1. Introduction
tay99 ("we," "us," "our") operates the online casino and sports betting platform available at tay99.org and related web addresses (collectively, the "Platform"). This Privacy Policy describes how tay99 collects, processes, stores, shares, and protects the personal information of individuals who register for and use the Platform, including all visitors who browse without registering.
tay99 is committed to safeguarding the privacy of every player. We handle personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173, as amended) and the implementing rules and regulations issued by the National Privacy Commission of the Philippines. As a PAGCOR-licensed operator, tay99 is also subject to data collection and retention obligations imposed by PAGCOR and by the Anti-Money Laundering Act of the Philippines.
By creating an account on the tay99 Platform or by continuing to use the Platform, you acknowledge that you have read and understood this Privacy Policy and you consent to the processing of your personal data as described herein. If you do not agree with any provision of this Policy, you must discontinue use of the Platform.
Scope: This Privacy Policy applies to personal data collected through the tay99 website (tay99.org), all related sub-domains, mobile browser interfaces, and any direct communications between tay99 and its players — including customer support interactions via live chat, email, or SMS.
2. Data Controller
For the purposes of the Data Privacy Act of 2012, tay99 is the personal information controller responsible for the personal data collected through the Platform. tay99 determines the purposes and means of processing your personal data in accordance with this Policy and applicable law.
tay99 has designated a Data Protection Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and this Policy, handling data subject requests, and coordinating with the National Privacy Commission where required. Contact details for the DPO are provided in Section 15 of this Policy.
3. Personal Data We Collect
tay99 collects the following categories of personal data, depending on your interaction with the Platform:
Information you provide when creating a tay99 account: Philippine mobile number, date of birth, chosen username, and password (stored in hashed form only — tay99 does not store passwords in plain text). You may also voluntarily provide a full name and email address.
When tay99 is required to verify your identity under PAGCOR licensing conditions or the Anti-Money Laundering Act, we may collect: government-issued identification documents (e.g., Philippine passport, driver's licence, UMID, PhilSys ID), a selfie or live photo for liveness verification, proof of address, and source of funds documentation. This data is collected only when required for regulatory compliance.
Information related to deposits and withdrawals: GCash mobile number, Maya account details, bank account numbers (BPI, BDO, Metrobank), transaction amounts, dates, and reference numbers. This data is required to process payments and to comply with anti-money laundering reporting obligations.
Records of all gaming sessions on the tay99 Platform, including: games played, bets placed and results, wager amounts, session durations, and cumulative win/loss figures. This data is required by PAGCOR for regulatory monitoring and is used by tay99 for responsible gaming assessments.
Automatically collected data when you access the Platform: IP address, device type and operating system, browser type and version, screen resolution, referring URL, pages visited and time spent on each page, and error logs. This data is used to operate, maintain, and improve the Platform.
Records of communications between you and tay99, including live chat transcripts, email correspondence, and SMS messages sent to your registered mobile number. These records are retained for customer service quality assurance and dispute resolution purposes.
Any self-imposed limits, cool-off periods, or self-exclusion requests you submit through your account settings, and any communications related to responsible gaming support. This data is treated with heightened confidentiality.
4. How We Collect Your Data
tay99 collects personal data through the following means:
- Directly from you — through account registration forms, KYC submission portals, payment transaction inputs, customer support interactions, and any other direct communications you initiate with tay99;
- Automatically through the Platform — via cookies, web beacons, server logs, and similar technologies when you browse or use the Platform (see Section 7);
- From payment service providers — transaction confirmation data received from GCash, Maya, BPI, BDO, Metrobank, and other payment intermediaries when processing deposits and withdrawals;
- From identity verification service providers — during KYC checks where tay99 uses a third-party verification service to validate government-issued documents;
- From fraud prevention and compliance services — data from third-party anti-fraud and anti-money laundering screening tools used to verify the legitimacy of accounts and transactions.
5. Purpose and Legal Basis for Processing
tay99 processes your personal data only for specified, lawful purposes. The table below summarises the primary processing activities, their purposes, and the legal basis under the Data Privacy Act of 2012:
| Processing Activity | Purpose | Legal Basis |
|---|---|---|
| Account Registration | Creating and managing your tay99 account | Performance of contract |
| Identity Verification | Age and KYC compliance (PAGCOR / AMLA) | Legal obligation |
| Payment Processing | Processing deposits and withdrawals in PHP | Performance of contract |
| Game Records | Regulatory reporting to PAGCOR | Legal obligation |
| Fraud Prevention | Detecting and preventing fraudulent activity | Legitimate interest / legal obligation |
| Responsible Gaming | Monitoring for problem gambling indicators | Legal obligation / legitimate interest |
| Customer Support | Resolving queries, complaints, and disputes | Performance of contract |
| Platform Analytics | Improving Platform performance and UX | Legitimate interest |
| Marketing Communications | Sending promotions and platform updates | Consent (opt-in) |
tay99 will not process your personal data for any purpose that is incompatible with the purposes listed above without first obtaining your explicit consent or establishing a new lawful basis for processing.
