phyaya is committed to protecting the personal data of every player who registers and engages with our platform. This Privacy Policy explains what information phyaya collects, why we collect it, how it is used and protected, who it may be shared with, and what rights you hold under applicable Philippine data protection law.
All personal data transmitted between your device and phyaya's servers is protected using industry-standard 256-bit SSL/TLS encryption. Your login credentials, KYC documents, and financial information are encrypted in transit and at rest.
phyaya collects only the personal data that is necessary for legitimate operational, legal, and regulatory purposes. We do not collect data beyond what is required to maintain your account, process transactions, and comply with Philippine law.
phyaya does not sell, rent, or commercially trade your personal data to third parties. Data sharing is limited to necessary service providers, regulatory bodies, and fraud prevention partners operating under strict confidentiality obligations.
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), phyaya recognizes your right to access, correct, object to, erase, and port your personal data. These are enforceable rights, and phyaya has processes in place to honor them.
phyaya retains personal data only for as long as required for the purpose it was collected, or as mandated by applicable law. Account data is typically retained for five years following account closure, consistent with anti-money laundering record-keeping requirements.
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, phyaya will notify affected players and the Philippine National Privacy Commission within the timeframes required under the Data Privacy Act and its Implementing Rules and Regulations.
This Privacy Policy applies to all personal data collected and processed by phyaya in connection with your use of the phyaya platform at phyaya.app, including account registration, gameplay, financial transactions, customer support interactions, and any other service provided by phyaya. By creating a phyaya account or using the platform, you acknowledge that you have read and understood this Privacy Policy.
1.1 phyaya is the data controller responsible for the personal data collected through the phyaya platform. As data controller, phyaya determines the purposes and means of processing personal data in connection with the platform's operation.
1.2 phyaya operates in accordance with the Republic of the Philippines Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and any applicable issuances of the National Privacy Commission.
1.3 phyaya has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable data protection law. Contact details for the DPO are provided in Section 15 of this Policy.
2.1 phyaya collects the following categories of personal data in connection with the operation of the platform:
| Category | Examples | When Collected |
|---|---|---|
| Identity Data | Full name, date of birth, nationality, government-issued ID details, selfie photographs | KYC verification process |
| Contact Data | Philippine mobile number, email address (if provided) | Account registration |
| Financial Data | GCash number, bank account details (partially masked), transaction histories, deposit and withdrawal amounts | Deposit and withdrawal processing |
| Technical Data | IP address, device type, browser type and version, operating system, device identifiers, session tokens | Platform access and usage |
| Usage Data | Games played, bet amounts, win/loss records, session durations, feature usage patterns | Throughout active gameplay |
| Communications Data | Support chat transcripts, complaint records, feedback submissions | Customer support interactions |
| Responsible Gaming Data | Self-exclusion records, deposit limit settings, cooling-off period requests | Responsible gaming tool activation |
2.2 phyaya does not collect sensitive personal information as defined under the Data Privacy Act (such as health records, religious beliefs, or political affiliations) unless specifically required to fulfill a responsible gaming obligation (for example, recording a self-exclusion request made on medical grounds). Any such collection will be accompanied by explicit consent.
3.1 Directly from You. The majority of personal data phyaya holds about you is provided directly by you during the account registration process, the KYC verification process, deposit and withdrawal requests, customer support interactions, and when activating responsible gaming tools.
3.2 Automatically. phyaya's platform automatically collects certain Technical Data and Usage Data when you access or use the platform. This includes data collected via cookies, web beacons, server logs, and similar tracking technologies as described in Section 7 of this Policy.
3.3 From Third Parties. phyaya may receive personal data about you from the following third-party sources:
3.4 Third-party data sources are selected by phyaya for their reliability and compliance with applicable data protection standards. Data received from these sources is subject to the same protections as data you provide directly.
