taya22 Privacy Policy

This Privacy Policy ("Policy") is issued by taya22 ("taya22," "we," "us," "our"), the operator of the online gaming platform accessible at taya22.club and any associated mobile applications (collectively, the "Platform"). It applies to all personal data collected from or about individuals ("you," "your," "Player," "User") who access or use the taya22 Platform, contact our customer support team, participate in promotions, or otherwise interact with taya22.

taya22 is committed to processing personal data lawfully, fairly, and transparently in accordance with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and all applicable issuances from the National Privacy Commission (NPC). Where taya22 processes data relating to individuals outside the Philippines, we apply equivalent standards of data protection.

This Policy should be read together with the taya22 Terms & Conditions and Responsible Gaming Policy. By creating an account or otherwise using the taya22 Platform, you acknowledge that you have read and understood this Privacy Policy.

For the purposes of the Philippine Data Privacy Act of 2012, taya22 acts as the Personal Information Controller (PIC) in respect of personal data collected through the Platform. taya22 determines the purposes and means of processing personal data collected from players and other users of the Platform.

Where taya22 engages third-party service providers who process personal data on our behalf — such as payment processors, fraud detection providers, and hosting infrastructure providers — those entities act as Personal Information Processors (PIP) under binding data processing agreements that require them to process your data only on taya22's documented instructions and in accordance with this Policy.

For all privacy-related enquiries, including requests to exercise your data subject rights, please refer to Section 16 of this Policy for contact details.

taya22 collects personal data through several channels: directly from you during registration and account use; automatically through your use of the Platform; and, in limited circumstances, from third parties such as payment processors and identity verification services.

Under the Philippine Data Privacy Act of 2012, taya22 processes your personal data on the following legal bases:

taya22 uses the personal data we collect for the following purposes:

• Account Management: Creating, verifying, maintaining, and securing your taya22 account; processing account updates and closure requests.
• Service Delivery: Enabling access to games, processing bets, crediting winnings, and providing all features of the taya22 Platform.
• Financial Processing: Processing deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and cryptocurrency; reconciling transaction records; applying and tracking bonuses and wagering requirements.
• Identity Verification & Compliance: Verifying your identity and age (21+) as required by PAGCOR regulations; conducting ongoing anti-money laundering monitoring; screening against sanctions lists; maintaining mandatory regulatory records.
• Responsible Gaming: Monitoring gaming activity for indicators of problem gambling; administering player-requested limits, cool-off periods, and self-exclusions; facilitating responsible gaming support.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, account abuse, cheating, and prohibited conduct; maintaining the security and integrity of the Platform.
• Customer Support: Responding to queries, complaints, and disputes; maintaining records of support interactions for quality assurance and dispute resolution.
• Platform Improvement: Analysing usage patterns and player behaviour in aggregate to improve the Platform's design, performance, game selection, and user experience.
• Marketing Communications: Sending promotional offers, bonus notifications, and updates about taya22 to players who have opted in to receive such communications.
• Legal Compliance & Dispute Resolution: Maintaining records required by law; cooperating with regulatory, law enforcement, and judicial authorities; asserting or defending legal claims.

taya22 does not sell your personal data to third parties. We share your data only in the following circumstances and only to the extent necessary for the stated purpose:

6.1 Service Providers (Personal Information Processors)

We engage third-party service providers to support the operation of the taya22 Platform. These include payment processors (GCash, PayMaya, partner banks), identity verification and KYC providers, fraud detection services, cloud hosting and infrastructure providers, email delivery services, and analytics platforms. All service providers are bound by data processing agreements requiring them to protect your data and process it only on our instructions.

6.2 Regulatory and Law Enforcement Authorities

taya22 is required to share certain information with PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), the Bureau of Internal Revenue (BIR), and other competent Philippine authorities as required by applicable law. We may also share information with law enforcement agencies in response to lawful requests, court orders, or to prevent, detect, or investigate suspected crimes.

6.3 Business Transfers

6.4 Professional Advisers

taya22 may share your data with legal counsel, auditors, and other professional advisers in connection with legal proceedings, regulatory investigations, financial audits, or the provision of professional advice. Such advisers are bound by professional confidentiality obligations.

taya22 retains personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with anti-money laundering record-keeping requirements under Republic Act No. 9160.
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of the transaction, in accordance with AMLC and BIR requirements.
• Gaming Records: Retained for three (3) years following account closure, or longer where required for regulatory reporting or dispute resolution.
• Support Communication Records: Retained for two (2) years following resolution of the relevant query or complaint.
• Marketing Consent Records: Retained until consent is withdrawn and for a reasonable period thereafter to demonstrate compliance.
• Security and Access Logs: Retained for twelve (12) months in the normal course, and for up to five (5) years where logs are relevant to an active investigation or legal proceeding.

