Privacy Policy
3taya365 Data Protection Commitment

This Privacy Policy ("Policy") describes the data protection practices of 3taya365 ("Platform," "we," "us," or "our") in connection with your use of the 3taya365 online gaming platform at 3taya365.vip, including all games, account services, payment functions, and support services available thereon.

3taya365 acts as the Personal Information Controller (PIC) in respect of the personal data of its registered account holders and platform visitors, as defined under the Data Privacy Act of 2012 of the Philippines (Republic Act 10173, "DPA") and its Implementing Rules and Regulations.

This Policy should be read alongside the Terms & Conditions and Responsible Gaming Policy, both of which are incorporated by reference. By registering a 3taya365 account or using the platform, you confirm that you have read and understood this Policy.

3taya365 collects the following categories of personal data from players and platform visitors:

3taya365 collects personal data through the following methods:

• Direct Collection: Information you provide when you register your 3taya365 account, complete KYC verification, make a deposit or withdrawal, contact support, or update your account settings.
• Automated Collection: Technical and gaming activity data collected automatically as you interact with the 3taya365 platform, including through cookies, server logs, and session tracking technologies.
• Third-Party Sources: Identity verification data obtained from KYC and anti-fraud service providers engaged by 3taya365; transaction data received from payment processors including GCash and PayMaya; compliance data received from regulatory databases where required by PAGCOR or AMLC obligations.

3taya365 processes your personal data for the following specific purposes:

1. Account Management: Creating, maintaining, and administering your 3taya365 account, including authentication, account security, and profile updates.
2. Gaming Services: Delivering the gaming services you access on the platform, including recording game sessions, processing wagers, crediting winnings, and tracking your game history.
3. Payment Processing: Processing your deposits and withdrawals through GCash, PayMaya, BDO, BPI, Metrobank, and other supported payment methods.
4. Identity Verification and KYC: Verifying your identity, age, and eligibility to use the platform in compliance with PAGCOR regulations and applicable Philippine law.
5. Regulatory Compliance: Meeting obligations under the Anti-Money Laundering Act (RA 9160 as amended), PAGCOR licensing requirements, and other applicable Philippine legal and regulatory obligations.
6. Fraud Prevention and Security: Detecting, investigating, and preventing fraud, unauthorized account access, collusion, money laundering, and other prohibited conduct on the platform.
7. Responsible Gaming: Administering your responsible gaming settings including deposit limits, loss limits, session controls, and self-exclusion requests; monitoring gaming behaviour where required by responsible gaming regulations.
8. Customer Support: Responding to your queries, complaints, and support requests submitted through live chat, email, or other support channels.
9. Marketing and Promotions: Where you have provided consent, sending you information about 3taya365 promotions, bonuses, and new game offerings relevant to your activity. You may opt out of marketing communications at any time.
10. Platform Improvement: Analysing aggregated, anonymised usage data to improve the platform's performance, user experience, and game offering.

3taya365 processes personal data under the following legal bases as recognised under the DPA and its Implementing Rules:

• Consent (Section 12(a), DPA): Where you have given your express consent to the processing, such as for optional marketing communications and certain analytics activities.
• Contractual Necessity (Section 12(b), DPA): Where processing is necessary to perform the contract between you and 3taya365, including account services, payment processing, and game delivery.
• Legal Obligation (Section 12(c), DPA): Where processing is required to comply with applicable Philippine law, including PAGCOR licensing conditions, AML obligations under RA 9160, and data retention requirements.
• Legitimate Interests (Section 12(f), DPA): Where processing is necessary for the legitimate interests of 3taya365, including fraud prevention, platform security, responsible gaming monitoring, and service improvement, provided those interests are not overridden by your rights and interests.

3taya365 does not sell your personal data. We share personal data only in the following limited circumstances:

• Payment Processors: Financial data is shared with payment service providers (including GCash, PayMaya, and partner banks) to the extent necessary to process your deposits and withdrawals.
• Identity Verification Providers: Identity documents and related data are shared with third-party KYC and identity verification service providers engaged by 3taya365 to verify player eligibility.
• Regulatory Authorities: 3taya365 will disclose personal data to PAGCOR, the AMLC, the National Privacy Commission, or other competent Philippine authorities when required by law, court order, or regulatory directive.
• Fraud and Security Providers: Technical and gaming data may be shared with anti-fraud technology partners to detect and prevent fraud, money laundering, and platform abuse.
• Game Providers: Certain gaming activity data is shared with third-party game providers (such as Pragmatic Play, PG Soft, Evolution, and Jili) to the extent necessary to deliver their games through the 3taya365 platform.
• Professional Advisors: Legal, accounting, and compliance advisors engaged by 3taya365 may have access to personal data where necessary in the course of professional services, subject to strict confidentiality obligations.

All third parties with whom 3taya365 shares personal data are required to process that data in accordance with applicable privacy laws and 3taya365's data processing standards. 3taya365 does not permit third parties to use your personal data for their own marketing or commercial purposes.

3taya365 uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small data files stored on your device by your browser when you visit the 3taya365 platform.

3taya365 uses the following categories of cookies:

• Essential Cookies: Required for the platform to function. These include session cookies that maintain your logged-in state during a gaming session. These cannot be disabled without impairing platform functionality.
• Security Cookies: Used to detect and prevent fraudulent login attempts, recognize trusted devices, and support two-factor authentication flows on 3taya365 accounts.
• Analytics Cookies: Aggregated, anonymised data on how players navigate the 3taya365 platform, used to improve user experience and platform performance. These are not linked to your individual identity.
• Preference Cookies: Store your platform preferences such as language settings, game lobby display preferences, and responsible gaming reminder intervals.

