At phsaya, we take the privacy of every Filipino member seriously. This Privacy Policy explains exactly what personal data we collect, why we collect it, how we use and protect it, who we may share it with, and what rights you have over your own information under the Philippine Data Privacy Act of 2012. Please read this carefully before using the phsaya platform.
These are your fundamental data rights as a phsaya member. The full policy below details how each commitment is fulfilled in practice.
phsaya processes all personal data in compliance with Republic Act No. 10173 — the Philippine Data Privacy Act of 2012 — and its implementing rules and regulations, as overseen by the National Privacy Commission.
You have the right to request a copy of the personal data phsaya holds about you and to have inaccurate information corrected. Requests are processed within fifteen (15) business days of verified submission.
You may request deletion of your personal data in circumstances permitted by law. Note that certain data must be retained for mandatory periods under PAGCOR regulations and anti-money laundering laws — these legal obligations override erasure requests for the relevant data.
All personal data stored by phsaya is encrypted at rest using AES-256 encryption. All data transmitted between your device and phsaya servers is protected by TLS 1.2 or higher. No plaintext personal data traverses phsaya's internal network.
phsaya sends promotional communications only to members who have opted in. You can withdraw consent for marketing messages at any time from your account preferences or by replying STOP to any phsaya SMS message.
If a personal data breach occurs that is likely to adversely affect your rights, phsaya will notify you and the National Privacy Commission within seventy-two (72) hours of discovery, as required under the DPA's implementing rules.
phsaya ("phsaya," "we," "us," or "our") operates the online gaming platform accessible at phsaya.biz, providing slots, live casino, bingo, crash games, sports betting, e-sabong, and related gaming services to eligible adult residents of the Philippines. phsaya is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR).
For purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations, phsaya acts as the Personal Information Controller with respect to the personal data of registered members and visitors to the phsaya Platform.
Where phsaya engages third-party service providers to process personal data on its behalf — such as payment processors, game studio operators, or analytics providers — those third parties act as Personal Information Processors and are bound by data processing agreements requiring them to handle your data only on phsaya's documented instructions.
This Privacy Policy applies to:
This Policy does not apply to third-party websites or services that may be linked to or from the phsaya Platform. phsaya is not responsible for the privacy practices of any third-party website, including the websites of game studio partners, payment providers, or social media platforms. You should review the privacy policies of those services independently.
phsaya collects only the personal data that is necessary for the purposes described in this Policy. The categories of data we collect are described in the table below.
| Category | Data Types | When Collected |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID number and type (UMID, PhilSys, driver's license, or passport), photograph as appearing on government ID | KYC verification |
| Contact Data | Philippine mobile number (+63), email address (if provided) | Account registration |
| Financial Data | GCash or PayMaya account number (linked for transactions), bank account details (BPI, BDO, Metrobank, UnionBank) where provided for bank transfer transactions, deposit and withdrawal history | First deposit / withdrawal setup |
| Gaming Data | Game session records, bet amounts, outcomes, game preferences, session duration, login timestamps, bonus usage | Platform use |
| Technical Data | IP address, device type and model, operating system, browser type and version, mobile carrier (Globe, Smart, DITO), screen resolution, time zone | Platform access (automatic) |
| Behavioral Data | Pages visited, features used, clickstream data, search queries within Platform, referring URL | Platform use (cookies) |
| Communications Data | Content of support tickets, emails sent to phsaya, live chat transcripts | Customer support interactions |
| Responsible Gaming Data | Deposit limit settings, self-exclusion status, responsible gaming tool usage history | Account settings |
Sensitive Personal Information: Government ID numbers and financial account details are classified as sensitive personal information under the Philippine DPA. phsaya applies heightened security controls to these data types and limits access to authorized personnel only on a strict need-to-know basis.
phsaya collects personal data through the following channels and methods:
You provide data directly to phsaya when you: register for an account on the Platform; complete the KYC identity verification process; make a deposit or initiate a withdrawal; contact phsaya support via email or live chat; set responsible gaming preferences; or participate in promotions or surveys that require personal information.
