phatay Casino Privacy Policy

1. Introduction

phatay Casino ("phatay," "we," "us," or "our") is committed to protecting the privacy and personal data of all users of the phatay platform, including visitors to phatay.club and registered account holders ("Players," "you," or "your"). This Privacy Policy describes how phatay collects, uses, stores, shares, and protects personal data in connection with your use of the phatay online gaming platform and all associated services.

This Privacy Policy is issued in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), its implementing rules and regulations, and the guidelines issued by the National Privacy Commission (NPC). As a PAGCOR-licensed online gaming operator, phatay is also subject to the data governance requirements of the Philippine Amusement and Gaming Corporation.

By registering an account at phatay Casino, using the phatay platform, or otherwise providing personal data to phatay, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree to the terms of this Privacy Policy, please discontinue use of the phatay platform immediately.

2. Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for the personal data of phatay Casino players is phatay Casino, operating phatay.club. As the data controller, phatay determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is conducted lawfully, fairly, and transparently in accordance with the DPA.

phatay has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the DPA and this Privacy Policy. Inquiries, complaints, or requests relating to the exercise of data subject rights may be directed to the phatay DPO at the contact details set out in Section 15 of this Privacy Policy.

3. Data We Collect

3.1 Registration and Identity Data

When you register a phatay account, we collect the personal data you provide during the registration and Know Your Customer (KYC) verification process, including:

• Full legal name as it appears on your government-issued Philippine identification document;
• Date of birth;
• Registered Philippine mobile number;
• Email address (if provided);
• Residential address;
• Government-issued ID details including ID type, ID number, and a copy of the ID document (for KYC verification purposes);
• Selfie or liveness verification image (where required for KYC).

3.2 Financial Data

In connection with deposits and withdrawals, phatay collects financial data including your GCash number or Maya (PayMaya) account identifier, bank account details for bank transfers (BPI, BDO, UnionBank), and transaction records including amounts, dates, payment methods used, and transaction reference numbers. phatay does not store full credit card or debit card numbers.

3.3 Gaming Activity Data

phatay records data relating to your gaming activity on the platform, including game sessions played, wagers placed, wins and losses, bonus usage, and betting history across all phatay Casino products including slots, live casino, sabong, bingo, and sports betting.

3.4 Technical and Device Data

When you access the phatay platform, we automatically collect technical data including your IP address, device type and model, operating system and version, mobile browser type and version, screen resolution, and session timestamps. This data is used for security monitoring, fraud detection, and platform performance optimisation.

3.5 Communications Data

phatay retains records of communications between you and phatay Customer Support, including live chat transcripts, support ticket records, and any other correspondence related to your phatay account.

4. How We Collect Your Data

phatay collects personal data through the following channels:

• Direct submission: Data you provide directly when registering your phatay account, submitting KYC documents, making deposits or withdrawal requests, or contacting Customer Support;
• Automated technical collection: Data collected automatically via cookies, server logs, and analytics tools when you access the phatay platform;
• Third-party payment processors: Transaction data received from GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, USDT TRC20 gateway providers, and Coins.ph in connection with deposit and withdrawal processing;
• Identity verification services: Data received from KYC and age verification service providers used by phatay to confirm the identity and age of new account holders;
• PAGCOR and regulatory sources: Data received from PAGCOR or other regulatory bodies in the exercise of their supervisory functions.

5. Legal Basis for Processing

phatay processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contract performance: Processing necessary for the performance of the contract between you and phatay, including account creation, payment processing, game delivery, and Customer Support;
• Legal obligation: Processing necessary to comply with phatay's legal obligations under Philippine law, including PAGCOR licensing conditions, AML reporting requirements under Republic Act No. 9160 (Anti-Money Laundering Act), and age verification mandates;
• Legitimate interests: Processing necessary for phatay's legitimate business interests including fraud prevention, security monitoring, responsible gaming compliance, and platform improvement — where such interests are not overridden by your data protection rights;
• Consent: Where phatay relies on your consent as the legal basis for processing (such as for optional marketing communications), you have the right to withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.

6. How We Use Your Data

phatay uses the personal data collected for the following purposes:

• Creating, managing, and verifying your phatay account;
• Processing deposits and withdrawals via GCash, Maya, and other supported Philippine payment channels;
• Delivering gaming services including slots, live casino, sabong, bingo, and sports betting;
• Verifying your identity and age in compliance with PAGCOR KYC requirements and the 21+ age restriction;
• Detecting, investigating, and preventing fraud, money laundering, and other prohibited activities in compliance with the Anti-Money Laundering Act;
• Monitoring gaming activity to identify problem gambling indicators and to administer responsible gaming tools;
• Administering bonuses, promotions, and loyalty programmes;
• Providing Customer Support services;
• Sending transactional communications related to your phatay account (deposits, withdrawals, account changes);
• Sending marketing communications about phatay Casino promotions, where you have consented or where phatay has a legitimate interest in doing so;
• Complying with PAGCOR reporting obligations and any other applicable Philippine regulatory requirements;
• Improving and optimising the phatay platform and user experience.

