Privacy Policy – 222taya Casino

222taya is committed to protecting the privacy and personal data of every player on our platform. We understand that trust is the foundation of any good relationship – and that trust starts with being transparent about how we handle your information.

This Policy applies to all personal data collected through the 222taya website, mobile browser experience, customer support channels, and any other touchpoints where you interact with 222taya. It covers data collected from players based in the Philippines and is designed to comply with the Data Privacy Act of 2012 (Republic Act No. 10173) and its Implementing Rules and Regulations, as enforced by the National Privacy Commission (NPC).

Please read this Policy carefully. If you have questions about how we handle your personal data, you can reach our Data Protection Officer at [email protected].

For the purposes of the Data Privacy Act of 2012, 222taya acts as the Personal Information Controller in respect of the personal data collected through the 222taya platform. This means we determine the purposes and means by which your personal data is processed.

Where we engage third-party service providers to process data on our behalf (for example, payment processors or identity verification services), those parties act as Personal Information Processors and are contractually bound to process your data only in accordance with our instructions and applicable Philippine data privacy law.

222taya collects the following categories of personal data:

Registration and Account Data:

• Full legal name, date of birth, and gender;
• Email address and mobile phone number;
• Username and encrypted password;
• Residential address (city, province, postal code).

Identity Verification (KYC) Data:

• Government-issued photo ID (e.g., PhilSys National ID, passport, driver's license, SSS/GSIS ID);
• Selfie photograph for identity matching;
• Proof of address documents;
• Proof of payment method ownership.

Financial Data:

• GCash or PayMaya account details (registered name and number);
• Bank account details for BPI, B DO, Metrobank, or other Philippine banks;
• Transaction history (deposits, withdrawals, wager amounts).

Technical and Usage Data:

• IP address, device type, browser type and version, operating system;
• Pages visited, time spent on pages, game sessions played;
• Cookies and similar tracking technologies (see Section 9).

Communications Data:

• Records of your correspondence with our customer support team via live chat or email;
• Responses to surveys or promotions you voluntarily participate in.

222taya collects personal data through the following means:

• Directly from you – when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or participate in a promotion;
• Automatically – through cookies, web beacons, and server logs when you browse or use the 222taya platform;
• From third parties – including identity verification providers, payment processors (GCash, PayMaya, BPI, BDO, Metrobank), and fraud prevention services, where necessary to verify your identity or process transactions;
• From PAGCOR or other regulatory bodies – where we are required by law to receive or share information for regulatory compliance purposes.

222taya uses your personal data for the following purposes:

• Account management: To create, maintain, and secure your 222taya account;
• Identity verification: To comply with PAGCOR KYC requirements and the Anti-Money Laundering Act of the Philippines;
• Transaction processing: To process deposits and withdrawals via GCash, PayMaya, and Philippine bank transfers;
• Customer support: To respond to your enquiries, complaints, and support requests;
• Responsible gaming: To monitor gameplay patterns and identify players who may be at risk of problem gambling, and to enforce self-exclusion requests;
• Fraud prevention and security: To detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
• Legal compliance: To meet our obligations under Philippine law, including reporting requirements to PAGCOR and the Anti-Money Laundering Council (AMLC);
• Platform improvement: To analyze usage patterns and improve the 222taya platform, games, and user experience;
• Marketing communications: To send you promotional offers and updates about 222taya, where you have consented to receive such communications. You may opt out at any time.

Under the Data Privacy Act of 2012, 222taya processes your personal data on the following legal bases:

• Contractual necessity: Processing required to perform our contract with you – i.e., to operate your account, process transactions, and provide gaming services;
• Legal obligation: Processing required to comply with Philippine law, including PAGCOR regulations, the Anti-Money Laundering Act, and the Data Privacy Act itself;
• Legitimate interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and improving our services, where these interests are not overridden by your rights;
• Consent: For optional processing activities such as marketing communications, where we rely on your freely given, specific, and informed consent. You may withdraw consent at any time without affecting the lawfulness of prior processing.

