Privacy Policy

Effective Date: January 1, 2026

Last Updated: January 1, 2026

Welcome to gtaya, the premier online gaming platform serving Filipino players across the Philippines. At gtaya, we understand that your privacy is paramount when engaging with online gaming services. This Privacy Policy explains in detail how we collect, use, store, share, and protect your personal information when you access our website at https://gtaya.cam, use our mobile applications, or interact with our customer service channels.

This Privacy Policy applies to all users of the gtaya platform, including registered players, visitors browsing our site, and anyone who communicates with our customer support team. By accessing or using gtaya services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy. If you do not agree with our privacy practices, please do not use our services.

gtaya is committed to complying with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its implementing rules and regulations issued by the National Privacy Commission of the Philippines. We also align our practices with international data protection standards including the General Data Protection Regulation (GDPR) where applicable to ensure the highest level of privacy protection for all our users.

1. Information We Collect

1.1 Personal Information You Provide

When you register an account with gtaya, we collect personal information necessary to verify your identity, comply with Philippine gaming regulations, and provide you with a secure and personalized gaming experience. The personal information you provide directly to us includes:

• Account Registration Data: Full legal name as it appears on government-issued identification, date of birth, gender, residential address in the Philippines (street address, barangay, city/municipality, province, postal code), email address, mobile phone number (including area code), and chosen username and password.
• Identity Verification Documents: Government-issued identification such as Philippine passport, driver's license, Unified Multi-Purpose ID (UMID), PhilHealth ID, postal ID, or voter's ID. We may also request supporting documents including proof of address (utility bills, bank statements, or government correspondence dated within the last three months) and selfie photographs for facial verification purposes.
• Financial Information: Payment method details for deposits and withdrawals including bank account information (account number, account name, bank name, branch), e-wallet account identifiers (GCash mobile number, PayMaya account details), and transaction history. We do not store complete credit card numbers on our servers; payment card data is processed through PCI-DSS compliant third-party payment processors.
• Communication Records: Contents of your communications with our customer support team via live chat, email, or phone calls, including timestamps, support ticket numbers, and resolution details.
• Survey and Feedback Data: Responses to voluntary surveys, questionnaires, promotions, contests, or feedback forms you choose to complete.

1.2 Information Automatically Collected

When you access the gtaya platform, we automatically collect certain technical and usage information through cookies, web beacons, and similar tracking technologies:

• Device Information: Device type (desktop, laptop, smartphone, tablet), operating system and version (Windows, macOS, iOS, Android), browser type and version, screen resolution, and unique device identifiers.
• Connection Data: IP address, internet service provider (ISP), connection type (WiFi, mobile data), geographic location derived from IP address (city and region level, not precise GPS coordinates), and time zone settings.
• Usage Analytics: Pages visited, features used, games played, bet amounts and frequencies, session duration, click patterns, navigation paths through our site, referral sources (how you arrived at gtaya), and timestamps of all activities.
• Performance Data: Page load times, server response times, error messages encountered, and technical issues reported by your browser or device.

1.3 Information from Third Parties

We may receive information about you from third-party sources to enhance our services and ensure platform security:

• Payment Processors: Transaction confirmation, payment status updates, and fraud prevention signals from GCash, PayMaya, banks, and other financial institutions.
• Identity Verification Services: Results of identity checks, address verification, and fraud screening performed by specialized third-party vendors.
• Affiliate Partners: If you were referred to gtaya through an affiliate or marketing partner, we may receive information about your referral source to properly attribute and compensate our partners.
• Social Media Platforms: If you choose to connect your gtaya account with social media accounts (optional feature), we may receive basic profile information you've authorized for sharing.

