PRIVACY POLICY – PHTAYA72

phtaya72 ("we," "us," "our," or "the Platform") is committed to protecting the privacy and personal data of all players and visitors who access the phtaya72 online gaming platform at phtaya72.app. This Privacy Policy ("Policy") describes in detail how phtaya72 collects, uses, stores, shares, and safeguards your personal information in connection with your use of our website, mobile platform, games, and all related services (collectively, the "Services").

This Policy applies to all registered players, prospective players, and general visitors to the phtaya72 platform, regardless of whether you access our Services from Metro Manila, Cebu, Davao, Quezon City, Makati, or any other location in the Philippines. By accessing or using phtaya72, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Policy should be read together with the phtaya72 Terms and Conditions, which govern your overall use of the platform. In the event of any conflict between this Policy and the Terms and Conditions on matters of data privacy, this Privacy Policy shall prevail.

phtaya72 collects personal data from you in several ways — directly when you provide it to us, automatically when you use our platform, and from third parties where permitted by law. The categories of personal data we collect include:

A. Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement)
• Nationality and country of residence
• Government-issued ID number (e.g., Philippine passport, SSS ID, UMID, driver's license)
• Profile photograph or selfie (where required for KYC verification)

B. Contact Data

• Email address
• Philippine mobile number
• Residential address (including barangay, city/municipality, province)

C. Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• BPI, BDO, or Metrobank account details (where used for transactions)
• Transaction history, including deposit and withdrawal records in Philippine Peso (₱)

D. Gaming & Behavioral Data

• Game session history, wager amounts, and game outcomes
• Bonus and promotion usage records
• Responsible gaming tool settings (deposit limits, session reminders, self-exclusion status)
• Customer support interaction records

E. Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser type
• Session timestamps and platform access logs
• Cookie identifiers and similar tracking data (see Section 6)

phtaya72 uses the personal data we collect for the following purposes:

phtaya72 will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or as otherwise required by applicable law.

phtaya72 processes your personal data on the following legal bases, in accordance with applicable Philippine data protection law:

• Contractual Necessity: Processing is necessary to perform our contract with you — specifically, to operate your phtaya72 account, process transactions, and deliver gaming services.
• Legal Obligation: Processing is required to comply with applicable laws and regulations, including KYC requirements, anti-money laundering (AML) obligations, and gaming regulatory requirements.
• Legitimate Interests: Processing is necessary for phtaya72's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided such interests are not overridden by your rights and interests.
• Consent: Where processing is based on your consent — such as for marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

phtaya72 does not sell, rent, or otherwise transfer your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals in Philippine Peso (₱).
• KYC & Identity Verification Providers: Third-party identity verification services used to confirm player age, identity, and eligibility in accordance with regulatory requirements.
• Game Content Providers: Licensed game studios and live dealer providers whose games are available on the phtaya72 platform, to the extent necessary for game delivery and integrity.
• Fraud Prevention & AML Services: Specialist providers that assist phtaya72 in detecting and preventing fraudulent activity and financial crime.
• Regulatory Authorities: Government agencies, gaming regulators, and law enforcement bodies where disclosure is required by law, court order, or regulatory directive.
• IT & Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers that support the technical operation of the phtaya72 platform.

In the event of a merger, acquisition, or sale of all or substantially all of phtaya72's assets, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

phtaya72 uses cookies and similar tracking technologies to operate and improve the platform, personalize your experience, and analyze usage patterns. A cookie is a small text file placed on your device when you visit the phtaya72 website.

The types of cookies used by phtaya72 include:

• Strictly Necessary Cookies: Essential for the operation of the phtaya72 platform, including maintaining your login session and enabling secure transactions. These cannot be disabled.
• Functional Cookies: Remember your preferences and settings (such as language and display preferences) to provide a more personalized experience.
• Analytics Cookies: Collect aggregated, anonymized data about how players use the phtaya72 platform, helping us identify areas for improvement.
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

phtaya72 retains your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by applicable law and regulatory obligations. The following general retention periods apply:

