PHTAYA 2026 Official GDPR Compliance: Your Data, Our Priority 🔒✨

Understanding PHTAYA's Commitment to GDPR

The General Data Protection Regulation (GDPR) is a comprehensive data privacy law that grants individuals greater control over their personal data. At PHTAYA, we fully embrace these principles, implementing robust measures to ensure that your data is collected, processed, and stored with the utmost care and transparency. Our commitment extends beyond mere compliance; it's about fostering an environment where you feel secure and respected while enjoying our online entertainment and gaming platform. We continually review our practices to align with the latest regulatory requirements, ensuring that PHTAYA remains a trusted name in online gaming. This policy outlines how PHTAYA, a leading online entertainment provider, manages and protects your personal data.

What Personal Data We Collect

To provide you with the best possible online gaming experience and to ensure the security of your account, PHTAYA collects various types of personal data. This collection is always conducted lawfully, fairly, and transparently, based on legitimate grounds. We only gather information that is necessary for the purposes for which it is processed. This includes, but is not limited to, the following categories:

• Account Registration Data: When you register an account with PHTAYA, we collect essential information such as your full name, email address, date of birth (to verify you are at least 18 years old), contact number, and residential address. This data is crucial for creating and managing your user profile.
• Transaction Data: Details related to your deposits, withdrawals, and betting activities on our platform are recorded. This includes payment method information (though sensitive details like full credit card numbers are not stored directly on our servers), transaction amounts, and timestamps.
• Usage Data: We collect information about how you interact with the PHTAYA website and mobile application. This includes your gameplay history, preferred games (e.g., casino games, sports betting, slots, poker), login times, pages visited, and features used. This helps us to personalize your experience and improve our services.
• Technical Data: Information about the device and internet connection you use to access PHTAYA is gathered. This includes your IP address, browser type and version, operating system, device identifiers, and network information. This data aids in security monitoring and platform optimization.
• Communication Data: Records of your communications with our customer support team, whether via live chat, email, or phone, are maintained. This allows us to provide efficient and effective assistance, and to improve our support services.
• Verification Data: For compliance with 'Know Your Customer' (KYC) and anti-money laundering (AML) regulations, we may request identity verification documents such as government-issued IDs, proof of address, or other relevant documentation.

The legal basis for collecting and processing this data typically includes fulfilling our contractual obligations to you, complying with legal requirements, protecting our legitimate interests, or with your explicit consent where required. PHTAYA ensures that all data collection practices are in line with GDPR principles and local regulations in the Philippines. We handle approximately 16 distinct categories of data points to ensure comprehensive service delivery and security.

How We Use Your Personal Data

Your personal data collected by PHTAYA is utilized for various legitimate purposes, all aimed at enhancing your gaming experience, ensuring security, and fulfilling our legal obligations. We commit to using your data only for the purposes for which it was collected, or for compatible purposes as permitted by law.

• To Provide and Manage Services: The primary use of your data is to operate our online entertainment platform. This includes creating and maintaining your account, processing your bets and transactions, and enabling your access to casino, live casino, sports betting, slots, and other games.
• For Security and Fraud Prevention: We use your data to monitor account activity, detect and prevent fraudulent behavior, money laundering, and other illegal activities. This is crucial for maintaining a safe and fair gaming environment for all PHTAYA users.
• For Customer Support: Your communication data and account details help our customer support team to assist you efficiently with any queries, technical issues, or account-related problems you may encounter.
• For Marketing and Promotions: With your explicit consent, we may use your contact information to send you updates about new games, special promotions, bonuses, and exclusive offers from PHTAYA. You always have the option to opt-out of these communications.
• For Legal and Regulatory Compliance: We process your data to comply with various legal and regulatory obligations, including age verification, 'Know Your Customer' (KYC) procedures, anti-money laundering (AML) laws, and reporting requirements to relevant authorities.
• For Service Improvement and Personalization: By analyzing usage data, we can understand player preferences, identify trends, and make informed decisions to improve our platform's functionality, game selection, and overall user experience. This includes personalizing content and game recommendations.

PHTAYA ensures that data processing activities are carried out with strict adherence to data protection principles, minimizing data where possible and always prioritizing your privacy. Our goal is to use your data responsibly to deliver a superior online entertainment service.

Data Sharing and Disclosure

PHTAYA understands the sensitivity of your personal data and commits to not selling or renting your information to third parties. However, in certain circumstances, it may be necessary to share your data with trusted third parties to provide our services, comply with legal obligations, or protect our legitimate interests. All such sharing is done under strict confidentiality agreements and in compliance with GDPR and relevant data protection laws.

