering, and other illegal conduct on the Platform.
• IT and platform service providers: Cloud hosting, data storage, and technology service providers that support the operation of the phtaya30 Platform, subject to strict confidentiality obligations.
• Regulatory and law enforcement authorities: Where phtaya30 is required by law, court order, or regulatory direction to disclose personal data to government agencies, law enforcement bodies, or other competent authorities in the Philippines.
• Professional advisers: Lawyers, auditors, and other professional advisers engaged by phtaya30, subject to professional confidentiality obligations.

Where phtaya30 shares personal data with third-party service providers, we require those providers to process your data only in accordance with our instructions and to implement appropriate technical and organisational security measures.

7. Data Retention

phtaya30 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account with phtaya30 and for a minimum of five (5) years following account closure, in accordance with AML and KYC regulatory requirements.
• Transaction and financial data: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• Communications and support data: Retained for up to three (3) years from the date of the communication, or longer where required for dispute resolution or legal proceedings.
• Technical and usage data: Retained for up to two (2) years from the date of collection, unless a longer retention period is required for security or fraud prevention purposes.

Upon expiry of the applicable retention period, phtaya30 will securely delete or anonymise your personal data in accordance with our internal data disposal procedures.

8. Cookies and Tracking Technologies

phtaya30 uses cookies and similar tracking technologies (such as web beacons and pixel tags) on the Platform to enhance your user experience, maintain session security, and gather analytics data. The types of cookies used by phtaya30 are as follows:

• Strictly necessary cookies: These cookies are essential for the phtaya30 Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled.
• Functional cookies: These cookies allow phtaya30 to remember your preferences and settings, such as your preferred language and display options, to provide a more personalised experience.
• Analytics cookies: phtaya30 uses analytics cookies to collect aggregated, anonymised data about how users interact with the Platform. This data helps us understand usage patterns and improve the Platform's performance and content.
• Marketing cookies: Where you have given your consent, phtaya30 may use cookies to deliver relevant promotional content and to measure the effectiveness of our marketing campaigns.

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the phtaya30 Platform. For detailed instructions on managing cookies in your specific browser, please refer to your browser's help documentation.

9. Your Data Protection Rights

Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in relation to your personal data held by phtaya30:

• Right to be informed: You have the right to be informed about how phtaya30 collects and uses your personal data, as set out in this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data that phtaya30 holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request that phtaya30 correct any inaccurate or incomplete personal data held about you.
• Right to erasure: You have the right to request that phtaya30 delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You have the right to object to phtaya30's processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes.
• Right to data portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that phtaya30 transmit that data to another data controller where technically feasible.
• Right to withdraw consent: Where phtaya30 processes your personal data on the basis of your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact phtaya30's Data Protection Officer using the contact details in Section 14. phtaya30 will respond to all valid data subject requests within thirty (30) calendar days of receipt. In complex cases, this period may be extended by a further thirty (30) days, in which case phtaya30 will notify you of the extension and the reasons for it.

If you are not satisfied with phtaya30's response to your data protection request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10. Children's Privacy and the 21+ Requirement

The phtaya30 Platform is strictly intended for adults aged 21 years and older, in accordance with Philippine gaming regulations. phtaya30 does not knowingly collect personal data from individuals under the age of 21.

If phtaya30 becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. All deposits and winnings associated with an underage account will be forfeited.

If you are a parent or guardian and believe that your child has registered on the phtaya30 Platform, please contact us immediately using the details in Section 14 so that we can take appropriate action.

11. Data Security

phtaya30 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phtaya30 Platform.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls limiting access to personal data to authorised personnel only.
• Regular security audits, vulnerability assessments, and penetration testing of the phtaya30 Platform.
• Multi-factor authentication options for player accounts.
• Continuous monitoring of the Platform for suspicious activity and potential security incidents.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phtaya30 will notify the National Privacy Commission and affected individuals in accordance with the requirements of the Data Privacy Act of 2012 and its implementing rules.

12. Third-Party Links

The phtaya30 Platform may contain links to third-party websites or services for informational purposes. phtaya30 has no control over the content, privacy practices, or data handling of any third-party websites, and this Privacy Policy does not apply to those sites.

phtaya30 is not responsible for the privacy practices of any third-party website. We encourage you to review the privacy policy of any third-party site you visit before providing any personal information.

13. Changes to This Privacy Policy

phtaya30 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the features and services offered on the Platform. The date of the most recent revision is indicated at the top of this page.

Where changes to this Privacy Policy are material, phtaya30 will provide reasonable advance notice to registered players via email or a prominent notice on the Platform. Your continued use of the phtaya30 Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the changes.

We encourage you to review this Privacy Policy periodically to stay informed about how phtaya30 is protecting your personal data.

14. Contact Our Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or phtaya30's handling of your personal data, please contact our Data Protection Officer:

Data Protection Officer — phtaya30
Email: [email protected]
Support Email: [email protected]
Website: https://phtaya30.app
Response Time: Within 30 calendar days of receipt