Privacy Policy – tay99 Casino Philippines

1. About This Policy

tay99 Casino, accessible at tay99.vip ("tay99", "we", "us", or "our"), is committed to protecting the personal data of all individuals who interact with our platform. This Privacy Policy is issued in compliance with Republic Act No. 10173, the Philippine Data Privacy Act of 2012 ("DPA"), its Implementing Rules and Regulations, and the directives of the National Privacy Commission ("NPC") of the Philippines.

This policy applies to all data processing activities conducted by tay99 in connection with the operation of our online casino platform, sports betting services, customer support functions, and marketing activities. It covers data collected through tay99.vip, any associated mobile-optimised interfaces, live chat systems, email correspondence, and customer support interactions.

By registering an account with tay99 or continuing to use our services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this policy, please do not use tay99's services.

2. Data We Collect

tay99 collects personal data that is necessary for the lawful operation of a PAGCOR-licensed online gaming platform. The categories of data we collect include:

2.1 Registration & Identity Data

• Full legal name (as it appears on your government-issued ID)
• Date of birth (to verify 21+ age eligibility under PAGCOR rules)
• Philippine mobile number (used as primary account identifier)
• Email address
• Username and encrypted password
• Residential address (Philippines)

2.2 Identity Verification (KYC) Data

• Government-issued photo ID (PhilSys National ID, driver's licence, passport, SSS/GSIS/UMID ID)
• Selfie or live photo for facial verification
• Proof of address documents where required by PAGCOR AML obligations

2.3 Financial & Transaction Data

• GCash wallet number or Maya account reference
• Bank account details for BPI, BDO, Metrobank, or other linked payment methods
• Deposit and withdrawal history, amounts, timestamps, and method used
• Source of funds documentation where required for AML compliance

2.4 Gameplay & Activity Data

• Games played, session durations, bet amounts, and outcomes
• Bonus and promotion usage history
• Login times, IP addresses, and device identifiers
• Responsible gaming tool settings (deposit limits, self-exclusion status)

2.5 Communications Data

• Customer support chat transcripts and email correspondence
• Feedback, survey responses, and dispute records
• Marketing preference settings and communication opt-in/opt-out history

2.6 Technical & Device Data

• IP address, browser type and version, operating system
• Device model, screen resolution, and language settings
• Referring URL, pages visited, and time spent on tay99.vip
• Cookie identifiers and session tokens (see Section 6)

3. How We Use Your Data

tay99 processes personal data only for specified, legitimate purposes. The primary purposes for which your data is used are:

• Account creation and management: Processing your registration, verifying your identity, and maintaining your tay99 Player account in accordance with PAGCOR licensing requirements.
• Age verification: Confirming that all registered Players are at least twenty-one (21) years of age, as mandated by PAGCOR. 21+
• Service delivery: Enabling access to tay99's gaming library, sports betting, bingo, and associated services; processing deposits and withdrawals; crediting bonuses; resolving disputes.
• Legal and regulatory compliance: Fulfilling tay99's obligations under PAGCOR's operating licence, the Philippine Data Privacy Act, the Anti-Money Laundering Act (RA 9160 as amended), and other applicable Philippine laws.
• Fraud prevention and security: Detecting and preventing fraudulent transactions, account takeovers, money laundering, bonus abuse, and other prohibited activities.
• Responsible gaming: Monitoring for signs of problem gambling behaviour, enforcing self-exclusion requests, and administering responsible gaming tools in accordance with PAGCOR's requirements.
• Customer support: Handling enquiries, complaints, and disputes submitted through tay99's support channels.
• Platform improvement: Analysing aggregated usage data to improve the tay99 platform, optimise game performance for Philippine networks, and develop new features.
• Marketing communications: Sending promotional offers, bonus notifications, and tay99 updates to Players who have consented to receive such communications (see Section 12).

tay99 does not use personal data for automated decision-making that produces legal effects without human review, except where required by PAGCOR's real-time AML transaction monitoring obligations.

