Taya Link Privacy Policy – How We Protect Your Personal Data

This Privacy Policy describes how taya link ("we," "us," or "our") collects, uses, stores, and protects the personal information of players and visitors who access the taya link website and gaming platform at tayalink.best ("the Platform").

We take your privacy seriously. As a platform built specifically for Filipino players, we understand that trust is everything — and that trust starts with being transparent about how your data is handled. This policy is written to be read and understood, not to be skipped.

By registering an account or using the Platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with how we handle personal data, please do not use the Platform.

This Privacy Policy works alongside our Terms and Conditions and our Responsible Gaming policy. Where any documents conflict, this Privacy Policy governs data-related matters.

Taya link operates the online gaming platform accessible at tayalink.best. For the purposes of data protection law, taya link is the personal information controller responsible for determining the purposes and means of processing your personal data.

If you have any questions or concerns about how your personal information is handled, you can contact our designated Data Protection Officer (DPO) at any time. Contact details are provided in Section 14 of this policy.

Taya link collects personal data that is necessary to operate the Platform, process transactions, verify identities, and comply with applicable legal requirements. The categories of data we may collect include:

We do not collect sensitive personal information such as racial or ethnic origin, political opinions, religious beliefs, or biometric data beyond what is strictly required for identity verification purposes.

Personal data is collected through several channels when you interact with the taya link platform:

• Directly from you — when you complete the registration form, submit KYC documents, make a deposit or withdrawal, contact support, or fill out any other form on the Platform.
• Automatically — through cookies, server logs, and tracking technologies when you browse the Platform. This includes your IP address, device information, and pages visited.
• From payment providers — when you initiate a transaction via GCash, Maya, InstaPay, or your bank, we receive confirmation data necessary to process the payment.
• From identity verification services — when completing KYC, your submitted documents may be cross-referenced with third-party verification providers to confirm authenticity.
• From fraud prevention services — technical and behavioural signals may be assessed by third-party fraud detection systems to protect all players on the Platform.

Taya link uses personal data only for specific, legitimate purposes. We do not process data in ways that are incompatible with the purposes for which it was collected. The primary purposes include:

• Account management: Creating and maintaining your player account, processing login authentication, and managing your account preferences.
• Transaction processing: Handling deposits and withdrawals accurately and securely through Philippine payment channels.
• Identity verification: Completing KYC checks required for withdrawals and to comply with anti-money laundering (AML) obligations.
• Gaming services: Operating casino games, sports betting, and live dealer tables; recording bets and crediting winnings accurately.
• Bonus and promotions administration: Tracking wagering requirements, validating promotional eligibility, and crediting bonus funds correctly.
• Responsible gaming: Monitoring gaming patterns to identify potential signs of problem gambling and enforcing any limits you have set on your account.
• Customer support: Responding to queries, resolving disputes, and improving the quality of our support services.
• Security and fraud prevention: Detecting and preventing unauthorised access, suspicious transactions, and account abuse.
• Legal compliance: Meeting obligations under the Philippine Data Privacy Act, AML regulations, and any other applicable laws.
• Platform improvement: Analysing aggregated, anonymised usage data to improve the user experience and game offering.

Under the Philippine Data Privacy Act and its Implementing Rules, taya link processes personal data based on the following lawful grounds:

• Consent: Where you have given clear, informed consent — for example, to receive marketing communications or for specific optional data uses.
• Contractual necessity: Processing required to perform the contract between you and taya link — including operating your account, processing transactions, and providing gaming services.
• Legal obligation: Processing required to comply with applicable laws, including KYC/AML obligations, tax reporting, and regulatory requirements.
• Legitimate interests: Processing for purposes such as fraud prevention, platform security, and aggregated analytics, where our interests are not overridden by your rights and freedoms.

Where consent is the basis for processing, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that occurred prior to withdrawal.

Taya link does not sell your personal data. We may share it with the following categories of recipients only where necessary and with appropriate safeguards in place:

• Payment processors: GCash, Maya, GrabPay, Coins.ph, InstaPay partners, and Philippine banks — solely to process your deposit and withdrawal transactions.
• Identity verification providers: Third-party KYC service providers used to verify the authenticity of government-issued IDs submitted by players.
• Fraud and security services: Specialised providers that help us detect fraudulent activity, bot traffic, and unauthorised account access.
• Gaming technology providers: Game studios and platform technology partners who power specific games or features on taya link. These providers are contractually bound to handle data securely and only for the specified purpose.
• Regulatory and law enforcement authorities: The National Privacy Commission (NPC), PAGCOR, law enforcement agencies, or courts — where we are legally required to disclose information.
• Professional advisors: Legal, accounting, and compliance professionals engaged by taya link, subject to confidentiality obligations.

