Privacy Policy – ph saya Online Casino

This Privacy Policy ("Policy") describes how ph saya ("ph saya," "we," "us," or "our"), operator of the online gaming platform at phsaya.one, collects, processes, stores, and protects the personal information of individuals ("Players," "Users," or "you") who register for or use the ph saya Platform. This Policy is issued in compliance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and applicable guidelines issued by the National Privacy Commission of the Philippines ("NPC"). By using the ph saya Platform, you consent to the data practices described in this Policy.

1. Introduction

1.1 ph saya is committed to protecting the privacy and personal data of every Filipino player who uses our platform. We understand that trust is the foundation of any relationship between a player and an online gaming platform — and that trust starts with being transparent about how your data is handled.

1.2 This Policy applies to all personal data collected through the ph saya website at phsaya.one, our mobile web application, customer support channels, and any other service that links to or references this Policy. It does not apply to third-party websites or services linked from our platform.

1.3 This Policy should be read alongside the ph saya Terms and Conditions, which govern the overall use of our Platform. In the event of any conflict, this Policy shall govern with respect to personal data processing matters.

2. Data Controller Information

2.1 ph saya is the Data Controller responsible for your personal data processed under this Policy. As Data Controller, ph saya determines the purposes and means of processing your personal information.

2.2 ph saya operates under compliance with PAGCOR regulatory requirements. Our Data Protection Officer ("DPO") can be contacted via the email address listed in Section 15 of this Policy.

3. Categories of Personal Data We Collect

ph saya collects personal data across the following categories:

3.1 ph saya does not collect sensitive personal information (as defined under RA 10173) beyond what is strictly required for regulatory compliance, such as government ID data required for PAGCOR-mandated age and identity verification.

4. How We Collect Your Personal Data

ph saya collects personal data through the following channels:

• Direct submission: Information you provide during registration, identity verification, deposit/withdrawal forms, support requests, and communications with ph saya;
• Automated collection: Technical and usage data collected automatically when you access and use the Platform, including through cookies and similar tracking technologies;
• Third-party sources: Identity verification data cross-referenced with Philippine government databases for KYC purposes; payment processor transaction confirmations from GCash, PayMaya, and partner banks.

5. Legal Basis for Processing

ph saya processes your personal data on the following legal grounds under the Data Privacy Act of 2012:

• Contract performance: Processing necessary to provide the ph saya Platform services you have contracted for, including account management, gameplay, and financial transactions;
• Legal obligation: Processing required to comply with PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine law;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring where such interests are not overridden by your privacy rights;
• Consent: Marketing communications and optional personalization features, where your explicit consent has been obtained and is freely withdrawable at any time.

6. How We Use Your Personal Data

ph saya uses collected personal data for the following purposes:

• Creating and managing your ph saya Account, including identity and age verification;
• Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, and Metrobank;
• Delivering the gaming services you have requested, including game history and bonus tracking;
• Complying with PAGCOR reporting requirements and AMLA obligations;
• Detecting, investigating, and preventing fraud, collusion, money laundering, and other prohibited conduct;
• Operating the responsible gaming program, including monitoring for problem gambling indicators and enforcing self-exclusion requests;
• Communicating with you regarding your Account, security alerts, and support requests;
• Improving the Platform through aggregated usage analytics (de-identified data);
• Sending promotional communications where you have provided explicit consent (opt-out available at any time).

7. Data Sharing and Disclosure

7.1 ph saya does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes.

7.2 ph saya may share your personal data with the following categories of recipients, strictly for the purposes described:

• Payment processors: GCash, PayMaya, BPI, BDO, and Metrobank, for the sole purpose of processing your financial transactions;
• Game software providers: Licensed game providers (e.g., JILI, PG Soft, Evolution) receive technical session identifiers but not personally identifiable information beyond what is required for game delivery;
• Regulatory bodies: PAGCOR and other Philippine government authorities as required by law, including the Anti-Money Laundering Council (AMLC) under AMLA obligations;
• Fraud prevention services: Third-party providers engaged for identity verification and fraud detection, bound by data processing agreements;
• IT and cloud service providers: Infrastructure providers engaged under strict data processing agreements limiting use to provision of services to ph saya.

7.3 All third-party data processors engaged by ph saya are contractually bound to implement appropriate technical and organizational security measures and to process personal data only as directed by ph saya.

