Your privacy matters to us. This Privacy Policy explains exactly what personal data xtaya collects from Filipino players, why we collect it, how we use and protect it, and what rights you have over your own information. We believe in full transparency – no hidden data practices, no surprises.
xtaya's six core data privacy principles – the foundation of how we handle your information.
xtaya only collects personal data that is strictly necessary for account operation, identity verification, and regulatory compliance. We do not collect data for its own sake.
All personal data is stored on encrypted servers with access controls. Data in transit is protected by 256-bit SSL/TLS encryption. We conduct regular security audits.
You have the right to access, correct, and request deletion of your personal data at any time. xtaya provides clear mechanisms to exercise these rights through our support team.
xtaya does not sell your personal data to third parties. Data is shared only with service providers essential to platform operation, and only under strict confidentiality agreements.
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected, or as required by Philippine law and PAGCOR regulatory obligations.
This Privacy Policy is written in plain, accessible English. We notify registered players of any material changes to our data practices before those changes take effect.
About This Policy: This Privacy Policy ("Policy") describes how xtaya ("xtaya," "we," "us," "our") collects, uses, stores, and protects the personal information of users ("you," "Player") of the xtaya online gaming platform at xtaya.club. This Policy is issued in compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. By registering for or using the xtaya platform, you acknowledge that you have read and understood this Policy.
1.1 xtaya is committed to protecting the privacy and personal data of all players who use the xtaya platform. We understand that trust is the foundation of any long-term relationship between a gaming platform and its players, and that trust begins with responsible, transparent data handling.
1.2 This Policy applies to all personal data collected through the xtaya website at xtaya.club, the xtaya mobile application (where available), and any other digital touchpoints operated by xtaya. It applies to all registered players, prospective players who browse the platform, and any individual who contacts xtaya's customer support team.
1.3 This Policy should be read alongside the xtaya Terms & Conditions, which govern the overall use of the platform. In the event of any conflict between this Policy and the Terms & Conditions on matters of data privacy, this Policy shall prevail.
2.1 For the purposes of the Data Privacy Act of 2012 and applicable data protection regulations, xtaya acts as the data controller in respect of personal data collected from players using the xtaya platform.
2.2 As data controller, xtaya determines the purposes and means of processing your personal data. xtaya is responsible for ensuring that personal data is processed lawfully, fairly, and transparently in accordance with this Policy and applicable Philippine law.
2.3 Questions, requests, or complaints relating to the processing of your personal data may be directed to the xtaya Data Privacy Officer via the contact details set out in Section 16 of this Policy.
3.1 xtaya collects the following categories of personal data from players:
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Full name, date of birth, government-issued ID number, nationality | Account registration, KYC verification, age verification (21+) |
| Contact Data | Email address, mobile number, residential address | Account communication, support, regulatory correspondence |
| Financial Data | GCash number, Maya account, bank account details, transaction history | Deposit and withdrawal processing, fraud prevention, AML compliance |
| Technical Data | IP address, device type, browser type, operating system, session logs | Platform security, fraud detection, performance optimization |
| Usage Data | Games played, wager amounts, session duration, bonus usage | Responsible gaming monitoring, personalization, regulatory reporting |
| Communications Data | Support chat transcripts, email correspondence, feedback submissions | Customer service, dispute resolution, quality assurance |
3.2 xtaya does not collect sensitive personal information (as defined under the Data Privacy Act of 2012) unless strictly required for regulatory compliance, in which case such collection will be clearly disclosed to you at the point of collection.
4.1 xtaya collects personal data through the following means:
5.1 xtaya processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable regulations:
6.1 xtaya uses your personal data for the following purposes:
6.2 xtaya will not use your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your consent or establishing another lawful basis for such processing.
7.1 xtaya uses cookies and similar tracking technologies on the xtaya platform to enhance your experience, maintain session security, and analyze platform performance. The following types of cookies are used:
7.2 You may manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the xtaya platform. xtaya does not use advertising or cross-site tracking cookies.
8.1 xtaya does not sell, rent, or trade your personal data to any third party for commercial purposes. Personal data may be shared with the following categories of recipients only to the extent necessary for the stated purpose:
8.2 All third-party service providers who receive personal data from xtaya are contractually required to process such data only for the specified purpose, to maintain appropriate security standards, and to comply with applicable data protection laws.
9.1 Some of xtaya's service providers may be located outside the Philippines. Where personal data is transferred to a recipient in another country, xtaya ensures that appropriate safeguards are in place to protect your data, including contractual data protection clauses that meet the standards required by the National Privacy Commission of the Philippines.
9.2 xtaya will not transfer your personal data to any jurisdiction that does not provide an adequate level of data protection without first implementing appropriate safeguards and, where required, obtaining your consent.
10.1 xtaya retains personal data for as long as necessary to fulfill the purposes for which it was collected, subject to the following retention guidelines:
10.2 Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with xtaya's data disposal procedures.
11.1 Under the Data Privacy Act of 2012 of the Philippines, you have the following rights in respect of your personal data held by xtaya:
11.2 To exercise any of the above rights, please contact the xtaya Data Privacy Officer using the details in Section 16. xtaya will respond to all verified data rights requests within thirty (30) days of receipt. In complex cases, this period may be extended by a further thirty (30) days, with prior notice to you.
11.3 xtaya may need to verify your identity before processing a data rights request to ensure that personal data is not disclosed to unauthorized parties. You will not be charged a fee for exercising your data rights unless a request is manifestly unfounded or excessive.
12.1 The xtaya platform is strictly intended for persons aged 21 years and above. xtaya does not knowingly collect personal data from persons under the age of 21. If xtaya becomes aware that personal data has been collected from a person under 21, such data will be deleted immediately and the associated account will be closed.
12.2 If you are a parent or guardian and believe that a minor has registered on the xtaya platform or provided personal data to xtaya, please contact us immediately using the details in Section 16 so that we can take prompt corrective action.
13.1 xtaya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:
13.2 While xtaya takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. In the event of a data breach that is likely to result in a risk to your rights and freedoms, xtaya will notify you without undue delay in accordance with applicable Philippine law.
14.1 The xtaya platform may contain links to third-party websites or services for informational purposes. xtaya is not responsible for the privacy practices or content of any third-party website. We encourage you to review the privacy policy of any third-party site you visit. This Policy applies solely to data collected by xtaya through the xtaya platform.
15.1 xtaya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. The date of the most recent revision is displayed at the top of this page.
15.2 Where changes are material, xtaya will notify registered players by email or via an in-platform notification at least fourteen (14) days before the changes take effect. Your continued use of the xtaya platform following the effective date of any amendment constitutes your acknowledgment of the revised Policy.
15.3 We encourage you to review this Policy periodically to stay informed about how xtaya protects your personal data.
16.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by xtaya, please contact our Data Privacy Officer:
16.2 If you are not satisfied with xtaya's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (NPC). Information about how to file a complaint with the NPC is available through the NPC's official government channels.
Your data, your rights. xtaya is committed to upholding your privacy rights under Philippine law. If you ever have concerns about how your data is being handled, our Data Privacy Officer is here to help. Reach us at [email protected] – we aim to respond within 30 days.
Join thousands of Filipino players who trust xtaya for a secure, fair, and transparent gaming experience. GCash deposits, fast withdrawals, all in PHP.