tayaph Privacy Policy

This Privacy Policy ("Policy") describes how tayaph ("tayaph", "we", "us", "our") — the operator of the online gaming platform accessible at tayaph.app — collects, uses, stores, discloses, and protects the personal information of users ("you", "Player", "User") who access or use the tayaph platform, website, and related services.

tayaph is committed to protecting the privacy and personal data of all players, in full compliance with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) of the Philippines, and its Implementing Rules and Regulations. We take our obligations under Philippine data protection law seriously and have implemented appropriate technical and organisational measures to safeguard your information.

By registering a tayaph account, completing the tayaph Login process, or otherwise using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with any part of this Policy, please discontinue use of the tayaph platform.

tayaph operates as an online gaming platform serving Filipino players across the Philippines — from Metro Manila and Cebu to Davao, Quezon City, and beyond. In the course of providing our services, we necessarily collect certain personal information from players to enable account creation, identity verification, payment processing, game delivery, and customer support.

We collect only the personal data that is necessary for the purposes described in this Policy. We do not sell, rent, or trade your personal information to third parties for their own marketing purposes. Any sharing of data with third parties is strictly limited to what is required to operate the tayaph platform, comply with legal obligations, or protect the safety and integrity of the service.

tayaph acts as the Personal Information Controller (PIC) under the Philippine Data Privacy Act for all personal data collected through the tayaph platform. Our Data Protection Officer (DPO) can be contacted using the details provided at the end of this Policy.

tayaph collects the following categories of personal data from players:

tayaph collects personal data through the following channels:

• Direct registration – Information you provide when creating your tayaph account, including your name, email address, date of birth, and mobile number.
• tayaph Login activity – Data generated each time you sign in, including timestamps, IP address, and device identifiers.
• Identity verification (KYC) – Documents and information you submit when completing our Know Your Customer process, including government-issued identification.
• Payment transactions – Data exchanged when you make deposits or withdrawals via GCash, PayMaya, bank transfer, or debit card.
• Platform usage – Data automatically generated as you navigate the tayaph platform, play games, and interact with features.
• Customer support – Information you share when contacting our support team via chat, email, or any other communication channel.
• Cookies and tracking technologies – Data collected automatically through cookies, web beacons, and similar technologies as described in Section 9.
• Third-party verification services – Data received from identity verification providers and fraud prevention services used to validate your identity and protect the platform.

tayaph processes your personal data for the following specific, legitimate purposes:

• Account management – To create, maintain, and secure your tayaph account, and to authenticate your identity during the tayaph Login process.
• Identity and age verification – To verify that you are at least 21 years of age and to comply with Know Your Customer (KYC) requirements under applicable Philippine gaming regulations.
• Payment processing – To process deposits and withdrawals via your chosen payment method (GCash, PayMaya, bank transfer, or debit card) and to maintain accurate financial records.
• Game delivery and platform operation – To provide access to tayaph games including Bingo, Slot, Texas Hold'em, Ganesh Fortune, and live casino titles, and to maintain platform performance.
• Responsible gaming – To monitor gaming behaviour, enforce deposit and loss limits, process self-exclusion requests, and identify players who may need responsible gaming support.
• Fraud prevention and security – To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct on the platform.
• Legal and regulatory compliance – To comply with applicable Philippine laws, gaming regulations, anti-money laundering (AML) requirements, and instructions from competent authorities.
• Customer support – To respond to your enquiries, resolve disputes, and improve the quality of our support services.
• Marketing communications – To send you promotional offers, bonus notifications, and platform updates, where you have provided consent to receive such communications. You may opt out at any time.
• Platform improvement – To analyse usage patterns, conduct research, and improve the features, performance, and user experience of the tayaph platform.