• With Service Providers: We engage various third-party service providers to perform functions on our behalf. These include payment processors (for secure transactions), IT and cloud hosting providers (for infrastructure), customer support platforms, and marketing agencies. These providers are only given access to the personal data necessary to perform their specific services and are contractually bound to protect your data.
• With Partners: PHTAYA may share anonymized or aggregated data with our gaming partners and affiliates for business analysis, market research, and to improve game offerings. In specific cases, and with your consent or a clear legal basis, limited personal data may be shared with game providers for technical support or dispute resolution.
• For Legal Obligations: We may disclose your personal data if required by law, court order, or governmental regulation, or if we believe such action is necessary to comply with legal processes, protect our rights or property, or ensure the safety of our users or the public. This includes sharing data with regulatory bodies for compliance purposes.
• International Data Transfers: As PHTAYA operates globally, your data may be transferred to and stored in countries outside the Philippines or the European Economic Area (EEA). When such transfers occur, we ensure that appropriate safeguards are in place, such as standard contractual clauses approved by the European Commission, to guarantee your data receives adequate protection in accordance with GDPR.

PHTAYA maintains a rigorous vetting process for all third-party vendors and partners to ensure they meet our high standards for data security and privacy. We strive for transparency in all data sharing practices.

Your Data Protection Rights

Under GDPR, you have several fundamental rights regarding your personal data. PHTAYA is committed to facilitating the exercise of these rights, empowering you to maintain control over your information. We encourage you to familiarize yourself with these rights and how you can exercise them.

• Right to Access: You have the right to request a copy of the personal data we hold about you.
• Right to Rectification: You can request that any inaccurate or incomplete personal data we hold about you be corrected or completed.
• Right to Erasure ('Right to be Forgotten'): In certain circumstances, you can request the deletion of your personal data. This right is not absolute and may be subject to legal obligations (e.g., anti-money laundering regulations).
• Right to Restriction of Processing: You have the right to request that we restrict the processing of your personal data in certain situations, such as when you contest the accuracy of the data.
• Right to Data Portability: You can request to receive your personal data in a structured, commonly used, and machine-readable format, and have the right to transmit that data to another controller.
• Right to Object: You have the right to object to the processing of your personal data in certain situations, particularly when the processing is based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of these rights, please contact our Data Protection Officer using the details provided in the "Contact Us for GDPR Inquiries" section. We will respond to your request within one month, in accordance with GDPR requirements.

Data Security Measures at PHTAYA

The security of your personal data is a top priority for PHTAYA. We employ a comprehensive suite of technical and organizational measures designed to protect your information from unauthorized access, accidental loss, destruction, or alteration. Our security protocols are regularly reviewed and updated to counter evolving threats in the digital landscape.

• Encryption: All data transmitted between your device and our servers is protected using industry-standard Secure Socket Layer (SSL) encryption technology. This ensures that your personal and financial details remain confidential and secure during transmission.
• Access Controls: Access to your personal data is strictly limited to authorized PHTAYA personnel who require it to perform their job functions. These personnel are subject to strict confidentiality obligations and undergo regular training on data protection best practices.
• Regular Audits and Penetration Testing: Our systems and security measures are subject to regular internal and external audits, as well as penetration testing, to identify and address potential vulnerabilities proactively.
• Firewalls and Intrusion Detection Systems: We utilize robust firewalls and intrusion detection systems to monitor and prevent unauthorized access to our networks and databases.
• Data Minimization and Anonymization: PHTAYA adheres to the principle of data minimization, collecting only the data necessary for specific purposes. Where possible, we anonymize or pseudonymize data to further enhance privacy.
• Employee Training: All PHTAYA employees receive ongoing training on data protection, privacy, and security best practices to ensure a culture of vigilance and responsibility.

We are dedicated to maintaining a secure environment for your online entertainment. While no method of transmission over the internet or electronic storage is 100% secure, PHTAYA continuously strives to use commercially acceptable means to protect your personal information.

Cookies and Tracking Technologies

PHTAYA uses cookies and similar tracking technologies to enhance your experience on our website, analyze site usage, and provide personalized content and advertisements. Cookies are small text files placed on your device when you visit a website.

• What are Cookies?: Cookies are small pieces of data stored on your device that help websites remember information about you, such as your login status or preferences.
• Types of Cookies Used: We use essential cookies (for website functionality), analytical/performance cookies (to understand how visitors use our site), functionality cookies (to remember your preferences), and targeting/advertising cookies (to deliver relevant ads).
• Purpose of Cookies: Cookies help us to ensure the security of our site, personalize your experience, analyze traffic patterns, and improve our services.
• How to Manage Cookie Preferences: Most web browsers allow you to manage your cookie preferences. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, some PHTAYA features or services may not function properly without cookies.

For more detailed information, please refer to our dedicated Cookies Policy.

Changes to Our GDPR Policy

PHTAYA reserves the right to update or modify this GDPR Compliance Policy at any time to reflect changes in our practices, technology, or legal requirements. We will notify you of any significant changes by posting the updated policy on our website and, where appropriate, through other communication channels such as email. We encourage you to review this policy periodically to stay informed about how we are protecting your information. This policy was last updated on May 26, 2026.

Contact Us for GDPR Inquiries

If you have any questions, concerns, or requests regarding this GDPR Compliance Policy, our data processing practices, or wish to exercise your data protection rights, please do not hesitate to contact our dedicated Data Protection Officer (DPO).

You can reach us through:

• Email: [email protected]
• Contact Page: Visit our Contact Us page for other ways to get in touch.
• Customer Support: Our Customer Support team is also available to assist with general inquiries.

We are committed to addressing your concerns promptly and transparently.