taya387 Privacy Policy

taya387 ("the Company", "we", "us", "our") operates the online casino and sports betting platform accessible at taya387.net (the "Platform"). taya387 is the data controller responsible for the personal information processed through the Platform.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173, hereinafter "DPA"), taya387 acts as a personal information controller ("PIC") with respect to data collected directly from players and users of the Platform. Where taya387 engages third-party service providers who process data on its behalf, such providers act as personal information processors ("PIP") under data processing agreements that impose obligations consistent with the DPA.

taya387 has appointed a Data Protection Officer ("DPO") who is responsible for overseeing compliance with this Privacy Policy and with applicable Philippine data privacy legislation. Contact details for the DPO are set out in Section 14 of this Policy.

This Privacy Policy applies to all personal information collected by taya387 through:

• The taya387.net website and all associated web pages;
• The account registration and verification process;
• Deposits, withdrawals, and financial transactions conducted through the Platform;
• Customer support interactions, including live chat, email, and telephone communications;
• Promotional programmes, bonus activations, and loyalty scheme participation;
• Cookies, tracking technologies, and analytics tools used on the Platform.

This Policy does not apply to third-party websites or services that may be linked to or from the taya387 Platform. taya387 is not responsible for the privacy practices of external websites, and Players are encouraged to review the privacy policies of any third-party services they use.

taya387 collects only the personal information that is necessary and proportionate to the purposes described in this Policy. The categories of data we collect include:

taya387 does not collect sensitive personal information (as defined under the DPA, including racial or ethnic origin, political opinions, religious beliefs, health data, and sexual orientation) except where strictly necessary for age verification or responsible gaming purposes and with the Player's explicit consent.

taya387 uses the personal information we collect for the following purposes:

• Account Management: Creating, maintaining, and securing your taya387 account; verifying your identity at registration and during KYC processes;
• Transaction Processing: Processing deposits, withdrawals, and related financial transactions via GCash, PayMaya, bank transfer, and cryptocurrency channels;
• Platform Operation: Delivering gaming services, tracking game activity, calculating results and winnings, and administering bonus and promotional programmes;
• Legal Compliance: Complying with PAGCOR regulatory requirements, anti-money laundering obligations under Republic Act No. 9160 (as amended), and other applicable Philippine laws;
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, cheating, collusion, and other prohibited conduct;
• Responsible Gaming: Monitoring gaming behaviour to identify potential problem gambling patterns; enforcing self-exclusion and limit requests; complying with PAGCOR responsible gaming guidelines;
• Customer Support: Responding to enquiries, resolving disputes, and maintaining records of support interactions;
• Marketing (where consented): Sending promotional offers, bonus notifications, and platform updates via email or SMS where you have consented to receive such communications. You may withdraw consent at any time via your account settings.

Under the Data Privacy Act of 2012, taya387 relies on the following lawful bases for processing personal information:

• Contractual Necessity: Processing necessary for the performance of the agreement between taya387 and the Player (i.e., the Terms & Conditions), including account management, transaction processing, and game delivery;
• Legal Obligation: Processing necessary for compliance with applicable Philippine laws, including PAGCOR regulatory requirements and anti-money laundering legislation;
• Legitimate Interests: Processing necessary for taya387's legitimate interests in fraud prevention, platform security, and responsible gaming compliance, provided such interests are not overridden by the Player's privacy rights;
• Consent: Processing for direct marketing purposes, where the Player has provided freely given, specific, informed, and unambiguous consent. Consent is withdrawable at any time without detriment to the Player's account.

taya387 does not sell, rent, or trade your personal information to third parties for commercial purposes. We may share your data with the following categories of recipients, strictly for the purposes described in this Policy:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency processing partners, for the purpose of processing financial transactions;
• Game Providers: Licensed third-party game studios and live dealer operators whose games are featured on the taya387 Platform — limited to data necessary for game delivery and result verification;
• Identity Verification Providers: Third-party KYC and identity verification services used to validate government-issued identification and conduct age verification;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine governmental authorities, where disclosure is required by law or regulatory directive;
• IT and Infrastructure Providers: Cloud hosting, cybersecurity, and technical service providers who process data on taya387's behalf under binding data processing agreements;
• Legal Advisors: Legal counsel and dispute resolution bodies, where disclosure is necessary for the conduct of legal proceedings or regulatory compliance.

All third-party recipients who act as personal information processors are required to implement appropriate data protection measures consistent with the DPA and are prohibited from using your data for any purpose other than those specified in their agreement with taya387.

Some of taya387's third-party service providers — including game providers and cloud infrastructure operators — may process personal data outside the Republic of the Philippines. Where such transfers occur, taya387 ensures that appropriate safeguards are in place to protect your personal information at a level equivalent to that provided under Philippine law.

Safeguards for international transfers include contractual data processing agreements incorporating standard data protection clauses, and selection of service providers located in jurisdictions with adequate data protection frameworks as recognised by the National Privacy Commission of the Philippines.

taya387 retains personal information only for as long as necessary to fulfil the purposes for which it was collected, including compliance with legal, regulatory, and contractual obligations. Retention periods are determined by the following principles:

• Active Account Data: Retained for the duration of the Player's active account relationship with taya387;
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years following the date of the transaction, in compliance with anti-money laundering legislation;
• KYC and Identity Documents: Retained for a minimum of five (5) years following account closure or the end of the business relationship;
• Support and Communications Records: Retained for a minimum of three (3) years from the date of the last interaction, or until resolution of any outstanding dispute;
• Marketing Consent Records: Retained for three (3) years from the date of withdrawal of consent or account closure, whichever is later.

Upon expiry of applicable retention periods, personal data is securely deleted or anonymised in accordance with taya387's data destruction policy.

taya387 uses cookies and similar tracking technologies on the Platform to improve user experience, maintain session security, and gather analytics data. The categories of cookies used are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session cookies that maintain your login state and security tokens. These cannot be disabled without impairing Platform functionality.
• Analytics Cookies: Used to understand how players navigate the Platform — including pages visited, session duration, and game preferences — to improve Platform design and performance.
• Functionality Cookies: Store your preferences such as language settings and display options to personalise your experience on return visits.
• Marketing Cookies (with consent): Used to deliver relevant promotional content and measure the effectiveness of marketing campaigns, where you have provided consent.

You may manage your cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the taya387 Platform, including the ability to log in and access games.

taya387 implements a comprehensive set of technical and organisational security measures to protect your personal information against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:

• SSL/TLS 256-bit encryption for all data transmitted between your device and the taya387 Platform;
• Encryption of sensitive data at rest, including payment credentials and identity documents;
• Multi-factor authentication for administrative access to systems containing personal data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular penetration testing, vulnerability assessments, and security audits;
• Incident response procedures for detecting, reporting, and managing personal data breaches in accordance with NPC notification requirements.

In the event of a personal data breach that poses a real risk of serious harm to data subjects, taya387 will notify the National Privacy Commission and affected Players within the timeframes prescribed by the DPA and its Implementing Rules and Regulations.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal information held by taya387:

• Right to Be Informed: The right to be informed of how your personal information is collected, used, and disclosed — as set out in this Privacy Policy;
• Right of Access: The right to request a copy of the personal information taya387 holds about you;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal information;
• Right to Erasure: The right to request deletion of your personal information where it is no longer necessary for the purposes for which it was collected, subject to taya387's legal retention obligations;
• Right to Object: The right to object to the processing of your personal information for direct marketing purposes or where processing is based on legitimate interests;
• Right to Data Portability: The right to receive your personal information in a structured, commonly used format where technically feasible;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact taya387's Data Protection Officer using the details in Section 14. taya387 will respond to all data subject requests within thirty (30) calendar days of receipt, or within the extended period permitted under the DPA for complex requests.

The taya387 Platform is strictly for persons who are 21 years of age or older. taya387 does not knowingly collect personal information from individuals under 21 years of age. The 21-year age minimum is mandated by PAGCOR regulations applicable to online gaming in the Philippines.

Age verification is conducted as part of the registration and KYC process. If taya387 becomes aware that personal information has been collected from an individual under 21 years of age, the Company will promptly delete such information and suspend the associated account. Parents or guardians who believe their child may have registered on the Platform are urged to contact our DPO immediately at the details provided in Section 14.

taya387 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. Material changes will be communicated to registered Players via email to their registered address and/or through a prominent notice on the taya387 Platform, at least seven (7) days before the changes take effect.

Continued use of the taya387 Platform after the effective date of any amendment constitutes acknowledgement of the updated Privacy Policy. The "Last updated" date at the top of this page will reflect the date of the most recent revision. Players are encouraged to review this Policy periodically.

For all enquiries, requests, or complaints relating to this Privacy Policy or to taya387's data processing activities, please contact our Data Protection Officer:

• Email: [email protected]
• Subject Line: Please mark data privacy enquiries with "Data Privacy Request – [Your Name]"
• Response Time: taya387 aims to acknowledge all data privacy enquiries within 3 business days and to provide a substantive response within 30 calendar days.

If you are unsatisfied with taya387's response to your data privacy complaint, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC).