phtaua Privacy Policy

1. Overview

phtaua ("phtaua," "we," "us," or "our") operates the online gaming platform accessible at phtaua.net. We are committed to protecting the personal information of every player who registers and uses our Platform. This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC).

This Privacy Policy applies to all personal data collected through the phtaua website, mobile-optimized interface, customer support channels, and any other touchpoints through which you interact with phtaua. By creating a phtaua account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which form part of the overall agreement between you and phtaua.

2. Data We Collect

phtaua collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of personal data we collect include:

We do not collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. We do not collect biometric data beyond what is required for document verification purposes.

3. How We Collect Data

phtaua collects your personal data through the following means:

• Direct interactions: When you register a phtaua account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in promotions, you directly provide us with personal data.
• Automated technologies: As you navigate the phtaua Platform, we automatically collect Technical Data and Usage Data through cookies, server logs, and similar tracking technologies. See Section 9 for more details on our cookie practices.
• Third-party sources: We may receive personal data about you from identity verification service providers, payment processors (such as GCash, PayMaya, and partner banks), fraud prevention agencies, and publicly available sources, where permitted by applicable law.
• Responsible gaming tools: If you interact with our self-exclusion, deposit limit, or session reminder tools, we record those preferences and actions as part of your account data to ensure they are enforced consistently.

4. Purpose of Processing

phtaua processes your personal data for the following purposes:

• Account registration and management: To create, maintain, and administer your phtaua account, including verifying your identity and age (21+ requirement).
• KYC and regulatory compliance: To fulfill our obligations under PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012, including verifying your identity and the source of your funds.
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card, and to maintain accurate financial records.
• Game delivery and platform operation: To provide you with access to phtaua's games, features, and services, and to ensure the integrity and fairness of gameplay.
• Customer support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible gaming: To monitor gaming behavior, enforce self-exclusion and limit settings, and identify players who may be at risk of problem gambling.
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the Platform.
• Marketing and promotions: To send you relevant promotional offers and updates, where you have provided consent. You may opt out of marketing communications at any time through your account settings.
• Legal obligations: To comply with applicable laws, regulations, court orders, and requests from regulatory authorities including PAGCOR and the NPC.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, phtaua processes your personal data on the following legal bases:

• Contractual necessity: Processing is necessary to perform our contract with you — specifically, to operate your phtaua account, process transactions, and deliver gaming services.
• Legal obligation: Processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, AMLA obligations, and NPC directives.
• Legitimate interests: Processing is necessary for phtaua's legitimate interests in preventing fraud, ensuring platform security, and improving our services, provided these interests are not overridden by your rights and freedoms.
• Consent: For marketing communications and certain non-essential cookies, we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6. Sharing Your Data

phtaua does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, PayMaya / Maya, BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank, and other payment service providers, to process your financial transactions.
• Identity verification providers: Third-party KYC and age verification service providers who assist us in verifying your identity and documents.
• Game software providers: Licensed game studios and live dealer operators whose games are available on the phtaua Platform, to the extent necessary for game delivery and integrity monitoring.
• Fraud prevention and security services: Providers of anti-fraud, anti-money laundering, and cybersecurity services.
• Regulatory authorities: PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), and other Philippine government agencies, where required by law or regulation.
• Legal and professional advisors: Lawyers, auditors, and other professional advisors, subject to strict confidentiality obligations.
• Law enforcement: Police, courts, or other government authorities where we are legally required or permitted to do so, such as in response to a valid court order or to protect the rights and safety of phtaua, its players, or the public.

All third parties with whom phtaua shares personal data are required to handle that data in accordance with applicable Philippine data protection laws and are prohibited from using it for any purpose other than the specific purpose for which it was shared.

7. Data Retention

phtaua retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your active phtaua account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and AMLA obligations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and its implementing regulations.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with NPC guidelines. Where data cannot be immediately deleted due to technical constraints, it will be isolated and protected from further processing until deletion is possible.

8. Data Security

phtaua implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the phtaua Platform is encrypted using industry-standard Transport Layer Security (TLS) protocols. Sensitive data stored in our systems is encrypted at rest.
• Access controls: Access to personal data is restricted to authorized phtaua personnel and service providers who require it to perform their duties. All access is logged and regularly audited.
• Secure infrastructure: phtaua's Platform is hosted on secure, regularly patched server infrastructure with firewall protection, intrusion detection systems, and regular vulnerability assessments.
• Staff training: All phtaua employees who handle personal data receive regular training on data protection obligations and security best practices.
• Incident response: phtaua maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

While phtaua takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your phtaua account credentials confidential and for notifying us immediately if you suspect unauthorized access to your account.

9. Cookies & Tracking Technologies

phtaua uses cookies and similar tracking technologies to operate and improve the Platform, personalize your experience, and analyze usage patterns. The types of cookies we use are:

• Strictly necessary cookies: These cookies are essential for the Platform to function and cannot be disabled. They include session cookies that keep you logged in to your phtaua account and security cookies that help protect against fraud.
• Functional cookies: These cookies remember your preferences — such as your preferred language, game settings, and responsible gaming limits — to provide a more personalized experience.
• Analytics cookies: These cookies collect anonymized information about how players use the Platform, such as which pages are visited most frequently and where errors occur. This data helps us improve the Platform's performance and usability.
• Marketing cookies: With your consent, these cookies track your activity on the Platform to help us deliver relevant promotional offers. You may opt out of marketing cookies at any time through your account settings or browser settings.

You can control and manage cookies through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the phtaua Platform and your ability to access certain features. For more information on managing cookies, refer to your browser's help documentation.

10. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtaua:

• Right to be informed: You have the right to be informed about how your personal data is collected, used, and processed, as set out in this Privacy Policy.
• Right of access: You have the right to request a copy of the personal data phtaua holds about you, along with information about how it is being processed.
• Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly through your phtaua account settings.
• Right to erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations under PAGCOR regulations and AMLA.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to our overriding legal obligations.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller where technically feasible.
• Right to lodge a complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact details provided in Section 14. We will respond to all verified requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

11. Minors

The phtaua Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gambling regulations. phtaua does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

If you are a parent or guardian and believe that your child has provided personal data to phtaua, please contact our support team immediately so we can investigate and take appropriate action.

12. International Data Transfers

phtaua primarily processes and stores personal data within the Philippines. In certain circumstances, personal data may be transferred to, or accessed by, service providers located outside the Philippines — for example, game software providers or cloud infrastructure partners operating in other jurisdictions.

Where such transfers occur, phtaua ensures that appropriate safeguards are in place to protect your personal data, including contractual clauses that require the recipient to provide a level of data protection equivalent to that required under the Data Privacy Act of 2012. We will not transfer your personal data to a country or territory that does not provide an adequate level of data protection without your explicit consent or without implementing appropriate safeguards as required by the NPC.

13. Changes to This Policy

phtaua reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or regulatory requirements. The most current version of this Privacy Policy will always be available on this page, with the "Last Updated" date revised accordingly.

For material changes that significantly affect how we process your personal data or your rights as a data subject, phtaua will provide advance notice via email to your registered address or via a prominent notice on the Platform. Your continued use of the phtaua Platform following the posting of any changes constitutes your acceptance of the revised Privacy Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phtaua handles your personal data, please contact our Data Protection Officer:

Data Protection Officer – phtaua
Email: privacy@phtaua.net
Support: support@phtaua.net
Live Chat: Available 24/7 through your phtaua account dashboard.

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe your data protection rights have not been adequately addressed by phtaua.