tya365 Privacy Policy

tya365 ("tya365", "we", "us", "our") operates the online gaming platform accessible at tya365.net, including its mobile-optimised site and all associated game, bonus, and account management features (the "Platform"). tya365 is licensed and regulated by the Philippine Amusement and Gaming Corporation (PAGCOR) and operates in full compliance with Philippine gaming law.

For the purposes of the Data Privacy Act of 2012 (Republic Act No. 10173, as amended, "DPA"), tya365 acts as the Personal Information Controller in respect of all personal data collected from registered Players, site visitors, and support enquirers. This Privacy Policy sets out how we fulfil our obligations as a Personal Information Controller and what rights you enjoy as a Data Subject under Philippine law.

tya365 collects and processes the following categories of personal data. The specific data collected depends on whether you are a registered Player, a prospective registrant, or a general site visitor.

tya365 does not collect sensitive personal information as defined under Section 3(l) of the DPA (e.g. racial or ethnic origin, health data, religious beliefs) except where voluntarily disclosed in a support context or where mandated by PAGCOR's responsible gaming requirements (e.g. self-exclusion records related to problem gambling).

tya365 collects personal data through the following methods:

• Direct Provision: Data you provide when you register a tya365 account, complete KYC verification, make a deposit or withdrawal, contact our support team, or submit a responsible gaming request.
• Automated Collection: Technical data collected automatically when you access the Platform, including IP address, device fingerprint, session data, and browsing behaviour on tya365.net pages. This data is collected via server logs, cookies, and similar tracking technologies.
• Payment Providers: When you initiate a GCash, Maya, or bank transfer, our payment processing partners provide tya365 with transaction confirmation data including the sending account reference and transaction amount.
• Identity Verification Services: Where tya365 uses a third-party KYC/AML service provider to cross-check identity documents, that provider may return additional verification data to tya365 as part of the compliance check outcome.
• Regulatory Databases: tya365 may screen your name against PAGCOR-mandated exclusion lists, PEP (Politically Exposed Persons) databases, and sanction lists as required under Philippine AML legislation.

tya365 processes your personal data for the following purposes:

• Account Management: To create, maintain, and administer your tya365 Player account, including processing your login, managing your balance, and applying bonuses correctly.
• Identity and Age Verification: To confirm that you are at least 21 years of age and are who you claim to be, as required by PAGCOR licensing conditions and Philippine law.
• Transaction Processing: To process your deposits and withdrawals via GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, Coins.ph, or USDT TRC20, and to maintain accurate financial records of all account activity.
• AML and Fraud Prevention: To meet our obligations under the Anti-Money Laundering Act of the Philippines (Republic Act No. 9160, as amended) including customer due diligence, transaction monitoring, and suspicious activity reporting to the AMLC where required.
• Responsible Gaming: To administer deposit limits, session time controls, self-exclusion requests, and other responsible gaming tools you have activated on your account.
• Customer Support: To respond to your enquiries, resolve account disputes, and provide assistance via live chat and email.
• Platform Security: To detect and prevent fraud, collusion, bot activity, multi-accounting, and other prohibited conduct on the Platform.
• Marketing Communications: To send you promotional offers, bonus notifications, and platform updates — but only where you have opted in or where we have a legitimate interest in communicating with you as an existing Player.
• Legal and Regulatory Compliance: To comply with all applicable Philippine laws, PAGCOR requirements, court orders, and requests from competent Philippine regulatory authorities.
• Platform Improvement: To analyse aggregated, anonymised usage patterns on tya365.net in order to improve game selection, interface design, and overall Player experience.

Under the Data Privacy Act of 2012, tya365 processes your personal data on one or more of the following lawful bases:

• Contractual Necessity: Processing required to perform the Player Agreement (our Terms and Conditions) with you — for example, processing deposits, paying out winnings, and managing your account.
• Legal Obligation: Processing required to comply with a legal obligation under Philippine law — for example, AML customer due diligence, PAGCOR reporting, and age verification.
• Legitimate Interests: Processing carried out in pursuit of tya365's legitimate business interests, provided those interests are not overridden by your rights — for example, fraud detection, security monitoring, and Platform analytics.
• Consent: Where tya365 relies on your consent as the lawful basis — for example, for optional marketing communications — you have the right to withdraw that consent at any time by updating your notification preferences in your account settings or by contacting our support team.

tya365 does not sell your personal data. We share personal data only in the limited circumstances described below, and only to the minimum extent necessary for the stated purpose.

• Game Content Providers: Third-party game studios whose titles are available on the tya365 Platform may receive game session data (e.g. Player ID, wager amounts, game outcomes) for the purposes of game operation, fairness certification, and dispute resolution. These providers are contractually prohibited from using this data for any other purpose.
• Payment Service Providers: GCash, Maya, BPI, BDO, Metrobank, UnionBank, 7-Eleven, Coins.ph, and USDT TRC20 processors receive the minimum financial data required to complete the transaction you have authorised. Each provider is subject to its own published privacy policy and applicable financial regulations.
• KYC/AML Compliance Services: Identity verification and anti-money laundering screening providers receive identity document data and basic personal information for the sole purpose of completing mandated compliance checks.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other competent Philippine government bodies may receive personal data where tya365 is legally obligated to disclose it.
• Law Enforcement: Where tya365 receives a valid court order or law enforcement request under applicable Philippine law, we will disclose the required data to the requesting authority.
• Professional Advisers: tya365's legal counsel, auditors, and compliance consultants may access personal data in the course of providing professional services to tya365, subject to confidentiality obligations.
• Business Transfers: In the event of a merger, acquisition, or sale of all or part of tya365's business, Player data may be transferred to the acquiring entity, who will be bound by obligations equivalent to those set out in this Privacy Policy.

tya365 retains personal data only for as long as is necessary for the purposes for which it was collected, or as required by applicable Philippine law and PAGCOR licensing conditions.