4. Legal Basis for Processing

Under the Philippine Data Privacy Act, tay99 processes personal data on the following legal bases:

5. Data Sharing & Disclosure

tay99 does not sell, rent, or trade your personal data to third parties for their independent marketing purposes. Personal data is shared only in the following limited circumstances:

5.1 Regulatory Authorities. tay99 is required by law and PAGCOR's operating conditions to disclose Player information to: the Philippine Amusement and Gaming Corporation (PAGCOR); the Anti-Money Laundering Council (AMLC); the National Privacy Commission (NPC); and other Philippine government bodies where legally required by valid legal process.

5.2 Service Providers. tay99 engages third-party service providers who process data on our behalf under binding Data Processing Agreements, including: payment processors (GCash/Maya/bank integrations); game software providers (Pragmatic Play, Evolution, JILI, PG Soft, etc.); identity verification providers; customer support platform providers; and cloud infrastructure providers. These providers are contractually prohibited from using your data for any purpose other than delivering services to tay99.

5.3 Business Transfers. In the event of a merger, acquisition, or sale of all or part of tay99's business assets, Player personal data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

5.4 Legal Requirements. tay99 may disclose personal data where required by a court order, subpoena, or valid legal demand from a Philippine law enforcement or regulatory authority.

6. Cookies & Tracking Technologies

tay99.vip uses cookies and similar tracking technologies to operate the platform, maintain sessions, and improve the user experience. The categories of cookies used are:

• Strictly Necessary Cookies: Required for core platform functions — login session management, security tokens, and load balancing. These cannot be disabled without preventing use of the platform.
• Functional Cookies: Remember your preferences, language settings, and game lobby configurations to personalise your tay99 experience.
• Analytics Cookies: Collect aggregated, anonymised data about how players navigate tay99.vip to help us improve platform performance, particularly for Philippine mobile network conditions.
• Marketing Cookies: Used only if you have consented to receive personalised tay99 promotions. You may withdraw this consent at any time through your account settings.

You may manage cookie preferences through your browser settings. Note that disabling strictly necessary cookies will affect your ability to log in and use tay99's services.

7. Data Retention

tay99 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law:

• Active account data: Retained for the lifetime of the Player's account plus five (5) years after account closure, as required by PAGCOR and Philippine AML regulations.
• KYC and identity verification documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by the Anti-Money Laundering Act.
• Transaction records: Retained for five (5) years, in line with Philippine financial record-keeping requirements.
• Customer support records: Retained for three (3) years from the date of the last interaction.
• Marketing data: Retained until consent is withdrawn, after which it is deleted within thirty (30) days.
• Technical logs: Retained for twelve (12) months for security and fraud investigation purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymised so that it can no longer be linked to an identifiable individual.

8. Data Security

tay99 implements appropriate technical and organisational security measures to protect personal data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between Players and tay99's servers;
• AES-256 encryption at rest for sensitive data including KYC documents and payment information;
• Multi-factor authentication (OTP) for Player login and critical account changes;
• Role-based access controls ensuring that tay99 staff can only access Player data necessary for their specific function;
• Regular penetration testing and security audits of the tay99 platform;
• Segregated storage environments for Player funds and personal data;
• Comprehensive security incident response procedures aligned with NPC breach notification requirements.

In the event of a personal data breach that is likely to result in risk to the rights and freedoms of affected Players, tay99 will notify the National Privacy Commission within seventy-two (72) hours of becoming aware of the breach, and will notify affected Players without undue delay, as required by the Philippine DPA.

