taya357 Privacy
Policy

1.1 The data controller responsible for the personal information collected through the taya357 platform — accessible at taya357.net — is the taya357 operating entity duly registered and operating within the Philippine regulatory framework under PAGCOR authority.

1.2 For all data privacy related inquiries, requests, or complaints, taya357 has designated a Data Protection Officer (DPO) who can be reached via the contact details provided in Section 14 of this Policy. The DPO is responsible for overseeing taya357's compliance with RA 10173 and its Implementing Rules and Regulations.

1.3 taya357 is registered with the National Privacy Commission (NPC) of the Philippines in accordance with the requirements of RA 10173 applicable to personal information controllers processing personal data that affects Philippine nationals.

2.1 taya357 collects personal data through a number of channels — including the account registration process, the taya357 Login system, KYC verification submissions, payment transactions, customer support interactions, and your ongoing use of the taya357 Casino platform. The categories of personal data we collect include the following:

2.2 taya357 does not knowingly collect sensitive personal information as defined under RA 10173 (such as health data, political affiliations, or religious beliefs) except where required for responsible gaming assessments or as mandated by applicable law, in which case explicit consent will be obtained.

2.3 Where you choose not to provide personal data that is marked as mandatory during registration or KYC, taya357 may be unable to open or maintain your account or provide certain services on the taya357 platform.

3.1 taya357 processes your personal data on one or more of the following legal bases as recognised under the Philippine Data Privacy Act of 2012:

• Contractual Necessity: Processing is necessary to perform the contract between you and taya357 — that is, to provide you with access to the taya357 Casino platform, process your transactions, operate your account, and deliver the services you have registered for.
• Legal Obligation: Processing is required to comply with taya357's legal obligations under PAGCOR regulations, the Anti-Money Laundering Act (RA 9160 as amended), the Philippine Data Privacy Act (RA 10173), and other applicable Philippine laws.
• Legitimate Interests: Processing is necessary for taya357's legitimate interests — including fraud prevention, platform security, responsible gaming monitoring, and business analytics — where such interests are not overridden by your fundamental rights and freedoms.
• Consent: For certain processing activities — such as sending you promotional communications or processing optional data — taya357 will seek and rely upon your explicit consent. You may withdraw such consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

4.1 taya357 uses the personal data collected from you for the following purposes:

• Account Management: To create, maintain, verify, and administer your taya357 account and taya357 Login credentials;
• Identity Verification (KYC): To verify your identity, age (21+ requirement), and eligibility to participate in online casino gaming in the Philippines as required by PAGCOR;
• Payment Processing: To process deposits and withdrawals through GCash, Maya, BPI, BDO, UnionBank, 7-Eleven Cliqq, Coins.ph, and USDT TRC20 in compliance with AMLC reporting requirements;
• Gaming Services: To provide access to the taya357 Casino lobby, slots, live casino, bingo, and other game categories in your taya357 account;
• Regulatory Compliance: To fulfil taya357's obligations to PAGCOR, the AMLC, the NPC, and other competent Philippine authorities, including transaction monitoring and suspicious activity reporting;
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, multi-accounting, bonus abuse, money laundering, and other prohibited conduct on the taya357 platform;
• Responsible Gaming: To monitor gaming patterns, enforce self-exclusion and deposit limit settings, and proactively support Players showing indicators of problem gambling behaviour;
• Customer Support: To respond to your inquiries, complaints, and support requests through taya357's live chat and email channels in English, Tagalog, and Cebuano;
• Personalisation: To customise your taya357 Casino experience based on your game preferences, platform usage patterns, and promotional eligibility — only where you have provided consent;
• Platform Improvement: To analyse aggregated, anonymised usage data for the purpose of improving the taya357 platform's performance, interface design, and service quality;
• Marketing Communications: To send you promotional offers, bonus alerts, and newsletters — only where you have explicitly opted in. You may unsubscribe at any time.

4.2 taya357 will not use your personal data for any purpose that is incompatible with the purposes for which it was originally collected, without first obtaining your consent or establishing another valid legal basis.

