ptaya Privacy Policy

This Privacy Policy (the "Policy") describes how ptaya ("ptaya," "we," "us," or "our"), the operator of the online gaming platform at ptaya.cam (the "Platform"), collects, uses, stores, discloses, and otherwise processes the personal data of individuals who access or use the Platform ("you," "User," or "Player").

This Policy applies to all personal data collected through the ptaya Platform, including through account registration, gameplay, financial transactions, customer support interactions, and use of the Platform's website and any associated web-based applications. It applies to all users located in the Republic of the Philippines and to any other user whose data is processed by ptaya in connection with the Platform's operations.

This Policy should be read alongside ptaya's Terms & Conditions and any supplementary notices provided at specific data collection points (for example, at the point of registration or KYC submission). In the event of any conflict between this Policy and a supplementary notice, the supplementary notice shall govern in respect of the specific processing it describes.

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, ptaya is the personal information controller in respect of personal data collected through the Platform.

ptaya's designated Data Protection Officer (DPO) is responsible for overseeing compliance with this Policy and applicable data protection law. You may contact the ptaya DPO through ptaya's official support channels:

• Live Chat: Available 24/7 through the ptaya Platform — Tagalog and English agents
• Email (plain text, not a link): [email protected]

All data privacy inquiries, requests to exercise data subject rights, and complaints will be directed to the DPO for handling.

ptaya collects personal data through several channels during your use of the Platform. The categories of personal data collected are as follows:

3.1 Registration Data

When you create a ptaya account, we collect:

• Full legal name
• Date of birth (to verify you meet the 21+ age requirement)
• Philippine mobile number and/or email address
• Username and encrypted password
• Country and region of residence

3.2 Identity Verification (KYC) Data

To comply with applicable Philippine gaming regulations and anti-money laundering (AML) requirements, ptaya may request:

• Government-issued identification (e.g., Philippine passport, SSS ID, UMID, PhilSys National ID, driver's licence, or voter's ID)
• Proof of residential address (e.g., utility bill, bank statement, or barangay certification)
• Proof of payment method ownership (e.g., screenshot of GCash or PayMaya account registered in your name)
• Source of funds documentation for enhanced due diligence where required

3.3 Financial Transaction Data

ptaya records all deposit and withdrawal transactions associated with your account, including transaction amounts, dates and times, payment method references (e.g., GCash transaction IDs), and transaction status. ptaya does not store full payment account credentials — payment processing is handled by our third-party payment providers subject to their own security standards.

3.4 Gameplay Data

ptaya automatically records data relating to your gameplay activity, including games played, bet amounts, outcomes, session durations, and bonus usage. This data is used to operate the Platform, resolve disputes, audit game fairness, and support responsible gaming monitoring.

3.5 Technical & Usage Data

When you access the Platform, we may automatically collect certain technical information, including:

• IP address and approximate geolocation derived from it
• Device type, operating system, and browser version
• Pages visited, links clicked, and time spent on Platform pages
• Session start and end times
• Referral source (how you arrived at ptaya.cam)

3.6 Support Communications

When you contact ptaya support via Live Chat or email, we retain records of those communications, including the content of the inquiry and the resolution provided. These records are used to maintain service quality, resolve follow-up issues, and train support staff.

ptaya uses the personal data it collects for the following purposes:

ptaya will not use your personal data for purposes that are incompatible with those listed above without first providing notice and, where required, obtaining your consent.

ptaya processes your personal data on the following legal bases as provided under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity: Processing required to enter into and perform the contract between you and ptaya (i.e., to operate your account, process transactions, and provide gaming services).
• Legal obligation: Processing required to comply with ptaya's obligations under applicable Philippine gaming regulations, anti-money laundering laws, tax reporting requirements, and other regulatory frameworks.
• Consent: Processing of data for marketing communications and certain optional profiling activities, where you have provided explicit, informed, and freely given consent. You may withdraw this consent at any time.
• Legitimate interests: Processing necessary for ptaya's legitimate interests, including fraud prevention, platform security, responsible gaming monitoring, and product improvement — provided those interests are not overridden by your rights and interests.

ptaya shares personal data only where necessary and with appropriate safeguards in place. We do not sell your data. Third parties with whom data may be shared include:

6.1 Payment Processors

To process GCash, PayMaya, BPI, BDO, and Metrobank transactions, ptaya shares relevant financial data with the applicable payment service providers. These providers operate under their own privacy policies and security standards and are independently regulated.

