youtaya Privacy Policy

This Privacy Policy ("Policy") applies to the youtaya online gaming and sports betting platform, operated at youtaya.org and all associated pages and services (collectively, the "Platform"). It describes how youtaya collects, processes, stores, protects, and shares the personal information of visitors and registered members ("you," "your," "the Player").

youtaya is committed to the responsible handling of personal data. We comply fully with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines. We also adhere to the data handling standards required under our PAGCOR operating license.

By registering an account or using any feature of the youtaya Platform, you acknowledge that you have read and understood this Policy and you consent to the collection and use of your personal information as described herein. If you do not agree, you must refrain from registering or using the Platform.

For the purposes of the Data Privacy Act of 2012 and this Policy, the data controller responsible for your personal information is:

• Entity Name: youtaya
• Platform Domain: youtaya.org
• Regulator: Philippine Amusement and Gaming Corporation (PAGCOR)
• Governing Law: Republic of the Philippines
• Data Protection Contact: [email protected]

youtaya has designated a Data Protection Officer (DPO) as required under the Data Privacy Act. The DPO oversees compliance with this Policy, handles data subject requests, and liaises with the National Privacy Commission on privacy-related matters. You may contact the DPO through the details provided in Section 15 of this Policy.

The categories of personal information that youtaya may collect from you include, but are not limited to, the following:

A. Registration & Identity Data

• Full legal name (as it appears on your Philippine government-issued ID)
• Date of birth (used to verify the 21+ age requirement)
• Gender
• Nationality
• Registered Philippine mobile number
• Email address
• Username and account password (stored in hashed, non-reversible format)

B. Identity Verification (KYC) Data

• Government-issued photo identification document (e.g., Philippine Passport, UMID, SSS ID, driver's license, PhilSys National ID)
• Proof of address (e.g., utility bill, bank statement, barangay certificate)
• Selfie or live photograph used for biometric identity matching where required
• Source of funds documentation where required under AML obligations

C. Financial & Transaction Data

• GCash or PayMaya account numbers linked to your youtaya account
• BPI, BDO, or Metrobank account details used for bank transfers
• Deposit and withdrawal amounts and timestamps
• Full transaction history within the Platform

D. Gaming Activity Data

• Games played, wager amounts, wins and losses, session durations
• Bonus and promotion usage history
• VIP tier status and loyalty points earned
• Responsible gaming settings (deposit limits, self-exclusion status)

E. Technical & Device Data

• IP address and approximate geographic location at time of login
• Browser type, operating system, and device identifier
• Session logs and Platform usage patterns
• Cookie and tracking data as described in Section 10

F. Communications Data

• Records of live chat, email, and support ticket interactions with youtaya
• Survey responses and feedback submissions

youtaya collects personal information through the following channels:

• Directly from you: When you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, respond to surveys, or update your account settings.
• Automatically through the Platform: Through cookies, session tracking, and server logs when you browse or interact with the Platform. See Section 10 for full details on cookies.
• From payment processors: When you link a GCash, PayMaya, or bank account to your youtaya wallet, we receive payment confirmation and account reference information from the payment provider.
• From identity verification services: Where we use a third-party KYC provider to verify the authenticity of identity documents submitted during registration, we receive the verification outcome and relevant data from that provider.
• From fraud and AML screening services: We may receive risk scores and screening results relating to your identity or transaction patterns from certified third-party compliance screening tools as required by PAGCOR and Philippine AML regulations.

youtaya processes your personal data for the following specific purposes:

Under the Data Privacy Act of 2012, youtaya processes your personal information on one or more of the following lawful bases:

• Contractual Necessity: Processing required to fulfil our contract with you — operating your account, processing payments, delivering gaming services, and providing customer support.
• Legal Obligation: Processing required to comply with PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), the Data Privacy Act itself, and other applicable Philippine laws and regulations.
• Consent: Where we ask for your specific consent — such as for marketing communications or optional data collection beyond the above — we rely on that freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Legitimate Interests: Processing necessary for the legitimate interests of youtaya, such as fraud prevention, platform security, and general business analytics — provided those interests are not overridden by your own rights and interests.

youtaya does not sell, rent, or trade your personal information to any third party for commercial purposes. We share data only in the following limited and necessary circumstances:

• Payment Providers: GCash (G-Xchange Inc.), PayMaya Philippines, BPI, BDO, and Metrobank — solely to facilitate transactions initiated by you.
• KYC & Identity Verification Providers: Certified third-party identity verification services used to process and validate your identity documents during the KYC process.
• AML & Fraud Screening Services: Compliance-certified screening tools used to meet our obligations under the Anti-Money Laundering Act and PAGCOR requirements.
• Game Content Providers: Where necessary, aggregated non-personally identifiable gaming activity data may be shared with our licensed game providers for technical support and game integrity auditing purposes.
• Regulatory & Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and Philippine law enforcement agencies — where disclosure is required by law, court order, or regulatory directive.
• Technology & Infrastructure Partners: Cloud hosting, cybersecurity, and customer support platform providers who process data on our behalf under strict data processing agreements that require them to protect your data to the same standard as youtaya.

