tay365 Privacy Policy

1. Scope and Application

This Privacy Policy applies to all personal data processed by tay365 in connection with the operation of the tay365.org website and all related services, mobile applications, customer support interactions, and marketing communications (collectively, the "tay365 Platform").

By creating a tay365 account or otherwise using the tay365 Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and processing of your personal data as described herein. If you do not consent to this Privacy Policy, you must not register for or use the tay365 Platform.

This Policy applies to all users of the tay365 Platform regardless of whether they access it from Metro Manila, Cebu, Davao, Quezon City, or any other location in the Philippines or abroad.

2. Data Controller

For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), tay365 is the personal information controller responsible for your personal data. Our designated Data Privacy Officer ("DPO") is responsible for overseeing tay365's compliance with this Policy and applicable data protection law.

You may contact our DPO at: [email protected] (plain text — not a clickable link). Please include "Data Privacy" in the subject line of any privacy-related enquiry.

3. Personal Data We Collect

3.1 Registration and Identity Data

When you create a tay365 account, we collect:

• Philippine mobile number (used as your primary account identifier);
• Username chosen at registration;
• Date of birth (to verify you are 21 years of age or older);
• Password (stored in encrypted, non-reversible form — tay365 staff cannot read your password).

3.2 Identity Verification (KYC) Data

To comply with Philippine AML regulations and PAGCOR-aligned gaming requirements, tay365 may collect:

• Full legal name as it appears on a government-issued Philippine ID;
• Copy of government-issued photo identification (e.g., Philippine National ID, passport, UMID, driver's licence);
• Proof of address (utility bill, bank statement, or equivalent issued within the past 90 days);
• Proof of payment method ownership (e.g., screenshot of GCash or Maya account showing your registered name);
• Source of funds documentation where required by AML thresholds.

3.3 Transaction and Financial Data

tay365 records all financial transactions on the Platform, including:

• Deposit amounts, dates, and payment methods used (GCash, Maya, BPI, BDO, UnionBank, 7-Eleven, USDT TRC20, Coins.ph);
• Withdrawal requests, amounts, and processing status;
• Bonus credits and wagering activity;
• Account balance history.

3.4 Gaming Activity Data

tay365 maintains records of all gaming activity on the Platform for integrity, dispute resolution, and responsible gaming monitoring purposes, including:

• Games played, bet amounts, game outcomes, and session duration;
• Responsible gaming tool settings (deposit limits, loss limits, session limits, self-exclusion status);
• Game provider interaction logs.

3.5 Technical and Device Data

When you access the tay365 Platform, we automatically collect certain technical information, including:

• IP address and approximate geographic location derived from IP;
• Device type, operating system, and browser type;
• Session timestamps and login/logout records;
• Cookie identifiers and session tokens (see Section 10).

3.6 Customer Support Data

When you contact tay365 customer support via live chat or email, we collect the content of your communications and any supporting information you provide, including account details relevant to your enquiry.

4. How We Collect Your Data

tay365 collects your personal data through the following means:

• Directly from you — when you register, deposit, withdraw, play games, contact support, or update your account settings;
• Automatically — through server logs, cookies, and similar technologies when you use the tay365 Platform;
• Third-party payment processors — transaction confirmation data from GCash, Maya, and other payment partners to verify deposit and withdrawal completions;
• Identity verification services — where tay365 uses third-party KYC verification tools, those providers supply confirmation data (not raw document images) to tay365 systems.

5. Purposes and Legal Bases for Processing

tay365 processes your personal data for the following purposes, each supported by a lawful basis under the Data Privacy Act of 2012:

6. Disclosure of Personal Data

tay365 does not sell your personal data. We disclose personal data only in the following circumstances and to the following categories of recipients:

• Game providers: Limited technical identifiers are shared with licensed game providers (such as JILI Gaming, Pragmatic Play, and others) to enable game delivery and maintain session integrity. No sensitive personal data is shared.
• Payment processors: Transaction data is shared with payment service providers (GCash, Maya, BPI, BDO, and others) solely to process your deposits and withdrawals.
• KYC and AML compliance providers: Identity document data is shared with verified third-party KYC service providers for the sole purpose of fulfilling regulatory verification requirements.
• Regulatory and law enforcement authorities: tay365 will disclose personal data to PAGCOR, the National Privacy Commission, AMLC, or other competent Philippine authorities when required to do so by law, court order, or valid regulatory demand.
• Professional advisers: Legal, accounting, and audit professionals engaged by tay365 may access personal data on a strictly need-to-know basis and are bound by professional confidentiality obligations.

