taya22 Privacy Policy

1 Introduction & Scope

This Privacy Policy ("Policy") is issued by taya22 ("taya22," "we," "us," or "our") and governs the collection, use, storage, sharing, and protection of personal information in connection with your use of the taya22 online gaming platform accessible at taya22.cam ("the Platform").

This Policy applies to all taya22 members, registered users, visitors to taya22.cam, and any other individual whose personal data is processed by taya22 in connection with the Platform. It covers all services offered by taya22, including but not limited to: casino games, live dealer tables, sports betting, bingo, slots, and the taya22 VIP program.

By creating a taya22 account or continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree to the terms of this Policy, you should discontinue use of the Platform and contact taya22 support to arrange closure of your account.

This Policy should be read in conjunction with the taya22 Terms & Conditions, which are available at taya22.cam/terms-conditions.

2 Legal Basis for Processing

taya22's processing of your personal data is grounded in the following legal bases under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations:

• Contractual Necessity: Processing that is necessary to perform our contract with you — specifically to create and operate your taya22 account, process deposits and withdrawals, verify your identity, and deliver gaming services.
• Legal Obligation: Processing required to comply with applicable laws and regulations, including anti-money laundering obligations under Republic Act No. 9160 (Anti-Money Laundering Act), PAGCOR compliance requirements, and tax reporting obligations under the National Internal Revenue Code.
• Legitimate Interest: Processing for our legitimate business interests where those interests are not overridden by your privacy rights — including fraud prevention, platform security, responsible gaming monitoring, and service improvement analytics.
• Consent: Processing for purposes where we have obtained your explicit, freely given, specific, and informed consent — principally for direct marketing communications, the use of non-essential cookies, and certain profiling activities. You may withdraw consent at any time without affecting the lawfulness of prior processing.

3 Personal Data We Collect

taya22 collects the following categories of personal data:

3.1 Registration & Identity Data. Your full legal name; date of birth; gender; residential address in the Philippines; Philippine mobile number; email address; and login credentials (username and hashed password). During KYC verification: copies of Philippine government-issued identification documents (e.g., PhilSys National ID, Passport, UMID, Driver's License, Voter's ID); selfie or liveness verification images; and, where required for enhanced due diligence, proof of address documents such as a utility bill or bank statement.

3.2 Financial Data. GCash account reference numbers; Maya wallet identifiers; bank account details (BPI, BDO, Metrobank) used for deposits and withdrawals; transaction history including deposit amounts, withdrawal amounts, dates, and payment method identifiers; and source of funds declarations where required for compliance purposes. taya22 does not store full payment card numbers or full bank account numbers on its servers.

3.3 Gaming Activity Data. Complete records of games played; wagers placed and outcomes; session start and end times; casino game preferences; sports betting history; bonus claims and wagering progress; and VIP tier and loyalty points balance.

3.4 Technical & Device Data. IP address at the time of login and registration; device type, operating system, and browser version; unique device identifiers; geolocation data (country and region level, derived from IP address); and session logs including login timestamps and session duration.

3.5 Communications Data. Records of all customer support interactions via live chat and email, including the content of those communications; feedback and survey responses; and any information you voluntarily provide when contacting the taya22 support team.

3.6 Responsible Gaming Data. Self-imposed deposit, loss, and session limits you configure on your account; self-exclusion requests and their duration; and any information you provide in connection with responsible gaming assessments or interventions conducted by taya22.

4 How We Use Your Personal Data

taya22 uses the personal data described in Section 3 for the following purposes:

• Account creation and management: Creating, verifying, maintaining, and securing your taya22 account.
• Service delivery: Providing access to all gaming products, processing bets, calculating and paying out winnings, and administering the VIP rewards program.
• Payment processing: Facilitating GCash, Maya, BPI, and BDO deposit and withdrawal transactions in Philippine Peso, and maintaining accurate transaction records.
• Identity and age verification: Conducting KYC checks to confirm you are who you say you are and that you meet the 21+ age requirement under Philippine gaming regulations.
• Fraud prevention and security: Detecting and preventing fraudulent activity, unauthorized account access, money laundering, and other illegal or prohibited conduct on the Platform.
• Regulatory compliance: Meeting our anti-money laundering, counter-terrorism financing, and gaming regulatory reporting obligations under Philippine law.
• Customer support: Responding to your queries, complaints, and requests through our live chat and email support channels.
• Responsible gaming: Monitoring gaming patterns to identify potential signs of problem gambling and administering self-exclusion, deposit limit, and intervention processes.
• Platform improvement: Analysing aggregated and anonymised usage data to improve the taya22 platform, game selection, and user experience.
• Marketing communications: Sending promotional emails, SMS notifications, and in-platform messages about taya22 bonuses, new games, and offers — but only where you have given consent and not opted out.
• Legal proceedings: Establishing, exercising, or defending legal claims where necessary.

