Our Privacy Commitments
These highlights summarize our approach. Please read the full policy below for complete details.
youtaya collects only the personal data that is necessary, relevant, and adequate for the specific purposes outlined in this Policy. We do not collect data speculatively or beyond what is required to operate the Platform and comply with applicable regulations.
All personal data stored on the youtaya Platform is encrypted using industry-standard methods. Passwords are stored as salted cryptographic hashes — they are never stored in plain text and cannot be read by youtaya staff under any circumstances.
youtaya does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. Your data is used solely for the purposes described in this Privacy Policy and as required by law or regulation.
As a data subject under the Philippine Data Privacy Act, you have the right to be informed, to access, to correct, to object, to erasure, to data portability, and to file a complaint. youtaya has processes in place to facilitate the exercise of each of these rights.
youtaya retains personal data only for as long as is necessary for the purpose it was collected, or as required by applicable law and PAGCOR regulations. Account data is retained for a minimum of five years following account closure for regulatory compliance purposes.
In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected players, youtaya will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by the Philippine Data Privacy Act and its implementing regulations.
The following definitions apply throughout this Privacy Policy:
This Policy is governed by and construed in accordance with Republic Act No. 10173 (Philippine Data Privacy Act of 2012) and its Implementing Rules and Regulations, as administered by the National Privacy Commission. Where Processing occurs in connection with PAGCOR-regulated activities, the data handling requirements of PAGCOR's applicable regulations also apply.
By accessing the Platform, registering an Account, or otherwise providing your Personal Data to youtaya, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your Personal Data as described herein, to the extent that consent is the applicable legal basis for such processing.
This Policy does not apply to third-party websites, services, or applications that may be linked from the Platform. youtaya accepts no responsibility for the privacy practices of third-party services.
youtaya collects the following categories of Personal Data in connection with the operation of the Platform and provision of its Services:
youtaya collects Personal Data through the following means:
The majority of Personal Data we hold is provided directly by you when you: register an Account on the Platform; complete KYC identity verification; make a deposit or request a withdrawal; contact the support team; respond to a survey; or interact with the Platform's features and settings.
When you access and use the Platform, youtaya's systems automatically collect certain technical and usage data including your IP address, device identifiers, browser characteristics, pages visited, session duration, and game activity. This data is collected through server logs, cookies, and similar tracking technologies described in Section 7.
youtaya may receive Personal Data about you from third-party service providers in certain circumstances, including: payment processors (such as GCash and PayMaya), which confirm payment account ownership and transaction status; identity verification service providers that assist with KYC processing; fraud detection and prevention services; and game software providers in connection with game activity records.
Purpose: To create, maintain, and administer your youtaya Account, verify your identity, and provide access to the Platform's Services.
Legal Basis: Performance of a contract (provision of the Platform's Services in accordance with the Terms and Conditions).
Purpose: To verify your identity and age (21+ requirement), comply with PAGCOR regulations, satisfy anti-money laundering (AML) obligations, and meet other legal and regulatory requirements applicable to online gaming operations in the Philippines.
Legal Basis: Compliance with a legal obligation.
Purpose: To process your deposit transactions, verify payment method ownership, execute withdrawal requests to your verified payment accounts, and maintain accurate financial records.
Legal Basis: Performance of a contract; compliance with a legal obligation (financial record-keeping requirements).
Purpose: To detect, prevent, and investigate fraudulent activity, bonus abuse, money laundering, multiple Account violations, and unauthorized access to Accounts. To protect the security and integrity of the Platform and its users.
Legal Basis: Legitimate interests of youtaya in protecting the Platform and its users; compliance with legal obligations.
Purpose: To administer responsible gaming tools including deposit limits, session time limits, cool-off periods, and self-exclusion programs. To monitor gaming activity for indicators of potential problem gambling and to take appropriate protective measures.
Legal Basis: Compliance with legal and regulatory obligations relating to responsible gaming; legitimate interests of youtaya in promoting safe gambling.
