taya711 Privacy Policy

taya711 ("we," "us," or "our") is committed to protecting the personal data and privacy of every player who accesses or uses the taya711 platform available at taya711.net (the "Platform"). This Privacy Policy describes how taya711 collects, uses, stores, discloses, and safeguards your personal information in connection with your use of the Platform and all related services.

This Privacy Policy is issued in compliance with Republic Act No. 10173, known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR), as administered by the National Privacy Commission (NPC) of the Philippines. It should be read alongside our Terms & Conditions and Responsible Gaming Policy, which are incorporated by reference.

By registering for a taya711 Account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, you must immediately discontinue your use of the Platform.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, taya711 acts as the Personal Information Controller (PIC) with respect to the personal data of all registered Players and visitors to the Platform.

As the Personal Information Controller, taya711 determines the purposes and means of processing your personal data collected through the Platform. Where taya711 engages third-party service providers to process personal data on its behalf (for example, payment processors or KYC verification providers), those providers operate as Personal Information Processors (PIPs) under data processing agreements that bind them to taya711's data protection standards and the requirements of the DPA.

taya711 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Privacy Policy and the DPA. Contact details for the DPO are provided in Section 15 of this Policy.

taya711 collects two categories of personal data: Personal Information and Sensitive Personal Information, as defined under the Data Privacy Act of 2012. We only collect data that is proportionate to the purpose for which it is collected.

taya711 collects personal data through the following channels:

• Direct Submission: Data you voluntarily provide when registering for an Account, completing KYC verification, making deposits or withdrawals, submitting support requests, or participating in promotions.
• Automated Technical Collection: Data collected automatically when you access the Platform, including IP address, device identifiers, browser characteristics, session duration, and pages visited — collected via server logs, cookies, and similar technologies (see Section 8).
• Payment Processors: Transaction confirmation data received from payment partners such as GCash, Maya, BPI, BDO, and Metrobank when you initiate deposits or withdrawals. taya711 does not receive or store full payment credentials from these providers.
• KYC Verification Partners: Identity verification results from our authorised KYC and anti-money laundering compliance service providers.
• PAGCOR and Regulatory Sources: Information received from PAGCOR or other Philippine regulatory authorities as required by our licensing obligations.
• Publicly Available Sources: In cases of fraud investigation, taya711 may supplement Account data with information from publicly available Philippine government databases or court records where legally permissible.

taya711 processes your personal data under one or more of the following lawful bases as recognised by the Data Privacy Act of 2012:

• Consent (Section 12[a], DPA): For marketing communications and non-essential cookies, taya711 relies on your freely given, specific, informed, and unambiguous consent. You may withdraw this consent at any time by updating your communication preferences in your Account settings or contacting our DPO.
• Contractual Necessity (Section 12[b], DPA): Processing necessary for the performance of the contract between you and taya711 — specifically, maintaining your Account, processing your bets and transactions, and delivering the gaming services you have subscribed to.
• Legal Obligation (Section 12[c], DPA): Processing required for taya711 to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (RA 9160, as amended), the Data Privacy Act of 2012, and orders from competent Philippine courts or authorities.
• Legitimate Interests (Section 12[f], DPA): Processing necessary for the legitimate interests of taya711, including fraud prevention, platform security, responsible gaming enforcement, and improving the quality of our services — provided such interests are not overridden by your rights and freedoms.

Where processing is based on consent, withdrawal of that consent will not affect the lawfulness of processing that occurred before the withdrawal.

taya711 uses the personal data it collects for the following specific and legitimate purposes:

• Account Management: Creating, maintaining, and administering your taya711 Account, including processing logins, updating account details, and managing Account closure requests.
• Identity & Age Verification (KYC): Verifying that you are at least 21 years of age and confirming your identity as required by PAGCOR regulations and the Anti-Money Laundering Act before processing withdrawals.
• Payment Processing: Processing deposit and withdrawal transactions in Philippine Peso via GCash, Maya, BPI, BDO, Metrobank, 7-Eleven Cliqq, USDT TRC20, and Coins.ph.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent activity, unauthorised Account access, money laundering, and Terms violations using technical and behavioural data analysis.
• Regulatory Compliance: Meeting taya711's obligations under PAGCOR's licensing terms, the Anti-Money Laundering Act, the Data Privacy Act, and all other applicable Philippine laws — including mandatory reporting to PAGCOR and the Anti-Money Laundering Council (AMLC) where required.
• Customer Support: Responding to your enquiries, resolving disputes, and improving the quality and responsiveness of our support services.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviours and administering responsible gaming tools including deposit limits, self-exclusion, and cooling-off periods.
• Platform Improvement: Analysing aggregated, anonymised usage data to understand how Players interact with taya711 and to improve platform features, game selection, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and product updates to Players who have provided separate consent for marketing communications. You may opt out at any time.

taya711 does not use your personal data for automated decision-making that produces significant legal effects on you without human review. All Account suspensions, bonus decisions, and KYC outcomes involving significant consequences are subject to human oversight by taya711's compliance team.