When you access the phsaya Platform, our servers automatically record certain technical information, including your IP address, the date and time of access, the pages or features accessed, and the device and browser you are using. This data is collected for security monitoring, fraud detection, and platform optimization purposes.
phsaya may receive personal data from trusted third-party sources for the following limited purposes:
phsaya processes your personal data only for specific, legitimate, and declared purposes. The table below maps each processing activity to its purpose and the category of data involved.
| Purpose | Data Categories Used |
|---|---|
| Account creation and management | Identity, Contact |
| Age and identity verification (KYC) as required by PAGCOR | Identity, Contact |
| Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, UnionBank | Financial, Identity |
| Anti-money laundering compliance under RA 9160 | Identity, Financial, Gaming |
| Fraud detection and account security | Technical, Behavioral, Gaming |
| Delivering gaming services and personalizing the lobby | Gaming, Behavioral |
| Managing promotions, bonuses, and loyalty rewards | Identity, Gaming, Financial |
| Responsible gaming monitoring and tool management | Responsible Gaming, Gaming, Financial |
| Customer support and dispute resolution | Communications, Identity, Gaming |
| Marketing communications (consent-based only) | Contact, Behavioral |
| Platform analytics and performance improvement | Technical, Behavioral (anonymized or aggregated) |
| Legal compliance and regulatory reporting to PAGCOR and AMLC | Identity, Financial, Gaming |
phsaya processes personal data only where a valid legal basis exists under the Philippine Data Privacy Act. The legal bases we rely on are:
phsaya does not sell your personal data to any third party. We share personal data only in the specific circumstances described below, and only to the minimum extent necessary for the stated purpose.
phsaya engages carefully selected third-party service providers who process personal data on our behalf under binding data processing agreements. These include:
phsaya is legally required to disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities when required by law, court order, or lawful regulatory direction. phsaya will not provide advance notice of such disclosures where prohibited from doing so by the relevant authority or by law.
In the event of a merger, acquisition, corporate restructuring, or transfer of business assets involving phsaya, personal data may be transferred to the acquiring or resulting entity, subject to the same obligations as this Privacy Policy. You will be notified of any such transfer and its privacy implications with reasonable advance notice.
What phsaya Never Does: phsaya does not sell, rent, or trade your personal data to marketers, data brokers, or any third party for their independent commercial purposes. We do not share your gaming history, financial information, or identity documents with any party beyond those described in this section.
phsaya implements a layered security framework to protect personal data against unauthorized access, disclosure, alteration, or destruction. The following technical and organizational measures are in place:
Despite these measures, no data transmission over the internet or storage system can be guaranteed as completely secure. phsaya will notify affected users and the National Privacy Commission in accordance with DPA requirements if a significant breach occurs.
phsaya retains personal data for only as long as necessary to fulfill the purpose for which it was collected, or as required by applicable law. The following retention periods apply:
| Data Category | Retention Period | Basis |
|---|---|---|
| Identity & KYC documents | 5 years after account closure | PAGCOR and AMLC regulatory requirements |
| Financial transaction records | 5 years after transaction date | RA 9160 (Anti-Money Laundering Act) |
| Gaming session records | 3 years after session date | PAGCOR regulatory audit requirements |
| Customer support communications | 2 years after last interaction | Dispute resolution and legal proceedings |
| Technical / server logs | 12 months from creation | Security monitoring and fraud investigation |
| Marketing consent records | Until consent withdrawn + 1 year | DPA consent audit trail |
After the applicable retention period expires, personal data is securely deleted from phsaya systems or anonymized such that it can no longer be associated with an identifiable individual.
The phsaya Platform uses cookies and similar tracking technologies to ensure correct Platform functionality, maintain your session, detect fraud, and analyze how the Platform is used. The types of cookies phsaya uses are described below:
These cookies are strictly necessary for the phsaya Platform to function. They enable session management, authentication state, security token transmission, and regional settings. Essential cookies cannot be disabled without breaking core Platform functionality.
