Privacy Policy – tayaplus

1. Introduction

This Privacy Policy ("Policy") is issued by tayaplus ("tayaplus," "we," "us," or "our") and governs the collection, use, storage, disclosure, and protection of personal data of players ("you," "your," or "User") who access or use the tayaplus online casino platform available at tayaplus.net (the "Platform").

tayaplus is committed to protecting the privacy of Filipino players and all users of the Platform in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and applicable issuances of the National Privacy Commission ("NPC") of the Philippines.

By registering a tayaplus account or using any feature of the Platform, you acknowledge that you have read, understood, and consent to the data processing practices described in this Policy. If you do not agree, you must not register or use the Platform.

This Policy is incorporated by reference into the tayaplus Terms & Conditions. Capitalized terms not defined herein have the meanings given in the Terms & Conditions.

2. Data Controller

tayaplus is the data controller with respect to the personal data collected through the Platform. As data controller, tayaplus determines the purposes and means of processing your personal data. tayaplus has designated a Data Protection Officer ("DPO") responsible for overseeing compliance with this Policy and applicable data privacy laws.

Contact information for the tayaplus DPO is provided in Section 15 of this Policy. Players in the Philippines may also raise data privacy concerns directly with the National Privacy Commission at npc.gov.ph.

3. Data We Collect

3.1 Registration Data

When you create a tayaplus account, we collect: full name, date of birth, nationality, residential address (including city, province, and postal code), email address, and mobile phone number. This data is required to establish your account and verify your eligibility (21+ age requirement).

3.2 Identity Verification (KYC) Data

To comply with anti-money laundering ("AML") obligations and PAGCOR's responsible gaming framework, tayaplus may collect copies of government-issued identification documents (e.g., SSS ID, PhilHealth ID, Driver's License, Philippine Passport), proof of address documents, and proof of payment method ownership.

3.3 Financial Data

tayaplus collects data relating to your financial transactions on the Platform, including deposit amounts, withdrawal requests, payment method identifiers (e.g., GCash mobile number, bank account last four digits, USDT wallet address), and transaction histories. tayaplus does not store full card numbers or full bank account numbers.

3.4 Gaming Activity Data

tayaplus records your gaming activity on the Platform, including games played, bets placed, wagers won and lost, session duration, and bonus usage. This data is used for account management, dispute resolution, and responsible gaming monitoring.

3.5 Technical and Device Data

When you access the Platform, tayaplus automatically collects technical data including your IP address, browser type and version, operating system, device type, screen resolution, language settings, and session timestamps. This data is collected for security, fraud prevention, and service optimization purposes.

3.6 Communications Data

Records of communications between you and tayaplus support — including live chat transcripts, email correspondence, and support tickets — are retained for service quality, training, and dispute resolution purposes.

4. How We Collect Data

tayaplus collects personal data through the following means:

• Directly from you: Information you provide during account registration, KYC submission, deposit and withdrawal forms, and when contacting customer support.
• Automatically: Technical and usage data collected automatically through cookies, server logs, and similar technologies when you access and use the Platform.
• From third parties: Identity verification data from KYC/AML service providers; fraud detection signals from security service partners; payment confirmation data from payment processors (GCash, PayMaya, BDO, BPI, Metrobank, and cryptocurrency networks).

5. Legal Basis for Processing

tayaplus processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012:

• Consent: Where you have given specific, informed, and freely given consent to processing, such as for marketing communications.
• Contractual necessity: Processing required to perform our contract with you (the tayaplus account agreement), including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable laws, including AML obligations, tax reporting, and PAGCOR regulatory requirements.
• Legitimate interests: Processing for purposes of fraud prevention, platform security, service improvement, and responsible gaming monitoring, where our interests are not overridden by your data protection rights.

6. How We Use Your Data

tayaplus uses your personal data for the following purposes:

• Creating and managing your tayaplus account, including verifying your identity and eligibility.
• Processing deposits, withdrawals, and all financial transactions on the Platform.
• Delivering the games and services available on the Platform.
• Administering bonuses, promotions, and loyalty programs.
• Providing customer support and resolving disputes.
• Detecting, preventing, and investigating fraud, money laundering, and other prohibited activities.
• Monitoring gaming activity for responsible gaming purposes, including identifying patterns consistent with problem gambling behavior.
• Complying with AML, KYC, and other legal and regulatory obligations.
• Improving and developing the tayaplus Platform through analysis of aggregated and anonymized usage data.
• Sending transactional communications (account notifications, deposit confirmations, withdrawal updates, security alerts). These communications are not optional as they are operationally necessary.
• Sending promotional communications where you have opted in to receiving them. You may opt out at any time through your account notification settings.

7. Data Sharing and Disclosure

7.1 Service Providers

tayaplus shares personal data with third-party service providers engaged to operate aspects of the Platform on our behalf, including payment processors (GCash, PayMaya, bank transfer processors, cryptocurrency networks), KYC/AML verification providers, fraud detection services, customer support platform operators, and cloud infrastructure providers. All such providers are contractually bound to process data only as instructed by tayaplus and to maintain appropriate security standards.

7.2 Regulatory and Legal Disclosure

tayaplus may disclose personal data to regulatory authorities (including PAGCOR and the Anti-Money Laundering Council of the Philippines), law enforcement agencies, and courts where disclosure is required by applicable law, a valid legal order, or in connection with the investigation of fraud or criminal activity.

