Privacy Policy

This Privacy Policy applies to all personal data collected and processed by taya9 in connection with the operation of the taya9.vip website, any associated mobile application, and all services, features, and transactions conducted through those channels.

taya9 is the personal information controller (as defined under RA 10173, the Data Privacy Act of 2012) for all personal data processed in connection with the taya9 platform. taya9 is a Philippines-operating online gaming platform licensed by the Philippine Amusement and Gaming Corporation (PAGCOR) and is therefore also subject to PAGCOR's data handling requirements as a condition of its license.

This Policy does not apply to third-party websites, services, or platforms that may be accessible from taya9 promotional materials or communications. Those third parties maintain their own privacy policies, for which taya9 takes no responsibility.

taya9 collects the following categories of personal data. The specific data points collected vary depending on the nature of your interaction with the platform.

taya9 collects personal data through the following channels and mechanisms:

• When you complete the taya9 account registration form, providing your name, mobile number, date of birth, and address.
• When you submit KYC documents in response to taya9's identity verification requirements.
• When you contact taya9 support through live chat or email, including the content of those communications.
• When you set responsible gaming preferences such as deposit limits or self-exclusion periods.
• When you participate in taya9 promotions, surveys, or feedback activities (where offered).

• Technical data (IP address, device information, browser type) is collected automatically when you access the taya9 platform through standard server logging mechanisms.
• Session cookies and similar technologies are placed on your device to maintain your login session, store preferences, and enable platform functionality.
• Gaming activity data — bets placed, outcomes, session durations — is logged automatically as part of the platform's normal operation and as required by PAGCOR for regulatory reporting.

• Payment processors and e-wallet providers (GCash, PayMaya, Philippine banks) provide transaction reference data — not your full payment credentials — to enable taya9 to reconcile deposits and withdrawals.
• Identity verification service providers may return the result of a document verification check (pass/fail and the reason for any failure) when taya9 uses an automated KYC service.
• PAGCOR may communicate regulatory information about players who are subject to nationwide self-exclusion orders or other regulatory restrictions.

taya9 processes personal data only where a lawful basis for processing exists under RA 10173 and applicable PAGCOR requirements. The primary lawful bases relied upon by taya9 are:

• Contractual Necessity: Processing is necessary to perform the contract between taya9 and the player — that is, to operate the player's account, process deposits and withdrawals, and provide access to games and betting markets.
• Legal Obligation: Processing is required to comply with Philippine law, including the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR licensing conditions, tax reporting obligations, and other applicable regulations. This is the basis for KYC verification and transaction monitoring.
• Legitimate Interest: Processing is necessary for taya9's legitimate interests where those interests are not overridden by the player's privacy rights — for example, fraud prevention, platform security, responsible gaming programme implementation, and platform analytics for service improvement.
• Consent: For certain non-essential processing — such as marketing communications — taya9 will seek and rely on your explicit consent. Consent may be withdrawn at any time without affecting the lawfulness of processing conducted prior to withdrawal.

taya9 uses personal data for the following specific purposes, each of which is tied to a lawful basis identified in Section 4:

• Account Creation and Management: To register, verify, maintain, and where applicable close your taya9 account, including identity verification, login authentication, and account support.
• Transaction Processing: To process deposits from GCash, PayMaya, and Philippine bank accounts; to execute withdrawal requests to verified payment methods; and to maintain accurate transaction records in PHP.
• Regulatory Compliance: To fulfil taya9's obligations under PAGCOR regulation, the Anti-Money Laundering Act, and other applicable Philippine law — including transaction monitoring, suspicious activity reporting to the AMLC, and KYC record-keeping.
• Responsible Gaming: To implement and monitor voluntary responsible gaming tools including deposit limits, self-exclusion, session controls, and reality checks; and to identify patterns of play that may indicate problem gambling requiring intervention.
• Fraud Prevention and Platform Security: To detect and prevent unauthorised account access, fraudulent transactions, multi-accounting, and other platform integrity violations.
• Customer Support: To respond to support requests via live chat and email, to investigate account issues, and to maintain records of support interactions for quality and compliance purposes.
• Platform Analytics: To analyse aggregated, anonymised usage data for the purpose of improving platform performance, game availability, and user experience — without identifying individual players.
• Marketing Communications: Where you have provided consent, to send you relevant promotional offers, bonus notifications, and taya9 product updates via SMS or email. You may withdraw consent at any time by contacting support or using the unsubscribe mechanism in communications.

