Yes Taya Privacy Policy – How We Protect Your Personal Data

Yes Taya is an online gaming platform operated at yestaya.best, serving Filipino players across the Philippines. For the purposes of the Philippine Data Privacy Act of 2012 (Republic Act 10173) and its Implementing Rules and Regulations, Yes Taya acts as the Personal Information Controller for all personal data collected through the platform.

As a personal information controller, Yes Taya is responsible for ensuring that the personal data of all registered users and visitors is collected, processed, stored, and protected in accordance with the Data Privacy Act and the directives of the National Privacy Commission (NPC) of the Philippines.

This Privacy Policy applies to all personal data collected through the Yes Taya website at yestaya.best, any related mobile-optimised interfaces, and all communication channels associated with the platform, including email and messaging support.

Yes Taya collects only the personal data that is necessary to operate the platform, comply with legal obligations, and provide a safe gaming environment for all Filipino players. The categories of personal data we collect are as follows:

Yes Taya does not collect sensitive personal information as defined under RA 10173 (such as health records, political affiliations, or biometric data) unless explicitly required by law or regulation and disclosed to you in advance.

Yes Taya collects personal data through several channels. Understanding these helps you know exactly when and how your information enters our systems:

• Direct registration: When you create a Yes Taya account, you provide your name, date of birth, mobile number, and email address directly through the registration form.
• Identity verification (KYC): When you reach transaction thresholds or request account verification, you may be asked to upload a government-issued ID and a proof of address document. These are processed securely by Yes Taya's compliance team.
• Payment transactions: When you deposit or withdraw via GCash, Maya, or any linked bank account, your payment reference details are recorded as part of your transaction history.
• Automated technical collection: Yes Taya's servers automatically record certain technical data each time you access the platform — including your IP address, device type, browser version, and session timestamps. This data is collected for security, fraud prevention, and platform optimisation purposes.
• Cookies and similar technologies: Yes Taya uses first-party cookies and session storage to maintain your login state, remember your preferences, and analyse platform usage. Refer to Section 8 for details.
• Support interactions: When you contact Yes Taya support via Live Chat, Viber, Messenger, or email, the content of your communication is recorded to ensure quality, resolve disputes, and comply with regulatory record-keeping requirements.

Yes Taya uses your personal data only for legitimate, clearly defined purposes. We do not process your data beyond what is necessary for those purposes. Here is why we collect and use each type of data:

• Account creation and management: To create and maintain your Yes Taya player account, verify your identity, and provide access to the platform.
• Transaction processing: To process deposits, withdrawals, and bonus credits accurately and in accordance with your instructions.
• Legal compliance: To fulfil Yes Taya's obligations under the Philippine Anti-Money Laundering Act (AMLA), PAGCOR's licensing conditions, and the Data Privacy Act. This includes KYC verification, suspicious transaction reporting, and maintaining audit trails.
• Fraud prevention and security: To detect and prevent fraudulent activity, multi-accounting, unauthorised access, and other prohibited activities that could harm you or other players on the platform.
• Customer support: To respond to your queries, resolve disputes, process complaints, and improve our support service quality.
• Responsible gaming: To monitor gaming patterns in line with our responsible gaming commitments, enforce self-exclusion and deposit limits, and identify players who may need support.
• Platform improvement: To analyse aggregated, anonymised usage data to understand how players use Yes Taya and improve our games, features, and interface.
• Marketing communications: Where you have explicitly opted in, to send you information about Yes Taya promotions, bonuses, and new game launches. You can opt out at any time.

Under the Philippine Data Privacy Act of 2012, Yes Taya relies on the following lawful bases for processing your personal data:

• Consent: For optional processing activities such as marketing communications, personalised promotions, and optional profile features. You can withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.
• Contractual necessity: For processing required to fulfil the agreement between you and Yes Taya — specifically, operating your account, processing transactions, and providing gaming services.
• Legal obligation: For processing required to comply with Philippine law, including AMLA compliance, PAGCOR licensing requirements, and NPC data protection obligations.
• Legitimate interests: For fraud prevention, platform security, abuse detection, and general platform improvement, where these interests do not override your fundamental rights as a data subject.

