19phtaya Privacy Policy —
Your Data, Your Rights, Our Responsibility

When you register and use 19phtaya, we collect various categories of personal data. We have organised these by type so you can easily understand what information we hold about you.

1.1 Registration and Identity Data

• Full legal name as it appears on a Philippine government-issued ID
• Date of birth (used to verify you are 21 years of age or older)
• Email address
• Mobile number (Philippine number required for OTP verification)
• Residential address (required for KYC verification at certain thresholds)
• Government-issued ID number and copies (for KYC verification)

1.2 Financial Data

• GCash or Maya account number (for transaction processing — we do not store full e-wallet credentials)
• Bank account details (name, account number, bank name — for withdrawal processing only)
• Transaction history: deposits, withdrawals, bet amounts, and outcomes
• Card details (only the last four digits and card type are retained; full card numbers are processed by PCI-DSS compliant payment providers)

1.3 Usage and Technical Data

• IP address and general geolocation data
• Device type, operating system, and browser type
• Pages visited, features used, and time spent on the platform
• Login timestamps and session duration
• Betting history: markets accessed, bets placed, outcomes, and bet slip details

1.4 Communication Data

• Support chat transcripts and email correspondence with 19phtaya
• Survey responses and feedback submissions
• Promotional opt-in preferences

19phtaya collects personal data through the following channels:

• Directly from you: When you register an account, make a deposit or withdrawal, contact customer support, respond to a survey, or update your profile settings.
• Automatically through the platform: When you browse or interact with 19phtaya, our servers automatically log technical data such as your IP address, device identifiers, and usage patterns via cookies and similar tracking technologies (see Section 5).
• From payment processors: When you initiate a transaction, our payment partners (GCash, Maya, BDO, BPI, etc.) share the minimum information necessary to confirm and process your payment.
• From identity verification providers: For KYC compliance, we may use third-party verification services to cross-check the accuracy of the identity documents you submit.
• From fraud prevention and analytics services: We use third-party tools to detect unusual login patterns and protect accounts from unauthorised access.

19phtaya processes your personal data only for specific, legitimate purposes. The table below maps each type of data to its primary purpose and the legal basis under the Data Privacy Act of 2012.

19phtaya does not sell your personal data to any third party. We share information only in the following limited circumstances, and only with entities that are required to maintain appropriate data protection standards:

4.1 Payment Service Providers

To process your deposits and withdrawals, we share the minimum necessary information with our payment partners — GCash, Maya, BDO, BPI, UnionBank, and others. These providers operate under their own privacy policies and are responsible for the data they independently process. We do not transmit more information than is required to complete the transaction.

4.2 Identity Verification and KYC Providers

To fulfil our legal obligations under the Anti-Money Laundering Act (AMLA) and PAGCOR regulations, we work with third-party KYC service providers to verify the identity documents submitted by members. These providers are contractually bound to use your data solely for identity verification purposes.

4.3 Regulatory and Law Enforcement Authorities

19phtaya may disclose personal data to government authorities, law enforcement agencies, or courts when required to do so by Philippine law, a valid court order, or a lawful request from a regulatory body such as PAGCOR or the Anti-Money Laundering Council (AMLC). We will notify you of any such disclosure to the extent permitted by law.

4.4 Technology and Platform Service Providers

We use third-party technology providers for hosting, analytics, fraud detection, and customer support tools. These providers act as data processors on our behalf and are prohibited from using your data for their own purposes. All processors are subject to data processing agreements aligned with Philippine data protection standards.

19phtaya uses cookies and similar technologies to make the platform work properly, to improve your experience, and to understand how people use our services. A cookie is a small text file stored on your device when you visit a website. Here is how we use them:

• Essential cookies: Required for the platform to function. These handle session management, login authentication, and security. You cannot opt out of essential cookies without disabling basic platform functionality.
• Functional cookies: Remember your preferences — such as language settings or saved bet configurations — so you do not have to re-enter them every time.
• Analytics cookies: Help us understand which features are most used and how to improve the platform. Data collected through analytics cookies is aggregated and anonymised where possible.
• Security cookies: Used to detect and prevent fraudulent activity, including bot traffic and account takeover attempts.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the performance or availability of some 19phtaya features. We do not use cookies for cross-site behavioural advertising.