At the end of the applicable retention period, personal data is securely deleted or anonymised in accordance with taya22's data retention procedures. Anonymised data, which can no longer be linked to an individual, may be retained indefinitely for analytical and statistical purposes.

taya22 implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. These measures include:

• Encryption: All data transmitted between your device and the taya22 Platform is encrypted using TLS 1.2 or higher (256-bit SSL). Passwords are stored in hashed, salted form and are never stored in plaintext.
• Access Controls: Access to personal data by taya22 staff is restricted on a need-to-know basis using role-based access controls and multi-factor authentication for administrative systems.
• Infrastructure Security: The taya22 Platform is hosted on enterprise-grade cloud infrastructure with physical security controls, network segmentation, intrusion detection systems, and regular vulnerability assessments.
• Penetration Testing: taya22 conducts regular third-party penetration testing to identify and remediate security vulnerabilities before they can be exploited.
• Incident Response: taya22 maintains a documented data breach response procedure. In the event of a personal data breach that is likely to result in a risk to your rights, taya22 will notify affected players and the National Privacy Commission in accordance with the timeframes required by the Data Privacy Act.

taya22 uses cookies and similar tracking technologies (collectively "Cookies") on the Platform. Cookies are small data files placed on your device that allow the Platform to function correctly and help us understand how you use it.

Types of Cookies We Use

• Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that maintain your login state and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences — such as language, display settings, and responsible gaming limits — so you don't have to re-enter them on each visit.
• Analytics Cookies: Help us understand how players navigate and use the Platform, which pages are most visited, and where technical errors occur. This data is used in aggregate and anonymised form to improve the Platform.
• Performance Cookies: Monitor Platform performance, game loading times, and session stability to allow our technical team to identify and resolve performance issues.

You can control non-essential cookies through your browser settings or through the taya22 Cookie Preferences panel. Note that disabling certain cookies may affect Platform functionality. Strictly Necessary Cookies cannot be disabled as they are essential to the operation of the Platform.

If taya22 becomes aware that personal data has been collected from an individual under the age of 21 without verified parental or guardian consent, we will take immediate steps to delete that data and close the associated account. Any balance in such an account will be handled in accordance with applicable PAGCOR regulations.

If you believe that a minor may have created a taya22 account, please contact us immediately at [email protected].

Under the Philippine Data Privacy Act of 2012 and its Implementing Rules and Regulations, you have the following rights in relation to the personal data that taya22 holds about you. These rights are subject to certain legal limitations and exemptions, which will be explained to you if applicable when you exercise a right.

To exercise any of your rights, please submit a request to our Data Protection Officer at [email protected] with the subject line "Data Privacy Request." We will respond within the timeframe required by the Data Privacy Act — typically 15 business days for straightforward requests. We may require you to verify your identity before processing certain requests.

The primary operations of taya22 are based in the Philippines, and we process the majority of your personal data within Philippine territory. However, some of our third-party service providers — including cloud infrastructure providers and certain gaming platform technology vendors — may process personal data in data centres located outside the Philippines.

Where personal data is transferred outside the Philippines, taya22 ensures that appropriate safeguards are in place in accordance with the Data Privacy Act and NPC guidelines. These safeguards may include:

• Data processing agreements with standard contractual clauses approved by the NPC or an equivalent supervisory authority in the recipient jurisdiction.
• Transfer to jurisdictions that the NPC has determined provide an adequate level of data protection.
• Binding corporate rules where the transfer is to an affiliate or related entity of the service provider.

Details of the safeguards applicable to any specific international transfer are available upon request from our Data Protection Officer.

The taya22 Platform may contain references to or functionality provided by third-party services, including game providers whose titles are accessible through the Platform and payment gateway partners. These third parties have their own privacy policies and data practices that are independent of taya22.

When you interact with a third-party game streamed or integrated into the taya22 Platform, certain technical data (such as session tokens and game identifiers) may be passed to the game provider to enable the game to function. This data sharing is limited to what is technically necessary, and game providers are contractually required to process such data only for the purposes of game delivery and not for independent marketing or profiling purposes.

taya22 is not responsible for the privacy practices of third-party game providers or payment processors beyond the contractual obligations we impose on them. We encourage you to review the privacy policies of any third-party services you engage with.

With your consent, taya22 may send you marketing communications by email and/or SMS regarding promotions, bonuses, new game releases, tournaments, and other taya22 news. You can choose your communication preferences during account registration and update them at any time through Account Settings.

You may opt out of marketing communications at any time by:

• Clicking the "unsubscribe" link in any marketing email.
• Replying STOP to any marketing SMS.
• Updating your communication preferences in Account Settings.
• Contacting our support team at [email protected].

Opting out of marketing communications does not affect transactional communications — you will continue to receive important account-related messages such as deposit confirmations, withdrawal notifications, security alerts, and required legal or regulatory notifications. These are sent on the basis of contractual necessity or legal obligation and cannot be opted out of while your account remains active.

taya22 may update this Privacy Policy from time to time to reflect changes in our data processing practices, regulatory requirements, or operational changes. When material changes are made, we will notify registered players by email and/or by displaying a prominent notice on the Platform prior to the changes taking effect.

The "Last Updated" date at the top of this Policy will be revised each time changes are made. We encourage you to review this Policy periodically. Your continued use of the taya22 Platform following notification of changes constitutes your acknowledgment of the revised Policy. If you do not agree with any material change, you may request account closure in accordance with the taya22 Terms & Conditions.

taya22 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Philippine Data Privacy Act of 2012 and this Privacy Policy. If you have any questions about this Policy, wish to exercise your data subject rights, or have a concern about how taya22 handles your personal data, please contact our DPO:

If you are not satisfied with taya22's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). The NPC is the independent government body responsible for overseeing and enforcing the Data Privacy Act of 2012.