taya370 Privacy Policy

This Privacy Policy ("Policy") is issued by taya370 ("taya370", "we", "us", or "our") and governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from users ("you", "your", or "player") of the taya370 online casino and sports betting platform accessible at taya370.net ("Platform").

taya370 operates in the Philippines and is committed to full compliance with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations issued by the National Privacy Commission (NPC). By registering an account or continuing to use the taya370 Platform, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

This Policy should be read alongside the taya370 Terms & Conditions, which govern your use of the Platform as a whole. Where this Policy conflicts with the Terms & Conditions on a data privacy matter, this Policy shall prevail.

taya370 collects only the personal data that is necessary and proportionate to the purposes described in this Policy. The categories of personal data we collect are outlined below:

taya370 collects personal data through the following channels and mechanisms:

• Direct Submission: When you register a taya370 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or respond to a survey or promotion, you directly provide personal data to us.
• Automated Collection: When you browse and use the taya370 Platform, our systems automatically record technical data including your IP address, device identifiers, session timestamps, pages visited, games played, and bet amounts. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment Processors: When you transact via GCash, Maya, GrabPay, BPI, BDO, or any other supported payment method, taya370 receives transaction confirmation data (reference numbers, amounts, timestamps) from the relevant payment processor. We do not receive or store full bank account numbers or e-wallet PINs.
• Identity Verification Providers: For KYC purposes, taya370 may engage third-party identity verification services accredited under Philippine regulations. These providers may process your ID document images and return a verification result to taya370.
• Publicly Available Sources: In certain AML/fraud prevention contexts, taya370 may cross-reference player data against publicly available watchlists, sanctions lists, or court records maintained by Philippine government authorities.

taya370 processes your personal data for the following specific purposes. We do not use your data for any purpose that is incompatible with what is listed here:

• Account Management: To create, maintain, and administer your taya370 player account, including password resets and preference updates.
• Identity Verification (KYC): To verify that you are at least 21 years of age and are who you say you are, as required under applicable Philippine gaming and financial regulations.
• Transaction Processing: To process deposits, withdrawals, and account balance adjustments accurately and securely, including reconciliation with GCash, Maya, and bank payment records.
• Platform Security & Fraud Prevention: To detect and prevent unauthorised account access, bonus abuse, multi-accounting, payment fraud, and other prohibited conduct as described in the Terms & Conditions.
• Anti-Money Laundering (AML) Compliance: To fulfil taya370's obligations under Philippine AML laws, including monitoring unusual transaction patterns and reporting to relevant authorities where legally required.
• Responsible Gaming: To monitor gaming behaviour for indicators of problem gambling and, where appropriate, to enforce deposit limits, cool-off periods, or self-exclusion measures in line with the player's own requests or regulatory requirements.
• Customer Support: To respond to your queries, resolve disputes, and maintain records of your support interactions for quality and training purposes.
• Legal Compliance: To comply with court orders, regulatory requests, or legal obligations under Philippine law.
• Platform Improvement: To analyse aggregate usage patterns — with personal identifiers removed where possible — to improve the taya370 platform, fix bugs, and optimise the player experience.
• Marketing Communications: To send promotional emails, SMS, or in-platform notifications about taya370 bonuses and games, but only where you have given explicit consent to receive such communications.

Under the Data Privacy Act of 2012 and NPC guidelines, taya370 relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing your identity, contact, financial, and account data is necessary to perform the contract between you and taya370 — i.e., providing you with access to the Platform and processing your bets and transactions.
• Legal Obligation: KYC verification, AML transaction monitoring, and age verification are processed on the basis of taya370's legal obligations under Philippine law, including applicable PAGCOR-related regulations and the Anti-Money Laundering Act.
• Legitimate Interests: Fraud prevention, platform security, responsible gaming monitoring, and support quality assurance are carried out on the basis of taya370's legitimate interests, provided those interests are not overridden by your rights and freedoms.
• Consent: Marketing communications and optional profiling for personalised game recommendations are processed solely on the basis of your freely given, specific, and informed consent. You may withdraw this consent at any time without affecting the lawfulness of prior processing.

taya370 does not sell, rent, or trade your personal data to any third party for commercial marketing purposes. We share your data only in the limited circumstances described below, and always under appropriate data protection agreements:

• Payment Processors: GCash (Mynt), Maya (Voyager Innovations), GrabPay, BPI, BDO, Metrobank, UnionBank, and other payment service providers receive the minimum data necessary to authenticate and process your financial transactions.
• KYC & Identity Verification Partners: Accredited third-party identity verification services receive your ID document images solely for the purpose of verifying your identity during the KYC process. These providers are contractually prohibited from using your data for any other purpose.
• Game Providers: Game developers such as Jili, PG Soft, Pragmatic Play, and Habanero may receive a pseudonymous player identifier and gaming activity data to facilitate game delivery and dispute resolution. They do not receive your full name or financial details.
• Regulatory & Law Enforcement Authorities: taya370 will disclose personal data to Philippine government authorities — including the AMLC, NPC, or law enforcement agencies — where required by a valid legal order, warrant, or regulatory directive.
• Platform Service Providers: Cloud hosting providers, cybersecurity firms, and customer support software vendors who process data on taya370's behalf under strict data processing agreements and confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or restructuring of the taya370 business, player data may be transferred to a successor entity, subject to the same privacy protections as described in this Policy.

