ph saya Privacy Policy

Effective Date: 1 May 2026  |  Controller: ph saya  |  Jurisdiction: Republic of the Philippines

1. Who We Are

ph saya ("we," "us," "our," or "the Company") operates the online gaming platform accessible at phsaya.org (the "Platform"). ph saya is the data controller responsible for the personal information collected through the Platform. We are committed to protecting the privacy and security of all players and visitors in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, "DPA") and its Implementing Rules and Regulations.

2. Information We Collect

ph saya collects personal information in the following categories:

• Registration Data: When you create a ph saya account, we collect your full legal name, date of birth, gender, nationality, residential address, email address, and Philippine mobile number.
• Identity Verification (KYC) Data: To comply with PAGCOR regulations and anti-money laundering (AML) requirements, we may collect copies of government-issued identification documents (e.g., Philippine passport, driver's license, SSS/GSIS ID, PhilSys ID) and proof of address.
• Financial Data: We collect information about your deposits and withdrawals, including your GCash number, PayMaya account, debit card details (card number is tokenized and never stored in full), and bank account information for local bank transfers.
• Gaming Activity Data: We record your game history, wagers placed, wins and losses, session durations, and bonus usage on ph saya.
• Device & Technical Data: We automatically collect your IP address, browser type and version, operating system, device identifiers, and referring URLs when you access the Platform.
• Communications Data: If you contact ph saya customer support, we retain records of those communications, including live chat transcripts and email correspondence.
• Responsible Gaming Data: If you set deposit limits, cooling-off periods, or self-exclusion on ph saya, we record and maintain those preferences to enforce them effectively.

3. How We Use Your Information

ph saya uses your personal information for the following purposes:

• Account Management: To create, verify, and maintain your ph saya account, including age verification (21+ requirement) and identity confirmation.
• Service Delivery: To provide access to games, process deposits and withdrawals, award bonuses, and deliver customer support.
• Regulatory Compliance: To fulfill our obligations under PAGCOR licensing conditions, Philippine AML laws (Republic Act No. 9160, as amended), and the DPA.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct on ph saya.
• Responsible Gaming: To enforce deposit limits, self-exclusion requests, and other responsible gaming tools you have activated on your account.
• Platform Improvement: To analyze usage patterns, troubleshoot technical issues, and improve the features and performance of ph saya.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only if you have opted in to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

ph saya processes your personal data on the following legal bases under the DPA:

• Contractual Necessity: Processing is necessary to perform our contract with you (the ph saya Terms & Conditions), including account management, game provision, and payment processing.
• Legal Obligation: Processing is required to comply with applicable Philippine laws, including PAGCOR regulations, AML laws, and tax reporting obligations.
• Legitimate Interests: Processing is necessary for ph saya's legitimate interests in fraud prevention, platform security, and service improvement, provided those interests are not overridden by your rights.
• Consent: For marketing communications and non-essential cookies, we rely on your explicit consent, which you may withdraw at any time.

5. Sharing Your Information

ph saya does not sell or rent your personal information to third parties. We may share your data with the following categories of recipients only to the extent necessary:

• Payment Processors: GCash, PayMaya, and local bank partners require certain financial and identity data to process your transactions securely.
• Game Providers: Third-party game studios whose titles are available on ph saya may receive anonymized or pseudonymized gameplay data for technical and audit purposes.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies may receive your data when required by law or court order.
• IT & Security Service Providers: Cloud hosting, cybersecurity, and fraud detection vendors who process data on our behalf under strict data processing agreements.
• Professional Advisors: Lawyers, auditors, and accountants who are bound by professional confidentiality obligations.

All third parties with whom ph saya shares personal data are required to handle it in accordance with the DPA and to implement appropriate security measures.

6. Cookies & Tracking Technologies

ph saya uses cookies and similar tracking technologies to operate and improve the Platform. The types of cookies we use include:

• Essential Cookies: Required for the Platform to function, including session management and security features. These cannot be disabled.
• Analytics Cookies: Help us understand how players use ph saya so we can improve performance and user experience. These are only set with your consent.
• Preference Cookies: Remember your language, display, and responsible gaming settings across sessions.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of ph saya.

7. Data Security

ph saya implements a comprehensive set of technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption for all data in transit between your device and our servers.
• AES-256 encryption for sensitive data stored in our databases.
• Multi-factor authentication (MFA) options for player accounts.
• Regular penetration testing and security audits by independent third parties.
• Strict access controls limiting employee access to personal data on a need-to-know basis.
• 24/7 security monitoring and intrusion detection systems.

While ph saya takes all reasonable precautions, no system is completely immune to security risks. In the event of a personal data breach that poses a risk to your rights, ph saya will notify you and the National Privacy Commission (NPC) within the timeframes required by the DPA.

8. Data Retention

ph saya retains your personal data for as long as your account is active and for a period thereafter as required by Philippine law. Specifically:

• Account and KYC data is retained for a minimum of five (5) years after account closure, as required by PAGCOR and AML regulations.
• Financial transaction records are retained for a minimum of five (5) years in compliance with the Anti-Money Laundering Act.
• Gaming activity logs are retained for three (3) years for dispute resolution and audit purposes.
• Marketing consent records are retained until you withdraw consent and for one (1) year thereafter as evidence of compliance.

When retention periods expire, ph saya securely deletes or anonymizes your personal data so that it can no longer be linked to you.

9. Your Rights Under the DPA

As a data subject under the Philippine Data Privacy Act, you have the following rights with respect to your personal information held by ph saya:

• Right to be Informed: You have the right to know what personal data ph saya collects and how it is used — which is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data ph saya holds about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe ph saya has violated your data privacy rights.

To exercise any of these rights, please contact our Data Protection Officer using the details in Section 13.

10. Children's Privacy

ph saya is strictly an adults-only platform. We do not knowingly collect personal information from individuals under the age of 21. If we discover that a person under 21 has registered an account or provided personal data, we will immediately suspend the account, delete the associated data, and return any deposits at our discretion. If you believe a minor has accessed ph saya, please contact us immediately at the details provided in Section 13.

11. Third-Party Links

The ph saya Platform may contain links to third-party websites or services for informational purposes. ph saya is not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policies of any external sites you visit. This Privacy Policy applies solely to information collected by ph saya through the Platform.

12. Changes to This Policy

ph saya reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or Platform features. When material changes are made, we will notify registered users via email or a prominent notice on the Platform at least seven (7) days before the changes take effect. The "Effective Date" at the top of this policy will be updated accordingly. Your continued use of ph saya after the effective date of any revision constitutes your acceptance of the updated Privacy Policy.

13. Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by ph saya, please contact our Data Protection Officer (DPO):

Email: [email protected]
Support: [email protected]
Live Chat: Available 24/7 on the ph saya Platform

For complaints that remain unresolved, you may contact the National Privacy Commission of the Philippines through their official channels.