Yes Taya does not sell your personal data to any third party under any circumstances. We share your data only where it is necessary to operate the platform, comply with the law, or protect you and other players. The categories of recipients who may receive your data are:

• Payment service providers: GCash, Maya, BDO, BPI, UnionBank, and other payment partners who process your deposits and withdrawals. These providers receive only the data necessary to complete your transaction.
• Identity verification services: Third-party KYC providers who assist with document verification and identity authentication for accounts that reach verification thresholds.
• Game content providers: Third-party game studios whose games are featured on the Yes Taya platform may receive anonymised session and game data for technical integration purposes. They do not receive your identity or financial data.
• Regulatory and law enforcement authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine authorities where disclosure is required by law, court order, or regulatory directive.
• Platform infrastructure providers: Cloud hosting and server providers who store and process platform data under strict data processing agreements with Yes Taya that prohibit them from using your data for any purpose other than supporting Yes Taya's platform operations.

Yes Taya retains your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable Philippine law. The general retention periods are as follows:

• Account data: Retained for the duration of your account plus 5 years after account closure, in line with PAGCOR record-keeping requirements.
• Transaction records: Retained for a minimum of 5 years from the date of the transaction, in compliance with AMLA requirements.
• KYC documents: Retained for 5 years from the date of verification or account closure, whichever is later.
• Support and communication records: Retained for 2 years from the date of the interaction, unless the communication relates to an ongoing dispute or legal matter.
• Game activity logs: Retained for 3 years for responsible gaming monitoring and dispute resolution purposes.
• Technical and device data: Retained for 12 months from collection for security and fraud prevention purposes.

After the applicable retention period expires, your personal data will be securely deleted or anonymised so that it can no longer be associated with you individually.

Yes Taya uses cookies and similar technologies to ensure the platform functions correctly and to improve the experience of Filipino players on the site. Here is a breakdown of how we use them:

• Strictly necessary cookies: These are essential to the operation of the Yes Taya platform. They maintain your login session, remember your currency and game preferences, and ensure secure transmission of data. These cookies cannot be disabled without affecting how the platform works.
• Functional cookies: These remember your settings and preferences across sessions — such as your preferred game lobby view or notification settings — so you don't have to reconfigure them every time you return to Yes Taya.
• Analytics cookies: Yes Taya uses anonymised, aggregated analytics data to understand how players navigate the platform, which games are most popular, and where technical issues occur. This data does not identify individual players.
• Security cookies: Used to detect suspicious activity, prevent cross-site request forgery, and protect your account from unauthorised access attempts.

Yes Taya does not use third-party advertising cookies or trackers from advertising networks. You will not see Yes Taya ads following you around the internet based on your platform activity.

As a registered player on Yes Taya, you have the following rights over your personal data under RA 10173 and its Implementing Rules and Regulations. These rights apply regardless of where you are in the Philippines:

• Right to be informed: You have the right to know what personal data Yes Taya collects, why it is collected, how it is used, and with whom it is shared. This Privacy Policy fulfils that right.
• Right to access: You can request a copy of the personal data Yes Taya holds about you at any time. We will provide this in a readable format within a reasonable timeframe.
• Right to correct: If any personal data we hold about you is inaccurate or incomplete, you have the right to request that it be corrected. You can update basic contact information directly in your account settings. For identity data corrections, contact support.
• Right to erasure: You may request that Yes Taya delete your personal data where it is no longer necessary for the purpose it was collected, where you withdraw consent (for consent-based processing), or where the data has been unlawfully processed. Note that we may be required by law to retain certain data even after such a request.
• Right to object: You can object to the processing of your personal data for direct marketing at any time. You can also object to processing based on legitimate interests where your interests override ours.
• Right to data portability: Where technically feasible and where processing is based on your consent or a contract, you may request that Yes Taya provide your personal data in a structured, commonly used electronic format.
• Right to lodge a complaint: If you believe Yes Taya has violated your data privacy rights, you have the right to lodge a complaint with the National Privacy Commission of the Philippines (privacy.gov.ph).

