taya0 Privacy Policy

1 About This Privacy Policy

taya0 is committed to protecting the privacy and personal data of every Filipino player who registers on or visits the taya0 platform. This Privacy Policy has been prepared in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "the DPA") and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines.

This document applies to all personal data collected through the taya0 website, mobile interface, customer support channels, and any other point of interaction between you and the taya0 platform. It covers data collected both from registered account holders and from unregistered visitors who browse the Platform.

This Privacy Policy should be read together with taya0's Terms & Conditions, which are available at Terms & Conditions, and any game-specific or promotion-specific data notices published on the Platform from time to time.

2 Personal Data We Collect

taya0 collects only the personal data that is necessary and proportionate to the purposes outlined in this Privacy Policy. The categories of personal data we collect include the following:

taya0 does not intentionally collect sensitive personal data (as defined under the DPA, such as health information, religious beliefs, or political affiliations) unless directly relevant to a responsible gaming or self-exclusion request, in which case explicit consent will be sought.

3 How We Collect Your Data

taya0 collects personal data through the following channels and methods:

• Direct interactions: Data you provide when registering an account, completing identity verification, making a deposit or withdrawal, contacting customer support, or submitting responsible gaming requests.
• Automated technologies: Data collected automatically when you access the taya0 Platform, including through cookies, server logs, pixel tags, and similar tracking mechanisms as described further in Section 7.
• Third-party service providers: Data received from identity verification agencies, payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank), fraud prevention services, and analytics providers engaged by taya0 to operate the Platform.
• Regulatory and law enforcement sources: Data received from PAGCOR, the Anti-Money Laundering Council (AMLC), or other Philippine government authorities in connection with legal or compliance obligations.

taya0 does not purchase personal data lists from third-party data brokers or marketing companies. All data collected by taya0 originates from your direct interaction with the Platform or from service providers engaged to facilitate that interaction.

4 How We Use Your Personal Data

taya0 uses the personal data it collects for the following purposes:

• Account registration and management: Creating and maintaining your taya0 account, verifying your identity and age (21+ requirement), and communicating essential account information.
• Platform operation: Processing bets and wagers, crediting winnings, processing deposits and withdrawals, and providing access to all games and features available on the taya0 platform.
• Regulatory compliance: Meeting taya0's obligations under the Data Privacy Act (RA 10173), the Anti-Money Laundering Act (AMLA), PAGCOR regulations, and other applicable Philippine law, including mandatory record-keeping and reporting.
• Fraud and security: Detecting, investigating, and preventing fraudulent transactions, money laundering, account takeovers, and other prohibited activities as described in the Terms & Conditions.
• Responsible gaming: Monitoring gameplay patterns to identify potential problem gambling indicators, administering deposit limits, loss limits, reality checks, and self-exclusion tools, and fulfilling our duty of care to Filipino players.
• Customer support: Responding to your enquiries, complaints, and support requests; resolving disputes; and maintaining records of interactions for quality assurance purposes.
• Platform improvement: Analysing usage patterns to improve the user experience, fix bugs, develop new features, and optimise game offerings relevant to the Philippine market.
• Marketing communications: Sending you promotional offers, bonuses, and platform updates via email or in-platform notifications, where you have provided consent or where permitted under applicable law. You may opt out of marketing communications at any time.

5 Legal Basis for Processing

Under the Philippine Data Privacy Act of 2012, taya0 is required to have a lawful basis for each instance of personal data processing. The legal bases upon which taya0 relies are as follows:

• Contractual necessity: Processing required to perform taya0's obligations under the Terms & Conditions agreed to upon account registration — including account creation, game access, payment processing, and customer support.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR regulatory requirements, AML/CFT obligations under AMLA, and data retention mandates under the DPA.
• Legitimate interests: Processing necessary for taya0's legitimate business interests, including fraud prevention, platform security, responsible gaming monitoring, and internal analytics, where these interests are not overridden by your fundamental privacy rights.
• Consent: Processing based on your freely given, specific, informed, and unambiguous consent — primarily for optional marketing communications and for any processing of sensitive personal data related to responsible gaming.

Where taya0 relies on your consent as the legal basis for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Withdrawal of consent for marketing communications can be done via the unsubscribe link in any marketing email or by contacting taya0 support.

