Privacy Policy — How tay777 Protects Your Personal Data

1 Introduction

This Privacy Policy ("Policy") describes how tay777.cam ("tay777," "we," "us," "our") collects, uses, stores, discloses, and protects the personal information of individuals ("you," "your," "Player," "User") who access or use the tay777 website at https://tay777.cam and all associated gaming services, features, and content (collectively, the "Platform").

tay777 is committed to protecting the privacy of every Filipino player who engages with our Platform. We understand that your personal data is sensitive, and we take our responsibilities as a data controller seriously under the Data Privacy Act of 2012 (Republic Act No. 10173, as amended, "DPA") and all applicable regulations issued by the National Privacy Commission ("NPC") of the Philippines.

This Policy is incorporated into and forms part of the tay777 Terms and Conditions. By registering a tay777 account or using the Platform in any capacity, you acknowledge that you have read and understood this Policy and consent to the processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the Platform immediately and contact us to close your account.

2 Data Controller Identity

For the purposes of the Data Privacy Act of 2012 and applicable NPC regulations, the data controller responsible for the personal information collected through the tay777 Platform is:

Inquiries regarding this Policy or the exercise of data subject rights should be directed to our Data Protection Officer at the contact details above. We aim to respond to all privacy-related inquiries within five (5) business days.

3 Categories of Personal Data We Collect

tay777 collects personal data in the categories set out in the table below. We collect only information that is necessary and proportionate to the purpose for which it is needed.

4 How We Collect Personal Data

tay777 collects personal data through the following mechanisms:

4.1 Direct Collection

Information you provide directly to tay777 when you register an account, complete identity verification (KYC), make a deposit or withdrawal request, contact our customer support team, or participate in surveys or promotional activities. This is the primary source of identity, contact, financial, and verification data.

4.2 Automated Collection

Technical data and usage data are collected automatically when you access and interact with the tay777 Platform through our web servers, application logs, and analytics systems. This includes data collected through cookies and similar tracking technologies as described in Section 9 of this Policy.

4.3 Third-Party Sources

tay777 may receive personal data from third parties in limited circumstances, including: (i) identity verification service providers who assist tay777 in confirming the authenticity of documents submitted during KYC; (ii) payment processors who confirm transaction completion status; (iii) fraud detection services that provide risk scoring information based on publicly available signals; and (iv) regulatory authorities or law enforcement agencies acting under lawful authority.

5 Purposes of Processing and Legal Basis

tay777 processes personal data only for specified, legitimate purposes. Each processing activity is supported by one or more lawful bases under the Data Privacy Act of 2012:

6 Disclosure and Sharing of Personal Data

tay777 does not sell, rent, or otherwise commercialise personal data to third parties. Personal data is disclosed only in the limited circumstances described below, and only to parties who are contractually or legally bound to maintain appropriate data protection standards.

6.1 Service Providers

tay777 engages third-party service providers who process personal data on our behalf under strict data processing agreements, including: identity verification and KYC providers; payment processing services (GCash/Maya integration providers, banking APIs); IT infrastructure, hosting, and security providers; fraud detection and risk management platforms; and customer support platform providers. These parties are permitted to use personal data solely to provide services to tay777 and are prohibited from any secondary use.

6.2 Game Software Providers

Third-party game providers whose games are available on the tay777 Platform may receive limited technical data (such as session tokens and wager amounts) necessary to run game sessions. These providers operate under data processing agreements consistent with applicable Philippine data protection requirements.

6.3 Regulatory and Legal Disclosure

tay777 may disclose personal data to PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, Philippine law enforcement authorities, or courts of competent jurisdiction when required to do so by law, regulation, valid legal process, or governmental order. tay777 will notify affected players of such disclosures to the extent permitted by applicable law.

6.4 Business Transfers

In the event of a merger, acquisition, corporate restructuring, or sale of all or substantially all of tay777's assets, personal data may be transferred to the successor entity as part of that transaction. tay777 will notify affected players in advance of any such transfer and ensure that the successor entity maintains equivalent privacy protections.

7 Data Retention Periods

tay777 retains personal data for no longer than is necessary for the purposes for which it was collected, taking into account applicable legal, regulatory, and operational requirements. The following general retention periods apply:

• Account and identity data: Retained for the duration of the active account relationship plus five (5) years following account closure, in compliance with AMLC record-keeping requirements under RA 9160.
• Financial transaction records: Retained for a minimum of five (5) years from the date of each transaction, consistent with AMLC obligations and PAGCOR audit requirements.
• Identity verification documents: Retained for five (5) years following account closure or the last transaction date, whichever is later.
• Customer support communications: Retained for three (3) years from the date of the relevant interaction.
• Technical and usage data: Retained for up to twenty-four (24) months in identifiable form, after which it is anonymised or deleted.
• Marketing preference data: Retained until you withdraw consent or close your account, whichever occurs first.

Upon the expiry of the applicable retention period, tay777 will securely delete, anonymise, or pseudonymise personal data in accordance with industry-standard data destruction procedures.