6.2 Game Content Providers

Games on the ptaya Platform are supplied by third-party game providers. These providers may receive anonymised or pseudonymised gameplay data for the purpose of operating game systems, calculating jackpots, and maintaining game integrity. Game providers do not receive your full personal identity information.

6.3 Regulatory and Law Enforcement Bodies

ptaya will disclose personal data to Philippine regulatory bodies (including but not limited to PAGCOR, the AMLC, and the National Privacy Commission) and law enforcement authorities where required by law, court order, or regulatory mandate. ptaya will notify affected users of such disclosures where legally permitted to do so.

6.4 Identity Verification Services

ptaya may use third-party KYC and identity verification service providers to assist with document verification during the onboarding and account review process. These providers are contractually bound to process data solely for the purposes instructed by ptaya.

6.5 Technical Infrastructure Providers

ptaya uses third-party cloud hosting, data storage, analytics, and security service providers to operate the Platform. These providers act as data processors on ptaya's behalf and are subject to data processing agreements that require them to implement appropriate security measures.

ptaya uses cookies and similar tracking technologies on the Platform to support its operation, improve user experience, and collect analytics data. The categories of cookies used are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled without impairing Platform functionality.
• Functional cookies: Remember your preferences (such as language settings, game lobby filters, and notification preferences) across sessions.
• Analytics cookies: Collect aggregate, anonymised data about how users navigate the Platform — pages visited, session length, error occurrences — to help ptaya improve the product.
• Marketing and retargeting cookies: Used only where you have consented, to personalise promotional offers and to understand which marketing channels are effective.

You can manage cookie preferences through your browser settings at any time. Disabling strictly necessary cookies will impair your ability to use the Platform. Disabling other categories of cookies will not affect your access to core Platform functionality.

ptaya retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable Philippine law and regulatory obligations:

• Account and KYC data: Retained for a minimum of five (5) years following account closure, as required under Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction.
• Gameplay records: Retained for a minimum of three (3) years for game integrity, dispute resolution, and responsible gaming monitoring purposes.
• Support communications: Retained for a minimum of two (2) years from the date of the interaction.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent as proof of lawful processing.

After the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked back to an individual. Where anonymisation is not practicable, data is disposed of using secure deletion methods.

ptaya implements technical and organisational security measures appropriate to the nature and sensitivity of the personal data it holds. These measures include, but are not limited to:

• 256-bit SSL/TLS encryption for all data transmitted between your browser and ptaya's servers
• Encrypted storage of passwords — ptaya never stores plaintext passwords
• Role-based access controls limiting staff access to personal data on a need-to-know basis
• Regular security assessments and vulnerability testing of Platform infrastructure
• Intrusion detection and monitoring systems for early identification of unauthorised access attempts
• Incident response procedures for the prompt containment and management of any data security breach

9.1 Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and interests, ptaya will notify the Philippine National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, in accordance with the requirements of the Philippine Data Privacy Act. Where the breach is likely to result in a high risk to you as an individual, ptaya will also notify you directly without undue delay.

As ptaya uses third-party service providers including cloud infrastructure, game content providers, and payment processors, your personal data may in some cases be transferred to and processed in countries outside the Republic of the Philippines.

Where such transfers occur, ptaya ensures that appropriate safeguards are in place to protect your personal data to a standard at least equivalent to the protections afforded under Philippine law. Such safeguards include data processing agreements incorporating the NPC's standard contractual clauses or equivalent protections recognised under applicable Philippine regulations.

By using the ptaya Platform, you acknowledge that your personal data may be transferred internationally as described in this section, subject always to the safeguards and obligations set out in this Policy.

