77Taya Privacy Policy – How We Protect Your Personal Data

Welcome to the 77Taya Privacy Policy. This document explains how 77Taya – the operator of the online betting and gaming platform at 77taya.best – handles the personal information of its members, visitors, and anyone who interacts with the platform.

Privacy is not a box-ticking exercise for us. Filipino members share real personal and financial information when they register and transact at 77Taya, and we take the responsibility of handling that information seriously. This Privacy Policy is written to be clear, honest, and useful – not to be something you have to wade through a dozen pages of legalese to understand.

By registering an account at 77Taya or using any part of the platform at 77taya.best, you acknowledge that you have read this Privacy Policy and that you consent to the collection and use of your personal data as described here. If you do not agree with this policy, please do not use the 77Taya platform.

This Privacy Policy should be read alongside the 77Taya Terms and Conditions, which together form the complete agreement between you and the platform regarding your account and use of our services.

For the purposes of Philippine data protection law and this Privacy Policy, 77Taya is the data controller for all personal information collected through the 77taya.best platform. As data controller, 77Taya determines the purposes and means of processing your personal data.

Our designated Data Protection Officer (DPO) is responsible for overseeing data privacy compliance across the platform. You can contact the DPO at any time with questions, requests, or concerns related to the privacy of your personal data:

• Email: support@77taya.best
• Subject line to use: "Data Privacy Request – [Your Account Username]"
• Response time: Within 2 business days for acknowledgement; full response within 15 business days

77Taya collects personal data in several categories. Here is a plain breakdown of what we collect and why each category exists:

Registration and Identity Data

When you create a 77Taya account, we collect your full legal name, date of birth, mobile number, email address, and the username and password you choose. This data is essential to create and identify your account.

KYC Verification Data

Before your first withdrawal, we are legally required to verify your identity. This involves collecting a copy of a government-issued photo ID (such as a Philippine passport, SSS ID, driver's licence, or PhilSys National ID), and in some cases a selfie or proof of address. This is a regulatory requirement under anti-money laundering (AML) rules and is not optional.

Financial and Transaction Data

We collect data about the deposits and withdrawals you make, including amounts, timestamps, payment methods used (such as GCash or Maya account identifiers), and transaction reference numbers. We do not store full bank card numbers; card payments are tokenised by our payment processor.

Usage and Behavioural Data

We collect data about how you use the 77Taya platform: which games you play, how long your sessions last, which sports markets you bet on, and your betting history. This data is used to personalise your experience, improve the platform, and meet regulatory record-keeping requirements.

Technical Device Data

When you access 77Taya, we automatically collect your IP address, device type, operating system, browser type, and connection details. This data is used for fraud detection, security monitoring, and platform optimisation.

Communication Data

If you contact 77Taya support via email or live chat, we retain records of those communications for quality assurance and dispute resolution purposes.

77Taya collects personal data through several channels:

• Directly from you: When you register, complete KYC verification, make deposits or withdrawal requests, contact support, or fill in any form on the 77Taya platform.
• Automatically through technology: When you visit and use the platform, our servers and analytics tools automatically collect device, IP, and session data. Cookies and similar technologies also collect this type of data (see Section 8 on Cookies).
• From payment processors: When you deposit or withdraw funds, our payment partners (such as GCash, Maya, or card processing services) provide us with transaction confirmation data including reference numbers and masked account identifiers.
• From identity verification services: When you submit KYC documents, a third-party verification provider may process and validate those documents on our behalf and provide us with a verification result.
• From fraud prevention services: We use third-party fraud detection tools that analyse device fingerprints, IP reputation, and behavioural signals to flag potentially fraudulent activity.

