SM Taya365 Privacy Policy

1 Overview

SM Taya365 ("we," "us," or "our") is committed to protecting the privacy and personal data of every player who uses our platform at smtaya365.com. This Privacy Policy explains how we collect, use, store, and protect your information when you register, log in, play games, make transactions, or otherwise interact with our services.

This policy applies to all users of the SM Taya365 website and any related services, regardless of how you access our platform — whether via desktop browser, mobile browser, or any other connected device.

By creating an account on SM Taya365 or continuing to use our platform, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with any part of it, please stop using our services and contact us to request account closure.

This Privacy Policy should be read alongside our Terms and Conditions and our Responsible Gaming Policy, which together form the full agreement governing your relationship with SM Taya365.

2 Personal Data We Collect

SM Taya365 collects personal data that is necessary for us to provide our services, meet our legal obligations, and deliver the best possible experience to Filipino players. Here is a breakdown of the categories of data we collect:

2.1 Information You Provide Directly

• Identity Information: Full legal name, date of birth, nationality, and government-issued ID number.
• Contact Details: Email address, Philippine mobile number, and residential address.
• Account Credentials: Username and encrypted password.
• Payment Information: GCash number, Maya account, bank account details, or card information used for deposits and withdrawals. Note: full card numbers are never stored on our servers.
• Verification Documents: Copies of government-issued IDs (e.g., Philippine passport, driver's licence, PhilSys national ID), utility bills for proof of address, and selfies for liveness verification.

2.2 Information Collected Automatically

• Device and Browser Data: IP address, device type, operating system, browser type and version.
• Usage Data: Pages visited, games played, betting history, session duration, and click patterns.
• Location Data: Approximate geographic location derived from your IP address to verify you are accessing from an eligible region.
• Cookies and Tracking Technologies: As described in Section 5 of this policy.

2.3 Information from Third Parties

• Identity verification data from licensed KYC and AML service providers.
• Payment verification data from payment processors and e-wallet providers (GCash, Maya, etc.).
• Fraud screening data from authorised risk management partners.

3 How We Use Your Personal Data

SM Taya365 uses the personal data we collect for the following specific purposes:

• Account Registration and Management: To create, verify, and maintain your player account on SM Taya365.
• Identity Verification (KYC): To confirm your identity and age in accordance with Philippine regulatory requirements for online gambling operators.
• Processing Transactions: To handle deposits, withdrawals, and refunds through your chosen payment method.
• Anti-Money Laundering (AML) Compliance: To monitor transactions for suspicious activity and report to relevant Philippine authorities as required by law.
• Customer Support: To respond to your queries, complaints, and requests in a timely and effective manner.
• Marketing Communications: To send you promotions, bonus offers, and platform updates — but only if you have opted in to receive these. You can opt out at any time.
• Personalisation: To tailor the gaming experience and promotional offers to your preferences and betting behaviour.
• Responsible Gaming: To monitor your account activity for signs of problem gambling and apply any self-imposed limits or exclusions you have requested.
• Platform Security and Fraud Prevention: To detect, investigate, and prevent fraudulent activities, cheating, or misuse of the SM Taya365 platform.
• Legal and Regulatory Obligations: To comply with applicable Philippine laws, court orders, and regulatory directives.
• Service Improvement: To analyse usage patterns and improve the features, performance, and overall quality of the SM Taya365 platform.

4 Legal Basis for Processing

Under the Philippine Data Privacy Act (RA 10173), SM Taya365 processes your personal data based on the following lawful grounds:

• Contract Performance: Processing is necessary to perform our obligations under our Terms and Conditions — including account management, game provision, and payment processing.
• Legal Obligation: Processing is required to comply with Philippine laws, including AMLA, PAGCOR regulations, and NPC directives.
• Legitimate Interest: Processing is carried out for fraud prevention, platform security, and service improvement, where these interests do not override your privacy rights.
• Consent: For optional processing such as marketing communications and certain cookie use, we rely on your freely given, specific, informed consent. You may withdraw consent at any time.

5 Cookies and Tracking Technologies

SM Taya365 uses cookies and similar tracking technologies to enhance your browsing experience, remember your preferences, and gather analytics data that helps us improve our platform.

Types of Cookies We Use

• Essential Cookies: Required for the platform to function properly. These enable features like login sessions, game loading, and secure transactions. You cannot opt out of these.
• Analytics Cookies: Help us understand how players interact with SM Taya365 — which pages are visited most, where players drop off, and how to improve the experience. These are only set with your consent.
• Preference Cookies: Remember your language, display settings, and other personalisation choices to provide a more tailored experience.
• Marketing Cookies: Used to deliver relevant promotional content and measure the effectiveness of our campaigns. These are only set with your consent.

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies may affect the functionality of the SM Taya365 platform. Withdrawing consent for non-essential cookies will not affect previously collected data.

