1. Introduction
This Privacy Policy ("Policy") describes how phtaya30 ("phtaya30," "we," "us," or "our") collects, uses, stores, discloses, and protects the personal information of users ("you," "Player," or "Data Subject") who access or use the phtaya30 website at phtaya30.club and all associated services, games, and features (collectively, the "Platform").
phtaya30 is committed to protecting the privacy and security of your personal data. We process personal information in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission of the Philippines.
By registering an account on phtaya30 or by continuing to use the Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the phtaya30 Platform immediately.
Note: This Policy applies to all personal data collected by phtaya30 through the Platform, including data collected via the website, customer support channels, and any other means of interaction with phtaya30.
2. Data Controller
For the purposes of the Data Privacy Act of 2012, phtaya30 is the Personal Information Controller in respect of the personal data you provide when using the Platform. phtaya30 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently.
phtaya30 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO at any time using the contact details provided in Section 15 of this Policy.
3. Personal Data We Collect
phtaya30 collects the following categories of personal data from players and users of the Platform:
- Identity Data: Full legal name, date of birth, nationality, government-issued identification number (e.g., Philippine National ID, passport, driver's license), and a copy of your identification document where required for verification.
- Contact Data: Philippine mobile number, email address, and residential address.
- Account Data: Username, encrypted password, account preferences, and communication preferences.
- Financial Data: GCash number, PayMaya/Maya account details, bank account details (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank), debit card details (last four digits only), deposit and withdrawal history, and transaction records.
- Gaming Data: Game history, bet amounts, win/loss records, session duration, and bonus usage history.
- Technical Data: IP address, device type, browser type and version, operating system, screen resolution, time zone, and cookies and similar tracking data.
- Usage Data: Information about how you navigate and interact with the phtaya30 Platform, including pages visited, features used, and time spent on the Platform.
- Communications Data: Records of your communications with phtaya30 customer support, including live chat transcripts, email correspondence, and support ticket history.
- Responsible Gaming Data: Self-exclusion requests, deposit limit settings, cooling-off period activations, and any information you provide in connection with responsible gaming tools.
Sensitive Personal Information: phtaya30 may collect sensitive personal information (as defined under the DPA) such as government ID numbers solely for the purpose of identity verification and regulatory compliance. Such data is handled with heightened security measures.
4. How We Collect Your Data
phtaya30 collects personal data through the following means:
- Direct Collection: Data you provide when registering an account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
- Automated Collection: Technical and usage data collected automatically when you access the Platform, through cookies, web beacons, log files, and similar technologies.
- Third-Party Sources: Identity verification data from third-party KYC (Know Your Customer) service providers; fraud prevention data from anti-fraud service providers; payment data from payment processors (GCash, PayMaya, banks); and publicly available information where relevant to regulatory compliance.
5. How We Use Your Personal Data
phtaya30 uses your personal data for the following purposes:
- Account Management: To create, maintain, and manage your phtaya30 player account, including processing your registration, verifying your identity, and managing your account settings.
- Service Delivery: To provide you with access to the games, features, and services available on the phtaya30 Platform.
- Payment Processing: To process deposits, withdrawals, and other financial transactions on your account, and to maintain accurate financial records.
- Identity Verification and KYC: To verify your identity and age (21+) as required by Philippine law and PAGCOR regulations, and to conduct ongoing due diligence as required by anti-money laundering laws.
- Regulatory Compliance: To comply with applicable Philippine laws and regulations, including the Anti-Money Laundering Act (Republic Act No. 9160 as amended), PAGCOR licensing requirements, and the Data Privacy Act of 2012.
- Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, cheating, and other prohibited conduct on the Platform.
- Responsible Gaming: To administer responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods, and to identify players who may be at risk of problem gambling.
- Customer Support: To respond to your inquiries, complaints, and support requests, and to maintain records of our communications with you.
- Platform Improvement: To analyze usage patterns, conduct research, and improve the features, performance, and user experience of the phtaya30 Platform.