7. Cross-Border Data Transfers

Some of tay365's service providers, including game platform infrastructure and KYC verification services, may process data outside the Philippines. Where such transfers occur, tay365 ensures that appropriate safeguards are in place to protect your personal data to a standard equivalent to the Data Privacy Act of 2012, including the use of data processing agreements that incorporate the National Privacy Commission's guidelines on cross-border data transfers.

8. Data Retention

tay365 retains your personal data for the following periods:

• Account and identity data: For the duration of your active tay365 account plus five (5) years following account closure, as required by AML retention obligations.
• Transaction records: Five (5) years from the date of the transaction, in accordance with Philippine AML record-keeping requirements.
• Gaming activity logs: Three (3) years from the date of activity for dispute resolution and responsible gaming monitoring purposes.
• Customer support records: Three (3) years from the date of the interaction.
• KYC documents: Five (5) years from account closure or from the date of the last transaction, whichever is later.

Upon expiry of the applicable retention period, tay365 will securely delete or anonymise your personal data unless retention is required for ongoing legal proceedings or regulatory investigations.

9. Data Security

tay365 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tay365 servers;
• Encryption of sensitive data fields (passwords stored as salted hashes; financial data encrypted at rest);
• Access controls limiting personal data access to tay365 personnel with a demonstrated need-to-know;
• Two-factor authentication (SMS OTP) for account access on new devices;
• Regular security assessments and penetration testing;
• Incident response procedures aligned with the National Privacy Commission's breach notification requirements.

In the event of a personal data breach that is likely to affect your rights and freedoms, tay365 will notify you and the National Privacy Commission within 72 hours of becoming aware of the breach, in accordance with NPC Circular 16-03.

10. Cookies and Tracking Technologies

tay365 uses cookies and similar tracking technologies to operate the Platform effectively. The categories of cookies used are:

• Strictly Necessary Cookies: Required for core Platform functionality — session management, authentication tokens, and security features. These cannot be disabled without breaking the tay365 Platform.
• Functional Cookies: Remember your preferences (language settings, game lobby view preferences) to improve your experience.
• Analytics Cookies: Collect anonymised usage data to help tay365 understand how Filipino players use the Platform and identify areas for improvement. No personally identifiable information is included in analytics data.

You may control cookie settings through your browser's privacy controls. Disabling strictly necessary cookies will impair your ability to use tay365.

11. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tay365:

• Right to be Informed: You have the right to know what personal data tay365 holds about you and how it is processed — which is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data tay365 holds about you by contacting our DPO.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data held by tay365.
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to tay365's legal retention obligations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time.
• Right to Data Portability: You may request that tay365 provide your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph) if you believe tay365 has processed your personal data in violation of the Data Privacy Act.

To exercise any of these rights, contact our DPO at [email protected] with the subject line "Data Subject Request." tay365 will respond within 15 business days.

12. Children and Minors

The tay365 Platform is strictly restricted to individuals who are 21 years of age or older in accordance with Philippine gaming regulations. tay365 does not knowingly collect personal data from individuals under 21 years of age. If tay365 discovers that it has inadvertently collected personal data from a person under 21, that data will be immediately deleted and the associated account suspended.

If you believe that tay365 has collected personal data from a minor, please contact us immediately at [email protected].

13. Changes to This Policy

tay365 reserves the right to update this Privacy Policy at any time. When material changes are made, tay365 will update the "Last Updated" date at the top of this page and notify registered users via their registered Philippine mobile number or through an in-platform notification. Continued use of the tay365 Platform following notification of changes constitutes your acceptance of the revised Privacy Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how tay365 protects your personal information.

14. Contact and Data Privacy Officer

For all privacy-related enquiries, data subject requests, or concerns regarding this Privacy Policy, please contact the tay365 Data Privacy Officer:

Email: [email protected] — Subject: "Data Privacy" (plain text only — not a clickable link)

Live Chat: Available 24/7 through the tay365 Platform for logged-in account holders.

tay365 is committed to resolving all privacy enquiries promptly and in good faith, in accordance with the Data Privacy Act of 2012 and the directives of the National Privacy Commission of the Philippines.