phtaya77 Privacy Policy —
Your Data, Your Rights

phtaya77 collects personal data in three ways: information you provide directly, information generated by your use of the platform, and information received from third-party service providers who help us operate. Below is a clear breakdown of what falls into each category.

phtaya77 collects personal data only for specific, legitimate, and clearly stated purposes. We do not collect data speculatively or "just in case." Every data point phtaya77 collects serves one or more of the following purposes:

• Account creation and management — Your name, contact details, and login credentials are necessary to create and maintain your phtaya77 account and allow you to access our services securely.
• Identity and age verification — Philippine law requires phtaya77 to verify that all registered players are at least 21 years of age and are who they claim to be. We cannot offer our services without this verification.
• Processing deposits and withdrawals — Financial data is required to process your GCash, Maya, bank transfer, or card transactions accurately and to prevent payment fraud.
• Anti-money laundering (AML) compliance — Philippine anti-money laundering regulations require phtaya77 to monitor transactions and maintain records of player financial activity for a defined period.
• Responsible gaming monitoring — Gaming activity data allows phtaya77 to identify patterns that may indicate problem gambling behaviour and to apply responsible gaming tools where appropriate.
• Customer support — Communication records allow phtaya77 to resolve disputes, track issues, and improve service quality.
• Platform security and fraud prevention — Technical data helps phtaya77 identify and block suspicious access attempts, account takeovers, and fraudulent activity.
• Service improvement — Aggregated, anonymised usage data helps phtaya77 understand how players use our platform and make improvements that benefit everyone.

Under the Philippine Data Privacy Act of 2012, phtaya77 must have a lawful basis for processing every category of personal data we collect. The legal bases phtaya77 relies on are:

• Contractual necessity — Most of the data phtaya77 processes is necessary to fulfil our contract with you as a registered player. Without your identity data, contact information, and financial data, phtaya77 cannot provide you with account services, process payments, or pay out winnings.
• Legal obligation — Certain data processing is required by Philippine law, including Anti-Money Laundering Act compliance, gaming regulation requirements, and tax reporting obligations. phtaya77 has no discretion over these processing activities.
• Legitimate interests — phtaya77 processes technical and activity data based on our legitimate interest in maintaining platform security, preventing fraud, and improving our services. These interests do not override your rights.
• Consent — Where phtaya77 wishes to send you promotional communications or process data for purposes beyond those listed above, we will ask for your explicit consent. You may withdraw this consent at any time.

Beyond the collection purposes described in Section 2, here is a more specific breakdown of how your data functions within phtaya77's operations:

• Account security — Login timestamps, IP addresses, and device fingerprints are compared against your account history to detect suspicious access. If an access attempt originates from an unusual location or device, phtaya77 may require additional verification before allowing account access.
• Transaction matching — Deposit and withdrawal records are matched against your registered payment methods to verify that transactions are initiated by the account holder. This protects your balance from unauthorised withdrawals.
• Bonus eligibility — Your account registration date, deposit history, and prior bonus claims are used to determine your eligibility for phtaya77 promotions.
• Responsible gaming — Bet frequency, session duration, and win/loss patterns may trigger internal phtaya77 alerts under our responsible gaming framework. These alerts may result in our support team reaching out to check in, or in the activation of limits you've set yourself.
• Communications — Your registered mobile number and email address may be used to send account notifications (e.g., withdrawal confirmations, security alerts) and, where you have consented, promotional messages about phtaya77 offers.

phtaya77 does not sell, rent, or trade your personal data. The only parties who receive your personal data are those who have a direct and necessary role in delivering phtaya77's services to you — and they receive only the data they need for that specific role:

• Payment processors — GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, Visa/Mastercard networks, and their respective service providers receive only the transaction data required to process your deposits and withdrawals. These parties have their own privacy obligations and are not permitted to use your data for any purpose beyond the transaction.
• Identity verification providers — Where phtaya77 engages a third-party KYC (Know Your Customer) verification service, your ID document and verification selfie are processed by that provider under a data processing agreement that restricts their use of your data to the verification task only.
• Regulatory and law enforcement authorities — phtaya77 is required by Philippine law to report certain transactions to the Anti-Money Laundering Council (AMLC) and to respond to lawful requests from other regulatory bodies or law enforcement agencies. These disclosures are not within phtaya77's discretion and are made only as required by law.
• Technical infrastructure providers — Cloud hosting, security monitoring, and analytics services that support phtaya77's platform operations may process certain technical data. These providers are contractually bound to process data only as directed by phtaya77 and to maintain equivalent security standards.

phtaya77 stores player personal data on servers located in secure data centres with physical and logical access controls. All data transmissions between your device and phtaya77's servers are encrypted using industry-standard TLS (Transport Layer Security) protocols. Data stored at rest is also encrypted.