6 Sharing Your Personal Data

SM Taya365 does not sell, rent, or trade your personal data to third parties. We only share your data in the following specific, controlled circumstances:

• Service Providers: Trusted third-party vendors who support our operations — such as KYC verification providers, payment processors (GCash, Maya, BDO, BPI, etc.), cloud infrastructure providers, and customer support tools. These providers are bound by data processing agreements and are prohibited from using your data for any other purpose.
• Regulatory and Law Enforcement Authorities: Philippine government agencies, PAGCOR, the Anti-Money Laundering Council (AMLC), or law enforcement bodies, where disclosure is required by law, court order, or regulatory directive.
• Fraud Prevention Networks: Shared in an anonymised or pseudonymised format with authorised industry fraud prevention partners to protect all players across the platform.
• Business Transfers: In the event of a merger, acquisition, or sale of SM Taya365, your data may be transferred to the new entity. You will be notified of such changes in advance.

All third parties with whom we share data are required to maintain appropriate security standards and may only use your data for the specific purpose for which it was shared.

7 Data Retention

SM Taya365 retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law.

• Active Accounts: Personal data is retained for the duration of your account's active status and for a period of at least five (5) years after account closure, in accordance with AMLA and gaming regulations.
• Transaction Records: Financial transaction records are retained for a minimum of five (5) years to comply with anti-money laundering requirements.
• KYC Documents: Identity verification documents are retained for the legally required period following your last transaction or account activity.
• Marketing Data: Retained only while you remain opted in. Once you withdraw consent, marketing data is deleted or anonymised within 30 days.
• Self-Excluded Accounts: Details of self-excluded players are retained for the full duration of the exclusion period to prevent re-registration.

When personal data is no longer required, SM Taya365 securely deletes or anonymises it in accordance with our data disposal procedures.

8 Security Measures

Protecting your personal data is a top priority at SM Taya365. We implement a comprehensive set of technical and organisational security measures to safeguard your information against unauthorised access, disclosure, alteration, or destruction.

• TLS/SSL Encryption: All data transmitted between your browser and SM Taya365 is encrypted using 256-bit SSL/TLS protocols.
• Password Hashing: Account passwords are never stored in plain text. They are hashed using industry-standard algorithms before storage.
• Access Controls: Access to personal data within SM Taya365 is strictly limited to authorised personnel on a need-to-know basis, enforced through role-based access controls.
• Firewalls and Intrusion Detection: Our infrastructure is protected by enterprise-grade firewalls, intrusion detection systems, and regular vulnerability assessments.
• Two-Factor Authentication (2FA): Available for all SM Taya365 player accounts to add an extra layer of protection at login.
• Regular Security Audits: We conduct periodic internal and third-party security audits to identify and address potential vulnerabilities.
• Incident Response Plan: In the event of a data breach, SM Taya365 has a documented incident response plan and will notify affected users and the NPC within the timeframes required by RA 10173.

9 Your Data Subject Rights

Under the Philippine Data Privacy Act, you have the following rights with respect to the personal data SM Taya365 holds about you. We take these rights seriously and have processes in place to honour them promptly.

To exercise any of these rights, please contact our Data Protection Officer at privacy@smtaya365.com. We will respond to all valid requests within fifteen (15) business days.

10 Children's Privacy

SM Taya365 is strictly an adult platform. Our services are only available to individuals who are at least 21 years of age. We do not knowingly collect personal data from anyone under the age of 21.

If we discover that a user has registered and is under the legal age, their account will be immediately suspended and all data associated with the underage account will be deleted from our systems, except where retention is required for legal or regulatory reasons.

If you are a parent or guardian and believe your child has registered on SM Taya365, please contact us immediately at privacy@smtaya365.com and we will take prompt action.

11 Third-Party Links

The SM Taya365 website does not contain links to external third-party websites as a matter of policy. However, in the event that any such link exists on our platform, please be aware that SM Taya365 has no control over the privacy practices or content of external websites.

We encourage you to review the privacy policy of any external platform before sharing your personal data with them. SM Taya365 is not responsible for the data handling practices of third-party websites.

12 Updates to This Privacy Policy

SM Taya365 may update this Privacy Policy from time to time to reflect changes in our data practices, new regulatory requirements, or improvements to our services. When we make material changes, we will notify registered users by email and/or by placing a prominent notice on our website.

The "Last Updated" date at the top of this page reflects when the current version of the policy took effect. Your continued use of SM Taya365 after any updates constitutes your acceptance of the revised policy.

We encourage you to review this Privacy Policy periodically so you always know how your personal data is being handled. If you have any concerns about an update, please contact our Data Protection Officer before continuing to use the platform.

13 Contact Our Data Protection Officer

SM Taya365 has designated a Data Protection Officer (DPO) to oversee our compliance with the Philippine Data Privacy Act and to handle all privacy-related inquiries and requests from our players.

If you have any questions about this Privacy Policy, wish to exercise your data subject rights, or want to raise a privacy concern, you can reach our DPO through the following channels:

• Email: privacy@smtaya365.com
• General Support Email: support@smtaya365.com
• Live Chat: Available 24/7 on the SM Taya365 platform
• FAQ: Visit our FAQ page for common privacy questions

We aim to acknowledge all privacy-related inquiries within two (2) business days and to fully resolve requests within fifteen (15) business days. For complex requests, we will keep you informed of progress throughout the process.