Privacy Policy

1 Introduction

taya02 ("taya02," "we," "us," or "our") operates the online gaming platform accessible at taya02.net (the "Platform"). We understand that your personal data is important to you, and we take our responsibility to protect it seriously.

This Privacy Policy describes how taya02 collects, uses, stores, shares, and protects personal data relating to individuals who access or use the Platform ("you" or "Player"). It applies to all personal data collected through the Platform, including data collected during account registration, gameplay, financial transactions, customer support interactions, and marketing communications.

This Privacy Policy should be read alongside our Terms & Conditions, which govern your use of the Platform. By registering on or using the taya02 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein.

taya02 processes personal data in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines ("DPA"), and its implementing rules and regulations, as well as any other applicable data protection legislation.

2 Personal Data We Collect

taya02 collects the following categories of personal data, depending on how you interact with the Platform:

taya02 does not intentionally collect sensitive personal data beyond what is required for identity verification and regulatory compliance. Where sensitive data is collected — such as a copy of a government-issued ID — it is handled with the highest level of security and access controls.

3 How We Collect Your Data

taya02 collects personal data through the following means:

• Direct Interactions: Data you provide when you register an account, complete KYC verification, make a deposit or withdrawal, contact our support team, or update your account settings.
• Automated Technologies: Data collected automatically when you access the Platform, including IP address, device identifiers, browser information, and session activity, through the use of cookies, web beacons, and similar tracking technologies.
• Third-Party Sources: Data received from payment processors (such as GCash, PayMaya, BPI, BDO, and Metrobank) in connection with financial transactions, and from identity verification service providers in connection with KYC processes.
• Gameplay Activity: Data generated automatically as a result of your gaming activity on the Platform, including game logs, wager records, and session data.

4 How We Use Your Personal Data

taya02 uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and administer your taya02 account, including verifying your identity and eligibility to use the Platform.
• Transaction Processing: To process deposits, withdrawals, and other financial transactions, and to maintain accurate records of all financial activity on your account.
• Regulatory Compliance: To comply with applicable laws and regulations, including anti-money laundering ("AML") obligations, Know Your Customer ("KYC") requirements, and reporting obligations to relevant regulatory authorities including PAGCOR.
• Platform Operation: To deliver, maintain, and improve the Platform, including diagnosing technical issues, analysing usage patterns, and developing new features and game offerings.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance with account-related issues.
• Responsible Gaming: To monitor gaming activity for signs of problem gambling and to administer responsible gaming tools such as deposit limits, session reminders, and self-exclusion requests.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, unauthorised account access, and other illegal or prohibited activities on the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and other marketing communications where you have opted in to receive them. You may opt out of marketing communications at any time via your account settings.
• Legal Claims: To establish, exercise, or defend legal claims arising in connection with your use of the Platform.

5 Legal Basis for Processing

taya02 processes your personal data on the following legal bases under the Data Privacy Act of 2012 and applicable data protection principles:

• Contractual Necessity: Processing is necessary for the performance of the contract between you and taya02, including account registration, transaction processing, and the delivery of gaming services.
• Legal Obligation: Processing is necessary for taya02 to comply with applicable legal and regulatory obligations, including AML requirements, KYC obligations, and regulatory reporting.
• Legitimate Interests: Processing is necessary for the purposes of taya02's legitimate interests, including fraud prevention, Platform security, and the improvement of our services, provided that such interests are not overridden by your rights and interests.
• Consent: Where taya02 relies on your consent as the legal basis for processing — for example, in relation to marketing communications — you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

6 Data Sharing & Disclosure

taya02 does not sell your personal data to third parties. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, for the purpose of processing deposits and withdrawals. These providers receive only the data necessary to complete the relevant transaction.
• Identity Verification Providers: Third-party KYC and AML compliance service providers engaged to verify your identity and screen transactions against applicable watchlists and sanctions lists.
• Game Providers: Third-party game software providers whose games are available on the Platform. These providers may receive anonymised or pseudonymised gameplay data for the purpose of game operation and technical support.
• Regulatory Authorities: PAGCOR and other competent regulatory or law enforcement authorities, where disclosure is required by applicable law, court order, or regulatory direction.
• Professional Advisers: Legal counsel, auditors, and other professional advisers engaged by taya02 in connection with the operation of the Platform, subject to confidentiality obligations.
• Group Companies: Affiliated entities within the taya02 corporate group, where necessary for the operation of the Platform or the provision of shared services, subject to equivalent data protection standards.

All third parties with whom taya02 shares personal data are required to process that data in accordance with applicable data protection law and taya02's data processing requirements. taya02 does not permit third parties to use your personal data for their own marketing purposes.

