Data Protection
ggtaya Privacy Policy
ggtaya is committed to protecting the personal data of every Filipino player who registers and plays on our platform. This Privacy Policy explains exactly what information we collect, why we collect it, how it is used, and the rights you have over your own data under applicable Philippine law.
Privacy at a Glance
What This Policy Covers — Summarized
These cards give you the short version. The full legal text follows in the sections below and governs in all cases.
What We Collect
Registration details, identity documents, transaction records, device and usage data, and communications — collected only to the extent necessary to operate your ggtaya account securely and legally.
How We Use It
To operate your account, verify your identity, process payments, comply with Philippine regulatory requirements, provide customer support, and send communications you have opted into.
When We Share It
Only with payment processors, identity verification providers, and regulatory authorities where legally required. ggtaya does not sell your personal data to any third party for marketing purposes.
Your Rights
Under the Philippine Data Privacy Act, you have the right to access, correct, object to, and request deletion of your personal data held by ggtaya, subject to applicable legal retention requirements.
Introduction
This Privacy Policy ("Policy") is issued by ggtaya ("we," "us," or "our"), the operator of the online gaming platform accessible at ggtaya.cam. This Policy applies to all personal data collected, processed, stored, and transmitted by ggtaya in connection with your registration, use of the platform, gaming activities, payment transactions, and any communications you have with us.
ggtaya is committed to handling personal data responsibly, transparently, and in accordance with applicable Philippine data protection law, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules and regulations issued by the National Privacy Commission (NPC). Where applicable, ggtaya also observes relevant international data protection standards to the extent they apply to cross-border data operations.
By registering an account on ggtaya, accessing the platform, or otherwise submitting personal information to us, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree, you should not access or use ggtaya.
This Policy may be updated periodically. The "Effective Date" shown above reflects the date of the most recent revision. Your continued use of ggtaya after a Policy update constitutes acceptance of the revised terms.
Data Controller
For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection law, ggtaya acts as the personal information controller with respect to personal data collected through ggtaya.cam. This means ggtaya determines the purposes for which, and the manner in which, your personal data is processed.
Where ggtaya engages third-party service providers to process personal data on its behalf — such as payment processors and identity verification providers — those parties act as personal information processors subject to binding contractual data processing obligations.
For data protection inquiries and the exercise of data subject rights, you may contact ggtaya's designated Data Protection Officer at: [email protected] (plain text — not a clickable email link).
Personal Data We Collect
ggtaya collects the following categories of personal data, to the extent necessary for the purposes described in this Policy:
| Data Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full legal name, date of birth, nationality, government ID type and number | Account registration; KYC/AML compliance; age verification |
| Contact Data | Philippine mobile number, email address, home address | Account communications; 2FA; support; withdrawal verification |
| Financial Data | GCash number, PayMaya number, BPI/BDO account reference, transaction amounts | Deposits and withdrawals; fraud prevention; AML compliance |
| Technical Data | IP address, device type, browser, operating system, session timestamps | Security monitoring; fraud detection; platform optimization |
| Usage Data | Games played, bet history, session duration, feature interactions | Account management; responsible gaming; platform improvement |
| Communications Data | Live chat transcripts, email correspondence, support ticket content | Customer support; dispute resolution; training; legal compliance |
| KYC Documents | Scanned copies of government-issued Philippine IDs; proof of address | Identity verification; AML/CTF compliance; regulatory requirements |
ggtaya does not collect sensitive personal information (as defined under the Data Privacy Act) unless strictly required for KYC compliance purposes, in which case collection is kept to the minimum necessary and handled with enhanced security measures.
How We Collect Personal Data
ggtaya collects personal data through the following methods:
4.1 Direct Collection
You provide personal data directly when you: register a ggtaya account; complete KYC verification by submitting identity documents; make a deposit or request a withdrawal; contact customer support; or participate in a promotion or survey.
4.2 Automated Collection
When you access ggtaya.cam, we automatically collect certain technical data through cookies, log files, and similar technologies. This includes your IP address, browser type, device identifiers, pages visited, and session data. This collection is passive and occurs as a standard function of web platform operation. See Section 10 (Cookies & Tracking) for more detail.
4.3 Third-Party Sources
We may receive personal data about you from third parties in limited circumstances, including: payment service providers (GCash, PayMaya, BPI, BDO) confirming transaction details; identity verification services confirming the authenticity of documents you submit; and fraud prevention services providing risk signals.
