This Privacy Policy explains how ph saya collects, uses, stores, and protects the personal data of Filipino players and visitors in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.
ph saya collects registration details, identity documents for KYC, payment information, gameplay activity, device data, and communications. All collection has a defined legal purpose — we do not collect data we have no use for.
Your personal data is used for account management, identity verification, payment processing, PAGCOR regulatory reporting, fraud prevention, responsible gaming monitoring, and — where you opt in — marketing communications.
ph saya shares data only with KYC verification partners, payment processors, game providers, PAGCOR, and law enforcement where legally required. We do not sell personal data to advertisers or data brokers.
ph saya uses SSL/TLS encryption, access controls, encrypted database storage, and regular security audits. We enforce strict internal data access policies — only staff who need data for their role can access it.
Under RA 10173, you have the right to access, correct, delete, object to processing of, and port your personal data held by ph saya. You can exercise these rights by contacting our Data Protection Officer.
ph saya uses functional, analytical, and security cookies. Functional cookies are required for platform operation. Analytical cookies help us improve the player experience. You can manage cookie preferences in your browser settings.
ph saya ("we," "our," "us," or "the Platform") is committed to protecting the privacy and personal data of every player and visitor who interacts with phsaya.win. This Privacy Policy sets out what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over it. This Policy is issued in compliance with Republic Act No. 10173 (the Data Privacy Act of 2012), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC) of the Philippines.
This Privacy Policy applies to all personal data processed by ph saya in connection with the operation of the phsaya.win online gaming platform, including:
This Policy does not apply to third-party websites, services, or applications that may be linked to or integrated with ph saya. Those third parties maintain their own privacy policies for which ph saya is not responsible.
By registering a ph saya account, making a deposit, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.
For the purposes of the Data Privacy Act of 2012 and applicable data protection law, ph saya acts as the personal information controller with respect to the personal data of its players and visitors.
ph saya operates under PAGCOR authorization as a licensed online gaming operator in the Philippines. All data processing activities conducted by ph saya are carried out in accordance with PAGCOR's regulatory requirements and ph saya's obligations as a licensed operator.
ph saya has appointed a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act, handling data subject requests, and serving as the point of contact with the National Privacy Commission. Contact details for ph saya's DPO are provided in Section 16 of this Policy.
ph saya collects the following categories of personal data from players and, in limited cases, from visitors to the Platform:
Sensitive Personal Information: Government ID document data and financial account details are classified as sensitive personal information under RA 10173. ph saya processes such data only to the extent strictly necessary for KYC compliance, regulatory reporting, and payment processing. Access to sensitive personal information is restricted to authorised personnel on a need-to-know basis.
ph saya collects personal data through the following channels:
ph saya processes personal data on the following legal bases as recognized under the Data Privacy Act of 2012:
| Processing Purpose | Legal Basis |
|---|---|
| Account registration and management | Contract performance — necessary to provide the gaming service |
| Identity verification (KYC) | Legal obligation — PAGCOR regulations and Anti-Money Laundering Act |
| Payment processing | Contract performance — necessary to process deposits and withdrawals |
| Fraud detection and prevention | Legitimate interest — protecting players and the platform |
| Responsible gaming monitoring | Legal obligation — PAGCOR responsible gaming requirements |
| Regulatory reporting to PAGCOR and NPC | Legal obligation — applicable gaming and data protection law |
| Marketing and promotional communications | Consent — subject to explicit opt-in at registration or through account settings |
| Platform security and access logging | Legitimate interest — maintaining platform integrity and player security |
| Customer support and dispute resolution | Contract performance and legitimate interest |
ph saya processes your personal data for the following specific purposes:
ph saya does not sell, rent, or trade personal data to advertisers, data brokers, or unrelated third parties. We share personal data only in the following circumstances:
ph saya engages trusted third-party service providers who process personal data on our behalf and under our instruction, including: KYC and identity verification providers; payment processing partners (GCash, Maya, BPI, BDO, Metrobank, InstaPay, USDT networks); cloud infrastructure and hosting providers; and customer support technology platforms. All processors are bound by data processing agreements that require compliance with RA 10173 standards.
ph saya's third-party game software providers receive session and gameplay data necessary for game operation, RNG certification verification, and dispute resolution. Game provider data sharing is limited to technical session data and does not include full identity documentation.
ph saya discloses personal data to PAGCOR, the Anti-Money Laundering Council, the National Privacy Commission, and other relevant Philippine government agencies when required by law, regulation, court order, or legal process. Such disclosures are made only to the extent required by the specific legal obligation.
ph saya will disclose personal data to Philippine National Police, NBI, or other law enforcement agencies where legally compelled, or where ph saya has a good-faith belief that disclosure is necessary to prevent imminent harm, investigate fraud, or protect the legal rights of ph saya or its players.
ph saya does not share personal data with foreign entities except where strictly required for payment processing or technical infrastructure services, and only subject to adequate safeguards required under RA 10173.
ph saya's primary data processing and storage infrastructure is located within the Philippines. Where personal data is processed by third-party service providers whose systems are hosted outside the Philippines (for example, global cloud infrastructure providers), ph saya ensures that such transfers are subject to appropriate safeguards in accordance with Section 21 of RA 10173 and NPC guidelines on cross-border data transfers.
