ctaya Casino Privacy Policy

This Privacy Policy governs the manner in which ctaya Casino ("ctaya," "we," "us," or "our") collects, uses, maintains, and discloses information collected from users ("User," "you," or "your") of the ctaya.cam website and associated services (collectively, the "Service"). This Privacy Policy applies to the Service and all products and services offered by ctaya.

ctaya is committed to protecting the privacy and security of our users' personal information. As a PAGCOR-licensed online casino operator serving the Philippine market, we comply with all applicable Philippine data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173) and regulations promulgated by the National Privacy Commission of the Philippines. This Privacy Policy describes our practices concerning the collection, use, disclosure, and protection of your personal data.

1Information We Collect

ctaya collects various types of information from and about users of our Service to provide secure, personalized gaming experiences and comply with legal and regulatory obligations.

1.1 Personal Identification Information

We collect personal identification information from Users in connection with account registration, identity verification, and service provision. This information may include, but is not limited to:

• Full legal name as it appears on government-issued identification
• Date of birth and age verification documentation
• Email address and verified mobile phone number
• Physical address and place of residence within the Philippines
• Government-issued identification numbers (e.g., driver's license, passport, Philippine Identification Card)
• Copies of government-issued identification documents and selfie verification photos
• Financial account information including GCash mobile number, PayMaya account details, and bank account information for deposits and withdrawals
• Username, password, and security questions chosen during account creation

1.2 Transaction and Financial Information

To process deposits, withdrawals, and gaming transactions, ctaya collects and maintains records of:

• Deposit and withdrawal transaction histories including amounts, dates, times, and payment methods used
• Gaming activity records including bets placed, games played, wins, losses, and account balances
• Bonus and promotional participation records
• VIP tier status and loyalty program point accumulation
• Payment method verification documentation required by financial service providers and anti-money laundering regulations

1.3 Technical and Usage Information

When you access ctaya services, we automatically collect certain technical information about your device and usage patterns:

• IP address, device identifiers, and approximate geographic location
• Browser type and version, operating system, and device specifications
• Pages visited, features used, and navigation patterns within the Service
• Session duration, login timestamps, and activity logs
• Cookies and similar tracking technologies as detailed in our Cookie Policy
• Crash reports and error logs for technical troubleshooting purposes

1.4 Communications and Customer Support

We retain records of communications between you and ctaya, including:

• Live chat transcripts with customer support representatives
• Email correspondence regarding account issues, complaints, or inquiries
• Feedback, surveys, and testimonials you provide voluntarily
• Phone call recordings when you contact our support team (with notice provided at call initiation)

2How We Use Collected Information

ctaya collects and uses your personal information for legitimate purposes related to providing, improving, and securing our gaming services in compliance with Philippine law.

2.1 Service Provision and Account Management

We use your information to:

• Create, maintain, and authenticate your ctaya account
• Process deposits, withdrawals, and other financial transactions
• Provide access to casino games, live dealer tables, and other gaming products
• Track gaming activity, account balances, and transaction histories
• Calculate and credit VIP rewards, comp points, bonuses, and promotional offers
• Process customer support requests and resolve account issues

2.2 Legal and Regulatory Compliance

Your information is used to comply with legal obligations including:

• Verifying your identity and age to ensure compliance with Philippine gambling laws requiring players to be 21 years of age or older
• Conducting Know Your Customer (KYC) and Anti-Money Laundering (AML) checks as required by PAGCOR regulations and the Anti-Money Laundering Act of 2001 (Republic Act No. 9160)
• Detecting and preventing fraud, collusion, money laundering, and other illegal activities
• Maintaining records required by PAGCOR and other regulatory authorities
• Responding to legal requests, court orders, and regulatory inquiries
• Enforcing our Terms and Conditions and investigating Terms violations

2.3 Service Improvement and Personalization

We analyze usage data to:

• Improve website functionality, user interface design, and mobile optimization
• Personalize game recommendations based on your preferences and playing history
• Develop new features, games, and services tailored to Filipino player preferences
• Conduct research and analysis to understand user behavior and market trends
• Optimize payment processing systems for faster GCash, PayMaya, and bank transfer transactions

2.4 Marketing and Communications

With your consent, we may use your contact information to:

• Send promotional emails about bonuses, tournaments, and special offers
• Deliver SMS notifications about deposit confirmations, withdrawal approvals, and account security alerts
• Provide push notifications regarding game updates and exclusive VIP promotions
• Invite you to participate in surveys and provide feedback about your ctaya experience

You may opt out of marketing communications at any time by adjusting your account preferences or clicking unsubscribe links in emails. Please note that you cannot opt out of transactional communications necessary for account operation and regulatory compliance.

2.5 Security and Fraud Prevention

Your data helps us:

• Monitor for suspicious account activity, unauthorized access attempts, and security breaches
• Implement multi-factor authentication and other security measures to protect your account
• Detect and prevent bonus abuse, collusion between players, and terms violations
• Verify the legitimacy of withdrawal requests and prevent fraudulent transactions
• Maintain audit trails for security incident investigations

3How We Protect Your Information

ctaya implements comprehensive technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

3.1 Technical Security Measures

• Encryption: All data transmitted between your device and ctaya servers is encrypted using 256-bit SSL/TLS protocols, the industry standard for secure communications.
• Secure Data Storage: Personal information is stored on secure servers located in protected data centers with physical access controls, surveillance systems, and environmental safeguards.
• Access Controls: Strict role-based access controls ensure only authorized personnel can access personal data, and all access is logged for audit purposes.
• Network Security: Firewalls, intrusion detection systems, and regular vulnerability assessments protect our infrastructure from external threats.
• Data Segregation: Financial data and personal identification information are stored separately with additional encryption layers.

3.2 Organizational Security Measures

• Employee Training: All ctaya staff undergo mandatory data protection training and sign confidentiality agreements.
• Third-Party Due Diligence: Service providers with access to personal data are carefully vetted and contractually obligated to maintain equivalent security standards.
• Incident Response: We maintain a comprehensive data breach response plan to quickly identify, contain, and remediate security incidents.
• Regular Audits: Independent security audits and penetration testing are conducted regularly to identify and address vulnerabilities.
• Compliance Monitoring: Our Data Protection Officer oversees compliance with privacy laws and internal security policies.

3.3 User Security Responsibilities

While ctaya implements robust security measures, users also play a critical role in protecting their accounts:

• Use strong, unique passwords and change them periodically
• Enable two-factor authentication for enhanced account security
• Never share login credentials with others
• Log out of your account when using shared or public devices
• Report suspicious account activity to customer support immediately
• Keep your registered email address and mobile number secure and up to date

4Information Sharing and Disclosure

ctaya does not sell, trade, or rent your personal information to third parties. We may share your information only in the following limited circumstances:

4.1 Service Providers and Business Partners

We engage trusted third-party service providers to assist in operating our platform, including:

• Payment Processors: GCash, PayMaya, and banking partners require certain information to process deposits and withdrawals securely.
• Game Providers: JILI Gaming, Pragmatic Play, Evolution Gaming, and other content providers may receive limited data necessary for game functionality and integrity monitoring.
• Identity Verification Services: Third-party KYC providers assist with identity document verification and age confirmation.
• Cloud Infrastructure: Secure hosting and data storage providers maintain our servers and databases.
• Customer Support Tools: Live chat platforms and ticketing systems may process communications between you and our support team.

All service providers are contractually obligated to maintain confidentiality, use data only for specified purposes, and implement appropriate security measures.

4.2 Legal and Regulatory Requirements

We may disclose your information when required by Philippine law or regulatory authorities:

• In response to valid legal processes including court orders, subpoenas, and search warrants
• To comply with PAGCOR regulations, audits, and information requests
• To cooperate with law enforcement investigations of suspected illegal activities
• To comply with Anti-Money Laundering Council (AMLC) reporting obligations
• When disclosure is necessary to protect ctaya's legal rights or defend against legal claims

4.3 Business Transfers

In the event ctaya undergoes a business transition such as merger, acquisition, or sale of assets, your personal information may be transferred to the successor entity. We will provide notice before your information becomes subject to a different privacy policy.

4.4 Consent-Based Sharing

We will only share your personal information with third parties for purposes other than those listed above if we obtain your prior written consent. You may revoke consent at any time by notifying our Data Protection Officer at [email protected].

5Your Privacy Rights

Under Philippine data protection law and international standards, you have the following rights with respect to your personal information:

5.1 Right to Access

You have the right to request confirmation of whether your personal data is being processed and to obtain a copy of the information we hold about you. You can request access to your personal data by submitting a request to [email protected]. We will respond to such requests within 15 days.

