Privacy Policy – How youtaya Handles Your Data

1. Introduction

This Privacy Policy ("Policy") describes how youtaya ("youtaya", "we", "our", or "us"), the operator of the online gaming platform accessible at https://youtaya.vip, collects, uses, stores, and discloses personal information relating to individuals ("you", "User", or "Member") who access or use the youtaya Service.

youtaya respects your privacy and is committed to protecting your personal data in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as administered by the National Privacy Commission (NPC). By using the youtaya platform, you acknowledge that you have read and understood this Policy.

2. Personal Data We Collect

youtaya collects personal information necessary to deliver the Service, fulfil legal obligations, and maintain a secure gaming environment. The categories of data we collect include:

2.1 Registration and Identity Data

• Full name as it appears on your government-issued ID;
• Date of birth (for age verification — must be 21 years or older);
• Email address and Philippine mobile number;
• Home address or billing address;
• Government-issued ID details (e.g., PhilSys National ID, driver's licence, or passport) submitted during KYC verification.

2.2 Financial Data

• GCash account number or Maya wallet details linked to deposit and withdrawal transactions;
• Bank account details (BPI, BDO, UnionBank) provided for withdrawal processing;
• Transaction history including deposit amounts, withdrawal requests, and gaming activity records.

youtaya does not store full bank card numbers or full banking credentials on its servers. Financial data is handled directly by the respective payment processor's secure systems.

2.3 Technical and Usage Data

• IP address and approximate geographic location at the time of login;
• Device type, operating system, and browser information;
• Pages visited, session duration, and navigation paths within the platform;
• Game session logs including game type, stakes, and outcomes;
• Login timestamps and authentication events.

2.4 Communications Data

• Contents of support messages, complaints, or feedback submitted through the support system;
• Responses to surveys or promotions where you voluntarily participate.

3. How We Use Your Personal Data

youtaya uses the personal data collected for the following purposes:

• Account creation and management: To register your account, verify your identity, and maintain your member profile;
• Age and identity verification: To confirm that you are 21 years of age or older, as required by applicable Philippine gaming regulations;
• Payment processing: To process deposits and withdrawals through GCash, Maya, and supported Philippine banks;
• Service delivery: To provide access to games, manage your PHP wallet balance, and apply bonuses;
• Customer support: To respond to your queries, resolve disputes, and manage complaints;
• Legal and regulatory compliance: To fulfil reporting obligations to PAGCOR and other relevant Philippine regulatory authorities, and to comply with anti-money laundering (AML) requirements;
• Fraud and security monitoring: To detect, investigate, and prevent fraudulent activity, account takeover attempts, and prohibited conduct;
• Responsible gaming: To administer self-exclusion lists, deposit limit settings, and cooling-off periods at your request;
• Platform improvement: To analyse aggregate usage patterns and improve the youtaya platform, game offerings, and payment experience;
• Marketing communications: To send you promotional offers, bonuses, and platform updates, where you have provided consent. You may opt out at any time.

4. Legal Basis for Processing

youtaya processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012:

• Contractual necessity: Processing is necessary to perform our obligations under the Terms and Conditions to which you are a party;
• Legal obligation: Processing is required to comply with applicable Philippine laws, including AML regulations and PAGCOR regulatory requirements;
• Legitimate interests: Processing is necessary for fraud prevention, platform security, and responsible gaming enforcement;
• Consent: Where you have provided explicit consent — for example, opting in to promotional communications — we process your data on the basis of that consent, which may be withdrawn at any time.

5. Sharing Your Personal Data

youtaya does not sell your personal information. We may share your data with the following categories of recipients under strict confidentiality obligations:

• Payment processors: GCash (G-Xchange, Inc.), Maya (PayMaya Philippines), BPI, BDO, UnionBank, and other payment partners, solely for the purpose of processing your transactions;
• Identity verification providers: Third-party KYC and AML compliance services used to verify government-issued IDs and age;
• Game technology providers: Licensed game studios and live dealer platform operators who supply the games accessible through youtaya, where session data is shared to deliver the game and resolve disputes;
• Regulatory authorities: PAGCOR and other competent Philippine government bodies where disclosure is required by law, court order, or regulatory directive;
• Professional advisors: Legal counsel, auditors, and compliance advisors under attorney-client or professional confidentiality obligations.

All third parties who receive your data are required to process it in accordance with the Data Privacy Act of 2012 and applicable contractual data protection obligations.

6. Data Retention

youtaya retains personal data for as long as your account is active and for a period thereafter as required by Philippine law and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for a minimum of five (5) years following account closure, in accordance with AML record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years following the date of the transaction;
• Support communications: Retained for three (3) years following resolution of the matter;
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter for record-keeping purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in a manner that prevents reconstruction.

7. Security Measures

youtaya implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the youtaya servers;
• Encrypted storage of personal data and credentials at rest;
• Two-factor authentication (2FA) available for all member accounts;
• Role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security assessments and penetration testing of the platform infrastructure;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

While youtaya takes all reasonable precautions, no online platform can guarantee absolute security. You are encouraged to use a strong, unique password and enable 2FA on your account.

8. Cookies and Tracking Technologies

The youtaya platform uses cookies and similar tracking technologies to deliver and improve the Service. Categories of cookies used include:

• Strictly necessary cookies: Required for the platform to function, including maintaining your logged-in session and storing your wallet currency preference;
• Performance cookies: Collect anonymised data about how users navigate the platform to identify areas for improvement. No personally identifiable information is collected through performance cookies;
• Functional cookies: Remember your preferences such as preferred game category or notification settings to personalise your experience.

You may configure your browser to refuse cookies; however, doing so may impair the functionality of the youtaya platform, including your ability to log in and play games.

9. Your Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights regarding your personal data held by youtaya:

• Right to be Informed: The right to know that your personal data is being collected and processed, and the purposes for which it is used;
• Right to Access: The right to request a copy of the personal data we hold about you;
• Right to Correction: The right to request correction of any inaccurate, incomplete, or outdated personal data;
• Right to Erasure / Right to be Forgotten: The right to request deletion of your personal data, subject to legal retention obligations;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used format for transfer to another service provider;
• Right to Lodge a Complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data rights have been violated.

To exercise any of these rights, please contact the youtaya Data Protection Officer at [email protected] with your request. We will respond within thirty (30) days in accordance with our legal obligations.

10. Children and Minors

The youtaya platform is strictly restricted to individuals 21 years of age or older. youtaya does not knowingly collect personal data from individuals under 21 years of age. If we become aware that an account has been created by a person under the age of 21, the account will be immediately closed and any personal data associated with it will be deleted or returned as appropriate.

If you believe that a minor has created an account on the youtaya platform, please contact us immediately at [email protected].

11. Changes to this Privacy Policy

youtaya may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page and, where appropriate, notify active members by email or through an in-platform notification.

Your continued use of the youtaya platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised Policy. We encourage you to review this Policy periodically.

12. Contact the Data Protection Officer

If you have questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact the youtaya Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines. Contact details for the NPC are available on the official NPC website.