tala77 Privacy Policy

In this Privacy Policy, the following terms shall carry the meanings set out below:

• "tala77," "we," "us," "our" — the operator of the tala77 online casino platform at tala77.club, acting as Data Controller under Philippine law.
• "Platform" — the tala77 website at tala77.club and all associated services, applications, games, and features accessible through it.
• "You," "Player," "Data Subject" — any individual who accesses, registers with, or uses the tala77 Platform.
• "Personal Data" or "Personal Information" — any information that directly or indirectly identifies a natural person, as defined under RA 10173.
• "Sensitive Personal Information" — a subset of personal data afforded heightened protection under RA 10173, including government-issued ID numbers, financial information, and health data.
• "Processing" — any operation performed on personal data, including collection, recording, storage, retrieval, use, disclosure, erasure, or destruction.
• "RA 10173" — Republic Act No. 10173, the Philippine Data Privacy Act of 2012, and its implementing rules and regulations.
• "NPC" — the National Privacy Commission of the Philippines, the regulatory authority overseeing data privacy compliance.
• "PAGCOR" — the Philippine Amusement and Gaming Corporation, the regulatory authority licensing tala77's gaming operations.
• "DPO" — tala77's Data Privacy Officer, responsible for overseeing data protection compliance and handling data subject rights requests.

This Privacy Policy applies to all personal data collected by tala77 in connection with your use of the tala77 Platform, including data collected during account registration, identity verification (KYC), gameplay, financial transactions, customer support interactions, and marketing communications.

This Policy applies to all tala77 players regardless of their location in the Philippines — whether you are accessing tala77 from Metro Manila, Cebu, Davao, Iloilo, Cagayan de Oro, or any other region of the archipelago. Filipino players are protected by the same data rights standards across all regions.

This Policy should be read together with tala77's Terms and Conditions and Responsible Gaming Policy. In the event of any conflict between this Policy and those documents on data privacy matters, this Privacy Policy shall prevail.

tala77 collects the following categories of personal data from Players:

tala77 collects your personal data through the following channels and mechanisms:

• Direct Registration: Information you submit during the tala77 account registration process, including your mobile number, username, and password.
• KYC Verification: Identity documents and photographs submitted to satisfy tala77's age and identity verification requirements prior to first withdrawal or as part of enhanced due diligence.
• Financial Transactions: Payment details and transaction records generated when you deposit funds via GCash, Maya, BPI, BDO, Metrobank, or other supported payment methods, or when you initiate a withdrawal.
• Platform Use: Data generated automatically as you use the tala77 Platform — including games played, bet amounts, session timing, and device information — collected through tala77's platform logging and analytics systems.
• Customer Support: Information you provide when you contact tala77's customer support via live chat, email, or other channels.
• Cookies and Tracking Technologies: Automatically collected data via cookies, web beacons, and similar technologies as described in Section 8 of this Policy.
• Third-Party Sources: In limited circumstances, tala77 may receive supplementary identity verification information from third-party KYC or fraud prevention service providers to fulfil its PAGCOR licensing and AML obligations.

Under RA 10173, tala77 processes your personal data on the following legal grounds:

• Contractual Necessity: Processing required to fulfill tala77's obligations under the account agreement with you — including account creation, game access, financial transactions, and customer support.
• Legal Obligation: Processing required to comply with applicable Philippine laws and regulations, including PAGCOR licensing requirements, the Anti-Money Laundering Act (AMLA), and age verification mandates. tala77 cannot waive or bypass these obligations at a Player's request.
• Consent: Processing for optional purposes — such as marketing communications and non-essential personalisation — where you have provided clear, informed, freely given consent. You may withdraw consent at any time without affecting the lawfulness of processing prior to withdrawal.
• Legitimate Interests: Processing necessary for tala77's legitimate business interests, where those interests are not overridden by your data rights — including fraud prevention, platform security, responsible gaming monitoring, and business analytics, subject to appropriate safeguards.

tala77 uses the personal data collected from you for the following purposes:

