phtaya20 Privacy Policy — How We
Handle and Protect Your Data

1 Introduction

This Privacy Policy applies to phtaya20 and covers all services available at phtaya20.net, including account registration, game play, deposits and withdrawals, customer support interactions, and any communications you receive from phtaya20. It explains how phtaya20 collects, uses, stores, shares, and protects personal information provided by players and visitors.

phtaya20 operates in compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations. By registering for a phtaya20 account or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the data practices described herein.

phtaya20 acts as the data controller for personal information collected through the platform. This means phtaya20 determines the purposes and methods by which your personal data is processed. Where phtaya20 engages third-party service providers who process data on its behalf, those parties act as data processors under documented agreements that require them to protect your data to the same standard.

2 What Data phtaya20 Collects

phtaya20 collects personal information in two ways: information you provide directly, and information collected automatically when you use the platform. The table below summarises the main categories of data we collect and why.

phtaya20 only collects personal data that is necessary for the purposes described in this policy. We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, unless specifically required by law or regulatory mandate for responsible gaming purposes.

3 How phtaya20 Uses Your Data

The personal information phtaya20 holds about you is used for specific, legitimate purposes only. We do not use your data in ways that are incompatible with the purposes for which it was originally collected. The main ways phtaya20 uses your personal data are:

• Account creation and verification — To register your phtaya20 account, verify your identity and age, and maintain account security.
• Service delivery — To enable you to access and use all games, betting markets, and other features available on the phtaya20 platform.
• Payment processing — To process deposits, handle withdrawal requests, and manage transaction records in compliance with financial regulations.
• Customer support — To respond to your queries, resolve disputes, and provide assistance when you contact the phtaya20 support team.
• Fraud prevention and security — To detect, investigate, and prevent fraudulent activity, unauthorised account access, and other security threats to the platform and its users.
• Regulatory compliance — To meet legal obligations under Philippine law, including the Data Privacy Act, anti-money laundering regulations, and responsible gaming requirements.
• Responsible gaming — To monitor usage patterns that may indicate problem gambling behaviour and to deliver responsible gaming interventions where appropriate.
• Platform improvement — To analyse usage data and improve the performance, design, and features of the phtaya20 platform.
• Marketing communications — To send you promotional offers and updates about new features, only where you have given consent or where permitted by applicable law. You can opt out at any time.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, phtaya20 processes your personal data on the following legal bases:

• Consent — Where you have provided explicit consent, such as when agreeing to receive marketing communications or when completing the registration process. You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual necessity — Processing required to perform the contract between you and phtaya20, including processing your deposits, game play, and withdrawals.
• Legal obligation — Processing required to comply with Philippine laws and regulations, including anti-money laundering obligations, KYC requirements, and responsible gaming mandates.
• Legitimate interests — Processing carried out for purposes that are necessary for phtaya20's legitimate business interests, such as fraud prevention, platform security, and analytical improvement, where those interests do not override your fundamental rights.

phtaya20 maintains records of the legal basis applied to each category of data processing. If you have questions about the legal basis for a specific processing activity, contact our Data Protection Officer at the details provided in Section 13.

5 Cookies and Tracking Technologies

phtaya20 uses cookies and similar technologies to operate the platform effectively and to improve your experience. When you first visit phtaya20.net, you are presented with a cookie consent notice that allows you to manage your preferences.

The types of cookies phtaya20 uses are:

• Strictly necessary cookies — Required for the platform to function. These include session management cookies that keep you logged in and security cookies that prevent fraudulent use. These cannot be disabled.
• Functional cookies — Remember your preferences such as language settings, preferred games, and table configuration.
• Analytics cookies — Collect anonymised data about how players use the platform to help phtaya20 improve its design and performance. phtaya20 uses internal analytics tools — data is not shared externally for advertising purposes.
• Marketing cookies — Used to deliver promotional content relevant to your interests within the phtaya20 platform. These are only set with your consent.

You can manage cookie settings through the cookie preferences panel accessible from the footer of phtaya20.net. Note that disabling functional or analytics cookies may affect your experience on the platform, but will not prevent you from accessing core gaming features.

6 How phtaya20 Shares Your Data

phtaya20 does not sell, rent, or trade your personal information to third parties for their own marketing purposes. Your data is shared only in the following limited circumstances:

• Payment processors — To enable GCash, Maya, GrabPay, bank transfer, and card payment processing. These providers receive only the minimum data required to process your transaction and are contractually required to protect it.
• Identity verification partners — To fulfil KYC obligations, phtaya20 may share identity documents with authorised verification service providers. These partners process data on our behalf under strict data processing agreements.
• Game technology providers — Live casino and game software providers may receive anonymised session data to operate their products on the phtaya20 platform. Personal identity data is not shared with game providers.
• Regulatory authorities — phtaya20 will disclose personal data to government authorities, law enforcement, or regulatory bodies in the Philippines where required by law, court order, or legal process.
• Fraud prevention services — Anonymised or aggregated data may be shared with fraud detection services to identify and prevent fraudulent activity across the gaming industry.

