phtala.ph Privacy Policy

📄 1. About This Privacy Policy

This Privacy Policy ("Policy") describes how phtala.ph (accessible at phtalaph.club, "we," "us," "our," "phtala.ph") collects, uses, stores, and discloses personal information relating to individuals ("you," "Player," "User") who access or use the phtala.ph platform, including the website, any associated mobile applications, and all related services.

This Policy applies to all personal data collected from Players registered in the Philippines, as well as to visitors who browse phtalaph.club without registering. It should be read in conjunction with our Terms & Conditions, which also form part of your agreement with phtala.ph.

By creating an account on phtala.ph or continuing to use our services, you acknowledge that you have read and understood this Policy and you consent to the collection and processing of your personal data as described herein.

📦 2. Personal Data We Collect

phtala.ph collects personal data in the following categories, depending on how you interact with the platform:

2.1 Registration & Account Data

• Full legal name
• Date of birth (to verify 21+ age eligibility)
• Email address
• Philippine mobile number (09xx format)
• Username and encrypted password
• Preferred language settings

2.2 Identity Verification (KYC) Data

In accordance with PAGCOR regulatory requirements and Philippine Anti-Money Laundering Act (AMLA) obligations, phtala.ph requires verified players to provide:

• Government-issued photo identification (UMID, PhilSys Card, Driver's Licence, Passport, or SSS ID)
• Proof of address (utility bill, bank statement, or equivalent, issued within the last 3 months)
• Selfie or liveness verification photograph
• Source of funds declaration for high-value accounts

2.3 Financial & Transaction Data

• GCash account number or registered mobile number
• Maya account details
• Bank account details (BPI, BDO, UnionBank, Metrobank, etc.) used for withdrawals
• Deposit and withdrawal transaction histories, amounts, and timestamps
• Cryptocurrency wallet addresses (for USDT transactions where applicable)

2.4 Gameplay & Activity Data

• Game session logs (start/end times, bets placed, outcomes, winnings)
• Bonus and promotion usage history
• Sports betting selections and results
• Self-exclusion and responsible gaming tool usage

2.5 Technical & Device Data

• IP address and geolocation (country/region level)
• Device type, model, and operating system
• Browser type and version
• Session identifiers and authentication tokens
• Platform interaction logs (pages visited, features used, timestamps)

Data Category	Primary Purpose	Required?
Registration Data	Account creation and management	Mandatory
KYC / Identity Documents	PAGCOR compliance, age verification, AML	Mandatory for withdrawals
Financial Data	Payment processing, fraud prevention	Mandatory for transactions
Gameplay Data	Service provision, dispute resolution	Automatic
Technical / Device Data	Security, platform optimisation	Automatic

🎯 3. How phtala.ph Uses Your Personal Data

phtala.ph uses your personal data for the following purposes:

• Account Services: Creating and maintaining your phtala.ph account, processing your login, and managing your profile settings.
• Payment Processing: Facilitating deposits via GCash, Maya, and Philippine banks, and processing withdrawal requests to your nominated payment method.
• Identity Verification & Compliance: Verifying your identity and age (21+ requirement) as mandated by PAGCOR regulations, conducting AML screening, and meeting obligations under the Philippine Anti-Money Laundering Act.
• Customer Support: Responding to your support enquiries submitted via live chat or email, investigating complaints, and resolving disputes.
• Platform Security: Detecting, investigating, and preventing fraudulent activity, unauthorised account access, and other prohibited conduct.
• Service Improvement: Analysing aggregate usage patterns to improve the phtala.ph platform experience for all Filipino players.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling indicators and facilitating self-exclusion and deposit limit tools.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have opted in, promotional communications about phtala.ph offers and new games.

⚖️ 4. Legal Basis for Processing

phtala.ph processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012 (RA 10173):

• Contract Performance: Processing necessary to create and manage your Account and deliver the services you have requested.
• Legal Obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws.
• Legitimate Interests: Processing for fraud prevention, platform security, and improving our services, where such interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and certain cookie categories, where you have provided explicit consent. You may withdraw consent at any time by contacting phtala.ph support.

🤝 5. Sharing Your Personal Data

phtala.ph does not sell, rent, or trade your personal data to third parties for marketing purposes. Personal data may be shared in the following limited circumstances:

• Payment Processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines, Inc.), and participating Philippine banks receive your financial information solely for the purpose of processing your transactions.
• KYC & Identity Verification Providers: Third-party identity verification services that assist with document verification and liveness checks, operating under binding data processing agreements.
• Regulatory Authorities: PAGCOR and other competent Philippine authorities where disclosure is required by law, court order, or regulatory mandate.
• Anti-Fraud & AML Services: Screening services used to detect and prevent money laundering, fraud, and sanctioned individual access.
• IT Infrastructure Providers: Cloud hosting and infrastructure providers that store and process platform data under strict confidentiality and security obligations.
• Game Providers: Game studios (e.g., JILI, PG Soft, Pragmatic Play) may receive anonymised session data necessary to resolve technical disputes. No personal identifiers are shared with game providers beyond what is technically required.