• Account Management: Creating, maintaining, authenticating, and securing your tala77 Account, including processing login sessions and two-factor authentication.
• KYC and Age Verification: Verifying that you are at least 21 years of age and that your identity matches the registration information provided, as required by PAGCOR and Philippine law.
• Financial Processing: Processing deposits, withdrawals, and refunds through your registered payment methods (GCash, Maya, bank accounts, etc.) and maintaining transaction records for regulatory and dispute resolution purposes.
• Game Delivery: Providing access to and operating the games, live dealer tables, sports betting markets, bingo rooms, and other features available on the tala77 Platform.
• Regulatory Compliance: Meeting tala77's obligations under PAGCOR licensing conditions, AMLA reporting requirements, and any other applicable Philippine law or regulation.
• Responsible Gaming: Monitoring gameplay patterns to identify potential problem gambling behaviour, enforcing player-set limits and self-exclusions, and contacting Players who exhibit markers of harm.
• Fraud and Security: Detecting and preventing fraud, money laundering, account compromise, and other prohibited conduct on the Platform.
• Customer Support: Responding to enquiries, resolving disputes, and improving the quality of tala77's customer service.
• Marketing (with consent): Sending promotional communications about tala77 offers, new games, and loyalty programme updates where you have opted in to receive such communications.
• Platform Improvement: Analysing aggregated, anonymised usage data to improve game selection, platform performance, and user experience.

tala77 does not sell, rent, or trade your personal data to third parties. tala77 may share your personal data only in the following limited circumstances:

• Payment Processors: GCash, Maya/PayMaya, BPI, BDO, Metrobank, GrabPay, and other payment service providers receive the transaction data necessary to process deposits and withdrawals. These providers operate under their own privacy policies and data processing agreements.
• KYC and Identity Verification Providers: Third-party identity verification services may receive identity document images and biometric data where enhanced KYC is required under PAGCOR regulations.
• Game Content Providers: Third-party game studios and live dealer platform operators receive session and wagering data necessary to deliver their games on the tala77 Platform.
• Regulatory Authorities: PAGCOR, the Anti-Money Laundering Council (AMLC), the National Privacy Commission, and other Philippine government bodies may receive personal data as required by law, regulation, court order, or binding government directive.
• Fraud Prevention and Security Services: Third-party fraud detection providers may receive device and behavioural data to assist in identifying and preventing fraudulent activity on the Platform.
• Professional Advisers: Lawyers, auditors, and accountants engaged by tala77 may access personal data to the extent necessary to provide their professional services, subject to appropriate confidentiality obligations.

All third parties with whom tala77 shares personal data are required to process that data only for the specified purpose, maintain appropriate security standards, and comply with RA 10173 or equivalent data protection standards.

tala77.club uses cookies and similar tracking technologies to operate the Platform, maintain your session, and improve your experience. The following categories of cookies are used:

• Strictly Necessary Cookies: Required for the Platform to function — including login session management, security tokens, and fraud prevention. These cannot be disabled without disabling the Platform itself.
• Functional Cookies: Remember your preferences, such as language settings, game display preferences, and responsible gaming limit reminders. Disabling these may affect Platform functionality.
• Analytics Cookies: Collect aggregated, anonymised data about how Players use the Platform to help tala77 improve performance and game selection. No individually identifiable data is retained by analytics cookies.
• Marketing Cookies (consent-based): Used only where you have consented to receive personalised promotional communications. These cookies help tala77 deliver relevant offers based on your gameplay preferences.

You may manage your cookie preferences through your browser settings. Disabling non-essential cookies will not prevent you from accessing the tala77 Platform, but may affect certain features. A full Cookie Policy is available in the tala77 Account Settings section after login.

tala77 implements technical and organisational security measures commensurate with the sensitivity of the personal data held and the risks of processing. Key security measures include:

• 256-bit SSL/TLS encryption for all data in transit between your device and tala77's servers.
• AES-256 encryption for personal data and financial records stored at rest on tala77's systems.
• Salted cryptographic hashing of all account passwords — tala77 staff cannot access or retrieve your password.
• Multi-factor authentication for access to tala77's internal systems by staff.
• Role-based access controls restricting employee access to personal data on a need-to-know basis.
• Regular third-party penetration testing and security audits of the tala77 Platform.
• Intrusion detection and anomaly monitoring systems operating continuously across tala77's infrastructure.
• Documented incident response procedures including NPC breach notification protocols where required by RA 10173.

In the event of a personal data breach that is likely to result in harm to affected Players, tala77 will notify the NPC within 72 hours of becoming aware of the breach and will communicate directly with affected Players in accordance with RA 10173 requirements.

tala77 retains personal data for the minimum period necessary to fulfill the purpose for which it was collected, subject to overriding legal and regulatory retention obligations. The following indicative retention periods apply:

Following the applicable retention period, personal data will be securely deleted, anonymised, or de-identified. Where data is anonymised rather than deleted, the resulting data no longer constitutes personal data and may be retained for statistical analysis indefinitely.