Legal Basis for Processing
ggtaya processes your personal data on the following legal bases under the Data Privacy Act of 2012:
- Contractual necessity: Processing required to fulfill the service agreement between you and ggtaya — operating your account, processing deposits and withdrawals, and providing gaming services;
- Legal obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering (AML) and counter-terrorism financing (CTF) obligations, PAGCOR regulatory requirements, and tax reporting obligations;
- Consent: Where you have provided informed, specific, and freely given consent — such as subscribing to promotional communications — processing is based on that consent, which you may withdraw at any time;
- Legitimate interests: Processing necessary for ggtaya's legitimate business interests that do not override your fundamental rights — including fraud prevention, platform security, and service improvement.
How We Use Your Personal Data
ggtaya uses the personal data we collect for the following specific purposes:
- To create, verify, manage, and close your ggtaya account;
- To verify your identity and age (21+) in compliance with applicable Philippine gaming regulations;
- To process deposits and withdrawals through GCash, PayMaya, BPI, BDO, and other approved payment channels;
- To detect, prevent, and investigate fraud, money laundering, and other prohibited conduct;
- To comply with reporting obligations to PAGCOR and other Philippine regulatory authorities;
- To provide customer support and resolve account-related inquiries and disputes;
- To send you transactional communications relating to your account, including deposit confirmations, withdrawal notifications, and security alerts;
- To send promotional communications, including bonus offers and platform updates, where you have consented to receive them;
- To administer responsible gaming tools and respond to self-exclusion and deposit limit requests;
- To analyze usage patterns and improve the ggtaya platform's features and user experience;
- To enforce ggtaya's Terms & Conditions and other applicable policies.
Marketing Communications: ggtaya will only send promotional emails or SMS messages if you have explicitly opted in to receive them during registration or through your account settings. You may opt out of marketing communications at any time by updating your notification preferences in your account settings or by contacting support.
Data Sharing & Disclosure
ggtaya does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. We may share personal data only in the following limited circumstances:
7.1 Service Providers
We share personal data with carefully selected third-party service providers who process data on our behalf under binding contractual data processing agreements, including: payment processors (GCash, PayMaya, BPI, BDO, Metrobank, Visa); KYC/identity verification platforms; IT infrastructure and cloud hosting providers; and customer support tooling providers.
7.2 Regulatory & Legal Disclosure
We may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, law enforcement agencies, and courts where we are legally required or compelled to do so by applicable Philippine law, court order, or valid legal process.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or substantially all of ggtaya's business assets, personal data held by ggtaya may be transferred to a successor entity, subject to that entity's commitment to privacy protections no less protective than those in this Policy.
7.4 Consent-Based Sharing
In all other circumstances, ggtaya will only share personal data with your express prior consent.
Data Retention
ggtaya retains personal data for as long as necessary to fulfill the purposes for which it was collected, and in any case for the minimum periods required by applicable Philippine law:
| Data Type | Retention Period | Basis |
|---|---|---|
| Account Registration Data | Duration of account + 5 years after closure | AML regulatory requirements; dispute resolution |
| KYC / Identity Documents | Duration of account + 5 years after closure | AMLC and PAGCOR regulatory requirements |
| Financial Transaction Records | 5 years from transaction date | AML/CTF legal obligations; tax compliance |
| Bet and Gaming History | 3 years from activity date | Dispute resolution; responsible gaming monitoring |
| Customer Support Communications | 2 years from last interaction | Dispute resolution; training; legal compliance |
| Technical / Log Data | 12 months from collection | Security monitoring; fraud investigation |
| Marketing Consent Records | Duration of consent + 2 years | Compliance with consent-based processing requirements |
Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in a manner that prevents re-identification.
Data Security
ggtaya implements appropriate technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. Measures in place include:
- 256-bit SSL/TLS encryption for all data transmitted between your device and ggtaya's servers;
- Encryption of sensitive data at rest, including identity document storage;
- Role-based access controls ensuring that personal data is accessible only to staff with a legitimate operational need;
- Two-factor authentication (SMS OTP) for account access and high-value transactions;
- Regular security assessments and vulnerability monitoring of platform infrastructure;
- Staff training on data protection obligations and secure data handling practices.
While ggtaya takes data security seriously, no digital platform can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights and freedoms, ggtaya will notify affected players and the National Privacy Commission as required by applicable law.