8 Data Security Measures

tay777 implements a comprehensive set of technical and organizational security measures designed to protect personal data against unauthorized access, disclosure, alteration, loss, or destruction. Our security framework includes:

• Encryption in transit: All data transmitted between your device and tay777 servers is protected by TLS 1.2 or higher with 256-bit AES encryption.
• Encryption at rest: Sensitive personal data stored on tay777 servers, including identity documents and financial records, is encrypted at rest using AES-256.
• Access controls: Role-based access control limits staff access to personal data on a strict need-to-know basis. All access is logged and audited.
• Network security: tay777 infrastructure is protected by Web Application Firewalls (WAF), intrusion detection systems, and regular penetration testing.
• Payment security: Payment processing systems are PCI-DSS compliant. Sensitive payment credentials are never stored on tay777 application servers.
• Staff training: All tay777 personnel with access to personal data receive regular data protection and information security training.
• Incident response: tay777 maintains a documented data breach response plan. In the event of a breach likely to result in significant harm to Filipino players, tay777 will notify the NPC within seventy-two (72) hours and will inform affected players without undue delay.

While tay777 maintains industry-leading security practices, no online system can be guaranteed completely secure. Players are encouraged to maintain strong, unique passwords for their tay777 accounts and to enable SMS one-time password verification.

9 Cookies and Tracking Technologies

tay777 uses cookies and similar technologies (including web beacons, session tokens, and local storage) to operate and improve the Platform. Cookies are small data files placed on your device when you visit tay777.cam.

9.1 Types of Cookies Used

• Strictly Necessary Cookies: Essential for the Platform to function. They enable core features such as maintaining your logged-in tay777 session, processing transactions, and applying security controls. These cannot be disabled.
• Performance and Analytics Cookies: Collect aggregated, anonymised information about how players use the Platform, enabling tay777 to identify and fix technical issues and improve user experience. Used with consent.
• Functionality Cookies: Remember your preferences such as language settings, responsible gaming limits you have set, and display preferences to personalise your tay777 experience. Used with consent.
• Session Security Tokens: Short-lived tokens used to validate authenticated sessions and prevent cross-site request forgery (CSRF) attacks. These are strictly necessary and expire when you log out or close your browser.

9.2 Cookie Management

With the exception of strictly necessary cookies, you may manage your cookie preferences through your browser settings or through the consent management interface presented on your first visit to tay777.cam. Please note that disabling certain cookies may affect the functionality of the Platform, including your ability to maintain a logged-in session.

10 Your Data Subject Rights

Under the Data Privacy Act of 2012, Filipino players have the following rights in relation to personal data held by tay777. You may exercise any of these rights by contacting our Data Protection Officer at [email protected].

tay777 will respond to rights exercise requests within thirty (30) days of receipt. Where a request is complex or numerous, we may extend this period by a further thirty (30) days with written notice. Identity verification is required before processing any rights request to prevent unauthorized disclosure.

11 Minors and Age Restrictions

The tay777 Platform is strictly intended for individuals aged twenty-one (21) years and older in accordance with PAGCOR regulations and Philippine gaming law. tay777 does not knowingly collect or process personal data from individuals under the age of 21.

If tay777 discovers or has reason to believe that personal data has been collected from an individual under the age of 21 — whether through misrepresentation or circumvention of our age verification processes — the relevant account will be immediately suspended, all associated personal data will be reviewed, and steps will be taken to delete or anonymise that data to the extent permitted by applicable law. The matter may be referred to relevant Philippine authorities.

If you are a parent or guardian and believe your child under 21 may have registered a tay777 account, please contact our Data Protection Officer at [email protected] immediately.

12 Cross-Border Data Transfers

Some personal data processed by tay777 may be transferred to, stored in, or accessed from countries outside the Philippines in connection with the provision of services by our third-party service providers, including game software providers, identity verification services, and cloud infrastructure providers.

Any such cross-border transfer of personal data is conducted only where tay777 has implemented appropriate safeguards in accordance with Section 21 of the Data Privacy Act and applicable NPC issuances, which may include contractual clauses that impose data protection standards equivalent to those required under Philippine law, or transfers to recipients in jurisdictions determined to provide an adequate level of data protection.

13 Third-Party Services and Links

The tay777 Platform may reference or link to services operated by third parties, including game providers, payment processors, and responsible gaming support organizations. tay777's Privacy Policy applies solely to personal data collected and processed by tay777.cam and does not extend to third-party services. tay777 is not responsible for the privacy practices of any third party whose services may be accessible through or referenced from the Platform.

Players are encouraged to review the privacy policies of any third-party service they interact with in connection with their tay777 gaming experience, including their GCash or Maya application, bank's online platform, or any other payment service used to fund a tay777 account.

14 Amendments to This Policy

tay777 reserves the right to modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or PAGCOR/NPC regulatory guidance. Material changes will be communicated to registered players via email to the address associated with their tay777 account and/or through a prominent notice on the Platform at least fourteen (14) days prior to the change taking effect.

The "Last Updated" date at the top of this page will be revised on each modification. Continued use of the tay777 Platform following the effective date of any amendment constitutes your acceptance of the revised Policy. We encourage Filipino players to review this page periodically to remain informed of how tay777 handles their personal information.

15 Contact and Rights Exercise

For all privacy-related inquiries, requests to exercise data subject rights, or concerns regarding tay777's processing of your personal data, please contact our Data Protection Officer through the following channels:

When submitting a rights exercise request, please include your full name, registered email address, and a description of your request. We will require identity verification before processing requests involving access to or deletion of personal data, to protect your account from unauthorized third-party requests.