Privacy Policy

This Privacy Policy ("Policy") describes how Taya777 ("Company", "we", "us", "our") collects, processes, stores, and protects personal data relating to users ("you", "Player", "User") of the online gaming and sports betting platform accessible at taya777.cam ("Platform").

Taya777 is committed to safeguarding the privacy of all persons who interact with our Platform, whether as registered Players, visitors, or prospective users. We process personal data strictly in accordance with applicable data protection principles and only to the extent necessary for the purposes described in this Policy.

By registering an Account, making a deposit, or otherwise using the Platform, you acknowledge that you have read, understood, and consent to the data practices described herein. If you disagree with any part of this Policy, you should discontinue using the Platform and may request closure of your Account.

The following terms carry the meanings specified below throughout this Policy:

• "Personal Data" Any information that identifies or can be used to identify a living natural person, directly or indirectly, including name, identification number, location data, online identifiers, or factors specific to physical, economic, or social identity.
• "Processing" Any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, transmission, erasure, or destruction.
• "Data Controller" The entity that determines the purposes and means of Processing Personal Data — in this case, Taya777.
• "Data Processor" A third party that processes Personal Data on behalf of the Data Controller pursuant to a written agreement.
• "Consent" A freely given, specific, informed, and unambiguous indication of agreement to Processing, expressed by a clear affirmative act.
• "Cookies" Small text files placed on your device by the Platform or authorised third-party services for the purposes described in Section 10.
• "KYC" Know Your Customer — the identity verification procedure used to confirm a Player's identity, age, and payment method ownership in accordance with anti-money laundering obligations.

Taya777 acts as the Data Controller for all Personal Data collected and processed in connection with the Platform. As Data Controller, taya777 determines the purposes for which, and the means by which, Personal Data is processed.

Where taya777 engages third-party Data Processors (such as payment service providers, identity verification platforms, and cloud infrastructure providers), appropriate data processing agreements are maintained to ensure those processors handle your data only in accordance with our instructions and applicable data protection standards.

If you have any queries about how your Personal Data is processed, or wish to exercise any of your data rights, please contact us through the channels specified in Section 16 (Contact Us).

Taya777 collects only the Personal Data that is reasonably necessary for the purposes described in this Policy. The categories of data we collect are set out in the table below:

Taya777 collects Personal Data through the following means:

• Direct Submission: Information you voluntarily provide during account registration, KYC verification, deposit or withdrawal requests, support enquiries, and participation in promotions.
• Automated Technical Collection: Data automatically collected through your use of the Platform, including IP address, browser and device characteristics, and session activity via server logs and cookies.
• Third-Party Sources: Identity and fraud signals received from licensed KYC verification providers, payment processors (including FPX, DuitNow, and e-wallet operators), and fraud prevention services engaged to support our AML obligations.
• Publicly Available Sources: In limited circumstances where required for regulatory compliance or fraud investigation, we may consult publicly available information sources such as sanctions lists or public records.

Taya777 processes your Personal Data for the following purposes, each of which is necessary for us to deliver, maintain, and improve the Platform and our obligations to you:

• Account Management: Creating, maintaining, and managing your Account, verifying your identity and age (21+ requirement), and administering your gaming activity.
• Payment Processing: Processing deposits and withdrawals through supported Malaysian payment methods, including FPX online banking, DuitNow, Touch 'n Go eWallet, Boost, GrabPay, Maybank, CIMB, Public Bank, Hong Leong Bank, and cryptocurrency (BTC/USDT).
• Legal & Regulatory Compliance: Meeting Know Your Customer (KYC) obligations, anti-money laundering (AML) screening, age verification, and any applicable regulatory reporting requirements.
• Fraud Prevention & Security: Detecting, investigating, and preventing fraudulent transactions, bonus abuse, collusion, and unauthorised account access.
• Customer Support: Responding to enquiries, resolving disputes, and maintaining records of our communications for quality assurance and training.
• Responsible Gambling: Monitoring wagering patterns to identify indicators of problem gambling, administering self-exclusion and deposit limit requests, and providing appropriate support interventions.
• Marketing & Personalisation: Where you have provided express consent, sending promotional communications about offers, bonuses, and new games relevant to your activity profile. You may withdraw consent at any time.
• Platform Improvement: Analysing anonymised or aggregated usage data to improve Platform performance, user experience, and product development.

Each processing activity conducted by taya777 is supported by at least one lawful basis. The primary legal bases we rely upon are:

• Contractual Necessity: Processing that is essential to perform the contract between you and taya777 — including operating your Account, processing payments, and delivering gaming services.
• Legal Obligation: Processing required for compliance with applicable laws and regulatory requirements, including KYC, AML, age verification, and reporting obligations.
• Legitimate Interests: Processing conducted for purposes that serve our legitimate business interests, provided those interests are not overridden by your rights — including fraud prevention, security monitoring, and platform analytics.
• Consent: Processing for which your explicit consent has been obtained — primarily direct marketing communications. You retain the right to withdraw consent at any time without affecting the lawfulness of prior processing.