6 Sharing Your Personal Data

taya0 does not sell, rent, or commercially transfer your personal data to any third party. taya0 shares your personal data only in the following limited circumstances:

• Service providers: Third-party companies engaged by taya0 to provide specific operational services, including payment processors (GCash, PayMaya, Visa/Mastercard, Philippine banks), identity verification services, KYC/AML screening providers, cloud hosting infrastructure providers, and customer support tools. These service providers are contractually bound to process your data only on taya0's instructions and in accordance with the DPA.
• Regulatory and law enforcement authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where taya0 is legally required to disclose personal data or where disclosure is necessary to investigate suspected criminal activity or regulatory breaches.
• Game content providers: Licensed game studios whose titles are made available on the taya0 platform may receive anonymised or aggregated gameplay data for purposes of game performance monitoring. Personal identity data is not shared with game providers unless required for a specific live dealer service.
• Business transfers: In the event of a merger, acquisition, restructuring, or sale of taya0's business assets, your personal data may be transferred to the acquiring entity, subject to the same data protection obligations described in this Policy. taya0 will notify affected players of any such transfer in advance where practicable.

7 Cookies & Tracking Technologies

taya0 uses cookies and similar technologies (including local storage objects and session tokens) to operate the Platform effectively and to improve your experience as a Filipino player. The types of cookies used on the taya0 platform are as follows:

• Strictly necessary cookies: Required for the Platform to function. These include session authentication cookies that keep you logged in during a gaming session and security tokens that protect against cross-site request forgery (CSRF). These cookies cannot be disabled without breaking core Platform functionality.
• Functional cookies: Remember your preferences such as chosen language settings, your most recently played games, and display preferences. Disabling these cookies may result in a less personalised experience.
• Analytics cookies: Collect anonymised data about how visitors use the taya0 Platform — including which pages are visited most frequently, session duration, and navigation paths. This data helps taya0 improve Platform design and game offerings. Analytics data is aggregated and does not identify individual players.
• Security cookies: Help taya0 detect and prevent fraudulent access attempts, bot activity, and unusual login patterns that may indicate an account takeover attempt.

You can manage cookie preferences through your browser settings. Most modern browsers allow you to block or delete cookies, though doing so may affect your ability to log in or use certain Platform features. taya0 does not currently use cross-site advertising cookies or third-party tracking pixels linked to advertising networks.

8 Data Security

taya0 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your information against unauthorised access, disclosure, alteration, and destruction. These measures include:

• Transport Layer Security (TLS/SSL) encryption for all data transmitted between your device and the taya0 servers.
• Encryption of sensitive data at rest, including financial information and identity documents.
• Role-based access controls limiting taya0 staff access to personal data to only those employees whose job function requires it.
• Regular penetration testing and vulnerability assessments conducted by qualified security professionals.
• Intrusion detection systems monitoring for suspicious access patterns and potential data breaches in real time.
• Mandatory security training for all taya0 staff who handle personal data.
• Incident response procedures in place to contain, investigate, and report data breaches in accordance with NPC notification requirements under the DPA.

While taya0 implements robust security measures, no online platform can guarantee absolute data security. You also have a responsibility to protect your own account credentials. taya0 recommends using a strong, unique password for your taya0 account and enabling two-factor authentication where available.

9 Data Retention

taya0 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply as a general guide:

• Account and identity data: Retained for the duration of your taya0 account and for a minimum of five (5) years following account closure, in compliance with AMLA record-keeping obligations and PAGCOR regulatory requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, in accordance with AMLA implementing regulations and Bureau of Internal Revenue (BIR) requirements.
• Gaming history: Retained for a minimum of three (3) years from the date of each gaming session for dispute resolution and regulatory audit purposes.
• Customer support communications: Retained for two (2) years from the date of the interaction, or longer where the subject matter remains unresolved or is subject to ongoing legal proceedings.
• Marketing consent records: Retained for as long as you have an active marketing consent on file, plus one (1) year after consent withdrawal to document compliance.
• Anonymised analytics data: May be retained indefinitely in aggregated and anonymised form, as it no longer constitutes personal data once all identifying elements have been removed.

Upon the expiry of the applicable retention period, personal data is securely deleted, anonymised, or returned to you, as appropriate. Where legal proceedings, regulatory investigations, or unresolved disputes are ongoing, taya0 may retain relevant data beyond the standard retention periods until those matters are fully resolved.

10 International Data Transfers

The taya0 platform is designed primarily to serve Filipino players, and the majority of personal data processing takes place within the Philippines. However, some of taya0's third-party service providers — including cloud infrastructure providers, fraud prevention services, and certain game studio partners — may be located or operate servers outside the Philippines.

