taya07 Privacy Policy

taya07 ("taya07", "we", "us", "our") is the operator of the online gaming platform accessible at taya07.org and acts as the Data Controller in respect of the personal information you provide when registering for or using the taya07 platform.

As a Data Controller, taya07 determines the purposes and means of processing your personal data. We have appointed a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and applicable Philippine data protection law. Contact details for the DPO are provided in Section 14 of this Policy.

taya07 collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

• Full legal name
• Date of birth (for age verification — players must be 21+)
• Philippine mobile number
• Email address
• Username / display name chosen during registration

• Government-issued ID number and copies (e.g., PhilSys ID, passport, driver's licence, UMID)
• Selfie or facial image submitted during verification
• Proof of address documents where required

• GCash or Maya account reference (masked; we do not store full e-wallet credentials)
• Bank account details for withdrawal processing (bank name, masked account number)
• Transaction history: deposit amounts, withdrawal amounts, dates, payment methods

• Game session records: games played, bets placed, outcomes, timestamps
• Bonus and promotion usage history
• Account balance history

• IP address and approximate geolocation (city/region level)
• Device type, operating system, and browser version
• Session cookies and session identifiers
• Login timestamps and session durations

• Records of live chat conversations with taya07 support
• Email correspondence with taya07
• Complaint and dispute records

taya07 collects personal data through the following means:

• Directly from you — when you register a taya07 account, complete KYC verification, make deposits or withdrawals, contact customer support, or participate in promotions
• Automatically — through cookies, session tracking, and server logs when you access and use the taya07 platform
• From payment providers — transaction confirmation data from GCash, Maya, or bank partners when you conduct a financial transaction on taya07
• From identity verification services — where taya07 uses a third-party KYC provider to verify the authenticity of identity documents submitted during verification

taya07 uses the personal data we collect for the following purposes:

1. Account Management — to create, maintain, and secure your taya07 account, including processing login authentication and OTP verification
2. Age and Identity Verification — to confirm that you are at least 21 years of age and to verify your identity as required by applicable regulations
3. Payment Processing — to process your deposits and withdrawal requests via GCash, Maya, bank transfer, and other supported Philippine payment methods
4. Responsible Gaming — to monitor gaming activity for responsible gaming indicators, apply player-requested limits, and enforce self-exclusion requests
5. Anti-Fraud and Security — to detect, investigate, and prevent fraudulent transactions, account takeover attempts, money laundering, and other prohibited conduct
6. Legal Compliance — to comply with applicable Philippine laws, PAGCOR regulatory requirements, anti-money laundering obligations under RA 9160 (AMLA), and lawful requests from Philippine regulatory or law enforcement authorities
7. Customer Support — to respond to your inquiries, complaints, and support requests
8. Platform Improvement — to analyze platform usage patterns and improve the taya07 user experience; analysis is conducted on aggregated, anonymized data where possible
9. Promotions and Marketing — to send you information about taya07 promotions, bonuses, and offers where you have consented to receive such communications. You may withdraw consent at any time by contacting support.

Under the Philippine Data Privacy Act of 2012 (RA 10173), taya07 processes your personal data on the following legal bases:

• Contractual Necessity — processing required to fulfill our contractual obligations to you as a taya07 account holder (account management, payment processing, game provision)
• Legal Obligation — processing required to comply with applicable Philippine law, including PAGCOR regulations, AMLA obligations, and lawful regulatory requests
• Legitimate Interest — processing necessary for taya07's legitimate interests in fraud prevention, platform security, and responsible gaming monitoring, provided these interests are not overridden by your rights
• Consent — processing for marketing communications and certain optional data uses, where your explicit consent has been obtained. Consent is freely given and may be withdrawn at any time without affecting the lawfulness of prior processing.

taya07 does not sell or rent your personal data to any third party. We may share your personal data with the following categories of recipients solely as necessary for the purposes described in this Policy:

• Payment Processors — GCash (GXI / Globe Fintech), Maya (PayMaya Philippines), InstaPay-connected banks, and other payment partners, solely for transaction processing and confirmation
• KYC / Identity Verification Providers — third-party identity verification services engaged to validate government-issued ID documents submitted during account verification
• Game Providers — licensed game software providers (e.g., Pragmatic Play, PG Soft, Jili) who may process limited gameplay data as part of delivering game services; such providers are contractually bound to data protection standards consistent with this Policy
• Regulatory Authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine regulatory or law enforcement authorities, where disclosure is required by law or valid legal order
• Professional Advisors — legal counsel, auditors, and compliance consultants, bound by professional confidentiality obligations

taya07 retains your personal data for no longer than is necessary for the purposes for which it was collected, subject to the following:

• Active Account Data — retained for the duration of your taya07 account and for a period of at least five (5) years following account closure, in compliance with AMLA record-keeping obligations under Philippine law
• KYC / Identity Documents — retained for five (5) years from account closure or last transaction, as required under PAGCOR and AMLA regulations
• Transaction Records — retained for five (5) years from the date of each transaction
• Support Communications — retained for three (3) years from the date of the communication, or longer if the communication is related to an ongoing dispute or regulatory inquiry
• Marketing Consent Records — retained until consent is withdrawn plus a reasonable period for record-keeping purposes

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with taya07's data disposal procedures.

taya07 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• Encryption: All data transmitted between your browser or device and the taya07 platform is encrypted using TLS 1.2 or higher. Data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data within taya07's systems is restricted to authorized personnel on a need-to-know basis. All access is logged and audited.
• Two-Factor Authentication: SMS OTP-based two-factor authentication is available for all taya07 player accounts and is mandatory for staff accessing internal systems containing personal data.
• Fraud Monitoring: Real-time monitoring systems detect and alert on suspicious login activity, unusual transaction patterns, and potential account compromises.
• Security Testing: taya07 conducts periodic security assessments and vulnerability testing of its platform infrastructure.

Despite these measures, no system connected to the internet can guarantee absolute security. In the event of a personal data breach that poses a risk to your rights, taya07 will notify the National Privacy Commission (NPC) and affected data subjects in accordance with the breach notification requirements of RA 10173.

taya07 uses cookies and similar tracking technologies on the taya07.org website for the following purposes:

• Strictly Necessary Cookies: Required for core platform functionality, including maintaining your login session, remembering your language preference, and enabling secure payment processing. These cookies cannot be disabled without breaking core platform functionality.
• Performance and Analytics Cookies: Used to collect anonymized data about how visitors use the taya07 platform, including which pages are most visited and how players navigate the site. This data helps taya07 improve platform performance and user experience.
• Functional Cookies: Enable enhanced features such as remembering your game preferences, preferred currency display, and responsible gaming settings between sessions.

You may manage cookie preferences through your browser settings. Blocking strictly necessary cookies may impair your ability to use the taya07 platform. taya07 does not use advertising or cross-site tracking cookies.

As a data subject under the Philippine Data Privacy Act of 2012 (RA 10173), you have the following rights in relation to your personal data held by taya07:

To exercise any of the above rights, contact taya07's Data Protection Officer using the details in Section 14. taya07 will respond to verified data rights requests within thirty (30) calendar days.

The taya07 platform is strictly intended for individuals aged 21 years and above. taya07 does not knowingly collect personal data from any person under 21 years of age. If we become aware that personal data has been collected from a person under 21, we will immediately suspend the relevant account, delete the associated personal data, and return any deposited funds through the original payment method after identity verification.

If you are a parent or guardian and believe that a minor has registered for a taya07 account, please contact us immediately via live chat or at the email address in Section 14.

Certain personal data processed by taya07 may be transferred to, stored in, or processed by service providers located outside the Philippines — for example, game software providers with data centers in other jurisdictions. Any such cross-border transfer of personal data is conducted in accordance with the requirements of RA 10173 and its Implementing Rules, including ensuring that the recipient country or organization provides adequate data protection standards, or that appropriate contractual safeguards (such as standard contractual clauses) are in place before the transfer occurs.

taya07 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or platform services. When material changes are made, we will update the "Last Updated" date at the top of this page. For significant changes that materially affect how we process your personal data, taya07 will notify you via email to your registered address or via an in-platform notification at your next login.

Continued use of the taya07 platform following the effective date of any revised Privacy Policy constitutes your acknowledgment of the updated terms. If you do not agree with any changes, please discontinue use of the platform and contact support to request account closure.

For any questions, concerns, or requests relating to this Privacy Policy or the exercise of your data rights, please contact taya07's Data Protection Officer through the following channels:

• Live Chat: Available 24/7 via taya07.org — fastest response for account-related queries
• Email: [email protected] — for formal data rights requests, please include "Data Rights Request" in your subject line