taya360 Privacy Policy

Section 01

1. Introduction

taya360 operates the online casino and sports betting platform accessible at taya360.app, providing Filipino players with access to live casino games, slot titles, bingo rooms, and sports betting markets in Philippine Peso. In delivering these services, taya360 necessarily processes personal data belonging to the players who register and use the Platform.

taya360 takes its data protection obligations seriously. This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines (DPA), its Implementing Rules and Regulations, and the applicable issuances of the National Privacy Commission (NPC). It sets out in clear terms the data taya360 collects, the purposes for which it is processed, the parties with whom it may be shared, the security measures applied to protect it, and the rights that every registered taya360 player holds over their personal information.

Throughout this document, references to "taya360," "we," "us," or "our" refer to the operator of the taya360 platform. References to "you," "your," or "Player" refer to any individual who has registered on or is using the taya360 Platform.

Section 02

2. Definitions

The following definitions apply throughout this Privacy Policy:

• "Personal Data" means any information from which a living individual can be directly or indirectly identified, including name, date of birth, contact details, government ID numbers, financial information, and device identifiers.
• "Sensitive Personal Data" means personal data concerning an individual's government-issued identification numbers, financial account details, and KYC verification documents, which receive a higher level of protection under Philippine data privacy law.
• "Processing" means any operation or set of operations performed on personal data, including collection, recording, storage, use, disclosure, or deletion.
• "Data Subject" means the individual to whom personal data relates — in this context, a registered taya360 player.
• "Data Controller" means taya360, which determines the purposes and means of processing personal data.
• "Third-Party Processor" means any external organisation that processes personal data on behalf of and under instructions from taya360.
• "KYC Documents" means identity verification documents submitted by a Player as part of the taya360 Know Your Customer process.
• "DPA" means the Data Privacy Act of 2012 of the Philippines (Republic Act No. 10173).

Section 03

3. Personal Data We Collect

taya360 collects personal data across several categories depending on the nature of your interaction with the Platform. The table below summarises the categories of data collected and examples within each category.

taya360 does not collect personal data beyond what is necessary for the purposes described in this Privacy Policy. We do not collect data relating to racial or ethnic origin, political opinions, religious beliefs, health information, or sexual orientation.

Section 04

4. How We Collect Your Data

taya360 collects personal data through the following channels:

4.1 Directly From You

The majority of personal data taya360 holds about you is provided directly by you in the course of your interaction with the Platform:

• During Account registration, where you submit your name, date of birth, contact details, and create login credentials;
• During KYC verification, where you upload government-issued identification documents and proof of address;
• When you make a deposit or request a withdrawal, providing payment method details;
• When you contact taya360 customer support by email or live chat;
• When you update your Account profile, responsible gaming settings, or communication preferences.

4.2 Automatically From Your Device

When you access the taya360 Platform, our systems automatically record certain technical data about your device and session, including your IP address, browser type, device identifiers, and session timestamps. This data is collected via server logs and cookies as described in Section 10.

4.3 From Third-Party Service Providers

taya360 may receive personal data about you from trusted third-party processors engaged to assist with KYC verification, fraud detection, payment processing, and AML compliance screening. In all such cases, these processors are contractually required to share only the data necessary for the specific purpose and to handle it in accordance with applicable Philippine data privacy requirements.

Section 05

5. How We Use Your Personal Data

taya360 processes your personal data only for specified, legitimate purposes. The table below maps each processing purpose to the data categories used and the applicable legal basis.

taya360 will not use your personal data for any purpose incompatible with those listed above without first obtaining your explicit consent or unless required to do so by applicable Philippine law.

Section 06

6. Legal Basis for Processing

Under the Data Privacy Act of 2012, taya360 relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to open your Account, verify your identity, process deposits and withdrawals, and deliver gaming services is necessary for the performance of the agreement between you and taya360.
• Legal obligation: taya360 is required by Philippine law — including PAGCOR regulations, AML legislation, and the DPA — to collect, retain, and in some cases report certain personal data. This includes KYC verification data, transaction records, and records relevant to responsible gaming compliance.
• Legitimate interests: taya360 processes certain data on the basis of its legitimate interests in operating a secure, fraud-free platform — including fraud detection, security monitoring, and Platform improvement — provided those interests are not overridden by your rights and interests.
• Consent: Where taya360 sends you marketing communications or uses non-essential cookies, we rely on your consent, which you may withdraw at any time through your Account settings or by contacting support.

Section 07

7. Data Sharing & Disclosure

taya360 does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your personal data only in the following limited circumstances:

7.1 Service Providers and Processors

taya360 engages trusted third-party processors to assist with specific functions, including KYC and identity verification services, payment processing (GCash, PayMaya, BDO, BPI, Metrobank, UnionBank, and other supported methods), fraud detection and AML screening, game software provision, customer support tooling, and IT infrastructure hosting. All processors are bound by data processing agreements requiring them to process your data solely on taya360's documented instructions and to maintain appropriate security standards.

7.2 Regulatory and Law Enforcement Authorities

taya360 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities where required to do so by law, court order, or regulatory direction. taya360 will notify you of such disclosures where legally permitted to do so.

7.3 Business Transfers

In the event of a merger, acquisition, or transfer of all or substantially all of taya360's assets, personal data held about Players may be transferred to the acquiring entity. taya360 will notify affected Players before any such transfer takes effect and will ensure that the receiving entity is bound by privacy obligations at least equivalent to those set out in this Privacy Policy.