Safeguards applied to international transfers may include: data processing agreements containing standard contractual clauses approved by the NPC; binding corporate rules where applicable; and transfer to jurisdictions that the NPC has assessed as providing an adequate level of protection.
Players may request information about the specific safeguards applied to any cross-border data transfer affecting their personal data by contacting ph saya's Data Protection Officer.
ph saya retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to overriding legal and regulatory retention requirements:
| Data Category | Retention Period | Basis |
|---|---|---|
| Account registration data | Duration of account + 5 years post-closure | PAGCOR regulations, AML Act |
| KYC identity documents | Duration of account + 5 years post-closure | RA 9160 (AMLA) and PAGCOR |
| Financial transaction records | 10 years from transaction date | AMLA record-keeping requirements |
| Gameplay session data | 3 years from session date | PAGCOR audit requirements |
| Customer support communications | 3 years from last interaction | Legitimate interest / dispute resolution |
| Marketing consent records | Duration of consent + 3 years | RA 10173 accountability principle |
| Technical logs and access records | 12 months from creation | Security monitoring requirements |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with ph saya's data lifecycle management procedures.
ph saya implements appropriate technical and organizational security measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
No security system is completely impenetrable. ph saya cannot guarantee absolute security of data transmitted over the internet. Players can strengthen their account security by enabling 2FA, using a strong unique password, and logging out of the Platform on shared devices.
ph saya uses cookies and similar tracking technologies on the Platform. A cookie is a small text file stored on your device when you visit a website. ph saya uses the following categories of cookies:
ph saya does not use third-party advertising cookies or social media tracking pixels. You can manage or delete cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to use the Platform.
As a data subject under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ph saya:
Request a copy of all personal data ph saya holds about you, including information about how it is used and with whom it is shared.
Request correction of inaccurate or incomplete personal data. You can update basic account details through your account settings at any time.
Request deletion of your personal data where it is no longer necessary, subject to overriding legal retention obligations (such as AML record-keeping requirements).
Object to processing of your data for marketing or where ph saya relies on legitimate interests, unless compelling grounds override your objection.
Receive your personal data in a structured, commonly used format for transfer to another service provider, where technically feasible.
Be notified if your personal data is involved in a security breach that is likely to result in harm, within the timeframes prescribed by RA 10173.
To exercise any of these rights, submit a written request to ph saya's Data Protection Officer at the contact details listed in Section 16. ph saya will respond within the timeframe required by law, generally within fifteen (15) working days of receiving a complete request.
If you are dissatisfied with ph saya's response to your data rights request, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.
ph saya is strictly an adult gaming platform. Access to all real-money features is limited to individuals who are 21 years of age or older. ph saya does not knowingly collect personal data from persons under 21 years of age.
If ph saya becomes aware that personal data has been collected from a person under 21, that account will be immediately suspended, any accumulated balance forfeited, and the data deleted in accordance with ph saya's data lifecycle procedures. The incident will be reported to PAGCOR as required.
If you have reason to believe that a person under 21 is using ph saya — including through your account credentials — please notify ph saya support immediately. You bear responsibility for ensuring that minors in your household do not have access to your ph saya account credentials.
ph saya may send promotional communications including bonus offers, new game announcements, sports betting specials, and platform news to players who have opted in to marketing communications.
Marketing consent is obtained separately from the general Terms and Conditions at the point of registration. You are not required to consent to marketing communications in order to use ph saya. You can also opt in at any time through your account settings.
You can withdraw marketing consent at any time by: unchecking the marketing preference in your ph saya account settings; clicking the unsubscribe link in any marketing email; or contacting ph saya support and requesting removal from marketing lists. Withdrawal of marketing consent does not affect your use of the Platform or the processing of data for other lawful purposes.
Certain account communications — including deposit confirmations, withdrawal processing updates, security alerts, and important account notifications — are sent regardless of marketing preferences. These are not marketing communications and cannot be opted out of without closing your account, as they are necessary for the operation of the service.
ph saya reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or regulatory requirements. Material changes — those that significantly affect your rights or how we process your data — will be communicated by posting a notice on the ph saya homepage, sending an email to your registered address, or both, with a minimum of fifteen (15) days' advance notice where reasonably practicable.
Non-material changes (such as typographic corrections or updated contact details) take effect upon publication without advance notice. The "Last Updated" date at the top of this Policy will always reflect the most recent revision.
We encourage you to review this Privacy Policy periodically. Continued use of ph saya following the effective date of any revised Policy constitutes your acknowledgement of the changes.
For questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by ph saya, please contact:
ph saya Data Protection Officer
Platform: phsaya.win
Email: [email protected]
Subject line: "Privacy / Data Rights Request"
Live Chat: Available 24/7 via the Platform
Response target: 15 working days for formal data rights requests
If you believe that ph saya has violated your data privacy rights and you are dissatisfied with our response, you may file a complaint with the National Privacy Commission of the Philippines. For gambling-related regulatory concerns, you may also contact PAGCOR through its official channels.
ph saya takes all privacy complaints seriously. We are committed to working with you to resolve any concerns regarding our data processing practices fairly and promptly.
ph saya handles your personal data with the same care we put into the gaming experience itself. Questions? Our support team is available 24/7. Ready to play? GCash from ₱100, 800+ games. 21+ only.
21+ only · PAGCOR regulated · Data protected under RA 10173 · Play responsibly