5 Cookies & Tracking Technologies

taya22 uses cookies and similar tracking technologies on the taya22.cam website to operate the Platform and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Essential for the Platform to function. These cookies maintain your login session, enforce security protocols, and enable core gaming functionality. They cannot be disabled without preventing you from using the Platform.
• Performance & Analytics Cookies: Used to collect anonymised data about how visitors use taya22.cam — including which pages are visited most frequently, session durations, and error rates. This data helps us improve Platform performance and the player experience.
• Functionality Cookies: Store your preferences such as language settings, display preferences, and notification preferences to personalise your taya22 experience across sessions.
• Marketing Cookies: Used, with your consent, to deliver relevant promotional content and to measure the effectiveness of taya22 marketing campaigns. These cookies are only activated if you have agreed to marketing communications during registration or subsequently through your account settings.

You may manage your cookie preferences at any time through your taya22 account settings or through your browser's cookie controls. Disabling non-essential cookies will not prevent you from using the core gaming features of the Platform.

6 Data Sharing & Disclosure

taya22 does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data processing agreements or legal obligations:

• Payment Service Providers: GCash (GXI), Maya (Voyager Innovations), BPI, BDO, and other payment processors necessary to complete your deposit and withdrawal transactions. These providers receive only the transaction data necessary to process the specific payment.
• KYC & Identity Verification Providers: Third-party identity verification services engaged by taya22 to perform document verification, liveness checks, and sanctions screening as part of our regulatory compliance obligations.
• Game Software Providers: Licensed game developers and live dealer studio operators who supply games on the taya22 Platform. These providers may process session and gameplay data in connection with the delivery of their games.
• IT Infrastructure & Security Providers: Cloud hosting providers, cybersecurity firms, and technology vendors engaged by taya22 to operate and protect the Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government authorities, where disclosure is required by law, court order, or regulatory directive.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by taya22 in connection with legal proceedings or regulatory matters, under strict confidentiality obligations.

All third-party recipients are contractually bound to process your personal data only for the specific purpose for which it was shared, to maintain appropriate security standards, and to comply with applicable Philippine data privacy law.

7 Cross-Border Data Transfers

Some of taya22's service providers and game software partners are located outside the Philippines. Where your personal data is transferred to a recipient in a country that has not been assessed as providing adequate data protection by the National Privacy Commission, taya22 implements appropriate safeguards to protect your data, including:

• Standard contractual clauses approved by the National Privacy Commission or equivalent data protection authority;
• Binding corporate rules where the recipient is part of the same corporate group; and
• Other legally recognised transfer mechanisms as prescribed under the Philippine Data Privacy Act and its Implementing Rules.

You may request further information about the specific safeguards in place for any cross-border transfer by contacting the taya22 Data Protection Officer at the contact details provided in Section 14.

8 Data Retention

taya22 retains your personal data for the following periods, after which data is securely deleted or irreversibly anonymised:

• Account and identity data: For the duration of your active taya22 account and for a minimum of five (5) years following account closure, as required by anti-money laundering regulations under Republic Act No. 9160.
• Financial transaction records: For a minimum of five (5) years following each transaction, in accordance with AMLC and BIR record-keeping requirements.
• Gaming activity logs: For a minimum of three (3) years following the relevant gaming session, for dispute resolution and regulatory audit purposes.
• Customer support communications: For a maximum of two (2) years following the resolution of the relevant support interaction, unless a longer period is required for ongoing legal proceedings.
• Marketing consent records: For the duration of your consent and for one (1) year following withdrawal of consent, to demonstrate compliance with consent obligations.
• Technical and device logs: For a maximum of twelve (12) months from the date of collection, unless a specific incident requires longer retention for security or legal purposes.

Where taya22 is required by law to retain data beyond the periods described above, data will be retained for the legally mandated minimum period and then deleted.