phtaya77's internal security measures include:

• Access controls that restrict employee access to personal data on a need-to-know basis — no phtaya77 staff member has access to your full account data unless their role requires it for a specific, logged purpose
• Regular security assessments and penetration testing to identify and remediate vulnerabilities
• Multi-factor authentication requirements for all phtaya77 staff accounts with access to player data
• Audit logging of all access to and modifications of personal data records
• Incident response procedures that comply with Philippine NPC breach notification requirements

No online platform can guarantee absolute security against all possible threats. However, phtaya77 takes all reasonable and proportionate measures to protect your personal data and will notify you and the National Privacy Commission promptly in the event of a data breach that may affect your rights.

phtaya77 retains personal data only for as long as it is necessary for the purpose for which it was collected, or as required by applicable Philippine law. The general retention periods phtaya77 applies are:

• Active account data — Retained for the duration your phtaya77 account is active
• Transaction and financial records — Retained for a minimum of 5 years after the transaction date, in compliance with AML regulations under the AMLA and BSP requirements
• Identity verification records — Retained for a minimum of 5 years after account closure
• Support communications — Retained for 2 years from the date of the interaction
• Technical and session logs — Retained for 12 months from the date of collection

After the applicable retention period, phtaya77 will securely delete or anonymise your personal data so it can no longer be associated with you. Where anonymised data is retained for analytical purposes, it no longer constitutes personal data and is not subject to the restrictions in this Privacy Policy.

phtaya77 uses cookies and similar tracking technologies on phtaya77.net to deliver a functional and personalised experience. A cookie is a small text file placed on your device when you visit our platform. phtaya77 uses the following categories of cookies:

• Strictly necessary cookies — Essential for platform functions including maintaining your login session, remembering your language preference, and processing transactions. These cookies cannot be disabled without affecting core functionality.
• Performance cookies — Anonymous data about how you navigate phtaya77.net — which pages you visit, how long you stay, where you came from. This data is aggregated and used to improve the platform. No personally identifying data is associated with these cookies.
• Functional cookies — Remember your preferences across sessions, such as your preferred game view or notification settings.

phtaya77 does not use advertising or cross-site tracking cookies. Your browsing activity on phtaya77.net is not shared with advertising networks. You may manage cookie preferences through your browser settings. Note that disabling certain cookies may affect your ability to use some phtaya77 features.

Under the Philippine Data Privacy Act of 2012, you have specific, enforceable rights over your personal data held by phtaya77. These rights are:

• Right to be Informed — You have the right to know how phtaya77 collects and uses your personal data. This Privacy Policy fulfils that right.
• Right to Access — You may request a copy of the personal data phtaya77 holds about you at any time. phtaya77 will respond to access requests within 15 business days.
• Right to Rectification — If any of your personal data held by phtaya77 is inaccurate or incomplete, you have the right to request correction.
• Right to Erasure — You may request deletion of your personal data where phtaya77 no longer has a lawful basis for retaining it. Note that legally mandated retention periods may limit this right for certain data categories.
• Right to Object — You may object to phtaya77 processing your data for direct marketing purposes at any time. You may also object to processing based on legitimate interests.
• Right to Data Portability — You may request a copy of your personal data in a commonly used machine-readable format for transfer to another service.
• Right to Lodge a Complaint — If you believe phtaya77 has processed your personal data in a manner that violates the Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

phtaya77 is strictly an adult gaming platform for players aged 21 and above. phtaya77 does not knowingly collect personal data from any individual under the age of 21. Our registration process includes age verification steps designed to prevent underage access.

If phtaya77 becomes aware that personal data has been collected from a person under 21 years of age without appropriate verification, that account will be suspended immediately, the data will be deleted as soon as legally permissible, and any deposits made will be returned to the payment source. If you believe that someone under 21 has created a phtaya77 account, please contact us at privacy@phtaya77.net immediately.

phtaya77 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable Philippine law, or regulatory guidance from the National Privacy Commission. When material changes are made, phtaya77 will notify registered players through:

• An in-platform notification visible upon your next login to phtaya77
• An email notification to your registered email address
• An updated effective date displayed at the top of this page

Continued use of phtaya77 following notification of a policy update constitutes your acceptance of the revised Privacy Policy. If you disagree with any changes to this policy, you have the right to request account closure and deletion of your data (subject to legally mandated retention requirements).

phtaya77 has appointed a Data Protection Officer (DPO) as required under the Philippine Data Privacy Act. The DPO is responsible for overseeing compliance with this Privacy Policy and applicable data protection law, and for handling privacy-related requests and complaints from players.

If you are not satisfied with phtaya77's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines. Information on how to do so is available on the NPC's official website.