Privacy Policy

1Introduction

This Privacy Policy (the "Policy") describes how Taya365 (referred to herein as "Taya365", "we", "us", or "the Platform") collects, processes, stores, and protects personal data submitted by users (referred to as "you", "Player", or "User") when accessing or using the online gaming services available at taya365.casa.

We are committed to handling personal data responsibly and in compliance with applicable data protection principles. This Policy has been drafted to ensure transparency regarding our data practices and to inform you of your rights in relation to the personal information we hold about you.

By registering an account on Taya365, making a deposit, or otherwise using our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the processing of your personal data as described herein. If you do not consent, you must refrain from using the Platform and contact our support team to close any existing account.

2Definitions

For the purposes of this Privacy Policy, the following terms shall carry the meanings assigned below:

• "Personal Data" means any information relating to an identified or identifiable natural person, including but not limited to name, identification number, contact details, financial data, and online identifiers.
• "Processing" means any operation performed on Personal Data, including collection, recording, organisation, storage, adaptation, retrieval, use, disclosure, combination, restriction, erasure, or destruction.
• "Data Controller" means Taya365, which determines the purposes and means of processing your Personal Data.
• "Data Processor" means any third party that processes Personal Data on behalf of Taya365, such as payment processors, KYC verification providers, and cloud infrastructure operators.
• "Consent" means any freely given, specific, informed, and unambiguous indication by you of your agreement to the processing of your Personal Data for a specified purpose.
• "KYC" (Know Your Customer) means the identity verification procedures conducted by Taya365 in accordance with applicable Anti-Money Laundering and responsible gambling requirements.
• "Sensitive Data" means a subset of Personal Data that warrants enhanced protection, including identity document numbers (e.g., Malaysian MyKad number), financial account details, and biometric data submitted for KYC purposes.

3Data We Collect

Taya365 collects Personal Data from you through a number of channels and at various points during your use of the Platform. The categories of data collected are as follows:

We collect only the minimum data necessary to fulfil the purposes described in this Policy. We do not knowingly collect Sensitive Data beyond what is required for KYC compliance.

4Legal Basis for Processing

Taya365 processes Personal Data on the following legal grounds:

• Contractual Necessity: Processing is necessary to fulfil our obligations under the account agreement, including processing deposits and withdrawals, managing your account balance, and providing access to gaming services.
• Legal Obligation: Processing is required to comply with applicable Anti-Money Laundering (AML) regulations, responsible gambling obligations, Know Your Customer (KYC) requirements, and responses to lawful authority requests.
• Legitimate Interests: Processing is conducted in pursuit of our legitimate business interests, including fraud prevention, platform security, abuse detection, and service improvement — where such interests are not overridden by your fundamental rights.
• Consent: Where processing is not covered by the grounds above (for example, optional marketing communications or the use of non-essential cookies), we will request your explicit consent and process data only upon its receipt.

5How We Use Your Data

The Personal Data we collect is used for the following specific purposes:

• Account Management: To create, maintain, and administer your Taya365 account, including verifying your identity, authenticating your login sessions, and managing your account balance in MYR.
• Transaction Processing: To process MYR deposits via Touch 'n Go eWallet, Boost, GrabPay, DuitNow, FPX (Maybank, CIMB, Public Bank, Hong Leong Bank), and cryptocurrency channels; and to process withdrawal requests to your verified payment accounts.
• KYC & Compliance: To verify your identity, age (21+ requirement), and payment ownership as required by our anti-money laundering obligations and responsible gambling commitments.
• Responsible Gambling: To monitor gameplay patterns for signs of problem gambling, enforce deposit limits and self-exclusion requests, and deliver responsible gambling notifications.
• Fraud Detection & Security: To detect, investigate, and prevent fraudulent activity, money laundering, multi-accounting, and unauthorised access attempts.
• Customer Support: To respond to your enquiries, resolve account issues, and maintain records of support interactions for quality and training purposes.
• Platform Improvement: To analyse aggregated, anonymised usage data to improve game selection, user interface design, and platform performance.
• Marketing Communications: Where you have given consent, to send promotional offers, bonus notifications, and platform updates via email or other digital channels. You may withdraw this consent at any time through your account settings.
• Legal Compliance: To fulfil our obligations under applicable law, respond to regulatory enquiries, and maintain records as required by our operating obligations.