• Account Data: Retained for the duration of your active phtaya72 account, and for a minimum of five (5) years following account closure, in accordance with gaming regulatory requirements.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in compliance with anti-money laundering regulations.
• KYC Verification Documents: Retained for a minimum of five (5) years following the completion of the verification process or account closure, whichever is later.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or regulatory purposes.
• Technical & Log Data: Generally retained for twelve (12) months, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, phtaya72 will securely delete or anonymize your personal data in accordance with our internal data disposal procedures.

phtaya72 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the phtaya72 platform.
• Encryption of sensitive data at rest, including financial account details and government ID information.
• Role-based access controls limiting internal access to personal data to authorized personnel only.
• Regular security audits, vulnerability assessments, and penetration testing of phtaya72 systems.
• Multi-factor authentication requirements for internal system access.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While phtaya72 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are also responsible for maintaining the security of your phtaya72 account credentials. Please refer to Section 4 of the Terms and Conditions for account security obligations.

As a data subject under applicable Philippine data protection law, you have the following rights with respect to your personal data held by phtaya72. You may exercise any of these rights by contacting our Data Protection Officer (see Section 15):

phtaya72 will respond to all valid data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further sixty (60) days, in which case we will notify you of the extension and the reasons for it. phtaya72 reserves the right to verify your identity before processing any data rights request.

If phtaya72 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the associated account, delete the personal data in question, and void any transactions conducted through that account. Any funds deposited by an underage player will be returned to the original payment source.

If you are a parent or guardian and believe that a minor in your care has registered on phtaya72 or provided personal data to us, please contact our support team immediately via live chat so that we can take prompt action.

phtaya72 primarily processes and stores personal data within the Philippines. However, some of our third-party service providers — including cloud infrastructure providers, game content providers, and fraud prevention services — may process personal data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, phtaya72 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under applicable Philippine data protection law. Such safeguards may include:

• Contractual clauses requiring the recipient to process personal data to the same standard as required in the Philippines.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection.
• Binding corporate rules or equivalent internal data transfer mechanisms where applicable.

The phtaya72 platform may contain references to third-party services, including payment providers such as GCash, PayMaya, BPI, BDO, and Metrobank. When you interact with these third-party services — for example, when making a deposit or withdrawal — you will be subject to the privacy policies of those third parties, which are separate from and independent of this phtaya72 Privacy Policy.

phtaya72 is not responsible for the privacy practices of third-party service providers. We encourage you to review the privacy policies of any third-party services you use in connection with your phtaya72 account. phtaya72 selects third-party partners carefully and requires them to maintain appropriate data protection standards, but we cannot guarantee the practices of external parties.

phtaya72 may send you promotional emails, SMS messages, or in-platform notifications about bonuses, new games, special events, and other phtaya72 offers — but only if you have explicitly opted in to receive such communications during registration or through your account settings.

• You can opt out of marketing communications at any time by updating your notification preferences in your phtaya72 account settings.
• You may also opt out by contacting our support team via live chat and requesting removal from our marketing list.
• Opting out of marketing communications will not affect the delivery of transactional messages, such as deposit confirmations, withdrawal notifications, and security alerts, which are necessary for the operation of your account.

phtaya72 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When we make material changes to this Policy, we will:

• Post the updated Privacy Policy on the phtaya72 website with a revised "Last Updated" date at the top of the page.
• Send a notification to your registered email address summarizing the key changes, at least fourteen (14) days before the changes take effect.
• Display a prominent notice on the phtaya72 platform informing players of the update.

Your continued use of the phtaya72 platform after the effective date of any amended Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with the changes, you must stop using the phtaya72 platform and may request account closure by contacting our support team.

We encourage you to review this Privacy Policy periodically to stay informed about how phtaya72 is protecting your personal data. The most current version of this Policy will always be available at phtaya72.app/privacy-policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phtaya72 processes your personal data, you may contact our Data Protection Officer (DPO) through the following channels:

When submitting a data rights request, please include your full name, registered email address, and a clear description of your request so that we can verify your identity and process your request efficiently.

If you are not satisfied with phtaya72's response to your privacy concern, you have the right to lodge a complaint with the relevant data protection authority in the Philippines. phtaya72 takes all privacy complaints seriously and will work with you in good faith to resolve any issues relating to the processing of your personal data.