You may control non-essential cookies through your browser settings. Note that disabling certain cookies may affect your experience on the 3taya365 platform.

3taya365 implements technical and organisational security measures appropriate to the nature of the personal data processed and the risks involved. These measures include:

• Transport Encryption: All data transmitted between your device and the 3taya365 platform is encrypted using 256-bit SSL/TLS protocols — the same standard used by Philippine commercial banks.
• Password Security: Account passwords are stored using bcrypt hashing with salting. 3taya365 never stores passwords in plain text and cannot retrieve your password — only reset it.
• Access Controls: Access to personal data within 3taya365's systems is restricted on a strict need-to-know basis. All internal access is logged and subject to review.
• Two-Factor Authentication: 3taya365 supports optional two-factor authentication for all account holders, adding a second verification layer to protect against unauthorized login.
• Security Monitoring: 3taya365's security team monitors platform systems around the clock for anomalous access patterns, unauthorized activity, and potential data security incidents.
• KYC Document Security: Identity documents submitted during KYC verification are stored in an isolated, access-restricted document store with heightened encryption and strict internal access policies.

3taya365 retains personal data for as long as is necessary to fulfil the purposes for which it was collected, subject to the following retention guidelines:

• Account and Identity Data: Retained for the duration of your active 3taya365 account, plus a minimum of 5 years following account closure, to comply with PAGCOR regulatory requirements and AML obligations under Philippine law.
• Financial Transaction Data: Retained for a minimum of 5 years from the date of each transaction, in compliance with AMLC record-keeping requirements under RA 9160 as amended.
• Gaming Activity Data: Retained for a minimum of 3 years to support responsible gaming monitoring, dispute resolution, and regulatory reporting.
• Support Communications: Retained for 2 years from the date of the last communication in a support case, to support quality assurance and dispute resolution processes.
• Technical / Log Data: Retained for up to 12 months for security monitoring and platform performance analysis, then permanently deleted or anonymised.
• Marketing Consent Records: Retained for the duration of your consent plus 2 years thereafter, to evidence compliance with consent-based processing rules.

Upon expiry of the applicable retention period, personal data is securely deleted or irreversibly anonymised in accordance with NPC guidelines on data disposal.

Under the Data Privacy Act of 2012, you hold the following rights with respect to your personal data held by 3taya365. These rights may be exercised by contacting our Data Protection Officer using the details in Section 14.

3taya365 will respond to all verifiable data rights requests within 15 calendar days of receipt. Where a request is particularly complex or multiple requests are received, this period may be extended by a further 30 days with prior notice. Requests may be submitted to our Data Protection Officer at the contact details in Section 14.

The 3taya365 platform is strictly restricted to individuals aged 21 years and above, as required by PAGCOR regulations governing online gaming in the Philippines. 3taya365 does not knowingly collect personal data from individuals under the age of 21.

Where 3taya365 discovers or is notified that an account has been created by a person under 21 years of age, the account will be immediately suspended, all associated data will be handled in accordance with the DPA's provisions on sensitive information, and the account and any related funds will be referred for regulatory review.

If you are a parent or guardian and believe that a minor in your household has accessed the 3taya365 platform, please contact our support team immediately via live chat or at [email protected].

Some of 3taya365's third-party game providers and technology partners may process personal data outside of the Philippines. Where such transfers occur, 3taya365 ensures that appropriate safeguards are in place in accordance with Section 21 of the DPA and NPC Advisory Opinion No. 2018-031, including data processing agreements that impose equivalent data protection standards on the receiving party.

3taya365 does not transfer your personal data to jurisdictions that do not provide adequate protection for personal information without implementing the contractual and technical safeguards required under Philippine data protection law.

3taya365 reserves the right to update or modify this Privacy Policy at any time to reflect changes in our data processing practices, applicable Philippine law, or NPC guidance. Where material changes are made, 3taya365 will notify active account holders via the platform's notification system prior to the changes taking effect.

The most current version of this Privacy Policy is always available at 3taya365.vip/privacy-policy. The effective date at the top of this Policy reflects when the current version came into force. We encourage you to review this Policy periodically to stay informed about how 3taya365 protects your data.

Continued use of the 3taya365 platform following the posting of an updated Privacy Policy constitutes your acknowledgement of the revised terms.

3taya365 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012 and NPC Circular 16-01. The DPO is responsible for overseeing compliance with the DPA and this Privacy Policy, and for handling all data subject rights requests and privacy-related inquiries.

You may contact the 3taya365 Data Protection Officer and privacy support team through the following channels:

• Data Rights Requests and Privacy Inquiries:
  Email: [email protected]
  Subject line: "Privacy / Data Rights Request — [Your 3taya365 Username]"
  Response time: Within 15 calendar days of receipt.
• General Support (including account and payment queries):
  Live Chat: Available 24/7 via the platform at 3taya365.vip.
  Average response time: Under 2 hours.

If you are not satisfied with how 3taya365 has handled your privacy inquiry or data rights request, you have the right to escalate your complaint to the National Privacy Commission of the Philippines (NPC) at privacy.gov.ph. For gaming-related regulatory concerns, you may also contact PAGCOR through its published channels.