TayaEvo
Privacy Policy

TayaEvo ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our online gaming platform. We understand that trust is the foundation of any good relationship — and that's especially true when real money and personal information are involved.

This Privacy Policy ("Policy") describes in clear terms how TayaEvo collects, uses, stores, shares, and protects your personal data when you visit, register on, or interact with the TayaEvo platform. It also explains the rights you hold under Philippine law and how you can exercise them.

By accessing or using TayaEvo, you acknowledge that you have read and understood this Policy. If you do not agree with any part of this Policy, please discontinue use of the platform and contact our support team to close your account.

For the purposes of the Data Privacy Act of 2012 and its Implementing Rules and Regulations, TayaEvo is the Personal Information Controller (PIC) in respect of the personal data it collects from users of the platform.

As the PIC, TayaEvo determines the purposes and means of processing your personal data and is responsible for ensuring that such processing is carried out lawfully, fairly, and transparently in accordance with applicable Philippine data protection law.

TayaEvo has appointed a Data Protection Officer (DPO) who is responsible for overseeing compliance with this Policy and applicable data protection laws. Contact details for the DPO are provided in Section 15 of this Policy.

TayaEvo collects only the personal data that is necessary for the purposes described in this Policy. The categories of personal data we collect include:

TayaEvo does not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or health data, except where strictly required by law (for example, problem gambling self-declaration forms submitted voluntarily by the player).

TayaEvo collects personal data through the following means:

• Direct Submission: Information you provide when registering an account, completing KYC verification, making deposits or withdrawals, contacting support, or submitting feedback.
• Automated Collection: Technical and gaming data collected automatically when you access and use the TayaEvo platform, including through cookies, log files, and session tracking technologies.
• Third-Party Sources: Identity verification data received from KYC service providers; transaction data received from payment processors such as GCash, PayMaya, BPI, BDO, and Metrobank; fraud prevention data from anti-money laundering screening services.
• Regulatory Sources: Data received from PAGCOR or other regulatory bodies in connection with licensing compliance, responsible gaming obligations, or legal investigations.

TayaEvo processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your TayaEvo player account, including verifying your identity and age (21+ requirement) at registration and during ongoing use.
• Transaction Processing: To process deposits and withdrawals via GCash, PayMaya, BPI, BDO, Metrobank, and other supported payment channels, and to maintain accurate financial records.
• KYC & Compliance: To verify your identity in accordance with PAGCOR regulations and Philippine anti-money laundering laws, including the Anti-Money Laundering Act (AMLA) as amended.
• Platform Operation: To deliver, maintain, and improve the TayaEvo gaming platform, including Fortune Dragon, Star Fishing, Relax Fishing, E-Sports, Pearls of Bingo, Plinko, and all other games and features.
• Customer Support: To respond to your inquiries, resolve disputes, and provide technical assistance.
• Responsible Gaming: To monitor gaming behaviour for signs of problem gambling, enforce self-exclusion requests, and administer deposit and loss limits set by you.
• Fraud Prevention & Security: To detect, investigate, and prevent fraudulent transactions, money laundering, multi-accounting, and other prohibited conduct.
• Legal Obligations: To comply with applicable Philippine laws, regulatory requirements, court orders, and lawful requests from government authorities.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have given your explicit consent and have not subsequently opted out.
• Analytics & Improvement: To analyse platform usage patterns, improve user experience, and develop new features and games.

Under the Data Privacy Act of 2012, TayaEvo processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you — i.e., to operate your TayaEvo account, process your wagers, and handle your financial transactions.
• Legal Obligation: Processing required to comply with Philippine laws and regulations, including PAGCOR licensing conditions, AMLA obligations, and tax reporting requirements.
• Legitimate Interests: Processing carried out for TayaEvo's legitimate business interests, including fraud prevention, platform security, and responsible gaming monitoring, where such interests are not overridden by your rights and freedoms.
• Consent: Processing for marketing communications and optional analytics, where you have given your freely given, specific, informed, and unambiguous consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

TayaEvo does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We share your data only in the following circumstances and only to the extent necessary:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, solely for the purpose of processing your deposits and withdrawals.
• KYC & Identity Verification Providers: Third-party identity verification services engaged by TayaEvo to verify your identity and age in compliance with regulatory requirements.
• Fraud Prevention & AML Services: Anti-money laundering screening and fraud detection providers who assist TayaEvo in identifying and preventing illegal financial activity.
• IT & Platform Service Providers: Cloud hosting, data storage, and software service providers who process data on TayaEvo's behalf under strict data processing agreements.
• Regulatory Authorities: PAGCOR, the National Privacy Commission (NPC), the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where required by law or regulation.
• Law Enforcement: Philippine law enforcement agencies, where TayaEvo is legally compelled to disclose data pursuant to a valid court order, subpoena, or lawful government request.
• Business Transfers: In the event of a merger, acquisition, or sale of TayaEvo's business assets, your personal data may be transferred to the acquiring entity, subject to equivalent data protection obligations.