taya9 does not sell, rent, or commercially transfer personal data to third parties. The following are the circumstances under which taya9 may share personal data with external parties, and the basis for each:

• PAGCOR: As the licensing and regulatory authority for taya9's operations, PAGCOR has legal access to player records, transaction data, and gaming activity logs as part of its regulatory oversight function. Disclosure to PAGCOR is a legal obligation under the terms of taya9's license.
• Anti-Money Laundering Council (AMLC): taya9 is required under RA 9160 (Anti-Money Laundering Act) to file Suspicious Transaction Reports and Cash Transaction Reports with the AMLC where applicable thresholds or patterns are identified.
• National Privacy Commission (NPC): In the event of a notifiable personal data breach, taya9 is required under RA 10173 to notify the NPC within 72 hours of becoming aware of the breach.
• Courts and Law Enforcement: taya9 will disclose personal data in response to a valid court order, judicial directive, or lawful request from Philippine law enforcement authorities.

• Payment Processors: Transaction data is shared with GCash, PayMaya, BPI, BDO, Metrobank, UnionBank, and other Philippine payment providers solely to process deposits and withdrawals. These providers are data processors acting on taya9's instructions and are contractually bound to handle data confidentially.
• KYC and Identity Verification Providers: Identity documents submitted for KYC are processed by taya9's licensed verification service providers, who are bound by data processing agreements limiting use to the verification purpose only.
• Technology Infrastructure Providers: taya9's platform infrastructure is hosted on servers operated by contracted cloud service providers, who process technical and account data solely to provide hosting services under data processing agreements.
• Game Content Providers: Where technically necessary for the delivery of certain game products, game providers may receive a session token or anonymised player identifier. Game providers do not receive full identity or financial data.

taya9 uses cookies and similar client-side storage technologies to operate and improve the platform. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the platform to function — including session authentication cookies that keep you logged in during your visit. These cannot be disabled without breaking core platform functionality.
• Functional Cookies: Store your preferences (e.g., language settings, responsible gaming tool states) to personalise your experience without requiring you to re-enter preferences each session.
• Analytics Cookies: Used to collect anonymised, aggregated data about how players navigate the platform — which pages are most visited, where users exit, typical session patterns. This data is used solely to improve platform design and performance. taya9 does not share raw analytics data with external parties.
• Security Cookies: Used to detect unusual login patterns, session anomalies, and potential fraud indicators — for example, flagging a session that changes device mid-game or that originates from an IP address inconsistent with the player's registered location.

taya9 does not use third-party advertising cookies, retargeting pixels, or social media tracking scripts on the taya9.vip platform. You may manage cookie preferences through your browser settings; however, disabling strictly necessary cookies will impair your ability to use the platform.

taya9 retains personal data for the minimum period necessary to fulfil the purpose for which it was collected, subject to mandatory retention requirements under Philippine law. The following table summarises retention periods by data category:

Upon expiry of the applicable retention period, personal data is either securely deleted or rendered permanently anonymous such that it can no longer be attributed to an identified individual.

taya9 implements technical and organisational security measures appropriate to the sensitivity of the personal data it processes. These measures are designed to protect against unauthorised access, accidental loss, destruction, or alteration of personal data.

• All personal data stored on taya9 servers is encrypted at rest using industry-standard encryption protocols.
• All data transmitted between the taya9 platform and user devices is protected by TLS 1.2 or higher encryption, reflected by HTTPS in the browser address bar.
• Account passwords are stored using a one-way cryptographic hashing algorithm — taya9 employees cannot read your password in plain text.
• Access to production systems and personal data is restricted to authorised personnel on a need-to-know basis, controlled through role-based access management.
• Multi-factor authentication is required for all taya9 staff accessing systems that contain personal data.
• Penetration testing and security vulnerability assessments are conducted periodically by qualified security professionals.

