Privacy Policy

01 Introduction

This Privacy Policy ("Policy") describes how phtaya16 ("phtaya16," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("you," "your," or "Player") who access or use the phtaya16 website, mobile application, and all associated gaming services (collectively, the "Platform").

phtaya16 is committed to safeguarding the privacy of all Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and nationwide. We operate in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission of the Philippines.

This Policy applies to all personal data collected through the phtaya16 Platform, whether submitted directly by you during registration, collected automatically through your use of the Platform, or obtained from third-party sources in connection with your account. It should be read together with our Terms & Conditions and Responsible Gaming Policy.

02 Data We Collect

phtaya16 collects the following categories of personal data from players and users of the Platform:

phtaya16 does not intentionally collect sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, or health information, except where strictly required for responsible gaming compliance purposes (for example, self-exclusion records).

03 How We Collect Your Data

phtaya16 collects your personal data through the following means:

• Direct submission: Information you provide when registering a phtaya16 account, completing identity verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated collection: Technical and usage data collected automatically when you access or use the phtaya16 Platform, including through cookies, web beacons, and similar tracking technologies.
• Payment providers: Financial data received from payment processors such as GCash, PayMaya, BDO, BPI, and Metrobank in connection with your transactions on phtaya16.
• Identity verification services: Data received from third-party KYC (Know Your Customer) and age verification providers used to confirm your identity and eligibility to use phtaya16.
• Fraud prevention services: Data received from third-party fraud detection and anti-money laundering service providers used to protect the integrity of the phtaya16 Platform.
• Regulatory authorities: In certain circumstances, phtaya16 may receive data from regulatory bodies in connection with compliance obligations.

04 How We Use Your Data

phtaya16 uses your personal data for the following purposes:

• To create, manage, and maintain your phtaya16 player account.
• To verify your identity and age (21+) in compliance with applicable regulations.
• To process deposits and withdrawals via GCash, PayMaya, BDO, BPI, Metrobank, and other supported payment methods.
• To provide access to phtaya16 games including Bombing Fishing, Fortune Tiger, Fortune Horse, Jackpot, W Live, and Astar Live.
• To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct.
• To monitor gaming activity for responsible gaming purposes and to enforce self-exclusion or limit requests.
• To communicate with you regarding your account, transactions, promotions, and platform updates.
• To respond to your customer support enquiries and resolve disputes.
• To comply with legal and regulatory obligations, including anti-money laundering (AML) and counter-terrorism financing (CTF) requirements.
• To analyse usage patterns and improve the performance, security, and user experience of the phtaya16 Platform.
• To send you marketing communications about phtaya16 promotions and offers, where you have provided consent to receive such communications.

05 Legal Basis for Processing

phtaya16 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable Philippine law:

• Contractual necessity: Processing required to perform our obligations under the phtaya16 Terms & Conditions, including account management, payment processing, and game provision.
• Legal obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, CTF, and responsible gaming obligations.
• Legitimate interests: Processing necessary for phtaya16's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your rights and interests.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent, including for marketing communications and certain cookie-based tracking activities.

Where phtaya16 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

06 Sharing Your Data

phtaya16 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BDO, BPI, Metrobank, and other payment service providers, solely to process your financial transactions on phtaya16.
• Identity verification providers: Third-party KYC and age verification services used to confirm your eligibility to use phtaya16.
• Fraud prevention and AML providers: Third-party services used to detect and prevent fraudulent activity and money laundering on the phtaya16 Platform.
• Game providers: Third-party game developers and providers whose games are available on phtaya16, to the extent necessary to deliver those games to you.
• IT and infrastructure providers: Cloud hosting, data storage, and technical service providers who support the operation of the phtaya16 Platform.
• Regulatory and law enforcement authorities: Government agencies, regulators, and law enforcement bodies where disclosure is required by applicable law, court order, or regulatory direction.
• Professional advisers: Legal, accounting, and other professional advisers engaged by phtaya16 in connection with its business operations.

All third parties with whom phtaya16 shares personal data are required to handle that data in accordance with applicable privacy laws and phtaya16's data protection standards. phtaya16 does not permit third-party service providers to use your personal data for their own purposes beyond the specific services they provide to phtaya16.

