Ctaya Privacy Policy – How We Protect Your Personal Data

At a Glance

The Key Points of Ctaya's Privacy Commitment

Privacy policies can be long. Here's the short version before you dive into the full document below.

We Collect Only What We Need

Ctaya collects personal data only for specific, legitimate purposes — running your account, processing payments, and meeting legal obligations. We don't collect data just to have it.

We Never Sell Your Data

Ctaya does not sell, rent, or trade your personal information to third parties for marketing purposes. Your data stays within the Ctaya ecosystem unless the law requires otherwise.

256-bit SSL Encryption

Every piece of data transmitted between you and Ctaya is protected with industry-standard SSL encryption. We also use secure server infrastructure and access controls to protect stored data.

Your Rights Are Real

Under the Philippine Data Privacy Act, you have the right to access, correct, and delete your personal data held by Ctaya. We make it easy to exercise these rights through your account or by contacting support.

Ctaya protects player data across all gaming environments in the Philippines.

Our Commitment

Privacy at Ctaya – Built Into Everything We Do

When you sign up on Ctaya, you're trusting us with your personal information. That trust matters, and we don't take it lightly. This Privacy Policy explains — in plain, everyday language — exactly how Ctaya handles your data, who can access it, how long we keep it, and what you can do if you want to review or change the information we hold about you.

Ctaya operates in compliance with Republic Act No. 10173, otherwise known as the Philippine Data Privacy Act of 2012, and its Implementing Rules and Regulations. This law gives Filipino players specific, enforceable rights over their personal data, and Ctaya is committed to upholding every one of them.

This policy applies to all personal data collected through the Ctaya website, mobile platform, customer support channels, and any other service operated under the Ctaya brand. By creating an account and using the Ctaya platform, you acknowledge that you have read and understood this Privacy Policy.

Who is the Data Controller? Ctaya is the data controller responsible for your personal information collected through this platform. If you have any questions or requests regarding your data, contact us at support@ctaya.com.

Contents

1. What We Collect
2. How We Collect It
3. Why We Use It
4. Legal Basis
5. Sharing Your Data
6. Data Retention
7. Security Measures
8. Cookies
9. Your Rights
10. Minors
11. Policy Updates
12. Contact Us

1. What Personal Data Ctaya Collects

Ctaya collects personal data in several categories depending on how you interact with the platform:

1.1 Identity and Contact Information

Full legal name as shown on your government-issued ID
Date of birth
Email address
Mobile number (for account verification and support)
Residential address in the Philippines

1.2 Verification Documents

As part of our Know Your Customer (KYC) process, Ctaya may collect:

A copy of a valid Philippine government-issued ID (passport, driver's license, SSS ID, PhilHealth ID, or Unified Multi-Purpose ID)
Proof of address (utility bill or bank statement, not older than three months)
Selfie photos for identity verification purposes

1.3 Financial Information

GCash or Maya account number (used for transactions, not stored permanently)
Bank account details for withdrawals (BDO, BPI, UnionBank, etc.)
Transaction history within the Ctaya platform

Ctaya does not store full card numbers, CVV codes, or banking passwords. Payment processing is handled through encrypted third-party payment gateways.

1.4 Gaming and Behavioral Data

Betting history, game preferences, and session duration
Bonus usage and promotional activity
Responsible gaming tool settings (deposit limits, session timers, etc.)

1.5 Technical Data

IP address and approximate geographic location
Device type, browser type, and operating system
Login timestamps and session logs
Cookies and similar tracking technologies (see Section 8)

2. How Ctaya Collects Your Data

Ctaya collects your personal data through the following means:

Registration form: When you create a Ctaya account, you provide your basic identity and contact details directly.
KYC verification: When you submit documents to verify your account identity, either during registration or when requested later.
Deposits and withdrawals: Your payment details are captured when you make a financial transaction on Ctaya.
Platform activity: We automatically collect data about how you use the Ctaya platform — which games you play, how long your sessions are, and what bets you place.
Customer support: When you contact Ctaya for help, any information you share in that interaction is collected and stored as part of your support record.
Cookies and analytics: Ctaya uses cookies and similar technologies to collect technical data about your device and browsing behavior on our platform. See Section 8 for full details.