• Active Account Data: While your tya365 account is open and active, we retain all account-related personal data to provide you with full Platform functionality.
• Closed Account Data: Following the closure of your tya365 account, we retain your identity, financial transaction, and game history records for a minimum of five (5) years from the date of account closure. This retention period satisfies our obligations under the AMLA and PAGCOR record-keeping requirements.
• KYC Documents: Copies of identity documents and proof of address documents are retained for the same five-year minimum period following account closure.
• Support Records: Live chat transcripts and email correspondence are retained for three (3) years from the date of each interaction, or for the duration of any related dispute resolution process, whichever is longer.
• Marketing Data: If you withdraw your marketing consent, your email address is retained on a suppression list to ensure we do not inadvertently contact you again. It is not used for any other purpose.

Upon expiry of the applicable retention period, tya365 will securely delete or anonymise your personal data in accordance with National Privacy Commission guidelines on data disposal.

Under the Data Privacy Act of 2012, you have the following rights in respect of your personal data held by tya365. To exercise any of these rights, contact our Data Protection Officer at the details provided in Section 13.

Please note that certain rights are subject to exceptions under the DPA. For example, tya365 may be unable to delete data that we are legally required to retain under PAGCOR or AMLA obligations, even upon your request. We will always explain any limitation that applies to your specific request.

tya365 uses cookies and similar technologies on the Platform. A cookie is a small text file placed on your device by our web server when you visit tya365.net. Cookies allow us to recognise your device, keep you logged in, and understand how you navigate the Platform.

You can control and delete cookies through your web browser's settings at any time. For guidance, refer to your browser's help documentation. Note that disabling strictly necessary cookies will affect your ability to use core Platform features including logging in and maintaining a session.

tya365 implements a comprehensive set of technical and organisational security measures to protect your personal data against unauthorised access, accidental loss, destruction, or alteration. These measures include:

• Encryption in Transit: All data transmitted between your device and tya365 servers is encrypted using TLS (Transport Layer Security). Our Platform enforces HTTPS across all pages.
• Encryption at Rest: Sensitive personal data, including identity document copies and financial details, is stored using AES-256 encryption.
• Access Controls: Access to personal data within tya365's systems is restricted on a strict need-to-know basis. Staff members are granted only the minimum level of access required to perform their job function.
• Two-Factor Authentication: tya365 offers and recommends 2FA for all Player accounts. Internal systems with access to Player data require mandatory multi-factor authentication for staff logins.
• Regular Security Audits: tya365 conducts periodic penetration testing and vulnerability assessments of the Platform, carried out by qualified independent security professionals.
• Incident Response: tya365 maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, we will notify you and the National Privacy Commission within the timeframes required by Philippine law.

Despite these measures, no online platform can guarantee absolute security. You are responsible for keeping your tya365 login credentials confidential and for ensuring that any device you use to access the Platform is reasonably secure. Contact our support team immediately if you suspect your account has been accessed without your authorisation.

The tya365 Platform is strictly for persons who are 21 years of age or older. tya365 does not knowingly collect personal data from individuals below the minimum age threshold. The 21+ requirement is the minimum legal age for casino-style online gambling in the Philippines as prescribed under applicable PAGCOR regulations and Philippine law.

If you are a parent or guardian and believe that a person under your care has provided personal data to tya365, please contact our Data Protection Officer at the details in Section 13. We will investigate and act promptly.

tya365 reviews this Privacy Policy periodically and may update it to reflect changes in our data processing practices, applicable Philippine law, PAGCOR requirements, or National Privacy Commission guidance. When we make material changes to this Privacy Policy, we will notify you by:

• Posting the updated Privacy Policy on tya365.net with a revised "Last Updated" date prominently displayed at the top of the page.
• Sending an in-platform notification to your tya365 account dashboard when changes materially affect your rights or how we use your personal data.
• Where required by law, seeking your fresh consent before applying any change that alters the legal basis on which we process your data.

Your continued use of the tya365 Platform after the effective date of any updated Privacy Policy constitutes your acknowledgment of the revised terms. We encourage you to review this page periodically so you stay informed about how tya365 protects your data. If you disagree with any change, you may close your account by contacting our support team and request deletion of your data to the extent permitted by our legal retention obligations.

tya365 has appointed a Data Protection Officer (DPO) as required under the Data Privacy Act of 2012 and NPC Circular 16-01. The DPO is responsible for overseeing tya365's compliance with the DPA, handling data subject rights requests, and serving as the primary point of contact with the National Privacy Commission.

If you have any questions about this Privacy Policy, wish to exercise a data subject right, or want to raise a privacy concern, please contact the tya365 DPO using the details below:

If you are not satisfied with tya365's response to your privacy concern, you have the right to lodge a complaint directly with the National Privacy Commission of the Philippines (NPC). The NPC is the independent supervisory authority responsible for enforcing the Data Privacy Act of 2012. Information on how to file a complaint with the NPC is available through official Philippine government channels.

tya365 is committed to working constructively with the NPC and with you to resolve any privacy concerns in a fair and timely manner. We take every privacy complaint seriously and treat resolution of data subject concerns as a priority obligation — not merely a regulatory formality.