6. Sharing Your Personal Data
tay99 does not sell, rent, or trade your personal data to third parties for their own marketing or commercial purposes. Your personal information is shared only in the circumstances described below.
- PAGCOR and Regulatory Authorities: tay99 is required to share gaming activity data, transaction records, and player information with PAGCOR as part of its licensing obligations. tay99 will also disclose personal data to other government bodies — including the Anti-Money Laundering Council (AMLC), the Bureau of Internal Revenue (BIR), and law enforcement agencies — when legally required to do so.
- Payment Service Providers: Transaction data is shared with GCash, Maya, BPI, BDO, Metrobank, and other payment intermediaries to process your deposits and withdrawals. These parties are bound by their own privacy and data security obligations under Philippine law.
- Identity Verification Providers: During KYC checks, document images and personal details may be processed by an authorised third-party identity verification service operating under a data processing agreement with tay99.
- Fraud and AML Screening Services: tay99 uses third-party services to screen accounts and transactions for fraud and money laundering indicators. Only the minimum data necessary for screening purposes is shared with these services.
- Technology and Infrastructure Partners: tay99's Platform is hosted on third-party server infrastructure. Hosting partners process data only in accordance with data processing agreements that include confidentiality and security obligations.
- Professional Advisors: tay99 may share personal data with its lawyers, auditors, and compliance consultants where strictly necessary for the provision of those professional services, subject to confidentiality obligations.
Cross-Border Data Transfers: Where personal data is transferred outside the Philippines (for example, to cloud infrastructure providers with data centres in other countries), tay99 ensures that appropriate safeguards are in place — including contractual clauses requiring the recipient to provide a standard of data protection equivalent to the requirements of the Data Privacy Act of 2012.
7. Cookies and Tracking Technologies
The tay99 Platform uses cookies and similar tracking technologies to operate core platform functions, analyse usage, and improve the player experience. A cookie is a small data file placed on your device by the Platform when you visit.
tay99 uses the following categories of cookies:
- Strictly Necessary Cookies: Required for the Platform to function. These include session cookies that keep you logged in during your gaming session and security cookies that protect your account. You cannot opt out of these without disabling the Platform entirely.
- Functional Cookies: These remember your preferences — such as language settings and responsible gaming tool configurations — to personalise your experience. Disabling these will not prevent Platform use but may reduce convenience.
- Analytics Cookies: tay99 uses anonymised analytics data to understand how players navigate the Platform — which pages receive the most visits, where errors occur, and how game loading performance can be improved. This data does not identify individual players.
- Security and Fraud Prevention Cookies: Device fingerprinting and behavioural analytics technologies are used to detect bot activity, account takeover attempts, and other fraudulent behaviour. These run silently in the background as a security measure.
You can manage cookie preferences through your browser settings. Blocking all cookies may prevent certain Platform features from working correctly. tay99 does not use advertising or behavioural tracking cookies for third-party ad targeting.
8. Data Retention
tay99 retains personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law and PAGCOR licensing conditions.
- Active Account Data: Retained for the full duration of your active tay99 account relationship.
- Closed Account Data: Following account closure, tay99 retains account records, transaction history, and KYC documentation for a minimum of five (5) years, in compliance with the Anti-Money Laundering Act and PAGCOR record-keeping requirements.
- Gaming Activity Records: Retained for a minimum of five (5) years after the date of each gaming session, as required by PAGCOR regulations.
- Customer Support Communications: Retained for three (3) years from the date of the interaction, for dispute resolution and quality assurance purposes.
- Analytics Data: Anonymised aggregate analytics data may be retained indefinitely as it cannot be used to identify individual players.
- Responsible Gaming Records: Self-exclusion records and responsible gaming tool settings are retained for the full period of any active restriction, plus five (5) years thereafter to prevent inadvertent re-registration during an exclusion period.
When retention periods expire and no ongoing legal basis for retention exists, personal data is securely deleted or anonymised in accordance with tay99's data disposal procedures.
9. Data Security
tay99 implements technical and organisational security measures designed to protect your personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures include:
- 256-bit SSL/TLS encryption on all data transmitted between your device and the tay99 Platform;
- Encryption at rest for sensitive personal data stored on tay99 servers, including payment information and KYC documents;
- Password hashing using industry-standard cryptographic algorithms — tay99 staff cannot access your password in plain text;
- Role-based access controls that restrict staff access to personal data strictly on a need-to-know basis;
- Regular security audits and vulnerability assessments of the Platform infrastructure;
- Two-factor authentication options for player accounts;
- Automated fraud monitoring systems that flag and investigate unusual account or transaction activity in real time.