3. Why Ctaya Uses Your Personal Data

Ctaya uses the personal data we collect for specific, legitimate purposes. Here's a breakdown:

Purpose	Data Used	Category
Creating and managing your Ctaya account	Name, email, contact number	Account
Verifying your identity (KYC compliance)	Government ID, selfie, address	Compliance
Processing deposits and withdrawals	Payment details, transaction history	Financial
Delivering gaming services and live casino	Gameplay data, session data	Service
Preventing fraud and money laundering	All categories as needed	Legal Obligation
Sending promotional communications (with consent)	Email, mobile number	Marketing
Personalizing your Ctaya experience	Gaming preferences, behavior data	Service
Providing customer support	Support interaction records	Service
Complying with Philippine law and regulations	All categories as required	Legal Obligation

4. Legal Basis for Processing Your Data

Ctaya processes your personal data only when there is a valid legal basis to do so under the Philippine Data Privacy Act of 2012. The legal bases Ctaya relies on are:

Contractual necessity: Processing your data is necessary to fulfill our agreement with you — i.e., to provide the Ctaya gaming platform and all associated services.
Legal obligation: Ctaya is required by Philippine law to collect and retain certain data, particularly for anti-money laundering (AML) compliance and gaming regulatory requirements.
Legitimate interests: Ctaya processes some data to protect the platform from fraud, maintain security, and improve the overall experience for players — where this does not override your rights.
Consent: For marketing communications and optional data processing activities, Ctaya relies on your consent. You can withdraw this consent at any time by updating your preferences in your account settings or contacting support.

You have the right to withdraw consent for marketing communications at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before withdrawal.

6. How Long Ctaya Keeps Your Data

Ctaya retains your personal data for as long as your account is active and for a period afterward as required by law or legitimate business need. Here are the general retention timelines:

Account and identity data: Retained for the lifetime of your account plus five years after closure, in line with Philippine AML regulations.
Transaction records: Retained for a minimum of five years following each transaction, as required by Philippine financial regulations.
KYC documents: Retained for five years after account closure or as otherwise required by applicable law.
Gaming activity logs: Retained for two years after your last active session, then anonymized or deleted.
Support records: Retained for two years after the support interaction is resolved.
Marketing consent records: Retained until you withdraw consent, plus one year thereafter.

When your data is no longer needed, Ctaya will delete or anonymize it securely. We will not retain data longer than necessary, and we will not use data collected for one purpose for a different, incompatible purpose.

7. How Ctaya Protects Your Data

Data security is not an afterthought at Ctaya — it's built into how the platform operates. Here are the technical and organizational measures we have in place:

Encryption in transit: All data sent between your browser or app and Ctaya's servers is encrypted using 256-bit SSL/TLS technology. This prevents interception during transmission.
Encryption at rest: Sensitive stored data, including identity documents and financial records, is encrypted on our servers using industry-standard algorithms.
Access controls: Only Ctaya staff with a legitimate need to access your data can do so. Access is logged, monitored, and regularly reviewed.
Two-factor authentication: Ctaya supports two-factor authentication (2FA) for account logins. We strongly encourage all players to enable it in their account settings.
Regular security audits: Ctaya's systems are regularly tested for vulnerabilities by independent security professionals. Any issues discovered are remediated promptly.
Breach response: In the unlikely event of a data breach that affects your personal information, Ctaya will notify you and the relevant Philippine authorities as required by law, within 72 hours of becoming aware of the breach.

While Ctaya takes every reasonable step to secure your data, no digital platform is 100% immune to risk. You can help protect your account by using a strong, unique password and enabling 2FA.

8. Cookies and Tracking Technologies

Ctaya uses cookies and similar technologies to make the platform work properly and to understand how players use it. Here's what you need to know:

8.1 What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the website remember your preferences, keep you logged in, and track your activity across sessions.

8.2 Types of Cookies Ctaya Uses

Essential cookies: Required for the platform to function — keeping you logged in, processing bets, and maintaining session security. These cannot be disabled.
Analytics cookies: Used to understand how players navigate Ctaya, which pages are most visited, and where issues arise. This data is aggregated and anonymized.
Preference cookies: Remember your settings and preferences (such as language or game view) so you don't have to re-enter them each visit.
Marketing cookies: Used to show you relevant promotions and measure the effectiveness of our marketing. These are only placed with your consent.

8.3 Managing Cookies

You can control and delete cookies through your browser settings. Note that disabling essential cookies may affect how the Ctaya platform functions. You can update your marketing cookie preferences at any time through your account settings.

