Privacy Policy

1. Introduction

365taya ("the Company," "we," "us," "our") is committed to protecting the privacy and personal data of every player who uses our online gaming platform. We understand that trust is the foundation of any good relationship — and when it comes to your personal information, we take that responsibility seriously.

This Privacy Policy has been prepared in accordance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations. It governs the collection, use, storage, disclosure, and protection of personal data provided by users ("you," "your," "Player") in connection with your use of the 365taya Platform.

This Policy applies to all personal data collected through the 365taya website, mobile-optimized platform, customer support channels, and any other touchpoints through which you interact with 365taya. It covers data collected from players based in the Philippines, including those accessing the Platform from Metro Manila, Cebu, Davao, Quezon City, Makati, and other regions across the archipelago.

2. Personal Data We Collect

365taya collects the following categories of personal data from registered players and Platform visitors:

2.1 Identity and Contact Data

• Full legal name as it appears on your government-issued ID;
• Date of birth (used to verify the 21+ age requirement);
• Residential address in the Philippines;
• Valid email address;
• Philippine mobile number;
• Government-issued identification number (e.g., PhilSys ID, passport, driver's license, SSS/GSIS number).

2.2 Financial Data

• GCash or PayMaya / Maya account details (mobile number associated with the account);
• Bank account details for bank transfer transactions (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank);
• Debit card details (card number, expiry date — stored in tokenized form only);
• Transaction history including deposits, withdrawals, and wager records.

2.3 Technical and Usage Data

• IP address and approximate geolocation;
• Device type, operating system, and browser information;
• Session duration, pages visited, and features used on the Platform;
• Login timestamps and access logs;
• Game history, betting patterns, and wagering activity.

2.4 Communications Data

• Records of communications with our customer support team via live chat or email;
• Feedback, complaints, and survey responses submitted to 365taya;
• Marketing preferences and communication opt-in/opt-out records.

3. How We Collect Your Data

365taya collects personal data through the following means:

4. Purpose of Processing Your Data

365taya processes your personal data for the following specific, legitimate purposes:

• Account management: Creating, maintaining, and managing your 365taya player account;
• Identity verification: Verifying your identity and age (21+) in compliance with Philippine gaming regulations;
• Payment processing: Processing deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card;
• Regulatory compliance: Meeting our obligations under PAGCOR regulations and the Anti-Money Laundering Act (AMLA) of the Philippines;
• Fraud prevention: Detecting, investigating, and preventing fraudulent activity, cheating, and unauthorized access;
• Responsible gaming: Monitoring gaming behavior to identify signs of problem gambling and administering self-exclusion and limit-setting tools;
• Customer support: Responding to your inquiries, complaints, and support requests;
• Platform improvement: Analyzing usage data to improve the performance, features, and user experience of the 365taya Platform;
• Marketing communications: Sending you promotional offers, bonuses, and updates — only where you have provided consent or where permitted by applicable law;
• Legal obligations: Complying with court orders, regulatory requests, and other legal requirements.

5. Legal Basis for Processing

Under the Data Privacy Act of 2012 (Republic Act No. 10173), 365taya processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms & Conditions you agreed to upon registration;
• Legal obligation: Processing required to comply with PAGCOR regulations, AMLA requirements, and other applicable Philippine laws;
• Legitimate interests: Processing for fraud prevention, platform security, and responsible gaming monitoring, where these interests are not overridden by your rights;
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, informed consent that you may withdraw at any time.

6. Data Sharing and Disclosure

365taya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

6.1 Service Providers

We engage trusted third-party service providers to assist in operating the 365taya Platform, including payment processors (GCash, PayMaya, banks), identity verification providers, cloud hosting services, and customer support platforms. These providers are contractually bound to process your data only on our instructions and in accordance with applicable data protection laws.

6.2 Regulatory and Law Enforcement Authorities

365taya may disclose your personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), or other competent Philippine authorities where required by law, court order, or regulatory directive.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of all or part of 365taya's business, your personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this Policy.

7. Data Retention

365taya retains your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

• Account data: Retained for the duration of your active account plus five (5) years following account closure, in compliance with AMLA record-keeping requirements;
• Transaction records: Retained for a minimum of five (5) years from the date of the transaction;
• KYC documents: Retained for five (5) years following account closure or the last transaction, whichever is later;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until consent is withdrawn, plus one (1) year thereafter.

Upon expiry of the applicable retention period, personal data will be securely deleted or anonymized in accordance with 365taya's data disposal procedures.

8. Data Security

365taya implements industry-standard technical and organizational security measures to protect your personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 365taya Platform;
• Encryption of sensitive data at rest, including financial information and identity documents;
• Tokenization of payment card details — full card numbers are never stored on our servers;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular security audits, vulnerability assessments, and penetration testing;
• Multi-factor authentication for administrative access to systems containing personal data;
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 365taya will notify the National Privacy Commission (NPC) and affected players in accordance with the requirements of the Data Privacy Act of 2012.

9. Cookies and Tracking Technologies

The 365taya Platform uses cookies and similar tracking technologies to enhance your experience, maintain your session, and analyze Platform usage. The following types of cookies are used:

You can manage your cookie preferences through your browser settings. Please note that disabling strictly necessary cookies may affect the functionality of the 365taya Platform. For more information on how to manage cookies, please refer to your browser's help documentation.

10. Your Data Privacy Rights

Under the Data Privacy Act of 2012 (Republic Act No. 10173), you have the following rights with respect to your personal data held by 365taya:

• Right to be Informed: You have the right to be informed of how your personal data is being collected and processed, as described in this Privacy Policy;
• Right to Access: You may request a copy of the personal data 365taya holds about you, along with information about how it is being processed;
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data we hold about you;
• Right to Erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time;
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, machine-readable format;
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal;
• Right to Lodge a Complaint: You have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have been violated.

To exercise any of the above rights, please contact our Data Protection Officer using the contact details provided in Section 13 of this Policy. We will respond to all verified requests within fifteen (15) business days in accordance with NPC guidelines.

11. Minors and Age Restriction

If you are a parent or guardian and believe that your child under the age of 21 has provided personal data to 365taya, please contact us immediately at the details provided in Section 13. We will investigate and take appropriate action without undue delay.

12. Changes to This Privacy Policy

365taya reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or regulatory requirements. When material changes are made, we will notify registered players via email or through a prominent notice on the Platform. The "Last Updated" date at the top of this page will always reflect the date of the most recent revision.

Your continued use of the 365taya Platform following the posting of an updated Privacy Policy constitutes your acceptance of the revised terms. We encourage you to review this Policy periodically to stay informed about how we protect your personal data.

13. Contact Our Data Protection Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by 365taya, please contact our designated Data Protection Officer (DPO):

You also have the right to contact the National Privacy Commission of the Philippines directly if you believe your data privacy rights have not been adequately addressed by 365taya.