6Data Retention

Taya365 retains Personal Data for as long as is necessary to fulfil the purposes for which it was collected, or as required by applicable legal and regulatory obligations. The general retention periods are as follows:

• Account Data: Retained for the duration of the account relationship and for a minimum of 5 years following account closure, in compliance with AML record-keeping requirements.
• KYC Documents: Retained for a minimum of 5 years from the date of submission or from the date the account relationship ends, whichever is later.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Support Communications: Retained for 2 years from the date of the interaction, unless the matter has given rise to a formal dispute, in which case records are retained until the dispute is fully resolved plus 1 year.
• Technical Logs: Typically retained for 12 months, unless retention beyond this period is required for security investigations.
• Marketing Consent Records: Retained for the duration of the account relationship as evidence of consent status.

Upon expiry of the applicable retention period, Personal Data is securely deleted or anonymised in a manner that prevents re-identification.

7Data Sharing & Disclosure

Taya365 does not sell, rent, or trade your Personal Data to any third party for commercial purposes. We may share Personal Data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate data protection safeguards:

• Payment Processors: Malaysian e-wallet providers (including Touch 'n Go eWallet, Boost, GrabPay) and banking partners participating in FPX and DuitNow infrastructure receive the minimum data required to complete your transactions.
• KYC & Identity Verification Providers: Third-party identity verification services may receive copies of your submitted KYC documentation for the purpose of identity validation and fraud screening.
• Cloud Infrastructure Providers: Our platform infrastructure is hosted on secured cloud services. Data stored on third-party servers is subject to contractual data processing agreements ensuring equivalent protection standards.
• Regulatory and Law Enforcement Authorities: We may disclose Personal Data where required to do so by a court order, regulatory requirement, or lawful request from a competent authority.
• Anti-Fraud and AML Partners: Where fraud, money laundering, or criminal activity is suspected, we may share relevant data with fraud prevention databases or law enforcement agencies.
• Professional Advisors: Legal counsel, auditors, and compliance consultants engaged by Taya365 may access Personal Data on a strictly confidential basis to provide professional services.

8International Data Transfers

Due to the nature of online gaming infrastructure, your Personal Data may be transferred to and stored on servers located outside of Malaysia. Where such transfers occur, Taya365 implements appropriate safeguards to ensure that your data receives a level of protection equivalent to the standards described in this Policy.

These safeguards include contractual data transfer agreements with all international recipients, data residency controls where available, and periodic reviews of the data protection standards maintained by international partners. We do not transfer Personal Data to jurisdictions that do not offer an adequate level of data protection without implementing compensating safeguards.

9Data Security

Taya365 employs a comprehensive set of technical and organisational security measures to protect your Personal Data against unauthorised access, disclosure, alteration, or destruction:

• Encryption in Transit: All data transmitted between your device and the Taya365 platform is encrypted using 256-bit TLS (Transport Layer Security) — the same standard used by major Malaysian banks.
• Encryption at Rest: Stored Personal Data, including KYC documents and financial records, is encrypted using AES-256 encryption.
• Password Security: Account passwords are hashed using industry-standard algorithms. Taya365 staff cannot view your plain-text password under any circumstances.
• Access Controls: Internal access to Personal Data is restricted on a role-based, need-to-know basis. Access logs are maintained and reviewed regularly.
• Intrusion Detection: Our infrastructure is monitored continuously for suspicious activity, unauthorised access attempts, and anomalous data access patterns.
• Regular Security Audits: We conduct periodic security assessments and penetration testing to identify and remediate potential vulnerabilities before they can be exploited.

Notwithstanding the above, no data transmission over the internet can be guaranteed as completely secure. In the event of a security incident that affects your Personal Data, we will notify you in accordance with our legal obligations and take prompt remedial action.