9 Security Measures

taya22 implements a comprehensive set of technical, organisational, and physical security measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction:

• Encryption in transit: All data exchanged between your device and taya22.cam is encrypted using Transport Layer Security (TLS) version 1.3 or higher.
• Encryption at rest: Sensitive player data, including identity documents and financial records, is encrypted at rest using AES-256 encryption within taya22's database infrastructure.
• Password security: User passwords are never stored in plain text. taya22 uses bcrypt hashing with adaptive cost factors to protect password credentials.
• Access controls: Access to personal data held by taya22 is restricted on a strict need-to-know basis. All staff with access to player data undergo background screening and regular data privacy training.
• Two-factor authentication: Available to all players via SMS OTP and supported authenticator applications, and mandatory for taya22 staff accounts.
• Third-party security audits: taya22 engages independent cybersecurity firms to conduct penetration testing and security audits on a regular basis.
• Incident response: taya22 maintains a documented data breach incident response plan consistent with National Privacy Commission guidelines.

While taya22 takes every reasonable precaution to protect your personal data, no security system is completely impenetrable. We encourage you to use strong, unique passwords for your taya22 account and to enable two-factor authentication to maximise your account's security.

10 Your Data Rights

Under the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), you are entitled to the following rights with respect to your personal data held by taya22. To exercise any of these rights, please contact the taya22 Data Protection Officer as described in Section 14.

taya22 will respond to all verified data rights requests within 30 calendar days of receipt. Where a request is complex or involves a large volume of data, taya22 may extend this period by a further 30 days, with prior notice to you. taya22 will not charge a fee for data rights requests unless they are manifestly unfounded or excessive in nature.

11 Children's Privacy

The taya22 Platform is strictly intended for adults aged 21 years and above, consistent with PAGCOR age requirements for online casino gaming in the Philippines. taya22 does not knowingly collect, use, or process personal data from individuals under 21 years of age.

taya22 employs age verification controls during the registration process to prevent access by minors. If taya22 becomes aware that personal data has been collected from an individual under 21 years of age without appropriate parental or guardian consent, we will take immediate steps to delete that data and close the associated account, with any real-money balance returned to the funding payment method.

If you believe a minor has registered on taya22 or accessed your account, please notify taya22 immediately at [email protected].

12 Marketing Communications

taya22 may send you promotional communications about bonuses, new game launches, tournaments, and special offers via email and SMS to your registered mobile number. We will only send marketing communications where you have:

• Opted in to receive such communications during taya22 registration; or
• Subsequently provided explicit consent through your taya22 account communication preferences; or
• Not opted out after being notified of our intent to send marketing communications as an existing player.

You may opt out of marketing communications at any time by:

• Adjusting your communication preferences in the taya22 account settings dashboard;
• Clicking the "unsubscribe" link included at the bottom of every taya22 marketing email; or
• Contacting taya22 customer support via live chat or email at [email protected].

Opting out of marketing communications will not affect the delivery of transactional communications — such as deposit confirmations, withdrawal notifications, account security alerts, or important service updates — which are necessary for the operation of your taya22 account.

13 Policy Updates

taya22 reserves the right to update this Privacy Policy from time to time to reflect changes in our data processing practices, new legal requirements under Philippine law, or improvements to the Platform. The most current version of this Policy will always be published at taya22.cam/privacy-policy.

When we make material changes to this Policy, we will notify registered taya22 members via email to their registered address and/or via an in-platform notification at least 7 days before the updated Policy takes effect. The "Last Updated" date at the top of this document reflects the date of the most recent revision.

Your continued use of the taya22 Platform following the effective date of any updated Privacy Policy constitutes your acceptance of the revised terms. If you do not agree to an updated Policy, please discontinue use of the Platform and contact taya22 support to arrange account closure.

14 Contact & Data Protection Officer

taya22 has appointed a Data Protection Officer (DPO) in accordance with Section 21 of the Philippine Data Privacy Act of 2012. If you have any questions about this Privacy Policy, wish to exercise any of your data rights, or wish to raise a concern about how taya22 handles your personal data, please contact the taya22 DPO using the following details:

• Data Protection Officer, taya22
• Email: [email protected] (subject line: "Privacy / DPO Enquiry") — plain text, not a clickable link
• Live Chat: Available directly on the taya22 website, 24 hours a day, 7 days a week
• Response Time: DPO enquiries will be acknowledged within 48 hours and substantively responded to within 30 calendar days

If you are not satisfied with taya22's response to a privacy concern, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC). The NPC is the independent regulatory body responsible for administering and enforcing the Data Privacy Act of 2012.

All data rights requests must be submitted in writing and must include sufficient information to verify your identity before taya22 can process the request. This verification requirement is necessary to protect your data from unauthorised access or disclosure.