Privacy Policy

1 Introduction

This Privacy Policy ("Policy") describes how 789taya ("the Platform," "we," "us," or "our") collects, uses, stores, shares, and protects the personal data of individuals ("Users," "Players," or "you") who access or use the 789taya online gaming platform at https://789taya.live and its associated mobile interfaces.

789taya is committed to handling your personal data responsibly and in accordance with Republic Act No. 10173, the Data Privacy Act of 2012 ("DPA 2012") of the Philippines, its Implementing Rules and Regulations ("IRR"), and the issuances of the National Privacy Commission ("NPC").

This Policy should be read alongside the Terms & Conditions and the Responsible Gaming Policy, which together form the complete agreement governing your use of the 789taya platform. By registering an account or using the platform, you acknowledge that you have read and understood this Privacy Policy.

If you have any questions about how 789taya handles your personal data, please contact our Data Protection Officer using the details provided in Section 13 of this Policy.

2 Data Controller

For the purposes of the DPA 2012 and its IRR, 789taya acts as the Personal Information Controller (PIC) in respect of the personal data collected through the platform. This means that 789taya determines the purposes and means of processing your personal data.

Where 789taya engages third-party service providers to process personal data on its behalf (for example, payment processors or identity verification providers), those parties act as Personal Information Processors (PIPs) and are contractually bound to process data only in accordance with 789taya's instructions and applicable Philippine data privacy law.

789taya has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and the DPA 2012. Contact details for the DPO are provided in Section 13.

3 Personal Data We Collect

789taya collects personal data through several channels: directly from you when you register or use the platform, automatically through your use of the platform, and from third parties where permitted by law. The categories of personal data we collect include:

789taya does not intentionally collect sensitive personal information (as defined under the DPA 2012) beyond what is strictly necessary for identity verification and regulatory compliance. Where sensitive personal information is collected (for example, government ID data for KYC purposes), it is handled with heightened security measures.

You are not required to provide all requested information, but failure to provide certain mandatory data (such as identity verification documents) may prevent you from accessing specific platform features or completing transactions.

4 How We Use Your Personal Data

789taya uses the personal data we collect for the following purposes:

• Account Management: To create, maintain, and manage your 789taya account, including verifying your identity and age (21+ requirement), processing login requests, and managing account security;
• Service Delivery: To provide access to the gaming platform, process bets and game outcomes, and deliver the full range of 789taya's gaming products and services;
• Payment Processing: To process deposits and withdrawals via GCash, PayMaya, bank transfer, and debit card, and to maintain accurate financial records;
• KYC and AML Compliance: To verify your identity and source of funds in accordance with Philippine anti-money laundering regulations and PAGCOR requirements;
• Responsible Gaming: To monitor gaming activity for signs of problem gambling, enforce deposit limits and self-exclusion requests, and provide responsible gaming tools and resources;
• Customer Support: To respond to your queries, complaints, and support requests through live chat and email;
• Platform Security: To detect, investigate, and prevent fraud, unauthorized access, cheating, and other prohibited conduct;
• Legal Compliance: To comply with applicable Philippine laws, PAGCOR regulations, court orders, and requests from regulatory authorities;
• Platform Improvement: To analyze usage patterns and technical performance data to improve the platform's functionality, stability, and user experience;
• Communications: To send you important account notifications, security alerts, and — where you have opted in — promotional communications about 789taya offers and updates.

789taya does not use your personal data for automated decision-making that produces legal or similarly significant effects on you without human review. Where profiling is used for responsible gaming monitoring purposes, it is subject to human oversight by our responsible gaming team.

5 Legal Basis for Processing

Under the DPA 2012, 789taya processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — including account creation, game delivery, and payment processing — is carried out on the basis that it is necessary for the performance of the agreement between you and 789taya;
• Legal Obligation: Processing required to comply with applicable Philippine laws, including AML regulations, PAGCOR licensing requirements, and tax obligations, is carried out on the basis of legal compliance;
• Legitimate Interests: Processing for fraud prevention, platform security, and service improvement is carried out on the basis of 789taya's legitimate interests, provided those interests are not overridden by your rights and freedoms;
• Consent: Where we send you optional marketing communications or use non-essential cookies, we do so on the basis of your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

6 Data Sharing & Disclosure

789taya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya/Maya, and partner banks receive the financial data necessary to process your deposits and withdrawals. These providers are bound by their own privacy obligations under Philippine law;
• Identity Verification Providers: Third-party KYC service providers may receive identity documents and biometric data solely for the purpose of verifying your identity and age in compliance with regulatory requirements;
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government bodies may receive data where required by law, court order, or regulatory directive;
• IT and Security Service Providers: Cloud hosting, cybersecurity, and platform infrastructure providers may process technical data as Personal Information Processors under contractual data processing agreements;
• Customer Support Platforms: Live chat and support ticketing providers may process communications data to facilitate customer support interactions;
• Professional Advisers: Legal, accounting, and auditing firms may receive limited personal data where necessary for the provision of professional services to 789taya, subject to confidentiality obligations.

All third parties with whom 789taya shares personal data are required to implement appropriate technical and organizational security measures and to process data only in accordance with 789taya's instructions and applicable Philippine data privacy law.