youtaya retains personal information only for as long as necessary for the purposes described in this Policy, or as required by applicable law. The following general retention periods apply:

After the applicable retention period expires, personal data is securely deleted or anonymized in accordance with the National Privacy Commission's guidelines on data disposal.

youtaya implements a layered set of technical, organizational, and physical security controls to protect your personal information against unauthorized access, disclosure, alteration, and loss. These include:

• Encryption: All data transmitted between your device and the youtaya servers is encrypted using TLS 1.3. Stored sensitive data (including passwords) is encrypted or hashed using industry-standard algorithms.
• Access Controls: Strict role-based access controls limit which youtaya personnel can access personal data. Access is logged and subject to regular review.
• Two-Factor Authentication: Available for all player accounts. Strongly recommended for all members, particularly those with GCash or bank wallets linked to their account.
• Intrusion Detection & Monitoring: Real-time monitoring for suspicious login attempts, unusual transaction patterns, and network intrusion indicators.
• Regular Security Audits: Periodic third-party penetration testing and vulnerability assessments in accordance with PAGCOR cybersecurity requirements.
• Data Breach Response: In the event of a personal data breach that poses a risk to your rights and freedoms, youtaya will notify the National Privacy Commission within 72 hours of discovering the breach and will notify affected players without undue delay, in compliance with NPC Circular 16-03.

The youtaya Platform uses cookies and similar tracking technologies to ensure the Platform functions correctly, to remember your session and preferences, and to analyze how the Platform is used. The following types of cookies may be set:

You can manage or disable non-essential cookies through your browser settings. Note that disabling strictly necessary cookies will impair your ability to log in and use the Platform. youtaya does not use cookies for third-party advertising or cross-site tracking purposes.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by youtaya. To exercise any of these rights, contact our Data Protection Officer at [email protected] with your full name, registered mobile number, and a description of your request. We will respond within fifteen (15) business days.

The youtaya Platform is strictly for persons who are 21 years of age or older, as required by PAGCOR and Philippine gaming law. We do not knowingly collect or process personal information from any person under the age of 21.

If youtaya becomes aware that personal information has been submitted by or collected from an individual who is under 21 years of age, we will take the following immediate steps:

• Permanently close the relevant account;
• Securely delete the personal information collected, subject to any regulatory retention or reporting obligations that may apply;
• Report the incident to PAGCOR as required under our licensing conditions.

The youtaya Platform primarily stores and processes data on servers located within or operated under appropriate data protection frameworks. In certain limited circumstances — for example, where a game content provider or technology partner operates infrastructure in another jurisdiction — personal data may be transferred outside the Philippines.

Any cross-border transfer of personal data by youtaya or its data processors is conducted only where:

• The receiving country or organization offers an adequate level of data protection, as determined by reference to NPC guidelines; or
• Appropriate contractual safeguards (such as standard contractual clauses approved by the NPC) are in place between youtaya and the recipient; or
• The transfer is necessary to perform the contract between you and youtaya (such as facilitating a payment through a global payment network).

youtaya reserves the right to amend this Privacy Policy at any time. Where changes are material — for example, a significant change to the categories of data collected, the purposes of processing, or your rights — we will notify registered players by email to the address on file and by a prominent notice on the Platform, at least seven (7) days before the changes take effect.

Non-material updates (such as editorial corrections, clarifications, or contact detail updates) may be made without advance notice. The "Last Reviewed" date at the top of this page will always reflect the date of the most recent update.

Continued use of the youtaya Platform after the effective date of any amendment to this Policy constitutes your acceptance of the revised terms. We recommend bookmarking youtaya.org/privacy-policy and checking it periodically.

For any questions, concerns, or requests relating to this Privacy Policy or to the personal data youtaya holds about you, please contact our Data Protection Officer or customer support team through the following channels:

• Live Chat: Available 24/7 on the youtaya Platform at youtaya.org — average response time under 3 minutes.
• Email (General Support): [email protected] — responses within 24 hours.
• Email (Data Privacy / DPO Enquiries): [email protected] with subject line "Data Privacy Request" — DPO responses within 15 business days.

If you are not satisfied with the resolution of your data privacy concern, you have the right to lodge a formal complaint with the National Privacy Commission (NPC) of the Philippines through the NPC's official complaint channels.