pahtaya Privacy Policy

pahtaya ("pahtaya," "we," "us," or "our") operates the online casino and sports betting platform accessible at pahtaya.org. As the data controller for personal information collected through the Platform, pahtaya is committed to protecting the privacy and security of all players and visitors.

This Privacy Policy ("Policy") describes the types of personal data we collect, the purposes for which we use it, the circumstances under which we may share it with third parties, and the rights you have in relation to your personal data. This Policy applies to all users of the pahtaya Platform, including registered players, prospective players who browse the site without registering, and any other individuals whose personal data we process in connection with our services.

This Policy should be read in conjunction with pahtaya's Terms & Conditions, which are incorporated herein by reference. Capitalized terms not defined in this Policy have the meanings given to them in the Terms & Conditions.

pahtaya collects personal data from you in the following ways and categories:

2.1 Data You Provide Directly

• Registration Data: Full legal name, date of birth, gender, nationality, residential address, email address, and mobile number provided when creating your pahtaya account;
• Identity Verification (KYC) Data: Government-issued photo identification (e.g., Philippine passport, driver's license, SSS/GSIS ID, PhilSys ID), proof of address documents, and selfie photographs submitted for identity verification purposes;
• Payment Data: GCash account details, PayMaya account details, bank account information (BPI, BDO, Metrobank), and card details (Visa, Mastercard) used for deposits and withdrawals. Full card numbers are not stored by pahtaya – payment processing is handled by our certified payment service providers;
• Communications Data: Messages, queries, and feedback submitted through our live chat, email support, or any other communication channel.

2.2 Data Collected Automatically

• Device and Technical Data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers;
• Usage Data: Pages visited, games played, betting history, session duration, click patterns, and navigation paths within the Platform;
• Location Data: General geographic location derived from your IP address, used to verify compliance with jurisdictional restrictions;
• Cookie Data: Data collected through cookies and similar tracking technologies as described in Section 6 of this Policy.

2.3 Data from Third Parties

• Identity verification data from third-party KYC service providers used to confirm the accuracy of information you have provided;
• Fraud prevention and anti-money laundering screening data from compliance service providers;
• Payment verification data from payment processors and financial institutions.

pahtaya uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your pahtaya account, including processing your registration, verifying your identity, and enabling you to log in securely;
• Service Delivery: To provide you with access to our casino games, sports betting markets, and all other features of the pahtaya Platform;
• Payment Processing: To process deposits, withdrawals, and any other financial transactions you initiate through the Platform;
• Legal and Regulatory Compliance: To fulfill our obligations under applicable Philippine laws and regulations, including the Data Privacy Act of 2012, anti-money laundering regulations, and gaming regulations administered by PAGCOR;
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited activities;
• Responsible Gaming: To monitor player behavior for signs of problem gambling and to administer responsible gaming tools such as deposit limits, cooling-off periods, and self-exclusion;
• Customer Support: To respond to your queries, complaints, and requests submitted through our support channels;
• Platform Improvement: To analyze usage patterns and player feedback to improve the performance, features, and user experience of the pahtaya Platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and other marketing communications where you have consented to receive them. You may opt out of marketing communications at any time.

pahtaya processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 of the Philippines:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and pahtaya (i.e., the Terms & Conditions), including account creation, game access, and payment processing;
• Legal Obligation: Processing is necessary for pahtaya to comply with applicable legal and regulatory obligations, including KYC requirements, anti-money laundering obligations, and gaming regulations;
• Legitimate Interests: Processing is necessary for pahtaya's legitimate business interests, including fraud prevention, platform security, and service improvement, where such interests are not overridden by your privacy rights;
• Consent: For certain processing activities, such as sending marketing communications or placing non-essential cookies, pahtaya relies on your freely given, specific, informed, and unambiguous consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

pahtaya may share your personal data with the following categories of recipients:

• Payment Service Providers: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard processing partners, for the purpose of processing your financial transactions;
• Identity Verification Providers: Third-party KYC and AML screening service providers engaged to verify your identity and screen for compliance risks;
• Game Providers: Third-party game software providers whose games are available on the pahtaya Platform, to the extent necessary to deliver those games to you;
• IT and Infrastructure Providers: Cloud hosting, data storage, and cybersecurity service providers engaged to operate and secure the pahtaya Platform;
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where disclosure is required by law or regulation, or in response to a valid legal process;
• Professional Advisors: Legal counsel, auditors, and other professional advisors engaged by pahtaya in connection with our business operations.