Under the Philippine Data Privacy Act of 2012, tayaph processes your personal data on the following legal bases:

• Contractual necessity – Processing required to perform our contract with you, including account creation, payment processing, and game delivery.
• Legal obligation – Processing required to comply with applicable Philippine laws, including AML regulations, gaming licensing requirements, and tax obligations.
• Legitimate interests – Processing necessary for tayaph's legitimate business interests, including fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights.
• Consent – Processing based on your freely given, specific, and informed consent, particularly for marketing communications and non-essential cookies. You may withdraw consent at any time without affecting the lawfulness of prior processing.

tayaph does not sell, rent, or trade your personal data to third parties for their own commercial purposes. We may share your data only in the following limited circumstances:

• Payment processors – We share necessary financial data with payment service providers (such as GCash, PayMaya, and Philippine banking partners) solely to process your transactions.
• Identity verification providers – We share identity documents with KYC and AML compliance service providers to verify your identity and age as required by law.
• Game software providers – Game providers may receive limited technical data (such as session tokens) necessary to deliver game content to your device.
• Regulatory and law enforcement authorities – We may disclose your data to PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), or other competent Philippine authorities when required by law or court order.
• Fraud prevention networks – We may share data with industry fraud prevention services to protect the platform and other players from fraudulent activity.
• Professional advisers – We may share data with lawyers, auditors, and other professional advisers under strict confidentiality obligations where necessary for legal or compliance purposes.

tayaph retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, tayaph will securely delete or anonymise your personal data in accordance with our data disposal procedures. Where data is anonymised, it may be retained indefinitely for statistical and analytical purposes.

tayaph implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• SSL/TLS encryption – All data transmitted between your device and the tayaph platform is encrypted using industry-standard Transport Layer Security (TLS) protocols.
• Password hashing – Account passwords are never stored in plain text. tayaph uses strong cryptographic hashing algorithms to store password credentials securely.
• Access controls – Access to personal data is restricted to authorised tayaph personnel on a strict need-to-know basis. All staff with data access undergo regular privacy and security training.
• Secure data centres – Player data is stored in secure, access-controlled server environments with physical and logical security controls.
• Regular security audits – tayaph conducts periodic security assessments and vulnerability testing to identify and address potential risks.
• Incident response – tayaph maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights, we will notify the National Privacy Commission (NPC) and affected players within the timeframes required by the Philippine DPA.

tayaph uses cookies and similar tracking technologies to operate and improve the Platform. A cookie is a small text file placed on your device when you visit the tayaph website. We use the following types of cookies:

• Strictly necessary cookies – Essential for the Platform to function. These include session cookies that maintain your tayaph Login state and security tokens. These cannot be disabled.
• Functional cookies – Remember your preferences such as language settings, game preferences, and display options to personalise your experience.
• Analytics cookies – Help us understand how players use the Platform, which pages are most visited, and where improvements can be made. Data collected is aggregated and anonymised where possible.
• Security cookies – Used to detect and prevent fraudulent activity, bot traffic, and unauthorised access attempts.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the tayaph platform, including your ability to complete the tayaph Login process. tayaph does not use cookies to serve third-party advertising.

Under the Philippine Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tayaph. To exercise any of these rights, please contact our Data Protection Officer using the details in Section 14.

tayaph will respond to all verified data rights requests within thirty (30) days of receipt. We may need to verify your identity before processing your request to protect against unauthorised access to your data.

The tayaph platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. tayaph does not knowingly collect personal data from individuals under the age of 21.

If tayaph discovers or has reason to believe that a registered account belongs to a person under 21 years of age, we will immediately suspend the account, delete all associated personal data to the extent permitted by law, and return any deposited funds to the payment source. Any winnings generated by an underage account will be forfeited.

tayaph primarily stores and processes player data within secure facilities. In some cases, data may be transferred to or processed by service providers located outside the Philippines — for example, cloud infrastructure providers or international KYC verification services.

Where such transfers occur, tayaph ensures that appropriate safeguards are in place to protect your personal data, including contractual data processing agreements that require the recipient to maintain data protection standards equivalent to those required under the Philippine Data Privacy Act. tayaph will not transfer your personal data to a jurisdiction that does not provide an adequate level of data protection without implementing appropriate safeguards.

tayaph reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or platform features. When material changes are made, we will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The most current version of this Privacy Policy will always be available at tayaph.app/privacy-policy. The effective date at the top of this page indicates when the Policy was last revised. Your continued use of the tayaph platform after any changes constitutes your acceptance of the updated Policy.

We encourage you to review this Privacy Policy periodically to stay informed about how tayaph protects your personal data.

If you have any questions, concerns, or requests regarding this Privacy Policy or the processing of your personal data by tayaph, please contact our Data Protection Officer:

If you are not satisfied with tayaph's response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, the independent authority responsible for enforcing the Data Privacy Act of 2012.