All third parties with whom TayaEvo shares personal data are required to process that data in accordance with applicable Philippine data protection law and TayaEvo's data processing standards. TayaEvo does not permit third-party service providers to use your data for their own purposes.

TayaEvo retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The following general retention periods apply:

Upon expiry of the applicable retention period, TayaEvo will securely delete or anonymise your personal data in accordance with its data disposal procedures. Anonymised data that can no longer identify you may be retained indefinitely for statistical and analytical purposes.

TayaEvo takes the security of your personal data seriously. We implement a range of technical and organisational measures designed to protect your data against unauthorised access, disclosure, alteration, or destruction. These measures include:

• Encryption: All data transmitted between your device and TayaEvo's servers is encrypted using industry-standard TLS (Transport Layer Security) protocols. Sensitive data at rest is encrypted using AES-256 encryption.
• Access Controls: Access to personal data is restricted to TayaEvo staff and service providers who have a legitimate need to access it. All access is logged and subject to regular review.
• Two-Factor Authentication: TayaEvo supports and encourages the use of two-factor authentication (2FA) on all player accounts to prevent unauthorised access.
• Penetration Testing: TayaEvo conducts regular security assessments and penetration tests to identify and remediate vulnerabilities in its platform.
• Incident Response: TayaEvo maintains a data breach response plan. In the event of a personal data breach that poses a risk to your rights and freedoms, TayaEvo will notify the National Privacy Commission (NPC) within 72 hours and affected players without undue delay, as required by the Data Privacy Act.
• Staff Training: All TayaEvo staff who handle personal data receive regular data protection training and are bound by confidentiality obligations.

TayaEvo uses cookies and similar tracking technologies on its platform to enhance your experience, maintain session security, and analyse platform usage. The types of cookies we use include:

• Strictly Necessary Cookies: Essential for the platform to function. These include session cookies that keep you logged in and security cookies that protect against cross-site request forgery. These cannot be disabled.
• Functional Cookies: Remember your preferences such as language settings, game display options, and notification preferences to personalise your experience.
• Analytics Cookies: Collect anonymised data about how players use the TayaEvo platform — which games are most popular, how long sessions last, and where players encounter difficulties. This data helps us improve the platform.
• Security Cookies: Used to detect and prevent fraudulent activity, multi-accounting, and bot access.

TayaEvo does not use third-party advertising cookies or allow external advertisers to place cookies on the platform. You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect the functionality of the TayaEvo platform.

Under the Data Privacy Act of 2012, you have the following rights in relation to your personal data held by TayaEvo. To exercise any of these rights, contact our Data Protection Officer using the details in Section 15.

TayaEvo's platform is strictly intended for individuals who are 21 years of age or older, in accordance with Philippine gaming regulations. TayaEvo does not knowingly collect personal data from individuals under the age of 21.

If TayaEvo discovers or is notified that it has collected personal data from a person under 21 years of age, it will immediately suspend the relevant account, delete the personal data collected, and return any deposits made, in accordance with applicable regulations.

Parents and guardians who believe their child may have registered on TayaEvo should contact our support team immediately. TayaEvo takes underage access extremely seriously and will act promptly on any such report.

TayaEvo primarily processes and stores personal data within the Philippines. However, some of TayaEvo's third-party service providers — including cloud infrastructure providers and KYC verification services — may process data in other countries.

Where personal data is transferred outside the Philippines, TayaEvo ensures that appropriate safeguards are in place to protect your data to a standard equivalent to that required under the Data Privacy Act of 2012. Such safeguards may include:

• Contractual clauses requiring the recipient to process data in accordance with Philippine data protection standards.
• Transfers to countries or organisations that the National Privacy Commission has determined provide an adequate level of data protection.
• Binding corporate rules where data is transferred within a corporate group.

You may request information about the specific safeguards in place for any cross-border transfer of your personal data by contacting our Data Protection Officer.

TayaEvo reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable law, or regulatory requirements. When material changes are made, TayaEvo will:

• Update the "Last Updated" date at the top of this Policy.
• Notify registered players via their registered email address at least seven (7) days before the changes take effect, where practicable.
• Display a prominent notice on the TayaEvo platform highlighting the key changes.

Your continued use of the TayaEvo platform after the effective date of any amendment constitutes your acknowledgment of the updated Policy. We encourage you to review this page periodically. The current version of this Policy is always available at tayaevo.app/privacy-policy.

If you have any questions, concerns, or requests relating to this Privacy Policy or TayaEvo's handling of your personal data, please contact our Data Protection Officer. TayaEvo is committed to responding to all data privacy inquiries within 15 business days.

If you are not satisfied with TayaEvo's response to your data privacy inquiry, you have the right to escalate your complaint to the National Privacy Commission (NPC) of the Philippines, which is the supervisory authority responsible for enforcing the Data Privacy Act of 2012.