00taya Privacy Policy

1. Introduction and Scope

This Privacy Policy ("Policy") governs the collection, use, storage, and disclosure of personal information by 00taya ("we," "us," "our," "Operator") in connection with the operation of the 00taya online gaming platform accessible at 00taya.cam and associated mobile applications (collectively, the "Platform").

This Policy applies to all users of the Platform, including registered players, visitors, and individuals who contact customer support. By accessing or using the Platform, you acknowledge that you have read, understood, and consent to the practices described in this Policy.

00taya is committed to protecting your privacy and complying with all applicable data protection laws, including the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and directives issued by the National Privacy Commission of the Philippines. Our data protection practices also comply with regulations set forth by the Philippine Amusement and Gaming Corporation (PAGCOR), under whose licensing authority we operate.

2. Information We Collect

2.1 Information You Provide Directly

When you register for a 00taya account, we collect the following personal information that you provide directly:

• Account Registration Data: Full legal name, date of birth, gender, residential address, email address, mobile phone number, and username.
• Identity Verification Documents: Government-issued identification (such as Philippine passport, driver's license, or national ID), selfie photographs for identity verification, and proof of address documents.
• Payment Information: Details of payment methods including GCash account numbers, PayMaya account numbers, bank account information (account name, account number, bank name), and transaction history.
• Communication Records: Content of emails, live chat messages, phone calls, and other communications between you and 00taya customer support.
• Marketing Preferences: Your choices regarding receiving promotional communications, newsletters, and bonus offers.

2.2 Information Collected Automatically

When you use the 00taya Platform, we automatically collect certain technical and usage information:

• Device Information: Device type, operating system, browser type and version, screen resolution, device identifier (IMEI or advertising ID), and mobile network information.
• Connection Data: IP address, internet service provider, geolocation data (derived from IP address), and connection timestamps.
• Usage Data: Pages visited, games played, bet amounts, win/loss records, session duration, features used, clickstream data, and navigation patterns.
• Cookies and Tracking Technologies: Session cookies, persistent cookies, web beacons, and similar tracking technologies (see Section 8 for details).

2.3 Information from Third-Party Sources

We may receive information about you from third-party sources including:

• Payment Processors: Transaction confirmation, payment method verification, and fraud detection data from GCash, PayMaya, banks, and other payment providers.
• Identity Verification Services: Verification results from third-party identity verification and anti-fraud services used to comply with Know Your Customer (KYC) and Anti-Money Laundering (AML) regulations.
• Game Providers: Gameplay data and results from third-party game studios whose games are integrated into the 00taya Platform.
• Publicly Available Sources: Information from public records and databases used for identity verification and regulatory compliance purposes.

3. How We Use Your Information

00taya uses your personal information for the following purposes:

3.1 Account Management and Service Provision

• Creating and maintaining your player account
• Verifying your identity and age (21+ requirement)
• Processing deposits, withdrawals, and other financial transactions
• Providing access to games, sports betting, and other platform features
• Tracking gameplay history, account balances, and transaction records
• Communicating with you about your account, transactions, and platform updates

3.2 Legal and Regulatory Compliance

• Complying with PAGCOR licensing requirements and regulations
• Fulfilling Know Your Customer (KYC) and Customer Due Diligence obligations
• Preventing money laundering and terrorist financing (AML/CFT compliance)
• Detecting and preventing fraud, cheating, collusion, and other prohibited activities
• Responding to legal requests from law enforcement and regulatory authorities
• Maintaining records as required by Philippine law and PAGCOR regulations

3.3 Security and Platform Protection

• Detecting and preventing unauthorized access to accounts
• Identifying and blocking fraudulent transactions
• Monitoring for suspicious betting patterns and collusion
• Protecting against cyber attacks, hacking, and system vulnerabilities
• Investigating violations of our Terms & Conditions

3.4 Customer Support and Communication

• Responding to your inquiries, complaints, and support requests
• Providing technical assistance and troubleshooting
• Notifying you of important account changes or security alerts
• Sending transactional communications (deposit confirmations, withdrawal updates, etc.)

3.5 Marketing and Promotional Activities (With Your Consent)

• Sending promotional offers, bonus notifications, and newsletters (only if you opt in)
• Personalizing bonus offers based on your gameplay preferences
• Conducting surveys and collecting feedback to improve services

3.6 Platform Improvement and Analytics

• Analyzing usage patterns to improve user experience
• Testing new features and optimizing platform performance
• Understanding player preferences to guide game selection
• Conducting aggregated statistical analysis (anonymized data)

4. Legal Basis for Processing

Under the Data Privacy Act of 2012, 00taya processes your personal information based on the following legal grounds:

• Consent: You provide explicit consent during account registration and through opt-in choices for marketing communications.
• Contractual Necessity: Processing is necessary to perform our contractual obligations under the Terms & Conditions you accepted when creating your account.
• Legal Obligation: Processing is required to comply with Philippine laws, PAGCOR regulations, AML/CFT requirements, and other legal obligations.
• Legitimate Interests: Processing is necessary for our legitimate business interests (fraud prevention, platform security, service improvement) provided these interests do not override your fundamental rights.

