smtaya Privacy Policy

1. Introduction and Scope

This Privacy Policy (the "Policy") governs the collection, processing, storage, and disclosure of personal information by smtaya (the "Company," "Platform," "we," "us," or "our") in connection with your use of the smtaya online gaming platform located at https://smtaya.cam and all associated services, software, mobile applications, and content (collectively, the "Services").

By accessing the Services, creating an account, or providing any personal information to smtaya, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. This Policy applies to all users, visitors, and customers of the smtaya platform, regardless of geographic location, device, or method of access.

smtaya operates in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, the regulations of the Philippine Amusement and Gaming Corporation (PAGCOR), and international data protection principles including those established by the General Data Protection Regulation (GDPR) where applicable. We are committed to transparency, lawful processing, and respect for your privacy rights.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a smtaya account, make deposits, request withdrawals, or communicate with our customer support team, we collect personal information that you voluntarily provide, including but not limited to:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification numbers (Philippine passport, driver's license, national ID, SSS, TIN)
• Contact Information: Residential address, email address, mobile phone number, and preferred communication methods
• Account Credentials: Username, password, security questions and answers, two-factor authentication settings
• Financial Information: Bank account details, GCash or PayMaya account numbers, payment card information (last four digits), transaction history, deposit and withdrawal records
• Verification Documents: Copies of government-issued identification, proof of address (utility bills, bank statements), selfie photographs for identity verification, proof of payment method ownership
• Communication Records: Content of customer support inquiries, live chat transcripts, email correspondence, feedback, complaints, and survey responses

2.2 Information Collected Automatically

When you access or use the smtaya platform, we automatically collect certain technical and behavioral information through cookies, server logs, and similar tracking technologies:

• Device Information: Device type, operating system, browser type and version, screen resolution, unique device identifiers, mobile network information
• Usage Data: Pages visited, games played, bet amounts, win/loss records, session duration, clickstream data, referring URLs, search queries
• Location Data: IP address, geolocation data (country, region, city), time zone settings. We use geolocation technology to verify that you are physically located in the Philippines as required by PAGCOR regulations
• Connection Data: Internet service provider, connection speed, network latency, timestamp of access

2.3 Information from Third Parties

We may receive information about you from third-party service providers, payment processors, identity verification services, fraud prevention agencies, and credit reference bureaus. This information is used to verify your identity, prevent fraud, process payments, and comply with anti-money laundering (AML) and know-your-customer (KYC) regulations.

3. How We Use Your Information

smtaya processes your personal information for the following lawful purposes, based on contractual necessity, legal obligations, legitimate interests, and your explicit consent:

• Account Management: Creating and maintaining your user account, authenticating your identity, processing login requests, managing account settings and preferences
• Service Provision: Enabling access to gaming services including slots, live casino, fishing games, sports betting, bingo, and other entertainment offerings. Processing bets, calculating payouts, updating account balances
• Payment Processing: Processing deposits and withdrawals through approved payment methods (GCash, PayMaya, bank transfers, over-the-counter cash deposits), verifying payment method ownership, maintaining transaction records
• Regulatory Compliance: Complying with PAGCOR licensing requirements, anti-money laundering (AML) regulations, counter-terrorism financing (CTF) obligations, responsible gaming mandates, age verification requirements, and tax reporting obligations
• Security and Fraud Prevention: Detecting and preventing fraudulent activities, money laundering, bonus abuse, multiple accounts, collusion, use of automated betting software, account takeover, and other prohibited activities. Monitoring transactions for suspicious patterns
• Customer Support: Responding to inquiries, resolving disputes, providing technical assistance, handling complaints, processing refund requests
• Marketing and Communications: Sending promotional offers, bonus notifications, newsletter updates, game announcements, and personalized recommendations (only with your consent, which can be withdrawn at any time)
• Platform Improvement: Analyzing usage patterns, conducting A/B testing, improving user experience, developing new features, optimizing game performance, identifying technical issues
• Legal Obligations: Responding to legal process, court orders, subpoenas, regulatory investigations, and law enforcement requests. Enforcing our Terms and Conditions, protecting our legal rights, preventing illegal activity

4. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds under the Data Privacy Act of 2012:

• Consent: You have provided explicit, informed, and freely given consent for specific processing activities, particularly marketing communications and optional data collection
• Contractual Necessity: Processing is necessary to fulfill our obligations under the Terms and Conditions you agreed to when creating your account
• Legal Obligation: Processing is required to comply with Philippine laws and regulations, including PAGCOR requirements, AML/CTF obligations, tax laws, and data retention mandates
• Legitimate Interests: Processing is necessary for our legitimate business interests, such as fraud prevention, security, platform improvement, and customer service, provided these interests do not override your fundamental rights and freedoms
• Vital Interests: Processing is necessary to protect your vital interests or those of another natural person

5. Data Sharing and Disclosure

smtaya does not sell, rent, or trade your personal information to third parties for their marketing purposes. However, we may share your information with the following categories of recipients under strict confidentiality obligations:

5.1 Service Providers

We engage trusted third-party service providers to perform functions on our behalf, including payment processing (GCash, PayMaya, banks), identity verification, fraud prevention, customer support, email delivery, SMS notifications, data analytics, cloud storage, and IT infrastructure. These providers have access to personal information only as necessary to perform their functions and are contractually obligated to protect your data.

5.2 Gaming Partners

We share limited information with licensed game developers and live casino operators to enable gameplay, verify bets, and ensure game integrity. These partners are bound by confidentiality agreements and data protection obligations.

5.3 Regulatory Authorities

We are required to disclose information to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), tax authorities (Bureau of Internal Revenue), and other government agencies as mandated by law or regulation.

5.4 Legal Process

We may disclose personal information in response to lawful requests from law enforcement agencies, courts, regulatory bodies, or government authorities when required by applicable law, legal process, or to protect the rights, property, and safety of smtaya, our users, or the public.

5.5 Business Transfers

In the event of a merger, acquisition, corporate restructuring, sale of assets, or bankruptcy, your personal information may be transferred to the successor entity, subject to the same privacy protections outlined in this Policy.

6. Data Security Measures

smtaya implements industry-standard technical and organizational security measures to protect your personal information against unauthorized access, disclosure, alteration, destruction, loss, or theft. Our security practices include:

• Encryption: All data transmitted between your device and our servers is encrypted using SSL/TLS protocols. Sensitive data stored in our databases is encrypted at rest using AES-256 encryption
• Access Controls: Personal information is accessible only to authorized personnel who require access to perform their job functions. We employ role-based access controls, multi-factor authentication, and principle of least privilege
• Secure Infrastructure: Our servers are hosted in secure, SOC 2 compliant data centers with physical security controls, redundant systems, and 24/7 monitoring
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and remediate potential weaknesses
• Employee Training: All employees and contractors undergo mandatory data protection and security training and are bound by confidentiality agreements
• Incident Response: We maintain an incident response plan to quickly detect, contain, and remediate security breaches. In the event of a data breach affecting your personal information, we will notify you and the National Privacy Commission as required by law

Despite our security measures, no system is completely secure. You are responsible for maintaining the confidentiality of your account credentials and should notify us immediately if you suspect unauthorized access to your account.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Account Information: Retained for the duration of your account plus seven (7) years after account closure as required by PAGCOR regulations and tax laws
• Transaction Records: Retained for ten (10) years to comply with anti-money laundering record-keeping requirements
• Identity Verification Documents: Retained for seven (7) years after account closure or last transaction
• Communication Records: Retained for three (3) years for customer service quality assurance and dispute resolution
• Marketing Data: Retained until you withdraw consent or request deletion, whichever comes first
• Usage Logs: Retained for one (1) year for security monitoring and platform optimization

After the applicable retention period expires, we securely delete or anonymize your personal information in accordance with data protection best practices. Anonymized data may be retained indefinitely for statistical analysis and research purposes.

8. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Access: You may request a copy of the personal information we hold about you
• Right to Rectification: You may request correction of inaccurate or incomplete personal information
• Right to Erasure: You may request deletion of your personal information, subject to legal retention obligations
• Right to Restrict Processing: You may request that we limit how we use your personal information
• Right to Data Portability: You may request a copy of your personal information in a structured, commonly used, machine-readable format
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal
• Right to Lodge a Complaint: You may file a complaint with the National Privacy Commission if you believe your privacy rights have been violated

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 11 below. We will respond to your request within thirty (30) days or as otherwise required by law. We may request additional information to verify your identity before processing your request.

9. Cookies and Tracking Technologies

smtaya uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. Cookies are small text files stored on your device that help us recognize you on subsequent visits.

9.1 Types of Cookies We Use

• Essential Cookies: Necessary for the platform to function properly, including session management, authentication, and security
• Performance Cookies: Collect information about how you use the platform to help us improve performance and user experience
• Functional Cookies: Remember your preferences, settings, and choices to provide personalized features
• Marketing Cookies: Track your activity across websites to deliver targeted advertising and measure campaign effectiveness (used only with your consent)

You can control cookie settings through your browser preferences. However, disabling essential cookies may affect platform functionality. To opt out of marketing cookies, adjust your account settings or use your browser's cookie management tools.

10. Children's Privacy

The smtaya platform is intended exclusively for individuals twenty-one (21) years of age or older. We do not knowingly collect personal information from minors. If we become aware that we have inadvertently collected information from a person under the age of twenty-one, we will immediately delete such information from our systems and close any associated account. Parents or guardians who believe their child has provided personal information to smtaya should contact us immediately.

11. Changes to This Privacy Policy

smtaya reserves the right to modify, amend, or update this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or business operations. We will notify you of material changes by posting a prominent notice on the platform or sending an email to your registered address. The "Last Updated" date at the beginning of this Policy indicates when the most recent changes were made. Your continued use of the Services after changes become effective constitutes your acceptance of the revised Policy.

12. Contact Information

If you have questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact our Data Protection Officer:

• Data Protection Officer Email: [email protected]
• General Support Email: [email protected]
• Live Chat: Available 24/7 through the website interface
• Response Time: We aim to respond to all privacy inquiries within thirty (30) days

For complaints or concerns that cannot be resolved through our customer support channels, you may file a complaint with the National Privacy Commission (NPC) of the Philippines. Contact information for the NPC can be found at their official website.