10Cookies & Tracking Technologies

Taya365 uses cookies and similar tracking technologies on the Platform. Cookies are small text files stored on your device that help us deliver a better user experience and gather usage insights. We use the following categories of cookies:

• Essential Cookies: Required for the operation of the Platform, including session management, authentication, and security functions. These cookies cannot be disabled without affecting platform functionality.
• Functional Cookies: Used to remember your preferences (such as language settings and display options) and to personalise your experience on the Platform.
• Analytics Cookies: Used to collect aggregated, anonymised data about how users interact with the Platform — including pages visited, session duration, and navigation patterns — to help us improve the service. These cookies are subject to your consent.
• Security Cookies: Used to detect and prevent fraudulent activity, including cross-site request forgery protection and session integrity verification.

You may manage your cookie preferences through your browser settings at any time. Disabling certain categories of cookies (other than essential cookies) will not prevent you from using the Platform but may affect the quality of your experience. Continued use of the Platform following acknowledgement of this Policy constitutes acceptance of our use of essential and functional cookies.

11Your Rights

Subject to applicable data protection law, you hold the following rights in respect of the Personal Data that Taya365 processes about you:

• Right of Access: You may request a copy of the Personal Data we hold about you, together with information about how it is processed.
• Right to Rectification: You may request that inaccurate or incomplete Personal Data be corrected or updated without undue delay.
• Right to Erasure ("Right to be Forgotten"): You may request the deletion of your Personal Data where it is no longer necessary for the purposes for which it was collected, subject to our legal retention obligations.
• Right to Restriction: You may request that we restrict the processing of your Personal Data in certain circumstances, such as where you contest the accuracy of the data.
• Right to Data Portability: Where technically feasible, you may request that we provide your Personal Data in a structured, commonly used, machine-readable format for transfer to another service provider.
• Right to Object: You may object to the processing of your Personal Data where we rely on legitimate interests as the legal basis, unless we can demonstrate compelling legitimate grounds that override your interests.
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time without affecting the lawfulness of processing that occurred prior to withdrawal.

To exercise any of the above rights, please contact our support team via live chat or the email address provided in Section 15 of this Policy. We will respond to verified rights requests within 30 calendar days. We reserve the right to request proof of identity before processing any rights request to protect against unauthorised disclosures.

12Children & Minors

Taya365 is strictly intended for individuals aged 21 years and above. We do not knowingly collect, process, or retain Personal Data from any person under the age of 21. If we become aware that Personal Data has been submitted by or on behalf of a person under the age of 21, we will take immediate steps to suspend the associated account, delete the data concerned, and return any deposited funds through the original payment method.

We conduct mandatory age verification as part of our KYC process for all accounts prior to the processing of withdrawal requests. If you have reason to believe that a person under the age of 21 has registered an account on the Platform, please contact our support team immediately via live chat.

13Third-Party Services

The Taya365 platform may contain references to or integrations with third-party services, including Malaysian payment providers such as Touch 'n Go eWallet, Boost, GrabPay, Maybank online banking, CIMB Clicks, and Public Bank's online banking portal. When you interact with these third-party services during the deposit or withdrawal process, you are subject to their respective privacy policies and terms of service, which are outside of Taya365's control.

Taya365 is not responsible for the data practices of third-party service providers, and we recommend that you review the privacy policies of any third-party service before submitting your personal information to them. Our sharing of data with payment processors is strictly limited to the minimum necessary to complete your requested transaction.

14Policy Amendments

Taya365 reserves the right to amend this Privacy Policy at any time to reflect changes in our data processing practices, applicable legal requirements, or platform functionality. Where amendments are material, we will provide reasonable prior notice to registered Players via email notification or a prominent notice on the Platform.

The date of the most recent revision will be displayed at the top of this page. Your continued use of the Platform after the effective date of any amended Policy constitutes your acceptance of the revised terms. If you do not accept the amended Policy, you must cease using the Platform and contact our support team to request account closure and data deletion where permitted by law.

We recommend reviewing this Policy periodically to remain informed of our current data practices.

15Contact & Data Requests

If you have any questions or concerns about this Privacy Policy, wish to exercise any of your data rights, or would like to report a suspected data breach, please contact Taya365 through the following channel:

Last Updated: 1 January 2026  |  Version: 2.4  |  Language: English (Malaysia)