gtaya Privacy Policy
Your Data, Protected

This Privacy Policy ("Policy") describes how gtaya ("gtaya," "we," "us," or "our") collects, uses, stores, shares, and protects the personal information of players and visitors ("you" or "your") who access or use the gtaya online gaming platform at gtaya.xyz (the "Platform").

gtaya is committed to protecting your privacy and handling your personal data in a transparent, lawful, and responsible manner. This Policy is drafted in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC).

This Policy applies to all personal information collected through the gtaya Platform, including information collected via our website, mobile-optimized interface, live chat support, email communications, and any other channel through which you interact with gtaya.

If you have any questions about this Policy or how gtaya handles your personal data, please contact our Data Protection Officer using the details provided in Section 13 of this Policy.

gtaya collects personal information that is necessary to provide you with a safe, compliant, and fully functional gaming experience. The categories of personal data we collect include:

gtaya does not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected data from a person under 21, we will take immediate steps to delete that information and close the associated account.

gtaya uses the personal information we collect for the following specific purposes:

• Account Management: To create, maintain, and manage your gtaya player account, including processing your registration, verifying your identity, and enabling you to log in securely.
• KYC and Age Verification: To verify that you meet the minimum age requirement of 21 years and to comply with our Know Your Customer obligations under applicable Philippine regulations.
• Payment Processing: To process deposits and withdrawals via your chosen payment method (GCash, PayMaya, BPI, BDO, Metrobank, or other accepted methods), and to maintain accurate financial records.
• Game Provision: To provide you with access to gtaya's full range of games, including slots, live casino, sports betting (NBA, PBA, UFC, boxing), Aviator, Bingo, and Golf betting markets.
• Customer Support: To respond to your queries, complaints, and support requests via live chat, email, or other communication channels.
• Responsible Gaming: To monitor your gaming activity for signs of problem gambling, to enforce deposit limits and self-exclusion requests, and to provide responsible gaming tools and resources.
• Fraud Prevention and Security: To detect, investigate, and prevent fraudulent activity, money laundering, unauthorized account access, and other illegal or prohibited conduct on the Platform.
• Regulatory Compliance: To comply with our legal obligations under Philippine law, including reporting requirements to relevant regulatory authorities.
• Platform Improvement: To analyze how players use the gtaya Platform, identify technical issues, and improve the overall user experience.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in to receive such communications. You may opt out at any time.

Under the Philippine Data Privacy Act of 2012, gtaya processes your personal information on the following legal bases:

• Contractual Necessity: Processing is necessary to perform the contract between you and gtaya — specifically, to provide you with access to the Platform, process your transactions, and manage your account in accordance with our Terms and Conditions.
• Legal Obligation: Processing is necessary for gtaya to comply with its legal obligations under Philippine law, including anti-money laundering (AML) regulations, KYC requirements, and reporting obligations to regulatory authorities.
• Legitimate Interests: Processing is necessary for gtaya's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and improving the quality of our services — provided that these interests are not overridden by your rights and interests.
• Consent: For certain processing activities — such as sending you marketing communications or using non-essential cookies — gtaya relies on your freely given, specific, and informed consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Where gtaya processes sensitive personal information (such as government-issued ID documents), we do so on the basis of your explicit consent and/or as required by applicable law.

gtaya does not sell your personal information. We may share your data with the following categories of third parties, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Service Providers: We share financial data with payment processors (including GCash, PayMaya, BPI, BDO, and Metrobank) to facilitate deposits and withdrawals. These providers are bound by their own privacy policies and applicable financial regulations.
• Identity Verification Providers: We may use third-party KYC and identity verification services to assist with age verification and document authentication. These providers process your data solely for verification purposes under strict contractual obligations.
• Game Software Providers: Some games on the gtaya Platform are provided by third-party game developers. These providers may receive limited technical data (such as session identifiers) necessary to deliver the game experience. They do not receive your full personal profile.
• Regulatory Authorities: gtaya may be required to disclose your personal information to the Philippine Amusement and Gaming Corporation (PAGCOR), the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent authorities as required by law.
• Law Enforcement: gtaya may disclose personal information to law enforcement agencies where required by a valid legal order, court order, or where we reasonably believe disclosure is necessary to prevent or investigate illegal activity.
• Professional Advisors: We may share data with our legal, financial, and compliance advisors where necessary for the conduct of our business, subject to professional confidentiality obligations.