- Marketing Communications: To send you promotional offers, bonus notifications, and other marketing communications where you have consented to receive them. You may opt out of marketing communications at any time.
6. Legal Basis for Processing
phtaya30 processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:
- Consent: Where you have given your explicit consent to the processing of your personal data for a specific purpose, such as receiving marketing communications.
- Contractual Necessity: Where processing is necessary for the performance of the contract between you and phtaya30 — for example, processing your registration, managing your account, and processing financial transactions.
- Legal Obligation: Where processing is necessary for phtaya30 to comply with a legal obligation under Philippine law, including anti-money laundering reporting requirements, PAGCOR regulatory obligations, and responses to valid court orders or law enforcement requests.
- Legitimate Interests: Where processing is necessary for the legitimate interests of phtaya30, such as fraud prevention, platform security, and improving our services, provided that such interests are not overridden by your rights and interests as a data subject.
Withdrawing Consent: Where processing is based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal. To withdraw consent, please contact our Data Protection Officer using the details in Section 15.
7. Data Sharing and Disclosure
phtaya30 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary and for the purposes described in this Policy:
- Identity Verification Providers: Third-party KYC and age verification service providers who assist phtaya30 in verifying the identity and age of players as required by Philippine law.
- Payment Processors: GCash, PayMaya/Maya, and Philippine banking partners (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) who process deposits and withdrawals on your account.
- Fraud Prevention Services: Third-party fraud detection and anti-money laundering service providers who help phtaya30 identify and prevent fraudulent activity on the Platform.
- Game Software Providers: Licensed game developers and software providers whose games are hosted on the phtaya30 Platform, to the extent necessary to deliver game services to you.
- Customer Support Platforms: Third-party customer support software providers who facilitate live chat and ticketing services on behalf of phtaya30.
- Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine regulatory bodies, where disclosure is required by law or regulation.
- Law Enforcement: Philippine law enforcement agencies and courts, where disclosure is required pursuant to a valid legal process, court order, or statutory obligation.
- Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by phtaya30, subject to appropriate confidentiality obligations.
All third parties with whom phtaya30 shares personal data are required to handle such data in accordance with applicable data protection laws and are prohibited from using your data for any purpose other than the specific purpose for which it was shared.
8. Data Retention
phtaya30 retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:
- Account Data: Retained for the duration of your active account and for a period of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements.
- Financial and Transaction Records: Retained for a minimum of five (5) years following the date of the transaction, as required under the Anti-Money Laundering Act and related regulations.
- Identity Verification Documents: Retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
- Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer retention period is required for dispute resolution or legal proceedings.
- Marketing Preferences: Retained until you withdraw your consent to receive marketing communications or close your account, whichever occurs first.
- Technical and Usage Data: Retained for up to two (2) years from the date of collection, after which it is anonymized or deleted.
Upon expiry of the applicable retention period, phtaya30 will securely delete or anonymize your personal data in accordance with our data disposal procedures.
9. Data Security
phtaya30 implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
- Encryption: All data transmitted between your device and the phtaya30 Platform is encrypted using 256-bit SSL/TLS technology. Sensitive data stored in our systems is encrypted at rest.
- Access Controls: Access to personal data is restricted to authorized phtaya30 personnel and service providers who have a legitimate need to access such data in the performance of their duties. All access is logged and monitored.
- Firewalls and Intrusion Detection: phtaya30 employs enterprise-grade firewalls, intrusion detection systems, and regular security audits to protect the Platform infrastructure.
- Password Security: Player passwords are stored using industry-standard one-way hashing algorithms. phtaya30 staff cannot view your password in plain text.
- Staff Training: All phtaya30 personnel who handle personal data receive regular training on data protection obligations and security best practices.
- Incident Response: phtaya30 maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, phtaya30 will notify the National Privacy Commission and affected data subjects in accordance with the requirements of the Data Privacy Act of 2012.