All third parties with whom pahtaya shares personal data are required to process such data in accordance with applicable data protection laws and pahtaya's data processing requirements.

pahtaya uses cookies and similar tracking technologies (collectively, "Cookies") to enhance your experience on the Platform, analyze usage patterns, and support our security and fraud prevention measures.

Types of Cookies We Use:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including maintaining your login session, remembering your preferences, and enabling secure transactions. These Cookies cannot be disabled without affecting Platform functionality;
• Analytics Cookies: Used to collect aggregated, anonymized data about how players use the Platform, including pages visited, time spent, and navigation paths. This data helps us improve the Platform;
• Functional Cookies: Used to remember your preferences and settings, such as language selection and display preferences, to provide a more personalized experience;
• Security Cookies: Used to detect and prevent fraudulent activity, unauthorized access, and other security threats.

You can manage your Cookie preferences through your browser settings. Please note that disabling certain Cookies may affect the functionality of the pahtaya Platform. For more information on managing cookies, please refer to your browser's help documentation.

pahtaya retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, regulatory, accounting, or reporting obligations.

The following general retention periods apply:

• Account Data: Retained for the duration of your active account relationship with pahtaya, and for a period of five (5) years following account closure, in accordance with applicable Philippine anti-money laundering regulations;
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act and related regulations;
• KYC Documents: Identity verification documents are retained for five (5) years following the end of the business relationship, or longer if required by a competent authority;
• Communications Data: Customer support communications are retained for two (2) years from the date of the last interaction;
• Marketing Consent Records: Records of your marketing consent or opt-out are retained for the duration of your account relationship and for three (3) years thereafter.

When personal data is no longer required for any of the above purposes, pahtaya will securely delete or anonymize it in accordance with our data disposal procedures.

Under the Data Privacy Act of 2012 of the Philippines and its implementing rules, you have the following rights in relation to your personal data held by pahtaya:

• Right to Be Informed: You have the right to be informed about how your personal data is collected, used, and processed, as set out in this Privacy Policy;
• Right of Access: You have the right to request a copy of the personal data pahtaya holds about you, along with information about how it is being processed;
• Right to Rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you. You may update certain account details directly through your pahtaya account settings;
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to pahtaya's legal retention obligations;
• Right to Data Portability: You have the right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, and to request that it be transmitted to another data controller where technically feasible;
• Right to Object: You have the right to object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interests, subject to pahtaya's overriding legitimate grounds;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe that pahtaya has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact our Data Protection Officer via live chat or by emailing [email protected]. We will respond to your request within thirty (30) days of receipt, in accordance with applicable law.

pahtaya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, loss, or destruction. These measures include:

• Encryption: All data transmitted between your device and the pahtaya Platform is encrypted using 256-bit SSL/TLS technology. Sensitive data stored in our systems is encrypted at rest;
• Access Controls: Access to personal data is restricted to authorized pahtaya personnel and service providers who require it to perform their duties. All access is logged and monitored;
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for and respond to security threats in real time;
• Regular Security Audits: pahtaya conducts regular security assessments and penetration testing to identify and remediate vulnerabilities in our systems;
• Staff Training: All pahtaya personnel who handle personal data receive regular training on data protection obligations and security best practices.

While pahtaya takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, pahtaya will notify you and the National Privacy Commission in accordance with the requirements of the Data Privacy Act of 2012.

pahtaya does not knowingly collect, use, or retain personal data from individuals under the age of 21. Access to the pahtaya Platform by minors is strictly prohibited in accordance with Philippine gambling regulations and our Terms & Conditions.

If pahtaya becomes aware that personal data has been collected from an individual under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the pahtaya Platform, please contact us immediately at [email protected] so that we can investigate and take appropriate action.

Parents and guardians are encouraged to use parental control tools and to monitor their children's online activity to prevent access to gambling platforms.

pahtaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players by email or through a prominent notice on the Platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this page. Your continued use of the pahtaya Platform following the effective date of any revised Privacy Policy constitutes your acceptance of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how pahtaya protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or pahtaya's data processing practices, please contact our Data Protection Officer using the details below:

• Email: [email protected]
• Live Chat: Available 24/7 through the pahtaya Platform
• Languages: English & Filipino

We aim to respond to all privacy-related inquiries within thirty (30) days of receipt. If you are not satisfied with our response, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.