Privacy Policy

Phtaya's Privacy Policy — Our commitment to protecting your data

At phtaya, every piece of your information is treated as a trust. We protect your personal data using advanced encryption technology and strict privacy practices. On this page, we explain in clear, simple terms — what information is collected, why it is collected, and how it is kept secure.

Last Updated: January 2026
SSL encrypted
Language: English
Our commitment

Why is your information safe with phtaya?

We don't just make promises — every piece of data is protected through technology and policy

256-bit SSL encryption

All data transfers on phtaya are protected by bank-grade 256-bit SSL encryption. Your payment details and login data are transmitted exclusively through fully encrypted channels.

KYC data secured at the highest level

Your national ID and KYC documents are stored on a separate secured server. Only authorized staff may access them for specific purposes — they are never shared.

never sold to third parties

Phtaya never sells your personal information to third parties or shares it with advertisers. Your data is used solely to improve our services and maintain security.

Restricted Access Policy

Only the relevant team members who need access to your data have it. Every access is logged and regularly audited to prevent any unauthorized use.

regular security audits

Phtaya's systems are regularly audited by independent third-party security experts. Any vulnerabilities are identified and resolved promptly to keep your information safe at all times.

Full control in your hands

You can view, correct, or request deletion of your information at any time. We believe you have the ultimate right over your own data.

Introduction & Scope

Phtaya (https://phtaya.ml) is an internationally licensed online gaming platform. We have been providing entertainment gaming services to millions of players across South Asia, including Bangladesh. This Privacy Policy is designed to clearly explain what information phtaya collects from you, how it is used, and how it is kept secure.

By using our website, mobile app, or any of our services, you are considered to have accepted the terms of this Privacy Policy. Please read this policy carefully before creating an account.

This Privacy Policy is phtaya's Terms and Conditions and Responsible Gaming PolicyOperated in conjunction with

What information do we collect?

Phtaya only collects information that is necessary to provide you with the best possible service. We do not collect any unnecessary data. The various categories of information are detailed below:

Data type Example Collection Time
Identity information Full name, date of birth, nationality Registration & KYC
Contact Information Mobile number, email address At the time of registration
Identity documents NID, passport copy, selfie KYC verification
Financial information BKash/Nagad number, transaction history At the time of payment
Device information IP address, browser type, OS Automatically
Gaming data Game history, bet amounts, session duration During gameplay

We never collect your full card number or bank password. Payment information is processed directly through the payment gateway.

why and how is your information used?

Phtaya is transparent about every reason your data is used. We believe you have the right to know why your information is being used. The primary purposes are outlined below:

  • Your identity information is used to create, verify, and maintain your account
  • financial information is used to securely process deposits and withdrawals
  • KYC data is used to prevent money laundering and fraud
  • Gaming data is analyzed to offer you bonuses and promotions tailored to your preferences
  • device information is used to enhance platform security and user experience
  • gaming patterns are monitored to support responsible gaming
  • contact information is used to send important updates and security notifications
  • Information required to meet legal obligations and report to licensing authorities is retained

Your information is never shared with third parties for advertising or marketing purposes. Marketing communications are sent exclusively through phtaya's own platform.

data sharing and disclosure policy

Phtaya never sells, rents, or trades your personal information. However, there are specific circumstances where limited data may need to be shared, as clearly outlined below:

  • Payment Processor: Only the minimum required information is shared to process transactions via bKash, Nagad, and Rocket
  • Legal authorities: Information may be provided upon a valid court order or lawful request from a licensing authority
  • Fraud Prevention: Relevant information may be shared with security partners in cases of suspicious activity
  • Advertiser: never shared
  • Data Broker: never sold
  • Social Media Platforms: Personal profile information is never shared
data security measures

Phtaya follows industry-leading standards to protect your data. Our security framework operates across multiple layers, so your information remains safe even if one layer is compromised.

