Data Protection
cataya is committed to protecting the privacy and personal data of every registered player on our platform. This Privacy Policy explains what data cataya collects from you, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have over your own information under Philippine data protection law.
Privacy at a Glance
These cards summarize the most important aspects of cataya's approach to data privacy. They are provided as a quick reference only — the full legal text of this Privacy Policy governs in all cases.
cataya collects personal data necessary to operate a licensed online gaming platform — including your name, date of birth, address, contact details, payment information, device data, and gameplay records. We do not collect data that is not reasonably necessary for these purposes.
cataya uses your data primarily to operate your account, process payments, verify your identity, fulfill regulatory obligations, prevent fraud, provide customer support, and — where you have consented — send you relevant promotional communications about cataya games and offers.
cataya shares your data only with trusted service providers necessary to operate our platform — payment processors, KYC verification providers, game software suppliers, and fraud prevention partners. We do not sell your personal data to third parties for marketing purposes.
cataya employs industry-standard security measures to protect your personal data — 256-bit SSL encryption, access controls, regular security audits, and staff training on data handling. Our infrastructure is designed to prevent unauthorized access, disclosure, alteration, or destruction of your personal information.
cataya retains your personal data for the period necessary to fulfill the purposes described in this Policy, and for such additional periods as are required by applicable law — including Philippine anti-money laundering regulations, which mandate minimum retention periods for financial transaction records.
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173), you have the right to be informed about, access, correct, and in certain circumstances request deletion of your personal data held by cataya. You also have the right to object to certain types of data processing and to lodge a complaint with the National Privacy Commission.
This Privacy Policy ("Policy") is issued by cataya ("cataya," "we," "us," "our") and applies to all personal data collected, processed, stored, and used in connection with your registration, access to, and use of the cataya online gaming platform at cataya.one (the "Platform"), including any associated sub-domains, applications, or digital services operated by cataya.
cataya respects your right to privacy and is committed to handling your personal data responsibly, transparently, and in full compliance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and other applicable data protection laws of the Republic of the Philippines.
By registering an account or using any cataya service, you acknowledge that you have read and understood this Privacy Policy and that you consent to the collection and use of your personal data as described herein. If you do not agree with any aspect of this Policy, you should not create a cataya account or access the Platform.
This Policy should be read alongside cataya's Terms and Conditions and Responsible Gaming Policy, all of which form part of your agreement with cataya. Links to these documents are available in the footer of every cataya page.
For the purposes of the Philippine Data Privacy Act of 2012 and applicable data protection legislation, cataya is the personal information controller responsible for your personal data collected through the Platform.
cataya operates under the oversight of PAGCOR (the Philippine Amusement and Gaming Corporation) and processes personal data in accordance with its obligations as a regulated gaming operator in the Philippines. cataya has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection law. Contact details for cataya's DPO are provided in Section 17 of this Policy.
cataya collects and processes the following categories of personal data in connection with the operation of the Platform and the provision of gaming services to registered players:
3.1 Identity and Registration Data
3.2 Contact Data
3.3 Financial and Payment Data
3.4 Gaming and Activity Data
3.5 Technical and Device Data
cataya does not collect sensitive personal information as defined under the Philippine Data Privacy Act (such as health data, religious beliefs, or political affiliations) except where specifically required for regulatory or responsible gaming compliance purposes, in which case such collection will be clearly identified and separately consented to.
cataya collects personal data through the following mechanisms:
cataya will always identify the purpose for which data is being collected at the point of collection. We will not collect personal data beyond what is reasonably necessary for the stated purpose.
cataya processes your personal data for the following purposes:
| Purpose | Data Used |
|---|---|
| Account registration and management | Identity data, contact data |
| KYC identity and age verification (21+ compliance) | Identity documents, date of birth, selfie/photograph |
| Processing deposits and withdrawals | Financial/payment data, identity data |
| Fraud prevention and anti-money laundering compliance | Identity data, financial data, device data, activity data |
| Regulatory reporting to PAGCOR and other authorities | Identity data, financial data, activity data |
| Provision of gaming services and account features | Gaming and activity data, device data |
| Customer support and complaint handling | Identity data, contact data, activity data |
| Responsible gaming monitoring and tool provision | Activity data, financial data, contact data |
| Platform security and abuse prevention | Device data, activity data, IP address |
| Promotional communications (with your consent) | Contact data, activity data, preferences |
| Platform improvement and analytics | Anonymized or aggregated activity and device data |
cataya processes your personal data on the following legal bases as recognized under the Philippine Data Privacy Act of 2012:
Where cataya relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawal of consent may in some cases limit cataya's ability to provide you with certain services.
cataya does not sell, rent, or commercially exploit your personal data to unaffiliated third parties. cataya may share your personal data with the following categories of third parties, strictly for the purposes described in this Policy:
7.1 Service Providers and Data Processors
cataya engages trusted third-party service providers who process personal data on cataya's behalf and under cataya's instructions. These include:
All third-party processors engaged by cataya are required to maintain appropriate technical and organizational security measures and to process personal data only in accordance with cataya's documented instructions.