222taya does not sell, rent, or trade your personal data to third parties for their own marketing purposes. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:

• Payment processors: GCash, PayMaya, BPI, BDO, Metrobank, Visa, and Mastercard, to process your deposits and withdrawals;
• Identity verification providers: Third-party KYC and anti-fraud service providers engaged to verify your identity and detect suspicious activity;
• Regulatory authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law or court order;
• IT and infrastructure providers: Cloud hosting and data storage providers who process data on our behalf under strict data processing agreements;
• Professional advisers: Lawyers, auditors, and accountants, where necessary for legal or compliance purposes.

222taya retains your personal data for as long as necessary to fulfill the purposes for which it was collected, and to comply with our legal and regulatory obligations. Specifically:

• Account data: Retained for the duration of your account and for a minimum of five (5) years after account closure, in accordance with PAGCOR record-keeping requirements;
• KYC and identity documents: Retained for a minimum of five (5) years after the end of the business relationship, as required by the Anti-Money Laundering Act;
• Transaction records: Retained for a minimum of five (5) years from the date of each transaction;
• Customer support records: Retained for three (3) years from the date of the last interaction;
• Marketing consent records: Retained until you withdraw consent, plus a reasonable period thereafter for compliance documentation purposes.

When personal data is no longer required, it is securely deleted or anonymized in accordance with our data disposal procedures.

222taya uses cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small text files stored on your device that help us recognize you, remember your preferences, and analyze how you use our platform.

We use the following types of cookies:

• Essential cookies: Required for the platform to function correctly. These include session cookies that keep you logged in and security cookies that protect against fraud. These cannot be disabled;
• Analytics cookies: Used to collect anonymized data about how players use the 222taya platform, helping us identify areas for improvement;
• Preference cookies: Used to remember your settings and preferences, such as language and display options;
• Marketing cookies: Used to deliver relevant promotional content. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Please note that disabling certain cookies may affect the functionality of the 222taya platform.

222taya implements a comprehensive set of technical and organizational security measures to protect your personal data against unauthorized access, disclosure, alteration, or destruction. These measures include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and our servers;
• Encryption of sensitive data at rest, including KYC documents and financial information;
• Strict role-based access controls limiting employee access to personal data on a need-to-know basis;
• Regular security audits and penetration testing of our platform infrastructure;
• Multi-factor authentication requirements for administrative access to our systems;
• Continuous monitoring for suspicious activity and potential security incidents.

While we take all reasonable steps to protect your data, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect any unauthorized access to your account.

Under the Data Privacy Act of 2012, you have the following rights with respect to your personal data held by 222taya:

• Right to be informed: The right to know what personal data we collect, how we use it, and with whom we share it – as described in this Policy;
• Right of access: The right to request a copy of the personal data we hold about you;
• Right to rectification: The right to request correction of inaccurate or incomplete personal data;
• Right to erasure: The right to request deletion of your personal data, subject to our legal retention obligations;
• Right to object: The right to object to certain types of processing, including direct marketing;
• Right to data portability: The right to receive your personal data in a structured, commonly used format;
• Right to lodge a complaint: The right to file a complaint with the National Privacy Commission (NPC) if you believe your data privacy rights have been violated.

To exercise any of these rights, please contact our Data Protection Officer at [email protected]. We will respond to all verified requests within thirty (30) days, as required by Philippine law.

The 222taya platform is strictly intended for adults aged 21 years and above, in accordance with Philippine gaming regulations. We do not knowingly collect personal data from individuals under the age of 21.

If we become aware that personal data has been collected from a person under 21 years of age, we will immediately suspend the associated account, delete the personal data, and void any transactions made. If you believe a minor has registered on 222taya, please notify us immediately at [email protected].

222taya reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data practices, legal requirements, or platform features. When we make material changes, we will notify registered players via email or an in-platform notification prior to the changes taking effect.

The "Last Updated" date at the top of this Policy indicates when it was most recently revised. Your continued use of the 222taya platform after any amendments constitutes your acceptance of the updated Policy. We encourage you to review this Policy periodically.

If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact our Data Protection Officer:

You also have the right to lodge a complaint directly with the National Privacy Commission (NPC) of the Philippines if you believe your data privacy rights have not been respected. The NPC can be reached through their official government channels.