2. How We Use Your Information

gtaya processes your personal information for specific, legitimate purposes that are essential to providing gaming services and ensuring a safe, compliant, and enjoyable experience for all users:

2.1 Account Management and Service Delivery

• Creating and maintaining your player account with secure authentication
• Processing your gaming transactions including deposits, wagers, winnings, and withdrawals
• Crediting bonuses, free spins, loyalty rewards, and promotional offers to your account
• Providing customer support and responding to your inquiries, complaints, or technical issues
• Personalizing your gaming experience based on your preferences and play history
• Sending transactional communications such as account confirmations, password resets, deposit receipts, and withdrawal notifications

2.2 Legal and Regulatory Compliance

• Verifying your identity to confirm you are 21 years of age or older as required by Philippine law
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as mandated by PAGCOR regulations and the Anti-Money Laundering Act (AMLA)
• Detecting, preventing, and investigating fraudulent activity, money laundering, bonus abuse, collusion, or other prohibited conduct
• Maintaining records required by gaming regulators and tax authorities
• Cooperating with law enforcement agencies and responding to valid legal requests, court orders, or subpoenas
• Enforcing our Terms and Conditions and protecting our legal rights

2.3 Platform Security and Integrity

• Monitoring for unauthorized access, hacking attempts, and other security threats
• Preventing multiple account creation and detecting duplicate registrations
• Identifying patterns consistent with problem gambling or self-excluded players attempting to circumvent restrictions
• Analyzing gaming patterns to detect potential cheating, collusion, or use of automated betting systems
• Protecting against distributed denial-of-service (DDoS) attacks and other malicious activities

2.4 Marketing and Communications

• Sending promotional emails, SMS messages, or push notifications about new games, bonuses, tournaments, and special offers (you may opt out at any time)
• Displaying personalized content and recommendations based on your gaming preferences
• Conducting market research to understand player preferences and improve our services
• Inviting you to participate in surveys, contests, or loyalty programs

2.5 Analytics and Service Improvement

• Analyzing usage patterns to optimize website performance, navigation, and user interface design
• Understanding which games, features, and promotions are most popular with Filipino players
• Testing new features and functionalities before full release
• Improving customer support processes and reducing response times
• Developing new products and services tailored to the Philippine market

3. Information Sharing and Disclosure

gtaya does not sell your personal information to third parties. We only share your information in the following limited circumstances and with appropriate safeguards:

3.1 Service Providers and Business Partners

We engage trusted third-party service providers who assist us in operating the gtaya platform. These providers process personal information on our behalf and only for the purposes we specify. Service providers include:

• Payment Processors: GCash, PayMaya, banks, and other financial institutions that facilitate deposits and withdrawals. These providers handle financial transactions securely and in compliance with payment card industry standards.
• Identity Verification Providers: Specialized companies that verify government IDs, perform age verification, and conduct fraud screening checks.
• Cloud Hosting Services: Infrastructure providers that host our servers, databases, and applications in secure data centers.
• Customer Support Software: Live chat platforms, ticketing systems, and communication tools used by our support team.
• Marketing and Analytics Platforms: Email service providers, SMS gateways, and analytics tools that help us understand user behavior and measure campaign effectiveness.
• Game Providers: Third-party software developers who supply casino games, live dealer experiences, and sports betting platforms integrated into gtaya.

All service providers are contractually obligated to maintain the confidentiality and security of your personal information, use it only for authorized purposes, and comply with applicable data protection laws.

3.2 Legal and Regulatory Authorities

We may disclose your personal information to government agencies, regulators, and law enforcement when required by law or when we believe in good faith that disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests from PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), or other authorized government bodies
• Cooperate with law enforcement investigations of illegal activity, fraud, or money laundering
• Enforce our Terms and Conditions or protect our legal rights, property, or safety
• Protect the rights, property, or safety of our users or the general public
• Prevent or investigate suspected security breaches, fraud, or other illegal conduct

3.3 Business Transfers

In the event that gtaya undergoes a business transition such as a merger, acquisition, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity as part of the transaction. We will notify you via email and prominent notice on our website before your information is transferred and becomes subject to a different privacy policy.

3.4 Aggregate and Anonymized Data

We may share aggregated statistical data and anonymized information that does not personally identify you with business partners, advertisers, or the public. For example, we might publish reports on gaming trends in the Philippines, popular game categories, or peak usage times without revealing individual player identities.

