taya08 Privacy Policy

This Policy describes how taya08 ("we," "us," "our") acts as a personal information controller in relation to the personal data of Players ("you," "your") who access and use the taya08 platform. It covers data collected directly from you during registration, through your use of the platform, through payment transactions, and through your interactions with taya08 customer support.

This Policy should be read in conjunction with the taya08 Terms & Conditions, which govern your use of the platform and incorporate this Policy by reference. By creating a taya08 account or using any taya08 service, you confirm that you have read, understood, and consented to the data practices described in this Policy.

Where taya08 processes your personal data in its capacity as a personal information processor on behalf of a third-party controller (for example, in connection with certain game provider integrations), this Policy applies only to taya08's own processing activities. Third-party game providers and payment processors operate under their own privacy frameworks, which are independent of this Policy.

taya08 collects personal data that is necessary for the provision of our gaming services, compliance with PAGCOR regulations, and fulfilment of our obligations under Philippine law. The categories of personal data we collect include:

2.1 Registration & Account Data

• Full legal name as it appears on a valid Philippine government-issued identification document.
• Date of birth (used to verify the minimum age requirement of 21 years).
• Philippine mobile number (used as the primary account login credential and for OTP two-factor authentication).
• Email address, where provided.
• Residential address in the Philippines.
• Username and account password (stored in hashed form — taya08 does not store plaintext passwords).

2.2 Identity Verification (KYC) Data

• Copies of government-issued identification documents (e.g., passport, PhilSys National ID, driver's licence, UMID, SSS card, Voter's ID).
• Selfie or live photo for identity verification purposes, where required for enhanced KYC.
• Source of funds declarations, where required by PAGCOR regulations or anti-money laundering compliance obligations.

2.3 Financial & Transaction Data

• GCash account numbers, PayMaya account references, and bank account details associated with deposit and withdrawal transactions.
• Transaction history, including deposit amounts, withdrawal requests, bonus credit and debit records, and game wager history.
• Payment instrument metadata required for transaction processing and fraud prevention.

2.4 Technical & Usage Data

• IP address, device type, device identifier, operating system, and browser type collected at login and during active sessions.
• Session duration, page views, game session data, and navigation patterns within the taya08 platform.
• Geolocation data at the country and region level, derived from IP address, used to verify geographic eligibility and comply with regulatory requirements.
• Cookies and similar tracking technologies as described in Section 8 of this Policy.

2.5 Communications Data

• Records of customer support interactions, including live chat transcripts, email correspondence, and any documents you submit in connection with support requests.
• Feedback, complaints, and dispute records.

taya08 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, authenticate, and administer your taya08 account, including processing login requests, managing wallet balances, and implementing account security measures such as OTP verification.
• Service Provision: To provide access to taya08's gaming services, process game wagers, apply promotional bonuses, and deliver the features described on the platform.
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment methods. This includes passing necessary transaction data to payment processors acting as our authorised service providers.
• Identity Verification & KYC Compliance: To verify your identity and age in compliance with PAGCOR requirements and Republic Act No. 9160 (Anti-Money Laundering Act) as amended.
• Fraud Prevention & Security: To detect, prevent, and investigate fraudulent activity, money laundering, account takeovers, prohibited conduct, and other security incidents affecting taya08 or its Players.
• Regulatory Compliance: To comply with our obligations under PAGCOR regulations, Philippine tax law, anti-money laundering regulations, and any other applicable legal requirements.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools including deposit limits, self-exclusion requests, and session time limits in accordance with taya08's responsible gaming framework.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account and payment issues.
• Platform Improvement: To analyse usage patterns and technical performance data to improve the taya08 platform, optimise the user experience for Filipino players, and develop new features.
• Marketing Communications: Where you have provided consent, to send you information about taya08 promotions, new games, and platform updates via SMS or email. You may withdraw this consent at any time by contacting taya08 support.

taya08 processes your personal data on the following legal bases under the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and taya08 as set out in the Terms & Conditions — including account creation, game provision, and payment processing.
• Legal Obligation: Processing is necessary for taya08 to comply with its legal obligations under PAGCOR regulations, the Anti-Money Laundering Act, and other applicable Philippine law.
• Legitimate Interests: Processing is necessary for taya08's legitimate interests in fraud prevention, platform security, and responsible gaming compliance, where those interests are not overridden by your data protection rights.
• Consent: For optional processing activities such as direct marketing communications, we rely on your freely given, specific, informed, and unambiguous consent. Where consent is the legal basis, you have the right to withdraw it at any time without detriment to your account.

taya08 does not sell your personal data to third parties. We share personal data only as necessary and only with parties who are contractually bound to protect it in accordance with applicable data protection law. Disclosures may occur in the following circumstances:

• Game Providers: Third-party game providers (including but not limited to JILI Games, Pragmatic Play, PG Soft, Evolution Gaming) receive session tokens and game-relevant data necessary to deliver game services. Game providers operate as independent data controllers in respect of game server data.
• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers receive transaction data necessary to execute deposits and withdrawals. These providers operate under their own privacy frameworks and are subject to Bangko Sentral ng Pilipinas (BSP) data protection requirements.
• Identity Verification Services: KYC and anti-money laundering compliance service providers may receive identity documentation for verification purposes, operating as our authorised data processors.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government authorities may receive personal data where required by law, court order, or regulatory directive. taya08 will notify you of such disclosures to the extent permitted by law.
• Professional Advisors: Legal, accounting, and auditing professionals engaged by taya08 may access personal data as strictly necessary for their professional functions, subject to professional confidentiality obligations.
• Corporate Transactions: In the event of a merger, acquisition, or restructuring of taya08's business, personal data may be transferred as part of the transaction, subject to the same data protection standards described in this Policy.

