taya9 Privacy Policy

1Who We Are & Scope of This Policy

taya9 ("we," "us," or "our") operates the online casino platform accessible at taya9.app, including all associated web pages, game interfaces, payment services, and customer support channels. taya9 is the data controller responsible for the personal data of users who access or register on the platform.

This Privacy Policy governs the collection, use, storage, disclosure, and protection of personal data provided by or collected from users of taya9 in connection with their use of the platform. It applies regardless of the device or method used to access taya9 — whether via desktop browser, mobile browser, or any other interface.

taya9 is committed to full compliance with Republic Act No. 10173, the Data Privacy Act of 2012 of the Philippines ("DPA"), and its Implementing Rules and Regulations, as administered by the National Privacy Commission ("NPC").

2Personal Data We Collect

taya9 collects the following categories of personal data from users, depending on the nature of their interaction with the platform:

taya9 does not intentionally collect sensitive personal information beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive data (such as government ID numbers) is collected, it is handled with heightened security measures.

3How We Collect Your Data

taya9 collects personal data through the following means:

• Directly from you: When you register an account, complete identity verification, make a deposit or withdrawal, contact support, or update your account profile.
• Automatically: When you access or use the taya9 platform, we automatically collect technical and behavioural data through cookies, server logs, and analytics tools. See Section 7 for details on cookies.
• From third parties: taya9 may receive data from payment service providers (such as GCash or Maya) to confirm transaction details, from identity verification service providers to validate your KYC documents, and from fraud prevention partners to assess account risk.
• From regulatory sources: In limited circumstances, taya9 may receive data from PAGCOR or other Philippine regulatory bodies in connection with compliance obligations.

4Why We Use Your Personal Data

taya9 uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your taya9 account, including processing your registration, verifying your identity, and managing your account settings.
• Payment Processing: To process deposits and withdrawals via GCash, Maya, bank transfer, and debit card, and to maintain accurate financial records.
• Regulatory Compliance: To fulfil taya9's obligations under Philippine anti-money laundering laws (AMLA), PAGCOR licensing requirements, and the Data Privacy Act of 2012. This includes conducting Know Your Customer (KYC) checks and filing required reports.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent activity, money laundering, account takeovers, and other security threats to the platform and its users.
• Platform Improvement: To analyse usage patterns, identify technical issues, and improve the taya9 gaming experience for Filipino players.
• Customer Support: To respond to your enquiries, resolve disputes, and provide assistance through live chat and email support.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling and to administer self-exclusion, deposit limits, and other responsible gaming tools you have activated.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have provided consent or where we have a legitimate interest, and always with an easy opt-out option.

5Legal Basis for Processing

Under the Data Privacy Act of 2012, taya9 processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform the contract between you and taya9 — including account registration, payment processing, and game delivery.
• Legal Obligation: Processing required to comply with Philippine law, including AMLA reporting, PAGCOR regulatory requirements, and tax obligations.
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement, where these interests are not overridden by your data protection rights.
• Consent: Processing for marketing communications and non-essential cookies, where you have given explicit consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6Sharing Your Personal Data

taya9 does not sell your personal data to third parties. We may share your data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection agreements:

• Payment Service Providers: GCash, Maya, and Philippine banking partners, to process your deposits and withdrawals.
• Identity Verification Providers: Third-party KYC service providers who assist in verifying your identity documents and conducting AML screening.
• Game Content Providers: Licensed game studios whose games are hosted on the taya9 platform may receive anonymised or pseudonymised gaming data for technical and compliance purposes.
• IT & Infrastructure Providers: Cloud hosting, cybersecurity, and platform maintenance providers who process data on taya9's behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies, where required by law or regulatory obligation.
• Law Enforcement: Philippine law enforcement agencies, where taya9 is legally compelled to disclose data in connection with a criminal investigation or court order.

