phytaya Privacy Policy

1. Introduction

phytaya ("we," "us," "our," or "the Company") is committed to protecting the privacy and personal data of all players who use the phytaya online casino platform ("the Platform"). This Privacy Policy describes our practices regarding the collection, use, storage, and disclosure of personal information provided by users ("you," "the Player") when accessing or using phytaya's website, mobile platform, and related services.

This Privacy Policy is governed by the Data Privacy Act of 2012 (Republic Act No. 10173) of the Republic of the Philippines and its implementing rules and regulations. By registering an account or using the phytaya Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

This Privacy Policy should be read alongside phytaya's Terms & Conditions and Responsible Gaming Policy.

2. Data We Collect

phytaya collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we collect include:

2.1 Registration Data

When you create a phytaya account, we collect:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Email address
• Mobile phone number
• Residential address (city, province, country)
• Username and encrypted password

2.2 Identity Verification (KYC) Data

To comply with Philippine anti-money laundering regulations and to verify player identity, phytaya may collect:

• Government-issued photo ID (e.g., Philippine passport, SSS ID, UMID, driver's license, PhilSys National ID)
• Proof of address documents
• Selfie or live photo for identity matching
• Proof of payment method ownership

2.3 Financial Data

When you make deposits or request withdrawals, phytaya collects:

• GCash or PayMaya account number (mobile number)
• Bank account details (for BPI, BDO, or Metrobank transfers)
• Transaction history, deposit amounts, and withdrawal records

phytaya does not store full bank account credentials. Payment processing is handled by regulated third-party payment processors.

2.4 Usage & Technical Data

When you use the phytaya Platform, we automatically collect:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, games played, session duration, and click patterns
• Login timestamps and access logs

2.5 Communications Data

If you contact phytaya's support team or respond to surveys and promotions, we collect the content of those communications, including chat transcripts and email correspondence.

3. How We Use Your Data

phytaya uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and secure your phytaya player account.
• Identity Verification: To verify your age (21+) and identity in compliance with Philippine regulations and our KYC obligations.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank.
• Regulatory Compliance: To comply with anti-money laundering (AML) obligations, PAGCOR requirements, and other applicable Philippine laws.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, unauthorized account access, and other security threats.
• Customer Support: To respond to your inquiries, resolve disputes, and provide assistance through our 24/7 support team.
• Platform Improvement: To analyze usage patterns and improve the phytaya Platform's features, performance, and user experience.
• Marketing & Promotions: To send you relevant bonus offers, promotions, and platform updates, where you have consented to receive such communications.
• Responsible Gaming: To monitor gaming behavior and apply responsible gaming tools such as deposit limits and self-exclusion where necessary.

4. Legal Basis for Processing

phytaya processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and phytaya (i.e., to operate your account and provide gaming services).
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including AML regulations and PAGCOR licensing requirements.
• Legitimate Interests: Processing is necessary for phytaya's legitimate interests in fraud prevention, platform security, and service improvement, provided these interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, processing is based on your explicit consent, which you may withdraw at any time.

5. Cookies & Tracking Technologies

phytaya uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyze usage. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function. These cannot be disabled without affecting core functionality such as login sessions and security.
• Analytics Cookies: Used to understand how players interact with the phytaya Platform, helping us identify areas for improvement.
• Preference Cookies: Used to remember your settings and preferences, such as language and display options.
• Marketing Cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may impair your ability to use the phytaya Platform.

6. Data Sharing & Disclosure

phytaya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data only in the following circumstances:

• Payment Processors: We share necessary financial data with regulated payment service providers (GCash, PayMaya, BPI, BDO, Metrobank) to process your transactions.
• KYC & Compliance Providers: We use third-party identity verification services to conduct KYC checks as required by Philippine regulations.
• Game Providers: Game providers such as Pragmatic Play, PG Soft, and Jili may receive limited technical data necessary to deliver their games on the phytaya Platform.
• Regulatory Authorities: We may disclose your data to PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine government authorities when required by law or court order.
• Fraud Prevention: We may share data with fraud prevention agencies and law enforcement where we have reasonable grounds to suspect illegal activity.
• Business Transfers: In the event of a merger, acquisition, or sale of phytaya's business, your data may be transferred to the acquiring entity, subject to the same privacy protections.

7. Data Retention

phytaya retains your personal data for as long as your account is active and for a period thereafter as required by applicable Philippine law. Specific retention periods include:

• Account & KYC Data: Retained for a minimum of five (5) years following account closure, as required by AML regulations.
• Transaction Records: Retained for a minimum of five (5) years in accordance with financial record-keeping obligations.
• Support Communications: Retained for up to three (3) years from the date of the last interaction.
• Marketing Consent Records: Retained until you withdraw consent or for three (3) years from the date of consent, whichever is earlier.

When personal data is no longer required for the purposes for which it was collected and no legal retention obligation applies, phytaya will securely delete or anonymize the data.

8. Data Security

phytaya implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the phytaya Platform.
• Encrypted storage of sensitive data including passwords and financial information.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and vulnerability assessments of the phytaya Platform.
• Two-factor authentication (2FA) options for player accounts.

9. Your Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phytaya:

• Right to Be Informed: You have the right to know what personal data phytaya collects and how it is used, as described in this Privacy Policy.
• Right to Access: You may request a copy of the personal data phytaya holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact phytaya's Data Protection Officer via the contact details in Section 13. phytaya will respond to all verified requests within thirty (30) days.

10. Children's Privacy

11. Third-Party Services

The phytaya Platform integrates third-party services including game providers, payment processors, and analytics tools. These third parties operate under their own privacy policies and phytaya is not responsible for their data practices. phytaya only engages third-party service providers who demonstrate adequate data protection standards consistent with Philippine law.

phytaya does not include third-party advertising networks or social media tracking pixels that would share your data with unrelated third parties for advertising purposes.

12. Changes to This Privacy Policy

phytaya reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification. The revised Privacy Policy will take effect on the date indicated at the top of this page.

Your continued use of the phytaya Platform after the effective date of any update constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact phytaya's Data Protection Officer:

You also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been respected.