Privacy Policy

01 Data Controller Identity

The data controller responsible for personal data collected through the taya03 Platform is taya03, the operator of the online gaming platform accessible at taya03.club. taya03 determines the purposes and means of processing personal data collected from players, visitors, and any other individuals who interact with the Platform or its customer support channels.

taya03 operates under a valid PAGCOR (Philippine Amusement and Gaming Corporation) license and processes personal data as required by that regulatory framework, in addition to its obligations under the Data Privacy Act of 2012 (Republic Act No. 10173) and the implementing rules issued by the National Privacy Commission of the Philippines.

02 Scope & Application

This Privacy Policy applies to all personal data collected and processed by taya03 in connection with:

• Registration and management of player accounts on the taya03 Platform;
• Know Your Customer (KYC) and identity verification processes;
• Deposits, withdrawals, and all financial transactions processed through the Platform;
• Gameplay activity, betting history, and game session data;
• Communications between you and taya03 customer support;
• Marketing and promotional communications you have opted into;
• Visits to and browsing activity on the taya03.club website;
• Responsible gaming interactions, including self-exclusion and limit-setting.

This Policy does not apply to the privacy practices of third-party payment providers (GCash, Maya, BPI, BDO, etc.), game software providers, or any other third parties, whose own privacy policies govern the data they collect directly from you. Where taya03 shares data with such third parties, it does so under data processing agreements consistent with Philippine DPA requirements.

03 Data We Collect

3.1 Registration & Identity Data

When you create a taya03 account, we collect: full legal name, date of birth, registered Philippine mobile number, and account credentials (securely hashed — never stored in plain text).

3.2 KYC & Verification Data

As required by PAGCOR's Anti-Money Laundering Program and PAGCOR's licensing conditions, we collect government-issued identity documents (passport, UMID, PhilSys ID, driver's license, SSS ID, or other acceptable Philippine government-issued photo ID), selfie photographs taken during KYC submission, and proof of payment method ownership where required for withdrawal verification.

3.3 Financial & Transaction Data

We collect records of all deposits, withdrawals, and transfers, including transaction reference numbers, amounts, timestamps, payment method identifiers (e.g., registered GCash number — not full financial account credentials), and transaction status. We do not store full payment card numbers, CVV codes, or complete mobile banking login credentials.

3.4 Gaming Activity Data

We record your betting and gameplay activity, including games played, bet amounts, wager outcomes, session start and end times, and bonus activity. This data supports account management, responsible gaming monitoring, and regulatory reporting to PAGCOR.

3.5 Technical & Device Data

When you access the Platform, we automatically collect device type and model, operating system, browser type and version, IP address, and approximate geographic location derived from IP. This data is used for fraud prevention, security monitoring, and Platform performance optimisation.

3.6 Communications Data

If you contact taya03 support via live chat or email, we retain records of those communications for customer service quality assurance, dispute resolution, and regulatory compliance purposes.

04 How We Use Your Data

taya03 processes your personal data for the following purposes:

• Account creation and management: Setting up, verifying, and maintaining your taya03 player account;
• Identity verification (KYC): Fulfilling PAGCOR-mandated requirements to verify player identity and age (21+ requirement) before permitting real-money gaming;
• Transaction processing: Facilitating deposits via GCash, Maya, BPI, BDO, UnionBank, Coins.ph, and other accepted Philippine payment channels, and processing withdrawal requests to your verified payment method;
• Regulatory compliance: Meeting our obligations under PAGCOR licensing terms, the Philippine Anti-Money Laundering Act (AMLA), and related regulations, including submission of mandatory reports to PAGCOR and the Anti-Money Laundering Council (AMLC) where required by law;
• Security and fraud prevention: Detecting, investigating, and preventing fraud, money laundering, bonus abuse, account sharing, and other prohibited activities;
• Responsible gaming: Monitoring gaming patterns to identify players who may be at risk and facilitating deposit limits, cooling-off periods, and self-exclusion as requested;
• Customer support: Responding to inquiries, resolving disputes, and providing assistance through our support channels;
• Platform improvement: Analysing aggregated and anonymised usage data to optimise Platform performance, game selection, and user experience;
• Marketing communications: Sending promotional offers and updates where you have given explicit opt-in consent. You may withdraw consent at any time by contacting support.

05 Legal Bases for Processing

Under the Data Privacy Act of 2012, taya03 relies on the following legal bases for processing your personal data:

• Contractual necessity: Processing is necessary to perform our obligations under the player account agreement — including account management, KYC, game operation, and payment processing — as contemplated in the taya03 Terms & Conditions;
• Compliance with legal obligation: Certain processing activities are mandated by PAGCOR licensing conditions, the Anti-Money Laundering Act, and the National Privacy Commission's regulations. This includes KYC data collection, transaction record retention, and mandatory regulatory reporting;
• Legitimate interests: We process technical and security data to protect the integrity of the Platform, prevent fraud, and safeguard other players — interests we consider balanced against and not overriding your privacy rights;
• Consent: For optional processing activities such as direct marketing communications and optional personalisation features, we rely on your freely given, specific, informed, and unambiguous consent, which you may withdraw at any time.

06 Data Sharing & Disclosure

taya03 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your personal data only in the following circumstances:

6.1 Regulatory Authorities

taya03 is legally required to share certain player data with PAGCOR as a condition of our gaming license, and with the Anti-Money Laundering Council (AMLC) and other Philippine government agencies where mandated by law (including under the Anti-Money Laundering Act and terrorism financing prevention laws). This sharing occurs without requiring your consent where it is required by applicable law.

6.2 Payment Service Providers

To process your deposits and withdrawals, we share necessary transaction data (name, transaction reference, amount) with your selected payment provider (GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, or USDT TRC20 network). This sharing is strictly limited to what is necessary to complete the transaction.

6.3 Game Software Providers

taya03's game library is powered by licensed game providers (including JILI, PG Soft, and others). Certain technical data (session tokens, game interaction data) is shared with game servers during active gameplay sessions. These providers operate under data processing agreements with taya03.

6.4 Technology & Security Service Providers

We engage third-party technology providers for services including hosting infrastructure, fraud detection, identity verification, and cybersecurity monitoring. These providers process personal data only on taya03's behalf and under strict contractual data protection obligations.

6.5 Legal Proceedings

taya03 may disclose personal data where required by a valid court order, subpoena, or other legal process issued by Philippine courts or competent authorities. We will notify you of such disclosures where legally permitted to do so.

07 Cookies & Tracking Technologies

taya03 uses cookies and similar tracking technologies to provide a functional Platform experience and to support security and analytics. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for basic Platform functionality including login sessions, security tokens, and game session maintenance. These cannot be disabled without disabling core Platform functions;
• Performance Cookies: Collect anonymised data about how players use the Platform (pages visited, errors encountered, session duration) to help us improve performance. No personally identifiable information is included in this data;
• Functionality Cookies: Remember your preferences such as language settings and display options to provide a more personalised experience;
• Security Cookies: Support fraud detection and prevention by recognising trusted devices and flagging unusual login activity.

taya03 does not use third-party advertising cookies or tracking technologies that share your data with external advertising networks. You may manage cookie preferences through your browser settings, however, disabling strictly necessary cookies will impair or prevent access to the Platform.

08 Data Retention

taya03 retains personal data for the period necessary to fulfil the purposes outlined in this Policy, subject to the following specific retention considerations:

• Active Account Data: Retained for the full duration of your active taya03 account, plus a minimum post-closure retention period as required by PAGCOR and Philippine AML regulations;
• KYC and Identity Documents: Retained for a minimum period mandated by PAGCOR licensing terms and AML regulations from the date of last gaming activity or account closure, whichever is later;
• Transaction Records: Financial transaction records are retained for a minimum period as required under Philippine AML law and PAGCOR financial reporting requirements;
• Support Communications: Customer support records are retained for a reasonable period to support dispute resolution and quality assurance, following which they are deleted or anonymised;
• Marketing Data: Where consent is the basis for processing, marketing-related data is retained until consent is withdrawn, following which it is promptly deleted from active marketing systems.

Where retention periods specified in this Policy conflict with mandatory PAGCOR or Philippine legal retention requirements, the longer regulatory requirement prevails.

09 Data Security

taya03 implements a layered set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in Transit: All data transmitted between your browser or app and taya03 servers is encrypted using TLS 1.3 (256-bit) — the same standard used by Philippine banking institutions;
• Encryption at Rest: Sensitive personal data, including KYC documents and financial records, is stored using industry-standard encryption at rest;
• Password Security: Account passwords are stored using strong one-way cryptographic hashing (bcrypt or equivalent) and are never recoverable in plain text, even by taya03 staff;
• Access Controls: Personal data is accessible only to taya03 personnel and systems with a demonstrated business need. Access is logged, and privileged access is subject to additional controls;
• Two-Factor Authentication: Available to all players for their account login. Strongly recommended as an additional layer of personal account security;
• Security Monitoring: taya03 operates continuous security monitoring of Platform infrastructure to detect and respond to potential breaches or anomalous activity.

10 Children's Privacy (21+ Requirement)

taya03 is an online gambling platform and access is strictly restricted to individuals who are 21 years of age or older, as required under PAGCOR regulations and applicable Philippine law. taya03 does not knowingly collect personal data from persons under the age of 21. Age is verified as part of the mandatory KYC process before any real-money account is fully activated.

In the event that taya03 discovers that personal data has been collected from a person under 21, we will immediately close the relevant account, delete all associated personal data to the extent not required for mandatory retention and regulatory reporting, and where necessary report the incident to PAGCOR. If you believe a person under 21 has registered on the Platform, please notify taya03 support immediately.

11 Cross-Border Data Transfers

taya03's primary data processing infrastructure is located within the Philippines. Certain technical operations — including game server interactions with international game providers and cloud infrastructure redundancy — may involve the transfer of limited technical data outside the Philippines. In all such cases, taya03 implements safeguards consistent with the requirements of the Data Privacy Act and NPC regulations governing cross-border data transfers, including the use of data processing agreements with contractual privacy obligations equivalent to those required under Philippine law.

taya03 does not transfer KYC identity documents, financial records, or other sensitive personal data to overseas parties beyond what is minimally necessary for fraud screening through regulated AML screening providers, where applicable.

12 Exercising Your Privacy Rights

To exercise any of your rights under the Data Privacy Act of 2012 — including access, rectification, erasure, objection, or data portability — please contact taya03's Data Protection Officer using the contact details in Section 15. When submitting a privacy request, please include:

• Your full registered name and account mobile number (for account verification purposes);
• A clear description of the right you wish to exercise and the specific data or processing activity your request concerns;
• If submitting an erasure request, your reason for the request;
• A copy of a valid identification document to confirm your identity (we cannot process rights requests from unverified individuals to protect against unauthorised access to account data).

taya03 will acknowledge your request within 5 business days and provide a substantive response within 30 calendar days. Complex requests may require up to 60 calendar days, in which case we will notify you of the extension. Some rights requests may be limited by our legal retention obligations under PAGCOR licensing and AML law — where this applies, we will explain the applicable limitation in our response.

13 Data Breach Procedures

In the event of a personal data breach that is likely to result in risks to the rights and freedoms of affected individuals, taya03 will follow the procedures mandated by the National Privacy Commission:

• NPC Notification: taya03 will notify the National Privacy Commission within 72 hours of becoming aware of a qualifying breach, as required under NPC Circular 16-03;
• Player Notification: Where a breach is likely to result in high risk to affected individuals' rights, taya03 will notify affected players promptly with information about the nature of the breach, the data involved, the likely consequences, and the measures taken or proposed to address the breach;
• Internal Response: taya03 maintains an incident response plan that includes breach containment, root cause investigation, remediation, and documentation procedures. Breaches are logged in an internal breach register maintained by our Data Protection Officer.

14 Policy Updates

taya03 may update this Privacy Policy from time to time to reflect changes in our data practices, applicable law, PAGCOR regulatory requirements, or Platform functionality. We will indicate the date of the most recent revision at the top of this Policy. For material changes that significantly affect your rights or our processing activities, we will provide notice via in-Platform notification or email to your registered account address prior to the changes taking effect.

Your continued use of the taya03 Platform following publication of an updated Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree to a material change to this Policy, you should cease using the Platform and contact support to close your account and arrange withdrawal of any Real Money Balance.

15 Contact & Data Protection Officer

taya03 has designated a Data Protection Officer (DPO) in compliance with the Data Privacy Act of 2012 and NPC requirements. For all privacy-related inquiries, data rights requests, or concerns about how taya03 handles your personal data, please contact:

• Data Protection Officer — taya03
• Email: [email protected] (plain text — not a clickable link)
• Subject line: Please include "Privacy / DPA Request" in your subject line to ensure prompt routing to the DPO.
• Response time: DPO will acknowledge within 5 business days.

For general platform support — account issues, payment queries, game support — please use the 24/7 live chat function available directly on the taya03 Platform.

For complaints or escalations to the Philippine regulatory authority, the National Privacy Commission maintains a complaint mechanism available through the NPC's official channels.