To exercise any of these rights, contact Yes Taya's Data Privacy Officer at support@yestaya.best with the subject line "Data Privacy Request." We will acknowledge all requests within 5 business days and provide a substantive response within 15 business days.

Yes Taya employs a layered approach to data security. The technical and organisational measures we use to protect your personal data include:

• TLS/SSL encryption: All data transmitted between your device and the Yes Taya platform is encrypted using Transport Layer Security (TLS). This prevents interception of your data in transit.
• Encrypted data storage: Sensitive personal data — including ID documents and financial information — is stored in encrypted form at rest on Yes Taya's secured servers.
• Access controls: Access to personal data within Yes Taya is restricted on a strict need-to-know basis. Only personnel whose roles require access to specific data categories are authorised to view it. All access is logged and audited.
• Two-factor authentication: Yes Taya's internal systems require multi-factor authentication for staff accessing player data. Players are also encouraged to enable 2FA on their accounts.
• Regular security assessments: Yes Taya conducts periodic security reviews and vulnerability assessments of its platform infrastructure to identify and address potential weaknesses before they can be exploited.
• Incident response plan: Yes Taya maintains a documented data breach response plan. In the event of a personal data breach that poses a risk to your rights, we will notify affected players and the National Privacy Commission within the timeframes required by law.

While Yes Taya takes all reasonable precautions to protect your data, no online platform can guarantee absolute security. Players are encouraged to use strong, unique passwords and to enable two-factor authentication where available.

Yes Taya is strictly an adult gaming platform. Persons under the age of 21 are not permitted to register or use the platform in any capacity. Yes Taya does not knowingly collect personal data from any person under the age of 21.

If Yes Taya discovers that personal data has been collected from a person under 21, the account will be immediately suspended, all data relating to that individual will be deleted, and any deposits will be returned through the original payment method.

Parents and guardians are encouraged to use parental controls and to monitor their children's online activity to prevent access to age-restricted platforms. If you believe a minor has registered on Yes Taya, please contact us immediately at support@yestaya.best.

Yes Taya's primary platform infrastructure is hosted within secure data centres. Certain third-party service providers — including game content providers and infrastructure partners — may process data in jurisdictions outside the Philippines.

Where your personal data is transferred outside the Philippines, Yes Taya ensures that adequate data protection standards are in place through:

• Contractual data processing agreements that require recipients to maintain protection standards equivalent to those required under RA 10173
• Transfers only to service providers in jurisdictions recognised as having adequate data protection laws by the National Privacy Commission, or to providers who have committed to binding contractual protections
• Regular review of third-party data protection arrangements

Yes Taya reviews this Privacy Policy regularly and updates it when our data processing practices change, when new legal requirements come into force, or when improvements to the platform introduce new data collection activities.

When we make material changes to this Privacy Policy — changes that significantly affect how we use your personal data or your rights under this Policy — we will notify registered players via email and through a prominent notice on the Yes Taya platform at least 7 days before the changes take effect.

The "Last updated" date at the top of this page reflects when this Policy was most recently revised. We encourage all Yes Taya players to review this Policy periodically. Continued use of the platform after the effective date of any changes constitutes acceptance of the revised Privacy Policy.

Yes Taya has designated a Data Privacy Officer (DPO) responsible for overseeing compliance with the Data Privacy Act and handling all data subject requests. If you have any questions about this Privacy Policy, wish to exercise your data rights, or need to report a privacy concern, contact us through any of the following channels: