1. Introduction
1.1 This Privacy Policy ("Policy") applies to all personal data collected and processed by 222taya ("the Platform," "we," "us," "our") in connection with your use of the 222taya website and related services.
1.2 By registering an account on 222taya or otherwise using our platform, you acknowledge that you have read and understood this Policy and consent to the collection and processing of your personal data as described herein.
1.3 This Policy should be read alongside our Terms & Conditions and Responsible Gaming Policy, which together govern your relationship with 222taya.
1.4 We may update this Policy from time to time. The date of the most recent revision is displayed at the top of this page. Continued use of 222taya following any update constitutes your acceptance of the revised Policy.
2. Data Controller
2.1 For the purposes of the Philippine Data Privacy Act of 2012 (RA 10173), 222taya acts as the personal information controller in respect of the personal data it collects from players and users of the platform.
2.2 As a personal information controller, 222taya is responsible for determining the purposes and means of processing your personal data and for ensuring that such processing is carried out lawfully, fairly, and transparently.
2.3 If you have any questions or concerns about how 222taya processes your personal data, you may contact our Data Protection Officer (DPO) at the contact details provided in Section 14 of this Policy.
3. Personal Data We Collect
3.1 222taya collects the following categories of personal data from players and users:
3.1.1 Identity Data
- Full legal name;
- Date of birth;
- Government-issued Philippine ID number (e.g., PhilSys ID, passport, driver's licence);
- Photograph or selfie (for identity verification purposes).
3.1.2 Contact Data
- Email address;
- Philippine mobile number;
- Residential address (city, province, postal code).
3.1.3 Financial Data
- GCash or PayMaya account details;
- Philippine bank account details (for withdrawals);
- Transaction history (deposits, withdrawals, wagers).
3.1.4 Technical Data
- IP address;
- Device type, operating system, and browser;
- Login timestamps and session duration;
- Cookies and similar tracking technologies.
3.1.5 Gaming Data
- Game history and wagering records;
- Bonus and promotion usage;
- Responsible gaming tool settings (deposit limits, self-exclusion status).
3.1.6 Communications Data
- Records of your communications with 222taya customer support;
- Survey responses and feedback submitted to 222taya.
4. How We Collect Your Data
4.1 Directly from you — when you register an account, complete KYC verification, make a deposit or withdrawal, contact customer support, or respond to a survey.
4.2 Automatically — when you access and use the 222taya platform, we automatically collect technical data such as your IP address, device information, and browsing behaviour through cookies and similar technologies.
4.3 From third parties — we may receive data about you from identity verification providers, payment processors (such as GCash and PayMaya), and fraud prevention services, where necessary to operate the platform and comply with legal obligations.
5. How We Use Your Personal Data
5.1 222taya uses your personal data for the following purposes:
- Account registration and management — to create and maintain your 222taya account, verify your identity, and manage your player profile;
- Service delivery — to provide access to games, process deposits and withdrawals, and deliver customer support;
- Legal and regulatory compliance — to comply with PAGCOR licensing requirements, the Philippine Anti-Money Laundering Act (AMLA), the Data Privacy Act of 2012, and other applicable laws;
- Fraud prevention and security — to detect, investigate, and prevent fraudulent activity, money laundering, and other illegal conduct;
- Responsible gaming — to monitor gaming behaviour, enforce responsible gaming tools, and identify players who may be at risk of gambling-related harm;
- Marketing and communications — to send you promotional offers, bonuses, and platform updates, where you have consented to receive such communications;
- Platform improvement — to analyse usage patterns, conduct research, and improve the 222taya platform and user experience.
6. Legal Basis for Processing
6.1 222taya processes your personal data on the following legal bases under the Philippine Data Privacy Act of 2012:
- Consent — where you have given your explicit consent to the processing of your data for a specific purpose (e.g., marketing communications);
- Contractual necessity — where processing is necessary to perform our contract with you (i.e., to provide the 222taya gaming services);
- Legal obligation — where processing is required to comply with applicable Philippine laws and regulations, including PAGCOR requirements and AMLA obligations;
- Legitimate interests — where processing is necessary for our legitimate business interests, such as fraud prevention, platform security, and service improvement, provided that such interests are not overridden by your rights and interests.
7. Data Sharing and Disclosure
7.1 222taya does not sell, rent, or trade your personal data to third parties for their own commercial purposes.
7.2 We may share your personal data with the following categories of recipients, strictly on a need-to-know basis:
- Payment processors — GCash, PayMaya, and Philippine banking partners, for the purpose of processing deposits and withdrawals;
- Identity verification providers — third-party KYC and AML service providers engaged to verify your identity and comply with regulatory requirements;
- Regulatory authorities — PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission (NPC), and other Philippine government agencies, where required by law;
- IT and security service providers — cloud hosting, cybersecurity, and fraud detection providers engaged to support the operation and security of the 222taya platform;
- Professional advisers — lawyers, auditors, and consultants engaged by 222taya in connection with legal, compliance, or business matters.