As a data subject under RA 10173, you have the following rights in relation to your personal data held by tala77. To exercise any of these rights, contact tala77's Data Privacy Officer as described in Section 16.

Data subject rights requests must be submitted in writing to tala77's Data Privacy Officer and will require identity verification before processing. tala77 will respond to requests within the timeframes prescribed by RA 10173. Where tala77 is unable to fulfill a request (for example, due to mandatory legal retention obligations), the reason will be communicated in writing.

The tala77 Platform is strictly for persons aged 21 years and above. tala77 does not knowingly collect personal data from individuals under the age of 21. Age verification is mandatory for all account registrations.

If tala77 becomes aware that personal data has been collected from a person under 21 years of age, that data will be deleted promptly, the associated account will be permanently closed, and any deposited funds will be returned (net of any bonuses) via the original payment method following verification. The incident will be reported to PAGCOR as required under tala77's licensing conditions.

tala77 will send you promotional communications about tala77 games, offers, bonuses, and platform updates only where you have provided explicit consent to receive such communications during registration or through your Account Settings.

You may withdraw consent to marketing communications at any time by:

• Updating your communication preferences in your tala77 Account Settings dashboard.
• Clicking the unsubscribe link included in any marketing email sent by tala77.
• Contacting tala77 customer support or the Data Privacy Officer with an opt-out request.

Withdrawal of marketing consent will take effect within 5 business days. Please note that withdrawal of marketing consent does not affect tala77's ability to send you essential transactional communications relating to your Account — such as deposit confirmations, withdrawal notifications, security alerts, and responsible gaming communications — which are sent on the basis of contractual necessity rather than consent.

tala77's core data processing infrastructure is located within the Philippines. However, certain third-party service providers engaged by tala77 — including international game studios, global fraud prevention services, and cloud hosting providers — may process data from locations outside the Philippines.

Any cross-border transfer of personal data by tala77 or its authorised processors is subject to the following safeguards, consistent with RA 10173 requirements:

• The recipient country must provide an adequate level of data protection as recognised by the NPC, or equivalent contractual protections must be in place.
• tala77 enters into data processing agreements with all international processors that impose data protection standards equivalent to RA 10173.
• Cross-border transfers are limited to the minimum data necessary for the specified processing purpose.
• tala77 monitors international processors for ongoing compliance with agreed data protection standards.

tala77 reserves the right to update or amend this Privacy Policy at any time to reflect changes in our data processing practices, legal obligations, or regulatory requirements. The "Effective Date" and "Version" information shown in the Table of Contents sidebar will be updated with each revision.

For material changes — defined as any change that significantly affects how tala77 processes your personal data or reduces your data rights — tala77 will provide advance notice via email to your registered address and via a prominent notification on the tala77 Platform. Material changes will not take effect until at least 14 calendar days after notification, giving you time to review the changes and, if you do not agree, to request account closure before the revised Policy takes effect.

Your continued use of the tala77 Platform following the effective date of any updated Privacy Policy constitutes acknowledgement of the revised Policy. We encourage you to review this page periodically to stay informed about how tala77 protects your personal data.

tala77 has appointed a Data Privacy Officer (DPO) in accordance with RA 10173. The DPO is responsible for overseeing tala77's data protection compliance program, responding to data subject rights requests, and acting as the primary point of contact with the National Privacy Commission.

To exercise your data subject rights, submit a privacy complaint, or ask a question about this Privacy Policy, please contact tala77's DPO through the following channels:

• Email: [email protected] (subject line: "Data Privacy Request" — plain text, not a link)
• Live Chat: Available 24/7 through the tala77 Platform by logging in to your Account and selecting "Privacy & Data" from the support menu.
• Response Time: tala77's DPO acknowledges all data subject rights requests within 3 business days and provides a substantive response within the timeframes prescribed by RA 10173.

If you are not satisfied with tala77's response to a privacy concern, you have the right to lodge a complaint with the National Privacy Commission of the Philippines. The NPC is the independent government authority responsible for enforcing RA 10173 and protecting the data rights of Philippine citizens. Information about the NPC's complaint process is available through the NPC's official government channels.