The Taya365 Privacy Policy explains how member data is collected, used, stored and protected across the website and the Taya365 app. The policy covers 5 categories of personal data, from identity and contact details to transaction records and device information, along with 4 legal bases that justify each processing activity. Every connection to the platform is secured by 256 bit SSL encryption certified by GeoTrust, and withdrawals require a separate password to block unauthorised access. 

Introduction

This policy applies to every visitor and registered member utilizing Taya365 services, spanning the entire user journey from initial account creation through to the final withdrawal. Browsing the platform or registering an account confirms that the member has read, understood, and accepted the data practices outlined in this policy. 

Additionally, it functions in conjunction with the Taya365 Terms and Conditions and the Responsible Gaming policy, which collectively govern account usage and player protection standards. Under this agreement, Taya365 guarantees that it does not sell personal data to any third party, ensuring all user information is processed solely for the designated purposes specified in Section 4.

Data controller information

The Malta-registered entity operating Taya365 acts as the data controller responsible for member information, with its registered office located at 28 GB Buildings, Level 3, Watar Street, Ta’ Xbiex, XBX 1301, Malta. In addition to its registered location, the platform maintains an operational office at 21 Buenviaje St, Cainta, 1900 Rizal, Philippines, and operates under license MGA/B2C/314/2015 issued by the Malta Gaming Authority. 

For inquiries regarding personal data and privacy, members can get in touch via the dedicated privacy email listed on the official website or by calling the hotline at 0997 544 9109.  

Information Taya365 collects

Taya365 collects 5 categories of data, each linked to a specific stage of account use.

Category	Data collected	When it is collected
Identity data	Full name, date of birth and gender	At registration
Contact data	Email address, mobile number and residential address	At registration and on profile updates
Verification data	Government issued ID submitted for KYC checks	Before the first withdrawal
Transaction data	Deposits, withdrawals, payment method details and gaming activity	During every payment and game session
Technical data	IP address, device identifiers, browser type and session information	Each time the website or app is accessed

How collected information is used

Member data serves 6 operational purposes tied directly to running the account safely.

• Creating and managing the member account, including login access, profile settings and account status updates.
• Processing deposits and withdrawals through GCash and PayMaya and confirming eligibility for bonuses such as the 50% first deposit offer.
• Completing KYC and anti money laundering checks before funds are released to the member.
• Answering customer support requests through live chat, phone, email, Facebook and Telegram.
• Preventing fraud, unauthorized account access and underage use of the platform.
• Meeting legal and regulatory obligations under the Malta Gaming Authority license and applicable law.

Legal basis for processing

Every processing activity on Taya365 relies on one of four distinct legal grounds. First, the performance of a contract serves as the foundation for operating member accounts, processing payments, and providing games. 

Second, legal obligations require the platform to conduct KYC verification, execute anti-money laundering (AML) checks, and fulfill mandatory regulatory reporting. 

Third, legitimate interest justifies measures taken for fraud prevention and ongoing platform security monitoring. Finally, member consent applies to optional marketing messages, which users remain free to withdraw at any time.

Data retention

Taya365 keeps personal data only as long as the account and legal duties require.

• Account data is stored for as long as the account remains active and is used to provide the Services.
• After closure, verification and transaction records are kept for the minimum period required by licensing and anti money laundering regulations.
• Data that no longer serves a legal or operational purpose is deleted or anonymised once the required period ends.

Data security measures

Regarding data security measures, member information on the Taya365 website and mobile app is safeguarded by three distinct layers of protection. First, all data transmissions are secured using 256-bit SSL encryption certified by GeoTrust. 

Second, personal data is kept strictly confidential through restricted access, making it accessible only to authorized personnel on a need-to-know basis and effectively minimizing internal exposure within the organization. Finally, a separate withdrawal password, distinct from the account’s primary login password, must be provided to authenticate and confirm every single withdrawal request.

Third party sharing

Taya365 never sells personal information and shares member data exclusively with three categories of recipients. First, data is shared with payment service providers to process deposits and withdrawals through methods such as GCash and PayMaya. 

Second, identity verification providers receive necessary details to confirm member identity and age during KYC checks. Lastly, data may be disclosed to regulatory authorities and law enforcement agencies to fulfill legal obligations whenever required by applicable law.

User rights

Members hold 5 rights over their personal data, and Filipino members are also protected under the Data Privacy Act of 2012 (Republic Act No. 10173).

• Right of access: Request a copy of the personal data Taya365 holds on the account and details on how it is used.
• Right to correction: Ask for inaccurate or outdated details, such as a changed mobile number or address, to be updated.
• Right to deletion: Request removal of personal data where no legal obligation to retain it applies, such as AML record keeping.
• Right to restriction or objection: Limit or object to specific processing, including withdrawing consent for marketing messages.
• Right to portability: Receive personal data in a structured format for transfer to another service provider.

Cookies and tracking

Taya365 uses 2 types of cookies to run the platform and understand how members use it.

Cookie type	Purpose	Control
Essential cookies	Core functions, login sessions and session security	Required for the platform to work
Non essential cookies	Remembering preferences and usage analytics	Managed or blocked through browser settings

International data transfers

Regarding international data transfers, member data may be processed in more than one country because the data controller is based in Malta and service providers operate in other jurisdictions. Processing takes place within the European Economic Area (EEA), where the registered office of the data controller is located. 

Furthermore, transfers to service providers outside the EEA are protected by appropriate safeguards to keep data handling consistent with this policy, while data used for Philippine operations, such as customer support and local payments, follows the same security measures described in section 7.

Conclusion

The Taya365 Privacy Policy sets clear limits on how member data is handled, from 5 data categories and 4 legal bases to 256 bit SSL encryption and a separate withdrawal password. Taya365 never sells personal data and shares it only with payment providers, verification services and authorities where required. Members can exercise their 5 data rights at any time through live chat.