5.2 Right to Correction

If your personal information is inaccurate, incomplete, or outdated, you have the right to request correction or completion. You can update certain information directly through your account settings or by contacting our support team.

5.3 Right to Deletion

Under certain circumstances, you have the right to request deletion of your personal data. However, we may retain certain information as required by Philippine law, PAGCOR regulations, or for legitimate business purposes such as fraud prevention or dispute resolution. Deleted account information may be retained in anonymized or aggregated form.

5.4 Right to Data Portability

You have the right to request a copy of your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller of your choosing, where technically feasible.

5.5 Right to Object

You have the right to object to the processing of your personal data for marketing purposes or other non-essential uses. You can exercise this right by adjusting your account preferences or by notifying us in writing.

5.6 Right to Withdraw Consent

Where we process your personal information based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.

5.7 How to Exercise Your Rights

To exercise any of the rights described above, please submit your request in writing to:

ctaya Data Protection Officer
Email: [email protected]
Mailing Address: ctaya Casino, Manila, Philippines

We will require verification of your identity before processing requests. Response time varies depending on the nature and complexity of your request but will not exceed the timeframes specified by Philippine law.

6Data Retention and Deletion

ctaya retains your personal information for as long as necessary to provide services, comply with legal obligations, and protect our legitimate interests. Retention periods vary depending on the type of data and the purposes for which we use it.

6.1 Standard Retention Periods

• Account Information: Retained for the duration of your account relationship plus 5 years after account closure for regulatory compliance.
• Transaction Records: Maintained for a minimum of 5 years as required by PAGCOR and Philippine financial regulations.
• Identity Verification Documents: Retained for 5 years after account closure or the last transaction.
• Gaming Activity Logs: Retained for a minimum of 3 years for audit and dispute resolution purposes.
• Customer Support Communications: Retained for 2 years to support customer service inquiries and complaint resolution.
• Marketing Communications: Retained until you unsubscribe or withdraw consent.

6.2 Account Deletion

You may request permanent deletion of your ctaya account by contacting our support team. Upon deletion, your account will be deactivated and your personal identifying information will be removed from active systems, but regulatory and historical records may be retained as required by law.

7Third-Party Links and Services

The ctaya website may contain links to third-party websites, game providers, payment processors, and external services. This Privacy Policy applies only to the ctaya website and services. We are not responsible for the privacy practices of third-party websites or services. We encourage you to review the privacy policies of any third-party sites before providing personal information or using their services.

When you click on links to external payment providers like GCash or PayMaya, you will leave the ctaya platform and be subject to their respective privacy policies and terms of service.

8Cookies and Tracking Technologies

ctaya uses cookies, web beacons, pixels, and similar technologies to enhance your experience, analyze usage patterns, and remember your preferences.

8.1 Types of Cookies We Use

• Essential Cookies: Required for core functionality including account authentication and security.
• Performance Cookies: Collect data about how you use the Service to help us optimize performance and fix issues.
• Preference Cookies: Remember your settings, language choice, and gameplay preferences.
• Analytics Cookies: Allow us to understand user behavior and improve our platform.
• Marketing Cookies: Enable targeted advertising and promotional content (requires consent).

8.2 Managing Cookies

You can control cookie settings through your browser preferences. However, disabling essential cookies may impair platform functionality. You can opt out of marketing cookies through your account preferences or cookie consent manager.

9International Data Transfers

ctaya operates primarily in the Philippines and processes most personal data within the Philippine jurisdiction. However, certain functions like cloud storage and game provider services may involve data transfers outside the Philippines. When international transfers occur, we implement appropriate safeguards including standard contractual clauses and adequacy decisions as recognized by the National Privacy Commission to ensure equivalent data protection standards.

10Children's Privacy

ctaya services are not directed to individuals under 21 years of age. We do not knowingly collect personal information from children or minors. If we become aware that we have collected information from a user who is under 21, we will take steps to immediately delete such information and terminate the user's account. If you believe we have collected information from a minor, please notify us immediately at [email protected].

11Changes to This Privacy Policy

ctaya may update this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements, or other factors. We will notify you of material changes by updating the "Last Updated" date at the top of this policy and, for significant changes, by prominently posting notice on our website or sending you an email notification.

Your continued use of ctaya services following notification of changes constitutes your acceptance of the modified Privacy Policy. We recommend reviewing this policy periodically to stay informed about how we protect your personal information.