Privacy Policy

1. Introduction

Welcome to the c9taya Privacy Policy. This document outlines how c9taya ("we," "us," "our," or "the Platform") collects, uses, processes, stores, discloses, and protects your personal information when you access or use our online casino and sports betting services. By creating an account, accessing our website, or using any of our services, you acknowledge that you have read, understood, and agreed to the practices described in this Privacy Policy.

c9taya is committed to compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and all applicable Philippine data protection regulations. We recognize that your privacy is important, and we take our responsibility to protect your personal data seriously. This Privacy Policy applies to all users of the c9taya platform, including visitors, registered players, and former account holders.

2. Information We Collect

c9taya collects various types of information to provide you with a secure, personalized, and compliant gaming experience. The categories of information we collect include:

2.1 Personal Information You Provide

When you register an account with c9taya, you are required to provide certain personal information, including:

• Identity Information: Full legal name, date of birth, gender, nationality, and government-issued identification number (e.g., passport, driver's license, or national ID).
• Contact Information: Email address, mobile phone number, residential address, and postal code.
• Account Credentials: Username, password, and security questions/answers.
• Financial Information: Payment method details, including GCash account, Maya account, bank account numbers, and transaction history. We do not store full credit card numbers or CVV codes; payment processing is handled by certified third-party payment processors.
• Verification Documents: Copies of government-issued ID, proof of address (utility bills, bank statements), and proof of payment method ownership, as required for KYC (Know Your Customer) compliance.

2.2 Information Automatically Collected

When you use the c9taya platform, we automatically collect certain technical and behavioral information, including:

• Device Information: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers (such as IMEI or advertising ID).
• Usage Data: Pages visited, games played, time spent on the platform, clickstream data, referral source, and navigation patterns.
• Location Data: Approximate geographic location based on your IP address or, with your consent, precise location data from your device's GPS (used to ensure compliance with geographic restrictions on online gambling).
• Cookies and Tracking Technologies: Information collected through cookies, web beacons, pixel tags, and similar technologies to improve your experience, remember your preferences, and analyze platform usage. For more details, see Section 8 (Cookies and Tracking Technologies).

2.3 Information from Third Parties

We may receive information about you from third-party sources, including:

• Payment Providers: Information from GCash, Maya, banks, and other payment processors to verify transactions and prevent fraud.
• Identity Verification Services: Data from third-party KYC and AML (Anti-Money Laundering) verification services to confirm your identity and comply with regulatory requirements.
• Marketing Partners: Information from affiliate partners or referral sources, if you accessed c9taya through a promotional link or referral code.
• Public Databases: Information from publicly available sources, such as sanctions lists, fraud databases, and politically exposed persons (PEP) lists, used to ensure regulatory compliance.

3. How We Use Your Information

c9taya uses your personal information for the following purposes:

3.1 Account Management and Service Provision

• To create, maintain, and manage your c9taya account.
• To process your deposits, withdrawals, and other financial transactions.
• To provide access to games, sports betting, and other platform features.
• To verify your identity and comply with KYC and AML regulations.
• To respond to your inquiries, customer support requests, and complaints.

3.2 Legal and Regulatory Compliance

• To comply with applicable Philippine laws and regulations, including the Data Privacy Act, PAGCOR regulations, and anti-money laundering laws.
• To verify that you meet the legal age requirement (21+) for online gambling in the Philippines.
• To prevent fraud, money laundering, terrorist financing, and other illegal activities.
• To cooperate with law enforcement agencies, regulatory authorities, and legal processes (such as subpoenas or court orders).

3.3 Platform Security and Fraud Prevention

• To monitor and analyze platform usage to detect and prevent cheating, collusion, bonus abuse, and other fraudulent behavior.
• To protect the security and integrity of the c9taya platform and its users.
• To investigate and resolve disputes, technical issues, and security incidents.
• To maintain audit logs and records as required by gaming regulations.

3.4 Marketing and Communications

• To send you promotional offers, bonuses, newsletters, and updates about c9taya services (with your consent, where required by law).
• To personalize your experience on the platform, including recommending games and offers based on your preferences and gaming history.
• To conduct surveys, contests, and promotional campaigns.
• To send transactional communications, such as account notifications, deposit confirmations, and withdrawal updates.

3.5 Analytics and Improvement

• To analyze platform usage, player behavior, and game performance to improve our services.
• To test new features, conduct A/B testing, and optimize the user experience.
• To generate aggregated, anonymized data for statistical analysis and business intelligence.

4. Legal Basis for Processing (Data Privacy Act Compliance)

Under the Data Privacy Act of 2012, c9taya processes your personal information based on the following legal grounds:

• Consent: When you provide explicit consent for specific processing activities, such as receiving marketing communications or using location services.
• Contract Performance: To fulfill our contractual obligations under the Terms & Conditions, including providing gaming services, processing transactions, and managing your account.
• Legal Obligation: To comply with Philippine laws and regulations, including KYC, AML, responsible gaming requirements, and PAGCOR licensing conditions.
• Legitimate Interests: To protect the security and integrity of the platform, prevent fraud, improve services, and ensure a safe gaming environment for all users (provided that such interests do not override your fundamental rights and freedoms).