5. Data Sharing and Disclosure

00taya does not sell, rent, or trade your personal information to third parties for marketing purposes. We share your information only in the following limited circumstances:

5.1 Service Providers and Processors

We share data with trusted third-party service providers who perform functions on our behalf, including:

• Payment Processors: GCash, PayMaya, banks, and other payment providers that process deposits and withdrawals.
• Game Providers: Third-party game studios whose games are integrated into the Platform (e.g., JILI, Pragmatic Play).
• Identity Verification Services: Providers that verify identity documents and perform KYC/AML checks.
• Cloud Hosting Providers: Companies that host our servers and store data securely.
• Customer Support Tools: Live chat software providers and email service providers.
• Analytics Providers: Services that help us understand platform usage (using anonymized or aggregated data where possible).

All service providers are contractually required to protect your data and use it only for the specific purposes for which it was shared.

5.2 Legal and Regulatory Authorities

We may disclose your information to government authorities, law enforcement, or regulators when:

• Required by law, court order, or subpoena
• Requested by PAGCOR in the exercise of its regulatory authority
• Necessary to comply with AML/CFT reporting obligations
• Required to investigate suspected illegal activity or Terms & Conditions violations

5.3 Business Transfers

In the event of a merger, acquisition, sale of assets, or corporate reorganization, your personal information may be transferred to the acquiring entity, subject to the same privacy protections outlined in this Policy.

5.4 With Your Consent

We may share your information with third parties for purposes not described in this Policy if we obtain your explicit consent to do so.

6. Data Security

00taya implements comprehensive technical, administrative, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction:

6.1 Technical Safeguards

• Encryption: All data transmitted between your device and our servers is protected by 256-bit SSL/TLS encryption. Sensitive data stored in our databases is encrypted at rest.
• Firewalls and Intrusion Detection: Our network infrastructure is protected by enterprise-grade firewalls and intrusion detection systems that monitor for suspicious activity.
• Secure Authentication: Passwords are hashed using industry-standard algorithms and never stored in plain text. Two-factor authentication is available to all players.
• Regular Security Audits: Our systems undergo regular penetration testing and security audits by independent third-party firms.

6.2 Administrative Safeguards

• Access Controls: Access to personal data is restricted to authorized personnel on a need-to-know basis. All access is logged and audited.
• Employee Training: All 00taya employees receive mandatory data privacy and security training.
• Confidentiality Agreements: Employees and contractors sign confidentiality agreements prohibiting unauthorized disclosure of player data.

6.3 Physical Safeguards

Data centers hosting 00taya infrastructure are secured with physical access controls, surveillance systems, and environmental protections.

7. Data Retention

00taya retains your personal information only as long as necessary to fulfill the purposes described in this Policy and to comply with legal and regulatory requirements:

• Active Accounts: While your account is active, we retain all account data, transaction history, and gameplay records.
• Closed Accounts: After account closure, we retain transaction records and identity verification documents for 5 years as required by PAGCOR and AML regulations.
• Communication Records: Customer support communications are retained for 3 years for quality assurance and dispute resolution purposes.
• Marketing Data: If you opt out of marketing communications, we retain minimal information (email address) to honor your opt-out preference.

After the applicable retention period expires, personal data is securely deleted or anonymized.

8. Cookies and Tracking Technologies

The 00taya Platform uses cookies and similar tracking technologies to enhance user experience, analyze platform usage, and provide personalized content:

8.1 Types of Cookies We Use

• Essential Cookies: Required for core platform functionality (login sessions, security features). These cannot be disabled.
• Performance Cookies: Help us understand how players use the Platform through aggregated analytics.
• Functionality Cookies: Remember your preferences (language, display settings) for improved user experience.
• Marketing Cookies: Used to deliver personalized promotional content (only if you consent to marketing communications).

8.2 Managing Cookies

Most browsers allow you to control cookies through their settings. Note that disabling essential cookies may prevent you from using certain Platform features. You can manage cookie preferences through your browser settings or by contacting customer support.

9. Your Privacy Rights

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete personal data.
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements).
• Right to Object: Object to certain processing activities, particularly marketing communications.
• Right to Data Portability: Request your data in a structured, commonly used format.
• Right to Withdraw Consent: Withdraw consent for processing based on consent (e.g., marketing emails).
• Right to Lodge a Complaint: File a complaint with the National Privacy Commission if you believe your rights have been violated.

To exercise any of these rights, contact our Data Protection Officer at the email address provided in Section 11.

10. Children's Privacy

The 00taya Platform is strictly intended for individuals aged 21 years and older. We do not knowingly collect personal information from individuals under the age of 21. If we discover that we have inadvertently collected information from a person under 21, we will immediately delete that information and close the associated account.

11. Contact Information and Data Protection Officer

For questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact:

00taya Data Protection Officer
Email: [email protected] (displayed as plain text only)
Available 24/7 via live chat on the 00taya Platform

12. Changes to This Privacy Policy

00taya reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or platform features. When we make material changes, we will notify you by email (if you have provided an email address) and by posting a notice on the Platform. The "Last Updated" date at the bottom of this Policy indicates when it was most recently revised. Your continued use of the Platform after changes are posted constitutes acceptance of the updated Policy.