Your Responsibility: While phtaya30 takes all reasonable steps to protect your data, you are also responsible for keeping your phtaya30 login credentials secure. Do not share your username or password with anyone, and notify phtaya30 immediately if you suspect unauthorized access to your account.
10. Cookies and Tracking Technologies
phtaya30 uses cookies and similar tracking technologies (such as web beacons and local storage) to enhance your experience on the Platform, analyze usage patterns, and deliver relevant content. The following types of cookies are used:
- Strictly Necessary Cookies: These cookies are essential for the operation of the phtaya30 Platform. They enable core functions such as account login, session management, and security features. These cookies cannot be disabled without affecting Platform functionality.
- Performance and Analytics Cookies: These cookies collect anonymized information about how players use the Platform — for example, which pages are visited most frequently and whether error messages are received. This data helps phtaya30 improve the Platform's performance and user experience.
- Functionality Cookies: These cookies remember your preferences and settings (such as language preference and display settings) to provide a more personalized experience on the phtaya30 Platform.
- Targeting and Marketing Cookies: These cookies may be used to deliver promotional content and offers that are relevant to your interests, based on your browsing behavior on the Platform. These cookies are only placed with your consent.
You can manage your cookie preferences through your browser settings. Most browsers allow you to refuse or delete cookies. Please note that disabling certain cookies may affect the functionality of the phtaya30 Platform. For more information on managing cookies, refer to your browser's help documentation.
11. Your Data Subject Rights
Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by phtaya30:
- Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
- Right of Access: The right to request a copy of the personal data phtaya30 holds about you, together with information about how it is being processed.
- Right to Rectification: The right to request correction of any inaccurate or incomplete personal data phtaya30 holds about you.
- Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to phtaya30's legal retention obligations.
- Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
- Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
- Right to Withdraw Consent: The right to withdraw your consent to processing at any time, where processing is based on consent, without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phtaya30 has processed your personal data in violation of the Data Privacy Act of 2012.
To exercise any of the above rights, please contact phtaya30's Data Protection Officer using the contact details provided in Section 15. phtaya30 will respond to all data subject requests within fifteen (15) business days of receipt, in accordance with the requirements of the Data Privacy Act of 2012.
Identity Verification: For the protection of your personal data, phtaya30 may require you to verify your identity before processing any data subject request. This is to ensure that personal data is not disclosed to unauthorized persons.
12. Children's Privacy
The phtaya30 Platform is strictly intended for adults aged 21 years and above. phtaya30 does not knowingly collect personal data from individuals under the age of 21. If phtaya30 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data and close the associated account.
If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to phtaya30, please contact our Data Protection Officer immediately using the contact details in Section 15 so that we can take appropriate action.
13. Third-Party Links
The phtaya30 Platform may contain references to third-party services such as payment processors (GCash, PayMaya, banks). When you interact with these third-party services, you will be subject to their own privacy policies and terms of service. phtaya30 is not responsible for the privacy practices of third-party services and encourages you to review their privacy policies before providing any personal data to them.
14. Changes to This Privacy Policy
phtaya30 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, phtaya30 will notify registered players by posting a notice on the Platform and updating the "Last Updated" date at the top of this page.
Your continued use of the phtaya30 Platform following the posting of any updated Privacy Policy constitutes your acceptance of the changes. We encourage you to review this Policy periodically to stay informed of how phtaya30 protects your personal data.
15. Contact and Data Protection Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by phtaya30, please contact our Data Protection Officer:
- Data Protection Officer: phtaya30 Data Privacy Team
- Email: [email protected]
- General Support Email: [email protected]
- Live Chat: Available 24/7 directly on the phtaya30 Platform
- Response Time: phtaya30 aims to acknowledge all privacy-related inquiries within 48 hours and to provide a substantive response within fifteen (15) business days.
If you are not satisfied with phtaya30's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.
National Privacy Commission: Filipino players who wish to file a complaint with the NPC may do so through the NPC's official channels. phtaya30 cooperates fully with all NPC investigations and inquiries.