tayaevo Privacy Policy

1. Who We Are

tayaevo ("tayaevo", "we", "us", or "our") operates the online gaming platform accessible at tayaevo.co (the "Platform"). tayaevo is a PAGCOR-registered online gaming platform operating within the regulatory framework of the Philippine Amusement and Gaming Corporation.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, tayaevo acts as the Personal Information Controller with respect to personal data collected and processed through the Platform.

2. Personal Data We Collect

tayaevo collects the following categories of personal data in connection with your use of the Platform:

Identity & Contact Data

• Full legal name as it appears on a government-issued Philippine ID
• Date of birth (for age verification purposes — users must be 21 or older)
• Residential address within the Philippines
• Mobile number registered to a Philippine mobile network
• Email address

Identity Verification (KYC) Data

• Copies or photographs of government-issued Philippine identification documents (e.g., PhilSys National ID, UMID, Driver's License, Passport)
• Selfie or live-presence verification images where required by our KYC process
• Proof of address documentation where required

Financial Data

• GCash account number (registered mobile number) used for deposits and withdrawals
• Maya / PayMaya account details used for transactions
• Bank account details (bank name, account number) for bank transfer withdrawals
• Transaction history: deposit amounts, withdrawal requests, dates, and statuses

Gaming & Behavioural Data

• Game session logs: games played, bet amounts, win/loss outcomes, session duration
• Bonus and promotion usage records
• Responsible gaming tool usage (deposit limit settings, self-exclusion history)

Technical & Device Data

• IP address and approximate geolocation (Philippines-based access verification)
• Device type, operating system, and browser type
• Session tokens and login timestamps
• Cookie identifiers and analytics data (see Section 10)

Communications Data

• Contents of customer support interactions (live chat transcripts, email correspondence)
• Feedback, complaints, and dispute records

3. How We Collect Your Data

tayaevo collects personal data through the following means:

• Account registration: information you submit when creating your tayaevo account.
• KYC verification: identity documents and verification materials you upload in response to verification requests.
• Deposits and withdrawals: payment details transmitted during financial transactions on the Platform.
• Platform usage: automatically recorded data generated by your interaction with the tayaevo website and games.
• Customer support: information you provide when contacting tayaevo's support team.
• Cookies and tracking technologies: data collected automatically by our analytics and session management systems (see Section 10).
• Third-party payment processors: transaction confirmation data received from GCash, Maya, and partner banks.

4. Purposes of Processing

tayaevo processes your personal data for the following purposes:

• Account management: creating, maintaining, and securing your tayaevo account.
• Identity and age verification: confirming that you meet the minimum age requirement of 21 years and that your identity is genuine, as required by PAGCOR regulations.
• Financial transactions: processing deposits, withdrawals, and maintaining accurate transaction records.
• Gaming services: delivering the games, promotions, and platform features you access through tayaevo.
• Regulatory compliance: fulfilling our obligations under PAGCOR regulations, anti-money laundering (AML) requirements, and the Data Privacy Act of 2012.
• Fraud prevention and security: detecting and preventing fraudulent account activity, unauthorised access, and financial crime.
• Responsible gaming: monitoring gaming patterns to identify potential problem gambling indicators and administering self-exclusion and limit tools.
• Customer support: responding to inquiries, resolving disputes, and improving our services.
• Platform improvement: using aggregated and anonymised analytics data to improve the tayaevo Platform's performance and user experience.
• Legal proceedings: defending or pursuing legal claims where necessary.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012, tayaevo processes your personal data on the following legal grounds:

• Contractual necessity: processing required to fulfil our obligations to you under the tayaevo Terms and Conditions — including account management, payment processing, and game delivery.
• Legal obligation: processing required to comply with PAGCOR regulations, AML laws, tax obligations, and other applicable Philippine legal requirements.
• Legitimate interests: processing for fraud prevention, platform security, and responsible gaming monitoring, where our legitimate interests do not override your data protection rights.
• Consent: where you have specifically consented to processing for purposes such as marketing communications. You may withdraw marketing consent at any time through your account settings.

6. Data Sharing and Disclosure

tayaevo does not sell your personal data to third parties. We share your data only in the following circumstances:

• Payment processors: GCash, Maya/PayMaya, GrabPay, and partner Philippine banks receive the transaction data necessary to process your deposits and withdrawals.
• Game providers: third-party game studios integrated into the tayaevo Platform receive session data necessary to deliver and record game outcomes.
• KYC and identity verification services: where automated identity verification tools are used, your identity documents may be shared with our verification service provider under strict data processing agreements.
• PAGCOR and regulatory authorities: we are legally required to share certain player data with PAGCOR and other competent Philippine regulatory or law enforcement authorities upon valid request.
• AML compliance: transaction data may be disclosed to the Anti-Money Laundering Council (AMLC) of the Philippines as required by Republic Act No. 9160 (Anti-Money Laundering Act), as amended.
• Legal proceedings: personal data may be disclosed to courts, legal advisers, or opposing parties where required for the pursuit or defence of legal claims.