7.3 All third parties with whom 222taya shares personal data are required to process such data in accordance with applicable Philippine data protection laws and are bound by appropriate data processing agreements.
8. Data Retention
8.1 222taya retains your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, accounting, or reporting requirements.
8.2 The following retention periods generally apply to personal data held by 222taya:
- Account and identity data — retained for the duration of your account and for a minimum of five (5) years following account closure, in accordance with PAGCOR and AMLA requirements;
- Transaction and financial data — retained for a minimum of five (5) years from the date of the transaction, as required by the Philippine Anti-Money Laundering Act;
- Communications data — retained for up to three (3) years from the date of the communication;
- Technical and cookies data — retained for up to twelve (12) months from collection, unless a shorter period is required by applicable law.
8.3 Where personal data is no longer required for any lawful purpose, 222taya will securely delete or anonymise it in accordance with our internal data disposal procedures.
9. Data Security
9.1 222taya implements appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures include:
- SSL/TLS encryption for all data transmitted between your device and the 222taya platform;
- Encryption of sensitive data at rest, including financial and identity information;
- Role-based access controls limiting employee access to personal data on a strict need-to-know basis;
- Regular security audits, vulnerability assessments, and penetration testing;
- Multi-factor authentication for internal systems handling personal data;
- Staff training on data protection obligations and information security best practices.
9.2 While 222taya takes all reasonable steps to protect your personal data, no method of electronic transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your 222taya account credentials and for notifying us immediately if you suspect any unauthorised access to your account.
9.3 In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, 222taya will notify the National Privacy Commission (NPC) and affected individuals in accordance with the requirements of the Data Privacy Act of 2012 and NPC Circular No. 16-03.
10. Your Data Subject Rights
10.1 Under the Philippine Data Privacy Act of 2012, you have the following rights in relation to your personal data held by 222taya:
- Right to be informed — you have the right to be informed of how your personal data is being collected and processed, as set out in this Policy;
- Right of access — you have the right to request a copy of the personal data that 222taya holds about you;
- Right to rectification — you have the right to request correction of any inaccurate or incomplete personal data we hold about you;
- Right to erasure — you have the right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations;
- Right to object — you have the right to object to the processing of your personal data for direct marketing purposes or where processing is based on our legitimate interests;
- Right to data portability — you have the right to receive your personal data in a structured, commonly used, and machine-readable format;
- Right to lodge a complaint — you have the right to lodge a complaint with the National Privacy Commission (NPC) if you believe that 222taya has violated your data privacy rights.
10.2 To exercise any of the above rights, please contact our Data Protection Officer using the contact details in Section 14. We will respond to all verified requests within thirty (30) days, in accordance with NPC guidelines.
10.3 Please note that certain rights may be subject to limitations where processing is required for compliance with legal obligations, the performance of a contract, or the exercise of legal claims.
11. Cookies and Tracking Technologies
11.1 222taya uses cookies and similar tracking technologies to enhance your experience on the platform, analyse usage patterns, and deliver relevant content. A cookie is a small text file placed on your device when you visit a website.
11.2 222taya uses the following categories of cookies:
- Strictly necessary cookies — essential for the operation of the 222taya platform, including session management and security. These cannot be disabled;
- Performance and analytics cookies — used to collect anonymised information about how players use the platform, helping us improve functionality and user experience;
- Functional cookies — used to remember your preferences and settings, such as language and display options;
- Marketing cookies — used to deliver relevant promotional content and track the effectiveness of our marketing campaigns, where you have consented to such use.
11.3 You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of the 222taya platform. For more information on managing cookies, refer to your browser's help documentation.
11.4 222taya does not use cookies to collect sensitive personal information such as financial data or government ID numbers.
12. Minors and Age Restriction
12.1 The 222taya platform is strictly intended for persons aged 21 years and above. We do not knowingly collect personal data from individuals under the age of 21.
12.2 If 222taya becomes aware that personal data has been collected from a person under 21 years of age, we will take immediate steps to delete such data and close the associated account.
12.3 If you are a parent or guardian and believe that your child has provided personal data to 222taya, please contact us immediately at the details provided in Section 14 so that we can take appropriate action.
13. Changes to This Privacy Policy
13.1 222taya reserves the right to update or amend this Privacy Policy at any time. Material changes will be communicated to registered players via the email address associated with their account or through a prominent notice on the platform prior to the changes taking effect.
13.2 The date of the most recent revision is displayed at the top of this page. We encourage you to review this Policy periodically to stay informed of how 222taya protects your personal data.
13.3 Your continued use of the 222taya platform following the posting of any updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the updated Policy, you must cease using the platform and may close your account in accordance with our Terms & Conditions.
14. Contact Us & Data Protection Officer
14.1 If you have any questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data by 222taya, please contact our Data Protection Officer:
14.2 Email: [email protected]
14.3 General support inquiries may also be directed to: [email protected]
14.4 If you are not satisfied with our response to your data privacy concern, you have the right to lodge a complaint with the National Privacy Commission (NPC) of the Philippines.