Data Breach Response: In the event of a personal data breach that poses a real risk of serious harm to affected individuals, tay99 will notify the National Privacy Commission within 72 hours of becoming aware of the breach, and will notify affected players without undue delay, in accordance with the Data Privacy Act of 2012 and NPC Circular No. 16-03.
10. Your Rights as a Data Subject
Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by tay99. To exercise any of these rights, contact tay99's Data Protection Officer using the details in Section 15.
| Your Right | What It Means |
|---|---|
| Right to Access | Request a copy of the personal data tay99 holds about you and information about how it is processed. |
| Right to Correction | Request correction of inaccurate or incomplete personal data held about you. |
| Right to Erasure | Request deletion of your personal data where there is no longer a lawful basis for retention, subject to overriding legal obligations (e.g., AMLA record-keeping). |
| Right to Object | Object to processing of your personal data based on legitimate interest, including direct marketing. Where you object to marketing, you will be removed from all marketing lists immediately. |
| Right to Data Portability | Request that tay99 provide your personal data in a structured, commonly used, machine-readable format where technically feasible. |
| Right to Complain | File a complaint with the National Privacy Commission of the Philippines if you believe tay99 has violated your data privacy rights. |
tay99 will respond to all verified data subject requests within fifteen (15) working days of receipt. Where a request is complex or involves a high volume of data, tay99 may extend this period by a further fifteen (15) working days, with written notification of the extension provided to the requesting party.
11. Children and Minors
The tay99 Platform is strictly not intended for individuals under twenty-one (21) years of age. tay99 does not knowingly collect personal data from individuals under the age of 21. Access to the Platform requires confirmation at registration that the registering individual is 21 or older, and age verification documentation may be required.
If tay99 discovers that personal data has been collected from an individual who is under 21 years of age, the relevant account will be immediately closed, all funds will be handled in accordance with PAGCOR requirements, and the personal data of the minor will be securely deleted from tay99's records as promptly as possible.
🔞 21+ Requirement: If you are a parent or guardian and believe a minor has registered on the tay99 Platform, please contact tay99 immediately using the details in Section 15. We will take immediate action to close the account and delete associated data.
12. Anti-Money Laundering and Regulatory Disclosures
As a PAGCOR-licensed operator, tay99 is a covered entity under the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended by Republic Acts No. 9194, 10167, 10365, and 11521). tay99 is legally required to:
- Conduct Customer Due Diligence (CDD) and Enhanced Due Diligence (EDD) on players as required by PAGCOR and AMLC rules;
- Monitor transactions for suspicious activity and file Suspicious Transaction Reports (STRs) with the Anti-Money Laundering Council where required by law;
- File Covered Transaction Reports (CTRs) for single-day transactions meeting or exceeding the threshold set under AMLA rules;
- Retain transaction records and KYC documentation for the statutory minimum period.
Mandatory disclosures to PAGCOR and the AMLC made in good faith and in compliance with legal obligations do not constitute a breach of confidentiality or data protection obligations under the Data Privacy Act of 2012, pursuant to the exemptions provided under that Act and the AMLA.
13. Third-Party Links
The tay99 Platform may contain informational references to third-party services, including payment service providers. tay99 is not responsible for the privacy practices, data processing activities, or content of any third-party website or service. Players who access third-party services from the tay99 Platform do so at their own risk and are subject to the applicable privacy policies of those third parties.
tay99 does not control and is not responsible for the collection, use, or disclosure of personal data by third-party payment processors once a transaction has been initiated and control of the transaction has passed to the relevant payment service provider.
14. Amendments to This Privacy Policy
tay99 reserves the right to update or amend this Privacy Policy at any time to reflect changes in data processing practices, applicable law, or PAGCOR regulatory requirements. Material changes to this Policy will be communicated to registered players via SMS to their registered mobile number and/or through a prominent notice on the Platform, at least seven (7) calendar days before the changes take effect.
The most current version of this Privacy Policy is always accessible at tay99.org/privacy-policy. The "Last Updated" date at the top of this page indicates the date of the most recent revision. Continued use of the Platform after the effective date of any amendment constitutes acceptance of the revised Policy.
15. Contact and Data Protection Officer
If you have questions, concerns, or requests regarding this Privacy Policy or tay99's personal data processing activities, please contact tay99's Data Protection Officer. The DPO is responsible for overseeing tay99's compliance with the Data Privacy Act of 2012 and handling all data subject rights requests.
You may reach the tay99 Data Protection Officer and support team through the following channels:
- Live Chat: Available 24/7 via the support icon on any page of the tay99 Platform — the fastest channel for urgent account or data queries;
- Email: The tay99 support email address is displayed in plain text in the footer of this page. Written requests submitted by email are acknowledged within one (1) business day and resolved within fifteen (15) working days.
National Privacy Commission: If you are not satisfied with tay99's response to a data privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. Information about the NPC's complaint process is available on the NPC's official government website.