taya387 Privacy Policy

For the purposes of this Privacy Policy, the following terms carry the meanings defined below:

• "taya387," "we," "us," "our" — the taya387 online gaming platform and its operating entity, a PAGCOR-licensed online casino operator in the Philippines.
• "Platform" — the taya387 website, all associated subdomains, mobile browser interface, and any software application through which taya387 services are accessed.
• "Player," "you," "your" — any individual who has registered a taya387 account, is in the process of registering, or who accesses the Platform in any capacity.
• "Personal Information" / "Personal Data" — any information from which the identity of an individual can be reasonably and directly ascertained, or when put together with other information, would directly and certainly identify an individual, as defined under RA 10173.
• "Sensitive Personal Information" — personal information about an individual's racial or ethnic origin, marital status, age, color, and religious, philosophical, or political affiliations; health, education, genetic or sexual life, proceedings for any offense committed or alleged; and government-issued identification numbers, as defined under RA 10173.
• "Processing" — any operation or set of operations performed on personal data including collection, recording, organization, storage, updating, modification, retrieval, consultation, use, consolidation, blocking, erasure, or destruction.
• "DPA 2012" — Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and all implementing rules and regulations issued by the National Privacy Commission (NPC).
• "PAGCOR" — the Philippine Amusement and Gaming Corporation, the government body that licenses and regulates taya387's gaming operations.
• "Data Protection Officer" / "DPO" — the individual designated by taya387 to oversee compliance with RA 10173 and this Privacy Policy.

taya387 acts as the Personal Information Controller with respect to all personal data collected through the Platform, as that term is defined under RA 10173. taya387 determines the purposes for which and the manner in which personal data is processed in connection with the Platform and its associated services.

Where taya387 engages third-party service providers to process personal data on its behalf — such as payment processors, KYC verification partners, or game software providers — those parties act as Personal Information Processors and are contractually bound to process data only in accordance with taya387's documented instructions and to maintain security standards no less stringent than those required under RA 10173.

taya387 collects and processes the following categories of personal data in connection with the operation of the Platform:

• Full legal name
• Date of birth (for age verification — 21+ requirement)
• Registered Philippine mobile number
• Email address (if provided)
• Username and encrypted account password
• City and province of residence (Philippines)

• Government-issued photo identification (Philippine passport, SSS/UMID, PhilSys ID, driver's license, or voter's ID)
• Proof of address documentation
• Source of funds documentation (for large transactions, as required by AML regulations)
• Selfie or video verification images submitted during identity verification

• GCash account number / PayMaya account number (hashed — not stored in plaintext)
• Bank account details where applicable (BPI, BDO, Metrobank, UnionBank)
• Deposit and withdrawal transaction records including amounts, timestamps, and payment method used
• Account balance history
• Bonus and promotion redemption history

• Game session logs including games played, bet amounts, win/loss outcomes, and session duration
• Sports betting selections, odds accepted, and settlement results
• Responsible gaming tool usage (deposit limits set, session timer activations, self-exclusion requests)

• IP address and approximate geographic location derived from IP
• Device type, operating system, and browser information
• Session start and end timestamps
• Platform navigation and feature usage data collected via cookies and analytics tools

• Records of customer support interactions (live chat transcripts, email correspondence)
• Survey responses and feedback submissions
• Marketing preference settings and opt-in/opt-out records

taya387 collects personal data through the following channels and mechanisms:

• Direct submission: Information you provide during account registration, KYC verification, payment processing, customer support interactions, and promotional form completions.
• Automated technical collection: Data generated automatically as you use the Platform, including session logs, device fingerprinting, IP logging, and analytics events captured through cookies and similar tracking technologies.
• Payment provider integration: Transaction confirmation and reference data shared by GCash, PayMaya, and banking partners in connection with deposits and withdrawals processed on your account.
• Third-party identity verification: Identity and document verification data returned by taya387's KYC processing partners in connection with PAGCOR-mandated identity checks.
• Fraud detection systems: Behavioral and technical signals generated by taya387's fraud and AML monitoring tools in connection with the protection of the Platform's integrity.

taya387 processes Player personal data for the following purposes:

taya387 does not use Player personal data for automated decision-making that produces legal or similarly significant effects without human review, except in cases of fraud detection where immediate automated action is necessary to protect the integrity of the Platform.

taya387 relies on the following legal bases to process your personal data under RA 10173:

• Contractual necessity: Processing required to perform the taya387 Player Account Agreement — including account management, payment processing, and game delivery.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, AML obligations under RA 9160 (as amended), and tax reporting obligations.
• Legitimate interests: Processing required for fraud prevention, Platform security, and the improvement of taya387 services, where those interests are not overridden by your data privacy rights.
• Consent: Processing for marketing communications and non-essential analytics, where you have provided explicit opt-in consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

taya387 does not sell, rent, or trade personal data. We may disclose personal data to the following categories of recipients only to the extent necessary for the purposes described in this Policy:

• PAGCOR and Philippine government authorities: As required by taya387's gaming license conditions, applicable law, court order, or regulatory investigation.
• Anti-Money Laundering Council (AMLC): Suspicious transaction reports and covered transaction reports as required under RA 9160 and its amendments.
• Payment processing partners: GCash (Mynt), PayMaya (Voyager Innovations), and Philippine banking institutions — limited to transaction reference data required to execute deposits and withdrawals.
• KYC and identity verification partners: Third-party identity verification service providers engaged to support PAGCOR-mandated player identification requirements.
• Game software providers: JILI, PG Soft, Pragmatic Play, Evolution Gaming, and other licensed game developers — limited to session and game data required for game delivery and dispute resolution.
• Technology infrastructure providers: Cloud hosting, cybersecurity, and platform operations providers — bound by data processing agreements requiring compliance with RA 10173 standards.
• National Privacy Commission (NPC): Data breach notifications and responses to regulatory inquiries as required by NPC Circular No. 16-03 and applicable NPC advisories.

taya387 implements the following technical and organizational security measures to protect Player personal data against unauthorized access, disclosure, alteration, and destruction:

• Transport encryption: All data transmitted between your device and the taya387 Platform is encrypted using TLS 1.2 or higher with 256-bit AES encryption.
• Data-at-rest encryption: Stored personal and financial data is encrypted at rest using AES-256 encryption on taya387's infrastructure.
• Access controls: Access to systems containing personal data is restricted to authorized personnel on a need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Payment data tokenization: GCash and PayMaya account identifiers are tokenized — taya387 never stores your full mobile wallet credentials in readable form.
• Regular security audits: taya387 conducts regular security assessments and penetration testing of Platform systems, consistent with PAGCOR technical security requirements.
• Intrusion detection: Automated monitoring systems operate continuously to detect and respond to unauthorized access attempts and anomalous data access patterns.
• Employee training: All taya387 personnel with access to personal data receive mandatory data privacy and security training.

taya387 retains personal data for the minimum period necessary to fulfill the purposes for which it was collected, subject to the following retention schedules:

• Active account data: Retained for the duration of your active taya387 account relationship plus five (5) years following permanent account closure, consistent with PAGCOR record-keeping requirements.
• KYC and identity documents: Retained for five (5) years from submission, or longer where required by PAGCOR licensing conditions or AMLC regulations.
• Financial transaction records: Retained for five (5) years from the date of the transaction in compliance with Philippine AML record-keeping requirements under RA 9160.
• Customer support communications: Retained for two (2) years from the date of the communication, unless associated with an open dispute or regulatory inquiry.
• Marketing preference records: Retained for the duration of your account plus one (1) year, to demonstrate compliance with consent requirements.
• Technical and usage logs: Retained for twelve (12) months from generation, after which they are either deleted or anonymized.

Upon expiration of the applicable retention period, personal data is securely deleted or rendered permanently anonymous using industry-standard data erasure methods.

As a Philippine resident whose personal data is processed by taya387, you are entitled to the following rights under RA 10173. You may exercise any of these rights by contacting the taya387 Data Protection Officer (see Section 15):

taya387 will respond to data privacy rights requests within fifteen (15) business days of receipt. Complex requests may require up to thirty (30) business days; taya387 will notify you if additional time is required. Identity verification may be required before processing any rights request.

taya387 uses cookies and similar tracking technologies to operate the Platform, enhance your player experience, and collect analytics data. The following categories of cookies are used:

• Strictly necessary cookies: Essential for Platform functionality including user authentication, session management, and security features. These cannot be disabled without impairing Platform operation.
• Functional cookies: Store your preferences such as language settings, responsible gaming tool configurations, and game display preferences to personalize your taya387 experience.
• Analytics cookies: Collect aggregated, pseudonymized data about how Players interact with the Platform to enable taya387 to improve performance, navigation, and game lobby layouts. Collected data does not personally identify individual players.
• Session replay cookies: May be used by taya387's fraud detection systems to capture anonymized interaction patterns for security analysis. No personally identifying content is captured through these mechanisms.

You may manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair your ability to access and use taya387 account features. taya387 does not use third-party advertising or behavioral targeting cookies.

The taya387 Platform is strictly prohibited for use by individuals under 21 years of age, consistent with PAGCOR's mandatory age restriction for online casino-style gambling in the Philippines. taya387 does not knowingly collect personal data from persons under 21 years of age.

Where taya387 discovers that personal data has been provided by a person under 21 years of age, that account will be immediately suspended, all associated data will be deleted, and any funds will be returned to the originating payment method following verification. Parents or guardians who have reason to believe that a minor has accessed taya387 are requested to contact our Data Protection Officer immediately.

taya387 primarily stores and processes Player personal data within the Philippines. Where engagement of third-party service providers (such as global game software developers or cloud infrastructure providers) necessitates the transfer of personal data outside the Philippines, taya387 ensures that such transfers are conducted only where:

• The receiving jurisdiction offers an adequate level of data protection as assessed by the NPC; or
• Appropriate safeguards are in place, including binding contractual data processing agreements requiring the recipient to maintain standards equivalent to those required under RA 10173; or
• You have provided explicit consent to the transfer after being informed of the risks associated with transferring data to a jurisdiction without adequate protections.

taya387 maintains records of all cross-border data transfer mechanisms and makes these available to the NPC upon request.

taya387 may update this Privacy Policy periodically to reflect changes in our data processing practices, applicable law, regulatory guidance from the NPC, or PAGCOR licensing requirements. The effective date displayed at the top of this page will be updated accordingly.

Where a proposed change materially affects your rights or our data processing obligations, taya387 will provide advance notice via SMS to your registered Philippine mobile number and/or a prominent notice on the Platform prior to the change taking effect. Your continued use of the taya387 Platform following publication of a revised Policy constitutes acceptance of the updated terms.

We encourage you to review this Policy periodically to remain informed about how taya387 protects your personal information.

If you wish to exercise any of your rights under RA 10173, have a question about this Privacy Policy, or wish to raise a data privacy concern, please contact the taya387 Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via the taya387 Platform. Request to speak with or submit a message to the Data Protection Officer.
• Email: [email protected] — please include "Data Privacy Request" in the subject line
• Response time: Acknowledgment within 2 business days; substantive response within 15 business days

If your concern is not resolved to your satisfaction through taya387's internal process, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official complaint process.