taya711 does not sell, rent, trade, or otherwise transfer your personal data to unaffiliated third parties for their independent use or marketing purposes. Personal data is shared only in the following specific circumstances:

• Service Providers (Personal Information Processors): Trusted third-party providers engaged by taya711 to deliver services on our behalf, including KYC and AML verification platforms, payment processors (GCash, Maya, BPI, BDO, Metrobank), customer support software providers, data hosting and cloud infrastructure providers, and fraud detection services. All such providers are bound by data processing agreements requiring compliance with the DPA and taya711's data protection standards.
• PAGCOR: As a PAGCOR-regulated platform, taya711 is obligated to provide player data, transaction records, and other information to PAGCOR upon request in accordance with our licensing terms.
• Anti-Money Laundering Council (AMLC): taya711 is legally required to report covered transactions and suspicious transactions to the AMLC under the Anti-Money Laundering Act (RA 9160, as amended by RA 10365 and RA 11521). Such reporting may include your personal and financial data.
• Law Enforcement & Courts: Where required by a valid court order, warrant, subpoena, or lawful request from Philippine law enforcement agencies, taya711 will disclose personal data to the extent legally required.
• Business Transfers: In the event of a merger, acquisition, or sale of substantially all of taya711's assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection commitments. You will be notified of such a transfer in advance where practicable.

taya711 uses cookies, web beacons, pixel tags, and similar tracking technologies to deliver, secure, and improve the Platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and load balancing cookies. These cannot be disabled without impairing core Platform functionality.
• Functional Cookies: Remember your preferences such as language settings, game lobby layout, and responsible gaming tool configurations to personalise your experience between sessions.
• Analytics Cookies: Collect aggregated, anonymised data about how Players navigate and use the Platform — such as pages visited, time on page, and error events — to help taya711 identify and fix usability issues. No individually identifying data is extracted from analytics cookies.
• Security Cookies: Assist taya711's fraud detection systems in identifying unusual access patterns, multiple account usage, and geographic anomalies consistent with Terms violations or fraudulent activity.

taya711 does not use advertising or third-party retargeting cookies. You can manage or disable non-essential cookies through your browser settings at any time. Note that disabling cookies may affect the functionality of certain Platform features.

taya711 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following retention periods apply:

• Account Data: Retained for the duration of your active taya711 Account, plus a minimum of five (5) years following Account closure, in compliance with PAGCOR record-keeping requirements and the Anti-Money Laundering Act.
• KYC Documents (Sensitive Personal Information): Retained for a minimum of five (5) years from the date of Account closure or the date of the last transaction, whichever is later, as required by PAGCOR and AMLC regulations.
• Transaction Records: Retained for five (5) years from the date of each transaction, consistent with AML record-keeping obligations under RA 9160.
• Customer Support Communications: Retained for three (3) years from the date of the communication, or until resolution of any related dispute, whichever is later.
• Marketing Preferences: Retained until you withdraw consent for marketing communications or request deletion of your marketing profile, subject to the retention floors above.
• Technical & Log Data: Retained for twelve (12) months in active systems, then archived for up to an additional twenty-four (24) months for security investigation purposes before secure deletion.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with NPC-recommended data disposal practices. Where anonymisation is not technically feasible, data is deleted using secure overwrite methods.

taya711 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, disclosure, alteration, or destruction. These include:

• Transport Security: All data transmitted between your device and the taya711 Platform is protected using TLS 1.2 or higher encryption, ensuring that your login credentials, payment data, and personal information cannot be intercepted in transit.
• Data Encryption at Rest: Sensitive personal data stored in taya711's databases — including KYC documents and financial identifiers — is encrypted at rest using AES-256 or equivalent encryption standards.
• Access Controls: Access to personal data within taya711's systems is restricted on a strict need-to-know basis. All staff with access to personal data undergo background screening and regular data protection training. Access is logged and subject to periodic review.
• Password Security: Account passwords are stored as salted, one-way cryptographic hashes. taya711 never stores plaintext passwords and cannot retrieve your password — only reset it through the verified account recovery process.
• Two-Factor Authentication (2FA): taya711 offers OTP-based two-factor authentication for all player Accounts and mandates it for all internal administrative access to production systems.
• Penetration Testing & Vulnerability Management: taya711's Platform undergoes periodic security assessments including vulnerability scans and penetration testing by qualified security professionals.
• Incident Response: taya711 maintains a documented data breach response plan. In the event of a personal data breach that poses a real risk of harm to affected Players, taya711 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, in accordance with Section 20(f) of the DPA and NPC Circular 16-03.