5.1 taya357 may share your personal data with the following categories of third parties, subject to strict data processing agreements requiring equivalent privacy and security standards:

• Payment Service Providers: GCash (Mynt), Maya Philippines, BPI, BDO, UnionBank, and other payment processors and e-wallet providers — solely to facilitate your deposits and withdrawals;
• KYC and Identity Verification Providers: Third-party identity verification services engaged to assist taya357 in meeting its PAGCOR KYC and AMLC obligations — including ID document verification and biometric liveness checks;
• Fraud Prevention and Security Providers: External fraud detection, device fingerprinting, and cybersecurity service providers engaged to protect the integrity of the taya357 platform;
• Regulatory and Government Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent Philippine government authorities — where required by law or regulatory obligation;
• IT Infrastructure and Hosting Providers: Cloud hosting, database management, and content delivery network (CDN) providers who process data on taya357's behalf under data processing agreements;
• Customer Support Platforms: Third-party live chat and help desk platform providers who facilitate taya357's 24/7 customer support operations;
• Legal and Professional Advisors: Law firms, auditors, and compliance consultants who provide legal, audit, or regulatory advisory services to taya357, subject to professional confidentiality obligations.

5.2 In the event that taya357 undergoes a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the successor entity as part of such transaction, subject to the same privacy protections set out in this Policy and notification to affected users where required by RA 10173.

6.1 taya357 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following retention guidelines apply:

• Account and KYC Data: Retained for a minimum of five (5) years following account closure, as required by PAGCOR regulations and AMLC record-keeping obligations under RA 9160;
• Transaction Records: Retained for a minimum of five (5) years following the date of each transaction in accordance with AMLC and BIR requirements;
• Gaming Activity Records: Retained for a minimum of two (2) years following the last recorded gaming activity on the account;
• Customer Support Communications: Retained for a period of two (2) years from the date of the last interaction, to support dispute resolution;
• Technical and Log Data: Typically retained for twelve (12) months for security and platform analysis purposes;
• Marketing Consent Records: Retained for the duration of your marketing opt-in status plus three (3) years to demonstrate compliance.

6.2 Upon expiry of the applicable retention period, taya357 will securely delete or anonymise your personal data in a manner that prevents its reconstruction or re-identification, unless a longer retention period is required by law.

6.3 Where a legal hold or regulatory investigation is ongoing at the time a retention period would otherwise expire, taya357 will preserve the relevant data until the hold or investigation is resolved.

7.1 taya357 implements the following technical and organisational security measures to protect your personal data against unauthorised access, loss, disclosure, or destruction:

• Encryption in Transit: All data transmitted between your browser or device and the taya357 platform is encrypted using TLS 1.3 / 256-bit SSL encryption;
• Encryption at Rest: Sensitive data stored in taya357's databases — including identity documents, financial records, and authentication data — is encrypted using AES-256;
• Password Security: taya357 Login passwords are never stored in plaintext. Passwords are hashed using a strong cryptographic hashing algorithm with individual salts;
• Access Controls: Access to personal data within taya357's internal systems is restricted on a strict need-to-know basis, with role-based access controls and multi-factor authentication required for all staff accessing sensitive data;
• Network Security: taya357's infrastructure is protected by enterprise-grade firewalls, intrusion detection systems (IDS), intrusion prevention systems (IPS), and DDoS mitigation;
• Regular Security Audits: taya357 undergoes regular independent penetration testing and security audits by qualified third-party cybersecurity firms;
• Staff Training: All taya357 staff with access to personal data receive mandatory data privacy and information security training in accordance with RA 10173 requirements.

7.2 While taya357 employs industry-standard security measures, no online platform can guarantee absolute security against all possible threats. You are responsible for maintaining the security of your own taya357 Login credentials and for promptly notifying taya357 if you suspect any unauthorised access to your account.

8.1 taya357 uses cookies and similar tracking technologies on the taya357 platform to ensure correct operation, improve performance, and — where consent has been obtained — to personalise your experience. The following categories of cookies are used:

8.2 You can manage cookie preferences through your browser settings. Most browsers allow you to refuse, delete, or receive alerts about cookies. Please note that disabling strictly necessary cookies will affect the functionality of the taya357 platform, including the taya357 Login system.

8.3 taya357 does not use cookies for the purpose of building profiles of your personal data for sale to third-party advertisers.

9.1 taya357 employs mandatory age verification as part of the account registration and KYC process. Any account found to have been registered by a person under 21 years of age will be immediately suspended, all associated personal data will be securely deleted, and any deposited funds will be returned to their source.

9.2 If you have reason to believe that a minor has registered on the taya357 platform or provided personal data to taya357, please contact the taya357 support team immediately at [email protected]. taya357 will investigate and act promptly upon receipt of such reports.

10.1 taya357's primary operations and data storage infrastructure are based within the Philippines. However, certain third-party service providers engaged by taya357 — including cloud hosting providers, KYC verification platforms, and fraud prevention systems — may process or store data in jurisdictions outside the Philippines.

