000taya Privacy Policy

01 Introduction

000taya ("we", "us", "our", "the Platform") is committed to protecting the privacy and personal data of all users of the 000taya platform ("you", "the Player", "the Data Subject"). This Privacy Policy sets out the basis on which any personal data we collect from you, or that you provide to us, will be processed by 000taya.

This Privacy Policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC). It also reflects our obligations under the PAGCOR regulatory framework applicable to online gaming operators in the Philippines.

Please read this Privacy Policy carefully. If you have any questions about how 000taya handles your personal data, you may contact our Data Protection Officer at any time using the contact details provided in Section 16 of this Policy.

02 Data Controller

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, the data controller responsible for your personal data is 000taya, the operator of the platform accessible at https://000taya.app.

000taya has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Privacy Policy and applicable data protection laws. You may contact the DPO directly using the details set out in Section 16 of this Policy.

03 Personal Data We Collect

000taya collects and processes the following categories of personal data in connection with your use of the platform:

Registration and Account Data:

• Full legal name
• Date of birth (to verify you are 21 years of age or older)
• Philippine mobile number
• Email address
• Username and encrypted password
• Residential address (province, city/municipality)

Identity Verification (KYC) Data:

• Government-issued identification (e.g., Philippine passport, SSS ID, PhilSys National ID, driver's licence, UMID)
• Proof of address documents
• Selfie or facial verification image (where required)
• Proof of payment method ownership

Financial and Transaction Data:

• Deposit and withdrawal history
• Payment method details (GCash number, Maya account, bank account details — stored in tokenised form)
• Transaction amounts and timestamps

Gaming Activity Data:

• Game session history, bet amounts, and outcomes
• Bonus and promotion usage
• Responsible gaming tool settings (deposit limits, session limits, self-exclusion status)

Technical and Usage Data:

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Pages visited, features used, and session duration
• Cookie identifiers and similar tracking data

Communications Data:

• Records of your communications with 000taya customer support
• Feedback, complaints, and survey responses

04 How We Collect Your Data

000taya collects personal data through the following means:

• Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion.
• Automatically — through cookies, web beacons, and similar technologies when you access and use the 000taya platform.
• From third parties — including KYC verification service providers, payment processors (GCash, Maya, banks), fraud prevention services, and regulatory authorities where required by law.

05 How We Use Your Personal Data

000taya uses your personal data for the following purposes:

• Account management — to create, maintain, and administer your 000taya player account.
• Identity verification — to verify your age (21+), identity, and eligibility to use the platform in compliance with PAGCOR and anti-money laundering regulations.
• Payment processing — to process deposits, withdrawals, and refunds through your chosen payment method.
• Game delivery — to provide access to the games and features available on the 000taya platform.
• Customer support — to respond to your enquiries, complaints, and support requests.
• Responsible gaming — to monitor gaming activity, enforce deposit and loss limits, and administer self-exclusion requests in accordance with our Responsible Gaming Policy.
• Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct.
• Legal compliance — to comply with applicable Philippine laws, PAGCOR regulations, NPC requirements, and court orders.
• Platform improvement — to analyse usage patterns and improve the performance, features, and user experience of the 000taya platform.
• Marketing communications — to send you promotional offers, bonuses, and platform updates, where you have consented to receive such communications. You may opt out at any time.

06 Legal Basis for Processing

000taya processes your personal data on the following legal bases as recognised under the Data Privacy Act of 2012 and its Implementing Rules and Regulations:

• Contractual necessity — processing is necessary to perform the contract between you and 000taya (i.e., to operate your player account and deliver the services you have requested).
• Legal obligation — processing is required to comply with applicable Philippine laws, including PAGCOR licensing conditions, the Anti-Money Laundering Act (AMLA), and the Data Privacy Act of 2012.
• Legitimate interests — processing is necessary for 000taya's legitimate interests in operating a secure, fair, and commercially viable gaming platform, provided those interests are not overridden by your rights and freedoms.
• Consent — where processing is based on your consent (e.g., marketing communications), you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

07 Data Sharing & Disclosure

000taya does not sell, rent, or trade your personal data to third parties for marketing purposes. We may share your personal data with the following categories of recipients only to the extent necessary for the purposes described in this Privacy Policy:

• Payment processors — GCash, Maya, and partner banks (BPI, BDO, Metrobank, UnionBank, Landbank, PNB, Security Bank) to process your financial transactions.
• KYC and identity verification providers — third-party service providers engaged to verify your identity and age in compliance with regulatory requirements.
• Fraud prevention and security services — providers that assist 000taya in detecting and preventing fraudulent activity and money laundering.
• Regulatory and law enforcement authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine authorities, where required by law or regulatory directive.
• IT and platform service providers — cloud hosting, data storage, and technical infrastructure providers engaged by 000taya to operate the platform, subject to strict data processing agreements.
• Professional advisers — lawyers, auditors, and accountants engaged by 000taya, subject to professional confidentiality obligations.

08 International Data Transfers

In some cases, the third-party service providers engaged by 000taya may process your personal data outside of the Philippines. Where such international transfers occur, 000taya ensures that appropriate safeguards are in place to protect your personal data in accordance with the Data Privacy Act of 2012 and NPC regulations.

These safeguards may include contractual clauses approved by the NPC, binding corporate rules, or transfers to countries that have been assessed as providing an adequate level of data protection. By using the 000taya platform, you acknowledge and consent to such international transfers where necessary for the operation of the platform.

09 Data Retention

000taya retains your personal data only for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable law. The following general retention periods apply:

• Account and KYC data — retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with PAGCOR and AMLA requirements.
• Transaction and financial data — retained for a minimum of five (5) years from the date of the transaction, as required by Philippine financial regulations.
• Gaming activity data — retained for a minimum of three (3) years from the date of the relevant gaming session.
• Customer support communications — retained for two (2) years from the date of the last communication, unless a longer period is required for dispute resolution or legal proceedings.
• Marketing consent records — retained for the duration of your consent and for one (1) year following withdrawal of consent.

Upon expiry of the applicable retention period, your personal data will be securely deleted or anonymised in accordance with 000taya's data disposal procedures.

10 Cookies & Tracking Technologies

000taya uses cookies and similar tracking technologies (including web beacons and local storage) to enhance your experience on the platform, maintain your session, and analyse usage patterns. The following types of cookies are used:

• Strictly necessary cookies — essential for the platform to function. These cannot be disabled as they are required to keep you logged in and maintain your session security.
• Functional cookies — used to remember your preferences, such as language settings and responsible gaming tool configurations.
• Analytics cookies — used to collect anonymised data about how players use the platform, helping 000taya improve performance and user experience.
• Security cookies — used to detect and prevent fraudulent activity, bot access, and other security threats.

000taya does not use third-party advertising cookies or share cookie data with external advertising networks.

11 Your Rights as a Data Subject

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 000taya:

• Right to be informed — you have the right to be informed of how your personal data is being collected and processed, as set out in this Privacy Policy.
• Right of access — you have the right to request a copy of the personal data that 000taya holds about you.
• Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data held by 000taya.
• Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to 000taya's legal retention obligations.
• Right to object — you have the right to object to the processing of your personal data where that processing is based on legitimate interests or for direct marketing purposes.
• Right to data portability — you have the right to receive your personal data in a structured, commonly used, and machine-readable format where technically feasible.
• Right to withdraw consent — where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of prior processing.
• Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 000taya has processed your personal data in violation of the Data Privacy Act of 2012.

To exercise any of the above rights, please contact the 000taya Data Protection Officer using the details provided in Section 16. We will respond to all verified data subject requests within fifteen (15) business days, in accordance with NPC guidelines.

12 Children's Privacy

The 000taya platform is strictly intended for persons aged 21 years and above. 000taya does not knowingly collect personal data from individuals under the age of 21. If you are under 21, you must not register an account or use the 000taya platform.

If 000taya becomes aware that personal data has been collected from a person under the age of 21, we will take immediate steps to delete that data and close the associated account. If you believe that a minor may have registered an account on 000taya, please contact us immediately at [email protected].

13 Data Security

000taya implements appropriate technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and the 000taya platform.
• AES-256 encryption for sensitive data stored at rest, including payment method details and identity documents.
• Role-based access controls limiting access to personal data to authorised personnel only.
• Regular security audits, penetration testing, and vulnerability assessments.
• Multi-factor authentication for administrative access to systems holding personal data.
• Incident response procedures for detecting, reporting, and managing personal data breaches.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 000taya will notify the National Privacy Commission and affected data subjects in accordance with the timeframes prescribed by the Data Privacy Act of 2012 and NPC Circular No. 16-03.

While 000taya takes all reasonable steps to protect your personal data, no method of transmission over the internet or electronic storage is completely secure. You are responsible for keeping your account credentials confidential and for notifying 000taya immediately if you suspect any unauthorised access to your account.

14 Third-Party Links

The 000taya platform may contain references to third-party services such as payment processors. 000taya is not responsible for the privacy practices of any third-party services. We encourage you to review the privacy policies of any third-party services you use in connection with your 000taya account, including GCash, Maya, and your bank.

This Privacy Policy applies solely to personal data collected and processed by 000taya in connection with your use of the 000taya platform.

15 Updates to This Privacy Policy

000taya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

The date of the most recent revision to this Privacy Policy is displayed at the top of this page. We recommend that you review this Privacy Policy periodically to stay informed of how 000taya is protecting your personal data. Your continued use of the platform following any update constitutes your acknowledgement of the revised Privacy Policy.

16 Contact & Data Protection Officer

If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 000taya, please contact our Data Protection Officer:

• Email: [email protected]
• General Support: [email protected]
• Live Chat: Available 24/7 through the 000taya platform

If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines. Information on how to file a complaint with the NPC is available through official Philippine government channels.