Taya link retains personal data only for as long as it is necessary for the purposes for which it was collected, or as required by law. General retention guidelines are as follows:

• Active accounts: All personal data associated with your account is retained for as long as your account remains active.
• Closed accounts: After account closure, personal and financial data is retained for a minimum of five (5) years to comply with AML regulations and potential legal proceedings. Gaming transaction records may be retained for the same period.
• KYC documents: Identity verification records are retained for the period required by Philippine anti-money laundering law, typically five years from the date of the last transaction.
• Support communications: Customer support records are retained for two years from the date of the interaction.
• Technical logs: Server and access logs are retained for up to 12 months for security purposes, then securely deleted.

After the applicable retention period expires, personal data is securely deleted or anonymised so that it can no longer be associated with an individual player.

As a player and data subject under the Philippine Data Privacy Act, you have the following rights regarding your personal information held by taya link:

To exercise any of these rights, contact our Data Protection Officer at support@tayalink.best with your account details and a description of the right you wish to exercise. We will respond within 15 working days. Some requests may require identity verification before we can action them.

The taya link platform uses cookies and similar tracking technologies to ensure the platform functions correctly, to secure your session, and to analyse how the platform is used. Here is what we use and why:

• Essential cookies: Required for the platform to function. These maintain your login session, remember your language preference, and handle the shopping cart equivalent for the cashier. These cannot be disabled without breaking platform functionality.
• Security cookies: Used to detect and prevent fraud and unauthorised access. They track login attempts and flag suspicious activity.
• Analytics cookies: We use anonymised, aggregated analytics to understand which parts of the platform are most used, where players encounter issues, and how to improve the experience. No personally identifiable information is transmitted in these analytics.
• Preference cookies: Store your settings such as notification preferences and display options so you don't need to reconfigure them each visit.

Taya link does not use third-party advertising cookies or allow ad networks to track your behaviour across websites. The cookies we use are strictly functional and analytical in nature.

You can manage or delete cookies through your browser settings. Note that disabling essential cookies will affect your ability to log in and use the Platform correctly.

Data security at taya link is not an afterthought — it's built into the platform from the ground up. The technical and organisational measures we have in place include:

• 256-bit SSL/TLS encryption for all data transmitted between your device and the Platform.
• Two-factor authentication (2FA) available for all accounts and required for high-value withdrawals.
• Encrypted storage of sensitive data at rest, including KYC documents and financial records.
• Role-based access controls ensuring staff can only access the data necessary for their specific functions.
• Regular security audits and penetration testing by independent third parties.
• 24/7 automated monitoring for unusual activity, including multiple failed login attempts and unusual transaction patterns.
• Mandatory data security training for all staff who handle personal information.
• Incident response procedures that are reviewed and updated regularly.

While we apply industry-leading security practices, no system can be completely impenetrable. We encourage players to use a strong, unique password for their taya link account and to enable two-factor authentication. If you suspect your account has been compromised, contact support immediately.

The taya link platform is intended strictly for adults aged 18 and above. We do not knowingly collect personal information from anyone under the age of 18.

If we become aware that a player under 18 has registered an account or provided personal data, we will suspend the account immediately and securely delete all associated personal information. If you are a parent or guardian and believe your child has accessed the Platform, please contact us immediately at support@tayalink.best.

Age verification is conducted as part of the KYC process. We reserve the right to request proof of age at any time and to suspend accounts pending verification.

Taya link may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or operational needs. When material changes are made, we will:

• Update the "Last Updated" date at the top of this page.
• Display a prominent notice on the Platform when you next log in, where the changes are significant.
• Send an email notification to your registered address for substantial changes affecting your rights.

We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any changes take effect constitutes acceptance of the updated policy. If you do not agree with the revised policy, please stop using the Platform and contact support to request account closure.

Previous versions of this Privacy Policy are available upon request by contacting our Data Protection Officer.

If you have any questions about this Privacy Policy, want to exercise any of your data subject rights, or wish to raise a privacy concern, please contact our Data Protection Officer:

• Email: support@tayalink.best — mark your subject line "Privacy / Data Request" for faster routing.
• Live Chat: Available through the Platform during operating hours for general privacy questions.

We will acknowledge your privacy-related request within two (2) working days and aim to provide a full response within fifteen (15) working days. Complex requests may take longer; we will keep you informed of progress.

If you are not satisfied with how taya link has handled your personal data or addressed your complaint, you have the right to escalate the matter to the National Privacy Commission of the Philippines (NPC). The NPC handles complaints from data subjects whose rights under the Data Privacy Act may have been violated.