Xtaya Privacy Policy – How We Protect Your Data

Welcome to Xtaya — your trusted online gaming destination here in the Philippines. We know how important your privacy is, especially when you're trusting us with your personal details. This Privacy Policy explains in plain, straightforward terms what data Xtaya collects, why we collect it, how we use it, and how we protect it. By using the Xtaya platform — whether you're placing bets on sabong, catching live casino action, or joining our latest promos — you agree to the practices described in this policy.

This privacy policy applies to all users accessing Xtaya through our website at xtaya.net. It covers all products and services offered under the Xtaya brand. If you have any questions after reading this, our team is always ready to help — just reach out through the contact details at the bottom of this page.

1. Who We Are

Xtaya is an online gaming and betting platform serving players across the Philippines. We offer a wide range of games and sports betting options — from live sabong and boxing betting to NBA betting, live casino tables, bingo, and fishing games. Xtaya operates under applicable Philippine gaming regulations and is committed to responsible, transparent, and secure gaming for all kabayan players.

When we say "Xtaya," "we," "us," or "our" in this privacy policy, we're referring to the company operating the Xtaya platform and all its associated services.

2. What Personal Data We Collect

Xtaya only collects the personal data that's necessary for running our platform, keeping your account secure, and meeting our regulatory requirements. Here's a breakdown of the information we gather:

2.1 Information You Give Us Directly

• Account registration data: Full name, date of birth, email address, mobile number, and a username you create.
• Identity verification (KYC): Government-issued ID (such as a Philippine passport, SSS ID, PhilSys National ID, or driver's license), selfie photo, and proof of address — required by law for verified accounts.
• Financial information: GCash number, Maya account, bank account details (BDO, BPI, UnionBank, or other InstaPay/PESONet-enrolled banks), or card details (Visa/Mastercard) for deposits and withdrawals. Note: we do not store full card numbers — these are handled by our payment processors.
• Communications: Any messages you send to our customer support team, including live chat transcripts and email exchanges.

2.2 Information Collected Automatically

• Device and browser data: IP address, device type, operating system, browser version, and screen resolution.
• Usage data: Pages visited, games played, bets placed, time spent on the platform, and click patterns.
• Location data: General location based on your IP address, used to verify that you are accessing Xtaya from an eligible location within the Philippines.
• Session data: Login timestamps, session duration, and activity logs for security monitoring.

2.3 Information from Third Parties

• Verification data from identity verification partners or credit reference agencies, where required by our KYC process.
• Information from payment processors (GCash, Maya, GrabPay, Coins.ph, and participating banks) to confirm transactions.
• Fraud prevention signals from industry-standard anti-fraud and security vendors.

3. How We Use Your Information

Xtaya uses your personal data to deliver the best possible gaming experience while keeping your account safe and compliant with Philippine regulations. Specifically, we use your information to:

• Create and manage your account: Setting up your Xtaya profile, verifying your identity, and maintaining your account settings.
• Process transactions: Handling deposits and withdrawals through GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet bank transfers, and Visa/Mastercard — all in Philippine Peso (₱).
• Provide gaming services: Giving you access to Xtaya's full game catalogue — sabong, boxing betting, NBA betting, live casino, bingo, and fishing games.
• Personalise your experience: Recommending games, promotions, and content based on your preferences and playing history.
• Customer support: Responding to your queries, resolving account issues, and improving our service based on your feedback.
• Regulatory compliance: Meeting our anti-money laundering (AML), Know Your Customer (KYC), and responsible gaming obligations under applicable Philippine law.
• Security and fraud prevention: Detecting suspicious activity, preventing unauthorised access, and protecting our platform from abuse.
• Marketing and promotions: Sending you relevant bonus offers, promotions, and platform updates — but only if you've opted in. You can opt out any time.
• Platform improvement: Analysing usage patterns to improve Xtaya's website, games, and user experience.

We do not use your personal data for any purposes beyond those listed above without notifying you first and, where required by law, obtaining your consent.

4. Sharing Your Information

Xtaya does not sell, rent, or trade your personal data to third parties. Period. However, there are certain situations where we need to share your information with trusted partners to run our platform effectively:

• Payment service providers: GCash, Maya, GrabPay, Coins.ph, InstaPay/PESONet-connected banks, and Visa/Mastercard networks need transaction details to process your deposits and withdrawals.
• Identity verification partners: KYC and AML compliance vendors who help us verify your identity as required by Philippine gaming authorities.
• Game software providers: Third-party game studios and live casino solution providers who power our games. These partners may receive anonymised session data necessary to run their games.
• IT and security vendors: Cloud hosting, cybersecurity, and fraud prevention services that help us keep Xtaya's platform stable and secure.
• Regulatory authorities: Philippine gaming regulators, law enforcement, and other government agencies, when required by law or court order.