7Cookies & Tracking Technologies

taya9 uses cookies and similar tracking technologies to operate the platform, remember your preferences, and analyse usage patterns. The following types of cookies are used:

• Essential Cookies: Required for the platform to function. These include session authentication tokens, security cookies, and load-balancing cookies. These cannot be disabled without impairing platform functionality.
• Functional Cookies: Remember your preferences such as language settings, display options, and responsible gaming limits you have set.
• Analytics Cookies: Collect anonymised data about how users interact with taya9 — pages visited, time spent, and features used — to help us improve the platform. These are only set with your consent.
• Marketing Cookies: Used to deliver relevant promotional content. Only set where you have provided explicit consent.

You can manage your cookie preferences through your browser settings or through the taya9 cookie preference centre. Disabling non-essential cookies will not affect your ability to play games or access your account.

8Data Retention

taya9 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by Philippine law. The following general retention periods apply:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with AMLA and PAGCOR record-keeping requirements.
• Financial transaction records: Retained for a minimum of five (5) years from the date of the transaction, as required under Philippine anti-money laundering regulations.
• Gaming history: Retained for three (3) years following account closure, or longer if required for dispute resolution or regulatory purposes.
• Customer support communications: Retained for two (2) years from the date of the last interaction, unless the matter is subject to ongoing legal proceedings.
• Marketing consent records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of compliance.

When personal data is no longer required, taya9 will securely delete or anonymise it in accordance with industry-standard data destruction practices.

9Data Security

taya9 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Transport Layer Security (TLS) encryption for all data transmitted between your device and the taya9 platform.
• Encryption of sensitive data at rest, including financial data and identity documents.
• Role-based access controls ensuring that taya9 staff can only access personal data necessary for their specific job function.
• Regular security audits, penetration testing, and vulnerability assessments conducted by qualified cybersecurity professionals.
• Multi-factor authentication requirements for administrative access to systems containing personal data.
• Incident response procedures to detect, contain, and report data breaches in accordance with NPC notification requirements.

10Your Data Subject Rights

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by taya9. To exercise any of these rights, contact our Data Protection Officer at [email protected]. taya9 will respond to verified requests within fifteen (15) business days.

11Children & Minors

taya9 is strictly an adults-only platform. The minimum age to register and use taya9 is 21 years, in accordance with Philippine casino gambling regulations. taya9 does not knowingly collect personal data from persons under 21 years of age.

If taya9 discovers that personal data has been collected from a person under 21, the account will be immediately suspended, the data will be deleted, and any deposits will be returned at taya9's discretion after deducting any bonuses received. Parents or guardians who believe a minor has registered on taya9 should contact us immediately at [email protected].

taya9 uses age verification as part of its KYC process to enforce this requirement. We take the protection of minors from gambling harm very seriously.

12Cross-Border Data Transfers

Some of taya9's service providers — including cloud infrastructure and game content providers — may be located outside the Philippines. Where personal data is transferred to recipients in other countries, taya9 ensures that appropriate safeguards are in place, including:

• Contractual clauses requiring the recipient to apply data protection standards equivalent to those required under the Philippine Data Privacy Act of 2012.
• Transfers only to jurisdictions that the National Privacy Commission has recognised as providing adequate data protection.
• Where neither of the above applies, taya9 will seek your explicit consent before transferring your data internationally.

taya9 does not transfer your financial data or identity documents outside the Philippines except where strictly required for payment processing or regulatory compliance, and always subject to the safeguards described above.

13Changes to This Privacy Policy

taya9 may update this Privacy Policy from time to time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered users via the email address or mobile number on file, and update the "Last Updated" date at the top of this page.

We encourage you to review this Privacy Policy periodically. Continued use of taya9 following the effective date of any update constitutes your acceptance of the revised policy. If you do not agree with the updated policy, you may request account closure by contacting our support team.

14Contact Us & Data Protection Officer

taya9 has appointed a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012. If you have any questions, concerns, or complaints about this Privacy Policy or taya9's data practices, or if you wish to exercise your data subject rights, please contact:

• Data Protection Officer: [email protected]
• General Support: [email protected]
• Response Time: Within 15 business days for data subject rights requests; within 24 hours for general support enquiries

If you are not satisfied with taya9's response to your privacy complaint, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines through its official channels.