333Taya Privacy Policy — How We Keep Your Data Safe

1Who We Are — 333Taya as a Data Controller

333Taya operates the online gaming and sports betting platform accessible at 333taya.net. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act No. 10173, or the DPA) and its Implementing Rules and Regulations, 333Taya acts as the personal information controller responsible for the collection, use, and protection of personal data provided by users of this platform.

333Taya is a PAGCOR-licensed operator. Our data processing activities are subject to both PAGCOR's regulatory requirements and the oversight of the National Privacy Commission (NPC) of the Philippines. If you have questions about how 333Taya handles your personal data, you can reach our Data Protection Officer (DPO) at any time — contact details are provided in Section 13 of this Policy.

2What Personal Data 333Taya Collects

333Taya collects the minimum personal data necessary to provide you with a safe, compliant, and functional gaming experience. We do not collect data beyond what is operationally required or legally mandated. Here is a breakdown of the categories of data we collect and typical examples within each category:

333Taya does not collect sensitive personal information as defined by RA 10173 — such as racial or ethnic origin, political opinions, religious beliefs, or health data — except where such information is voluntarily provided in the context of a responsible gaming or self-exclusion request, in which case it is handled with the highest level of protection and used solely for the purpose of processing that request.

3Why 333Taya Collects Your Personal Data

Every piece of data 333Taya collects is tied to a specific, legitimate purpose. We do not collect information speculatively or "just in case." Here are the core reasons we collect and process personal data:

• Account creation and management: To register you as a 333Taya member, verify your identity, and maintain your account in good standing. Without this data, we cannot create or operate your account.
• Age and identity verification: Philippine law and PAGCOR regulations require us to verify that all players are at least 21 years old and are who they say they are. This is non-negotiable under our licence conditions.
• Payment processing: To process deposits and withdrawals to and from your registered Philippine payment methods — GCash, Maya, bank accounts, and cards. We need financial data to route your money safely and correctly.
• Anti-Money Laundering (AML) compliance: As a PAGCOR licensee, 333Taya is legally required to monitor transactions for signs of money laundering or financial crime and to report suspicious activity to the Anti-Money Laundering Council (AMLC) of the Philippines.
• Game integrity and fraud prevention: To detect and prevent multi-accounting, bonus abuse, cheating, and other forms of fraud that harm both 333Taya and other players on the platform.
• Customer support: To respond to your queries, complaints, and requests. We need to be able to look up your account and history to resolve your issue properly.
• Platform improvement: Aggregated and anonymised usage data helps 333Taya understand how players interact with the platform so we can improve the experience — faster load times, better game organisation, more relevant promotions.
• Legal compliance: To comply with any court order, regulatory request, or legal obligation imposed on 333Taya by Philippine law or PAGCOR.

4Legal Basis for Processing Your Data

Under the Philippine Data Privacy Act, 333Taya must have a lawful basis for processing your personal data. The legal bases we rely on are:

• Contract: Processing is necessary to perform the contract between you and 333Taya — i.e., to operate your gaming account, process your payments, and deliver the services you have registered to use.
• Legal obligation: Processing is required for 333Taya to comply with applicable Philippine laws and regulations, including PAGCOR licence conditions, the Anti-Money Laundering Act, and RA 10173 itself.
• Legitimate interests: Processing is necessary for 333Taya's legitimate interests in fraud prevention, platform security, and the safety of other users — provided these interests are not overridden by your own rights and interests.
• Consent: Where we send you marketing communications or use non-essential cookies, we rely on your explicit consent, which you can withdraw at any time.

5How 333Taya Uses Your Personal Data

Beyond the core purposes described in Section 3, here is how your data is used across different functions within the 333Taya platform:

• Personalised experience: Your game history and preferences allow 333Taya to surface relevant game recommendations and promotions. This personalisation is based on your own activity on the platform and is not built on external data purchased from third parties.
• Responsible gaming programme: Your account activity — including session duration, deposit frequency, and betting patterns — is monitored by 333Taya's responsible gaming system to identify potentially problematic behaviour. This monitoring is conducted to protect you, not to sell you more services. Where our system flags a concern, our responsible gaming team may reach out to you proactively.
• Bonus and promotion management: Your transaction and wagering history is used to calculate bonus eligibility, track wagering requirement progress, and verify that promotions are claimed in accordance with their terms.
• Security and fraud detection: Technical data such as your IP address, device fingerprint, and login patterns are used to detect unusual account activity — such as a login from an unfamiliar location or device — and to protect your account from unauthorised access.
• Communications: If you have opted in to receive 333Taya promotional communications, we will send you relevant offers by email or SMS. You can unsubscribe at any time by contacting support@333taya.net or clicking the unsubscribe link in any marketing message.

6Who We Share Your Data With

333Taya does not sell your personal data. We do not share your data with advertising networks, data brokers, or any commercial third party for their own marketing purposes. The entities we share data with are limited to those that help us operate the 333Taya platform safely and legally:

• Payment processors: GCash (GXI), Maya (PayMaya Philippines), BDO, BPI, UnionBank, and other payment providers receive the financial data necessary to process your deposit or withdrawal transaction. Each provider handles this data under their own privacy policies and Philippine BSP regulations.
• PAGCOR: As our regulatory body, PAGCOR has the right to access certain player data as part of its oversight function. This sharing is mandated by our operator licence and is not within our discretion to refuse.
• Anti-Money Laundering Council (AMLC): Where 333Taya is legally required to file a Suspicious Transaction Report (STR) or Covered Transaction Report (CTR) under the Anti-Money Laundering Act, relevant transaction data will be shared with the AMLC.
• Game providers: JILI, Pragmatic Play, Evolution Gaming, and other certified game providers may receive certain technical data necessary to deliver their games within the 333Taya platform. This data is limited to session tokens and game results — no personally identifiable payment data is shared with game providers.
• IT and security service providers: Third-party vendors who provide cloud hosting, cybersecurity monitoring, and platform infrastructure services process data on our behalf under strict data processing agreements that bind them to the same privacy standards as 333Taya.
• Law enforcement: Where required by a valid Philippine court order or lawful law enforcement request, 333Taya will disclose personal data to the extent legally required. We will notify you of such disclosure unless prohibited by law.

