Privacy Policy

1. Introduction

m.taya365 ("the Platform," "we," "us," or "our") takes the privacy of its players seriously. This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed. It is designed to be compliant with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (the "DPA"), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (the "NPC") of the Philippines, as well as the applicable responsible gaming and anti-money laundering requirements prescribed by the Philippine Amusement and Gaming Corporation ("PAGCOR").

We encourage all m.taya365 players to read this Privacy Policy alongside our Terms & Conditions and our Responsible Gaming Policy. Together, these documents form the complete framework governing your relationship with the Platform.

---

2. Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, the data controller of personal data processed through the m.taya365 platform is the licensed entity operating m.taya365 under its PAGCOR authorisation. The data controller is responsible for deciding the means and purposes of processing your personal data and for ensuring that such processing complies with applicable Philippine data privacy law.

The data controller has appointed a Data Protection Officer ("DPO") as required under the DPA. Contact details for the DPO are provided in Section 14 of this Privacy Policy. Any questions, requests, or complaints relating to the processing of your personal data should be directed to the DPO in the first instance.

---

3. Personal Data We Collect

m.taya365 collects personal data from you in the following categories:

3.1 Registration and Identity Data

When you create an m.taya365 account, we collect:

• Full legal name;
• Date of birth (for age verification — 21+ requirement);
• Philippine mobile number in +63 format;
• Email address;
• Username and hashed password (passwords are never stored in plain text);
• Residential address (province, city, barangay).

3.2 Identity Verification (KYC) Data

To comply with PAGCOR Know Your Customer requirements and anti-money laundering obligations under Republic Act No. 9160 (the Anti-Money Laundering Act), we collect:

• Government-issued photo identification (e.g., Philippine passport, SSS card, UMID, driver's license, PhilSys national ID);
• Proof of address documentation;
• Proof of payment method ownership;
• Selfie or liveness verification image for identity confirmation.

3.3 Financial and Transaction Data

• Deposit amounts, dates, and payment method identifiers (e.g., GCash mobile number, last four digits of bank account);
• Withdrawal requests, amounts, and processing status;
• Player wallet balance history and bonus transaction records.

Note: m.taya365 does not store full payment card numbers. Card data is processed directly by our PCI-DSS-compliant payment processor partners.

3.4 Gaming Activity Data

• Game session logs including game title, stake amounts, outcomes, and session duration;
• Sports bets placed, odds accepted, and settlement records;
• Bonus uptake history and wagering requirement progress;
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status).

3.5 Technical and Device Data

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser version;
• Login timestamps and session duration;
• Cookies and similar tracking technologies as described in Section 9.

3.6 Communications Data

• Records of your communications with m.taya365 customer support via live chat or email;
• Feedback and survey responses you submit voluntarily;
• Promotional communication preferences (opt-in / opt-out records).

---

4. How We Use Your Personal Data

m.taya365 uses the personal data it collects for the following purposes:

Purpose	Categories of Data Used
Creating and managing your player account	Registration data, identity data
Verifying your identity and age (KYC)	KYC data, registration data
Processing deposits and withdrawals	Financial data, KYC data
Providing gaming services and personalised experience	Gaming activity data, technical data
Fraud prevention and security monitoring	Technical data, financial data, gaming data
Anti-money laundering compliance	Financial data, KYC data, gaming data
Regulatory reporting to PAGCOR and other authorities	All categories as required by regulation
Responsible gaming monitoring and interventions	Gaming data, communications data, financial data
Responding to customer support inquiries	Communications data, registration data, account data
Sending promotional communications (where opted in)	Registration data, communications data
Platform improvement and analytics	Technical data, gaming data (aggregated/anonymised)

---

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, m.taya365 relies on the following legal bases to process your personal data:

• Contractual necessity: Processing required to perform the contract between you and m.taya365 — specifically, the delivery of gaming services, account management, deposit and withdrawal processing, and customer support.
• Legal obligation: Processing required to comply with applicable Philippine law, including PAGCOR licensing conditions, Anti-Money Laundering Act (RA 9160) obligations, age verification requirements, and mandatory regulatory reporting.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving the m.taya365 platform experience — where those interests are not overridden by your fundamental privacy rights.
• Consent: For optional processing activities — specifically, the sending of promotional and marketing communications — we rely on your freely given, specific, informed consent. You may withdraw consent for marketing communications at any time through your account notification settings or by contacting support.

---

6. Disclosure and Data Sharing

m.taya365 does not sell your personal data. We may share your personal data with the following categories of third parties, strictly on a need-to-know basis and subject to contractual data protection obligations:

6.1 Service Providers and Data Processors

• Payment processors: GCash (GXI), PayMaya (Voyager Innovations), BPI, BDO, Metrobank, and other Philippine banking partners — for processing deposits and withdrawals;
• KYC and identity verification providers: For automated identity document checks and liveness detection;
• Game content providers: Providers such as Pragmatic Play, PG Soft, and others whose games are integrated into the m.taya365 platform — limited to anonymised session data required for game delivery;
• Cloud hosting and IT infrastructure providers: For secure storage and processing of platform data within secure, access-controlled environments;
• Customer support platform providers: For the management of live chat and email support communications.

6.2 Regulatory and Law Enforcement Authorities

m.taya365 will disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, or other competent Philippine government authorities when required to do so by law, court order, or valid regulatory demand. We will notify you of such disclosures where we are legally permitted to do so.

6.3 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of m.taya365's assets, player personal data may be transferred to the successor entity as part of that transaction. Affected players will be notified via registered email address and the new operator will be bound by terms no less protective than this Privacy Policy.