Taya777 does not sell, rent, or trade your Personal Data to third parties for their own commercial purposes. We may share Personal Data only in the following circumstances:

• Payment Service Providers: To process deposits and withdrawals through your selected payment method (e.g. FPX operators, DuitNow, Touch 'n Go eWallet, Maybank). These processors receive only the data strictly necessary for payment execution.
• Identity Verification Services: Licensed KYC providers engaged to verify your identity, age, and document authenticity as required by our compliance obligations.
• Game Content Providers: Third-party game studios whose games are accessible through the Platform may receive anonymised session data for technical support and game auditing purposes.
• Cloud Infrastructure & Security: Technology partners hosting Platform infrastructure and delivering security services, who are contractually bound to process data only on our instructions.
• Legal Authorities: Where required by applicable law, regulatory directive, court order, or formal request from a competent authority — such as in connection with fraud investigations, AML inquiries, or law enforcement cooperation.
• Business Transfers: In the event of a merger, acquisition, or asset sale, your Personal Data may be transferred as part of that transaction. You will be notified in advance if your data is to be subject to a materially different privacy policy as a result.

Taya777 retains Personal Data only for as long as necessary for the purpose for which it was collected, or as required by applicable legal or regulatory obligations. The following general retention periods apply:

Upon expiry of the applicable retention period, Personal Data is securely destroyed or anonymised in a manner that prevents re-identification. Where data is required for ongoing legal proceedings, retention may be extended until the matter is resolved.

Taya777 uses cookies and similar tracking technologies on the Platform to enable certain functionality, improve performance, and gather analytics data. The categories of cookies we use are described below:

• Strictly Necessary Cookies: Essential for basic Platform functionality, including maintaining your logged-in session and enabling secure navigation. These cannot be disabled without severely impairing the Platform's operation.
• Performance & Analytics Cookies: Collect anonymised data about how users interact with the Platform — such as pages visited and session duration — to help us identify areas for improvement. These do not contain personally identifiable information.
• Functional Cookies: Remember your preferences, such as language settings and interface customisations, to provide a personalised experience on return visits.
• Security Cookies: Support our fraud detection systems by identifying unusual access patterns, duplicate login attempts, and other security signals that help protect your Account.

You may manage cookie preferences through your browser settings. Please note that disabling strictly necessary cookies will impair your ability to use the Platform. For guidance on managing cookies in your browser, consult your browser's help documentation.

Taya777 implements comprehensive technical and organisational security measures to protect your Personal Data against unauthorised access, accidental loss, destruction, or alteration. Our security framework includes:

• 256-bit SSL/TLS Encryption: All data transmitted between your device and the Platform is encrypted using industry-standard Transport Layer Security protocols, providing bank-equivalent protection.
• Encrypted Data Storage: Personal Data and financial records are stored using encryption at rest to prevent unauthorised access even in the event of a physical security breach.
• Access Controls: Access to Personal Data within taya777 is restricted on a strict need-to-know basis. All staff with data access receive appropriate training and are bound by confidentiality obligations.
• Continuous Monitoring: Our infrastructure is subject to continuous security monitoring, regular penetration testing, and vulnerability assessments conducted by qualified security professionals.
• Incident Response: Taya777 maintains a documented data breach response plan. In the event of a breach materially affecting your Personal Data, we will notify you in accordance with applicable legal requirements.

As a data subject, you hold a number of rights in relation to your Personal Data held by taya777. We are committed to facilitating the exercise of these rights in a timely and transparent manner. Your rights include:

To exercise any of the above rights, please contact our support team as described in Section 16. We will respond to verified requests within 30 calendar days of receipt. We may request proof of identity before actioning your request to protect against unauthorised data access.

Taya777 is an adult entertainment platform. We do not knowingly collect Personal Data from any person under the age of 21. Our registration process includes mandatory age verification, and we reserve the right to request supporting identity documentation at any time to confirm a Player's age.

Where taya777 discovers, or has reasonable grounds to believe, that a registered Account belongs to a person under the age of 21, that Account will be immediately suspended. Any funds deposited will be returned to the source payment method after verification, and all associated data may be retained for the minimum period required by applicable law before being securely deleted.

The taya777 Platform does not contain links to external third-party websites. However, where payment service providers or identity verification services are accessed through integrated flows on the Platform, those services are operated by independent entities (including FPX, DuitNow, Touch 'n Go, Boost, GrabPay, Maybank, CIMB, Public Bank, and Hong Leong Bank) and are governed by their own privacy policies.

Taya777 has no control over, and assumes no responsibility for, the privacy practices of third-party service providers. We encourage you to review the privacy policy of any payment or verification service you use in connection with your taya777 Account.

Taya777 reserves the right to update, revise, or replace this Privacy Policy at any time to reflect changes in applicable law, regulatory requirements, our data processing practices, or Platform functionality. Where changes are material, we will notify you by publishing an updated Policy on this page and, where appropriate, by email to your registered address.

The "Last Updated" date at the top of the sidebar reflects the most recent revision. Your continued use of the Platform following notification of any updated Policy constitutes your acceptance of the revised terms. If you do not agree with the changes, you should cease using the Platform and may request Account closure.

We recommend reviewing this Policy periodically, particularly when you provide new categories of Personal Data to us (for example, when adding a new payment method to your Account).

For any enquiries relating to this Privacy Policy, to exercise your data rights, or to report a privacy concern, please contact the Taya777 Data Protection team through the following channels:

• Live Chat Support: Available 24 hours a day, 7 days a week through the Platform. This is our fastest channel — average response time under two minutes. Suitable for urgent data requests or immediate Account-related data concerns.
• Email: [email protected] — please mark your subject line with "Privacy Enquiry" or "Data Rights Request" to ensure your message is routed correctly. We aim to acknowledge all privacy-related emails within one business day and to complete substantive responses within 30 days.
• Written Requests: For formal data subject access requests or erasure requests, we recommend submitting via email to create a clear record. We may request proof of identity before processing any data rights request.