phatya Privacy Policy

Last Updated: May 2026

1. Introduction

phatya ("we", "us", "our") is committed to protecting the privacy and personal data of every player who uses our platform. This Privacy Policy describes how phatya collects, uses, stores, and discloses personal information in connection with the operation of our online casino and sportsbook services, accessible at phatya.com.

phatya operates under a licence issued by the Philippine Amusement and Gaming Corporation ("PAGCOR") and is subject to Philippine law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This Privacy Policy is incorporated by reference into our Terms & Conditions.

By registering an account or using the phatya platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree, please discontinue use of the platform.

2. Data We Collect

phatya collects personal data that is necessary to provide our services, comply with legal obligations, and maintain the security and integrity of the platform. The categories of data we collect include:

• Registration Data: Full name, date of birth, nationality, residential address, email address, and mobile number provided when you create your phatya account.
• Identity Verification (KYC) Data: Government-issued Philippine ID (e.g., PhilSys ID, passport, driver's licence), proof of address documents, and selfie photographs submitted for identity verification purposes.
• Financial Data: Payment method details including GCash account numbers, PayMaya account information, and bank account details (BPI, BDO, Metrobank) used for deposits and withdrawals. We do not store full card numbers or payment credentials beyond what is necessary for transaction processing.
• Transaction Data: Records of all deposits, withdrawals, bets placed, games played, bonuses claimed, and account balance history.
• Technical Data: IP address, device type, browser type and version, operating system, session duration, pages visited, and referring URLs collected automatically when you access the platform.
• Communications Data: Records of your interactions with our customer support team, including live chat transcripts and email correspondence.
• Responsible Gaming Data: Information related to deposit limits, self-exclusion requests, and session time settings you configure on your account.

3. How We Use Your Data

phatya uses the personal data we collect for the following purposes:

• To create and manage your phatya account and verify your identity in compliance with PAGCOR KYC requirements.
• To process deposits, withdrawals, and all financial transactions on the platform.
• To provide, maintain, and improve our gaming services, including slots, live casino, sports betting, bingo, and sabong.
• To detect, investigate, and prevent fraud, money laundering, and other prohibited activities.
• To comply with our legal and regulatory obligations under PAGCOR licensing conditions and Philippine law.
• To send you service-related communications, including account notifications, security alerts, and transaction confirmations.
• To send promotional communications and bonus offers, where you have consented to receive such communications.
• To provide responsible gaming tools and monitor for signs of problem gambling in accordance with PAGCOR guidelines.
• To analyse platform usage and improve user experience for players across Manila, Cebu, Davao, Quezon City, Makati, and all other areas of the Philippines.

4. Legal Basis for Processing

phatya processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual Necessity: Processing required to fulfil our obligations under the Terms & Conditions you agreed to upon registration, including account management and payment processing.
• Legal Obligation: Processing required to comply with PAGCOR licensing requirements, anti-money laundering regulations, and other applicable Philippine laws.
• Legitimate Interests: Processing necessary for fraud prevention, platform security, and improving our services, where such interests are not overridden by your rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time by contacting our support team.

5. Sharing Your Data

phatya does not sell or rent your personal data to third parties. We may share your data in the following limited circumstances:

• Service Providers: We share data with trusted third-party service providers who assist in operating the platform, including payment processors, KYC verification providers, game software providers, and IT infrastructure partners. These providers are contractually bound to process data only on our instructions and in accordance with applicable law.
• Regulatory Authorities: We may disclose personal data to PAGCOR, the National Privacy Commission ("NPC"), the Anti-Money Laundering Council ("AMLC"), or other competent Philippine authorities when required by law or regulatory direction.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your personal data may be transferred to the successor entity, subject to equivalent privacy protections.
• Legal Proceedings: We may disclose data where required by a court order, subpoena, or other legal process under Philippine law.

In all cases, phatya takes reasonable steps to ensure that third parties receiving your data maintain appropriate security and confidentiality standards.

6. Data Retention

phatya retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and PAGCOR regulations. Specifically:

• Account and KYC records are retained for a minimum of five (5) years following account closure, in compliance with anti-money laundering regulations.
• Transaction records are retained for a minimum of five (5) years from the date of each transaction.
• Communications records are retained for up to two (2) years from the date of the communication.
• Technical and log data is retained for up to twelve (12) months unless required for longer periods for security or legal purposes.

When personal data is no longer required, phatya will securely delete or anonymise it in accordance with our data disposal procedures.

7. Cookies & Tracking

The phatya platform uses cookies and similar tracking technologies to enhance your experience, analyse platform usage, and deliver relevant content. The types of cookies we use include:

• Essential Cookies: Necessary for the platform to function correctly, including session management and security features. These cannot be disabled.
• Analytics Cookies: Used to collect aggregated, anonymised data about how players interact with the platform, helping us identify areas for improvement.
• Preference Cookies: Used to remember your settings and preferences, such as language and display options.
• Marketing Cookies: Used to deliver relevant promotional content, where you have consented to receive marketing communications.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the platform.

8. Data Security

phatya implements a range of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Access controls limiting data access to authorised personnel on a need-to-know basis.
• Regular security audits and vulnerability assessments of our platform infrastructure.
• Two-factor authentication options available for player accounts.

While phatya takes all reasonable precautions, no method of electronic transmission or storage is completely secure. In the event of a data breach that poses a risk to your rights, phatya will notify affected players and the National Privacy Commission in accordance with the Data Privacy Act of 2012.

9. Your Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phatya:

• Right to be Informed: The right to know what personal data we collect and how it is used, as described in this Privacy Policy.
• Right of Access: The right to request a copy of the personal data we hold about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to our legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing or where processing is based on legitimate interests.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format.
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days in accordance with applicable law.

10. Children & Minors

The phatya platform is strictly intended for adults aged 21 years and above, as required by PAGCOR regulations governing online gaming in the Philippines. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that a minor has registered an account or provided personal data, we will immediately suspend the account and delete the associated data. If you believe a minor has accessed the platform, please contact us immediately at [email protected].

11. Changes to This Policy

phatya reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or regulatory obligations. When we make material changes, we will post the updated policy on this page with a revised "Last Updated" date and, where appropriate, notify you by email or through a platform notification. Your continued use of the phatya platform following the posting of changes constitutes your acceptance of the revised Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact the phatya Data Protection Officer:

• Email: [email protected]
• Live Chat: Available on all pages of the platform, 24 hours a day, 7 days a week.

Our support team includes Filipino-speaking agents ready to assist players from Manila, Cebu, Davao, Quezon City, Makati, and all regions across the Philippines.