Under the Data Privacy Act of 2012 and its Implementing Rules and Regulations, you as a data subject have the following rights with respect to your personal data held by taya711:

• Right to Be Informed (Section 16[a], DPA): The right to be informed of the existence of processing of your personal data, the purposes and extent of processing, and the identity of the Personal Information Controller — which this Privacy Policy fulfils.
• Right to Access (Section 16[b], DPA): The right to request reasonable access to your personal data held by taya711, including a copy of the data and information about its sources, recipients, and purposes of processing.
• Right to Rectification (Section 16[c], DPA): The right to dispute inaccuracies or errors in your personal data and have them corrected without undue delay. You may update basic account information directly through your taya711 Account settings. KYC corrections require submission of updated documentation.
• Right to Erasure or Blocking (Section 16[d], DPA): The right to request the deletion or blocking of personal data where processing is unlawful, the data is no longer necessary for the purpose it was collected, or you withdraw consent (where consent was the lawful basis). Note that taya711 may retain data where required by law, including PAGCOR and AML retention obligations described in Section 9.
• Right to Object (Section 16[f], DPA): The right to object to the processing of your personal data, including processing for direct marketing purposes. Objection to essential processing (e.g., KYC, AML) may result in Account limitations as such processing is legally mandated.
• Right to Data Portability (Section 18, DPA IRR): The right to obtain a copy of your personal data in a structured, commonly used, and machine-readable format where technically feasible and where processing is based on consent or contractual necessity.
• Right to Damages (Section 16[e], DPA): The right to be indemnified for damages sustained as a result of inaccurate, incomplete, or outdated personal data, or any violation of your rights under the DPA.
• Right to File a Complaint: The right to lodge a complaint with the National Privacy Commission if you believe taya711 has violated any of your rights under the Data Privacy Act of 2012. The NPC can be reached through its official channels at privacy.gov.ph.

To exercise any of the above rights, submit a written request to taya711's Data Protection Officer at the contact details provided in Section 15. taya711 will respond to all data subject requests within fifteen (15) business days of receipt, and will complete the requested action within thirty (30) calendar days where technically feasible, or provide a written explanation for any delay.

The taya711 Platform is strictly intended for adults who are at least 21 years of age, as mandated by PAGCOR regulations for all online gambling activities in the Philippines. taya711 does not knowingly collect personal data from individuals under the age of 21.

If taya711 becomes aware that personal data has been collected from a person under 21 years of age, we will immediately:

• Suspend and terminate the associated Account.
• Securely delete all personal data associated with the underage Account, subject to any legal retention obligations that may apply.
• Refund any real-money deposits made to the Account via the original payment method.
• Report the incident to PAGCOR as required by our licensing obligations.

If you are a parent or guardian and believe that a person under 21 in your care has accessed or registered on the taya711 Platform without authorisation, please contact our Data Protection Officer immediately using the details in Section 15 so that we can take prompt action.

taya711 is a Philippines-based platform and processes the majority of personal data within the Philippines. However, some of taya711's service providers — including cloud infrastructure partners and certain software-as-a-service providers — may be located or operate data centres outside the Philippines.

Where personal data is transferred to recipients outside the Philippines, taya711 ensures that adequate safeguards are in place in accordance with the Data Privacy Act of 2012 and NPC guidelines, including:

• Contractual clauses in data processing agreements requiring overseas processors to maintain data protection standards equivalent to or exceeding those required by the DPA.
• Transfer only to jurisdictions that the NPC has recognised as providing an adequate level of data protection, or to recipients who have agreed to binding corporate rules or equivalent safeguards.
• Ensuring that all cross-border data transfers are limited to the minimum personal data necessary for the specific processing purpose.

You may request details of the cross-border transfer safeguards in place for any specific processing activity by contacting taya711's Data Protection Officer at the details provided in Section 15.

taya711 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, NPC guidelines, PAGCOR regulatory requirements, or Platform features. All amendments will be effective upon posting the revised Privacy Policy on the taya711 Platform.

Where a proposed amendment materially affects your rights or the way we process your personal data, taya711 will provide advance notice through one or more of the following channels:

• An in-platform notification displayed upon your next login to taya711.
• An email notification to the registered email address on your taya711 Account.
• A prominent notice on the taya711.net homepage for a period of not less than fourteen (14) days prior to the amendment taking effect.

Your continued use of the taya711 Platform following the effective date of any amendment constitutes your acceptance of the revised Privacy Policy. If you do not agree with the amended terms, you must cease using the Platform and may request Account closure and data deletion in accordance with Section 11.

The "Effective Date" at the top of this Privacy Policy indicates when the current version came into force. Previous versions of this Privacy Policy are archived and available upon request from our Data Protection Officer.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data by taya711, please contact our designated Data Protection Officer (DPO) using the details below:

You also have the right to lodge a complaint directly with the National Privacy Commission of the Philippines if you believe that taya711 has violated your rights under the Data Privacy Act of 2012. The NPC is the supervisory authority for data protection matters in the Philippines.

When submitting a data subject rights request or privacy complaint to taya711, please include your full name, registered email address, the nature of your request or concern, and any relevant supporting details. This will help our DPO process your request efficiently and accurately.