Cookies & Tracking Technologies
ggtaya uses cookies and similar tracking technologies on ggtaya.cam to ensure the platform functions correctly, to secure your session, and to understand how players interact with the site. The following types of cookies are used:
- Strictly Necessary Cookies: Essential for the platform to function — including session management cookies that keep you logged in while you navigate. These cannot be disabled without breaking core functionality.
- Functional Cookies: Remember your preferences, such as language settings and notification preferences, to improve your experience.
- Analytics Cookies: Collect aggregated, anonymized data about how players use the platform to help ggtaya improve features and navigation. No individual player data is shared with analytics providers in identifiable form.
- Security Cookies: Help detect and prevent fraudulent account access, including bot activity and session hijacking.
You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to use the ggtaya platform. ggtaya does not use third-party advertising cookies or behavioral tracking for cross-site advertising purposes.
Your Rights as a Data Subject
Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by ggtaya. These rights may be exercised by contacting ggtaya's Data Protection Officer at [email protected]:
Right to Access
Request confirmation of whether ggtaya holds personal data about you and obtain a copy of that data in a commonly used format.
Right to Rectification
Request correction of inaccurate or incomplete personal data we hold about you. Many fields can be updated directly in your account settings.
Right to Erasure
Request deletion of your personal data where it is no longer needed, subject to legal retention obligations that may require us to retain certain data for defined periods.
Right to Object
Object to processing of your personal data based on legitimate interests, including profiling for marketing purposes. You may withdraw marketing consent at any time.
Right to Portability
Receive a copy of personal data you have provided to ggtaya in a structured, machine-readable format, where technically feasible and where processing is based on consent or contract.
Right to Lodge a Complaint
Lodge a complaint with the Philippine National Privacy Commission (NPC) if you believe ggtaya has failed to comply with its obligations under the Data Privacy Act of 2012.
ggtaya will respond to verified data subject requests within thirty (30) calendar days of receipt. We may request proof of identity before processing a request to ensure data is not disclosed to unauthorized parties.
Children & Minors
ggtaya does not knowingly collect personal data from individuals under the age of 21. The ggtaya platform is strictly restricted to adults aged 21 and above in accordance with applicable Philippine gaming regulations. Age verification is a mandatory component of the account registration and KYC process.
If ggtaya becomes aware that personal data has been collected from an individual under 21 years of age without proper parental or guardian consent, that data will be deleted promptly and the account closed. If you have reason to believe that a minor has registered an account, please contact ggtaya support immediately at [email protected].
Third-Party Links
The ggtaya platform may contain references or links to third-party services such as payment providers. When you navigate away from ggtaya.cam to a third-party platform — for example, to complete a GCash or PayMaya transaction — that platform's own privacy policy governs the handling of your personal data.
ggtaya is not responsible for the privacy practices or content of third-party platforms. We encourage you to review the privacy policies of any third-party service you use in connection with your ggtaya account.
Policy Updates
ggtaya reserves the right to revise this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or platform features. The "Effective Date" at the top of this page indicates when the current version was last updated.
Where changes are material, ggtaya will notify registered players through platform notification or via the contact details registered on their account, providing a reasonable period before the changes take effect where practicable. For non-material clarifications, the updated Policy will be published on this page without individual notification.
Continued use of ggtaya following any Policy update constitutes acceptance of the revised Privacy Policy. If you do not agree with any updated provision, you may close your account and request deletion of your personal data subject to applicable retention requirements.
Contact the Data Protection Officer
For any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by ggtaya, please contact our designated Data Protection Officer through the following channels:
- Email (plain text): [email protected] — mark your message "Attn: Data Protection Officer." Allow up to 5 business days for a written response.
- Live Chat: Available 24/7 through the ggtaya platform — the fastest channel for urgent data-related queries, including immediate self-exclusion or data deletion requests.
For formal data subject rights requests, ggtaya may require you to verify your identity before acting on the request. This is a security measure to ensure we do not inadvertently disclose or delete data in response to fraudulent requests.
For complaints that cannot be resolved through ggtaya's internal process, you may also contact the Philippine National Privacy Commission, which has jurisdiction over data protection complaints under the Data Privacy Act of 2012.
Your Data is Safe at ggtaya
Play with confidence knowing that ggtaya handles your personal information responsibly and in full compliance with Philippine data protection law.
Sign In to ggtaya