7How Long We Keep Your Data

333Taya retains personal data only for as long as is necessary for the purposes it was collected, or as required by applicable Philippine law and PAGCOR regulations. The following retention periods apply:

• Account data and KYC documents: Retained for a minimum of 5 years from the date your account is closed, as required by the Anti-Money Laundering Act and PAGCOR licence conditions.
• Transaction records (deposits, withdrawals, bet history): Retained for a minimum of 5 years from the date of the transaction, in line with AML record-keeping requirements.
• Customer support communications: Retained for 3 years from the date of the last interaction, to allow reference in the event of a future dispute or regulatory inquiry.
• Technical and usage logs: Retained for 12 months for security and fraud investigation purposes, then deleted or anonymised.
• Marketing consent records: Retained until you withdraw consent, plus 1 additional year to evidence the consent history.

At the end of the applicable retention period, your data is either securely deleted or anonymised in a way that makes it impossible to identify you from the remaining data. Anonymised aggregated data may be retained indefinitely for statistical and analytical purposes.

8Cookies and Tracking Technologies

333Taya uses cookies and similar tracking technologies on the 333taya.net platform to make the site function correctly and to understand how players interact with it. A cookie is a small text file placed on your device when you visit a website. Here is how we categorise the cookies 333Taya uses:

Essential cookies are required for 333Taya to function and cannot be disabled. Analytics and optional cookies require your consent, which is requested when you first access the platform. You can withdraw cookie consent at any time by clearing cookies in your browser or contacting our support team.

9How 333Taya Secures Your Personal Data

333Taya takes a layered approach to data security. Technical and organisational measures are in place at every level of the platform to protect your personal information from unauthorised access, disclosure, alteration, or destruction.

• Encryption in transit: All data transmitted between your device and 333Taya is encrypted using TLS 1.2 or higher (the same standard used by Philippine banks). Your personal data is never sent over unencrypted connections.
• Encryption at rest: Sensitive personal data — including payment information, government ID details, and KYC documents — is stored encrypted on 333Taya's servers using AES-256 encryption.
• Access controls: Internal access to personal data is restricted on a strict need-to-know basis. 333Taya staff can only access the data necessary for their specific role. All access is logged and audited regularly.
• Penetration testing: 333Taya's platform undergoes regular third-party security penetration testing to identify and remediate vulnerabilities before they can be exploited.
• Incident response: In the event of a data breach that is likely to result in a risk to your rights and freedoms, 333Taya will notify the National Privacy Commission (NPC) within 72 hours of becoming aware of the breach, and will notify affected users without undue delay.

While 333Taya implements strong security measures, no internet-connected system is entirely immune to risk. You play an important role in securing your own account — use a strong, unique password for 333Taya, do not share your login credentials with anyone, and contact support immediately if you suspect your account has been compromised.

10Your Rights as a 333Taya Data Subject

The Philippine Data Privacy Act gives you a number of rights over your personal data held by 333Taya. These are not just theoretical rights — you can exercise any of them by contacting our Data Protection Officer at the details in Section 13. Here is what each right means in practice:

11Children's Privacy

333Taya's platform is strictly for adults aged 21 and over. We do not knowingly collect, use, or store personal data from individuals under the age of 21. If you believe a minor has registered on 333Taya or provided their personal data to us, please contact us immediately at support@333taya.net and we will take immediate action to close the account and delete the associated data.

Parents and guardians are encouraged to use device-level parental controls to prevent minors from accessing online gambling platforms. 333Taya employs age verification measures at registration, but no technical system is a complete substitute for parental supervision.

12Changes to This Privacy Policy

333Taya reviews this Privacy Policy at least once a year and updates it whenever there are material changes to how we collect or process personal data, or when required by changes in Philippine data protection law or PAGCOR regulations.

When significant changes are made, we will notify you by email to your registered address, or through a prominent notice on the 333Taya platform, at least 14 days before the changes take effect. The revised Policy will always be accessible on this page, with the "Last Updated" date reflecting the most recent version. Your continued use of 333Taya after the effective date of any update constitutes your acceptance of the revised Policy.

13Contact Our Data Protection Officer

If you have questions about this Privacy Policy, want to exercise any of your data subject rights, or wish to raise a concern about how 333Taya handles your personal data, you can reach our Data Protection Officer at:

• Email: dpo@333taya.net
• General Support: support@333taya.net
• Support Chat: Available 24/7 on the 333Taya platform

We aim to acknowledge all data privacy enquiries within 5 business days and resolve them within 30 days. For formal complaints that cannot be resolved directly with 333Taya, you may escalate to the National Privacy Commission of the Philippines at privacy.gov.ph.

This Privacy Policy was last reviewed and updated in June 2025 and supersedes all previous versions published on 333taya.net prior to this date.