7. Sharing Your Data

phatay does not sell, rent, or trade your personal data to third parties for commercial purposes. phatay may share your personal data with the following categories of recipients where necessary and on a need-to-know basis:

• Payment processors: GCash (Mynt), Maya Philippines, BPI, BDO Unibank, UnionBank, 7-Eleven Philippines, and other payment service providers, for the purpose of processing your deposits and withdrawal requests;
• KYC and identity verification providers: Third-party identity verification services engaged by phatay to conduct age and identity verification as required by PAGCOR;
• Game providers: JILI, PG Soft, Pragmatic Play, and other game providers whose titles are available on the phatay platform — to the extent necessary for game delivery and dispute resolution;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies where disclosure is required by law or by regulatory direction;
• Fraud prevention and security services: Third-party fraud prevention and cybersecurity service providers engaged by phatay under appropriate data processing agreements;
• Professional advisers: Legal counsel, auditors, and other professional advisers engaged by phatay, subject to professional confidentiality obligations.

All third-party recipients of phatay player data are required to maintain the confidentiality of that data and to use it only for the specific purpose for which it was shared. phatay conducts due diligence on third-party data processors to ensure adequate data protection standards.

8. Cookies & Tracking Technologies

The phatay platform uses cookies and similar tracking technologies to maintain session security, remember your login preferences, and analyse platform performance. The categories of cookies used by phatay include:

• Strictly necessary cookies: Session authentication cookies required for you to access your phatay account securely. These cannot be disabled without disrupting core platform functionality;
• Performance cookies: Anonymised analytics data used to understand how players navigate the phatay platform and to identify areas for improvement. This data is not linked to individual player identities;
• Functional cookies: Cookies that remember your platform preferences such as language settings and display options.

phatay does not use third-party advertising cookies or share cookie data with external advertising networks. You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies may affect your ability to access the phatay login and account features.

9. Data Retention

phatay retains your personal data for as long as your phatay account is active and for such additional periods as are required by Philippine law. Specifically:

• Account registration and KYC data is retained for a minimum of five (5) years following the closure of your phatay account, in accordance with PAGCOR licensing requirements and AML obligations under the Anti-Money Laundering Act;
• Financial transaction records are retained for a minimum of five (5) years from the date of the transaction;
• Gaming activity logs are retained for a period of two (2) years from the date of the relevant activity;
• Customer Support communications are retained for two (2) years from the date of the last interaction.

Upon the expiry of applicable retention periods, phatay will securely delete or anonymise your personal data in accordance with its data disposal procedures.

10. Data Security

phatay implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include 256-bit SSL/TLS encryption for all data transmitted between your device and phatay's servers, encrypted storage of sensitive personal data, role-based access controls limiting staff access to personal data on a strict need-to-know basis, OTP-based authentication for account access and high-value transactions, regular security audits and vulnerability assessments, and incident response procedures for personal data breaches.

In the event of a personal data breach that poses a real risk of serious harm to affected data subjects, phatay will notify the National Privacy Commission and affected Players in accordance with the breach notification requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by phatay Casino:

To exercise any of the rights listed above, please contact the phatay Data Protection Officer using the contact details in Section 15. phatay will respond to verified data subject requests within thirty (30) days of receipt.

12. Children's Privacy

The phatay Casino platform is strictly intended for individuals who are 21 years of age or older. phatay does not knowingly collect or process personal data from individuals under the age of 21. As part of the phatay registration process, age is verified against government-issued Philippine identification documents. Any account found to belong to a person under the age of 21 will be immediately closed and all associated data handled in accordance with PAGCOR guidance.

If you believe that phatay has inadvertently collected personal data from a person under 21 years of age, please contact the phatay Data Protection Officer immediately so that appropriate remedial action can be taken.

13. International Data Transfers

In the course of providing services to Filipino players, phatay may transfer personal data to service providers located outside the Philippines — for example, to game providers or technology infrastructure providers operating internationally. Any such transfers are conducted only where adequate protections are in place to ensure a level of data protection equivalent to that required by the Data Privacy Act of 2012, including through the use of appropriate contractual safeguards as recognised by the National Privacy Commission.

phatay will not transfer personal data to jurisdictions that do not provide adequate data protection without first obtaining your explicit consent or establishing appropriate legal safeguards.

14. Changes to This Privacy Policy

phatay reserves the right to update or amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this page. When material changes are made, phatay will notify registered Players by posting the updated Privacy Policy on the phatay platform and, where practicable, by sending a notification to your registered mobile number.

Your continued use of the phatay platform following the publication of an updated Privacy Policy constitutes your acknowledgement of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how phatay protects your personal data.

15. Contact & Complaints

For questions about this Privacy Policy, to exercise your data subject rights, or to raise a concern about phatay's data processing practices, please contact the phatay Data Protection Officer:

Email: [email protected]

Please include "Privacy / DPO Request" in the subject line of your message, along with your registered phatay account mobile number and a description of your request. phatay will acknowledge receipt of your communication within three (3) business days and aim to resolve data subject requests within thirty (30) days.

If you are not satisfied with phatay's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines.

For regulatory enquiries regarding phatay's PAGCOR licence, please refer to the phatay About Us page.