Privacy Policy – tayaplus Platform

1. Data Controller

tayaplus ("tayaplus", "we", "us", "our") is the data controller responsible for the personal information you provide when registering and using the tayaplus online gaming platform accessible at tayaplus.org.

tayaplus processes personal data in compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and all implementing rules and regulations issued by the National Privacy Commission ("NPC") of the Philippines.

2. Information We Collect

tayaplus collects personal information in several ways in the course of providing our gaming services to Filipino players. The categories of personal data we collect include:

2.1 Information You Provide Directly

• Registration data: Full legal name, date of birth, nationality, residential address (including city — e.g., Manila, Cebu, Davao, Makati), Philippine mobile number, and chosen username and password.
• Identity verification (KYC) documents: Government-issued identification such as Philippine National ID, passport, driver's licence, SSS or UMID card, as required for account verification and withdrawal processing.
• Financial data: GCash account details, Maya account details, bank account numbers (BPI, BDO, Metrobank), and transaction histories associated with your tayaplus account.
• Communications: Any messages, queries, complaints, or feedback you send to the tayaplus support team via live chat or email.

2.2 Information Collected Automatically

• Device and technical data: IP address, device type, operating system, browser type and version, screen resolution, and device identifiers.
• Usage data: Pages visited, games played, session duration, betting history, transaction logs, login timestamps, and navigation patterns within the tayaplus platform.
• Location data: Approximate geographic location derived from your IP address, used for regulatory compliance and fraud prevention.
• Cookies and similar technologies: As described in Section 8 of this Policy.

2.3 Information from Third Parties

• Identity verification results from KYC service providers.
• Fraud and risk assessment data from anti-money laundering (AML) and fraud detection partners.
• Payment confirmation data from GCash, Maya, and Philippine banking partners.

3. How We Use Your Data

tayaplus uses the personal information we collect for the following purposes:

• Account creation and management: Creating and maintaining your tayaplus account, verifying your identity, and enabling secure login.
• Service delivery: Processing deposits and withdrawals via GCash, Maya, and Philippine banks; crediting winnings; and providing access to all tayaplus gaming products including slots, live casino, online sabong, sports betting, and bingo.
• Customer support: Responding to your enquiries, resolving disputes, and providing technical assistance through the tayaplus support team.
• Legal and regulatory compliance: Complying with PAGCOR requirements, anti-money laundering (AML) obligations under the Anti-Money Laundering Act of the Philippines (AMLA), and any orders from Philippine government authorities or courts.
• Responsible gaming: Monitoring your gaming activity to identify potential problem gambling patterns and applying responsible gaming tools including deposit limits and self-exclusion where necessary.
• Security and fraud prevention: Detecting, investigating, and preventing fraudulent transactions, account takeover attempts, and prohibited conduct as defined in our Terms & Conditions.
• Platform improvement: Analysing aggregated usage data to improve the tayaplus platform's performance, user experience, and game selection.
• Communications: Sending transactional notifications (deposit confirmations, withdrawal updates, security alerts) and, where you have consented, promotional communications about tayaplus offers and new games.

4. Legal Basis for Processing

tayaplus processes your personal data on the following legal bases under the Data Privacy Act of 2012:

• Contractual necessity: Processing necessary for the performance of the contract between you and tayaplus — including account registration, game play, and payment processing.
• Legal obligation: Processing required to comply with applicable Philippine laws, including AMLA, PAGCOR regulations, and NPC requirements.
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your privacy rights.
• Consent: Processing for marketing communications, where you have provided explicit consent during registration or account management. You may withdraw this consent at any time by contacting tayaplus support.

5. Sharing Your Data

tayaplus does not sell your personal data to any third party. We share your personal information only in the following limited circumstances:

• Payment processors: GCash, Maya, BPI, BDO, Metrobank, Coins.ph, and 7-Eleven — solely for the purpose of processing your deposits and withdrawals.
• Identity verification providers: KYC and AML service providers engaged to verify your identity and screen against financial crime watchlists, as required by Philippine law.
• Game providers: Game developers (e.g., Pragmatic Play, Jili Games, PG Soft) may receive minimum necessary technical data (such as a session token or player ID) to deliver their games within the tayaplus platform. Game providers do not receive your full personal profile.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine courts, or law enforcement agencies — where legally required or in response to a valid legal process.
• Service providers: Cloud hosting, cybersecurity, analytics, and customer support technology providers operating under strict data processing agreements that prohibit independent use of your data.

All third-party processors engaged by tayaplus are contractually bound to protect your personal data and use it only for the specified purpose for which it was shared.