All third parties who process data on phtaya20's behalf are required to maintain appropriate security measures and may only use your data for the specified purpose. phtaya20 conducts due diligence on all data processors before engaging them.

7 How Long We Keep Your Data

phtaya20 retains personal data only for as long as necessary for the purposes described in this policy, or as required by applicable Philippine law. The general retention periods are:

• Account data — Retained for the duration your account is active, plus five (5) years after account closure to meet statutory and regulatory retention requirements.
• Financial transaction records — Retained for a minimum of five (5) years in accordance with Philippine anti-money laundering regulations.
• KYC and identity verification records — Retained for five (5) years after the last transaction or account closure, whichever is later.
• Customer support communications — Retained for two (2) years to allow for dispute resolution and quality improvement purposes.
• Gaming history — Retained for five (5) years to support responsible gaming monitoring and regulatory reporting obligations.
• Marketing consent records — Retained for as long as the consent is active, plus three (3) years after withdrawal of consent for compliance documentation.

Once the applicable retention period has expired and there are no overriding legal or regulatory reasons to keep the data, phtaya20 will securely delete or anonymise the information so that it can no longer be associated with you.

8 How We Protect Your Data

phtaya20 implements a comprehensive set of technical and organisational security measures to protect your personal information from unauthorised access, disclosure, alteration, or destruction. Key measures include:

• TLS/SSL encryption — All data transmitted between your device and phtaya20's servers is encrypted using Transport Layer Security. Look for the padlock icon in your browser address bar when using the platform.
• Segregated data storage — Financial data, identity documents, and gaming history are stored in separate, access-controlled systems. No single system holds your complete profile.
• Access controls — Internal access to personal data is restricted to authorised phtaya20 personnel who need it to perform their specific roles. Access is logged and reviewed regularly.
• Password security — Passwords are never stored in plain text. phtaya20 uses strong hashing algorithms to protect your account credentials.
• Penetration testing — The phtaya20 platform undergoes regular independent security assessments to identify and remediate potential vulnerabilities.
• Incident response — phtaya20 maintains a data breach response plan. In the event of a breach affecting your personal data, we will notify you and the National Privacy Commission as required by the Data Privacy Act.

9 Your Data Rights Under Philippine Law

As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by phtaya20. These rights can be exercised at any time by contacting us through the details in Section 13.

phtaya20 will respond to all verified data rights requests within 15 working days of receipt. If your request is complex or involves a large volume of data, we may extend this period by a further 30 days with notice to you. phtaya20 does not charge a fee for handling data rights requests in ordinary circumstances.

If you are not satisfied with phtaya20's response to a data rights request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

10 Children's Privacy

phtaya20 is strictly an adult platform. No person under the age of 18 is permitted to register or use any part of the phtaya20 platform, including free-play modes. phtaya20 does not knowingly collect personal data from minors.

Age verification is a mandatory step in the registration process. Where phtaya20 becomes aware that personal data has been collected from a person under 18, the account will be immediately suspended, the data will be securely deleted, and any deposited funds will be returned to the verified payment source after completing the necessary verification process.

If you are a parent or guardian and believe your child has created a phtaya20 account without your knowledge, please contact us immediately at the details provided in Section 13. We will act promptly to address the situation.

11 Third-Party Links and Services

The phtaya20 platform may include links to third-party websites or services, such as payment provider portals or social media pages. This Privacy Policy applies solely to data collected through phtaya20.net. phtaya20 is not responsible for the privacy practices of any third-party websites you visit from the platform.

When you initiate a GCash, Maya, or other payment provider transaction, you are redirected to that provider's platform, which operates under its own terms and privacy policy. phtaya20 recommends reviewing the privacy policy of any third-party service you use in connection with your phtaya20 account.

12 Updates to This Privacy Policy

phtaya20 may update this Privacy Policy from time to time to reflect changes in our data practices, new services, changes in Philippine law, or guidance from the National Privacy Commission. The "Last updated" date at the top of this page will always reflect the most recent revision.

When material changes are made to this policy, phtaya20 will notify registered players via email or through a prominent notice on the platform before the changes take effect. For minor clarifications that do not affect your rights, the policy will simply be updated without separate notification.

Continued use of the phtaya20 platform after an updated Privacy Policy takes effect constitutes your acceptance of the changes. If you do not agree with any update, you may close your account and request deletion of your data in accordance with Section 9.

13 Contact Us and Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, please contact phtaya20 through the following channels:

• Live chat: Available within your phtaya20 account dashboard, 24/7 Philippine Standard Time.
• Email: support@phtaya20.net — please include "Privacy Request" in the subject line for data rights enquiries.
• Data Protection Officer: For formal data rights requests or complaints, mark your email "Attention: Data Protection Officer."

phtaya20 takes all privacy enquiries seriously and will respond within the timeframes specified in this policy. For escalation, you may contact the National Privacy Commission of the Philippines at privacy.gov.ph.