Ctaya players across the Philippines — from Cagayan de Oro to Manila — have full data rights.

Data Privacy Act

Your Rights Under Philippine Privacy Law

The Philippine Data Privacy Act of 2012 gives you real, enforceable rights over your personal data. Ctaya is fully committed to honoring every one of them. Here's what you're entitled to as a Ctaya player:

Right to Be Informed

You have the right to know what personal data Ctaya holds about you, how it was collected, and how it is being used. This Privacy Policy is our primary way of fulfilling that right.

Right to Access

You can request a copy of the personal data Ctaya holds about you at any time. We will respond to verified access requests within 15 business days.

Right to Correction

If any of your personal data held by Ctaya is inaccurate or incomplete, you have the right to request that we correct it. You can update basic account details yourself through your account settings, or contact support for more substantial corrections.

Right to Erasure (Right to Be Forgotten)

You can request that Ctaya delete your personal data in certain circumstances — for example, if the data is no longer necessary for the purpose it was collected, or if you withdraw your consent. Note that some data must be retained to comply with Philippine legal obligations even after account closure.

Right to Object

You can object to certain types of data processing, including direct marketing. If you no longer want to receive promotional communications from Ctaya, you can unsubscribe at any time through your account preferences or by contacting support.

Right to Data Portability

You can request that Ctaya provide your personal data in a structured, machine-readable format so you can transfer it to another service if you choose. Submit a portability request to support@ctaya.com.

Right to File a Complaint

If you believe Ctaya has not handled your personal data in accordance with the Philippine Data Privacy Act, you have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines.

Every Ctaya player in the Philippines is protected by strict data privacy standards.

10. Minors and Data Protection

Ctaya is strictly an adult gaming platform. We do not knowingly collect personal data from anyone under 18 years of age. If you are under 18, you must not register on Ctaya or provide any personal data to us.

If Ctaya discovers that personal data has been collected from a minor, we will delete that data immediately and close the associated account. Parents or guardians who believe a minor has registered on Ctaya should contact us immediately at support@ctaya.com.

18+ only. Ctaya takes underage registration seriously and cooperates with authorities when minors are identified on the platform.

11. Updates to This Privacy Policy

Ctaya reviews and updates this Privacy Policy periodically to reflect changes in how we operate, changes in Philippine law, or feedback from players. When we make significant changes, we will notify registered players via email and display a notice on the Ctaya platform.

The effective date at the top of this page shows when the policy was last revised. We encourage you to review this page from time to time so you're always aware of how your data is being handled. Continuing to use Ctaya after a policy update constitutes acceptance of the revised policy.

12. Contact Us About Privacy

If you have questions about this Privacy Policy, want to exercise any of your data rights, or have a concern about how Ctaya has handled your personal information, please reach out through the following channels:

Email: support@ctaya.com
Live Chat: Available 24/7 through the Ctaya platform when you are logged in
FAQ: Visit our FAQ page for answers to common privacy questions

We aim to respond to all privacy-related inquiries within five business days. For formal data subject requests (access, correction, deletion, or portability), we will respond within 15 business days as required under Philippine law.

If you are not satisfied with how Ctaya handles your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.

Data Security

How Ctaya Keeps Your Information Safe

End-to-End Encryption

Every data transmission between you and Ctaya travels through a 256-bit SSL encrypted channel. No one can read your data in transit — not even us. This applies to all login sessions, transactions, and support conversations.

Minimal Data Access

Ctaya operates on a strict need-to-know basis. Only staff with a verified, documented reason can access player personal data. All access is logged and audited. Unauthorized access attempts trigger automatic security alerts.

Two-Factor Authentication

Ctaya supports 2FA via SMS or authenticator app for all player accounts. Adding a second layer of security to your login means that even if your password is compromised, your Ctaya account stays protected.

Regular Security Audits

Ctaya's infrastructure is regularly tested by independent security professionals. Penetration testing, vulnerability scanning, and code reviews are part of our ongoing security program — not just a one-time exercise.

Breach Notification

In the event of a data breach affecting your personal information, Ctaya will notify you and the National Privacy Commission within 72 hours of becoming aware. We will tell you what happened, what data was affected, and what steps we're taking.

Secure Data Deletion

When your data reaches the end of its retention period, Ctaya deletes or anonymizes it using secure methods that prevent recovery. We don't keep data around longer than necessary just because we can.