19phtaya implements a range of technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These include:

• SSL/TLS encryption: All data transmitted between your device and the 19phtaya platform is encrypted in transit using industry-standard SSL/TLS protocols.
• Encryption at rest: Sensitive personal and financial data stored in our databases is encrypted at rest.
• Access controls: Access to personal data within 19phtaya's internal systems is restricted on a need-to-know basis, with role-based access controls and multi-factor authentication for all staff.
• Regular security audits: 19phtaya conducts periodic internal reviews and works with external security specialists to identify and address vulnerabilities.
• Incident response: In the event of a data breach that poses a risk to your rights, 19phtaya will notify affected members and the National Privacy Commission within the timeframes required by Philippine law.

While we take every reasonable step to protect your data, no system is completely immune to security risks. You also play a role in keeping your account secure — use a strong, unique password for your 19phtaya account and never share your login credentials with anyone.

19phtaya retains personal data for as long as it is needed to fulfil the purpose for which it was collected, and for as long as required by applicable Philippine law. Key retention periods are:

• Account and identity data: Retained for the duration of your active membership and for a minimum of five (5) years after account closure, as required under AMLA and PAGCOR regulations.
• Transaction records: Retained for a minimum of five (5) years for financial audit and regulatory compliance purposes.
• Support communication records: Retained for three (3) years from the date of each interaction.
• Marketing preferences: Retained until you opt out or request deletion. Opting out updates your preference immediately but an audit record of the opt-out is retained.
• Device and usage logs: Typically retained for 12 months for security and fraud detection purposes.

When personal data reaches the end of its retention period, it is securely deleted or anonymised so that it can no longer be linked to you as an individual.

Under the Data Privacy Act of 2012, you have the following rights regarding your personal data held by 19phtaya. You can exercise any of these rights by contacting us at support@19phtaya.net with your request and account details.

• Right to be informed: You have the right to know what personal data 19phtaya collects about you and how it is being processed — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data 19phtaya holds about you. We will provide this within thirty (30) days of a verified request.
• Right to rectification: If any information we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic account details directly from your profile settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for its original purpose and where there is no overriding legal obligation to retain it (e.g., regulatory retention requirements).
• Right to data portability: You may request your personal data in a structured, commonly used, and machine-readable format for transfer to another service, where technically feasible.
• Right to object: You may object to the processing of your personal data for direct marketing or profiling purposes at any time. Such processing will stop immediately upon a verified objection.
• Right to lodge a complaint: If you believe your data rights have not been respected, you may lodge a complaint with the National Privacy Commission of the Philippines at privacy.gov.ph.

19phtaya is strictly an adult platform. Our services are not directed at, and are not intended for, persons under the age of 21. We do not knowingly collect personal data from anyone under 21 years of age. If we become aware that a minor has registered an account or provided personal data, that account will be closed immediately and all associated data will be deleted.

If you are a parent or guardian and believe your child has registered on 19phtaya without your knowledge, please contact us at support@19phtaya.net as soon as possible so we can take immediate action.

19phtaya may send you promotional communications — including bonus offers, new game announcements, and seasonal promotions — via email, SMS, or push notifications. We will only send these if you have actively opted in during registration or through your account settings.

You can opt out of marketing communications at any time by:

• Clicking the unsubscribe link in any 19phtaya promotional email
• Toggling marketing preferences in your Account Settings
• Contacting 19phtaya support at support@19phtaya.net with your opt-out request

Opting out of marketing does not affect transactional communications — you will still receive important account notifications such as deposit confirmations, withdrawal updates, and security alerts, as these are necessary for operating your account.

19phtaya does not engage in unsolicited bulk messaging or spam. If you receive a communication claiming to be from 19phtaya that you did not sign up for, please report it to support@19phtaya.net so we can investigate.

19phtaya may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When material changes are made, we will notify registered members via email or through a prominent notice on the 19phtaya platform at least seven (7) days before the changes take effect.

The date of the most recent revision is always displayed at the top of this page. Continued use of the 19phtaya platform after a revised policy takes effect constitutes your acceptance of the updated terms. If you disagree with any changes, please discontinue use of the platform and contact us to close your account.

If you have any questions about this Privacy Policy, want to exercise any of your data rights, or want to report a potential privacy concern, please get in touch with our Data Privacy team:

• Email: support@19phtaya.net (mark your subject line "Privacy Request")
• Live Chat: Available 24/7 within your logged-in 19phtaya account
• Response time: We aim to respond to all privacy-related requests within five (5) business days and to complete requests within thirty (30) calendar days.

If you are unsatisfied with our response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which oversees enforcement of the Data Privacy Act of 2012.