---

7. Data Retention

m.taya365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account and registration data: Retained for the duration of the account relationship and for a period of five (5) years following account closure, in compliance with PAGCOR record-keeping requirements and anti-money laundering obligations;
• KYC documentation: Retained for a minimum of five (5) years from the date of verification, as required by RA 9160;
• Financial transaction records: Retained for five (5) years from the date of each transaction;
• Gaming activity logs: Retained for three (3) years from the date of the gaming session;
• Customer support communications: Retained for two (2) years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn, plus a reasonable period thereafter to demonstrate compliance.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised. Anonymised data (from which individual identity cannot reasonably be reconstructed) may be retained indefinitely for analytical and statistical purposes.

---

8. Security Measures

m.taya365 implements appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include:

• Transport Layer Security (TLS/SSL): All data in transit between your device and m.taya365 servers is encrypted;
• Password hashing: Account passwords are stored using industry-standard cryptographic hashing algorithms — plaintext passwords are never stored or transmitted;
• Access controls: Access to systems processing personal data is restricted on a role-based, need-to-know basis, with multi-factor authentication required for internal system access;
• Regular security assessments: m.taya365 conducts periodic vulnerability assessments and penetration testing of its platform infrastructure;
• Incident response plan: A documented data breach response procedure is maintained, with designated personnel responsible for assessing, containing, and reporting incidents in accordance with NPC notification requirements.

While m.taya365 takes all reasonable steps to protect your data, no internet transmission or electronic storage system is completely secure. You are responsible for keeping your own m.taya365 login credentials confidential and for notifying us promptly if you suspect unauthorised use of your account.

---

9. Cookies and Tracking Technologies

m.taya365 uses cookies and similar technologies on its platform to ensure proper functioning, improve user experience, and support security measures. The following types of cookies are used:

• Strictly necessary cookies: Required for core platform functions such as maintaining your logged-in session, processing transactions, and managing security tokens. These cookies cannot be disabled without impairing the platform's functionality.
• Functional cookies: Used to remember your preferences (such as language settings and game library filters) between sessions.
• Analytics cookies: Used in anonymised or aggregated form to understand how players navigate the platform, which games are popular, and where technical issues occur. This data helps m.taya365 improve the platform experience.
• Security and fraud prevention cookies: Used to detect and prevent fraudulent access attempts, unusual activity patterns, and account security threats.

m.taya365 does not use third-party advertising or retargeting cookies. You may adjust cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the m.taya365 platform normally.

---

10. Minors and Age Restrictions

If m.taya365 discovers or has reasonable grounds to believe that personal data has been collected from a person under the age of 21, the relevant account will be suspended immediately, all collected personal data relating to that individual will be deleted from our systems (subject to any legal obligations to retain evidence of the age breach), and any balance held in that account will be managed in accordance with applicable PAGCOR regulations.

If you are a parent or guardian and believe that a minor has registered on m.taya365, please contact our Data Protection Officer immediately at the contact details set out in Section 14 of this Privacy Policy.

---

11. Your Data Subject Rights

As a data subject under the Data Privacy Act of 2012 of the Republic of the Philippines, you have the following rights with respect to your personal data held by m.taya365:

To exercise any of the above rights, please submit a written request to our Data Protection Officer using the contact details provided in Section 14. We will respond to all verified data subject requests within fifteen (15) business days of receipt.

---

12. Cross-Border Data Transfers

The m.taya365 platform is operated primarily within the Philippines. However, some of our third-party service providers — including certain cloud infrastructure and game content providers — may process personal data in data centres located outside the Philippines. Where such cross-border transfers occur, m.taya365 ensures that:

• The recipient country provides an adequate level of protection for personal data, as assessed by the National Privacy Commission; or
• Appropriate contractual safeguards are in place with the receiving party, including standard contractual clauses that impose data protection obligations equivalent to those required under Philippine law; and
• The transfer is limited to the minimum personal data necessary for the specific processing purpose.

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Protection Officer.

---

13. Changes to This Privacy Policy

m.taya365 reserves the right to update or revise this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. The "Last Updated" date at the top of this document will reflect the most recent revision.

Material changes to this Privacy Policy — particularly any changes that affect your rights as a data subject or expand the purposes for which we process your personal data — will be communicated to you via your registered email address and/or a prominent notice on the Platform at least seven (7) days before the change takes effect.

Your continued use of the m.taya365 platform following notification of a Privacy Policy update constitutes your acknowledgment of the updated policy. If you do not accept the updated policy, you should cease using the Platform and close your Account before the updated policy takes effect.

---

14. Contact Us & Data Protection Officer

If you have any questions about this Privacy Policy, wish to exercise any of your data subject rights, or have a concern about how m.taya365 has handled your personal data, please contact our Data Protection Officer:

• Role: Data Protection Officer, m.taya365
• Email: [email protected] (subject line: "Privacy / DPO Request")
• Live Chat: Available 24/7 through the in-platform live chat function — for non-formal inquiries and general privacy questions
• Response time: We will acknowledge receipt of all formal data subject requests within three (3) business days and provide a substantive response within fifteen (15) business days

m.taya365 serves players across Manila, Cebu, Davao, Quezon City, Makati, and all regions of the Philippines. All formal privacy requests must be submitted in writing (email acceptable) and must include sufficient identifying information for us to verify your identity before processing the request.

If you are not satisfied with our response to a privacy inquiry or complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines at privacy.gov.ph.