Purpose: To respond to your inquiries, resolve disputes, address complaints, and provide technical and account-related assistance through the youtaya support team.
Legal Basis: Performance of a contract; legitimate interests.
Purpose: To send you promotional offers, bonus notifications, game updates, and other marketing communications about the Platform's Services, where you have opted in to receive such communications.
Legal Basis: Consent. You may withdraw consent to receive marketing communications at any time through your Account settings or by contacting [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Purpose: To analyze usage patterns, game performance, payment method preferences, and user experience metrics in order to improve the Platform's features, performance, and overall player experience.
Legal Basis: Legitimate interests of youtaya in improving its Services, provided such interests are not overridden by your privacy rights.
youtaya engages third-party service providers who process Personal Data on our behalf, strictly in accordance with youtaya's instructions and the purposes described in this Policy. These providers include:
All service providers are required to implement appropriate technical and organizational security measures and to process Personal Data only as directed by youtaya.
youtaya may be required to share Personal Data with PAGCOR, the National Privacy Commission, the Anti-Money Laundering Council (AMLC), law enforcement agencies, or other government authorities where required by applicable law, court order, regulatory direction, or legal process. youtaya will comply with such requirements and, where legally permitted, will notify affected Data Subjects.
In the event of a merger, acquisition, restructuring, or sale of all or part of youtaya's business or assets, Personal Data held by youtaya may be transferred to the acquiring entity as part of the transaction. In such circumstances, the acquiring entity will be required to continue processing your Personal Data in accordance with this Privacy Policy or will provide you with notice of any material changes.
The youtaya Platform uses cookies and similar tracking technologies to operate certain Platform functions, analyze usage, and improve the player experience. Cookies are small data files stored on your device when you access the Platform.
You may manage cookie settings through your browser's settings. Most browsers allow you to block or delete cookies. However, blocking strictly necessary cookies will prevent the Platform from functioning correctly and may prevent you from accessing your Account or using core Platform features. Functional and analytics cookies may be managed through your browser settings without preventing Platform access.
youtaya retains Personal Data for no longer than is necessary for the purposes for which it was collected, subject to legal and regulatory requirements that may mandate longer retention periods.
Personal Data associated with your Account is retained for the duration of your Account's existence and for a minimum of five (5) years following the closure or termination of your Account. This retention period is required by PAGCOR regulations, anti-money laundering laws, and general financial record-keeping requirements applicable to online gaming operators in the Philippines.
Financial transaction records including deposit history, withdrawal history, and gaming activity records are retained for a minimum of five (5) years from the date of each transaction, consistent with requirements under Philippines anti-money laundering and financial record-keeping regulations.
Identity verification documents submitted as part of the KYC process are retained for the duration of the Account and for a minimum of five (5) years following Account closure.
Personal Data processed for marketing purposes is retained until you withdraw consent to receive marketing communications or for a period of two (2) years from your last interaction with a marketing communication, whichever occurs first.
Server logs, IP address records, and session data are typically retained for ninety (90) days for security and fraud detection purposes, and may be retained longer where required in connection with an ongoing security investigation or legal proceeding.
The security measures implemented by youtaya include, but are not limited to:
No data transmission over the internet or electronic storage system can be guaranteed to be 100% secure. While youtaya takes all reasonable measures to protect your Personal Data, we cannot warrant the absolute security of data transmitted to or stored on the Platform.
In the event of a personal data breach affecting your data, youtaya will notify you and the National Privacy Commission in accordance with the requirements of the Philippine Data Privacy Act.
Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your Personal Data held by youtaya. To exercise any of these rights, contact us at [email protected] with the subject line "DATA SUBJECT RIGHTS REQUEST."
You have the right to be informed whether Personal Data pertaining to you is being collected, processed, and stored by youtaya, and to receive the information contained in this Privacy Policy regarding the purposes and means of processing.