4.1 phyaya processes your personal data only where a lawful basis for processing exists. The primary legal bases on which phyaya relies are:
4.2 Where phyaya relies on legitimate interests as a legal basis, we conduct a balancing assessment to ensure that our interests do not outweigh your right to privacy. You may request information about these assessments by contacting the phyaya DPO.
5.1 phyaya uses your personal data for the following purposes:
5.2 phyaya does not use your personal data for automated decision-making that produces legal effects or similarly significant impacts on you, except where such processing is necessary for fraud detection or legal compliance, in which case you have the right to request human review of any automated decision.
6.1 phyaya does not sell or rent personal data to third parties. phyaya may share your personal data with the following categories of recipients only to the extent necessary for the stated purpose:
6.2 All third parties with whom phyaya shares personal data are required to implement appropriate technical and organizational security measures and to use the data only for the specific purposes for which it was disclosed. phyaya does not authorize any third-party recipient to further disclose your data to additional parties without phyaya's prior written consent.
Every third-party service provider that processes personal data on phyaya's behalf is required to enter into a formal Data Processing Agreement with phyaya prior to any data sharing. These agreements mandate compliance with the Philippine Data Privacy Act and specify the technical and organizational measures the provider must maintain to protect your data.
7.1 phyaya uses cookies and similar tracking technologies on its platform to enable core functionality, improve performance, and support security measures. Cookies are small data files stored on your device by your browser.
7.2 phyaya uses the following categories of cookies:
7.3 phyaya does not use advertising cookies or share Technical Data with advertising networks for the purpose of serving targeted advertisements on third-party platforms.
7.4 Most browsers allow you to control cookie settings through the browser's privacy settings. Disabling strictly necessary cookies will impair your ability to use phyaya. Disabling functional or analytics cookies will not prevent platform access but may affect your experience.
8.1 phyaya retains personal data only for as long as is necessary for the purpose for which it was collected, subject to any minimum retention period required by applicable law.
8.2 The following retention periods apply as general guidelines:
8.3 At the end of the applicable retention period, phyaya will securely delete or anonymize personal data in a manner that prevents reconstruction of the original data.
9.1 phyaya implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, disclosure, alteration, or destruction. These measures include:
9.2 While phyaya takes extensive measures to protect your data, no online platform can guarantee absolute security against all threats. You share responsibility for the security of your account by maintaining strong, unique credentials and enabling two-factor authentication. phyaya will never ask for your password through any communication channel.
phyaya will never contact you via SMS, email, or social media requesting your account password, full OTP code, or payment card details. Any communication purporting to be from phyaya that requests this information is fraudulent. Report suspected phishing attempts to phyaya's official support channel immediately and do not click any links contained in suspicious messages.
10.1 Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you hold the following rights with respect to your personal data held by phyaya. These rights may be exercised by contacting phyaya's Data Protection Officer as described in Section 15.
Request confirmation of whether phyaya holds personal data about you and obtain a copy of that data.
Request correction of inaccurate or incomplete personal data held about you in phyaya's records.
Request deletion of personal data where retention is no longer justified, subject to legal retention obligations.
Object to processing of your data based on legitimate interests, including profiling for marketing purposes.
Receive your personal data in a structured, machine-readable format for transfer to another controller.
Lodge a complaint with the Philippine National Privacy Commission if you believe your data rights have been violated.
10.2 phyaya will respond to verified data subject requests within twenty (20) business days. For complex requests, phyaya may extend this period by a further twenty (20) business days, with notification of the extension provided to you.
10.3 phyaya may decline to fulfill a data subject request where doing so would conflict with a legal obligation, regulatory requirement, or ongoing fraud or law enforcement investigation. In such cases, phyaya will explain the reason for declining to the extent permitted by law.
10.4 phyaya does not charge a fee for processing data subject requests unless the request is manifestly unfounded or excessive, in which case a reasonable administrative fee may apply.
11.1 The phyaya platform is strictly intended for adults aged 21 years and above. phyaya does not knowingly collect personal data from individuals under the age of 21. Age is verified as part of the KYC process required prior to withdrawal.
