Privacy Policy — taya365e Online Casino

Who We Are and How to Contact Us

taya365e operates the online casino and sports betting platform accessible at taya365e.co, serving Filipino players across the Republic of the Philippines. For the purposes of this Privacy Policy, taya365e acts as the Personal Information Controller (PIC) in respect of the personal data of all registered Players and platform visitors, as defined under the Data Privacy Act of 2012 (Republic Act No. 10173).

If you have questions, concerns, or requests regarding the handling of your personal data by taya365e, you may contact our Data Protection Officer (DPO) at any time through the taya365e customer support team. Support is available 24 hours a day, 7 days a week, on Philippine Standard Time. All data privacy enquiries will be acknowledged within five (5) business days and resolved within fifteen (15) business days in accordance with National Privacy Commission guidelines.

Categories of Personal Data We Collect

taya365e collects personal data from Players and platform visitors through a variety of means, including the account registration process, KYC identity verification, payment processing, gameplay activity, and general platform usage. The categories of personal data we collect are as follows:

taya365e does not collect sensitive personal information as defined under Section 3(l) of the Data Privacy Act (including racial or ethnic origin, health data, or religious beliefs) unless expressly required for regulatory compliance purposes, in which case explicit consent will be sought separately.

How taya365e Uses Your Personal Data

taya365e processes your personal data only for specified, legitimate purposes. The primary purposes for which your data is used are as follows:

• Account Administration: Creating and maintaining your taya365e account, verifying your identity at registration and upon each login, and managing your account settings and preferences;
• Payment Processing: Processing deposits from and withdrawals to your designated GCash, Maya, BPI, BDO, or Metrobank account, maintaining transaction records in PHP, and reconciling payment disputes;
• Gaming Services: Delivering casino games, live dealer tables, and sports betting services, maintaining fairness and game integrity, and recording gameplay outcomes for dispute resolution;
• Regulatory Compliance: Fulfilling KYC, AML (Anti-Money Laundering), and PAGCOR reporting obligations; responding to lawful requests from the National Privacy Commission, PAGCOR, AMLC, and other Philippine regulatory and law enforcement authorities;
• Responsible Gaming: Monitoring account activity for indicators of problem gambling, administering deposit limits and self-exclusion requests, and communicating responsible gaming information to Players;
• Security and Fraud Prevention: Detecting unauthorised account access, identifying duplicate account creation, investigating suspected cheating or collusion, and protecting the taya365e platform from fraudulent activity;
• Customer Support: Handling enquiries, complaints, and escalations submitted via live chat or email, and maintaining records of support interactions for quality assurance;
• Service Improvement: Analysing aggregated, anonymised platform usage data to improve game performance, mobile experience, and withdrawal processing efficiency.

taya365e does not use your personal data for unsolicited direct marketing without your explicit prior consent. Players may opt out of promotional communications at any time through account settings or by contacting customer support.

Legal Basis for Processing

taya365e processes personal data on the following legal bases under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contract Performance: Processing necessary to provide the gaming services you have contracted for by registering a taya365e account and accepting the Terms and Conditions;
• Legal Obligation: Processing required to comply with KYC, AML, PAGCOR regulatory reporting, and National Privacy Commission obligations imposed on taya365e as a licensed gaming operator;
• Legitimate Interest: Processing for fraud detection, platform security, and service improvement, where such interests are not overridden by your fundamental rights and freedoms as a data subject;
• Consent: Processing for optional purposes such as promotional communications and personalised game recommendations, where you have provided clear and unambiguous prior consent. Consent may be withdrawn at any time without affecting the lawfulness of processing prior to withdrawal.

Data Sharing and Disclosure

taya365e does not sell your personal data to third parties. Your personal data may be shared with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements:

• Payment Service Providers: GCash (Mynt – Globe Fintech Innovations, Inc.), PayMaya Philippines, Inc., BPI, BDO, and Metrobank, for the purpose of processing deposits and withdrawals in PHP. taya365e shares only the transaction data necessary to process the specific payment;
• Game Content Providers: JILI, PG Soft, Pragmatic Play, and other certified game studios whose titles appear in the taya365e lobby. Technical session identifiers (not full personal identity) are shared to facilitate game delivery and RTP verification;
• KYC Verification Services: Third-party identity verification providers used to authenticate government-issued Philippine IDs submitted during KYC verification;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and Philippine law enforcement authorities, where disclosure is required by law or lawful order;
• Cloud Infrastructure Providers: Data centre and cloud hosting providers used to operate the taya365e platform, subject to strict data processing agreements and security standards.

