This Privacy Policy describes how phtt collects, uses, stores, and protects the personal information of players who register for and use services at phtt.win. phtt is committed to handling your personal data in a transparent, lawful, and secure manner consistent with applicable Philippine data protection laws.
All personal data transmitted between your device and phtt is protected by 256-bit SSL/TLS encryption. Sensitive data stored on phtt servers is encrypted at rest using industry-standard methods.
phtt does not sell, rent, or trade your personal data to any third-party marketers or data brokers. Data shared with third parties is limited to operational necessities — payment processors, KYC providers, and regulatory authorities.
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the right to access, correct, and object to the processing of your personal data. phtt honours these rights through a straightforward request process.
Identity documents submitted for KYC verification are handled by phtt's accredited identity verification provider. Documents are processed for identity confirmation only and stored securely for the legally required retention period.
phtt uses cookies and similar technologies to maintain your login session, remember preferences, and analyse platform usage. Non-essential analytics cookies are used only on an aggregated, anonymised basis.
phtt sends promotional communications only to players who have opted in. You can withdraw your marketing consent at any time from your account notification settings or by contacting phtt support.
Summary: phtt collects personal data necessary to operate a licensed online gaming platform — account registration, payment processing, identity verification, and fraud prevention. We do not sell your data. We retain it only as long as legally required. You have rights over your data under Philippine law and can exercise them by contacting us.
This Privacy Policy ("Policy") applies to phtt.win and all services operated under the phtt brand within the Philippines. It governs how phtt ("we", "us", "our") collects, uses, discloses, and protects personal information provided by or collected from players ("you", "your") who access or register on the Platform.
This Policy is issued pursuant to the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable National Privacy Commission (NPC) issuances. By registering an account on phtt, you acknowledge that you have read and understood this Policy.
This Policy should be read together with the phtt Terms & Conditions, which govern your use of the Platform generally.
phtt collects personal data in the following categories:
When you create a phtt account, we collect your full legal name, date of birth, email address, mobile number, and chosen username and password. This information is necessary to create and maintain your account.
To comply with Philippine gaming regulations and anti-money laundering requirements, phtt requires identity verification before processing withdrawals. KYC data includes a copy of a valid Philippine government-issued photo ID (UMID, PhilSys, driver's license, or passport), a selfie or liveness check, and in some cases proof of address or source of funds documentation.
phtt records deposit and withdrawal transactions, payment method details (GCash mobile number, PayMaya account reference, bank account details), and transaction history. phtt does not store full bank card numbers or GCash PINs — payment processing is handled by PCI-compliant payment service providers.
We record your betting history, game sessions, wagering patterns, game preferences, and account balance history. This data is used for account management, regulatory reporting, responsible gaming monitoring, and fraud detection.
When you access phtt, we automatically collect device identifiers, IP address, browser type and version, operating system, session timestamps, and referral source. This data is used for security, fraud prevention, and platform optimisation.
We retain records of communications between you and phtt support, including Live Chat transcripts, email correspondence, and Viber/Messenger messages, for quality assurance, dispute resolution, and regulatory compliance purposes.
| Data Category | Primary Purpose | Retention Period |
|---|---|---|
| Registration data | Account creation & management | Duration of account + 5 years |
| KYC documents | Identity verification, AML compliance | 5 years from account closure |
| Financial records | Payment processing, AML reporting | 7 years (regulatory minimum) |
| Gaming activity | Account management, responsible gaming | Duration of account + 5 years |
| Device & technical data | Security, fraud prevention | 12 months rolling |
| Communications data | Support, dispute resolution | 3 years from interaction |
phtt uses your personal data for the following purposes:
Under the Philippine Data Privacy Act, phtt processes your personal data on the following legal bases:
phtt does not sell your personal data. We share personal data only in the following limited circumstances:
phtt engages third-party service providers to support Platform operations, including payment processors (GCash, PayMaya, bank partners), KYC and identity verification providers, fraud detection services, and cloud hosting providers. These providers are contractually bound to process data only as instructed by phtt and to maintain appropriate security standards.
phtt may disclose personal data to Philippine gaming regulators, law enforcement agencies, the Anti-Money Laundering Council (AMLC), tax authorities, or courts when required by applicable law or a valid legal order. phtt will notify you of such disclosures where legally permitted to do so.