• All taya9 staff who handle personal data are trained on data privacy obligations under RA 10173 and taya9's internal data handling policies.
• A Data Protection Officer (DPO) has been designated by taya9 as required under RA 10173, responsible for overseeing compliance with this Policy and applicable law.
• Third-party service providers with access to personal data are required to execute data processing agreements that bind them to confidentiality and security standards equivalent to those applied by taya9.

taya9's primary operations and data storage are based within the Philippines. In certain circumstances, personal data may be processed by service providers whose infrastructure is located outside the Philippines — for example, certain cloud hosting providers or game content platforms that operate internationally.

Where such transfers occur, taya9 ensures that appropriate safeguards are in place to protect your personal data to a standard consistent with RA 10173. These safeguards may include:

• Contractual clauses in data processing agreements that require the recipient to apply data protection standards equivalent to Philippine law.
• Selection of processors that operate under internationally recognised data protection frameworks (such as ISO/IEC 27001 certification).
• Transfer only of the minimum data necessary for the service to function, with full personal identity data retained in Philippines-based systems where technically possible.

taya9 does not transfer personal data to jurisdictions or recipients that cannot provide an adequate level of protection for that data. The primary financial and KYC data of Filipino players is processed within the Philippines or in jurisdictions that provide adequate data protection standards.

Under RA 10173 (Data Privacy Act of 2012), all individuals whose personal data is processed by taya9 hold the following rights. taya9 is committed to facilitating the exercise of these rights in a timely and practical manner.

To exercise any of the above rights, submit a written request through taya9 live chat or to the support email address. taya9 will acknowledge your request within 3 business days and provide a substantive response within 30 days. In complex cases, the response period may be extended by up to an additional 60 days, with notification to you of the extension and reason.

taya9 may request proof of identity before processing a data subject request to ensure that data is not disclosed to, or actioned by, an unauthorised party.

The taya9 platform is strictly restricted to individuals aged 21 years of age or older. taya9 does not knowingly collect personal data from individuals under the age of 21.

If taya9 identifies or is notified that a player has provided false age information and is under 21 years of age, taya9 will immediately suspend the account, delete all personal data associated with that account (except as required to comply with mandatory regulatory reporting obligations regarding the incident), and take appropriate action consistent with PAGCOR's requirements for underage gambling incidents.

Parents or guardians who believe that a minor has registered a taya9 account should contact taya9 support immediately via live chat so that the account can be suspended and the matter investigated.

The taya9 platform may reference or contain information about third-party services such as GCash and PayMaya in the context of payment methods. taya9 is not responsible for the privacy practices of these third-party platforms.

When you use GCash, PayMaya, or any Philippine bank's online banking service to make a deposit or withdrawal on taya9, you are interacting directly with that provider's platform and systems. Your use of those services is governed by their respective privacy policies and terms, not by this taya9 Privacy Policy.

taya9 recommends that all players review the privacy policies of any payment service they use in conjunction with taya9, to understand how those services handle their financial and personal data.

taya9 reserves the right to update or amend this Privacy Policy at any time to reflect changes in applicable law, PAGCOR regulatory requirements, taya9's operational practices, or improvements in data protection standards. The revised Policy will be published on taya9.vip/privacy-policy with an updated effective date.

For material changes — those that significantly affect the nature of the personal data taya9 collects, the purposes for which it is used, or the rights of players — taya9 will provide advance notice via the registered email address or through a prominent in-platform notification to all active account holders, prior to the amended Policy taking effect.

Continued use of the taya9 platform after the effective date of any amendment constitutes acceptance of the revised Privacy Policy. If you do not agree with any amendment, you may close your account and request deletion of your personal data (subject to mandatory retention requirements) by contacting taya9 support.

taya9 has designated a Data Protection Officer (DPO) as required under RA 10173. The DPO is responsible for overseeing taya9's compliance with this Privacy Policy and applicable data protection law, and for handling data subject requests and complaints.

For any privacy-related inquiries, data subject access requests, or concerns regarding taya9's handling of your personal data, please contact taya9 through the following official channels:

• Live Chat: Available 24 hours a day, 7 days a week from any page on the taya9.vip platform. For privacy matters, please state "Data Privacy Request" at the start of your chat so the query can be directed to the appropriate team.
• Support & Data Privacy Email: [email protected] — please include "Privacy Policy" or "Data Subject Request" in the subject line.
• Platform: taya9.vip — Philippines