10.2 Where personal data is transferred outside the Philippines, taya357 ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under RA 10173. Such safeguards include:

• Data processing agreements incorporating the standard contractual clauses recognised by the National Privacy Commission;
• Transfer only to jurisdictions that have been assessed as providing an adequate level of data protection;
• Implementation of supplementary technical measures — including end-to-end encryption — where the legal protections in the destination jurisdiction are assessed as insufficient on their own.

10.3 taya357 will not transfer your personal data to any jurisdiction where taya357 cannot ensure adequate protection of that data in compliance with RA 10173 and NPC guidelines on cross-border data flows.

11.1 To exercise any of your rights as a data subject under RA 10173 — including the right to access, correct, erase, object to, or port your personal data — you may submit a formal Data Subject Request (DSR) to taya357's Data Protection Officer using the contact details provided in Section 14 of this Policy.

11.2 taya357 will respond to all verified Data Subject Requests within fifteen (15) Philippine business days of receipt. Where a request is complex or involves a large volume of data, taya357 may extend this period by a further fifteen (15) business days, with written notification to the requestor explaining the reason for the extension.

11.3 To protect your privacy, taya357 will require verification of your identity before processing any Data Subject Request. You will be asked to confirm your registered taya357 account email address and provide a copy of a valid government-issued ID. taya357 will not fulfil requests that cannot be verified.

11.4 In certain circumstances, taya357 may be unable to fulfil a Data Subject Request in full — for example, where erasure of data is requested but taya357 is subject to a legal obligation to retain that data under PAGCOR regulations or AMLC requirements. In such cases, taya357 will explain the limitation in its response and, where possible, partially fulfil the request.

11.5 taya357 will not charge a fee for processing Data Subject Requests in ordinary circumstances. However, where requests are manifestly unfounded, repetitive, or excessive, taya357 reserves the right to charge a reasonable administrative fee or decline to act on the request, with written explanation provided.

12.1 In the event of a personal data breach that is likely to result in a real risk of serious harm to affected data subjects, taya357 will comply with the mandatory breach notification requirements under Section 20(f) of RA 10173 and the NPC Circular on Personal Data Breach Management.

12.2 Specifically, taya357 will:

• Notify the National Privacy Commission (NPC) of the breach within seventy-two (72) hours of becoming aware of it, where the breach meets the threshold for mandatory notification;
• Notify affected data subjects — including taya357 users whose personal data has been compromised — without undue delay and in plain, understandable language describing the nature of the breach, the data affected, the likely consequences, and the measures taya357 has taken or proposes to take;
• Maintain a complete internal record of all personal data breaches, including those that do not meet the NPC notification threshold, in accordance with the NPC's documentation requirements.

12.3 taya357 maintains a documented Data Breach Response Plan that is reviewed and tested at least annually. The plan designates a breach response team, establishes clear escalation procedures, and defines the steps to be taken to contain, assess, and remediate any breach affecting taya357 user data.

13.1 taya357 reserves the right to update or amend this Privacy Policy from time to time to reflect changes in applicable law, PAGCOR regulatory requirements, NPC guidance, or taya357's data processing practices. All updates will be posted on this page with the revised effective date clearly indicated at the top of the Policy.

13.2 Where taya357 makes material changes to this Privacy Policy — that is, changes that significantly affect your rights as a data subject or taya357's data processing activities — taya357 will notify registered users via email to the address registered on your taya357 account and/or via a prominent notice on the taya357 platform at least fourteen (14) days prior to the changes taking effect.

13.3 Your continued use of the taya357 platform following the effective date of any revised Privacy Policy constitutes your acknowledgement of the updated Policy. If you do not agree with the changes, you must cease using the taya357 platform and may request closure of your account in accordance with the procedures set out in the taya357 Terms and Conditions.

13.4 taya357 recommends that you review this Privacy Policy periodically to stay informed about how your personal data is being protected. The most current version of the Policy is always available at taya357.net/privacy-policy.

14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or taya357's handling of your personal data, you may contact taya357's designated Data Protection Officer (DPO) through the following channels:

14.2 If you are not satisfied with taya357's response to your data privacy concern, or if you believe that taya357 is not processing your personal data in accordance with RA 10173, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines:

• National Privacy Commission (NPC)
• 5th Floor, Delegation Building, PICC Complex, Pasay City, Metro Manila, Philippines
• Website: privacy.gov.ph (for reference only — taya357 does not link externally)

14.3 taya357 encourages you to contact us directly in the first instance, as we are committed to resolving all data privacy concerns promptly, fairly, and in full compliance with Philippine law.