Privacy Policy — Taya 3653

1. Who We Are

Taya 3653 ("the Platform," "we," "us," or "our") is an online gaming platform serving players in the Philippines. We operate the website at taya3653.click and provide sports betting, casino games, live dealer games, virtual sports, and related services.

As the operator of the Taya 3653 platform, we act as the Data Controller for the personal information you provide to us or that we collect as a result of your use of the platform. This means we determine how and why your personal data is processed. Where we engage third-party service providers to assist with specific processing activities (such as payment processing or identity verification), those parties act as Data Processors under our instruction.

This Privacy Policy applies to all data subjects who interact with the Taya 3653 platform — including registered players, users browsing without an account, and individuals who contact our support team. It covers our website, mobile browser platform, and all associated features and services.

2. What Personal Data We Collect

Taya 3653 collects personal data through different channels — information you give us directly when registering or using the platform, and information generated automatically as you interact with our services. Below is a full breakdown of the categories of data we collect.

Taya 3653 does not intentionally collect sensitive personal information (such as health data, political opinions, or biometric data beyond what is required for identity verification) unless specifically required by law or explicitly consented to by you for a specific purpose.

3. Why We Collect Your Data

Every piece of data Taya 3653 collects has a specific, legitimate purpose. Here's how we use your information:

• Account Management: Creating and maintaining your Taya 3653 account, authenticating your identity on login, managing account settings and preferences.
• Identity Verification (KYC): Verifying your age and identity as required by our gaming license conditions and Philippine anti-money laundering regulations. This protects both you and the integrity of the platform.
• Payment Processing: Processing your deposits and withdrawals through GCash, Maya, bank transfers, and other supported methods. Transaction data is required to match payments to the correct accounts and to comply with financial regulations.
• Gaming Services: Providing access to all games and betting markets, recording bet results, settling winnings, and managing bonus credits.
• Fraud Prevention and Security: Detecting and preventing unauthorized account access, fraudulent transactions, money laundering, and abuse of bonus systems. Security monitoring requires analysis of device data, IP addresses, and behavioral patterns.
• Regulatory Compliance: Fulfilling obligations under our gaming license, Philippine anti-money laundering law, and the Data Privacy Act including reporting requirements to relevant authorities.
• Responsible Gaming: Monitoring gaming patterns to identify potential signs of problem gambling, administering player-requested limits and self-exclusion, and providing appropriate interventions and resources.
• Platform Improvement: Analyzing aggregated usage data (never individual profiling for sale) to improve game selection, interface design, load times, and overall player experience.
• Marketing Communications: Sending you information about promotions, bonuses, and new features — only where you have opted in to receive such communications, and only from Taya 3653 directly.
• Customer Support: Responding to your queries, resolving disputes, and following up on complaints or escalations.

4. Legal Basis for Processing

Under the Data Privacy Act of 2012 (RA 10173), Taya 3653 relies on the following lawful bases for processing your personal data:

• Contractual Necessity: Processing required to fulfill our obligations under the Terms and Conditions you agreed to — including running your account, processing payments, and providing game services. This is the primary basis for most of our data processing.
• Legal Obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, gaming license conditions, tax reporting, and the Data Privacy Act itself.
• Legitimate Interests: Processing for fraud detection, platform security, responsible gaming monitoring, and platform improvement — where those interests do not override your fundamental rights and freedoms.
• Consent: Marketing communications, optional personalization features, and any processing not covered by the above bases are conducted only with your explicit, informed consent — which you can withdraw at any time.

5. Data Sharing with Third Parties

Taya 3653 does not sell your personal data to any third party. We share data only where necessary to provide our services or comply with legal obligations. The categories of third parties that may receive your data, and the reasons, are set out below.

• Payment Service Providers: GCash, Maya, GrabPay, BDO, BPI, UnionBank, and other payment processors receive the minimum financial data necessary to process your transactions. These providers process data under their own privacy policies and are subject to their own regulatory obligations.
• Identity Verification Providers: KYC and document verification partners receive copies of identity documents you submit. These are licensed verification services operating under strict data security standards and data processing agreements with Taya 3653.
• Game Content Providers: Live dealer studios and game software providers may receive anonymized session data necessary to operate game systems. Game providers do not receive your personally identifiable information beyond what is required for the specific gaming transaction.
• IT Infrastructure Providers: Cloud hosting, database management, and cybersecurity service providers that process data on our behalf as Data Processors, under contractual obligations to handle your data only as directed by Taya 3653.
• Regulatory Authorities: Philippine gaming regulatory bodies, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other government agencies where we are required to disclose information by law or by order of a competent authority.
• Legal and Compliance Advisors: Law firms or compliance consultants assisting Taya 3653 in meeting its legal obligations, subject to professional confidentiality obligations.

All third-party service providers engaged by Taya 3653 are required to enter into data processing agreements confirming that they will handle your data only for the specified purpose, maintain appropriate security standards, and comply with applicable data protection law.

