Privacy Policy – How 00taya Protects Your Data

1. Introduction

1.1 This Privacy Policy ("Policy") describes how 00taya ("we," "us," or "our") collects, uses, stores, and discloses personal information obtained from individuals ("you," "Member," or "User") who register for or use the 00taya online gaming platform, accessible at https://00taya.com.

1.2 By creating an account with 00taya or by continuing to use the platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein. If you do not agree with this Policy, you should not register an account or use the platform.

1.3 This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together form the complete agreement governing your use of 00taya.

1.4 00taya is committed to protecting the privacy of all its members, including Filipino players across Metro Manila, Cebu, Davao, Quezon City, Makati, and throughout the archipelago. We take our obligations under applicable Philippine data protection legislation seriously and review this Policy regularly to ensure it remains accurate and up to date.

2. Personal Data We Collect

2.1 Registration Data. When you create a 00taya account, we collect: full name, date of birth, email address, mobile number, residential address, and a username and password of your choosing. This information is required to verify your identity, comply with Know Your Customer (KYC) obligations, and operate your account.

2.2 Identity Verification Documents. To comply with anti-money laundering regulations and PAGCOR guidelines, we may request copies of government-issued identification (such as a Philippine passport, SSS ID, UMID, or driver's license) and proof of address (such as a utility bill or bank statement). These documents are processed securely and retained only as long as required by law.

2.3 Financial Data. We collect information about your deposits, withdrawals, and transaction history on the platform. We also collect payment method details (such as GCash account references, PayMaya details, or bank account information for BPI, BDO, or Metrobank transfers) to process your transactions. Full payment card numbers, if applicable, are never stored on our servers.

2.4 Gaming Activity Data. We collect records of your gaming sessions, including games played, bets placed, outcomes, bonus usage, and session duration. This data is used to operate the platform, detect fraud, and support responsible gaming monitoring.

2.5 Technical Data. When you access 00taya, we automatically collect certain technical information, including: IP address, device type and operating system, browser type and version, referring URLs, pages visited, and session timestamps. This data is collected via cookies and server logs.

2.6 Communications Data. If you contact our support team via live chat or email, we retain records of those communications to resolve your query and improve our service quality.

2.7 Voluntary Data. You may choose to provide additional information, such as preferences or feedback, through surveys or optional profile fields. Providing this information is entirely voluntary.

3. How We Use Your Personal Data

3.1 00taya uses your personal data for the following purposes:

• Account Management: To create, maintain, and administer your 00taya account, including processing deposits and withdrawals;
• Identity Verification: To verify your age (21+) and identity in compliance with KYC and anti-money laundering requirements;
• Service Delivery: To provide access to games, promotions, bonuses, and all other platform features;
• Fraud Prevention: To detect, investigate, and prevent fraudulent activity, cheating, money laundering, and other prohibited conduct;
• Responsible Gaming: To monitor gaming patterns and enforce responsible gaming tools such as deposit limits, loss limits, and self-exclusion;
• Customer Support: To respond to your queries, complaints, and requests for assistance;
• Legal Compliance: To comply with applicable Philippine laws, PAGCOR regulations, and any lawful requests from regulatory or law enforcement authorities;
• Platform Improvement: To analyze usage patterns and improve the functionality, security, and user experience of the 00taya platform;
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates, where you have consented to receive such communications. You may opt out at any time.

4. Legal Basis for Processing

4.1 00taya processes your personal data on the following legal bases:

• Contractual Necessity: Processing required to perform our contract with you (i.e., to operate your account and provide gaming services);
• Legal Obligation: Processing required to comply with applicable laws and regulations, including KYC, AML, and PAGCOR requirements;
• Legitimate Interests: Processing necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, where these interests are not overridden by your rights;
• Consent: Processing based on your explicit consent, such as for marketing communications. You may withdraw consent at any time without affecting the lawfulness of prior processing.

5. Data Sharing and Disclosure

5.1 00taya does not sell, rent, or trade your personal data to third-party marketers or advertisers under any circumstances.

5.2 We may share your personal data with the following categories of third parties, strictly on a need-to-know basis:

• Payment Processors: GCash, PayMaya, BPI, BDO, Metrobank, and other payment service providers, to process your deposits and withdrawals;
• Identity Verification Providers: Third-party KYC and AML compliance service providers who assist us in verifying member identities;
• Game Providers: Licensed game software providers whose games are hosted on the 00taya platform, to the extent necessary to deliver gaming services;
• IT and Security Providers: Cloud hosting, cybersecurity, and technical infrastructure providers who support the operation of the platform;
• Regulatory and Law Enforcement Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), and other Philippine government bodies, where required by law or regulation;
• Professional Advisors: Legal, accounting, and auditing firms, subject to professional confidentiality obligations.

