phyata Privacy Policy – How We Handle Your Personal Data

1 Scope of This Privacy Policy

This Privacy Policy applies to all personal data collected and processed by phyata in connection with the phyata website at phyata.vu, the phyata mobile application, and all services offered on the platform — including sports betting, live casino, slots, and eBingo.

By registering an account on phyata or continuing to use the platform after this Policy has been updated, you acknowledge that you have read and understood how phyata handles your personal information. If you do not agree with this Policy, you should not use phyata.

This Policy is written for players based in the Philippines and is consistent with the principles of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

2 Personal Data We Collect

phyata collects personal data in different ways depending on how you interact with the platform. The main categories are:

Information you provide directly

• Registration data: Full legal name, date of birth, gender, email address, mobile number, and chosen username.
• KYC and identity verification documents: Government-issued Philippine ID (e.g. PhilSys National ID, passport, LTO driver's licence, UMID), and where required, a selfie or liveness photo for comparison.
• Payment information: Bank account details, e-wallet reference numbers, and transaction records associated with deposits and withdrawals in PHP. phyata does not store full card numbers or cryptocurrency wallet addresses.
• Communications: Messages you send to phyata customer support, including the content of your enquiry and any attachments.

Information collected automatically

• Device and access data: IP address, device type and model, operating system, browser type and version, and mobile network information.
• Usage data: Pages visited, games played, bets placed, session duration, and in-platform navigation patterns.
• Location data: General location inferred from your IP address to verify that you are accessing phyata from within the Philippines.
• Cookies and similar technologies: As described in Section 8 of this Policy.

3 Why We Use Your Personal Data

phyata uses personal data only for the purposes listed below. We do not use your data for purposes beyond what is described here without your prior consent.

4 Legal Basis for Processing

phyata processes your personal data on the following legal bases under the Philippine Data Privacy Act:

• Contractual necessity: Processing required to fulfil the agreement between you and phyata — including account operation, payment processing, and KYC verification — is necessary to provide the service you signed up for.
• Legal obligation: Some processing is required to comply with applicable laws and regulations, including identity verification and financial record-keeping requirements.
• Legitimate interests: phyata may process data where it has a legitimate business interest, such as platform security, fraud prevention, and system analytics — provided that interest is not overridden by your rights.
• Consent: Where processing is not covered by the above, phyata will ask for your explicit consent — for example, for optional marketing communications. You may withdraw consent at any time by contacting support.

5 Sharing Your Personal Data

phyata does not sell your personal data to any third party. Your data may be shared in the following limited and controlled circumstances:

• Payment service providers: When you make a deposit or request a withdrawal, relevant payment details are shared with the payment provider handling that transaction (e.g. your Philippine bank or e-wallet provider). These providers are bound by their own data security obligations.
• Identity verification services: KYC document verification may be processed by a third-party identity verification service provider operating under a data processing agreement with phyata.
• Technology and infrastructure providers: phyata uses cloud infrastructure and software services to operate the platform. These providers process data only as instructed by phyata and under strict confidentiality terms.
• Regulatory and legal requirements: phyata may disclose data to competent authorities when required by law, court order, or regulatory demand — for example, in cases involving suspected financial crime or fraud investigations.
• Business transfers: In the event of a merger, acquisition, or sale of business assets, personal data may be transferred as part of that transaction. Players will be notified in advance where practicable.

phyata does not share your personal data with advertisers, data brokers, or any party for purposes unrelated to operating your account and the platform.

6 How We Protect Your Personal Data

phyata takes data security seriously. The platform uses a combination of technical and organisational measures to protect your personal information:

• SSL/TLS encryption: All data transmitted between your device and phyata is encrypted using SSL (Secure Sockets Layer) technology. This applies to your login session, account management, and all financial transactions.
• OTP verification: Sensitive account actions — including login from an unrecognised device and withdrawal requests — are protected by one-time password (OTP) verification sent to your registered Philippine mobile number.
• Access controls: Access to personal data within phyata's internal systems is restricted to staff who need it to perform their job functions. Access is logged and monitored.
• Data minimisation: phyata collects only the personal data needed to operate the platform and fulfil its legal obligations. We do not collect or retain data beyond what is necessary.
• Incident response: phyata has procedures in place to detect, investigate, and respond to personal data breaches. Where a breach affects your data in a way that poses a risk to your rights, you will be notified in accordance with applicable regulations.

While phyata implements appropriate security measures, no online platform can guarantee absolute security. You also play a role in keeping your account safe — see the account security guidance in the phyata Terms and Conditions.

7 How Long We Keep Your Data

phyata retains personal data for as long as necessary to fulfil the purposes described in this Policy, unless a longer retention period is required or permitted by law.

• Active accounts: Personal data is retained for the duration of your account and for a period after closure to comply with legal and financial record-keeping requirements.
• KYC documents: Identity verification documents are retained for the minimum period required under applicable anti-money laundering and financial regulations.
• Transaction records: Records of deposits, withdrawals, and bet settlement are retained as required by financial record-keeping obligations.
• Customer support records: Communications with phyata support are retained for a reasonable period to assist with follow-up queries and disputes.
• Marketing preferences: Records of your opt-in and opt-out choices for marketing communications are retained to honour those preferences.

When personal data is no longer needed, phyata will securely delete or anonymise it.

8 Cookies and Tracking Technologies

phyata uses cookies and similar technologies on the website and app to make the platform function properly and to understand how players use it. Here is a plain-language breakdown of what we use:

• Essential cookies: Required for the platform to work. These include session cookies that keep you logged in during your visit and security tokens that protect form submissions. Without these, phyata cannot function properly.
• Analytics cookies: Used to understand how players navigate the platform — which sections are visited most, where sessions end, and how features are used. This data is used in aggregate to improve the platform. Analytics data does not identify you personally.
• Preference cookies: These remember your settings, such as display preferences, so you do not have to re-set them on every visit.

You can manage cookie preferences through your browser settings. Note that disabling essential cookies will affect platform functionality. phyata does not use cookies for third-party advertising or to track you across external websites.

9 Your Rights Under Philippine Data Privacy Law

As a data subject under the Philippine Data Privacy Act (RA 10173), you have the following rights regarding your personal data held by phyata. To exercise any of these rights, contact phyata support at [email protected] with your request and sufficient information to verify your identity.

10 Children and Minors

phyata is strictly for players aged 21 and above. We do not knowingly collect personal data from anyone under the age of 21. If phyata discovers that an account has been registered by a person under 21, that account will be closed immediately and any personal data collected will be securely deleted, subject to any legal retention requirements.

If you believe a minor has registered on phyata, please contact support at [email protected] immediately so the matter can be investigated and resolved promptly.

11 Updates to This Privacy Policy

phyata may update this Privacy Policy from time to time to reflect changes in the platform, applicable law, or our data practices. When updates are made, the revised Policy will be published on this page with a new "last updated" date.

For material changes that significantly affect how your data is used, phyata will attempt to notify registered players through the platform or by email to your registered address. Continued use of phyata after an updated Policy is published means you accept the changes.

We encourage you to review this page periodically to stay informed about how phyata protects your privacy.

12 Contact Us About Privacy

If you have any questions about this Privacy Policy, want to exercise your data rights, or have a concern about how phyata has handled your personal data, please reach out to us: