Privacy Policy – taya01 Casino

01 Introduction

taya01 takes the privacy and security of your personal data seriously. As an online gaming platform serving Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and beyond, we understand the trust you place in us when you share your personal information. This Policy explains in plain language what data we collect, why we collect it, how we use it, and what rights you have over it.

By registering an account on taya01 or continuing to use the platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the taya01 platform and contact us to close your account.

This Policy should be read together with our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of taya01.

02 Data Controller

For the purposes of the Data Privacy Act of 2012, taya01 is the Personal Information Controller (PIC) in respect of the personal data you provide when using the taya01 platform. This means taya01 determines the purposes and means of processing your personal information.

taya01 has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. You may contact the DPO using the details provided in Section 14 of this Policy.

03 Personal Data We Collect

taya01 collects the following categories of personal data from players:

taya01 does not collect sensitive personal information (as defined under RA 10173) such as health records, political opinions, or religious beliefs, except where strictly required by law (e.g., responsible gaming assessments).

04 How We Collect Your Data

taya01 collects personal data through the following means:

• Direct interactions: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting customer support, or participating in promotions.
• Automated technologies: Technical and usage data collected automatically when you access the taya01 platform, including through cookies, web beacons, server logs, and similar tracking technologies.
• Third-party sources: Identity verification data from KYC service providers; fraud prevention data from anti-money laundering (AML) screening services; payment data from GCash, PayMaya, and banking partners (limited to transaction confirmation and account name verification).

05 Purpose of Processing

taya01 processes your personal data for the following purposes:

• To create and manage your taya01 player account.
• To verify your identity and age (21+) in compliance with PAGCOR regulations and Philippine law.
• To process deposits, withdrawals, and other financial transactions.
• To comply with anti-money laundering (AML) obligations under RA 9160, as amended.
• To detect, investigate, and prevent fraud, cheating, and other prohibited conduct.
• To provide customer support and respond to your enquiries.
• To send you transactional communications (e.g., deposit confirmations, withdrawal notifications, security alerts).
• To send you promotional communications, where you have consented to receive them.
• To personalise your gaming experience and recommend relevant games or promotions.
• To operate and improve the taya01 platform through analytics and performance monitoring.
• To comply with responsible gaming obligations, including processing self-exclusion requests and deposit limit settings.
• To comply with any applicable law, regulation, court order, or PAGCOR directive.

06 Legal Basis for Processing

Under the Data Privacy Act of 2012, taya01 processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you (i.e., to operate your taya01 account and provide gaming services).
• Legal obligation: Processing required to comply with Philippine law, including AML regulations, PAGCOR licensing requirements, and tax obligations.
• Legitimate interests: Processing for fraud prevention, platform security, and improving our services, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

07 Data Sharing & Disclosure

taya01 does not sell your personal data. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment processors: GCash, PayMaya, and banking partners, solely to process your financial transactions.
• KYC / identity verification providers: Third-party services that assist in verifying your identity and age in compliance with PAGCOR requirements.
• AML screening services: Providers that screen transactions against sanctions lists and suspicious activity databases as required by RA 9160.
• IT and platform service providers: Cloud hosting, cybersecurity, and analytics providers who process data on our behalf under strict data processing agreements.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or regulatory directive.
• Law enforcement: Philippine law enforcement agencies, where required by a valid court order or legal process.

08 Data Retention

taya01 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following retention periods apply:

• Account data: Retained for the duration of your active taya01 account, plus a minimum of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act (RA 9160, as amended).
• KYC documents: Retained for a minimum of five (5) years following the end of the business relationship, or longer if required by a regulatory directive or ongoing investigation.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the matter is subject to ongoing dispute or legal proceedings.
• Marketing consent records: Retained for the duration of your consent, plus three (3) years following withdrawal of consent, to demonstrate compliance.
• Technical and usage logs: Retained for twelve (12) months from the date of collection, unless required for longer periods for security or fraud investigation purposes.

Upon expiry of the applicable retention period, taya01 will securely delete or anonymise your personal data in accordance with NPC-approved data disposal procedures.

09 Cookies & Tracking Technologies

taya01 uses cookies and similar tracking technologies to enhance your experience on the platform. The following types of cookies are used:

• Strictly necessary cookies: Essential for the platform to function correctly. These include session authentication cookies and security tokens. These cannot be disabled without affecting platform functionality.
• Functional cookies: Used to remember your preferences, such as language settings and display options, to provide a more personalised experience.
• Analytics cookies: Used to collect aggregated, anonymised data about how players use the taya01 platform, helping us identify areas for improvement. No personally identifiable information is shared with analytics providers.
• Marketing cookies: Used to deliver relevant promotional content within the taya01 platform. These are only activated with your explicit consent.

You can manage or disable non-essential cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the taya01 platform. For detailed instructions on managing cookies in your specific browser, refer to your browser's help documentation.

10 Data Security

taya01 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption in transit: All data transmitted between your device and taya01 servers is protected using TLS 1.2 or higher encryption.
• Encryption at rest: Sensitive data, including KYC documents and financial records, is stored using AES-256 encryption.
• Access controls: Access to personal data is restricted to authorised taya01 personnel on a strict need-to-know basis, enforced through role-based access controls and multi-factor authentication.
• Intrusion detection: taya01 operates 24/7 network monitoring and intrusion detection systems to identify and respond to potential security threats in real time.
• Regular security audits: taya01 conducts periodic penetration testing and security audits by independent third-party specialists.
• Staff training: All taya01 personnel with access to personal data receive regular data protection and cybersecurity training.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, taya01 will notify the National Privacy Commission (NPC) within seventy-two (72) hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with RA 10173.

11 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by taya01:

• Right to be informed: The right to be told how your personal data is being collected and processed, as set out in this Policy.
• Right of access: The right to request a copy of the personal data taya01 holds about you, along with information about how it is being processed.
• Right to rectification: The right to request correction of any inaccurate or incomplete personal data we hold about you.
• Right to erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: The right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data protection rights have been violated.

12 Children's Privacy

taya01 is strictly an adult gaming platform. We do not knowingly collect personal data from individuals under the age of 21. The minimum age to register and use taya01 is 21 years, in accordance with Philippine law and PAGCOR regulations.

If taya01 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the data in question, and report the matter to the relevant authorities as required by law.

If you are a parent or guardian and believe that your child under 21 has registered on taya01, please contact us immediately using the details in Section 14 so we can take prompt action.

13 Amendments to This Policy

taya01 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The most current version of this Policy will always be available at taya01.vip/privacy-policy. The version number and effective date are displayed at the top of this page. Your continued use of the taya01 platform after the effective date of any amendment constitutes your acceptance of the revised Policy.

We encourage you to review this Policy periodically to stay informed about how taya01 protects your personal data.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data, please contact taya01's Data Protection Officer:

• Role: Data Protection Officer (DPO), taya01
• Email: [email protected]
• Support Email: [email protected]
• Live Chat: Available 24/7 through your taya01 account dashboard

taya01 aims to respond to all data subject requests within fifteen (15) business days. For complex requests, we may extend this period by a further fifteen (15) business days, in which case we will notify you of the extension and the reason for it.

If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through their official channels.