Where personal data is transferred outside the Philippines, taya0 ensures that appropriate safeguards are in place to protect your data to the same standard required under the Philippine Data Privacy Act. These safeguards may include:

• Contractual data processing agreements incorporating the standard data protection clauses required by the NPC.
• Transfers to jurisdictions that have been assessed as providing an adequate level of data protection equivalent to or exceeding the DPA standard.
• Technical and organisational security measures applied uniformly regardless of the physical location of the processing.

taya0 does not transfer personal data to any country or service provider that does not meet the adequacy and security standards required under the DPA and its IRR. If you would like further information about the specific safeguards applicable to any international transfer of your personal data, please contact the taya0 DPO using the contact details in Section 15.

11 Your Data Privacy Rights

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to the personal data held by taya0 about you:

• Right to be informed: The right to be notified of how taya0 collects and processes your personal data — which is the primary purpose of this Privacy Policy.
• Right of access: The right to request a copy of the personal data taya0 holds about you, together with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate, incomplete, or outdated personal data taya0 holds about you.
• Right to erasure / right to be forgotten: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to taya0's legal retention obligations under AMLA and PAGCOR regulations.
• Right to object: The right to object to taya0's processing of your personal data where that processing is based on legitimate interests, including the right to object to direct marketing communications at any time.
• Right to data portability: The right to receive a copy of certain personal data you have provided to taya0 in a structured, commonly used, machine-readable format, where technically feasible.
• Right to file a complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe taya0 has violated your rights under the DPA.

To exercise any of these rights, please submit a written request to the taya0 Data Protection Officer using the contact details provided in Section 15. taya0 will respond to all valid data rights requests within fifteen (15) business days of receipt, in accordance with NPC guidelines. taya0 may request proof of identity before processing a data rights request to protect your data from unauthorised access.

12 Children & Minors

The taya0 platform is strictly for adults who are 21 years of age or older, in accordance with PAGCOR-aligned responsible gaming standards applicable in the Philippines. taya0 does not knowingly collect personal data from any person under the age of 21.

If taya0 discovers or has reason to believe that an account has been registered by a person under 21 years of age, that account will be immediately suspended, all pending wagers will be voided, and the account will be closed. Any personal data collected in connection with that account will be securely deleted to the extent permitted by applicable legal obligations.

If you are a parent or guardian and you believe that a minor under your care has registered a taya0 account or provided personal data to taya0 without your knowledge, please contact taya0 immediately via the contact details in Section 15, and we will take prompt action to investigate and remedy the situation.

13 Third-Party Links

The taya0 platform may, from time to time, contain references to third-party websites or services — for example, links to PAGCOR's official website, the National Privacy Commission, or responsible gaming support organisations operating in the Philippines. taya0 provides these references for informational purposes only.

taya0 has no control over the content, privacy practices, or data handling of any third-party website and accepts no responsibility for the privacy policies or data processing activities of such external sites. We strongly recommend that you review the privacy policy of any third-party website you visit, including those accessed via a reference on the taya0 platform.

The inclusion of a reference to a third-party website on the taya0 platform does not constitute an endorsement, sponsorship, or affiliation between taya0 and that third party.

14 Updates to This Privacy Policy

taya0 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in applicable law, updates to the Platform's data processing practices, or decisions issued by the National Privacy Commission. The effective date at the top of this document will be updated to reflect the date on which any revised version takes effect.

Where changes to this Privacy Policy are material — for example, where taya0 introduces a new purpose for processing your personal data that was not previously described — taya0 will notify registered players by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect. For minor or non-material changes (such as clarifications in wording), taya0 may update the Policy without individual notification.

Your continued use of the taya0 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised Policy. If you do not agree with any update to this Privacy Policy, you should cease using the Platform and may request account closure in accordance with the Terms & Conditions.

15 Contact & Data Protection Officer

taya0 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act of 2012 and this Privacy Policy. If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data held by taya0, please contact us through the following channel:

• Email: [email protected] (plain text — not a clickable link)
• Attention: Data Protection Officer, taya0
• Support Availability: 24 hours a day, 7 days a week
• Coverage: Serving players across the Philippines, from Manila and Quezon City to Cebu, Davao, and beyond

taya0 will acknowledge receipt of all DPO enquiries within three (3) business days and will aim to provide a substantive response within fifteen (15) business days. For complex data rights requests, taya0 may extend this period by a further ten (10) business days, in which case you will be notified of the extension and the reason for it.

If you are not satisfied with taya0's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at www.privacy.gov.ph (please access this independently via your browser — taya0 does not link directly to external websites).