Section 08

8. Data Retention

taya360 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account and KYC data: Retained for the duration of your Account plus a minimum of five (5) years following Account closure, in compliance with PAGCOR record-keeping requirements and Philippine AML legislation.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable AML reporting obligations.
• Gaming activity logs: Retained for three (3) years from the date of the relevant activity, or longer if required for dispute resolution or regulatory purposes.
• Customer support communications: Retained for two (2) years from the date of the last communication in a support thread, or until any related dispute is resolved, whichever is later.
• Marketing consent records: Retained for three (3) years from the date consent was recorded or withdrawn, to demonstrate compliance with consent requirements.
• Technical and session logs: Retained for twelve (12) months from the date of collection, unless a security incident requires longer retention for investigative purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised such that it can no longer be attributed to an identifiable individual.

Section 09

9. Data Security

taya360 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. Key security measures include:

• Encryption in transit: All data transmitted between your browser or device and the taya360 Platform is protected using TLS/SSL encryption;
• Encryption at rest: Sensitive personal data and KYC documents stored on taya360 servers are encrypted at rest;
• Access controls: Access to personal data is restricted on a strict need-to-know basis. taya360 staff and processors are granted only the minimum access required to perform their functions;
• Monitoring and logging: taya360 maintains audit logs of access to personal data and monitors for unusual access patterns or potential security incidents;
• Third-party security assessments: taya360's key processors are required to maintain their own security certifications and are subject to periodic review.

While taya360 takes data security seriously and maintains the measures described above, no online platform can guarantee absolute security. You play an important role in keeping your Account secure — choose a strong, unique password, do not share your login credentials with anyone, and contact taya360 support immediately if you suspect your Account has been compromised.

Section 10

10. Cookies & Tracking Technologies

taya360 uses cookies and similar tracking technologies to operate the Platform, remember your preferences, and analyse how the Platform is used. The following categories of cookies are used:

• Strictly necessary cookies: These cookies are required for the Platform to function. They include session authentication cookies that keep you logged into your taya360 Account and security cookies that help protect against cross-site request forgery. These cannot be disabled.
• Functional cookies: These remember your preferences such as language settings and responsible gaming configurations, so you do not need to re-enter them on each visit.
• Analytics cookies: These help taya360 understand how players navigate the Platform — which sections are most visited, where players encounter difficulties, and how game performance is experienced — so we can continue improving the taya360 experience. Analytics data is aggregated and does not identify individual players.

You can manage non-essential cookie preferences through your browser settings. Disabling functional or analytics cookies will not prevent you from using taya360 but may affect certain Platform features and personalisation.

Section 11

11. Your Rights as a Data Subject

Under the Data Privacy Act of 2012, every taya360 player has the following rights with respect to their personal data. You may exercise these rights at any time by contacting taya360 support at [email protected]. taya360 will respond to all valid rights requests within thirty (30) days.

Please note that some rights are subject to limitations. For example, taya360 cannot erase data that it is legally required to retain for AML or regulatory compliance purposes. Where a right cannot be exercised in full, taya360 will explain the reason clearly and in writing.

Section 12

12. Children and Minors

The taya360 Platform is strictly for individuals aged 21 years and above. taya360 does not knowingly collect personal data from any person under the age of 21. The KYC verification process is specifically designed to confirm that every Player meets the minimum age requirement before real-money features are unlocked.

If taya360 becomes aware that personal data belonging to a person under the age of 21 has been collected, that Account will be immediately suspended, the data will be deleted or anonymised in accordance with our data retention policy, and any funds will be handled in accordance with our Terms and Conditions and applicable law.

If you are a parent or guardian and believe that your child may have registered on taya360, please contact us immediately at [email protected] so we can investigate and take appropriate action without delay.

Section 13

13. Cross-Border Data Transfers

Some of taya360's third-party processors — including game software providers and cloud infrastructure partners — may be located outside the Philippines. Where personal data is transferred outside the Philippines, taya360 ensures that appropriate safeguards are in place to protect that data at a standard at least equivalent to the protections afforded under the Data Privacy Act of 2012.

Such safeguards include requiring recipient processors to be bound by contractual data protection obligations that mirror the requirements of the DPA, and in applicable cases, verifying that the recipient jurisdiction provides an adequate level of data protection as determined by the National Privacy Commission. taya360 does not transfer personal data internationally beyond what is necessary to operate the Platform and deliver services to Filipino players.

Section 14

14. Changes to This Privacy Policy

taya360 may update this Privacy Policy from time to time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When we make material changes to this policy, we will notify registered Players by email to the address on file and by displaying a prominent notice on the taya360 Platform prior to the changes taking effect.

The updated policy will display the revised effective date at the top of this page. Your continued use of the taya360 Platform following the publication of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree with the revised policy, you may request Account closure as described in the taya360 Terms and Conditions.

We encourage you to review this page periodically to stay informed about how taya360 protects your personal information.

Section 15

15. Contact & Complaints

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how taya360 has handled your personal data, please contact the taya360 Data Protection team:

• Email: [email protected]
• Response Time: Within 30 days of receipt of your request
• Support Language: English
• Support Hours: 24 hours a day, 7 days a week

If you are not satisfied with taya360's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines, which is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012.

For concerns related to responsible gaming and self-exclusion, please visit the Responsible Gaming page for details on the tools and resources available to taya360 players.