6. Data Retention

tayaplus retains your personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following:

• Active accounts: For the duration of your registered tayaplus account.
• Closed accounts: tayaplus retains transaction records, KYC documents, and account activity logs for a minimum of five (5) years following account closure, in compliance with Philippine AMLA requirements and PAGCOR record-keeping obligations.
• Support communications: Retained for up to three (3) years from the date of the communication.
• Marketing data: Retained until you withdraw consent or unsubscribe, after which it is deleted within 30 days.

When data is no longer required, tayaplus securely destroys or anonymises it in a manner that prevents reconstruction.

7. Data Security

tayaplus implements industry-standard technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tayaplus servers.
• Encrypted storage of sensitive personal and financial data at rest.
• Role-based access controls limiting employee access to personal data on a need-to-know basis.
• OTP (One-Time Password) verification for account changes and withdrawal requests.
• Continuous monitoring of login activity and automated detection of suspicious access patterns.
• Regular security audits and vulnerability assessments of the tayaplus platform infrastructure.

While tayaplus takes all reasonable steps to protect your data, no internet transmission is 100% secure. You are responsible for maintaining the confidentiality of your tayaplus login credentials. If you suspect your account has been compromised, contact tayaplus support immediately.

8. Cookies & Tracking Technologies

tayaplus uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device by your browser.

Types of cookies used by tayaplus:

• Essential cookies: Required for the tayaplus platform to function — including session management, login authentication, and security checks. These cannot be disabled without affecting platform functionality.
• Performance cookies: Collect anonymised data about how players interact with the tayaplus platform, including which games are most popular and which pages load slowly. Used to improve platform performance.
• Functional cookies: Remember your preferences such as language settings, last-played games, and display configurations to personalise your tayaplus experience.
• Analytics cookies: Allow tayaplus to understand aggregate player behaviour for platform development purposes. Data is processed in anonymised form.

You may control cookie preferences through your browser settings. Note that disabling essential cookies may prevent certain tayaplus features from functioning correctly. tayaplus does not use third-party advertising or retargeting cookies on the platform.

9. Your Data Subject Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), Filipino players have the following rights with respect to their personal data held by tayaplus:

• Right to be informed: You have the right to know what personal data tayaplus collects and how it is used — as set out in this Privacy Policy.
• Right of access: You may request a copy of the personal data tayaplus holds about you.
• Right to rectification: You may request correction of any inaccurate or incomplete personal data in your tayaplus account.
• Right to erasure: You may request deletion of your personal data, subject to tayaplus's legal retention obligations under Philippine law.
• Right to object: You may object to processing of your personal data based on legitimate interests, including marketing communications.
• Right to data portability: You may request a copy of your personal data in a structured, machine-readable format.
• Right to lodge a complaint: You have the right to file a complaint with the National Privacy Commission (NPC) of the Philippines if you believe tayaplus has violated your data privacy rights.

To exercise any of these rights, contact the tayaplus Data Privacy team at [email protected]. tayaplus will respond to verified data subject requests within 15 business days, in accordance with NPC guidelines.

10. Minors

The tayaplus platform is strictly for individuals aged 21 years and older. tayaplus does not knowingly collect personal data from persons under 21. If we discover that an account has been registered by or for a minor, the account will be immediately suspended, all balances will be held pending investigation, and the personal data will be securely deleted in accordance with our retention policies.

If you are a parent or guardian and believe a minor has created a tayaplus account, please contact us immediately at [email protected].

11. Cross-Border Data Transfers

In the course of providing gaming services, some of your personal data may be processed by our service providers in jurisdictions outside the Philippines — including cloud infrastructure providers and game developers operating internationally.

tayaplus ensures that any transfer of personal data outside the Philippines is subject to appropriate safeguards, including contractual data processing agreements that require the recipient to apply data protection standards equivalent to those required under Philippine law. tayaplus does not transfer your personal data to jurisdictions that do not provide adequate data protection.

12. Changes to This Privacy Policy

tayaplus reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, the tayaplus platform, or applicable Philippine law. Where changes are material, we will notify registered players by email, in-platform notification, or a prominent notice on the tayaplus website prior to the effective date of the change.

Continued use of the tayaplus platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree to the revised Privacy Policy, you should discontinue use of the platform and contact us to close your account.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by tayaplus, please contact our Data Privacy team:

• Email: [email protected]
• Live Chat: Available 24/7 via the tayaplus platform after login

To file a formal complaint about tayaplus's data practices, you may also contact the National Privacy Commission (NPC) of the Philippines through the NPC's official channels.