Functional cookies remember your preferences — such as your preferred game lobby view, language setting, and responsible gaming reminder configurations — so you do not need to reset them on each visit.
phsaya uses aggregated, anonymized analytics data to understand how the Platform is used, identify features that cause difficulties, and prioritize improvements. Individual user browsing patterns are not shared with analytics providers in a form that identifies you personally.
These cookies and similar device fingerprinting technologies help phsaya identify and block fraudulent account activity, detect unauthorized login attempts, and flag multi-accounting behavior. They operate in the background and do not affect your experience as a legitimate user.
Managing Cookies: You can control non-essential cookies through your browser settings or through the phsaya cookie preference center accessible from the Platform footer. Note that disabling essential or security cookies may prevent you from logging into your phsaya account.
As a data subject under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data phsaya holds about you:
To exercise any of these rights, submit a written request to phsaya's Data Protection Officer at support@phsaya.biz with the subject line "Data Privacy Request" and your registered mobile number. phsaya will acknowledge your request within three (3) business days and fulfill it within fifteen (15) business days, unless an extension is required and communicated in advance.
NPC Contact: The National Privacy Commission of the Philippines can be reached through official NPC channels. phsaya fully cooperates with NPC investigations and inquiries.
The phsaya Platform is strictly intended for adults aged twenty-one (21) years and above as required by PAGCOR regulations governing online gambling in the Philippines. phsaya does not knowingly collect, store, or process personal data of any individual under the age of 21.
If phsaya discovers — through KYC verification or otherwise — that an account has been registered by a person under 21 years of age, the account will be immediately suspended, any deposits will be returned after identity verification of the account holder or their legal guardian, and all personal data associated with the underage account will be deleted from phsaya's systems to the extent permitted by law.
Parents or guardians who suspect that a minor has created a phsaya account should contact support@phsaya.biz immediately for urgent handling.
phsaya's primary data infrastructure is hosted within or connected to services that may involve processing in countries outside the Philippines — in particular, where phsaya's game studio partners (such as Evolution Gaming and Pragmatic Play, whose studio operations span multiple jurisdictions) process game session data.
Where personal data is transferred to a recipient outside the Philippines, phsaya ensures that appropriate safeguards are in place, consistent with NPC guidelines on cross-border data flows. These safeguards include contractual clauses that require the foreign recipient to apply data protection standards substantially equivalent to those required under Philippine law.
By creating a phsaya account and accepting these terms, you acknowledge and consent to the transfer of your personal data to third-party processors operating outside the Philippines for the purposes described in this Policy, subject to the safeguards described above.
phsaya reserves the right to update this Privacy Policy to reflect changes in our data practices, the services we offer, or applicable Philippine law. When we make material changes — those that significantly affect how we collect, use, or share your personal data — we will:
Your continued use of the phsaya Platform after the effective date of an updated Privacy Policy constitutes your acknowledgment of the update. Previous versions of this Policy are archived and available upon request to the Data Protection Officer.
phsaya has appointed a Data Protection Officer (DPO) in compliance with the requirements of the Philippine Data Privacy Act. The DPO is responsible for overseeing phsaya's data protection compliance, handling data subject requests, and serving as the primary point of contact for the National Privacy Commission.
phsaya Data Protection Officer
Email: support@phsaya.biz
Subject Line: Data Privacy Request or DPO Inquiry
Availability: Monday to Sunday, 9:00 AM – 11:00 PM Philippine Standard Time (UTC+8)
Please include your full registered name, your phsaya registered mobile number, and a clear description of your inquiry or request. Do not include passwords, OTPs, or other security credentials in any email communication with phsaya.
This Privacy Policy was last reviewed and updated on January 1, 2026. All prior versions of the phsaya Privacy Policy are superseded by this document.
Your personal data is handled with the same care as your winnings — securely, transparently, and in full compliance with Philippine law. Join over 500,000 Filipino members who trust phsaya every day.
Must be 21 or older to register. Gambling involves financial risk. Play responsibly.