Privacy Policy — phtaya 2 Casino

1.Introduction

phtaya 2 ("phtaya 2," "we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online casino platform at phtaya2.org (the "Platform"). We understand that trust is earned, and we take our responsibility as a data controller seriously.

This Privacy Policy describes how phtaya 2 collects, uses, stores, shares, and protects your personal information when you visit our Platform, register an account, make transactions, or interact with our customer support team. It also explains the rights available to you as a data subject under Philippine law.

This Privacy Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of phtaya 2.

2.Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, phtaya 2 acts as the Personal Information Controller with respect to the personal data of its registered players and website visitors.

As the Personal Information Controller, phtaya 2 determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data protection law.

If you have any questions or concerns about how phtaya 2 handles your personal data, you may contact our Data Protection Officer at the contact details provided in Section 15 of this Policy.

3.Personal Data We Collect

phtaya 2 collects the following categories of personal data from players and Platform visitors:

Identity & Contact Data:

• Full legal name as it appears on your government-issued ID;
• Date of birth (for age verification — players must be 21 years or older);
• Residential address in the Philippines;
• Email address and mobile phone number;
• Government-issued identification documents (e.g., Philippine passport, SSS ID, PhilHealth ID, driver's license, UMID).

Financial Data:

• GCash or PayMaya / Maya account details (mobile number associated with the e-wallet);
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank);
• Debit card details where applicable;
• Transaction history, deposit and withdrawal records.

Technical & Usage Data:

• IP address and approximate geographic location;
• Device type, operating system, and browser information;
• Session data, login timestamps, and Platform activity logs;
• Game history and wagering records.

Communications Data:

• Records of your interactions with phtaya 2 customer support, including live chat transcripts and email correspondence;
• Feedback, complaints, and survey responses.

4.How We Collect Your Data

phtaya 2 collects personal data through the following means:

• Direct collection: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions;
• Automated collection: Technical data collected automatically when you access the Platform, including through cookies, web beacons, and server logs (see Section 8);
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering screening services; payment data from our approved payment processing partners.

phtaya 2 does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly necessary for age verification, identity verification, and regulatory compliance purposes.

5.Purpose of Processing

phtaya 2 processes your personal data for the following purposes:

• Account management: To register, verify, and maintain your phtaya 2 player account;
• Age and identity verification: To confirm that you are at least 21 years of age and to verify your identity as required by Philippine gaming regulations;
• Transaction processing: To process deposits, withdrawals, and bonus payments in Philippine Peso (₱);
• Regulatory compliance: To comply with PAGCOR licensing requirements, anti-money laundering obligations under the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, cheating, and unauthorized access;
• Customer support: To respond to your inquiries, complaints, and support requests;
• Responsible gaming: To monitor gameplay patterns and provide responsible gaming interventions where appropriate;
• Platform improvement: To analyze usage patterns and improve the phtaya 2 Platform experience;
• Marketing communications: To send you promotional offers and updates about phtaya 2, where you have provided consent to receive such communications.

6.Legal Basis for Processing

phtaya 2 processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity: Processing required to perform our obligations under the Terms & Conditions you agreed to upon registration, including account management and transaction processing;
• Legal obligation: Processing required to comply with applicable Philippine laws, including PAGCOR regulations, AMLA obligations, and the Data Privacy Act itself;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your data protection rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

7.Data Sharing & Disclosure

phtaya 2 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• KYC and identity verification providers: To verify your identity and age as required by Philippine gaming regulations;
• Payment processing partners: GCash, PayMaya / Maya, and Philippine banking partners, to process your deposits and withdrawals;
• Anti-fraud and AML screening services: To comply with the Anti-Money Laundering Act and detect suspicious activity;
• IT and platform service providers: Cloud hosting, data storage, and cybersecurity providers who process data on our behalf under strict data processing agreements;
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where required by law or court order;
• Professional advisors: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

All third-party service providers who process personal data on behalf of phtaya 2 are required to implement appropriate technical and organizational security measures and to process data only in accordance with our instructions and applicable Philippine law.

8.Cookies & Tracking Technologies

phtaya 2 uses cookies and similar tracking technologies to enhance your experience on the Platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how the Platform is used.

We use the following types of cookies:

• Strictly necessary cookies: Essential for the Platform to function, including session management and security. These cannot be disabled;
• Functional cookies: Remember your preferences such as language settings and login status;
• Analytics cookies: Help us understand how players use the Platform so we can improve it. Data collected is aggregated and anonymized where possible;
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling certain cookies may affect the functionality of the Platform.

9.Data Retention

phtaya 2 retains your personal data for as long as necessary to fulfill the purposes for which it was collected, including for the duration of your account relationship with us and for a period thereafter as required by applicable Philippine law.

Specific retention periods include:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required by AMLA and PAGCOR regulations;
• Transaction records: Retained for a minimum of five (5) years in accordance with Philippine financial record-keeping requirements;
• Customer support records: Retained for three (3) years following resolution of the relevant inquiry or complaint;
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with phtaya 2's data disposal procedures.

10.Data Security

phtaya 2 implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Access controls limiting personal data access to authorized personnel on a strict need-to-know basis;
• Regular security assessments, penetration testing, and vulnerability management;
• Two-factor authentication options for player accounts;
• Continuous monitoring for suspicious activity and unauthorized access attempts.

While phtaya 2 takes all reasonable steps to protect your data, no online platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, phtaya 2 will notify the National Privacy Commission and affected data subjects in accordance with the requirements of RA 10173.

11.Your Data Subject Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phtaya 2:

• Right to be informed: The right to know what personal data phtaya 2 collects about you and how it is used — which this Privacy Policy fulfills;
• Right of access: The right to request a copy of the personal data phtaya 2 holds about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to data portability: The right to receive your personal data in a structured, commonly used format where technically feasible;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 15. phtaya 2 will respond to all valid data subject requests within fifteen (15) business days, as required under RA 10173. We may need to verify your identity before processing your request.

12.Children's Privacy

phtaya 2 is strictly an adult platform. Access to the Platform is limited to individuals who are at least twenty-one (21) years of age, in accordance with Philippine gaming laws. phtaya 2 does not knowingly collect personal data from persons under 21 years of age.

If phtaya 2 becomes aware that personal data has been collected from a person under the age of 21, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds in accordance with our Terms & Conditions.

If you are a parent or guardian and believe that a minor has registered on phtaya 2, please contact our support team immediately so we can take prompt action.

13.Third-Party Links

The phtaya 2 Platform may contain links to third-party websites or services for informational purposes. phtaya 2 is not responsible for the privacy practices or content of any third-party websites. We encourage you to review the privacy policies of any third-party sites you visit.

This Privacy Policy applies solely to personal data collected and processed by phtaya 2 through the Platform at phtaya2.org. It does not apply to data collected by third-party payment providers, such as GCash or PayMaya / Maya, when you interact directly with their platforms. Please refer to the respective privacy policies of those providers for information on how they handle your data.

14.Updates to This Privacy Policy

phtaya 2 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players via email to their registered address or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how phtaya 2 protects your personal data. Your continued use of the Platform following any update constitutes your acceptance of the revised Privacy Policy.

The current version of this Privacy Policy is always available at phtaya2.org/privacy-policy.

15.Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phtaya 2 handles your personal data, please contact our Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 through the phtaya 2 Platform
• Response time: Within fifteen (15) business days for formal data subject requests

For complaints regarding violations of your data privacy rights, you may also contact the National Privacy Commission of the Philippines directly. Information on how to file a complaint with the NPC is available on the NPC's official website.