07 Data Retention

phtaya16 retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

In general, phtaya16 applies the following retention periods:

• Account and identity data: Retained for the duration of your phtaya16 account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory requirements.
• Financial transaction data: Retained for a minimum of five (5) years from the date of the transaction, as required by applicable financial regulations.
• Gaming activity data: Retained for the duration of your account and for a minimum of three (3) years following account closure.
• Customer support communications: Retained for a minimum of two (2) years from the date of the communication.
• Marketing consent records: Retained until you withdraw consent or for a maximum of three (3) years from the date of consent, whichever is earlier.

Where phtaya16 is required by law to retain data for a longer period, the longer period will apply. Upon expiry of the applicable retention period, phtaya16 will securely delete or anonymise your personal data.

08 Data Security

phtaya16 implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the phtaya16 Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Access controls and authentication requirements limiting access to personal data to authorised phtaya16 personnel only.
• Regular security assessments, penetration testing, and vulnerability scanning of the phtaya16 Platform.
• Staff training on data protection obligations and security best practices.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While phtaya16 takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. phtaya16 cannot guarantee the absolute security of your data. You are responsible for maintaining the confidentiality of your phtaya16 account credentials and for notifying us immediately of any suspected unauthorised access to your account.

09 Cookies & Tracking Technologies

phtaya16 uses cookies and similar tracking technologies to enhance your experience on the Platform, to ensure the Platform functions correctly, and to collect usage data for analytics and security purposes.

The following types of cookies may be used on phtaya16:

• Strictly necessary cookies: Essential for the operation of the phtaya16 Platform, including session management, authentication, and security. These cookies cannot be disabled.
• Functional cookies: Used to remember your preferences and settings on phtaya16, such as your preferred language and display options.
• Analytics cookies: Used to collect anonymised data about how players use phtaya16, helping us to improve the Platform's performance and user experience.
• Security cookies: Used to detect and prevent fraudulent activity, bot traffic, and other security threats on the phtaya16 Platform.

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the phtaya16 Platform. For more information on managing cookies, refer to your browser's help documentation.

10 Your Privacy Rights

Under the Data Privacy Act of 2012 and applicable Philippine law, you have the following rights in relation to your personal data held by phtaya16:

• Right to be informed: The right to be informed of how your personal data is collected, used, and processed by phtaya16, as set out in this Policy.
• Right of access: The right to request a copy of the personal data phtaya16 holds about you.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data phtaya16 holds about you.
• Right to erasure: The right to request deletion of your personal data, subject to phtaya16's legal and regulatory retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting prior processing.
• Right to lodge a complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe phtaya16 has not handled your personal data in accordance with applicable law.

To exercise any of these rights, please contact the phtaya16 support team using the contact details provided in Section 14 of this Policy. phtaya16 will respond to all valid requests within thirty (30) days of receipt, subject to identity verification requirements.

11 Minors & Age Policy

phtaya16 is strictly intended for use by individuals who are at least 21 years of age. phtaya16 does not knowingly collect personal data from persons under 21 years of age.

If phtaya16 becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. Any funds held in such an account may be forfeited in accordance with applicable regulations.

If you are a parent or guardian and believe that your child under 21 has registered on phtaya16 or provided personal data to phtaya16, please contact our support team immediately so that we can take appropriate action.

12 International Data Transfers

In the course of operating the phtaya16 Platform, your personal data may be transferred to and processed in countries outside the Philippines, for example where phtaya16's technology infrastructure providers or game providers are located in other jurisdictions.

Where such transfers occur, phtaya16 ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and applicable Philippine law. These safeguards may include contractual data protection clauses, adequacy decisions, or other legally recognised transfer mechanisms.

By using phtaya16, you acknowledge and consent to the transfer of your personal data to other countries as described in this Policy, subject to the safeguards described above.

13 Updates to This Policy

phtaya16 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or the features of the phtaya16 Platform. The date of the most recent revision is indicated at the top of this page.

Where changes to this Policy are material, phtaya16 will notify registered players via email or a prominent notice on the Platform prior to the changes taking effect. Your continued use of phtaya16 following the effective date of any updated Policy constitutes your acceptance of the revised terms.

We encourage you to review this Privacy Policy periodically to stay informed of how phtaya16 is protecting your personal data.

14 Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or the way phtaya16 handles your personal data, please contact our Data Privacy team. We are here to assist players across the Philippines — from Manila and Makati to Cebu, Davao, and Quezon City.

You can reach phtaya16 at the following email address (plain text — not a clickable link):

For responsible gaming support, self-exclusion requests, or deposit limit adjustments, please visit our Responsible Gaming page. For general platform rules, please review our Terms & Conditions.