You have the right to request a copy of the Personal Data youtaya holds about you, along with information about how it is being used. Identity verification will be required before any data access request is fulfilled.
You have the right to request the correction of inaccurate, incomplete, or outdated Personal Data held by youtaya. Certain corrections may require supporting documentation for verification purposes.
You have the right to object to the processing of your Personal Data for specific purposes, including direct marketing. Where processing is based on your consent, you may withdraw that consent at any time.
You may request the deletion of your Personal Data where it is no longer necessary for the purposes it was collected, where you have withdrawn consent, or where processing is otherwise unlawful — subject to youtaya's legal retention obligations.
You have the right to receive a structured, machine-readable copy of the Personal Data you have provided to youtaya, to the extent technically feasible and where processing is based on consent or contract.
You have the right to lodge a complaint with the National Privacy Commission of the Philippines if you believe your data privacy rights have been violated. youtaya encourages you to contact us first to attempt informal resolution.
If youtaya becomes aware that Personal Data has been collected from a person under the age of 21, it will take immediate steps to delete such data from its systems, close the associated Account, void all transactions, and report the incident to the relevant regulatory authority as required.
If you are a parent or guardian and believe that your child or a minor in your care has registered an Account or provided Personal Data to youtaya, please contact us immediately at [email protected]. Include "UNDERAGE ACCOUNT REPORT" in the subject line of your message to ensure expedited handling.
Players who share devices with minors are responsible for ensuring that minors cannot access the Platform. youtaya recommends that Players log out of their Accounts when their device is accessible to minors and that parental control software be installed on shared devices.
The youtaya Platform is designed to serve Philippine-based players, and data processing is primarily conducted within the Philippines. However, certain service providers engaged by youtaya, including cloud infrastructure providers, payment processors, and identity verification service providers, may process or store data in jurisdictions outside the Philippines.
Where Personal Data is transferred outside the Philippines, youtaya takes steps to ensure that appropriate safeguards are in place, consistent with the requirements of Section 21 of the Philippine Data Privacy Act and applicable NPC regulations on cross-border data transfers. These safeguards may include contractual clauses that impose data protection obligations on receiving parties consistent with Philippine data protection standards.
By using the Platform and providing your Personal Data, you acknowledge that your data may be transferred to, stored, and processed in countries outside the Philippines where youtaya's service providers operate. In all such cases, youtaya remains responsible for ensuring that your data is protected in accordance with this Privacy Policy and applicable Philippine data protection law.
youtaya reserves the right to update and amend this Privacy Policy at any time. The date of the most recent revision is displayed at the top of this document. It is your responsibility to review this Policy periodically.
Where changes to this Privacy Policy are material — meaning they significantly affect how your Personal Data is collected, used, or shared — youtaya will provide advance notice by email to your registered Account address or through a prominent notice on the Platform at least seven (7) days before the changes take effect.
Where changes are required to comply with applicable law or regulatory directive, they may take effect immediately upon publication on the Platform. Your continued use of the Platform following the effective date of any amendment to this Policy constitutes your acknowledgment of the updated Privacy Policy. If you do not agree with the revised Policy, you must cease use of the Platform and may request Account closure by contacting [email protected].
For any questions, concerns, or requests relating to this Privacy Policy or youtaya's handling of your Personal Data, please contact us using the information below:
Email: [email protected]
Subject Line for Privacy Requests: "DATA SUBJECT RIGHTS REQUEST"
Response Time: youtaya will acknowledge receipt of your request within three (3) business days and will respond to data subject rights requests within fifteen (15) business days of receipt, unless a longer period is required by the nature or complexity of the request.
If you are not satisfied with youtaya's response to your data privacy concern, you have the right to file a complaint with the National Privacy Commission of the Philippines. Information on filing a complaint with the NPC is available on the NPC's official website. youtaya encourages you to contact our support team first to attempt to resolve your concern before escalating to the NPC.