9. Your Rights Under the Philippine Data Privacy Act

As a data subject under Republic Act No. 10173, you have the following rights with respect to your personal data held by tay99:

• Right to Be Informed: You have the right to be informed of how your personal data is collected, used, and processed — which is the purpose of this Privacy Policy.
• Right of Access: You may request a copy of the personal data tay99 holds about you at any time. We will provide this within thirty (30) days of a valid request.
• Right to Rectification: You may request correction of any inaccurate or incomplete personal data. You may update most account details directly through your tay99 account settings.
• Right to Erasure: You may request deletion of your personal data in circumstances where it is no longer necessary for the purposes for which it was collected, subject to tay99's legal retention obligations under PAGCOR and AML regulations.
• Right to Object: You may object to the processing of your personal data for direct marketing purposes at any time. You may also object to processing based on legitimate interest where you have grounds relating to your particular situation.
• Right to Data Portability: You may request your personal data in a structured, commonly used format to transfer to another data controller, where technically feasible.
• Right to Damages: You are entitled to seek compensation for any damages sustained as a result of inaccurate, incomplete, outdated, or unlawfully obtained personal data.

To exercise any of these rights, contact tay99's Data Protection Officer at [email protected] with subject line "Data Privacy Request". We will respond within thirty (30) calendar days. If you are not satisfied with our response, you may lodge a complaint with the National Privacy Commission at privacy.gov.ph.

10. Children, Minors, and the 21+ Requirement

tay99 Casino does not knowingly collect personal data from individuals under twenty-one (21) years of age. In compliance with PAGCOR's minimum gambling age regulation, all account registrations are subject to mandatory identity verification confirming the Player is at least 21 years old.

If tay99 becomes aware that it has inadvertently collected personal data from an individual under 21, the account will be immediately suspended, all associated data will be deleted, and any funds deposited will be returned to the payment method of origin after verification. 21+

If you are a parent or guardian and believe your child has registered a tay99 account, please contact us immediately at [email protected] with the subject line "Underage Account Report" so we can investigate and take immediate action.

11. Cross-Border Data Transfers

tay99's primary data processing infrastructure is located in the Asia-Pacific region. Some of our third-party service providers — including cloud infrastructure providers and game content providers — may process data in jurisdictions outside the Philippines.

Where personal data is transferred outside the Philippines, tay99 ensures that such transfers comply with the cross-border transfer requirements of the Philippine Data Privacy Act. This includes requiring receiving parties to maintain data protection standards at least equivalent to those required under Philippine law, typically through binding contractual clauses or by transferring only to jurisdictions recognised as providing adequate protection by the NPC.

12. Marketing Communications

tay99 will only send you promotional communications — including bonus offers, new game announcements, and VIP programme updates — where you have provided explicit consent during registration or through your account notification settings.

You may withdraw consent for marketing communications at any time by:

• Updating your notification preferences in your tay99 account settings;
• Clicking the unsubscribe link in any tay99 marketing email;
• Contacting tay99 support at [email protected] with subject "Unsubscribe".

Withdrawal of marketing consent does not affect tay99's ability to send transactional communications — such as deposit confirmations, withdrawal notifications, security alerts, and mandatory responsible gaming communications — which are sent regardless of marketing preferences as they are necessary for account operation.

13. Amendments to This Privacy Policy

tay99 reserves the right to update this Privacy Policy periodically to reflect changes in our data processing practices, applicable Philippine law, PAGCOR requirements, or NPC guidance. The "Last Updated" date at the top of this page will reflect the date of the most recent revision.

For material changes to this policy, tay99 will notify registered Players via the email address or mobile number on file at least fourteen (14) days before the changes take effect, or as required by the NPC. For minor, non-material updates, the revised policy will be published on this page without separate notice.

Continued use of tay99's services after the effective date of any amendment constitutes acceptance of the revised Privacy Policy.

14. Contact Us & Data Protection Officer

For any questions, concerns, or requests relating to your personal data or this Privacy Policy, please contact tay99's designated Data Protection Officer:

• DPO Email: [email protected] (subject: "Data Privacy Request")
• Live Chat: 24/7 via the tay99 platform after login, in English or Filipino
• Response Time: Within 30 calendar days for formal data subject requests

If you remain unsatisfied after contacting tay99's DPO, you have the right to lodge a formal complaint with the National Privacy Commission of the Philippines.