7.3 No Sale of Data

tayaplus does not sell, rent, or otherwise commercially transfer your personal data to any third party for their independent commercial purposes.

7.4 Business Transfers

In the event of a merger, acquisition, restructuring, or sale of assets involving tayaplus, personal data may be transferred to the successor entity as part of such transaction, subject to the same privacy protections described in this Policy.

8. Cookies and Tracking Technologies

tayaplus uses cookies and similar tracking technologies (including local storage and session storage) to operate the Platform, maintain your session state after login, remember preferences, detect fraud, and analyze usage patterns to improve the Platform.

The following categories of cookies are used on the tayaplus Platform:

• Strictly necessary cookies: Required for the Platform to function (e.g., maintaining your logged-in session). These cannot be disabled without impacting core functionality.
• Functional cookies: Remember preferences such as language settings and display options.
• Analytics cookies: Collect aggregated data about how users interact with the Platform to enable performance improvements. Analytics data is processed in anonymized or pseudonymized form.
• Security cookies: Used for fraud detection, bot identification, and platform integrity monitoring.

You can manage cookie preferences through your browser settings. Disabling strictly necessary cookies will impair Platform functionality, including the tayaplus login process.

9. Data Security

tayaplus implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction:

• 256-bit SSL/TLS encryption for all data in transit between your device and tayaplus servers.
• AES-256 encryption for sensitive data at rest, including financial records and identity documents.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Regular penetration testing and security audits by independent third-party security professionals.
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis.
• Intrusion detection and prevention systems monitoring for unauthorized access attempts.
• Incident response procedures with defined timelines for breach notification to affected players and, where required, to the National Privacy Commission.

While tayaplus employs industry-standard security practices, no system is entirely immune to risk. You are responsible for securing your own device and tayaplus login credentials.

10. Data Retention

tayaplus retains personal data for the following periods, after which data is deleted or irreversibly anonymized:

• Account data: Retained for the duration of your account relationship with tayaplus, plus five (5) years following account closure, in compliance with AML record-keeping obligations.
• KYC/identity documents: Retained for five (5) years from the date of submission, or longer where required by applicable law or regulatory instruction.
• Transaction records: Retained for five (5) years from the date of each transaction, in compliance with AMLA requirements.
• Gaming activity logs: Retained for three (3) years from the date of each session.
• Support communications: Retained for two (2) years from the date of last communication, unless required for ongoing dispute resolution.
• Technical/log data: Retained for twelve (12) months from collection date.

11. Your Data Privacy Rights

Under the Data Privacy Act of 2012 and its Implementing Rules, you have the following rights with respect to your personal data held by tayaplus:

• Right to be informed: You have the right to be informed of how your personal data is being collected and processed. This Policy fulfills that obligation.
• Right of access: You may request a copy of the personal data tayaplus holds about you, along with information about how it is being processed.
• Right to rectification: You may request correction of inaccurate or incomplete personal data. Account profile data can be updated directly in your tayaplus account settings.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to tayaplus's legal retention obligations.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format.
• Right to object: You may object to processing based on legitimate interests, including direct marketing. If you object to marketing communications, you may opt out through your account notification settings at any time.
• Right to lodge a complaint: If you believe tayaplus has not handled your data lawfully, you have the right to lodge a complaint with the National Privacy Commission of the Philippines.

To exercise any of these rights, contact the tayaplus DPO as described in Section 15. tayaplus will respond to data rights requests within thirty (30) calendar days of receipt, or within the timeframe required by applicable law.

12. Children's Privacy

The tayaplus Platform is strictly intended for individuals who are at least twenty-one (21) years of age. tayaplus does not knowingly collect personal data from persons under 21. If tayaplus becomes aware that personal data has been collected from an individual under the minimum age requirement, that data will be deleted and the associated account closed immediately. If you believe a minor has registered a tayaplus account, please contact us immediately via the contact details in Section 15.

13. International Data Transfers

As an online platform, tayaplus may process or store certain personal data on servers or through service providers located outside the Philippines. Where personal data is transferred to jurisdictions outside the Philippines, tayaplus implements appropriate safeguards to ensure that such transfers comply with the Data Privacy Act of 2012, including contractual data protection clauses with receiving parties, transfers to jurisdictions recognized as providing adequate protection, or other legally recognized transfer mechanisms as applicable.

14. Policy Updates

tayaplus reserves the right to update this Privacy Policy at any time. Material changes to the Policy will be communicated to registered players via the email address on record and/or via a prominent notice on the Platform at least fourteen (14) days before the changes take effect, unless a shorter notice period is required by law. The "Last Updated" date at the top of this Policy reflects the most recent revision. Continued use of the Platform after the effective date of an updated Policy constitutes your acceptance of the changes.

tayaplus recommends that you review this Policy periodically to stay informed of how your personal data is being handled.

15. Contact & Data Protection Officer

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by tayaplus, please contact:

• Data Protection Officer, tayaplus
• Email: [email protected] (subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 on the tayaplus Platform after login
• Response time: tayaplus will acknowledge your inquiry within 72 hours and resolve it within 30 calendar days

Players may also contact the National Privacy Commission of the Philippines if they believe their data privacy rights have been violated.