7.2 Regulatory and Law Enforcement Authorities
cataya may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), law enforcement agencies, and other competent Philippine government authorities where cataya is required to do so by applicable law, court order, or regulatory instruction. Such disclosures will be made only to the extent required and will be documented in cataya's compliance records.
7.3 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of all or part of cataya's business, your personal data may be transferred to the acquiring or successor entity as part of that transaction, subject to the same data protection standards as described in this Policy. cataya will notify affected players of any such transfer in advance where required by law.
cataya will never share your personal data with third-party advertisers, data brokers, or marketing networks without your explicit prior consent. Promotional communications from cataya are sent only by cataya directly.
Some of cataya's third-party service providers — particularly game software suppliers and certain platform technology partners — may be located outside the Philippines and may process personal data in jurisdictions outside the Philippines in connection with the provision of their services to cataya.
Where personal data is transferred outside the Philippines, cataya ensures that such transfers are carried out in compliance with the Philippine Data Privacy Act of 2012 and applicable NPC regulations, including by entering into appropriate contractual arrangements with data recipients and, where applicable, by ensuring the existence of adequate data protection standards in the recipient jurisdiction.
cataya will not transfer personal data to jurisdictions that do not provide an adequate level of data protection without implementing appropriate safeguards, such as standard contractual clauses or equivalent data transfer mechanisms.
cataya retains your personal data for the period necessary to fulfill the purposes for which it was collected, and for such additional periods as are required or permitted by applicable Philippine law.
The following retention guidelines apply to the primary categories of personal data held by cataya:
At the end of the applicable retention period, cataya will securely delete or anonymize your personal data in accordance with cataya's data disposal procedures.
cataya uses cookies and similar tracking technologies on the Platform to enhance the player experience, ensure Platform functionality, analyze usage patterns, and support fraud prevention measures. The following types of cookies are used by cataya:
10.1 Strictly Necessary Cookies
These cookies are essential for the operation of the cataya Platform and cannot be disabled. They enable core functions such as session management, authentication (cataya login state), security controls, and load balancing. These cookies do not collect personally identifiable information.
10.2 Functional Cookies
Functional cookies allow cataya to remember your preferences and settings across sessions — such as your preferred language, responsible gaming settings, and game lobby filter configurations — to provide a more personalized and consistent experience on the cataya Platform.
10.3 Analytics Cookies
cataya uses analytics cookies to collect aggregated, anonymized data on how players interact with the Platform — including pages visited, features used, session duration, and error reports. This data is used to improve Platform functionality and the overall cataya player experience. Analytics data is not used to identify individual players.
10.4 Managing Cookie Preferences
You may configure your browser to refuse or delete cookies. However, disabling strictly necessary cookies may impair your ability to use certain features of the cataya Platform, including the login function and game sessions. Instructions for managing cookies are available in the help documentation for your browser of choice.
cataya does not use third-party advertising cookies or cross-site tracking cookies. All cookies used by cataya are strictly limited to the purposes described in this Policy.
Under the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, you have the following rights with respect to your personal data held by cataya:
You have the right to be informed whether cataya processes your personal data, and to receive clear and understandable information about the data collected, the purposes for processing, and your rights in relation to that data. This Privacy Policy constitutes cataya's exercise of this obligation.
You have the right to request access to the personal data cataya holds about you, including a copy of the data, the purposes for which it is being processed, and any third parties to whom it has been disclosed. Access requests can be submitted to cataya's Data Protection Officer using the contact details in Section 17.
You have the right to request correction of any inaccurate or incomplete personal data held by cataya. You may update many of your account details directly through your cataya account settings. For corrections that cannot be made self-service, please contact cataya's support team or Data Protection Officer.
You have the right to request deletion of your personal data held by cataya, subject to certain exceptions — including where cataya is required to retain data by applicable law (such as anti-money laundering retention obligations) or where retention is necessary to protect cataya's legitimate legal interests. Requests for erasure will be assessed on a case-by-case basis.
You have the right to object to cataya's processing of your personal data where that processing is based on cataya's legitimate interests, or where your data is being used for direct marketing purposes. Objection to legitimate-interest processing will be considered in light of cataya's legal obligations and the specific circumstances of the objection.
Where cataya processes your personal data by automated means and on the basis of your consent or for the performance of a contract, you have the right to receive your personal data in a structured, commonly used, and machine-readable format, or to have it transmitted directly to another data controller where technically feasible.
If you believe that cataya has processed your personal data in violation of the Philippine Data Privacy Act, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. cataya will cooperate fully with any NPC investigation or inquiry arising from a player complaint.
To exercise any of the rights described above, please submit a written request to cataya's Data Protection Officer using the contact details provided in Section 17 of this Policy. cataya will acknowledge all rights requests within 72 hours and will provide a substantive response within thirty (30) calendar days of receipt, subject to any extension permitted under applicable law.
cataya is strictly an adults-only platform. The minimum age for registration and use of all cataya gaming services is 21 years, in accordance with applicable Philippine gaming regulations and the legal minimum gambling age in the Philippines.
cataya does not knowingly collect or process personal data from individuals under the age of 21. Age verification checks are conducted at the point of registration and as part of the KYC process. Where cataya discovers or reasonably suspects that personal data has been collected from a person under the age of 21, cataya will immediately suspend the account, delete all associated personal data, and report the matter to the relevant regulatory authority where required.
Parents and guardians who believe that a minor may have registered a cataya account or provided personal data to cataya should contact our support team immediately via the contact details in Section 17. cataya will investigate and take appropriate action promptly.
cataya may send you promotional communications about cataya games, bonuses, and offers where you have given your consent to receive such communications at the point of registration or through your account preferences settings.
Marketing communications from cataya may be sent via email or SMS to the contact details registered on your cataya account. cataya will not send unsolicited marketing communications to individuals who have not consented to receive them.
You may withdraw your consent to receive cataya marketing communications at any time by:
Withdrawal of consent to marketing communications will not affect your ability to receive transactional communications from cataya — such as deposit confirmations, withdrawal notifications, account security alerts, and KYC verification requests — which are sent as a necessary part of operating your cataya account and do not require separate consent.
cataya implements appropriate technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:
While cataya takes its data security obligations seriously and employs industry-standard safeguards, no online platform can guarantee absolute security. You also have a responsibility to protect your cataya account — please keep your login credentials confidential, enable two-factor authentication, and notify cataya immediately if you suspect unauthorized access to your account.
The cataya Platform may contain links to third-party websites, payment platforms, or services that are not operated by cataya. Where you click on such a link and leave the cataya Platform, this Privacy Policy ceases to apply. cataya has no control over and accepts no responsibility for the privacy practices or content of third-party websites.
cataya recommends that you review the privacy policy of any third-party website or service you visit in connection with your cataya gaming activity, including the privacy practices of payment providers such as GCash and Maya, which operate under their own separate privacy frameworks.
cataya reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory guidance, cataya's data processing practices, or the structure of the cataya Platform. Any material changes to this Policy will be communicated to registered players via email notification and/or in-platform notification prior to the changes taking effect.
The date of the most recent revision is stated at the top of this page under "Last Reviewed." Continued use of the cataya Platform following the effective date of any updated Privacy Policy constitutes your acknowledgement of the revised Policy. If you do not accept a revised Privacy Policy, you should discontinue use of the Platform and may request account closure by contacting cataya's support team.
cataya encourages all registered players to review this Privacy Policy periodically to remain informed about how cataya manages and protects their personal data.
If you have any questions, concerns, or requests regarding this Privacy Policy or cataya's handling of your personal data, or if you wish to exercise any of your data subject rights as described in Section 11, please contact cataya's Data Protection Officer using the following details:
Data Protection Officer: cataya DPO — Privacy & Compliance
Email: [email protected]
Live Chat: Available on cataya.one — 24/7, average response 3–5 minutes
Response Time: Acknowledgement within 72 hours; substantive response within 30 calendar days
All data subject rights requests and privacy complaints should be submitted in writing via email to ensure a complete and documented response trail. cataya's support team also includes Filipino-speaking agents who can assist you with privacy queries in both English and Tagalog.
If you are not satisfied with cataya's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). Information on how to file an NPC complaint is available on the NPC's official website.
Your Data Is Safe With cataya
cataya is a PAGCOR-regulated platform built with Filipino players in mind — secure, transparent, and committed to handling your personal data responsibly at every step.
🔞 21+ only. Real-money gaming. Play responsibly. PAGCOR-regulated.