6. Data Retention

Taya 3653 retains personal data only for as long as it is needed for the purpose it was collected, or as long as required by applicable Philippine law. The general retention framework is as follows:

• Active Account Data: Retained for the duration of your account registration plus a minimum of 5 years after account closure, as required by anti-money laundering and gaming regulations.
• Financial Transaction Records: Retained for a minimum of 5 years in compliance with AMLC requirements and standard financial record-keeping obligations under Philippine law.
• Identity Verification Documents: Retained for the duration of your account and for the period required by law after account closure — typically 5 years.
• Gaming Activity Logs: Retained for 3 years to support dispute resolution, regulatory audits, and responsible gaming monitoring.
• Support Communications: Retained for 2 years to support quality assurance, dispute resolution, and training purposes.
• Marketing Data: Retained until you withdraw consent for marketing communications or for 2 years of inactivity, whichever comes first.

When retention periods expire, data is securely deleted or anonymized so that it can no longer be linked to any individual. Anonymized, aggregated data (which cannot identify any individual) may be retained indefinitely for platform analytics and improvement purposes.

7. Security Measures

The security of your personal data is a genuine priority at Taya 3653, not a checkbox. We maintain a comprehensive information security program that includes technical, organizational, and procedural safeguards appropriate to the risk and sensitivity of the data we hold.

• Encryption in Transit: All data transmitted between your device and Taya 3653 servers is encrypted using TLS 1.2 or higher with 256-bit SSL certificates. Your login credentials, payment details, and personal information are never transmitted in plain text.
• Encryption at Rest: Personal and financial data stored in Taya 3653 databases is encrypted using AES-256 encryption. Passwords are hashed using industry-standard one-way hashing algorithms — Taya 3653 staff cannot read your password.
• Access Controls: Access to personal data within Taya 3653 systems is restricted to employees and contractors with a legitimate need to access it for their role. All internal access is logged, monitored, and regularly reviewed.
• Two-Factor Authentication: Available for player accounts and mandatory for all internal staff systems. Players are strongly encouraged to enable 2FA from their account security settings.
• Fraud Monitoring: Automated systems monitor account activity, login patterns, and transaction behavior in real time to detect anomalies indicative of unauthorized access or fraud.
• Regular Security Reviews: The Taya 3653 security infrastructure undergoes regular internal reviews and periodic third-party security assessments to identify and address vulnerabilities.

8. Cookies & Tracking Technologies

Taya 3653 uses cookies and similar tracking technologies on our website and mobile platform to provide a functional, personalized, and secure experience. A cookie is a small text file placed on your device when you visit our site. Here is how we categorize and use them:

You can manage cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from using the core Taya 3653 platform, though some personalization features may be affected. Essential cookies cannot be disabled as they are necessary for the platform to function securely.

9. Your Data Rights

As a data subject under the Philippine Data Privacy Act, you have the following rights regarding your personal data held by Taya 3653. These rights are not theoretical — they are exercisable by contacting us directly.

To exercise any of these rights, contact our Data Protection team at support@taya3653.click with the subject line "Data Rights Request." We will acknowledge your request within 48 hours and resolve it within 30 days (or inform you if a longer period is required for complex requests).

10. Children's Privacy

The Taya 3653 platform is strictly intended for persons aged 18 years and above. We do not knowingly collect personal data from individuals under the age of 18. If you are under 18, you must not register an account or attempt to use the platform in any way.

If Taya 3653 becomes aware that personal data has been collected from a person under 18, the account will be immediately closed, all balances will be voided, and all collected data will be deleted as promptly as technically possible. If you are a parent or guardian and believe your child may have registered an account at Taya 3653, please contact us immediately at support@taya3653.click and we will investigate and take action without delay.

11. Marketing Communications

Taya 3653 may send you promotional communications about new games, bonus offers, special events, and platform updates. We only do this where you have given us your explicit consent to receive marketing communications during registration or through your account notification settings.

Marketing communications from Taya 3653 are sent via email and, where you have provided a mobile number and opted in, via SMS. We do not send marketing communications through third-party advertising networks. Any promotional message you receive that claims to be from Taya 3653 through an unofficial channel (social media DM, WhatsApp, Telegram) is not from us and should be treated with suspicion.

You can opt out of marketing communications at any time by:

• Clicking the "Unsubscribe" link in any marketing email from Taya 3653
• Updating your communication preferences in the account notification settings
• Contacting support@taya3653.click with the subject "Unsubscribe from Marketing"

Opting out of marketing communications does not affect your receipt of essential account communications such as transaction confirmations, security alerts, withdrawal notifications, and account service messages — these are sent regardless of marketing preferences as they are necessary for the safe operation of your account.

12. Updates to This Privacy Policy

Taya 3653 reviews and updates this Privacy Policy periodically to reflect changes in our data practices, platform features, or applicable law. The "Last Updated" date at the top of this page indicates when the most recent version took effect.

Where changes are material — meaning they significantly affect how we use your personal data or your rights as a data subject — Taya 3653 will notify registered players by email at least 14 days before the updated Policy takes effect. For minor clarifications or non-material changes, the updated Policy will be posted on this page without advance notice.

Your continued use of the Taya 3653 platform after the effective date of any updated Privacy Policy constitutes your acceptance of the updated terms. If you disagree with changes to the Policy, you may close your account by contacting our support team before the effective date.

13. Contact Us & Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the way Taya 3653 handles your personal data, please reach out to our Data Protection team through the following channels:

If your concern relates to a potential breach of the Data Privacy Act and cannot be resolved through direct communication with Taya 3653, you have the right to escalate to the National Privacy Commission of the Philippines (NPC). The NPC handles complaints from data subjects and has the authority to investigate and impose sanctions for violations of RA 10173.