4. Data Security Measures

gtaya implements comprehensive technical, administrative, and physical security measures to protect your personal information from unauthorized access, disclosure, alteration, and destruction:

4.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is encrypted using industry-standard SSL/TLS protocols. Sensitive personal information and financial data are encrypted both in transit and at rest using AES-256 encryption.
• Secure Authentication: Password requirements enforce minimum length, complexity, and regular updates. We support two-factor authentication (2FA) for additional account security.
• Firewall Protection: Multi-layered firewall systems protect our servers from external threats and unauthorized access attempts.
• Intrusion Detection: Real-time monitoring systems detect and respond to suspicious activity, hacking attempts, and security anomalies.
• Secure Development: Our development team follows secure coding practices and conducts regular security audits and penetration testing.
• Data Segmentation: Sensitive data is stored in segmented, access-controlled databases with strict permission hierarchies.

4.2 Administrative Controls

• Access Restrictions: Personal information is accessible only to authorized employees and contractors who require access to perform their job functions. Access is granted on a need-to-know basis and logged for audit purposes.
• Employee Training: All staff members undergo mandatory data privacy and security training to understand their obligations and recognize potential threats.
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure of user information.
• Background Checks: Key personnel with access to sensitive systems undergo background screening.
• Incident Response: We maintain a documented incident response plan to quickly address and contain any data breaches or security incidents.

4.3 Physical Security

• Our servers and data centers employ physical security controls including 24/7 surveillance, access badges, biometric authentication, and restricted entry zones
• Backup systems and disaster recovery procedures ensure business continuity and data availability
• Secure disposal procedures for hardware containing personal information

Despite our robust security measures, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security. You also play a critical role in protecting your account by choosing a strong password, keeping it confidential, logging out after gaming sessions on shared devices, and reporting any suspicious activity immediately.

5. Data Retention

gtaya retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements:

• Active Accounts: While your account remains active, we retain your personal information to provide ongoing services, maintain transaction records, and honor loyalty program status.
• Closed Accounts: After you voluntarily close your account, we retain certain information for legal and regulatory compliance purposes. Gaming regulations and anti-money laundering laws require us to maintain transaction records, identity verification documents, and account activity logs for a minimum period, typically five (5) years from the date of account closure or last transaction.
• Marketing Records: If you opt out of marketing communications, we retain your email address or phone number on a suppression list to ensure we do not inadvertently contact you again.
• Backup Systems: Information may persist in backup systems for limited periods before automatic deletion, but backups are not accessible for operational purposes.

When personal information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule and data protection policies. Anonymized data that can no longer be associated with you may be retained indefinitely for statistical analysis and business intelligence purposes.

6. Your Privacy Rights

Under the Philippine Data Privacy Act and our commitment to transparency, you have the following rights regarding your personal information:

6.1 Right to Access

You have the right to request access to the personal information we hold about you. You can review your account information directly through your gtaya account settings. For more comprehensive data requests, contact our Data Privacy Officer.

6.2 Right to Rectification

If any personal information we hold about you is inaccurate, incomplete, or outdated, you have the right to request correction. You can update certain information (email, phone number, address) directly in your account settings. For changes to your name or date of birth, please contact customer support with supporting documentation.

6.3 Right to Erasure

You may request deletion of your personal information in certain circumstances, such as when the information is no longer necessary for the purposes for which it was collected. However, we may be required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

6.4 Right to Object

You have the right to object to certain types of processing, particularly direct marketing. You can opt out of marketing emails by clicking the "unsubscribe" link in any promotional email or adjusting your communication preferences in your account settings. You can opt out of SMS marketing by replying "STOP" to any promotional text message.

6.5 Right to Data Portability

You have the right to request a copy of your personal information in a structured, commonly used, and machine-readable format for transfer to another service provider where technically feasible.

6.6 Right to Withdraw Consent

Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

6.7 Right to File a Complaint

If you believe we have violated your privacy rights or mishandled your personal information, you have the right to file a complaint with the National Privacy Commission of the Philippines. Contact information for the NPC is available at https://www.privacy.gov.ph/.

To exercise any of these rights, please contact our Data Privacy Officer using the contact information provided in Section 10 of this Privacy Policy. We will respond to verified requests within the timeframes required by applicable law, typically within thirty (30) days.