All third-party partners we work with are bound by strict data protection agreements. They can only use your information for the specific purpose we've engaged them for — nothing else.

5. Cookies and Tracking Technologies

Xtaya uses cookies and similar tracking technologies to make our platform work properly and to understand how players use our site. Here's what you need to know:

5.1 Types of Cookies We Use

• Essential cookies: These are needed for the platform to function. Without them, you can't log in, place bets, or use core features. These cannot be disabled.
• Analytics cookies: Help us understand which pages and games are most popular, where users drop off, and how to improve the overall Xtaya experience.
• Preference cookies: Remember your settings — like your preferred language and notification choices — so you don't have to reset them every time you visit.
• Marketing cookies: Used to show you relevant promotions and measure the effectiveness of our advertising campaigns. These are only active if you've given consent.

5.2 Managing Cookies

You can control non-essential cookies through your browser settings. Keep in mind that disabling certain cookies may affect how Xtaya works for you. For full details on managing cookies, check your browser's help documentation.

6. How We Keep Your Data Secure

At Xtaya, the security of your personal data is something we invest in seriously — not just because we're required to, but because we genuinely care about our players' safety. We use industry-standard security measures including:

• SSL/TLS encryption: All data transmitted between your device and Xtaya's servers is encrypted using 256-bit SSL/TLS technology.
• Secure storage: Personal and financial data is stored in access-controlled, encrypted databases hosted in secure data centres.
• Two-factor authentication (2FA): Available for your Xtaya account to add an extra layer of protection beyond your password.
• Regular security audits: Our systems are tested regularly by independent security professionals to identify and fix vulnerabilities before they can be exploited.
• Staff training: All Xtaya team members who handle personal data undergo regular data privacy and security training.

While we work hard to protect your data, no system is 100% immune to threats. If you suspect any unauthorised activity on your account, please contact us immediately so we can act fast.

7. Your Rights as a User

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you have clear rights over your personal data. As an Xtaya player, you can exercise these rights at any time by contacting us:

• Right to be informed: You have the right to know what personal data we hold about you and how it's being used — which is exactly what this privacy policy is for.
• Right to access: You can request a copy of the personal data we have on file for you.
• Right to correct: If any of your information is inaccurate or outdated, you can ask us to update it.
• Right to erasure: Also known as the "right to be forgotten." You can request deletion of your personal data, subject to our legal retention obligations.
• Right to data portability: You can request your personal data in a commonly used, machine-readable format.
• Right to object: You can object to certain uses of your data, such as direct marketing.
• Right to withdraw consent: Where processing is based on your consent (like marketing emails), you can withdraw it at any time without affecting what happened before you withdrew it.

To exercise any of these rights, email us at support@xtaya.net. We'll respond within 15 business days, in line with the requirements of the Philippine Data Privacy Act.

8. Data Retention

Xtaya keeps your personal data for as long as is necessary to fulfil the purposes described in this privacy policy, or as required by Philippine law. Specifically:

• Account data is retained for the duration of your active account, plus a minimum of 5 years after account closure (as required by AML regulations).
• Transaction records are retained for a minimum of 5 years to comply with financial reporting and regulatory requirements.
• KYC documents are retained in line with gaming authority requirements.
• Customer support communications are retained for up to 3 years.
• Marketing consent records are retained until you withdraw consent, plus an additional period to demonstrate compliance.

Once data is no longer needed and retention periods have expired, we securely delete or anonymise it.

9. Protection of Minors

Xtaya is strictly for players aged 21 and above, as required by Philippine gaming law. We do not knowingly collect, process, or retain personal data from anyone under the legal gambling age. If we discover that a minor has registered an account, we will immediately close the account, return any remaining balance, and delete the personal data associated with that account.

If you believe a minor has accessed Xtaya, please notify us immediately at support@xtaya.net. For more information on our responsible gaming commitments, visit our Responsible Gaming page.

10. Changes to This Privacy Policy

Xtaya may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. When we make changes, we'll update the "Last Updated" date at the top of this page and — for significant changes — notify you via email or an in-platform notification.

We encourage you to review this privacy policy periodically so you're always up to date on how Xtaya handles your information. Continued use of the platform after changes are posted means you accept the updated policy.

11. How to Contact Us

If you have questions, concerns, or requests related to this privacy policy or how Xtaya handles your personal data, you can reach our Data Privacy team through:

• Email: support@xtaya.net
• Website: xtaya.net

We're committed to addressing all data privacy concerns promptly and transparently. If you're not satisfied with our response, you also have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.