Under the Philippine Data Privacy Act of 2012, you have the following rights in respect of your personal data held by ptaya:

• Right to be Informed: You have the right to be informed that ptaya is collecting and processing your personal data and to receive information about how it is being used — which is the primary purpose of this Policy.
• Right of Access: You have the right to request a copy of the personal data ptaya holds about you, along with information about how it is being processed.
• Right to Rectification: You have the right to request that inaccurate or incomplete personal data held by ptaya be corrected or completed.
• Right to Erasure: You have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to ptaya's overriding legal and regulatory retention obligations.
• Right to Data Portability: You have the right to request that ptaya provide your personal data in a structured, commonly used, and machine-readable format for transfer to another controller where technically feasible.
• Right to Object: You have the right to object to ptaya processing your personal data for direct marketing purposes or where processing is based on legitimate interests. ptaya will cease such processing unless it can demonstrate compelling legitimate grounds that override your interests.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe that ptaya has not handled your personal data in accordance with the Data Privacy Act.

Exercising Your Rights

To exercise any of the rights listed above, contact ptaya support via Live Chat or at [email protected]. ptaya will respond to all verified data rights requests within fifteen (15) business days, in accordance with the timelines prescribed by the Philippine NPC. For complex requests, ptaya may extend this period by a further thirty (30) days with prior notice to you.

ptaya may request proof of identity before processing a data rights request to ensure that personal data is not disclosed to, altered by, or deleted at the request of an unauthorised person.

The ptaya Platform is strictly for individuals aged 21 years and above. ptaya does not knowingly collect personal data from individuals under the age of 21. The 21+ age requirement is a condition of account registration enforced through age verification procedures during onboarding.

If ptaya becomes aware that personal data has been collected from an individual who is under 21 years of age, ptaya will promptly close the account, delete the associated personal data to the extent not required to be retained under applicable law, and — where appropriate — report the matter to the relevant Philippine regulatory authority.

If you believe that a minor has registered on the ptaya Platform, please contact ptaya support immediately so that the matter can be investigated and the account closed without delay.

ptaya may send you promotional communications about new games, bonuses, tournaments, and other offers where you have consented to receive such communications at the time of registration or subsequently through your account settings.

You may withdraw your consent to marketing communications at any time by:

• Updating your communication preferences in your ptaya account settings
• Clicking the unsubscribe link included in any ptaya marketing email
• Contacting ptaya support via Live Chat and requesting removal from marketing lists

Withdrawal of marketing consent will not affect the lawfulness of any processing carried out before the withdrawal. Transactional and account-related communications (such as deposit confirmations, withdrawal notifications, and security alerts) are not marketing communications and will continue to be sent regardless of your marketing preference settings, as they are necessary for the operation of your account.

ptaya reserves the right to update this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, or ptaya's data processing practices. Where changes are material, ptaya will provide reasonable advance notice to active account holders through in-Platform notification, email, or SMS.

The revised Policy will take effect on the date stated in the update notice. Your continued use of the ptaya Platform after the effective date constitutes your acceptance of the updated Policy. If you do not agree to the updated Policy, you must cease use of the Platform and may close your account in accordance with ptaya's Terms & Conditions.

The date at the top of this Policy reflects the most recent revision. ptaya recommends reviewing this Policy periodically to stay informed of how your data is being handled.

For any questions, concerns, or requests relating to this Privacy Policy or ptaya's handling of your personal data, please contact ptaya through the following channels:

• Live Chat: Available 24/7 directly on the ptaya Platform — Tagalog and English support agents available
• Email (plain text, not a link): [email protected]

If you are not satisfied with ptaya's response to a privacy-related complaint, you have the right to escalate your concern to the National Privacy Commission of the Philippines (NPC). The NPC is the government authority responsible for administering and enforcing the Philippine Data Privacy Act. Information on how to file a complaint with the NPC is available through official Philippine government channels.

ptaya © 2026. All rights reserved. This Privacy Policy was last reviewed and updated on 1 January 2026.