tayagm Privacy Policy —
How We Protect Your Personal Data

This Privacy Policy ("Policy") explains how tayagm ("tayagm," "we," "us," or "our"), the operator of the online gaming platform accessible at tayagm.lat (the "Platform"), collects, uses, discloses, stores, and protects the personal information of individuals ("you," "your," or "User") who access or use our services.

tayagm takes data protection seriously. We are committed to protecting your privacy and complying with all applicable data protection laws in the Republic of the Philippines, including the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations. This Policy should be read in conjunction with our Terms and Conditions and our Responsible Gaming Policy, which are incorporated herein by reference.

By registering an account on tayagm, accessing the Platform, or using any of our services, you acknowledge that you have read, understood, and consent to the data practices described in this Privacy Policy. If you do not agree with any part of this Policy, you must immediately discontinue use of the Platform.

For the purposes of applicable data protection legislation, tayagm is the data controller responsible for the personal information collected through the Platform. This means tayagm determines the purposes for which and the manner in which your personal data is processed.

tayagm operates under the regulatory framework established by the Philippine Amusement and Gaming Corporation (PAGCOR) and complies with all data protection obligations applicable to online gaming operators in the Philippines. Questions about data protection, privacy practices, or exercising your data subject rights may be directed to our Data Protection Officer using the contact information provided in Section 14 of this Policy.

tayagm collects several categories of personal information in order to provide gaming services, verify your identity, process transactions, prevent fraud, and comply with legal obligations. The personal data we collect includes:

3.1 Information You Provide Directly

• Account Registration Data: When you create a tayagm account, we collect your full legal name, date of birth, email address, Philippine mobile phone number, chosen username, and password (stored in encrypted form).
• Identity Verification (KYC) Data: To comply with PAGCOR regulations and anti-money laundering requirements, we collect copies of government-issued identification documents (e.g., PhilSys ID, passport, UMID, driver's license, voter's ID, or PRC ID), proof of address documents, and in some cases, photographs or selfies for facial verification purposes.
• Payment Information: When you make deposits or withdrawals, we collect payment instrument details such as GCash mobile numbers, Maya account information, bank account details (bank name, account number, account holder name), and credit/debit card information (card number, expiry date, CVV — processed via secure third-party payment processors).
• Communication Data: When you contact tayagm customer support via live chat, email, or phone, we collect the content of your communications, support tickets, and any attachments or documentation you provide.
• Voluntary Information: Any additional information you choose to provide through surveys, promotional participation, or optional profile fields.

3.2 Information Collected Automatically

• Technical and Device Data: IP address, browser type and version, operating system, device type (mobile, tablet, desktop), screen resolution, language settings, and referring website URLs.
• Usage Data: Pages visited, game sessions played, bet history, deposit and withdrawal transactions, timestamps of activity, click patterns, and navigation paths through the Platform.
• Location Data: General geographic location inferred from your IP address to ensure compliance with jurisdictional restrictions and to prevent access from prohibited territories.
• Cookies and Tracking Technologies: Session identifiers, authentication tokens, preference cookies, and analytics data collected through cookies and similar tracking technologies (see Section 9 for details).

3.3 Information from Third Parties

• Payment Processors: Transaction confirmation data, fraud risk scores, and payment failure notifications from GCash, Maya, bank partners, and card payment gateways.
• Identity Verification Providers: Confirmation of identity document authenticity and facial match results from third-party KYC verification services.
• Fraud Prevention Services: Risk assessment data, device fingerprinting information, and fraud alerts from specialized security and anti-fraud technology providers.

tayagm uses the personal information we collect for the following purposes:

• Account Management: Creating and maintaining your tayagm account, authenticating your identity when you log in, managing your account settings and preferences, and processing account closure requests.
• Service Delivery: Providing access to casino games, sports betting markets, bingo rooms, and other gaming services; processing bets and wagers; calculating and crediting winnings; maintaining game history records.
• Payment Processing: Processing deposits to your PHP wallet; executing withdrawal requests; verifying payment instrument ownership; preventing payment fraud and money laundering.
• Identity Verification and Compliance: Verifying that you are at least 21 years of age; confirming your identity to prevent duplicate accounts and fraud; complying with Know Your Customer (KYC) and Anti-Money Laundering (AML) obligations under PAGCOR regulations and Philippine law.
• Customer Support: Responding to your inquiries, complaints, and support requests; investigating and resolving disputes; providing technical assistance.
• Security and Fraud Prevention: Detecting and preventing fraudulent activity, bonus abuse, collusion, use of automated betting software, unauthorized account access, and other Terms violations; monitoring for suspicious betting patterns or transactions.
• Responsible Gaming: Implementing deposit limits, loss limits, session reminders, cooling-off periods, and self-exclusion requests; identifying problematic gambling behavior and offering support resources.
• Marketing Communications: Sending promotional emails, SMS messages, and push notifications about bonuses, new games, and special offers (only to users who have consented to receive marketing communications; you may opt out at any time).
• Analytics and Improvement: Analyzing Platform usage patterns to understand player preferences; improving game selection, user interface design, and overall user experience; conducting A/B testing of features.
• Legal Obligations: Responding to legal process, court orders, and re gulatory requests from PAGCOR, law enforcement agencies, or other competent government authorities; maintaining records as required by Philippine law and gaming regulations; enforcing our Terms and Conditions and this Privacy Policy.