5.3 All third parties with whom we share personal data are required to process that data in accordance with applicable data protection laws and our data processing agreements.

6. Cookies and Tracking Technologies

6.1 00taya uses cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device when you visit our website.

6.2 We use the following types of cookies:

• Essential Cookies: Required for the platform to function correctly, including session management and security features. These cannot be disabled.
• Performance Cookies: Used to collect anonymized data about how members use the platform, helping us identify and fix issues and improve performance.
• Functional Cookies: Used to remember your preferences, such as language settings and display options.
• Analytics Cookies: Used to understand aggregate usage patterns and improve the overall user experience.

6.3 You can manage or disable non-essential cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the 00taya platform.

7. Data Retention

7.1 00taya retains your personal data for as long as your account is active and for a period thereafter as required by applicable law. Specifically:

• Account and transaction records are retained for a minimum of five (5) years following account closure, in compliance with Philippine AML regulations;
• Identity verification documents are retained for the period required by PAGCOR and AMLC regulations;
• Support communications are retained for two (2) years from the date of the interaction;
• Technical and log data is retained for up to twelve (12) months.

7.2 Upon expiry of the applicable retention period, personal data is securely deleted or anonymized in accordance with our data disposal procedures.

8. Data Security

8.1 00taya implements appropriate technical and organizational measures to protect your personal data against unauthorized access, accidental loss, destruction, or disclosure. These measures include:

• SSL/TLS encryption for all data transmitted between your device and our servers;
• Encrypted storage of sensitive personal and financial data;
• Access controls limiting data access to authorized personnel only;
• Regular security audits and vulnerability assessments;
• Staff training on data protection and information security.

8.2 While we take all reasonable precautions, no online platform can guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and for notifying us immediately if you suspect unauthorized access to your account.

9. Your Data Rights

9.1 Subject to applicable Philippine law, you have the following rights in relation to your personal data held by 00taya:

• Right of Access: You may request a copy of the personal data we hold about you;
• Right to Rectification: You may request correction of inaccurate or incomplete personal data;
• Right to Erasure: You may request deletion of your personal data, subject to our legal retention obligations;
• Right to Restriction: You may request that we restrict processing of your personal data in certain circumstances;
• Right to Data Portability: You may request a copy of your data in a structured, machine-readable format;
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes;
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw that consent at any time.

9.2 To exercise any of these rights, please contact our support team via live chat or at [email protected]. We will respond to your request within thirty (30) days. We may need to verify your identity before processing your request.

10. Children's Privacy

10.1 The 00taya platform is strictly intended for adults aged 21 years and above, in accordance with Philippine regulations. We do not knowingly collect personal data from individuals under the age of 21.

10.2 If we become aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete that data and close the associated account. If you believe a minor has registered on our platform, please contact us immediately at [email protected].

11. International Data Transfers

11.1 Your personal data is primarily processed and stored on servers located within or serving the Philippines . Where data is transferred to or processed by service providers located outside the Philippines, 00taya ensures that appropriate safeguards are in place to protect your personal data, including contractual protections equivalent to those required under Philippine law.

11.2 By using the 00taya platform, you consent to the transfer of your personal data to third-party service providers in other jurisdictions where necessary to deliver our services, subject always to the protections described in this Policy.

12. Third-Party Links

12.1 The 00taya platform may contain links to third-party websites or services. This Privacy Policy applies solely to the 00taya platform and does not cover the privacy practices of any third-party sites. We encourage you to review the privacy policies of any third-party sites you visit.

12.2 00taya is not responsible for the content, privacy practices, or data handling of any third-party websites, even if accessed via a link on our platform.

13. Updates to This Policy

13.1 00taya reserves the right to update or amend this Privacy Policy at any time. Where changes are material, we will notify registered members via email or a prominent notice on the platform prior to the changes taking effect.

13.2 The date at the top of this Policy indicates when it was last reviewed. Your continued use of the 00taya platform following any update constitutes your acceptance of the revised Policy. If you do not agree with the updated Policy, you should cease using the platform and may request account closure.

13.3 We recommend that all members review this Policy periodically to stay informed of how 00taya protects their personal information.

14. Contact Us

14.1 If you have any questions, concerns, or requests regarding this Privacy Policy or the way 00taya handles your personal data, please contact our Data Privacy team through the live chat feature available inside your account dashboard.

14.2 You may also reach us by email at: [email protected]. Our support team is available daily from 8:00 AM to 12:00 midnight, Philippine Standard Time (PST).

14.3 If you believe your data protection rights have not been adequately addressed, you may lodge a complaint with the relevant Philippine regulatory authority responsible for data protection matters.