Privacy Policy

1. Overview and Data Controller

This Privacy Policy ("Policy") describes how gtaya ("gtaya," "we," "us," or "our") collects, processes, stores, and protects personal information provided by users ("you," "Player," or "User") of the gtaya Casino platform accessible at gtaya.one and all associated mobile and web applications (collectively, the "Platform").

gtaya acts as the Data Controller for personal information processed through the Platform, as defined under Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations. We are committed to processing your personal data lawfully, fairly, and transparently, in full compliance with the DPA and the guidelines issued by the National Privacy Commission (NPC) of the Philippines.

By registering an account or using the gtaya Platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, please discontinue use of the Platform immediately.

2. Personal Data We Collect

gtaya collects the following categories of personal data in connection with your use of the Platform:

Category	Examples
Identity Data	Full legal name, date of birth, nationality, government-issued ID number (passport, SSS, PhilHealth, driver's license)
Contact Data	Email address, mobile number, residential address (city, province, barangay)
Financial Data	GCash number, Maya/PayMaya account, bank account details (BPI, BDO, Metrobank, UnionBank, etc.), transaction history, deposit and withdrawal records
Account Data	Username, encrypted password, account preferences, bonus history, gaming activity logs
Technical Data	IP address, device type, browser type and version, operating system, session timestamps, geolocation data
Usage Data	Pages visited, games played, bet amounts, session duration, click-stream data
Communications Data	Customer support chat logs, email correspondence, feedback submissions

We do not collect sensitive personal information beyond what is strictly necessary for identity verification, regulatory compliance, and responsible gaming obligations. We do not collect information about your racial or ethnic origin, political opinions, religious beliefs, or health data, except where required by law (e.g., self-exclusion records for responsible gaming purposes).

3. How We Collect Your Data

gtaya collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated Technologies: Data collected automatically when you access the Platform, including cookies, web beacons, pixel tags, and server logs that record technical and usage data.
• Third-Party Sources: Identity verification data from KYC/AML service providers; fraud detection data from security partners; payment data from payment processors (GCash, Maya, partner banks); and publicly available information where permitted by law.
• Regulatory Sources: Information received from PAGCOR, the AMLC, the NPC, or other Philippine government agencies in connection with our regulatory obligations.

4. Purpose of Processing

gtaya processes your personal data for the following purposes:

• Account Management: To register, verify, maintain, and administer your gtaya account.
• Identity Verification (KYC): To verify your identity and age (21+) in compliance with PAGCOR licensing requirements and Philippine AML regulations.
• Transaction Processing: To process deposits, withdrawals, and bonus transactions in Philippine Peso (PHP) via approved payment channels.
• Regulatory Compliance: To comply with obligations under the DPA, PAGCOR regulations, the Anti-Money Laundering Act (AMLA), and other applicable Philippine laws, including mandatory reporting to the AMLC.
• Responsible Gaming: To monitor gaming behavior, enforce deposit and loss limits, process self-exclusion requests, and identify players who may be at risk of problem gambling.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and unauthorized access to the Platform.
• Marketing and Promotions: To send you promotional offers, bonus notifications, and platform updates, subject to your marketing preferences. You may opt out at any time.
• Platform Improvement: To analyze usage patterns, conduct research, and improve the functionality and user experience of the gtaya Platform.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, gtaya processes your personal data on the following legal bases:

• Consent: Where you have given explicit consent to the processing of your personal data for specific purposes (e.g., marketing communications).
• Contractual Necessity: Where processing is necessary for the performance of the contract between you and gtaya (i.e., the Terms & Conditions governing your use of the Platform).
• Legal Obligation: Where processing is required to comply with applicable Philippine laws and regulations, including PAGCOR licensing conditions, the AMLA, and NPC guidelines.
• Legitimate Interests: Where processing is necessary for gtaya's legitimate interests, including fraud prevention, platform security, and responsible gaming monitoring, provided such interests are not overridden by your rights and freedoms.

6. Data Sharing and Disclosure

gtaya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Regulatory Authorities: PAGCOR, the AMLC, the NPC, the Bureau of Internal Revenue (BIR), and other Philippine government agencies, where required by law or regulatory obligation.
• KYC/AML Service Providers: Third-party identity verification and anti-money laundering screening providers engaged to assist with our compliance obligations.
• Payment Processors: GCash, Maya/PayMaya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) for the processing of financial transactions.
• Technology and Hosting Providers: Cloud infrastructure, cybersecurity, and platform technology providers who process data on our behalf under strict data processing agreements.
• Game Software Providers: Licensed game developers and live dealer studios whose games are offered on the gtaya Platform, to the extent necessary for game operation and fairness auditing.
• Legal and Professional Advisors: Lawyers, auditors, and other professional advisors engaged by gtaya in connection with legal proceedings or regulatory matters.

All third-party service providers engaged by gtaya are required to implement appropriate technical and organizational measures to protect your personal data and are prohibited from using your data for any purpose other than the specific service they provide to gtaya.

7. Data Retention

gtaya retains your personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following minimum retention periods:

• Account and KYC Records: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR licensing requirements and AMLA record-keeping obligations.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the AMLA and BIR regulations.
• Customer Support Records: Retained for three (3) years from the date of the last interaction, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing Data: Retained until you withdraw your consent to marketing communications or for a maximum of two (2) years from your last interaction with gtaya marketing materials, whichever is earlier.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymized in accordance with gtaya's data disposal procedures.

8. Data Security

gtaya implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the gtaya Platform.
• Encryption of sensitive data at rest, including financial information and government ID numbers.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Regular security audits, vulnerability assessments, and penetration testing of the Platform infrastructure.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures for the detection, containment, and notification of personal data breaches, in accordance with NPC breach notification requirements.

While gtaya takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the security of your account credentials and for notifying gtaya immediately at [email protected] if you suspect any unauthorized access to your account.

9. Your Data Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by gtaya:

• Right to Be Informed: The right to be informed of how your personal data is being collected and processed, as set out in this Policy.
• Right of Access: The right to request a copy of the personal data gtaya holds about you.
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data.
• Right to Erasure: The right to request deletion of your personal data, subject to gtaya's legal retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or on grounds relating to your particular situation.
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days, as required by the DPA.

10. Cookies and Tracking Technologies

gtaya uses cookies and similar tracking technologies to enhance your experience on the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: Essential for the operation of the Platform, including session management and security. These cannot be disabled.
• Functional Cookies: Remember your preferences (e.g., language, game settings) to personalize your experience.
• Analytics Cookies: Collect anonymized data about how you use the Platform to help us improve performance and user experience.
• Marketing Cookies: Used to deliver relevant promotional content based on your interests and gaming activity, subject to your consent.

You may manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the gtaya Platform.

11. Minors and Age Restriction

The gtaya Platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gambling regulations. gtaya does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete such data and close the associated account. If you believe a minor has registered on the gtaya Platform, please notify us immediately at [email protected].

12. Changes to This Privacy Policy

gtaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered players via email or prominent notice on the Platform at least seven (7) days prior to taking effect. The "Last Updated" date at the top of this Policy will be revised accordingly. Your continued use of the Platform following the effective date of any amendment constitutes your acceptance of the revised Policy.

13. Contact and Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact the gtaya Data Protection Officer:

• Email: [email protected]
• Live Chat: Available 24/7 via the gtaya Platform
• Languages: English and Filipino

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. For more information on your rights under the Data Privacy Act of 2012, visit the NPC's official resources.