tay99 Privacy Policy

This Privacy Policy applies to all personal data processed by tay99 ("tay99," "we," "us," "our") in connection with the operation of the tay99 online gaming platform accessible at tay99.app, including all associated web pages, account interfaces, customer support channels, and communications.

tay99 acts as the personal information controller within the meaning of Republic Act No. 10173 (Data Privacy Act of 2012) and its Implementing Rules and Regulations. As a PAGCOR-licensed gaming operator, tay99 is also subject to PAGCOR's data handling directives and the oversight of the National Privacy Commission of the Philippines.

This Policy applies to all individuals whose personal data we process, including registered players, account applicants, and visitors to the tay99.app website. By registering a tay99 account or using the Platform, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein.

tay99 collects personal data through several channels — registration forms, KYC document uploads, gameplay activity, payment transactions, customer support interactions, and your device's technical information. The categories of personal data we collect are described below.

tay99 does not collect sensitive personal information as defined under the Data Privacy Act — such as race, ethnicity, health data, or political affiliations — unless specifically required for regulatory compliance purposes and with your explicit consent.

tay99 processes personal data only where a lawful basis exists. The applicable legal bases under the Data Privacy Act of 2012 for each processing activity are as follows:

• Consent — You have freely given, specific, informed, and unambiguous consent to the processing of your data, such as when you register a tay99 account and accept this Privacy Policy.
• Contractual Necessity — Processing is necessary for the performance of our contract with you, including account management, game access, and payment processing as described in the tay99 Terms & Conditions.
• Legal Obligation — Processing is required to comply with applicable Philippine law, including the Anti-Money Laundering Act (RA 9160, as amended), the Data Privacy Act (RA 10173), and PAGCOR licensing conditions.
• Legitimate Interests — Processing is necessary for tay99's legitimate interests, such as platform security, fraud prevention, and responsible gaming monitoring, provided such interests are not overridden by your rights and freedoms.

tay99 uses the personal data we collect for the following specific purposes:

4.1 Account Creation and Management

To register your tay99 account, verify your identity and age as required by PAGCOR, maintain your account profile, and provide you with access to the Platform's games, wallet, and features.

4.2 Payment Processing

To process deposits from and withdrawals to your registered payment methods (GCash, PayMaya, BPI, BDO, Metrobank, and other accepted channels), reconcile transaction records, and comply with financial reporting obligations under applicable Philippine law.

4.3 Regulatory Compliance and KYC

To fulfil our obligations under PAGCOR licensing conditions, the Anti-Money Laundering Act, and other applicable regulations — including conducting source-of-funds checks, reporting suspicious transactions to the Anti-Money Laundering Council (AMLC), and maintaining mandatory records for audit purposes.

4.4 Responsible Gaming Monitoring

To monitor gaming activity patterns for indicators of problem gambling, enforce self-exclusion requests and deposit limits set by players, and intervene proactively where tay99's responsible gaming obligations require it.

4.5 Platform Security and Fraud Prevention

To detect and prevent unauthorized access, account takeover, bonus abuse, match-fixing, and other fraudulent or prohibited activities on the Platform. Technical data including IP addresses and device fingerprints are used for this purpose.

4.6 Customer Support

To respond to your inquiries, process complaints, resolve disputes, and improve the quality of our support services through analysis of support interaction records.

4.7 Marketing Communications

To send you promotional offers, bonus notifications, and platform updates where you have consented to receive such communications. You may withdraw consent for marketing communications at any time by using the unsubscribe link in our emails or by contacting Support.

tay99 does not sell, rent, or trade your personal information to third parties for their own commercial purposes. We share personal data only in the circumstances described below, and only to the extent necessary for the specific purpose:

5.1 Service Providers and Processors

tay99 engages third-party service providers who process personal data on our behalf as personal information processors under the Data Privacy Act. These include: payment gateway operators (GCash, PayMaya, and bank partners); KYC and identity verification service providers; cloud hosting and data storage providers; and customer support platform operators. All such processors are contractually bound to handle your data only in accordance with tay99's instructions and in compliance with applicable Philippine law.

5.2 Game Content Providers

Game studios and platform providers whose titles are available on tay99 (such as PG Soft, Pragmatic Play, Jili, Evolution Gaming, and others) may receive anonymised or pseudonymised gameplay session data necessary to operate their game systems. These providers do not receive your identity or payment data unless required for dispute resolution purposes.

5.3 Regulatory and Law Enforcement Authorities

tay99 will disclose personal data to PAGCOR, the AMLC, the NPC, the National Bureau of Investigation, or other competent Philippine government authorities when required by law, court order, regulatory directive, or where disclosure is necessary to prevent serious harm.

5.4 Business Transfers

In the event of a merger, acquisition, reorganisation, or sale of assets involving tay99, player data may be transferred to the successor entity as part of that transaction. Affected players will be notified in advance of any such transfer that materially changes how their data is processed.

tay99 uses cookies and similar technologies (such as local storage and session tokens) on the Platform. A cookie is a small text file placed on your device by a web server when you visit a website. Cookies do not contain executable code and cannot carry viruses.

6.1 Categories of Cookies Used

• Strictly Necessary Cookies — Required for the Platform to function correctly, including session authentication, security tokens, and load balancing. These cannot be disabled without breaking core Platform functionality.
• Functional Cookies — Remember your preferences such as language settings, preferred game categories, and responsible gaming tool configurations to provide a personalised experience.
• Analytics Cookies — Used to collect aggregated, anonymised statistics about how players use the Platform (e.g., most visited pages, session lengths). This data is used to improve Platform performance and user experience. tay99 uses first-party analytics only.