77Taya uses your personal data for the following specific purposes:

• Account creation and management: To set up your account, verify your eligibility, and allow you to access all platform features.
• Payment processing: To process your deposits and withdrawals securely and accurately, and to maintain financial records.
• Identity verification and AML compliance: To verify your identity as required by anti-money laundering regulations and our gaming licence obligations. This is a legal requirement, not a choice.
• Fraud prevention and security: To detect and prevent fraudulent activity, multi-accounting, bonus abuse, money laundering, and other prohibited activities described in the Terms and Conditions.
• Personalisation: To tailor your platform experience, surface promotions and games that are relevant to your interests, and send you personalised communications where you have consented to receive them.
• Customer support: To respond to your queries, resolve disputes, and improve the quality of our support service.
• Legal and regulatory compliance: To comply with applicable laws, respond to regulatory requests, and meet our obligations under our gaming licence.
• Platform improvement: To analyse usage patterns, identify technical issues, and make improvements to the platform that benefit all members.
• Responsible gaming: To monitor betting patterns that may indicate problem gambling and to enforce self-exclusion and limit settings that members have applied to their accounts.

77Taya does not use your personal data for any purpose not listed above without first seeking your additional consent, unless required to do so by law.

Under the Philippine Data Privacy Act of 2012 (RA 10173) and its Implementing Rules and Regulations, 77Taya processes your personal data on the following legal bases:

• Contractual necessity: Processing required to create your account, process your bets and transactions, and fulfil 77Taya's obligations to you as a member under the Terms and Conditions.
• Legal obligation: Processing required to comply with AML laws, KYC regulations, gaming licence requirements, and any lawful regulatory or judicial requests.
• Legitimate interests: Processing for fraud prevention, security monitoring, platform improvement, and responsible gaming enforcement – where these interests do not override your privacy rights.
• Consent: Processing for optional marketing communications and personalised promotional offers, where you have given explicit consent. You may withdraw this consent at any time from your account settings or by emailing support@77taya.best.

77Taya does not sell your personal data. We share data only with the categories of third parties listed below, and only to the extent necessary for the stated purpose:

• Payment service providers: GCash, Maya, GrabPay, InstaPay/PESONet partner banks, and Visa/Mastercard processing partners receive transaction data necessary to process your deposits and withdrawals.
• Identity verification providers: Third-party KYC service providers process your identity documents to verify that you are who you say you are. These providers are contractually bound to process your data only for verification purposes.
• Fraud detection and security services: We use specialised providers who analyse behavioural, device, and transactional signals to identify fraudulent activity. These providers receive anonymised or pseudonymised data where possible.
• Game software providers: To facilitate casino game sessions, technical session data is shared with our game providers (such as Evolution Gaming and Pragmatic Play). These providers are bound by their own data protection obligations and processing agreements with 77Taya.
• Regulatory and legal authorities: 77Taya will disclose your personal data to government regulators, law enforcement agencies, or courts when required to do so by law or a valid legal order. We do not voluntarily share data with authorities beyond what is legally required.
• Professional advisors: Lawyers, auditors, and other professional advisors who require access to specific data in the course of providing services to 77Taya are bound by strict confidentiality obligations.

All third parties with whom 77Taya shares personal data are required to maintain appropriate security measures and to process that data only in accordance with our instructions and applicable privacy law.

77Taya uses cookies and similar tracking technologies on the platform. Here is what they are and how we use them:

• Essential cookies: These are required for the platform to function. They maintain your login session, remember your preferences, and secure your account during active use. The platform cannot operate without these cookies and they cannot be disabled.
• Analytics cookies: These collect anonymised data about how visitors use the platform – which pages are visited most, where users drop off, and how long sessions last. We use this data to improve the platform. These cookies can be disabled in your browser settings, though doing so may affect some platform features.
• Security and fraud detection cookies: These help identify suspicious access patterns, bot behaviour, and potential account takeover attempts. They are part of our fraud prevention infrastructure.
• Preference cookies: These remember your language settings, display preferences, and other account customisations so you don't have to reset them each visit.

77Taya does not use third-party advertising cookies or cross-site tracking cookies. We do not participate in advertising networks that track your behaviour across other websites. Your 77Taya browsing data stays on 77Taya.

You can manage cookies through your browser settings. Instructions for major browsers (Chrome, Safari, Firefox, and others) are available in each browser's help documentation. Note that disabling essential cookies will prevent you from logging into your 77Taya account.