tayagm processes your personal data on the following legal bases as recognized under the Data Privacy Act of 2012 and applicable Philippine regulations:

• Contractual Necessity: Processing is necessary for the performance of our contract with you — specifically, to provide gaming services, process transactions, manage your account, and deliver the features of the Platform you have requested.
• Legal Obligation: Processing is required for tayagm to comply with its legal and regulatory obligations, including KYC/AML requirements mandated by PAGCOR, tax reporting obligations, and responses to lawful government requests.
• Legitimate Interests: Processing is necessary for tayagm's legitimate business interests, including preventing fraud, ensuring Platform security, improving our services, and protecting the integrity of the gaming environment — provided such interests do not override your fundamental rights and freedoms.
• Consent: Where we rely on consent as the legal basis — in particular for marketing communications — we will obtain your explicit opt-in consent before processing. You may withdraw consent at any time by contacting support or using the unsubscribe mechanism in any marketing communication.

tayagm does not sell, rent, or trade your personal information to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors and Financial Institutions: GCash, Maya, GrabPay, BPI, BDO, Metrobank, and other payment service providers, to the extent necessary to process your deposits, withdrawals, and payment verifications.
• Identity Verification Providers: Third-party KYC service providers who assist tayagm in verifying the authenticity of identity documents and performing age verification checks, as required by PAGCOR.
• Technology and Hosting Providers: Cloud hosting providers, database management services, content delivery networks, and software providers who process data on tayagm's behalf under strict data processing agreements.
• Game Providers and Studios: Software providers whose games are integrated into the tayagm Platform. Game providers receive only the data necessary to run your game sessions — typically an anonymized player ID, game configuration data, and bet/win amounts. They do not receive your full name, contact information, or payment details.
• Fraud and Security Services: Specialized anti-fraud, device fingerprinting, and risk management service providers who help tayagm detect and prevent unauthorized activity on the Platform.
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), Philippine law enforcement agencies, and courts of competent jurisdiction, where disclosure is required by law, court order, or regulatory directive.
• Professional Advisors: Lawyers, accountants, auditors, and other professional advisors, subject to professional confidentiality obligations, where disclosure is necessary for tayagm to obtain professional advice.
• Business Transfers: In the event of a merger, acquisition, asset sale, or corporate restructuring involving tayagm, your personal data may be transferred to the acquiring or successor entity, subject to the same data protection standards set out in this Policy.

tayagm retains your personal data for only as long as is necessary to fulfill the purposes for which it was collected, or as required by law, regulation, or legitimate business need. The following general retention periods apply:

• Active Account Data: Retained for the full duration of your account's active status on the Platform.
• Account Closure: Following account closure, tayagm retains your account data, transaction history, and KYC documentation for a minimum of five (5) years in compliance with Philippine AML regulations and PAGCOR record-keeping requirements.
• Financial Transaction Records: Deposit and withdrawal transaction records are retained for at least five (5) years from the date of the transaction, as required by the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended).
• Customer Support Records: Communications and support tickets are retained for three (3) years following resolution, or longer if connected to an unresolved dispute or regulatory investigation.
• Responsible Gaming Records: Self-exclusion records and responsible gaming tool settings are retained for a minimum of five (5) years to prevent re-registration by excluded players.
• Marketing Data: Retained until you withdraw consent or opt out from marketing communications, after which it will be suppressed (retained on a do-not-contact list to honor your preference).

After applicable retention periods expire, personal data is securely deleted or anonymized. Anonymized, aggregated data (from which no individual can be identified) may be retained indefinitely for statistical and analytical purposes.

tayagm implements a comprehensive set of technical and organizational security measures designed to protect your personal data against unauthorized access, accidental loss, alteration, disclosure, or destruction. Our security framework includes:

• Transport Encryption: All data transmitted between your browser or app and tayagm's servers is encrypted using TLS 1.2/1.3 with 256-bit SSL certificates.
• Data-at-Rest Encryption: Sensitive personal data stored in tayagm's databases is encrypted at rest using industry-standard AES-256 encryption.
• Access Controls: Access to systems containing personal data is restricted to authorized personnel only, on a strict need-to-know basis, with role-based access controls and multi-factor authentication requirements for all administrative access.
• Password Security: User passwords are never stored in plaintext. They are hashed using industry-standard bcrypt or Argon2 algorithms with appropriate salting.
• Security Audits: tayagm conducts regular internal security reviews and engages independent third-party security firms to perform periodic penetration testing and vulnerability assessments.
• Incident Response: tayagm maintains a documented security incident response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, tayagm will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected individuals without undue delay.