6.2 Cookie Management

You can manage, restrict, or delete cookies through your browser settings at any time. Disabling strictly necessary cookies may prevent you from logging in or using core Platform features. Disabling functional or analytics cookies will not prevent you from playing. Most Philippine mobile browsers (Chrome on Android, Safari on iOS) provide cookie management settings under Privacy or Site Settings.

tay99 does not use third-party advertising cookies or participate in cross-site behavioural advertising networks.

tay99 implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and tay99's servers;
• Encryption of stored sensitive data, including password hashes and financial account identifiers, using industry-standard cryptographic algorithms;
• Multi-factor authentication requirements for all internal staff systems that access player data;
• Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
• Regular penetration testing and vulnerability assessments of tay99's technical infrastructure;
• Intrusion detection and monitoring systems operating 24/7;
• Formal data breach response procedures including mandatory NPC notification within 72 hours of discovering a reportable breach, in accordance with NPC Circular 16-03.

While tay99 takes all reasonable precautions to protect your data, no internet-based transmission or electronic storage system is 100% secure. You are responsible for maintaining the confidentiality of your tay99 account credentials and for reporting any suspected unauthorised access to tay99 Support promptly.

tay99 retains personal data for the minimum period necessary to fulfil the purposes for which it was collected, subject to the following mandatory retention periods under applicable Philippine law:

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised in accordance with tay99's data disposal procedures. Where data is anonymised, it may be retained indefinitely for statistical purposes as it can no longer identify you.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tay99. You may exercise any of these rights by contacting tay99's Data Protection Officer (DPO) through the details in Section 15.

The tay99 Platform is strictly intended for individuals who are 21 years of age or older. tay99 does not knowingly collect, process, or store personal data from persons under the age of 21. This is a firm legal requirement under PAGCOR regulations governing online gaming in the Philippines.

If tay99 discovers or is notified that an Account has been registered by or on behalf of a person under 21 years of age, the Account will be immediately suspended, all balances will be held pending review, and the matter will be escalated in accordance with PAGCOR's underage gaming protocols. Personal data associated with an underage Account will be deleted except to the extent required to be retained for regulatory reporting.

If you are the parent or guardian of a minor and believe that your child has provided personal information to tay99, please contact our DPO immediately using the details in Section 15.

The tay99 Platform may contain links to third-party websites, such as game provider demonstration pages or payment partner information pages. These third-party websites operate independently of tay99 and are subject to their own privacy policies.

tay99 has no control over and assumes no responsibility for the content, privacy practices, or security of third-party websites. We recommend that you review the privacy policy of any third-party website you visit. The presence of a link on the tay99 Platform does not constitute an endorsement of that third party's privacy practices by tay99.

tay99 stores the majority of player personal data on servers physically located within the Philippines. In certain circumstances, personal data may be transferred to or processed in other countries — for example, where a game content provider's technical infrastructure or a cloud service provider operates servers outside the Philippines.

Any cross-border transfer of personal data by tay99 or its processors is conducted only where the NPC has determined that the receiving country provides an adequate level of data protection, or where appropriate safeguards such as contractual clauses consistent with NPC requirements are in place. tay99 will not transfer personal data to countries without adequate protection mechanisms except to the extent strictly required by applicable law or regulatory directive.

As a PAGCOR-licensed gaming operator, tay99 is a covered institution under the Anti-Money Laundering Act of 2001 (Republic Act No. 9160, as amended by RA 10365 and RA 11521). tay99 is legally required to:

• Collect and verify customer identification information prior to opening an Account (Customer Due Diligence / CDD);
• Monitor transactions for patterns consistent with money laundering, terrorism financing, or other financial crimes;
• Report covered transactions and suspicious transactions to the Anti-Money Laundering Council (AMLC) within the prescribed timelines;
• Retain transaction records for a minimum of five (5) years as required by the AMLC;
• Implement enhanced due diligence (EDD) for higher-risk accounts, including politically exposed persons (PEPs) and accounts with unusually high transaction volumes.

Processing of personal data for AML and fraud prevention purposes is conducted under the legal obligation basis. Where tay99 is required by law to report information to the AMLC or other competent authorities, it is not obligated to notify the affected player prior to making such a report if doing so would constitute tipping-off under applicable law.

tay99 reserves the right to amend this Privacy Policy at any time. Material changes — including changes to the categories of data collected, new purposes of processing, or changes to your rights — will be communicated to registered players via email to the registered address and/or a prominent notice on the Platform at least seven (7) calendar days before the amended Policy takes effect.

Non-material updates, such as corrections of typographical errors or improvements to clarity without substantive change to data handling practices, may take effect immediately. The date at the top of this page always reflects when the Policy was last updated. Continued use of the tay99 Platform after the effective date of any amendment constitutes your acceptance of the revised Privacy Policy.

It is your responsibility to review this Privacy Policy periodically. The current version is always accessible at tay99.app/privacy-policy.

tay99 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Privacy Policy. You may contact the tay99 DPO to exercise your data subject rights, ask questions about this Privacy Policy, or raise a data privacy concern through the following channels:

• Support Page: tay99.app/support
• Email: [email protected] (mark your message "Data Privacy — DPO Request")

tay99 will acknowledge all privacy-related inquiries within five (5) business days and provide a substantive response within fifteen (15) business days. Identity verification is required before tay99 discloses, corrects, or deletes personal data in response to a data subject rights request.

If you are not satisfied with tay99's response to your privacy concern, you have the right to file a complaint directly with the National Privacy Commission of the Philippines at privacy.gov.ph.