7 Cookies & Tracking Technologies

taya02 uses cookies and similar tracking technologies to operate and improve the Platform. Cookies are small text files placed on your device when you access the Platform. The following types of cookies are used:

• Strictly Necessary Cookies: These cookies are essential for the Platform to function correctly. They enable core features such as account login, session management, and security. These cookies cannot be disabled without affecting Platform functionality.
• Performance & Analytics Cookies: These cookies collect anonymised information about how Players use the Platform, such as which pages are visited most frequently and whether error messages are received. This data helps taya02 improve the Platform experience.
• Functional Cookies: These cookies allow the Platform to remember your preferences, such as your preferred language or display settings, to provide a more personalised experience.
• Marketing Cookies: These cookies track your browsing activity to deliver relevant promotional content. They are only placed where you have provided consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the Platform. For more information on managing cookies, refer to your browser's help documentation.

8 Data Retention

taya02 retains personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law and regulation. The following general retention periods apply:

• Account Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with AML and regulatory record-keeping requirements.
• Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with applicable financial record-keeping obligations.
• KYC Documents: Retained for a minimum of five (5) years following the completion of the KYC process or account closure, whichever is later.
• Customer Support Records: Retained for a period of three (3) years from the date of the relevant interaction, unless a longer retention period is required in connection with an ongoing dispute or legal claim.
• Marketing Data: Retained until you withdraw your consent to receive marketing communications, after which it will be suppressed to prevent further contact.
• Technical & Log Data: Retained for a period of up to twelve (12) months, unless a longer retention period is required for security investigation or legal purposes.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymised in accordance with taya02's data disposal procedures.

9 Data Security

taya02 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the taya02 Platform is encrypted using industry-standard SSL/TLS protocols.
• Encrypted Data Storage: Sensitive personal and financial data stored on taya02 servers is encrypted at rest using strong encryption algorithms.
• Access Controls: Access to personal data is restricted to authorised taya02 personnel and service providers on a strict need-to-know basis. All access is logged and monitored.
• Two-Factor Authentication: taya02 supports and encourages the use of two-factor authentication ("2FA") for all Player accounts to provide an additional layer of account security.
• Regular Security Audits: The Platform undergoes regular independent security assessments and penetration testing to identify and remediate potential vulnerabilities.
• Incident Response: taya02 maintains a documented data breach response procedure. In the event of a data breach that poses a risk to your rights and interests, taya02 will notify affected Players and relevant authorities in accordance with applicable law.

While taya02 takes all reasonable steps to protect your personal data, no method of data transmission or storage is completely secure. You are responsible for maintaining the security of your account credentials and for notifying taya02 immediately if you suspect any unauthorised access to your account.

10 Your Data Rights

Under the Data Privacy Act of 2012 of the Philippines and applicable data protection principles, you have the following rights in relation to your personal data held by taya02:

• Right to Be Informed: The right to be informed about how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of Access: The right to request a copy of the personal data taya02 holds about you, along with information about how it is being processed.
• Right to Rectification: The right to request correction of any inaccurate or incomplete personal data taya02 holds about you.
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to taya02's legal and regulatory retention obligations.
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on taya02's legitimate interests.
• Right to Data Portability: The right to receive a copy of your personal data in a structured, commonly used, and machine-readable format, where technically feasible.
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact the taya02 Data Protection Officer via the contact details provided in Section 14 of this Privacy Policy. taya02 will respond to all valid requests within thirty (30) days. In some cases, taya02 may need to verify your identity before processing your request.

11 Children's Privacy

The taya02 Platform is strictly intended for individuals who are at least 21 years of age, in accordance with PAGCOR regulations governing online gambling in the Philippines. taya02 does not knowingly collect personal data from individuals under the age of 21.

If taya02 becomes aware that personal data has been collected from an individual under the age of 21, the relevant account will be immediately suspended and the personal data will be deleted as soon as practicable, subject to any applicable legal retention obligations.

If you believe that taya02 may have inadvertently collected personal data from an individual under the age of 21, please contact our support team immediately using the contact details in Section 14.

12 Third-Party Links

The taya02 Platform may contain references to third-party services, such as payment providers. taya02 is not responsible for the privacy practices of any third-party services and encourages you to review the privacy policies of any third-party services you interact with in connection with your use of the Platform.

This Privacy Policy applies solely to personal data collected and processed by taya02 in connection with the Platform. It does not apply to data collected by third-party payment processors or other external services, which are governed by their own privacy policies.

13 Changes to This Privacy Policy

taya02 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or the operation of the Platform. The date of the most recent revision is indicated at the top of this page.

Where a material change is made to this Privacy Policy, taya02 will endeavour to notify registered Players via email or an on-Platform notification prior to the change taking effect. Your continued use of the Platform following the effective date of any amendment constitutes your acknowledgement of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how taya02 protects your personal data.

14 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by taya02, please contact our Data Protection Officer using the details below. All enquiries will be handled in strict confidence.

taya02 aims to respond to all data-related enquiries within thirty (30) days of receipt. If you are not satisfied with taya02's response to your enquiry, you have the right to lodge a complaint with the National Privacy Commission of the Philippines ("NPC"), the competent supervisory authority for data protection matters in the Philippines.