Youtaya Privacy Policy – How We
Protect Your Personal Information

When you play at Youtaya, you trust us with some genuinely sensitive information — your name, your ID, your payment details, and your gaming activity. That trust is not taken lightly. The Philippines has some of the clearest data privacy protections in Southeast Asia through RA 10173, and Youtaya's privacy practices are designed not just to meet those standards but to go a step further where possible.

This policy is written in plain language because legal jargon shouldn't be a barrier to understanding your rights. If you read something here that's unclear, our support team — and our Data Protection Officer specifically — are available to explain it in a way that makes sense. We'd rather you understand exactly where you stand than click through a wall of text and remain unsure.

Youtaya processes personal data only for legitimate, specific, and declared purposes. We do not collect more than what is needed for those purposes, and we do not hold onto your data longer than necessary. Those aren't just words — they are the operational standards the Youtaya data team is required to meet.

Youtaya collects personal data in the following categories. We only collect what is necessary for the stated purpose.

Youtaya does not collect sensitive personal information such as health records, religious beliefs, or political affiliations, except where explicitly required by Philippine gaming regulations.

Youtaya collects personal data through the following means:

• Direct submission: Information you provide when you register, complete KYC verification, make a deposit or withdrawal, contact support, or participate in a promotion.
• Automated collection: Technical and usage data collected automatically when you access the Youtaya platform — including IP address, device identifiers, session cookies, and browser data.
• Payment processors: Transaction confirmation data shared by GCash, Maya, and banking partners when you make a deposit or withdrawal. Youtaya does not store full payment credentials — those remain with your payment provider.
• Third-party verification services: KYC and identity verification data from licensed Philippine verification partners, used solely to confirm your identity and age during the KYC process.
• Regulatory sources: In limited circumstances, data from public registries or regulatory lists (such as exclusion registers) as required for gaming licence compliance.

Every piece of data Youtaya collects has a specific, declared purpose. We do not collect data speculatively or for purposes we haven't thought through. Here is a breakdown of why we use each category of data:

• To operate your account: Identity, contact, and financial data are essential to create your account, process transactions, and deliver gaming services to you.
• To verify your identity and comply with KYC requirements: Philippine gaming regulations and the AMLA (Anti-Money Laundering Act) require Youtaya to verify the identity of all players before processing withdrawals.
• To process payments: Financial data is used to facilitate deposits and withdrawals through your chosen Philippine payment method. All transactions are processed in Philippine pesos (₱).
• To comply with legal obligations: Youtaya is required by Philippine law to retain certain records and, in specific circumstances, to report information to regulatory authorities including the AMLC.
• To prevent fraud and ensure platform security: Technical and gaming activity data is used to detect unusual patterns that may indicate account compromise, bonus abuse, or money laundering activity.
• To support responsible gaming: Gaming activity data is monitored to identify players who may be exhibiting signs of problematic gambling, so that Youtaya can proactively reach out and offer support tools.
• To communicate with you: Contact data is used to send transaction confirmations, account notifications, and — where you have opted in — promotional communications. You can opt out of marketing emails at any time.
• To improve Youtaya's platform: Anonymised and aggregated usage data helps the Youtaya product team understand how players use the platform and where improvements can be made.

Youtaya does not sell, rent, or trade your personal data to any third party for commercial or marketing purposes. Ever. Data sharing only occurs in the following limited and necessary circumstances:

• Payment service providers: GCash, Maya, GrabPay, Coins.ph, BDO, BPI, UnionBank, and card networks receive the minimum transaction data required to process your deposit or withdrawal. These providers operate under their own privacy and security standards.
• KYC and identity verification partners: Licensed verification providers receive your identity documents to process KYC checks. These partners are bound by strict data processing agreements and Philippine law.
• Game providers: Your in-session gaming data (bets, outcomes) is shared with game providers such as JILI to operate the games. Game providers do not receive your identity or payment data.
• Regulatory authorities: Youtaya is legally required to share certain data with Philippine gaming regulators and, under AMLA, the Anti-Money Laundering Council (AMLC) if triggered by mandatory reporting thresholds.
• Law enforcement and courts: If required by a valid court order, warrant, or directive from a Philippine government authority, Youtaya will provide requested data in accordance with due legal process.
• IT and platform service providers: Hosting, cybersecurity, and platform infrastructure providers who process data on Youtaya's behalf are bound by data processing agreements that restrict their use of your information.