In the event of a merger, acquisition, or sale of phtt's business or assets, your personal data may be transferred to the successor entity, subject to the same privacy protections described in this Policy. You will be notified of any such transfer.
phtt may share aggregated, anonymised data (from which individual players cannot be identified) with industry partners and analytics providers for market research and platform improvement purposes.
KYC verification is a regulatory requirement for phtt to process player withdrawals and comply with anti-money laundering obligations under Philippine law. The KYC process requires you to submit valid photographic identification issued by the Philippine government.
KYC documents are processed by phtt's accredited identity verification partner using secure, encrypted submission channels. Document images are retained only for the legally mandated period and are not accessible to phtt staff except where necessary for account review or regulatory compliance. phtt does not use KYC documents for any purpose other than identity and age verification and AML compliance.
Acceptable Philippine IDs: UMID, PhilSys National ID, Driver's License (LTO), Passport, PRC ID, SSS/GSIS ID, Voter's ID. Barangay certificates and school IDs are not accepted as primary KYC documents.
phtt uses cookies and similar tracking technologies on phtt.win. Cookies are small data files stored on your device that help the Platform function correctly and improve your experience.
These cookies are required for the Platform to function and cannot be disabled. They include session authentication cookies that keep you logged in, security cookies that prevent cross-site request forgery, and preference cookies that remember your display settings.
phtt uses anonymised analytics to understand how players navigate the Platform — which pages are visited most frequently, where players encounter difficulties, and how the mobile experience can be improved. Analytics data is processed in aggregate and cannot identify individual players.
You can configure your browser to block or delete cookies. Note that disabling essential cookies will prevent you from logging in to phtt or maintaining an authenticated session. Browser instructions for managing cookies vary — refer to your browser's help documentation for guidance.
phtt retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal retention requirements. Key retention periods are summarised in the table in Section 2 above. Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with phtt's data lifecycle policy.
If you close your phtt Account, your personal data will be retained for the legally required period to satisfy regulatory, audit, and dispute resolution obligations before deletion is scheduled.
phtt implements technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, phtt will notify the National Privacy Commission within the timeframe required by law and notify affected players without undue delay.
Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by phtt:
To exercise any of these rights, contact phtt via Live Chat or email at [email protected]. phtt will respond to data rights requests within 30 days of receipt.
phtt services are strictly restricted to persons aged 21 years and above. phtt does not knowingly collect personal data from persons under 21. If phtt becomes aware that personal data has been collected from an under-age individual, the account will be suspended immediately and the data will be deleted after any required regulatory reporting. If you believe an under-age person has registered on phtt, please contact phtt support immediately.
phtt's primary data processing operations are based within the Philippines. Where phtt engages service providers whose infrastructure is located outside the Philippines (such as global cloud hosting providers or international KYC verification services), phtt ensures that appropriate data transfer safeguards are in place, including contractual clauses consistent with National Privacy Commission guidance. phtt does not transfer your personal data to jurisdictions that do not provide adequate data protection standards without appropriate contractual safeguards.
phtt sends promotional emails, SMS, and in-platform notifications to players who have opted in to marketing communications during or after registration. Marketing messages may include information about bonuses, new games, promotions, and platform features. You may withdraw your consent to marketing communications at any time by:
Withdrawal of marketing consent does not affect service communications such as transaction confirmations, security alerts, and account notifications, which are necessary for the operation of your account.
phtt may update this Privacy Policy from time to time to reflect changes in our data practices, Platform features, or applicable law. When material changes are made, we will notify registered players via in-platform notification or email prior to the changes taking effect. The updated Policy will be posted on this page with a revised "Last Updated" date. Your continued use of phtt following notification constitutes your acknowledgement of the revised Policy.
If you have questions about this Privacy Policy, wish to exercise your data rights, or want to report a privacy concern, please contact phtt through the following channels:
For formal data rights requests under the Philippine Data Privacy Act, please include your full name, account email, and a clear description of your request. phtt targets a response within 15 business days for data access and rectification requests, and within 30 days for erasure requests.
To submit a complaint directly to the Philippine National Privacy Commission, visit the NPC's official channels. phtt cooperates fully with NPC investigations.
phtt is built on transparency, security, and genuine respect for Filipino players. Sign in to your account or explore the platform — your information is protected every step of the way.
21+ only · PAGCOR-aligned · 256-bit SSL · Philippine Data Privacy Act compliant