All third-party service providers with whom tayaevo shares personal data are contractually required to process that data only for the specified purposes and in accordance with applicable data protection standards.

7. International Data Transfers

Some third-party service providers used by tayaevo may process data outside the Philippines — for example, game providers or cloud infrastructure partners based in other jurisdictions. Where such transfers occur, tayaevo ensures that adequate safeguards are in place, including contractual data protection clauses consistent with the requirements of the National Privacy Commission (NPC) of the Philippines.

8. Data Retention

tayaevo retains your personal data for as long as your account is active, and for a further period after account closure as required by applicable law and regulatory obligations:

• Account and identity data: retained for a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements and AML obligations.
• Transaction records: retained for a minimum of five (5) years as required under the Anti-Money Laundering Act.
• Gaming session logs: retained for three (3) years, or longer where a dispute or regulatory investigation is ongoing.
• Customer support records: retained for two (2) years from the date of the most recent interaction, or until any associated dispute is fully resolved.

When personal data is no longer required for any lawful purpose, it is securely deleted or anonymised in accordance with our data retention procedures.

9. Data Security

tayaevo implements industry-standard technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, and destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tayaevo's servers.
• Encrypted storage of sensitive data, including passwords (stored as salted cryptographic hashes — never in plain text) and financial account details.
• Role-based access controls limiting internal access to personal data to authorised personnel only.
• Regular security audits and penetration testing of the Platform's infrastructure.
• Incident response procedures to detect, investigate, and respond to data security incidents in accordance with NPC notification requirements.

10. Cookies and Tracking Technologies

tayaevo uses cookies and similar tracking technologies on the Platform for the following purposes:

• Strictly necessary cookies: required for the Platform to function, including session management, login authentication, and security tokens. These cannot be disabled.
• Analytics cookies: used to collect aggregated, anonymised data about how users interact with the Platform — page visits, session duration, navigation paths — to help us improve the user experience.
• Functional cookies: used to remember your preferences, such as language settings and last-visited game categories.

You may manage cookie preferences through your browser settings. Note that disabling non-essential cookies will not affect your ability to use core Platform features, though some personalisation functions may be limited.

11. Your Rights Under the Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by tayaevo:

• Right to be Informed: the right to know what personal data tayaevo holds about you and how it is processed.
• Right to Access: the right to request a copy of the personal data tayaevo holds about you.
• Right to Rectification: the right to have inaccurate or incomplete personal data corrected.
• Right to Erasure / Right to be Forgotten: the right to request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to our legal retention obligations.
• Right to Object: the right to object to processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests.
• Right to Data Portability: the right to receive your personal data in a structured, commonly used, machine-readable format.
• Right to Lodge a Complaint: the right to file a complaint with the National Privacy Commission of the Philippines if you believe your data protection rights have been violated.

To exercise any of these rights, please contact the tayaevo Data Protection Officer (see Section 14). We will respond to verified requests within the timeframe required by applicable law.

12. Minors and Age Restriction

The tayaevo Platform is strictly prohibited to persons under the age of 21 years. tayaevo does not knowingly collect personal data from individuals under 21. If we become aware that we have inadvertently collected data from an underage individual, we will immediately close the associated account and delete all related personal data.

If you believe that a minor has created a tayaevo account, please contact our support team immediately so that we can take appropriate action.

13. Amendments to this Privacy Policy

tayaevo reserves the right to update this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. Material changes will be communicated to registered users via email notification or in-platform notice at least seven (7) days before the updated Policy takes effect.

Your continued use of the tayaevo Platform after the effective date of any amended Privacy Policy constitutes your acceptance of the revised terms. The current version of this Policy, with its effective date, is always available at tayaevo.co/privacy-policy.

14. Contact & Data Protection Officer

tayaevo has designated a Data Protection Officer (DPO) in accordance with the requirements of the Data Privacy Act of 2012 and the regulations of the National Privacy Commission.

For any privacy-related inquiries, requests to exercise your data subject rights, or concerns about how tayaevo handles your personal data, please contact the tayaevo Data Protection Officer at:

Email (plain text — not a clickable link): [email protected] with subject line: Privacy / DPO Inquiry

Our support team is available 24 hours a day, 7 days a week via live chat on the Platform. Written privacy inquiries submitted via email will be acknowledged within two (2) business days and responded to within the timeframe required under applicable law.

If you are not satisfied with tayaevo's response to a privacy complaint, you have the right to escalate your complaint to the National Privacy Commission of the Philippines.