taya1 Privacy Policy

1 Definitions and Key Terms

For purposes of this Privacy Policy, the following terms shall have the meanings set forth below:

• "Personal Data" or "Personal Information" means any information, whether recorded in a material form or not, from which the identity of an individual is apparent or can be reasonably and directly ascertained by the entity holding the information, or when put together with other information would directly and certainly identify an individual (as defined under Republic Act No. 10173).
• "Sensitive Personal Information" means personal information about an individual's race, ethnic origin, marital status, age, religious or philosophical beliefs, government-issued identification numbers (SSS, GSIS, passport numbers), and any other information that may be used to identify, locate, or contact an individual (as defined under Republic Act No. 10173).
• "Processing" means any operation or set of operations performed upon personal data, whether by automated means or otherwise, including collection, recording, organization, storage, updating, modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction of data.
• "Data Subject" means the individual whose personal information is being collected, processed, or stored by taya1.
• "Third-Party Service Providers" means external companies or organizations that taya1 engages to perform services on our behalf, including payment processors, identity verification services, game providers, customer support platforms, and marketing partners.

2 Information We Collect

2.1 Information You Provide Directly

When you register an account with taya1, you are required to provide certain personal information, including but not limited to:

• Full legal name as it appears on government-issued identification documents;
• Date of birth to verify that you are at least twenty-one (21) years of age;
• Residential address including street address, city, province, and postal code;
• Email address for account verification, communication, and password recovery;
• Mobile phone number for account security, two-factor authentication, and promotional communications;
• Username and password created by you during the registration process;
• Payment information including bank account details, e-wallet account numbers (GCash, Maya), cryptocurrency wallet addresses, and any other payment method details required to process deposits and withdrawals;
• Identity verification documents such as government-issued photo identification (passport, driver's license, PhilSys ID, or Voter's ID), proof of address (utility bills or bank statements dated within the last three months), and proof of payment method ownership (bank statements or screenshots showing your name and account number).

2.2 Information Collected Automatically

When you access the taya1 platform, we automatically collect certain technical and usage information, including:

• Device information: IP address, device type (mobile, tablet, desktop), operating system, browser type and version, device identifiers (IMEI, UDID, or other unique device identifiers);
• Geolocation data: Approximate geographic location based on IP address to verify that you are physically located in the Philippines at the time of access, as required by PAGCOR regulations;
• Cookies and tracking technologies: Session cookies, persistent cookies, web beacons, pixel tags, and similar technologies to track user behavior, remember login sessions, personalize content, and analyze usage patterns;
• Gameplay activity: Bets placed, games played, win/loss records, deposit and withdrawal history, bonus claims, and all other activity conducted through your taya1 account;
• Communication records: Transcripts of live chat conversations, email correspondence, phone calls (where applicable), and any other communications between you and taya1 customer support or marketing teams.

2.3 Information from Third Parties

taya1 may receive personal information about you from third-party sources, including:

• Payment processors: GCash, Maya (PayMaya), GrabPay, Philippine banks (BPI, BDO, Metrobank, UnionBank, etc.), cryptocurrency exchanges (Coins.ph), and other payment service providers may share transaction data, account verification status, and fraud prevention information;
• Identity verification services: Third-party KYC (Know Your Customer) and AML (Anti-Money Laundering) verification providers may provide identity verification results, watchlist screening results, and risk assessment scores;
• Game providers: JILI, Pragmatic Play, Evolution Gaming, and other casino game developers may share gameplay data, RTP (Return to Player) statistics, and fraud detection alerts;
• Marketing partners: Affiliate networks and advertising platforms may provide information about how you discovered taya1 and what marketing channels referred you to our Platform.

3 How We Use Your Information

taya1 processes your personal information for the following lawful purposes:

• Account creation and management: To register and maintain your player account, authenticate your identity, and verify that you meet eligibility requirements (age, geographic location, and legal capacity);
• Transaction processing: To process deposits, withdrawals, and internal transfers, reconcile financial records, and comply with payment processor requirements;
• Regulatory compliance: To comply with PAGCOR licensing requirements, Philippine Anti-Money Laundering (AMLA) regulations, Data Privacy Act obligations, and other applicable laws and regulations governing online gaming in the Philippines;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, multiple account abuse, bonus abuse, collusion, cheating, money laundering, and other prohibited conduct as described in our Terms and Conditions;
• Customer support: To respond to your inquiries, resolve account issues, investigate disputes, and provide technical assistance;
• Marketing and promotions: To send you promotional offers, bonus notifications, VIP program updates, and other marketing communications via email, SMS, push notifications, or in-app messages (you may opt out of marketing communications at any time by adjusting your account settings or contacting customer support);
• Game personalization: To recommend games, customize your gaming experience, and display content relevant to your preferences and playing history;
• Platform improvement: To analyze user behavior, conduct A/B testing, improve website performance, optimize user interface design, and develop new features and services;
• Responsible gaming: To monitor gameplay patterns, identify problematic gambling behavior, enforce deposit limits and self-exclusion requests, and provide responsible gaming tools and resources;
• Legal and contractual obligations: To enforce our Terms and Conditions, resolve disputes, respond to legal process (court orders, subpoenas, or regulatory investigations), and protect the rights and safety of taya1, our users, and the public.