gtaya uses cookies and similar tracking technologies to enhance your experience on the Platform. A cookie is a small text file placed on your device when you visit a website. We use the following types of cookies:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as keeping you logged in during your session, maintaining your account security, and processing transactions. These cookies cannot be disabled without affecting Platform functionality.
• Performance and Analytics Cookies: These cookies collect anonymized information about how visitors use the gtaya Platform — such as which pages are visited most frequently and whether users encounter error messages. This data helps us improve the Platform's performance and user experience.
• Functional Cookies: These cookies remember your preferences and settings — such as your preferred language and responsible gaming limits — so you do not have to re-enter them each time you visit.
• Marketing Cookies: With your consent, we may use cookies to deliver relevant promotional content and offers based on your gaming activity and preferences on the gtaya Platform. You may opt out of marketing cookies at any time.

gtaya does not use cookies to collect sensitive personal information or to track your activity on third-party websites outside of the gtaya Platform.

gtaya retains your personal information for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.

The following general retention periods apply:

• Account Data: Retained for the duration of your active account and for a minimum of five (5) years following account closure, in accordance with Philippine AML regulations and gaming regulatory requirements.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years from the date of the transaction, as required by applicable Philippine financial regulations.
• KYC Documents: Identity verification documents are retained for a minimum of five (5) years following account closure or the completion of the relevant transaction, whichever is later.
• Communications Data: Support communications and live chat transcripts are retained for up to two (2) years from the date of the communication, unless a longer retention period is required for the resolution of a dispute or legal proceeding.
• Technical and Log Data: Server logs and technical data are retained for up to twelve (12) months, unless required for longer periods for security investigation purposes.

When personal data is no longer required for the purposes for which it was collected and no legal obligation requires its continued retention, gtaya will securely delete or anonymize the data in accordance with our internal data disposal procedures.

gtaya implements a comprehensive set of technical and organizational security measures to protect your personal information against unauthorized access, accidental loss, destruction, alteration, or disclosure. Our security measures include:

• Encryption: All data transmitted between your device and the gtaya Platform is encrypted using SSL/TLS protocols. Sensitive data stored on our servers is encrypted at rest using industry-standard encryption algorithms.
• Access Controls: Access to personal data is restricted to gtaya personnel and authorized third parties who have a legitimate need to access it for the purposes described in this Policy. All staff with access to personal data are subject to confidentiality obligations.
• Two-Factor Authentication: gtaya offers two-factor authentication (2FA) for player accounts to provide an additional layer of security against unauthorized access.
• Regular Security Audits: gtaya conducts regular security assessments and penetration testing to identify and address potential vulnerabilities in our systems.
• Incident Response: gtaya maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the National Privacy Commission and affected players in accordance with the requirements of the Data Privacy Act of 2012.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal information held by gtaya:

If you are not satisfied with gtaya's response to your data privacy request, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

The gtaya Platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. gtaya does not knowingly collect, use, or store personal information from any person under the age of 21.

If you are a parent or guardian and believe that your child has provided personal information to gtaya, please contact us immediately at [email protected] so that we can take prompt action to delete the information and close the account.

gtaya primarily stores and processes your personal data within the Philippines. However, in certain circumstances — such as when using third-party game software providers or cloud infrastructure services — your personal data may be transferred to and processed in countries outside the Philippines.

Where such international transfers occur, gtaya ensures that appropriate safeguards are in place to protect your personal information, including:

• Transferring data only to countries or organizations that provide an adequate level of data protection as recognized under Philippine law;
• Entering into data processing agreements with international service providers that incorporate standard contractual clauses approved by the National Privacy Commission; and
• Implementing additional technical and organizational measures where necessary to ensure the security of transferred data.

By using the gtaya Platform, you acknowledge and consent to the transfer of your personal data to other countries where necessary for the provision of our services, subject to the safeguards described above.

gtaya reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable laws, or the features and services offered on the Platform. When we make material changes to this Policy, we will:

• Post the updated Policy on this page with a revised "Last Updated" date;
• Display a prominent notice on the gtaya Platform informing players of the update; and
• Where required by law or where changes are significant, notify registered players via email.

Your continued use of the gtaya Platform after the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how gtaya protects your personal information.

If you have any questions, concerns, or requests regarding this Privacy Policy or the way gtaya handles your personal information, please contact our Data Protection Officer (DPO):

For complaints that remain unresolved after contacting gtaya's DPO, you may escalate your concern to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.