  • TLS 1.3 encryption protocol is used for all data transmissions
  • Sensitive data is stored with AES-256 encryption
  • two-factor authentication (2FA) is mandatory for all staff access
  • Servers and databases are kept up to date with regular security patches
  • 24/7 active cybersecurity monitoring team
  • data backups are stored across multiple secure locations
  • annual third-party penetration testing is conducted

If you notice any suspicious activity on your account, please contact our support team immediately. We will take prompt action.

Cookie & Tracking Technology Policy

The phtaya website and app use cookies to enhance your browsing experience. Cookies are small data files stored in your browser. They help remember your login session, save your preferences, and ensure the platform functions properly.

  • Essential cookies: Required for login sessions and security — disabling this will prevent the service from functioning
  • Performance Cookies: helps analyze website performance and errors
  • Preference Cookies: Remembers your language, theme, and other preferences
  • Analytics Cookies: anonymous usage data is collected to improve the platform

You can disable cookies at any time through your browser settings. However, disabling essential cookies will prevent you from logging in or making payments.

Your privacy rights

Phtaya believes every user should have full control over their own information. Your rights are outlined below and can be exercised at any time:

  • Right of access: You may request to see what information we hold about you
  • Right to Rectification: You can request corrections to any inaccurate or outdated information
  • Right to Erasure: you may request the deletion of your data under certain circumstances
  • Right to Restrict Processing: you may request that we stop using your information for specific purposes
  • Right to Portability: You may request your information in a machine-readable format
  • Right to object: you may object to the processing of your data for certain reasons

To exercise any of these rights, please contact our support team. We will respond within 30 business days. Note that we may be required by law to retain certain information.

how long your data is retained

Phtaya does not retain any information longer than necessary. However, certain data must be kept for a specified period due to licensing and legal obligations:

Data type Retention Period Reason
Account information 5 years after account closure Legal obligations
KYC documents 5 years after account closure Licensing Requirements
Transaction History 7 years Financial regulations
Gaming history For the duration the account is active + 2 years Dispute resolution
Session Logs 90 days Security monitoring
Cookie data Up to 30 days Session Management
Protection of data belonging to minors

Phtaya strictly does not provide services to anyone under 18. We do not knowingly collect information from minors. Age verification is mandatory during registration, and identity is confirmed through KYC.

  • age verification is required at registration
  • Date of birth is verified through document submission during the KYC process
  • Accounts found to belong to minors are immediately suspended
  • No data belonging to a minor is retained — it is deleted immediately

If you are aware of a minor using phtaya, please notify our support team immediately.

how Privacy Policy changes are handled

Phtaya may update this Privacy Policy as needed. We will notify you of any significant changes via email or in-app notification before they take effect. The date of the latest update will be displayed at the top of this page.

  • at least 14 days' notice will be given before any major changes take effect
  • continued use of the platform after changes are made will be considered acceptance of the updated policy
  • if you do not accept the updated policy, you may request to close your account
  • we will provide previous versions of the policy upon request
Frequently Asked Questions

Frequently asked questions about the Privacy Policy

No, phtaya never sells your personal information to third parties. We only share limited data with payment processors and when required by law — as detailed in this policy.

Your NID and other KYC documents are stored on a separate secured server using AES-256 encryption. Only authorized staff approved for KYC verification can access them for a limited time. Every access is logged.

You may request that your data be deleted. However, transaction history and KYC data must be retained for a specified period due to legal obligations. Most personal information is deleted after account closure.

We only send you important account-related messages and promotional offers. You can opt out of promotional communications at any time by contacting our support team. We do not share your number with third parties.

Yes. In the event of a data breach, we will notify affected users at their registered email address within 72 hours and provide guidance on the necessary protective measures to take.

For any privacy-related complaints or questions, contact our support team via live chat or email. We will respond within 48 hours. If the issue remains unresolved, you have the right to escalate your complaint to the licensing authority.

Your data is safe — join phtaya today

Play with confidence — trusted security and a transparent privacy policy. Registration takes just 2 minutes.

বাংলা