taya370 uses cookies and similar tracking technologies on the Platform to ensure proper functionality, improve user experience, and support security measures. The types of cookies we use are as follows:

• Strictly Necessary Cookies: Required for the Platform to function — for example, session authentication tokens that keep you logged in to your taya370 account. These cannot be disabled without breaking core Platform features.
• Functional Cookies: Remember your preferences such as language settings, display options, and last-visited game categories. These enhance your experience but are not essential.
• Analytics Cookies: Collect aggregated data on how players use the taya370 Platform — which pages are visited most, how long sessions last, and where errors occur. This data is used solely to improve the Platform and is not shared for advertising purposes.
• Security Cookies: Help taya370 detect and prevent suspicious login attempts, bot activity, and account takeover attempts by analysing device consistency across sessions.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will prevent you from logging in to your taya370 account. taya370 does not use third-party advertising or retargeting cookies.

taya370 retains your personal data only for as long as is necessary for the purposes described in this Policy, or as required by applicable Philippine law. The general retention periods are as follows:

• Active Account Data: Retained for the full duration of your active taya370 account plus a minimum of five (5) years after account closure, in accordance with AML record-keeping requirements under Philippine law.
• KYC Documents: Retained for a minimum of five (5) years from the date of account closure or the date of the last transaction, whichever is later, as required by the Anti-Money Laundering Act.
• Transaction Records: Retained for a minimum of five (5) years from the date of each transaction for AML and tax compliance purposes.
• Support Communications: Retained for three (3) years from the date of each interaction for dispute resolution and quality assurance purposes.
• Marketing Consent Records: Retained for as long as your marketing consent is active plus three (3) years after withdrawal of consent, to evidence compliance with consent requirements.
• Technical / Log Data: Retained for a rolling period of ninety (90) days, after which logs are anonymised or deleted unless required for an ongoing investigation.

Where personal data is no longer required, taya370 will securely delete or anonymise it in accordance with industry-standard data disposal practices.

taya370 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. Key measures include:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the taya370 Platform is encrypted in transit using industry-standard TLS 1.2 or higher protocols.
• Encryption at Rest: Sensitive data fields — including KYC document images and financial data — are encrypted at rest in taya370's database infrastructure.
• Password Hashing: Account passwords are never stored in plain text. taya370 uses strong adaptive hashing algorithms (bcrypt) so that even taya370's own engineers cannot read your password.
• Access Controls: Access to player personal data is restricted to authorised personnel on a strict need-to-know basis. All staff with data access are subject to confidentiality obligations and regular security training.
• Two-Factor Authentication (2FA): taya370 recommends and supports 2FA on all player accounts as an additional layer of account security.
• Regular Security Audits: taya370's platform and infrastructure undergo periodic penetration testing and vulnerability assessments conducted by independent cybersecurity firms.
• Incident Response: In the event of a personal data breach that poses a risk to your rights, taya370 will notify the NPC within 72 hours of discovery and will inform affected players without undue delay, as required under Philippine data protection regulations.

As a data subject under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by taya370. You may exercise any of these rights at any time by contacting our Data Protection Officer at [email protected]:

The taya370 Platform is strictly intended for adults. Under Philippine law and taya370 policy, no person under the age of 21 years is permitted to register an account, place bets, or use any gambling feature on the Platform. taya370 does not knowingly collect personal data from individuals under the age of 21.

If taya370 discovers or is notified that personal data has been collected from a person under 21 years of age, we will immediately:

• Suspend the relevant account pending a full review.
• Freeze any associated balance in accordance with regulatory requirements.
• Delete the personal data collected from the underage individual as soon as legally permissible.
• Report the incident to the relevant Philippine regulatory authority where required by law.

If you are a parent or guardian and believe that a minor under your care has registered on the taya370 Platform, please contact us immediately at [email protected]. We take this matter extremely seriously and will act on all such reports with the highest priority.

taya370 may send you promotional communications about new games, bonus offers, cashback promotions, and platform updates — but only where you have given us your explicit consent to do so at the time of registration or through your account settings.

Marketing communications from taya370 may be sent via:

• Email to your registered email address
• SMS to your registered Philippine mobile number
• In-platform notifications when you are logged in to your taya370 account

You may opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any taya370 marketing email
• Updating your communication preferences in your taya370 account settings
• Contacting taya370 support at [email protected] with the subject line "Marketing Opt-Out"

taya370 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, NPC guidance, platform functionality, or data processing practices. When material changes are made, taya370 will:

• Post the updated Policy on this page with a revised "Effective Date" at the top of the document.
• Send a notification to your registered email address summarising the key changes, at least 14 days before the updated Policy takes effect.
• Display a prominent in-platform notice on your next login after the updated Policy is published.

Your continued use of the taya370 Platform after the effective date of a revised Policy constitutes your acceptance of the updated terms. If you do not agree with any material changes to this Policy, you should stop using the Platform and may request account closure by contacting [email protected].

We encourage you to review this Policy periodically to stay informed about how taya370 is protecting your personal data.

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by taya370, please contact our dedicated Data Protection Officer (DPO). Our DPO is responsible for overseeing taya370's compliance with the Data Privacy Act of 2012 and NPC regulations.

You also have the right to lodge a complaint directly with the National Privacy Commission if you believe your data rights have not been adequately addressed by taya370. The NPC is the competent supervisory authority for data protection matters in the Philippines.