77Taya retains your personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. Here are the key retention periods that apply to 77Taya member data:

• Account data: Retained for the duration of your active membership, plus 5 years after account closure. This retention period satisfies AML record-keeping requirements under Philippine law.
• KYC documents: Retained for 5 years after your account is closed, in accordance with anti-money laundering regulations.
• Transaction records: Retained for 5 years after each transaction, as required by financial regulatory obligations.
• Support communications: Retained for 2 years after the last interaction, for quality assurance and dispute resolution purposes.
• Device and IP logs: Retained for 12 months from collection, unless retained longer as part of an active fraud or security investigation.
• Marketing consent records: Retained for the duration of your membership and for 3 years after consent is withdrawn, as evidence of prior consent.

When data is no longer required and its retention period has expired, 77Taya securely destroys or anonymises it in a way that prevents reconstruction or re-identification.

Data security is not an afterthought at 77Taya – it is built into how the platform operates. Here are the technical and organisational measures we use to protect your personal information:

• TLS/SSL encryption in transit: All data transmitted between your device and 77Taya servers is encrypted using TLS 1.2 or higher (256-bit SSL). This prevents interception of your data during transmission.
• Encrypted data at rest: Sensitive data stored in our databases – including payment details, KYC documents, and authentication credentials – is encrypted at rest using strong symmetric encryption.
• Access controls: 77Taya staff access to personal data is granted only on a need-to-know basis. Staff with access to sensitive data undergo background checks and receive privacy training. Access logs are maintained and reviewed.
• Password security: 77Taya passwords are stored as salted cryptographic hashes, not in plain text. Even 77Taya staff cannot see your password.
• Fraud monitoring: Automated systems continuously monitor account activity for signs of unauthorised access, credential stuffing, and anomalous transaction patterns.
• Regular security reviews: 77Taya conducts periodic security assessments and vulnerability scanning of the platform. Critical findings are remediated on a priority basis.

While 77Taya takes all reasonable and practical steps to protect your personal data, no system connected to the internet can be guaranteed 100% secure. In the event of a data breach that affects your rights or interests, 77Taya will notify you and the relevant Philippine regulatory authority within the timeframes required by law.

Under the Philippine Data Privacy Act and this Privacy Policy, you have the following rights regarding your personal data held by 77Taya. These rights are real and we will honour them:

To exercise any of the above rights, contact the 77Taya Data Protection Officer at support@77taya.best with the subject line "Data Privacy Request". We will acknowledge your request within 2 business days and provide a full response within 15 business days. In complex cases, this may be extended by a further 15 business days with prior notification to you.

The 77Taya platform is strictly for adults aged 21 and above. 77Taya does not knowingly collect personal data from any person under the age of 21. If you are a parent or guardian and believe that a minor has created a 77Taya account or provided personal data to our platform, please contact us immediately at support@77taya.best. We will investigate and, if confirmed, close the account and delete all associated personal data promptly.

77Taya's age verification processes during registration and KYC are designed specifically to prevent underage access to the platform. Any account found to belong to a person under 21 will be permanently closed and all balances forfeited, in accordance with the Terms and Conditions.

77Taya may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the scope of our services. When we make material changes – such as collecting new categories of data, changing how we share data, or modifying your rights – we will notify you in advance via:

• An email to the address registered on your 77Taya account, sent at least 7 days before the changes take effect, and/or
• A prominent in-platform notification when you next log in to the platform.

Minor updates such as wording corrections, formatting changes, or clarifications that do not materially affect how we process your data may be made without prior notice. The "Last Updated" date at the top of this page will always reflect when the most recent version was published.

Your continued use of the 77Taya platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you disagree with changes to this Policy, you may close your account by contacting 77Taya support.

If you have any questions about this Privacy Policy, about how 77Taya processes your personal data, or if you wish to exercise any of your data subject rights, please get in touch:

• Email: support@77taya.best – use subject line "Data Privacy Request – [Your Username]"
• Live Chat: Available 24/7 within the 77Taya platform – recommended for urgent account-related privacy concerns

We take all privacy queries seriously and aim to resolve them fairly and promptly. If you are not satisfied with our response to a data privacy complaint, you have the right to escalate the matter to the National Privacy Commission (NPC) of the Philippines, which is the regulatory body responsible for enforcing RA 10173.