11.2 If phyaya becomes aware that personal data has been collected from a person under 21 years of age, phyaya will immediately close the relevant account, delete all associated personal data (except where retention is required by law), and return any deposited funds to the payment source. phyaya may report the incident to relevant Philippine regulatory authorities.
11.3 If you are a parent or guardian and believe that a minor in your care has created a phyaya account, please contact phyaya support immediately via the official live chat channel so that the account can be closed promptly.
12.1 phyaya's primary operations and data storage are based in the Philippines. In connection with the use of game software provided by international suppliers and cloud infrastructure services, some personal data may be processed in or transferred to countries outside the Philippines.
12.2 Where phyaya transfers personal data outside the Philippines, we ensure that appropriate safeguards are in place to protect the data to a standard equivalent to Philippine data protection requirements. Safeguards may include: contractual clauses approved by the National Privacy Commission; transfers to jurisdictions recognized as providing adequate data protection; or transfers to entities certified under recognized cross-border privacy frameworks.
12.3 You may request information about the specific safeguards applicable to any international transfer of your personal data by contacting the phyaya DPO.
13.1 phyaya may send you promotional communications about bonuses, new games, and special offers where you have given your explicit consent to receive such communications at the time of registration or subsequently through your account notification settings.
13.2 You may withdraw your consent to receive marketing communications at any time by updating your notification preferences in your phyaya account settings or by contacting phyaya support. Withdrawal of marketing consent does not affect phyaya's ability to send you essential transactional communications (such as deposit confirmations, withdrawal notifications, and security alerts), which are sent on the basis of contractual necessity rather than consent.
13.3 phyaya does not share your contact details with third-party marketers or advertising networks. Any promotional communication you receive will be sent by phyaya directly through the phyaya platform's own notification system.
13.4 Where phyaya conducts behavioral analysis to personalize promotional content — for example, sending bonus offers related to games you play frequently — this processing is conducted on the basis of legitimate interests. You have the right to object to such profiling as described in Section 10.
14.1 phyaya reviews this Privacy Policy periodically and may update it to reflect changes in our data practices, platform features, applicable law, or regulatory guidance. The "Last Updated" date at the top of this Policy reflects the most recent revision.
14.2 For material changes to this Policy that affect your rights or how phyaya uses your personal data, phyaya will notify registered Players via the mobile number or contact method registered to their account, with reasonable notice prior to the changes taking effect.
14.3 For minor updates that do not materially affect your rights — such as clarifications of existing language, corrections of typographical errors, or updates to contact information — phyaya may update this Policy without individual notice. Players are encouraged to review this Policy periodically.
14.4 Continued use of the phyaya platform following notification of material changes constitutes acceptance of the revised Privacy Policy. If you do not agree with any material change, you may close your account prior to the effective date of the change.
15.1 If you have questions about this Privacy Policy, wish to exercise a data subject right, or have a concern about how phyaya processes your personal data, you may contact phyaya's Data Protection Officer through the following channels:
15.2 When submitting a data subject request, please include your registered mobile number, a brief description of your request, and (for access or portability requests) the specific categories of data you are requesting. phyaya may request additional verification of your identity before processing the request to protect against fraudulent requests for other people's data.
15.3 If you are dissatisfied with phyaya's response to a privacy concern, you have the right to lodge a formal complaint with the Philippine National Privacy Commission (NPC). The NPC accepts complaints from data subjects and investigates alleged violations of the Data Privacy Act. phyaya cooperates fully with NPC investigations and inquiries.
15.4 This Privacy Policy was last reviewed and updated on 1 January 2026. phyaya recommends that all Players read this document in full and revisit it periodically to remain informed of how their personal data is managed.
phyaya is built on the principle that Filipino players deserve both an excellent gaming experience and genuine respect for their personal information. Register today and experience an online casino that takes your privacy as seriously as your gaming enjoyment.
Must be 21 years or older · Philippines residents · Gamble responsibly