5. How We Share Your Information

c9taya does not sell, rent, or trade your personal information to third parties for their own marketing purposes. However, we may share your information with the following categories of recipients:

5.1 Service Providers and Business Partners

We share your information with trusted third-party service providers who assist us in operating the c9taya platform, including:

• Payment Processors: GCash, Maya, banks, and other payment service providers that process deposits and withdrawals on your behalf.
• Game Providers: Third-party game developers and suppliers (such as JILI, Pragmatic Play, PG Soft, and Evolution Gaming) who provide the games available on c9taya.
• Identity Verification Services: KYC and AML compliance providers that verify your identity and screen against sanctions lists.
• Customer Support Platforms: Live chat and customer service software providers that help us respond to your inquiries.
• Cloud Hosting and IT Services: Infrastructure providers that host our servers, databases, and data storage systems.
• Marketing and Analytics Services: Tools and platforms that help us analyze usage data, run marketing campaigns, and measure campaign effectiveness.

All service providers are required to protect your information in accordance with this Privacy Policy and applicable data protection laws. They may only use your information as necessary to perform services on our behalf and are prohibited from using it for their own purposes.

5.2 Regulatory Authorities and Law Enforcement

We may disclose your information to Philippine regulatory authorities (such as PAGCOR), law enforcement agencies, courts, and government bodies when required by law or when we believe disclosure is necessary to:

• Comply with legal obligations, court orders, subpoenas, or regulatory requests.
• Investigate, prevent, or take action regarding suspected fraud, illegal activity, or violations of our Terms & Conditions.
• Protect the rights, property, or safety of c9taya, our users, or the public.

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your information may be transferred to the acquiring entity. You will be notified of any such change via email or a prominent notice on the c9taya platform, and the new entity will continue to be bound by this Privacy Policy (or an equivalent policy).

6. Data Security

c9taya employs industry-standard security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. Our security practices include:

• Encryption: All data transmitted between your device and c9taya servers is protected using 256-bit SSL (Secure Socket Layer) encryption, the same technology used by major banks.
• Secure Storage: Personal information is stored on secure servers with restricted access. Payment card information is tokenized and not stored on our servers.
• Access Controls: Access to personal information is limited to authorized personnel who require it to perform their job functions. All employees are bound by confidentiality agreements.
• Regular Audits: We conduct regular security audits, vulnerability assessments, and penetration testing to identify and address potential security risks.
• Incident Response: In the event of a data breach, we have procedures in place to respond promptly, notify affected users, and report the incident to relevant authorities as required by law.

While we take all reasonable steps to protect your information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

7. Data Retention

c9taya retains your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods include:

• Active Accounts: Personal information is retained for the duration of your account's active status.
• Closed Accounts: After account closure, certain information (such as transaction records, KYC documents, and account activity logs) is retained for a minimum of five (5) years to comply with PAGCOR regulations and anti-money laundering laws.
• Marketing Data: If you opt out of marketing communications, your contact information will be retained only to honor your opt-out request and will not be used for further marketing purposes.
• Legal Obligations: Information may be retained longer if required by law, regulatory request, or ongoing legal proceedings.

After the retention period expires, personal information is securely deleted or anonymized so that it can no longer be associated with you.

8. Cookies and Tracking Technologies

c9taya uses cookies, web beacons, pixel tags, and similar tracking technologies to enhance your experience, analyze platform usage, and deliver personalized content. A cookie is a small text file stored on your device that helps us recognize you on subsequent visits and remember your preferences.

Types of Cookies We Use:

• Essential Cookies: Necessary for the platform to function properly, including session management and security features. These cookies cannot be disabled.
• Performance Cookies: Collect anonymous data on how users interact with the platform, helping us improve performance and user experience.
• Functional Cookies: Remember your preferences (such as language settings) and personalize your experience.
• Advertising Cookies: Used to deliver relevant ads and measure the effectiveness of marketing campaigns. These cookies may track your activity across different websites.

You can manage or disable cookies through your browser settings. However, disabling certain cookies may affect the functionality of the c9taya platform. For more information about cookies and how to control them, visit your browser's help section.

9. Your Rights Under the Data Privacy Act

As a data subject under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Access: You have the right to request access to the personal information we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete information.
• Right to Erasure: You may request deletion of your personal information, subject to legal and regulatory retention requirements.
• Right to Object: You may object to the processing of your information for marketing purposes or other specific uses.
• Right to Data Portability: You may request a copy of your information in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw your consent at any time (though this may affect your ability to use certain services).
• Right to Lodge a Complaint: You have the right to file a complaint with the National Privacy Commission if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer using the contact information provided in Section 12.

10. Third-Party Links

The c9taya platform may contain links to third-party websites, services, or applications (such as game providers, payment processors, or social media platforms). This Privacy Policy applies only to c9taya. We are not responsible for the privacy practices of third-party sites, and we encourage you to review their privacy policies before providing any personal information.

11. Children's Privacy

c9taya is intended exclusively for users aged 21 and above. We do not knowingly collect personal information from individuals under the age of 21. If we become aware that we have inadvertently collected information from a minor, we will take immediate steps to delete such information and close the associated account. Parents or guardians who believe that a minor has provided information to c9taya should contact us immediately.

12. Changes to This Privacy Policy

c9taya reserves the right to update or modify this Privacy Policy at any time to reflect changes in our practices, legal requirements, or business operations. Any changes will be effective immediately upon posting to this page, and the "Last Updated" date at the top of this document will be revised accordingly. We encourage you to review this Privacy Policy periodically. Continued use of the c9taya platform following any changes constitutes your acceptance of the updated policy.

13. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or how c9taya handles your personal information, please contact our Data Protection Officer:

Email: [email protected]
Live Chat: Available 24/7 on the c9taya Platform
Mailing Address: c9taya Data Protection Officer, Philippines

For complaints or concerns about data privacy, you may also contact the National Privacy Commission of the Philippines.