taya08 retains your personal data for as long as necessary to fulfil the purposes for which it was collected, subject to applicable legal retention requirements. The following retention periods apply:

• Account & KYC Data: Retained for a minimum of five (5) years from the date of account closure, in compliance with PAGCOR retention requirements and the Anti-Money Laundering Act's record-keeping obligations.
• Transaction Records: Retained for a minimum of five (5) years from the transaction date, in accordance with PAGCOR regulations and applicable tax law.
• Game Session Data: Retained for a minimum of three (3) years to support dispute resolution and regulatory enquiries.
• Customer Support Records: Retained for three (3) years from the date of the final interaction.
• Marketing Consent Records: Retained for the duration of the marketing relationship and for two (2) years thereafter as evidence of consent.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with our data disposal procedures, unless a longer retention period is required by law or is necessary for the establishment, exercise, or defence of legal claims.

taya08 implements the following security measures for the protection of personal data:

• Transport Layer Security (TLS) encryption for all data transmitted between user devices and taya08 servers.
• Encryption at rest for sensitive data fields including identity document copies and financial account references.
• Password hashing using industry-standard cryptographic algorithms — taya08 does not store or have access to plaintext passwords.
• Two-factor authentication (OTP via SMS) for all account login events and high-value withdrawal requests.
• Access controls limiting internal access to personal data to authorised personnel with a legitimate business need.
• Regular security assessments and penetration testing of the taya08 platform infrastructure.
• Incident response procedures for detecting, reporting, and addressing personal data breaches in accordance with the National Privacy Commission's breach notification requirements.

Notwithstanding these measures, no online system can guarantee absolute security. Players should take their own precautions including using strong, unique passwords, enabling OTP verification, and avoiding access to taya08 via unsecured public Wi-Fi networks.

taya08 uses cookies and similar tracking technologies on the taya08 platform for the following purposes:

• Essential Cookies: Necessary for the operation of the platform, including maintaining your login session, storing your shopping cart for deposits, and enabling security features. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences, such as language settings and responsible gaming tool configurations, to provide a more personalised experience.
• Analytics Cookies: Used to collect aggregated, anonymised data about how Players use the taya08 platform, enabling us to improve site performance, identify navigation issues, and optimise game lobby layouts. Analytics data is processed at an aggregate level and does not identify individual players.
• Security Cookies: Used to detect and prevent fraudulent activity, bot access, and credential stuffing attacks on the taya08 login and registration flows.

You may manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using taya08's core gaming and payment services, but may affect the availability of certain personalisation features. taya08 does not use third-party advertising cookies or share cookie data with advertising networks.

Under the Data Privacy Act of 2012 (Republic Act No. 10173), Philippine data subjects have the following rights in respect of their personal data processed by taya08:

• Right to Be Informed: The right to be informed of the personal data we hold about you, the purposes of processing, and your other rights under this Policy and applicable law. This Policy is part of how taya08 fulfils this obligation.
• Right of Access: The right to request a copy of the personal data taya08 holds about you, including information about how it is processed and with whom it is shared.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data that taya08 holds about you. You may update basic account details directly through the Account Settings section of the taya08 platform; for KYC data corrections, please contact support.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to taya08's legal retention obligations and any other legal grounds for continued processing.
• Right to Object: The right to object to processing of your personal data for direct marketing purposes. To opt out of marketing communications, contact taya08 support at any time.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format where processing is based on consent or contractual necessity.
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission of the Philippines if you believe that taya08 has processed your personal data in breach of the Data Privacy Act.

To exercise any of these rights, please contact taya08 at [email protected]. taya08 will respond to verified data rights requests within fifteen (15) business days of receipt, in accordance with the timelines prescribed by the National Privacy Commission. We may need to verify your identity before processing a request.

taya08 verifies the age of all registering Players as part of the account creation and KYC process. Where taya08 becomes aware that personal data has been collected from a person who is under 21 years of age, that account will be immediately suspended, all associated personal data will be deleted to the extent permitted by applicable retention obligations, and any funds held in the account will be handled in accordance with our legal compliance procedures.

Account holders are responsible for ensuring that persons under 21 years of age do not access their taya08 accounts or devices on which taya08 is accessible. taya08 recommends that account holders use device-level PIN, password, or biometric protections to prevent unauthorised access by minors.

The taya08 platform may contain references or integrations with third-party services including game providers, payment processors, and analytics tools. This Privacy Policy applies exclusively to personal data processed by taya08 in its own right. taya08 is not responsible for the privacy practices of third-party services, and we encourage Players to review the privacy policies of any third-party services they interact with in connection with their taya08 account.

taya08 does not host or link to third-party advertising content on the platform. Game provider integrations are governed by data processing agreements that require game providers to process player data only as necessary for game delivery and to maintain equivalent data protection standards.

taya08 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or platform features. The effective date of the current version is indicated at the top of this Policy. Where material changes are made, taya08 will notify registered Players via in-platform notification or email to the registered contact address.

Your continued use of the taya08 platform following the effective date of any update constitutes your acknowledgement of the revised Policy. If you do not accept the updated Policy, you must stop using taya08 and may request account closure and data deletion subject to applicable retention requirements.

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, you may contact taya08 through the following channels:

Philippine players who wish to escalate a data privacy complaint that has not been resolved by taya08 may contact the National Privacy Commission of the Philippines at privacy.gov.ph.