Youtaya uses cookies and similar tracking technologies to keep your session active, remember your preferences, and monitor platform performance. Here's a plain breakdown of the types of cookies used:

Youtaya does not use third-party advertising cookies or retargeting pixels. You can manage or block non-essential cookies through your browser settings. Note that disabling essential or security cookies may affect your ability to use the platform.

All personal data collected by Youtaya is stored on secure servers. Data in transit between your device and Youtaya's servers is protected by 256-bit SSL/TLS encryption — the same standard used by Philippine banks. Data at rest is encrypted using AES-256 encryption protocols.

• Access to personal data within Youtaya is restricted on a strict need-to-know basis. Staff who do not require access to player data for their role cannot access it.
• All staff with access to personal data complete mandatory data privacy training in accordance with NPC guidelines.
• Youtaya conducts regular security audits and vulnerability assessments of its platform infrastructure.
• In the event of a personal data breach that poses a real risk to affected players, Youtaya will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay as required by RA 10173.

While Youtaya takes all reasonable steps to protect your data, no online system is 100% immune to security risks. You also have a role to play — keeping your Youtaya password secure and logging out from shared devices goes a long way toward protecting your own account.

Youtaya retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law, whichever is longer. Here is a general guide:

• Active account data: Retained for the duration of your account's active status, plus a minimum of five years after account closure to comply with AMLA and gaming regulatory record-keeping requirements.
• KYC documents: Retained for a minimum of five years after account closure, in line with Philippine AMLA regulations.
• Financial transaction records: Retained for a minimum of five years, consistent with AMLA record-keeping obligations.
• Technical and usage data: Generally retained for 12 months in identifiable form, after which it may be retained in anonymised, aggregated form indefinitely for analytical purposes.
• Support communications: Retained for three years following the resolution of the relevant issue, to support dispute resolution and regulatory reporting if required.

When personal data is no longer required, it is securely deleted or anonymised in accordance with NPC-approved data disposal procedures.

Under the Data Privacy Act of 2012 (RA 10173), Filipino players have the following rights with respect to their personal data held by Youtaya. These rights can be exercised by contacting our Data Protection Officer using the details in Section 12.

Youtaya will respond to valid data rights requests within 30 days. Some requests may take longer if they require extensive record retrieval or involve complex legal considerations. We will keep you informed of progress throughout.

Youtaya is strictly for players aged 21 and above. The platform does not knowingly collect personal data from anyone under the age of 21. Age verification is a mandatory step during account registration and KYC.

If Youtaya discovers that personal data has been collected from a person under 21, the account will be immediately closed, all funds will be returned to the original payment source after applicable verification, and all data will be deleted in accordance with our data disposal procedures.

Youtaya reviews and updates this Privacy Policy periodically to reflect changes in Philippine law, NPC guidance, or our data practices. When material changes are made, the updated policy will be published on this page with a revised "Last Updated" date, and we will notify registered players via their registered email address.

Continued use of Youtaya after a policy update constitutes acceptance of the revised terms. If you disagree with any update, you may request account closure before the effective date of the change. Your data rights as described in Section 9 remain unaffected by account closure.

For any questions about this Privacy Policy, or to exercise any of your data privacy rights, you can contact Youtaya's Data Protection Officer (DPO) directly. The DPO is responsible for overseeing Youtaya's compliance with the Data Privacy Act and NPC regulations.

You can also find answers to common privacy questions on the FAQ page. For concerns about responsible gaming and your gaming activity data, visit the Responsible Gaming page. For the full scope of your legal relationship with Youtaya, read our Terms and Conditions.