tayagm uses cookies and similar tracking technologies to operate the Platform, remember your preferences, maintain session security, and analyze usage patterns. The types of cookies we use are:

• Strictly Necessary Cookies: Essential for the Platform to function. These include session authentication cookies, security tokens, and cookies that remember your login state. These cannot be disabled without affecting core Platform functionality.
• Preference Cookies: Remember your settings and preferences, such as language selection, display preferences, and responsible gaming limit settings, so you don't have to re-enter them each visit.
• Analytics Cookies: Used by tayagm's internal analytics tools to understand how players navigate the Platform, which games are most popular, and where users encounter difficulties — all to improve the user experience.
• Security and Fraud Prevention Cookies: Used to detect and prevent fraudulent activity, identify unauthorized login attempts, and flag suspicious behavior patterns.

tayagm does not use third-party advertising or behavioral tracking cookies that share your data with external advertising networks. You can manage cookie preferences through your browser settings; however, disabling strictly necessary cookies may impair your ability to use the Platform.

Under the Data Privacy Act of 2012 and applicable Philippine regulations, you have the following rights with respect to your personal data held by tayagm:

• Right to Be Informed: You have the right to be informed about how your personal data is being collected, processed, and used — which is the primary purpose of this Privacy Policy.
• Right of Access: You may request a copy of all personal data tayagm holds about you. We will provide this in a structured, portable format within thirty (30) calendar days of your verified request.
• Right to Rectification: If any personal data we hold about you is inaccurate or incomplete, you have the right to request correction. You may update basic account information directly from your account settings dashboard.
• Right to Erasure: You may request the deletion of your personal data, subject to our legal obligations to retain certain records (see Section 7). Requests that cannot be fulfilled in full due to legal requirements will receive a detailed explanation.
• Right to Object: You may object to processing of your personal data carried out on the basis of legitimate interests, or for direct marketing purposes. Objections to direct marketing will be honored immediately. Objections to other processing will be considered against tayagm's legitimate interests.
• Right to Data Portability: You may request that tayagm provide your personal data in a machine-readable format (e.g., JSON or CSV) that allows you to transfer it to another service provider.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to Lodge a Complaint: If you believe tayagm has not handled your personal data in accordance with applicable law, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.

To exercise any of these rights, please contact tayagm's Data Protection Officer using the details in Section 14. We may need to verify your identity before processing a data rights request. tayagm will respond to all verified requests within thirty (30) calendar days. Complex requests may require an extension of up to sixty (60) days, in which case you will be notified.

The tayagm Platform is strictly intended for individuals who are 21 years of age or older, consistent with PAGCOR regulations governing online gaming in the Philippines. tayagm does not knowingly collect personal information from persons under the age of 21.

If tayagm becomes aware that it has inadvertently collected personal data from a person under 21 years of age, the account will be immediately suspended, all associated personal data will be securely deleted (subject to any mandatory retention obligations under applicable law), and the matter will be referred to PAGCOR as required. Any deposits made by an underage user will be returned to the source payment method where technically possible, subject to regulatory review.

tayagm's primary operations and data storage are based in or oriented toward the Philippines. However, some of our technology partners and service providers — including cloud hosting infrastructure, game software providers, and fraud prevention services — may process data in data centers located outside the Philippines.

Where personal data is transferred to a country that does not provide an equivalent level of data protection to that afforded under Philippine law, tayagm ensures that appropriate safeguards are in place, including:

• Data processing agreements incorporating standard contractual clauses approved by the National Privacy Commission.
• Vendor compliance assessments to verify that recipient organizations maintain data security standards equivalent to those required under Philippine law.
• Contractual obligations requiring recipients to notify tayagm of any data breach affecting Philippine residents' personal data.

tayagm reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data practices, legal obligations, or operational procedures. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Notify registered users via email to the address associated with their account.
• Display a prominent notice on the Platform for a reasonable period following the change.

Your continued use of the tayagm Platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any changes, you must stop using the Platform and may request account closure, subject to our data retention obligations.

If you have any questions, concerns, or requests regarding this Privacy Policy or tayagm's data protection practices, you may contact our Data Protection Officer through the following channels:

• Email: [email protected] (plain text — not a clickable link)
• Live Chat: Available 24/7 through the tayagm Platform support widget.

tayagm aims to respond to all privacy-related inquiries within five (5) business days. For formal data subject rights requests, please clearly state the nature of your request and provide sufficient information to verify your identity. We process verified requests within thirty (30) calendar days as required by Philippine law.

If you are not satisfied with tayagm's response to your privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, the independent regulatory body responsible for enforcing the Data Privacy Act of 2012.