000taya Privacy Policy

000taya ("we," "us," "our," "the Platform") is committed to protecting the privacy and personal data of every player who registers and uses our online gaming services at https://000taya.net. This Privacy Policy describes our practices regarding the collection, use, storage, disclosure, and protection of personal information in connection with your use of the 000taya platform.

This policy is issued in compliance with Republic Act No. 10173, otherwise known as the Data Privacy Act of 2012 of the Philippines, and its Implementing Rules and Regulations, as well as applicable regulations issued by the National Privacy Commission (NPC). Where applicable, we also observe relevant international data protection standards.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, both of which form part of the overall agreement governing your use of 000taya.

For the purposes of the Data Privacy Act of 2012 and this Privacy Policy, 000taya acts as the Personal Information Controller in respect of the personal data you provide when using our platform. This means we determine the purposes and means by which your personal data is processed.

Where we engage third-party service providers to process data on our behalf — such as payment processors, identity verification providers, and analytics services — those parties act as Personal Information Processors and are bound by contractual obligations to process your data only in accordance with our instructions and this Privacy Policy.

For any privacy-related enquiries, you may contact our designated Data Protection Officer at: [email protected]

000taya collects personal data through several channels, including account registration, identity verification, payment transactions, platform usage, and communications with our support team. The categories of data we collect include:

3.1 Registration & Identity Data

• Full legal name
• Date of birth (to verify the 21+ age requirement)
• Residential address (including city — e.g., Manila, Cebu, Davao, Makati, Quezon City)
• Email address and mobile number
• Username and encrypted password

3.2 Identity Verification (KYC) Data

• Government-issued photo ID (Philippine passport, UMID, SSS ID, driver's license, or equivalent)
• Proof of address documentation
• Selfie or live photo for biometric verification where required
• Source of funds documentation for large transactions

3.3 Financial & Transaction Data

• Deposit and withdrawal records
• Payment method details (GCash account reference, PayMaya reference, BDO/BPI/Metrobank account details — stored in tokenized form only)
• Transaction history and account balance records
• Betting and wagering history

3.4 Technical & Usage Data

• IP address and approximate geolocation
• Device type, operating system, and browser information
• Session duration, pages visited, and features used
• Login timestamps and access logs

3.5 Communications Data

• Records of support tickets, live chat transcripts, and email correspondence
• Feedback and survey responses
• Promotional opt-in preferences

000taya uses the personal data we collect for the following purposes:

We do not use your personal data for automated decision-making that produces significant legal effects without human review, except where expressly required for fraud prevention or regulatory compliance purposes.

Under the Data Privacy Act of 2012, 000taya processes your personal data on the following legal bases:

• Contractual necessity: Processing required to fulfill our obligations under the Terms and Conditions you agreed to upon registration, including account management, payment processing, and service delivery.
• Legal obligation: Processing required to comply with applicable Philippine laws, including anti-money laundering regulations, PAGCOR licensing requirements, and tax reporting obligations.
• Legitimate interests: Processing necessary for fraud prevention, platform security, responsible gaming monitoring, and improving our services, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and non-essential cookies, where you have provided explicit, freely given, and informed consent. You may withdraw consent at any time.

000taya does not sell or rent your personal data to third parties. We may share your data with the following categories of recipients only to the extent necessary for the stated purposes:

• Payment processors: GCash, PayMaya, and partner banks (BDO, BPI, Metrobank) receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC and AML compliance services that assist us in verifying your identity and screening against regulatory watchlists.
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other competent Philippine government bodies, where disclosure is required by law or court order.
• Technology and hosting providers: Cloud infrastructure and software service providers who host and maintain the 000taya platform under strict data processing agreements.
• Professional advisers: Legal counsel, auditors, and compliance consultants, subject to professional confidentiality obligations.

000taya retains your personal data for as long as your account remains active and for a period thereafter as required by applicable law and regulatory obligations. Specific retention periods include:

• Account and identity data: Retained for the duration of your account and for a minimum of five (5) years following account closure, in compliance with Philippine AML record-keeping requirements.
• Transaction and wagering records: Retained for a minimum of five (5) years from the date of each transaction, as required by PAGCOR and AMLC regulations.
• Communications and support records: Retained for three (3) years from the date of the last communication, or longer if relevant to an ongoing dispute or investigation.
• Technical and usage data: Retained in anonymized or aggregated form for up to two (2) years for analytics and platform improvement purposes.

Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our internal data disposal procedures.

000taya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers
• Encryption of sensitive data at rest, including payment method references and identity documents
• Role-based access controls limiting staff access to personal data on a strict need-to-know basis
• Regular security audits, vulnerability assessments, and penetration testing
• Multi-factor authentication requirements for administrative system access
• Secure, geographically redundant data center infrastructure
• Incident response procedures for detecting and responding to data breaches

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 000taya will notify the National Privacy Commission and affected data subjects within the timeframes prescribed by the Data Privacy Act and NPC regulations.

000taya uses cookies and similar tracking technologies to operate and improve the platform. A cookie is a small text file placed on your device when you visit our website. We use the following categories of cookies:

You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 000taya platform, including your ability to stay logged in or access certain game features.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 000taya:

• Right to be informed: You have the right to know what personal data we collect, how we use it, and with whom we share it — which is the purpose of this Privacy Policy.
• Right of access: You may request a copy of the personal data we hold about you at any time.
• Right to rectification: If any personal data we hold is inaccurate or incomplete, you have the right to request correction.
• Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to object: You may object to the processing of your personal data for direct marketing purposes or where processing is based on legitimate interests.
• Right to data portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format.
• Right to withdraw consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact our Data Protection Officer at [email protected] or visit our Support page. We will respond to all verified requests within thirty (30) days.

The 000taya platform is strictly intended for adults aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21. If we become aware that personal data has been collected from a person under 21, we will take immediate steps to delete that data and close the associated account.

000taya primarily stores and processes personal data within the Philippines. Where it is necessary to transfer personal data to service providers or infrastructure located outside the Philippines — for example, cloud hosting or KYC verification services — we ensure that such transfers are conducted in compliance with the Data Privacy Act of 2012 and NPC regulations.

All international data transfers are governed by appropriate contractual safeguards, including data processing agreements that require recipient parties to maintain data protection standards equivalent to those required under Philippine law. We do not transfer personal data to jurisdictions that do not provide an adequate level of data protection without first implementing appropriate safeguards.

The 000taya platform may contain references or links to third-party services such as payment providers. Once you leave the 000taya platform and access a third-party service, this Privacy Policy no longer applies. We encourage you to review the privacy policies of any third-party services you use in connection with your 000taya account, including your chosen payment provider (GCash, PayMaya, BDO, BPI, or Metrobank).

000taya is not responsible for the privacy practices or content of any third-party websites or services.

000taya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, applicable law, or regulatory requirements. When material changes are made, we will notify registered players via email or a prominent notice on the platform prior to the changes taking effect.

The date of the most recent revision is displayed at the top of this document. Your continued use of the 000taya platform following the effective date of any amendment constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this page periodically to stay informed of how we protect your data.

If you have any questions, concerns, or complaints regarding this Privacy Policy or the way 000taya handles your personal data, please contact our Data Protection Officer through any of the following channels:

• Privacy enquiries: [email protected]
• General support: [email protected]
• Support page: 000taya.net/support
• FAQ: 000taya.net/faq

We will acknowledge all privacy-related requests within seventy-two (72) hours and aim to resolve them within thirty (30) calendar days. If you are not satisfied with our response, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.