Cookies and Tracking Technologies

The taya365e platform uses cookies and similar tracking technologies to deliver a functional and secure experience. The categories of cookies used by taya365e are as follows:

• Strictly Necessary Cookies: Required for core platform functions including session authentication, taya365e login state management, and security token validation. These cannot be disabled without impairing platform functionality;
• Functional Cookies: Used to remember your game preferences, language settings, and display preferences between sessions;
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players navigate and use the taya365e platform, informing product improvement decisions. Individual player identities are not exposed in analytics reports;
• Security Cookies: Used to detect fraudulent login attempts, identify suspicious access patterns, and support the OTP-based two-factor authentication system.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will prevent taya365e login and core platform functionality from operating correctly. taya365e does not use third-party advertising or cross-site tracking cookies.

Data Retention Periods

taya365e retains personal data only for as long as necessary to fulfil the purposes for which it was collected and to comply with applicable legal, regulatory, and contractual obligations. The following retention periods apply:

• Active Account Data: Retained for the duration of the Player's active taya365e account;
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction, in compliance with PAGCOR reporting requirements and the Anti-Money Laundering Act;
• KYC Documents: Retained for a minimum of five (5) years following account closure or the last date of transaction activity, whichever is later;
• Customer Support Records: Retained for two (2) years from the date of last interaction;
• Technical and Security Logs: Retained for ninety (90) days unless required for an active investigation;
• Self-Excluded Account Data: Retained for the duration of the self-exclusion period plus five (5) years to prevent circumvention of the self-exclusion through re-registration.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised. Where anonymisation is applied, the resulting anonymised dataset is no longer considered personal data and may be retained for statistical purposes without a defined expiry.

Security Measures

taya365e implements technical and organisational security measures proportionate to the risk associated with processing personal data in an online gaming environment. Key security measures in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and taya365e servers, including taya365e login credentials, GCash payment data, and support communications;
• Encrypted storage of passwords using industry-standard one-way hashing algorithms. taya365e staff cannot view Player passwords in plaintext at any time;
• SMS-based two-factor authentication (2FA) for new device logins and transactions exceeding defined security thresholds;
• Role-based access controls limiting taya365e staff access to personal data to only those functions required for their specific role;
• Regular security audits and penetration testing conducted by independent third-party security firms;
• Intrusion detection systems and real-time alerting for unauthorised access attempts.

Your Rights as a Data Subject

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by taya365e:

• Right to be Informed: The right to be notified of the purposes for which your data is collected and processed, as set out in this Privacy Policy;
• Right of Access: The right to request a copy of the personal data taya365e holds about you and information about how it is processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data held in your taya365e account;
• Right to Erasure (Right to be Forgotten): The right to request deletion of your personal data where processing is no longer necessary, subject to taya365e's legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, machine-readable format for transfer to another service provider;
• Right to Object: The right to object to processing of your personal data for direct marketing or processing based on legitimate interests;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe taya365e has processed your personal data in violation of the Data Privacy Act.

To exercise any of the above rights, please contact taya365e customer support. All data subject requests will be acknowledged within five (5) business days and actioned within fifteen (15) business days.

Children's Privacy and Age Restriction

taya365e implements age verification checks at account registration and may request government-issued Philippine ID documentation to confirm that all Players meet the 21+ age requirement mandated by PAGCOR regulations governing online gambling in the Philippines.

International Data Transfers

The taya365e platform is operated primarily from infrastructure located within or serving the Republic of the Philippines. In certain circumstances, your personal data may be processed by game content providers or technology partners whose systems are hosted outside the Philippines, including in jurisdictions within Southeast Asia or the European Economic Area.

Where personal data is transferred outside the Philippines, taya365e ensures that appropriate safeguards are in place in accordance with Section 21 of the Data Privacy Act, including the execution of standard contractual clauses or confirmation that the recipient jurisdiction maintains an adequate level of data protection as recognised by the National Privacy Commission.

Updates to This Privacy Policy

taya365e reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, or regulatory guidance. The "Last Updated" date at the top of this document will be revised whenever a material change is made.

For material changes affecting your rights as a data subject or the purposes for which your data is processed, taya365e will notify registered Players via SMS to the mobile number on record or via in-platform notification upon next taya365e login, no fewer than seven (7) calendar days before the revised policy takes effect. Continued use of the taya365e platform following the effective date of a revised Privacy Policy constitutes acceptance of the updated terms.

We encourage all taya365e Players to review this Privacy Policy periodically. If at any time you are not satisfied with how taya365e handles your personal data, you are entitled to contact the National Privacy Commission of the Philippines at privacy.gov.ph to lodge a formal complaint.