hptaya Privacy
Policy

1 Introduction

hptaya ("hptaya," "we," "us," "our") is committed to protecting the privacy and personal data of all players and visitors who use the hptaya Platform — including the website, Progressive Web App (PWA), and all associated services. This Privacy Policy ("Policy") explains our practices regarding the collection, use, storage, disclosure, and protection of your personal data.

This Policy applies to all registered players, prospective players, and visitors to the hptaya Platform, regardless of whether they are located in Metro Manila, Cebu, Davao, Quezon City, Makati, or anywhere else in the Philippines. By accessing or using the hptaya Platform, you acknowledge that you have read and understood this Policy and consent to the data practices described herein.

This Policy should be read together with the hptaya Terms & Conditions and Responsible Gaming Policy.

2 Data Controller

hptaya is the data controller responsible for the personal data collected through the hptaya Platform. As data controller, hptaya determines the purposes and means of processing your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations.

For all data privacy inquiries, requests, or complaints, you may contact our Data Protection Officer at: [email protected]

3 Data We Collect

3.1 Registration Data

When you create an hptaya account, we collect: full name, date of birth, email address, mobile number, residential address, and preferred currency (PHP).

3.2 Identity Verification (KYC) Data

To comply with PAGCOR regulations and anti-money laundering requirements, we may collect copies of government-issued identification documents such as your PhilSys National ID, passport, driver's license, UMID, SSS ID, or PRC ID, as well as proof of address documents.

3.3 Financial Data

We collect payment-related information necessary to process deposits and withdrawals, including GCash account details, PayMaya account details, and bank account information (BPI, BDO, Metrobank). We do not store full card numbers or full bank account credentials on our servers.

3.4 Gaming Activity Data

We collect records of your gaming activity on the hptaya Platform, including game history, wager amounts, win/loss records, session durations, and responsible gaming tool usage.

3.5 Technical Data

We automatically collect certain technical data when you access the hptaya Platform, including IP address, device type and operating system, browser type and version, referring URLs, and pages visited.

3.6 Communications Data

We retain records of communications between you and the hptaya support team, including live chat transcripts and email correspondence.

4 How We Collect Data

hptaya collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact support, or participate in promotions.
• Automatically — through cookies, web beacons, and similar tracking technologies when you browse the hptaya Platform.
• From third parties — from payment processors (e.g., GCash, PayMaya, BPI, BDO, Metrobank) and identity verification service providers, to the extent necessary to process transactions and verify your identity.

5 How We Use Your Data

hptaya uses your personal data for the following purposes:

• To create and manage your hptaya account and verify your identity.
• To process deposits, withdrawals, and other financial transactions in Philippine Peso (PHP).
• To comply with PAGCOR regulatory requirements, anti-money laundering (AML) obligations, and other applicable Philippine laws.
• To provide customer support and respond to your inquiries.
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts).
• To send you promotional communications about hptaya bonuses and offers, where you have consented to receive such communications.
• To monitor gaming activity for responsible gaming purposes and to enforce our Responsible Gaming Policy.
• To detect, investigate, and prevent fraud, cheating, and other prohibited conduct on the hptaya Platform.
• To improve the hptaya Platform through analytics and user experience research.
• To enforce our Terms & Conditions.

6 Legal Basis for Processing

hptaya processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:

• Contractual necessity — processing required to perform our contract with you (i.e., to operate your hptaya account and provide gaming services).
• Legal obligation — processing required to comply with PAGCOR regulations, AML laws, and other applicable Philippine legal requirements.
• Legitimate interests — processing for fraud prevention, platform security, and service improvement, where such interests are not overridden by your data protection rights.
• Consent — processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time.

7 Data Sharing & Disclosure

hptaya does not sell your personal data. We may share your data with the following categories of recipients only to the extent necessary:

• Payment processors — GCash, PayMaya, BPI, BDO, and Metrobank, to process your financial transactions.
• Game providers — third-party game studios whose games are available on the hptaya Platform, to the extent required for game operation and fairness auditing.
• Identity verification providers — KYC and AML compliance service providers.
• Regulatory authorities — PAGCOR and other Philippine government agencies, where required by law or regulation.
• Law enforcement — where required by a valid court order or applicable law.
• Professional advisors — lawyers, auditors, and accountants, subject to confidentiality obligations.

8 Data Retention

hptaya retains your personal data for as long as your account is active and for a period thereafter as required by applicable law and regulation. In particular:

• Account and KYC data is retained for a minimum of five (5) years following account closure, as required by Philippine AML regulations.
• Financial transaction records are retained for a minimum of five (5) years.
• Gaming activity records are retained for a minimum of three (3) years.
• Support communications are retained for two (2) years.

After the applicable retention period, your personal data will be securely deleted or anonymized.

9 Data Security

hptaya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the hptaya Platform.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• Regular security audits and penetration testing of the hptaya Platform.
• Multi-factor authentication options for player accounts.

10 Cookies & Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit the hptaya Platform. They help us recognize your device, remember your preferences, and improve your overall experience.

10.2 Types of Cookies We Use

• Essential cookies — required for the hptaya Platform to function correctly (e.g., session management, login state). These cannot be disabled.
• Analytics cookies — help us understand how players use the hptaya Platform so we can improve it. Data collected is aggregated and anonymized.
• Preference cookies — remember your settings and preferences (e.g., language, display options).
• Marketing cookies — used to deliver relevant promotional content about hptaya. These are only set with your consent.

10.3 Managing Cookies

You can control non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the hptaya Platform.

11 Your Data Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by hptaya:

• Right to be informed — the right to know what personal data hptaya collects and how it is used.
• Right of access — the right to request a copy of the personal data hptaya holds about you.
• Right to rectification — the right to request correction of inaccurate or incomplete personal data.
• Right to erasure — the right to request deletion of your personal data, subject to legal retention obligations.
• Right to object — the right to object to certain types of processing, including direct marketing.
• Right to data portability — the right to receive your personal data in a structured, commonly used format.
• Right to lodge a complaint — the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all valid requests within thirty (30) days.

12 Minors

The hptaya Platform is strictly intended for persons aged 21 years and above, in accordance with Philippine gaming regulations. hptaya does not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a minor, we will take immediate steps to delete that data and close the associated account.

If you believe that a minor has registered on the hptaya Platform, please contact us immediately at [email protected].

13 Changes to This Policy

hptaya reserves the right to update this Privacy Policy at any time. Material changes will be communicated to registered players via email or through a prominent notice on the hptaya Platform. The "Last Updated" date at the top of this Policy will reflect the date of the most recent revision. Your continued use of the hptaya Platform following any update constitutes your acceptance of the revised Policy.

14 Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact the hptaya Data Protection Officer:

• Email: [email protected]
• Support Hours: 24/7, including weekends and Philippine public holidays
• Live Chat: Available directly on the hptaya Platform