🍪 6. Cookies & Tracking Technologies

phtala.ph uses cookies and similar tracking technologies to operate the platform effectively and improve your experience. The categories of cookies used include:

• Strictly Necessary Cookies: Essential for the phtala.ph website to function. These include session authentication tokens, security cookies, and load-balancing cookies. They cannot be disabled.
• Functional Cookies: Remember your preferences (language settings, login state) to personalise your experience on return visits.
• Analytics Cookies: Used to understand how players interact with the platform (pages visited, session durations, error events) using aggregated, anonymised data. These help us improve the platform.

You can manage and delete cookies through your browser settings. Note that disabling strictly necessary cookies will affect your ability to use the phtala.ph platform. Analytics cookies can be opted out without affecting platform functionality.

🗓️ 7. Data Retention

phtala.ph retains personal data for as long as necessary to fulfil the purpose for which it was collected, or as required by law. Specific retention periods include:

• Account data: Retained for the duration of your Account and for a minimum of five (5) years following Account closure, in compliance with PAGCOR and AMLA record-keeping requirements.
• KYC / Identity documents: Retained for a minimum of five (5) years from the date of verification, as required by Philippine AML regulations.
• Transaction records: Retained for a minimum of five (5) years following the date of each transaction.
• Gameplay logs: Retained for a minimum of two (2) years for dispute resolution purposes.
• Support correspondence: Retained for two (2) years from the date of closure of each support case.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with phtala.ph's data destruction procedures.

🛡️ 8. Data Security

phtala.ph implements comprehensive technical and organisational security measures to protect your personal data, including:

• 256-bit SSL/TLS encryption for all data transmitted between your device and phtala.ph servers
• Encryption of sensitive data fields (passwords, financial account numbers) at rest using industry-standard cryptographic methods
• Access controls limiting personal data access to authorised phtala.ph personnel on a need-to-know basis
• Two-Factor Authentication (2FA) available for all Player Accounts
• Automated fraud detection and anomalous login monitoring systems
• Regular security audits and penetration testing of the phtala.ph platform

While phtala.ph applies these security controls diligently, no platform can guarantee absolute security against all possible threats. You are responsible for keeping your own Account credentials confidential and for notifying phtala.ph immediately if you suspect unauthorised access to your Account.

👤 9. Your Data Privacy Rights

Under the Philippine Data Privacy Act (RA 10173), you have the following rights with respect to your personal data held by phtala.ph:

• Right to Access: Request a copy of the personal data phtala.ph holds about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data in your Account.
• Right to Erasure: Request deletion of your personal data where retention is no longer legally required or justified. Note that regulatory retention requirements (PAGCOR, AMLA) may limit erasure in certain cases.
• Right to Object: Object to the processing of your personal data for marketing purposes or where processing is based on legitimate interests.
• Right to Data Portability: Request a machine-readable copy of personal data you have provided to phtala.ph.
• Right to Withdraw Consent: Withdraw any consent you have previously provided for specific processing activities (e.g., marketing emails) at any time without affecting the lawfulness of prior processing.

To exercise any of the above rights, please contact phtala.ph through our 24/7 live chat or email at [email protected]. We will respond to data rights requests within 15 business days.

If you believe your data rights have not been adequately addressed, you may lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

🔞 10. Children, Minors, and the 21+ Policy

The phtala.ph platform is strictly intended for individuals aged 21 years and above, in accordance with PAGCOR regulations governing online gambling in the Philippines. phtala.ph does not knowingly collect personal data from individuals under 21 years of age.

✏️ 11. Changes to This Privacy Policy

phtala.ph may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. Where changes are material, we will provide notice to registered Players via email or a prominent notice on the phtala.ph platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy reflects the date of the most recent revision. Your continued use of phtala.ph following notification of policy changes constitutes acceptance of the revised Policy.

📧 12. Contact Our Data Protection Team

For all privacy-related enquiries, data rights requests, or concerns about how phtala.ph handles your personal information, please contact us through the following channels:

• Live Chat: Available 24/7 on the phtala.ph platform — fastest response for urgent privacy concerns
• Email: [email protected] — for written data rights requests and formal privacy enquiries

phtala.ph serves Filipino players across Manila, Cebu, Davao, Quezon City, Makati, and all regions of the Philippines. Our support team is available around the clock to assist with any account, payment, or data privacy matter.