8. Cookies and Tracking Technologies

8.1 ph saya uses cookies and similar tracking technologies to operate and improve the Platform. The following categories of cookies are used:

• Strictly necessary cookies: Required for the Platform to function, including session authentication and security. Cannot be disabled without disrupting Platform functionality;
• Performance cookies: Collect aggregated, anonymized data about how Players use the Platform to help us improve performance and user experience;
• Functional cookies: Remember your preferences (e.g., language, game lobby filters) to provide a more personalized experience;
• Analytics cookies: Used via privacy-respecting analytics tools to understand usage patterns. No personal identifiers are shared with analytics providers.

8.2 You may configure your browser to block or delete cookies. Note that disabling strictly necessary cookies will impair Platform functionality, including the ability to maintain a logged-in session after ph saya Login.

9. Data Retention

9.1 ph saya retains personal data for as long as necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods required by applicable law:

• Account and identity data: Minimum 5 years from account closure, as required under AMLA;
• Financial transaction records: Minimum 5 years from transaction date;
• Support communications: 2 years from resolution of the relevant query;
• Technical and usage logs: 12 months from collection, unless retained longer for ongoing fraud investigations.

9.2 Upon expiry of applicable retention periods, personal data is securely deleted or anonymized in accordance with NPC guidelines.

10. Data Security

10.1 ph saya implements appropriate technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, or alteration. These measures include:

• 256-bit SSL/TLS encryption for all data in transit;
• Encryption at rest for sensitive data fields including payment details and government ID data;
• Role-based access controls limiting staff access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of Platform infrastructure;
• Two-factor authentication options available for all Player Accounts;
• Automated monitoring for unauthorized access attempts and anomalous activity.

10.2 In the event of a personal data breach, ph saya will notify affected Players and the National Privacy Commission within 72 hours of discovery, in accordance with NPC Circular 16-03.

11. Your Data Subject Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights regarding their personal data held by ph saya:

• Right to be informed: You have the right to be informed of how your personal data is being processed — which this Policy fulfils;
• Right of access: You may request a copy of the personal data ph saya holds about you;
• Right to correction: You may request correction of inaccurate or incomplete personal data;
• Right to erasure: You may request deletion of your personal data where retention is no longer legally required, subject to AMLA and PAGCOR retention obligations;
• Right to object: You may object to processing based on legitimate interests, including processing for direct marketing purposes;
• Right to data portability: You may request a machine-readable copy of personal data you have provided to ph saya;
• Right to damages: You have the right to be indemnified for damages sustained due to inaccurate, incomplete, outdated, or unlawfully obtained personal data.

To exercise any of the above rights, contact ph saya's Data Protection Officer at the details in Section 15. ph saya will respond to all valid data subject requests within 30 calendar days.

12. Children's Privacy

12.1 The ph saya Platform is strictly for individuals aged 21 years and older, as required under PAGCOR regulations. ph saya does not knowingly collect personal data from persons under 21 years of age.

12.2 If ph saya becomes aware that personal data has been collected from an individual under 21 years of age, the associated Account will be immediately closed and all collected personal data will be deleted, subject to any mandatory AMLA retention obligations relating to any financial transactions that may have occurred.

13. International Data Transfers

13.1 ph saya primarily processes personal data within the Philippines. Where data is processed by third-party service providers outside the Philippines (such as cloud infrastructure or game software providers with regional data centres), ph saya ensures that appropriate safeguards are in place, including contractual data processing agreements that impose data protection obligations equivalent to those required under Philippine law.

13.2 ph saya does not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate contractual safeguards.

14. Updates to This Policy

14.1 ph saya may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable law, or regulatory guidance. Material changes will be communicated to registered Players via email to the address on file at least 14 days before taking effect.

14.2 The current version of this Policy is always available at phsaya.one/privacy-policy. The "Last Updated" date at the top of this Policy reflects the date of the most recent revision.

15. Contact and Data Protection Officer

For all privacy-related enquiries, data subject rights requests, or concerns regarding ph saya's data processing practices, contact:

• Data Protection Officer, ph saya
• Email (plain text): [email protected]
• Subject line: "Privacy / DPO Request – [Your Account Username]"
• Live Chat: Available 24/7 after ph saya Login via the in-platform live chat widget