4 How We Share Your Information

4.1 Sharing with Service Providers

taya1 may share your personal information with trusted third-party service providers who perform functions on our behalf, including:

• Payment processors: To facilitate deposits and withdrawals (GCash, Maya, banks, cryptocurrency exchanges);
• Identity verification services: To verify your identity, age, and address for KYC compliance (Jumio, Onfido, or similar providers);
• Game content providers: To deliver casino games, live dealer tables, and sports betting markets (JILI, Pragmatic Play, Evolution Gaming, etc.);
• Customer support platforms: To provide live chat, email ticketing, and phone support services (Zendesk, Intercom, or similar platforms);
• Marketing and analytics tools: To deliver targeted advertising, analyze user behavior, and optimize marketing campaigns (Google Analytics, Facebook Pixel, etc.);
• Cloud hosting providers: To store data securely on servers located in the Philippines or in jurisdictions with adequate data protection standards (AWS, Google Cloud, etc.).

All third-party service providers are contractually obligated to process your personal information only as instructed by taya1 and to maintain appropriate security measures to protect your data. Service providers are prohibited from using your personal information for their own purposes or selling it to third parties.

4.2 Sharing with Regulatory Authorities

taya1 may disclose your personal information to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), law enforcement agencies, and other government authorities when required by law or when necessary to comply with regulatory obligations, respond to legal process, or investigate suspected illegal activity.

4.3 Sharing in Business Transactions

In the event of a merger, acquisition, reorganization, sale of assets, or bankruptcy proceeding involving taya1, your personal information may be transferred to the acquiring entity or successor organization. You will be notified via email or prominent notice on the Platform of any change in ownership or control of your personal information.

4.4 No Sale of Personal Information

taya1 does not sell, rent, or trade your personal information to third parties for marketing purposes without your explicit consent.

5 Data Retention and Deletion

taya1 retains your personal information for as long as necessary to fulfill the purposes for which it was collected, comply with legal and regulatory obligations, and resolve disputes. Specific retention periods are as follows:

• Account information: Retained for the duration of your active account plus seven (7) years following account closure, as required by PAGCOR and AMLA regulations;
• Transaction records: Retained for ten (10) years to comply with anti-money laundering and tax reporting obligations;
• Identity verification documents: Retained for seven (7) years following account closure or as required by applicable law;
• Marketing communications: Retained until you opt out of marketing communications or request deletion of your data;
• Gameplay and betting history: Retained for seven (7) years for dispute resolution, regulatory compliance, and fraud prevention purposes.

After the applicable retention period expires, taya1 will securely delete or anonymize your personal information such that it can no longer be associated with you. You may request deletion of your personal information at any time by contacting customer support, subject to our legal obligation to retain certain records as described above.

6 Your Rights Under Philippine Data Privacy Law

Under Republic Act No. 10173 (the Data Privacy Act of 2012), you have the following rights with respect to your personal information:

• Right to be informed: You have the right to be informed about the collection, processing, and use of your personal data, including the purposes for which it is processed and the recipients to whom it may be disclosed.
• Right to access: You have the right to obtain from taya1 confirmation of whether your personal data is being processed, and if so, to access that data and receive a copy in a commonly used electronic format.
• Right to object: You have the right to object to the processing of your personal data for direct marketing purposes, including profiling, and to withdraw consent for processing at any time (without affecting the lawfulness of processing based on consent before its withdrawal).
• Right to erasure or blocking: You have the right to request suspension, withdrawal, removal, or destruction of your personal data if: (a) it is incomplete, outdated, false, or unlawfully obtained; (b) it is being used for purposes not authorized by you; (c) it is no longer necessary for the purposes for which it was collected; or (d) you withdraw consent or object to processing and there is no other legal basis for processing.
• Right to rectification: You have the right to dispute the inaccuracy or error in your personal data and request correction or updating.
• Right to data portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another controller without hindrance from taya1, where technically feasible.
• Right to file a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) if you believe that taya1 has violated your data privacy rights.

To exercise any of these rights, please contact taya1 customer support at [email protected] (plain text, not a clickable link). We will respond to your request within thirty (30) days of receipt, or as otherwise required by Philippine law. Identity verification may be required before we can process certain requests.

7 Data Security Measures

taya1 employs industry-standard technical, physical, and organizational security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and taya1 servers is encrypted using SSL/TLS (Secure Socket Layer / Transport Layer Security) protocols. Sensitive personal information stored in our databases is encrypted at rest using AES-256 encryption;
• Access controls: Access to personal data is restricted to authorized taya1 employees, contractors, and service providers who require access to perform their job functions. All personnel with access to personal data are bound by confidentiality obligations;
• Two-factor authentication: Player accounts are protected by optional two-factor authentication (2FA) via SMS or authenticator apps to prevent unauthorized access;
• Regular security audits: taya1 conducts regular security audits, vulnerability assessments, and penetration testing to identify and remediate security weaknesses;
• Intrusion detection and monitoring: Our systems are monitored 24/7 for suspicious activity, unauthorized access attempts, and potential security breaches;
• Secure data centers: Personal data is stored on servers located in secure data centers with physical access controls, surveillance systems, and environmental protections.

While taya1 takes all reasonable steps to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials and for any activity conducted through your account. If you suspect unauthorized access to your account, contact customer support immediately.

8 Cookies and Tracking Technologies

8.1 What Are Cookies?

Cookies are small text files placed on your device (computer, smartphone, or tablet) by websites you visit. Cookies allow the website to recognize your device and remember information about your visit, such as your preferred language, login status, and browsing history.

8.2 How We Use Cookies

taya1 uses cookies and similar tracking technologies for the following purposes:

• Essential cookies: Required for the Platform to function properly, including cookies that remember your login session, maintain shopping cart contents, and enable security features;
• Performance cookies: Collect anonymous information about how you use the Platform, such as which pages you visit most often and whether you receive error messages, to help us improve website performance;
• Functionality cookies: Remember your preferences and settings (language, time zone, display options) to provide a more personalized experience;
• Advertising cookies: Used to deliver targeted advertisements based on your browsing behavior and to measure the effectiveness of marketing campaigns. These cookies may be set by taya1 or by third-party advertising networks (Google Ads, Facebook Ads, etc.).

8.3 Managing Cookies

You can control or delete cookies through your browser settings. Most browsers allow you to refuse cookies or to be alerted when cookies are being sent. However, disabling cookies may impair certain features of the taya1 platform, and you may not be able to access some areas of the Site if cookies are disabled.

9 International Data Transfers

taya1 primarily stores and processes personal data on servers located within the Philippines. However, certain third-party service providers (such as cloud hosting providers, payment processors, and game developers) may store or process data in other countries. When personal data is transferred outside the Philippines, taya1 ensures that such transfers comply with the Data Privacy Act and that appropriate safeguards are in place, including:

• Transfers to countries recognized by the National Privacy Commission (NPC) as providing adequate data protection;
• Use of standard contractual clauses or data processing agreements that require recipients to maintain data protection standards equivalent to those required under Philippine law;
• Implementation of technical and organizational measures to protect data during transfer and storage.

10 Children's Privacy

The taya1 platform is intended exclusively for individuals aged twenty-one (21) years and above. taya1 does not knowingly collect personal information from persons under the age of twenty-one (21). If we become aware that we have inadvertently collected personal data from a minor, we will take immediate steps to delete that information and terminate the associated account. Parents or guardians who believe that a minor has provided personal information to taya1 should contact customer support immediately.

11 Changes to This Privacy Policy

taya1 reserves the right to modify, update, or revise this Privacy Policy at any time to reflect changes in our data processing practices, legal requirements, or business operations. Updated versions of this Policy will be posted on the Platform with the "Last Updated" date revised accordingly. Material changes to this Policy (such as changes to how we use or share your personal information) will be communicated to you via email or prominent notice on the Platform at least thirty (30) days before the changes take effect.

Your continued use of the taya1 platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the updated Policy, you must cease using the Platform and may request deletion of your account and personal data.

12 Contact Information and Data Protection Officer

If you have any questions, concerns, or complaints regarding this Privacy Policy or taya1's data processing practices, or if you wish to exercise any of your rights under the Data Privacy Act, please contact us:

• Email: [email protected] (plain text, not a clickable link)
• Live Chat: Available 24/7 on the taya1 platform
• Data Protection Officer: [email protected] (plain text)
• Mailing Address: taya1 Data Privacy Office, Manila, Philippines

For complaints related to data privacy violations, you may also file a complaint directly with the National Privacy Commission (NPC) of the Philippines through their official website or by visiting their office in Manila.