Data Protection Philippines Effective 2025

phsaya Privacy Policy — Your Data, Handled with Care

This Privacy Policy explains what personal information phsaya collects when you use our platform, how we use it, who we share it with, and what rights you have as a player based in the Philippines. Please read this page before registering an account.

What This Policy Covers

1. Information We Collect

When you register an account on phsaya, we collect the personal information you provide directly — including your full name, date of birth, email address, mobile number, and preferred payment details. We also collect information automatically when you use the platform, such as your device type, browser, IP address, and session activity. This technical data helps us keep the platform secure, detect unusualactivity, and improve the overall experience for players across the Philippines. If you contact our support team, we may also retain records of that correspondence. All information collected is limited to what is necessary for us to operate the platform and comply with applicable Philippine regulations.

2. How We Use Your Information

Your personal data is used primarily to create and manage your phsaya account, process deposits and withdrawals in Philippine pesos, and verify your identity in line with our regulatory obligations. We also use your information to send you important account notifications, respond to support requests, and — where you have opted in — share relevant promotional updates about new games or offers on the platform. We analyse aggregated, anonymised usage data to understand how players interact with the platform so we can make improvements. We do not use your personal data to make automated decisions that significantly affect you without human review. Your data is never sold to third-party advertisers or marketing companies.

3. Sharing Your Information

phsaya does not sell, rent, or trade your personal information to any third party for their own marketing purposes. We may share your data with trusted service providers who assist us in operating the platform — such as payment processors, identity verification partners, and cloud infrastructure providers — but only to the extent necessary and under strict data processing agreements. In certain circumstances, we may be required to disclose your information to Philippine government authorities, regulators, or law enforcement agencies where we are legally obliged to do so. If phsaya undergoes a business restructure or acquisition, your data may be transferred as part of that process, and you will be notified in advance. All third parties who handle your data on our behalf are required to maintain appropriate security standards.

4. How Long We Keep Your Data

We retain your personal information for as long as your account remains active and for a period thereafter as required by Philippine law and our regulatory obligations. Account records, transaction histories, and identity verification documents are typically retained for a minimum of five years following account closure to comply with anti-money laundering and gaming regulations. After the applicable retention period has passed, your data is securely deleted or anonymised so that it can no longer be linked back to you. If you request account closure, we will begin the data retention countdown from the date your account is formally closed. You may contact our support team at any time to ask about the specific retention period that applies to your data.

5. Your Rights Under Philippine Law

As a player based in the Philippines, you have rights under the Data Privacy Act of 2012 (Republic Act No. 10173) with respect to your personal information. These rights include the right to be informed about how your data is used, the right to access a copy of the personal data we hold about you, and the right to correct any inaccurate or outdated information. You also have the right to object to certain types of processing, to request erasure of your data where legally permissible, and to lodge a complaint with the National Privacy Commission if you believe your rights have been violated. To exercise any of these rights, please contact our support team using the email address listed in the footer of this page. We aim to respond to all data rights requests within fifteen business days.

6. Cookies and Tracking Technologies

phsaya uses cookies and similar technologies to keep you logged in, remember your preferences, and understand how the platform is being used. Essential cookies are required for the platform to function correctly and cannot be disabled. Analytics cookies help us measure page performance and identify areas for improvement — these are anonymised and do not identify you personally. You can manage your cookie preferences through your browser settings at any time, though disabling certain cookies may affect the functionality of the platform. We do not use third-party advertising cookies or cross-site tracking technologies. Our cookie practices are reviewed regularly to ensure they remain aligned with Philippine data protection standards.

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable Philippine law. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered players through their account contact details. Your continued use of the phsaya platform after any changes have been published constitutes your acceptance of the updated policy. We encourage you to review this page periodically so you are always aware of how your information is being handled. If you have any questions about this Privacy Policy or how your data is used, please reach out to our support team — contact details are in the footer below.

Your Key Privacy Rights at a Glance

Right to Access

Request a copy of the personal data phsaya holds about you at any time by contacting our support team.

Right to Correct

If any of your personal details are inaccurate or out of date, you can request a correction through your account settings or via support.

Right to Erasure

Where legally permissible, you may request that we delete your personal data after your account has been closed.

Right to Object

You can object to certain types of data processing, including direct marketing communications, at any time.

Right to Be Informed

We are committed to being transparent about what data we collect and why — this Privacy Policy is part of that commitment.

Right to Complain

If you believe your data rights have been violated, you may lodge a complaint with the Philippine National Privacy Commission.

How We Protect Your Data

phsaya applies multiple layers of technical and organisational security to keep your personal information safe at all times.

Encryption in Transit and at Rest

All data transmitted between your device and the phsaya platform is encrypted using industry-standard TLS protocols, ensuring that your personal and financial information cannot be intercepted in transit. Sensitive data stored on our servers — including identity documents and payment details — is encrypted at rest using strong encryption algorithms. Access to encrypted data is restricted to authorised personnel only, and all access events are logged and audited. We review our encryption standards regularly to keep pace with evolving security best practices. Players can verify the security of their connection by checking for the padlock icon in their browser address bar when using phsaya.

Access Controls and Authentication

phsaya enforces strict access controls so that only authorised team members can access player data, and only to the extent required for their specific role. We use multi-factor authentication for all internal systems that handle personal data, reducing the risk of unauthorised access even if credentials are compromised. Player accounts are protected by password hashing and optional two-step verification to add an extra layer of security. All internal access to player data is logged, and any anomalous access patterns trigger automatic alerts for our security team. We conduct regular access reviews to ensure that permissions remain appropriate as team roles change.

Incident Response and Breach Notification

Despite our best efforts, no platform can guarantee absolute security, which is why phsaya maintains a documented incident response plan to handle any potential data breaches swiftly and effectively. In the event of a breach that is likely to affect your rights or freedoms, we will notify the Philippine National Privacy Commission within the timeframe required by law and inform affected players without undue delay. Our incident response team is trained to contain, assess, and remediate security incidents as quickly as possible. We conduct post-incident reviews to identify root causes and implement improvements to prevent recurrence. Transparency with our players during any security incident is a core part of our commitment to responsible data handling.

Regular Security Audits

phsaya undergoes regular internal and third-party security audits to identify vulnerabilities in our systems before they can be exploited. Our development team follows secure coding practices and conducts code reviews with security in mind for every new feature or update deployed to the platform. Penetration testing is carried out periodically to simulate real-world attack scenarios and validate the effectiveness of our defences. Audit findings are reviewed by senior management and tracked through to resolution to ensure nothing falls through the cracks. We are committed to continuous improvement of our security posture to protect the personal data of every player on the phsaya platform.

Questions About Your Privacy?

If you want to know more about how phsaya handles your personal data, or if you would like to exercise any of your data rights, our support team is ready to help. You can also check our FAQ page for quick answers, or head to Register if you are ready to create your account.