789taya does not transfer personal data outside the Philippines except where required by law or where adequate data protection safeguards are in place in the recipient jurisdiction.

7 Data Security

The security measures implemented by 789taya include, but are not limited to:

• Encryption: All data in transit is protected by 256-bit SSL/TLS encryption. Sensitive data at rest, including financial records and identity documents, is encrypted using AES-256 or equivalent standards;
• Access Controls: Access to personal data is restricted to authorized 789taya personnel and service providers on a strict need-to-know basis. All access is logged and subject to regular audit;
• Two-Factor Authentication: 789taya supports and encourages the use of two-factor authentication (2FA) for player accounts to reduce the risk of unauthorized access;
• Penetration Testing: The platform undergoes regular security assessments and penetration testing by qualified cybersecurity professionals;
• Incident Response: 789taya maintains a documented data breach response procedure. In the event of a personal data breach that poses a real risk to your rights and freedoms, 789taya will notify the NPC and affected individuals in accordance with the DPA 2012 and NPC Circular 16-03.

While 789taya takes all reasonable steps to protect your personal data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying 789taya immediately if you suspect unauthorized access to your account.

8 Data Retention

789taya retains personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by applicable Philippine law and regulatory obligations. The following general retention periods apply:

• Account and Identity Data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR record-keeping requirements and AML regulations;
• Financial Transaction Records: Retained for a minimum of five (5) years from the date of each transaction, as required by the Anti-Money Laundering Act and its implementing rules;
• Gaming Activity Logs: Retained for a minimum of three (3) years from the date of each gaming session, for dispute resolution and regulatory compliance purposes;
• Customer Support Records: Retained for two (2) years from the date of the last interaction, unless a longer period is required for ongoing dispute resolution;
• Marketing Consent Records: Retained for the duration of your consent and for one (1) year following withdrawal of consent, as evidence of the consent given.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with 789taya's data disposal procedures. Anonymized data (from which you cannot be identified) may be retained indefinitely for statistical and analytical purposes.

9 Cookies & Tracking Technologies

789taya uses cookies and similar tracking technologies on the platform. A cookie is a small text file placed on your device by a website to enable certain functionality and to collect information about your use of the site.

789taya uses the following categories of cookies:

• Strictly Necessary Cookies: Essential for the platform to function correctly. These include session management cookies that keep you logged in during your visit. These cookies cannot be disabled without affecting platform functionality;
• Functional Cookies: Remember your preferences (such as language settings and responsible gaming limits) to provide a more personalized experience;
• Analytics Cookies: Collect anonymized information about how players use the platform (such as pages visited and session duration) to help 789taya improve the platform. Analytics data is aggregated and does not identify individual users.

789taya does not use third-party advertising or tracking cookies. You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the platform.

By continuing to use the 789taya platform after being informed of our cookie use, you consent to the placement of functional and analytics cookies on your device.

10 Your Data Subject Rights

Under the DPA 2012 and its IRR, you have the following rights in relation to your personal data held by 789taya:

• Right to be Informed: The right to be informed about how your personal data is collected and processed — which this Privacy Policy fulfills;
• Right of Access: The right to request a copy of the personal data 789taya holds about you, along with information about how it is being processed;
• Right to Rectification: The right to request correction of inaccurate or incomplete personal data. You may update most account information directly through your account settings;
• Right to Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 789taya's legal retention obligations;
• Right to Data Portability: The right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another controller where technically feasible;
• Right to Object: The right to object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests;
• Right to Withdraw Consent: Where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal;
• Right to Lodge a Complaint: The right to lodge a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact 789taya's Data Protection Officer using the details in Section 13. We will respond to all valid data subject requests within fifteen (15) business days, in accordance with NPC guidelines. We may need to verify your identity before processing your request.

11 Minors & Age Restriction

The 789taya platform is strictly intended for individuals aged 21 years and above. 789taya does not knowingly collect personal data from individuals under the age of 21.

If 789taya becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe that a minor has registered on the 789taya platform, please contact our support team immediately.

Parents and guardians are encouraged to use parental control software to prevent minors from accessing online gaming platforms. 789taya supports the responsible use of such tools as part of its broader commitment to player protection.

12 Changes to This Privacy Policy

789taya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, 789taya will notify registered players via email or an in-platform notification at least seven (7) days before the changes take effect, where practicable.

The most current version of this Privacy Policy will always be available at https://789taya.live/privacy-policy. The "Effective Date" at the top of this page indicates when the current version came into force.

Your continued use of the 789taya platform after the effective date of any revised Privacy Policy constitutes your acknowledgment of the changes. If you do not agree with the revised Policy, you must cease using the platform and may request account closure by contacting customer support.

13 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the handling of your personal data by 789taya, please contact our Data Protection Officer through the following channels:

• Live Chat: Available 24/7 through your 789taya account dashboard — select "Privacy & Data" from the support menu
• Email (DPO): [email protected]
• General Support: [email protected]
• Response Time: Within 15 business days of receiving your request (Philippine Standard Time, GMT+8)

If you are not satisfied with 789taya's response to your data privacy concern, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines through its official complaint procedures.

This Privacy Policy was last updated and is effective as of January 1, 2026. Previous versions are available upon request by contacting our Data Protection Officer.