Privacy Policy

1. Who We Are

ggtaya is an online gaming and casino platform accessible at ggtaya.org, operated in compliance with PAGCOR regulatory guidelines and Philippine law. We provide Filipino players with access to slots, live casino games, bingo, sports betting, online sabong, and related entertainment services, all denominated in Philippine Peso (PHP / ₱).

For the purposes of this Privacy Policy, ggtaya acts as the data controller in respect of the personal information you provide when registering an account, making deposits or withdrawals, or otherwise interacting with our platform. Any reference to "ggtaya," "we," "us," or "our" in this document refers to the ggtaya platform and its operating entity.

If you have any questions about how ggtaya handles your personal data, you may contact our Data Privacy Officer at any time via the contact details provided in Section 13 of this policy.

2. Data We Collect

ggtaya collects personal data that is necessary to provide you with a safe, compliant, and enjoyable gaming experience. The categories of data we collect include:

2.1 Identity & Registration Data

• Full legal name as it appears on your government-issued ID
• Date of birth (used to verify the 21+ age requirement under Philippine law)
• Gender
• Nationality and country of residence
• Government-issued identification number (e.g., PhilSys ID, passport, driver's licence, SSS/GSIS number)

2.2 Contact Data

• Philippine mobile number (used for OTP verification and account security)
• Email address
• Residential address (province, city/municipality, barangay, ZIP code)

2.3 Financial Data

• GCash account number or registered mobile number
• PayMaya account details
• Bank account details for BPI, BDO, or Metrobank transfers (account name and number only)
• Transaction history, including deposit amounts, withdrawal requests, and bonus credits

2.4 Gaming & Behavioural Data

• Game history, bet amounts, win/loss records, and session durations
• Responsible gaming settings you have configured (deposit limits, cooling-off periods, self-exclusion status)
• Bonus and promotion usage history

2.5 Technical & Device Data

• IP address and approximate geolocation
• Device type, operating system, and browser version
• Mobile network operator (Globe, Smart, DITO, etc.)
• Session timestamps and platform interaction logs

3. How We Collect Data

ggtaya collects your personal data through the following means:

• Direct registration: Information you provide when creating your ggtaya account, completing KYC verification, or updating your profile.
• Transactions: Data generated when you make deposits, request withdrawals, or claim bonuses through GCash, PayMaya, BPI, BDO, or Metrobank.
• Platform usage: Data automatically collected as you navigate the ggtaya website, play games, or interact with support features.
• Cookies and tracking technologies: As described in Section 8 of this policy.
• Third-party verification services: Identity and age verification data obtained from KYC service providers in connection with your registration.
• Customer support interactions: Records of your communications with our live chat support team.

4. Why We Use Your Data

ggtaya uses your personal data for the following purposes:

5. Legal Basis for Processing

ggtaya processes your personal data on the following legal grounds, consistent with the Republic Act No. 10173 (Data Privacy Act of 2012) of the Philippines and its implementing rules and regulations:

• Contractual necessity: Processing required to fulfil our obligations to you under the ggtaya Terms & Conditions, including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, PAGCOR regulations, AML/CTF obligations, and lawful orders from competent authorities.
• Legitimate interests: Processing carried out for fraud prevention, platform security, responsible gaming monitoring, and service improvement, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit, informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6. Sharing Your Data

ggtaya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your data with the following categories of recipients only to the extent necessary for the purposes described in this policy:

6.1 Payment Service Providers

We share financial data with GCash, PayMaya, BPI, BDO, and Metrobank solely to process your deposit and withdrawal transactions. These providers are bound by their own privacy policies and applicable Philippine financial regulations.

6.2 KYC & Identity Verification Providers

We engage accredited third-party KYC service providers to assist with identity verification and age confirmation. These providers process your identification documents under strict data processing agreements and are prohibited from using your data for any other purpose.

6.3 Regulatory Authorities

ggtaya is required by law to disclose certain player data to PAGCOR, the Anti-Money Laundering Council (AMLC), and other competent Philippine government authorities upon lawful request or as required by applicable regulations.

6.4 Technology & Infrastructure Partners

We work with cloud hosting, cybersecurity, and platform infrastructure providers who may process technical data on our behalf. All such providers are bound by data processing agreements that restrict their use of your data to the provision of services to ggtaya.

6.5 Game Content Providers

Certain game providers, including live casino and slot content suppliers, may receive limited technical session data necessary to deliver their games on the ggtaya platform. No financial or identity data is shared with game providers beyond what is technically required.

7. Data Retention

ggtaya retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following minimum retention periods:

• Account and identity data: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML regulations.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act of the Philippines.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session.
• Customer support records: Retained for two (2) years from the date of the last interaction.
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter for compliance documentation purposes.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised in accordance with our internal data disposal procedures.

8. Cookies & Tracking Technologies

ggtaya uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The types of cookies we use include:

• Essential cookies: Required for the platform to function correctly, including session management, login state, and security tokens. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your language preferences, display settings, and responsible gaming configurations between sessions.
• Analytics cookies: Used to collect aggregated, anonymised data about how players navigate and use the ggtaya platform, helping us identify areas for improvement.
• Marketing cookies: Used to deliver relevant promotional content and measure the effectiveness of our campaigns, subject to your prior consent.

You may manage your cookie preferences through your browser settings at any time. Please note that disabling essential cookies may impair your ability to log in or use certain features of the ggtaya platform.

9. Data Security

ggtaya implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. Our security measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and ggtaya's servers.
• OTP-based two-factor authentication for account login and high-value transactions, delivered to your registered Philippine mobile number.
• Encrypted storage of sensitive personal and financial data at rest, using AES-256 encryption standards.
• Access controls that restrict employee access to personal data on a strict need-to-know basis, with all access logged and audited.
• Regular security assessments and penetration testing conducted by independent cybersecurity professionals.
• Incident response procedures that ensure prompt notification to affected players and relevant authorities in the event of a data breach, in accordance with the Data Privacy Act of 2012.

While ggtaya takes all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your own login credentials and for notifying us immediately if you suspect any unauthorised access to your account.

10. Your Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173) of the Philippines, you have the following rights in respect of your personal data held by ggtaya:

• Right to be informed: The right to know what personal data ggtaya collects about you and how it is used – which is the purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data ggtaya holds about you.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data in your account.
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations under PAGCOR regulations and Philippine AML law.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability : The right to receive a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Privacy Officer using the details in Section 13. ggtaya will respond to all verified data subject requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. We may require you to verify your identity before processing any request.

11. Children's Privacy

ggtaya is strictly an adult gaming platform. Access to and use of the platform is prohibited for any person under the age of 21 years, in accordance with Philippine law and PAGCOR regulations governing casino-style gaming.

We do not knowingly collect personal data from individuals under the age of 21. If ggtaya becomes aware that personal data has been collected from a person who does not meet the minimum age requirement, that account will be immediately suspended, all associated data will be reviewed in accordance with our regulatory obligations, and any funds held in the account will be handled in compliance with applicable PAGCOR guidelines.

If you are a parent or guardian and believe that a minor has registered on ggtaya, please contact our support team immediately via live chat or at the email address provided in Section 13.

12. Changes to This Policy

ggtaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable Philippine law, PAGCOR regulatory requirements, or the services we offer. The date of the most recent revision will always be displayed at the top of this page.

Where changes are material, ggtaya will notify registered players via the mobile number or email address on file, or by prominent notice on the platform, at least seven (7) days before the changes take effect. Your continued use of ggtaya following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this page periodically to stay informed about how ggtaya protects your personal data.

13. Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ggtaya, please reach out to our Data Privacy Officer through the following channels:

• Live Chat: Available 24/7 directly on the ggtaya platform – the fastest way to reach us
• Email: [email protected]
• Support Hours (PHT): 12:00 AM – 11:59 PM daily

For complaints that remain unresolved after contacting ggtaya, you may escalate your concern to the National Privacy Commission (NPC) of the Philippines, the regulatory body responsible for enforcing the Data Privacy Act of 2012.